last executing test programs: 2m39.9162135s ago: executing program 2 (id=3536): r0 = socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x40, &(0x7f0000000040)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 2m39.644915438s ago: executing program 2 (id=3538): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept4(r0, &(0x7f00000001c0)=@ax25={{0x3, @bcast}, [@netrom, @remote, @rose, @rose, @rose, @null, @null, @netrom]}, &(0x7f0000000240)=0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x20}, 0x10) syz_emit_ethernet(0x2b7, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000081002b00884800000f000000000000000000000004007e455098f9b9502f4af51c56ef12a800000000601f39000800000000000000000000000000000000000000fe8800000000000000000000000000010c0900000000000004010601060000000000000401010401ff07180000000204010a00010000000000000060b5000000000000c910ff0200000000000000000000000000010001000106000000000000730e020700000000fe8000000000000000000000000000aafc010000000000000000000000000001fe8000000000000000000000000000bbfc02000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000ffffac14142e2b180000000000000728000000020808000001000000010000000b00000000000000090000000000000001000000000000000401000720000000030609008008000000000000000800000000000000ffffffffffffff7f097064d4253f8f1981592a718230df61c690e423c9b9084a2f5e21107668a3c6b034d6972cbd59d17614f0fb67f5d320eefd682a156eac2c87f5e44a86b92bfb99ed81592329ed0d95716f2e14cf8e86865744dc3dafe811a32741e59bf783e14d18d46005010d9199e982f9d91060023e53b1fc8f90f6fe631f83e608b3240000000000000001000d00650000000804000000000000c910fc000000000000000000000000000000040107c2040000000904010201010000000000000000010e010e00000000000000d806f27cf825000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000034fc0200000000000000000000000000000000000000000000000000000000000100000000000000000000000000000001ff0100000000000000000000000000010000000000000000000000000000000400004e2400004e23000000020000000200"], &(0x7f00000002c0)={0x1, 0x4, [0xc3d, 0x74, 0x90e, 0x8b5]}) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DONE(r6, 0x29, 0xc9, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010040000000000002034400000008000300", @ANYRESDEC=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) 2m39.291194115s ago: executing program 2 (id=3543): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x1, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2m33.981926066s ago: executing program 4 (id=3558): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4040, 0x9, @empty, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000240)=0x4) write(r4, &(0x7f0000000040)="270000001400", 0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000080) 2m33.978660994s ago: executing program 2 (id=3559): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000000c0)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r1}, 0x10) r2 = socket(0x21, 0x2, 0x10000000000002) recvmmsg$unix(r2, &(0x7f00000097c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10142, &(0x7f0000006640)={0x0, 0x989680}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c873", 0x6f}], 0x1}}], 0x1, 0x40000d0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000002f00)=0x2) ioctl$PPPIOCSMAXCID(r5, 0x4004743c, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x284, r7, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x100}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xa}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8f}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xf000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0xf1d5}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0xf9}, {0x5, 0x12, 0x1}}]}, 0x284}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) write$cgroup_subtree(r3, 0x0, 0x1ffc0) socket$inet6(0xa, 0x2, 0xffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 2m33.832133744s ago: executing program 4 (id=3560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m33.718367921s ago: executing program 4 (id=3562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 2m33.595540879s ago: executing program 4 (id=3563): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x40, &(0x7f0000000040)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 2m33.566360242s ago: executing program 2 (id=3564): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000001f36b3342a3c005700"/28], 0xe) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x3, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x10}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r3 = socket$l2tp(0x2, 0x2, 0x73) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x10, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000400), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xfb, 0x3, 0x10001, 0x100, r0, 0x4, '\x00', r4, r0, 0x1, 0x1, 0x0, 0x7}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002d40)={{r1, 0xffffffffffffffff}, &(0x7f0000002cc0), &(0x7f0000002d00)='%+9llu \x00'}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x48, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x18, 0xfc, 0x0, 0x1, [@nested={0x14, 0x8, 0x0, 0x1, [@typed={0xe, 0x131, 0x0, 0x0, @str='*\'&-.+*{.\x00'}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x115}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e00)={0x6, 0x1d, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ldst={0x2, 0x0, 0x1, 0x4, 0x5, 0x40}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001c00)='GPL\x00', 0xd3a1, 0x1000, &(0x7f0000001c40)=""/4096, 0x41000, 0x44, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000002c40)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002c80)={0x0, 0xa, 0x7fff, 0x97}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002d80)=[r1, 0xffffffffffffffff, r5], &(0x7f0000002dc0)=[{0x4, 0x2, 0xe, 0x2}, {0x1, 0x5, 0x7, 0x2}, {0x3, 0x3, 0x5, 0xc}], 0x10, 0x4}, 0x94) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 2m33.435960715s ago: executing program 4 (id=3565): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x28, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) unshare(0x6a040000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2m33.065032165s ago: executing program 2 (id=3568): epoll_create1(0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4106}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016ff010000000000000000007cd7ccee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000000000063111404de000000637600ff100000009570c200000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r6, 0x0, 0x5}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32=r11, @ANYBLOB="080001"], 0x24}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r9) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, 0x0, 0x24060884) 2m32.599983287s ago: executing program 4 (id=3569): epoll_create1(0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4106}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016ff010000000000000000007cd7ccee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000000000063111404de000000637600ff100000009570c200000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001780)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r7, 0x0, 0x5}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r12 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32=r12, @ANYBLOB="080001"], 0x24}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, 0x0, 0x24060884) 2m17.859816879s ago: executing program 32 (id=3568): epoll_create1(0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4106}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016ff010000000000000000007cd7ccee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000000000063111404de000000637600ff100000009570c200000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r6, 0x0, 0x5}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32=r11, @ANYBLOB="080001"], 0x24}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r9) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, 0x0, 0x24060884) 2m16.82820636s ago: executing program 33 (id=3569): epoll_create1(0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4106}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016ff010000000000000000007cd7ccee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000000000063111404de000000637600ff100000009570c200000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001780)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r7, 0x0, 0x5}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r12 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32=r12, @ANYBLOB="080001"], 0x24}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, 0x0, 0x24060884) 3.364056261s ago: executing program 3 (id=5146): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{}, [@default, @remote, @rose, @remote, @remote, @default, @remote, @rose]}, &(0x7f0000000000)=0x48, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={0x1, @default, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x7, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000200000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 2.830305304s ago: executing program 6 (id=5155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000000000295b607272d1e00e6136c4f35db009287000005140000008ea8d83fab5b87447e3e8a3149fde62726af94ed8618d6"], 0x3c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)={'ip6gretap0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f00000008c0)=ANY=[@ANYRES64=r2, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYBLOB="b6394905f49ec0625dc29f70f978af17460c780f1f4fb7f8b992dfeadc03457d6108c12a52e46aa93e264eb86e28942a9063c4f38f809e81b4e7fcf223741cf1d979c58ff4ac11dd", @ANYRESOCT=r1], 0x0, 0x0, 0xffffffffffffff64, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0xf5ff}, {{&(0x7f0000000980)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000b40)=""/172, 0xac}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/76, 0x4c}, {&(0x7f0000001d80)=""/224, 0xe0}, {&(0x7f0000000740)=""/47, 0x2f}], 0x5}, 0x401}], 0x2, 0x0, 0x0) shutdown(r4, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x89, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES16=r2, @ANYBLOB="28ef1c1d8cb6495dcc2ee97007680bce39b86e79ffcf40f0d22872def408f7b413e4ebfc25fb4fa564b5e6a10b02a50f9e0a3a309d63e1937c9ccddfec54fb9c1086a6f75f53156eb837529d4a574bc1866ec0de7f122b278552238fb2860f81bbe0f27437624ef98179dfe3837204797d2ea00d7c644c1a40e68f7ea4e43383ba2e2d747e2a162f74736332bd04696ea6bccfdc1d1e767e7631e2338db9e28815d5a5f30b7865f97aa060d0", @ANYRES32=r1, @ANYRES16=r2, @ANYRES16=r5, @ANYRES64=0x0], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r6, @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x17) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES32=r9, @ANYRES64=r7, @ANYBLOB="34810e0517a53638d8a25bc66242bf8580433caaa8d0f6900a4d437f6de3ede889a8bb42f15f33f739", @ANYRES32, @ANYRES64=r10, @ANYRESDEC, @ANYBLOB="5bc8bfa3178ce76b5c2a014efd446afcbf55f8dd679c8c1d79f3dc5d8c3a44ed9b085986ddf6cd9810c6a6a10f3c41e8080a625f484b0abf31192d4a0c50389a1db5483f312d9faa65ee2bbaab29a10c5ec199f2a97634f8ca782d6694e01c6e3429acc79cdccf9b93cad4ca5ba8a016f4aa23dd6caab780d5f130d8db801fad3be3207b954965a69d1499692a47356dc61897f8cc69e350febf9a6d3088c88a3dce5b0485f35c3110a7601d7739aee14c7f7f6cbf1e33cfd64259d1bc691bcffe1d1982a394fb44ed513975fe652678d5ce57f9b54ecd9045c02d86e82d247338"], &(0x7f0000000340)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) r12 = socket$xdp(0x2c, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NFT_MSG_GETCHAIN(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000007000007061a84ef3eb4f2d4bafaf33680dbad201b5b05e0601baea296a16fcc30aa18a1c4f1b8851b3a2d778bc42a00000049c4046e4e73694e1428d6e105822b000000000000000081c14513311e2a45cd2cd12ffbba523bbd08cec31ef15c8c300c87d7dd629b524320b12bdd97c01051dc5373a90e6fdd8fba8961de690ae9c0ae27ebf981283fc8f167ff9984eeb09c887036014879bf58805b5c77304692642304d929decbdf06979482d3087fe43433b35c615e274829d4cb750beb6c9f7f29"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x488c4) close(r13) setsockopt$XDP_TX_RING(r12, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r14, 0x400448cb, 0x0) 2.79440233s ago: executing program 3 (id=5156): vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) unshare(0x22020600) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_emit_ethernet(0x92, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd60f4adf7005c2c00fe8000f33a08cf000000000000000000ff0200000000000000000000000000013c00000000000000050200c9008b0090780000009857f581ed07af018f0315b572d434a7024c71f6b6607116d99657fc7567967b439266f0dea9a96d55788547614e0b3cda3100a6ab1d8ec8990c1aa0fad2bd9805541a9bd468"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10123, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x44) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f00000009c0)=""/251, 0xfb) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4004000) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000d40)={&(0x7f0000000040), 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x12c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8801}, 0x40040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) 2.443827362s ago: executing program 0 (id=5157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000020000040000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={&(0x7f0000000200)="b7f52975b0c6ae560c64fad67ccf520400a1feb4ceb6b879e7734fa09a82b94b234adaf8e7853e364bda431dfce13d81bc79e1d67b660811e85897f1029f6b28285a2e9d1327af3871b11a234fc22a2527ed6c6a6b3c7ec401341505fed48141bb165868206801e0ed7ee279ce96829e88cd245481cb2ec51427c025a40c0218473d4b", &(0x7f00000002c0)=""/177, &(0x7f0000000080)="b18da3cef36f9df506f58208cc725a0367739c41a83714b793fc17bc20d49be7752f107442b8", &(0x7f0000000380)="68d21f8ecca960f5046bb2c76a83f5315dd81286464b62702f9e", 0x56fc, r3, 0x4}, 0x38) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000940)=0x8, 0x4) sendmmsg$unix(r8, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040800}}], 0x1, 0x2000c000) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 1.671023402s ago: executing program 0 (id=5161): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x64}}, 0x20040054) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1d, 0x0, 0x3, 0x80ffffff}, {}, {}, {}, {0x6}]}) unshare(0x20000400) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x7800, 0xf808, 0x2, 0x9, {{0x2e, 0x4, 0x2, 0x4, 0xb8, 0x66, 0x0, 0x3, 0x242f53bcab1fbe3f, 0x0, @local, @broadcast, {[@cipso={0x86, 0x42, 0x1, [{0x2, 0xe, "c3957bdc4d9ca798f9cf9102"}, {0x0, 0x9, "b3628bff8eee0f"}, {0x1, 0x12, "df0e7a977f87b2834e50e5617ea6e7a7"}, {0x7, 0xf, "6848ae0d7a2faa9d2617cf5540"}, {0x0, 0x4, 'iZ'}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x81, 0x0, 0xe}, @cipso={0x86, 0x4a, 0x2, [{0x5, 0x2}, {0x5, 0xd, "716e93ab0184227354d383"}, {0x2, 0x6, "47d18b4d"}, {0x2, 0x6, "72e95e9d"}, {0x5, 0x8, "ed10b2ca9741"}, {0x7, 0xd, "c70f4931dfe3fabcd23342"}, {0x6, 0x2}, {0x7, 0x12, "6906e919f480ac187a7ab34d68f51906"}]}, @lsrr={0x83, 0xf, 0x4e, [@multicast2, @rand_addr=0x6, @dev={0xac, 0x14, 0x14, 0x2c}]}, @noop]}}}}}) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x10, r1}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="e340a5ac17adb14a689a9f1f193bf2fac1f9fd5f78e6f15ad40b19b2aa2ca4f36126ef73ec4a210b7eef39a4d43660d165af001768f972989d42362ab9dccecf4afe64216961e0bb7db1ee0199b14be153cb14b574f935", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000400bfa600000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', r5, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r9}, 0x10) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, 0x0, &(0x7f00000003c0)) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000440), &(0x7f00000004c0)=0x80) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 1.063941172s ago: executing program 6 (id=5164): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0xfffffffb, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 1.063486294s ago: executing program 5 (id=5165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x20045009}, 0x4040114) 1.00527323s ago: executing program 5 (id=5167): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 953.412113ms ago: executing program 1 (id=5168): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000596d1ad978fa", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)={0x170, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 899.82975ms ago: executing program 0 (id=5169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e000000080005", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) recvmmsg(r6, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x2, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}]}, 0x190) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x791db5641e51ecfe, 0x2c, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 899.507145ms ago: executing program 6 (id=5170): getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xd, &(0x7f0000000080), &(0x7f0000000040)=0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000002f0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000300), 0x0}, 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001840)="582e5ed9b7f29f60d773eced96d4bc751fa057650064e4810bf89b4d8e", 0x1d}], 0x1}}], 0x1, 0x20000854) socket(0x10, 0x3, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000400), &(0x7f0000000440)=0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x7fffffff, 0x0, 0x0, 0x5, 0x6, 0x9}, &(0x7f0000000100)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x52, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x24, 0x0, 0x0, 0xfe, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x22}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0xb0b}, 0x14}}, 0x0) 842.681162ms ago: executing program 5 (id=5171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000020000040000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={&(0x7f0000000200)="b7f52975b0c6ae560c64fad67ccf520400a1feb4ceb6b879e7734fa09a82b94b234adaf8e7853e364bda431dfce13d81bc79e1d67b660811e85897f1029f6b28285a2e9d1327af3871b11a234fc22a2527ed6c6a6b3c7ec401341505fed48141bb165868206801e0ed7ee279ce96829e88cd245481cb2ec51427c025a40c0218473d4b", &(0x7f00000002c0)=""/177, &(0x7f0000000080)="b18da3cef36f9df506f58208cc725a0367739c41a83714b793fc17bc20d49be7752f107442b8", &(0x7f0000000380)="68d21f8ecca960f5046bb2c76a83f5315dd81286464b62702f9e", 0x56fc, r3, 0x4}, 0x38) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000940)=0x8, 0x4) sendmmsg$unix(r8, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040800}}], 0x1, 0x2000c000) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 811.284874ms ago: executing program 1 (id=5172): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5", 0xf4}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf6d148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16d599c71547d018aba5064338", 0x5f}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/86, 0x56}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71", 0x2a}], 0x2}}], 0x2, 0xc0) 768.55089ms ago: executing program 6 (id=5173): r0 = socket(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@migrate={0x164, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in=@multicast1, @in=@rand_addr=0x64010100, 0x4e22, 0x8001, 0x7, 0x0, 0xa, 0x80, 0x80, 0x3b}, 0x6e6bb3, 0x1}, [@migrate={0xe8, 0x11, [{@in6=@empty, @in=@loopback, @in=@multicast1, @in6=@private0, 0x2b, 0x3, 0x0, 0x34ff, 0x2, 0xa}, {@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x19}, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0xff, 0x3, 0x0, 0x3501, 0x5, 0x2}, {@in=@remote, @in=@multicast1, @in=@multicast2, @in6=@local, 0x2b, 0x0, 0x0, 0x34ff, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@local, 0x0, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r4, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) 618.631946ms ago: executing program 1 (id=5174): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/56, 0x6a}], 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x0, 0x0}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x3, 0x25dfdbfc, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2e}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000000140)=""/170, &(0x7f0000000200)=0xaa) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$key(0xf, 0x3, 0x2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) sendmsg$key(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1e0}}, 0x4040055) 617.484374ms ago: executing program 5 (id=5175): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001640)='n', 0x1}], 0x1}, 0x4000001) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x11102) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001640)='n', 0x1}], 0x1}, 0x4000001) (async) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x11102) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) (async) 540.065363ms ago: executing program 3 (id=5176): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 539.555241ms ago: executing program 6 (id=5177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x20045009}, 0x4040114) 516.465842ms ago: executing program 0 (id=5178): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000a00000014"], 0x34}}, 0x0) 495.527061ms ago: executing program 3 (id=5179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x3, 0x7, 0x34, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote, {[@rr={0x7, 0xb, 0x6, [@multicast2, @rand_addr=0x64010129]}]}}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 437.692779ms ago: executing program 6 (id=5180): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0xffffffff], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [0x0, 0xffffffff], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x97, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="add20e36be1b77cf72d843f329a592d35aae81aee69f20a834f1a6b4b9b1362308894e13631042f43a43d0dedd9d6eed7f0f8dc98a33fe586c561f46f11205d0666f616fb910ce4e03d1f28fb80119b36a735985cdb33c7ed398b928eaec517a61ef1a9345e9ef073e5730154f1ec20dd4ce91a80c47d3adaa578ca9fcf069d2e26d6310ccead4c81f6ba3c250e553c6b37bee7ebf6006f40f950846b326ecee7a6b51ed898ec0533aede29b2d92bc0d386016d9b851d09d02d87ad371e9", @ANYRES32=r1, @ANYRES8=r1], 0xfe33) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 404.879363ms ago: executing program 5 (id=5181): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 404.037274ms ago: executing program 0 (id=5182): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000596d1ad978fa", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)={0x170, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 380.961089ms ago: executing program 1 (id=5183): getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xd, &(0x7f0000000080), &(0x7f0000000040)=0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000002f0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000300), 0x0}, 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001840)="582e5ed9b7f29f60d773eced96d4bc751fa057650064e4810bf89b4d8e", 0x1d}], 0x1}}], 0x1, 0x20000854) socket(0x10, 0x3, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000400), &(0x7f0000000440)=0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x7fffffff, 0x0, 0x0, 0x5, 0x6, 0x9}, &(0x7f0000000100)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x52, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x24, 0x0, 0x0, 0xfe, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x22}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0xb0b}, 0x14}}, 0x0) 273.82766ms ago: executing program 3 (id=5184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4000}, 0x810) r2 = accept4(r1, &(0x7f0000000200)=@tipc=@id, &(0x7f0000000280)=0x80, 0x80800) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x40, 0x700, 0xa, 0x5, {{0x9, 0x4, 0x2, 0x38, 0x24, 0x64, 0x0, 0x40, 0x2f, 0x0, @local, @local, {[@rr={0x7, 0x7, 0x92, [@multicast2]}, @ssrr={0x89, 0x7, 0x14, [@empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x9, 0x9, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x1, 0x80, 0x2, 0xa}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r15}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048850}, 0x48006) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000006c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x80, 0x7f17, 0x3, 0xc, {{0x14, 0x4, 0x3, 0x25, 0x50, 0x65, 0x0, 0xe, 0x4, 0x0, @multicast1, @multicast1, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x1e, 0x1, [{0x0, 0xc, "527b5364ff7eedc50ff5"}, {0x2, 0x6, "f3eac835"}, {0x0, 0x6, "0fb04810"}]}, @lsrr={0x83, 0x7, 0x94, [@dev={0xac, 0x14, 0x14, 0x12}]}, @timestamp_prespec={0x44, 0xc, 0x71, 0x3, 0x2, [{@local, 0x4}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000dc0)={&(0x7f00000002c0), 0xc, &(0x7f0000000d80)={&(0x7f0000000840)={0x52c, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x52, 0x4, 0xff}, {0x9, 0x8, 0xf9, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r6}, {0x27c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3ff, 0x9e, 0x9, 0x1000}, {0x8, 0x9, 0x6, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x17}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6e}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x5c, 0x5}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x4}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000) r19 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x8, 0x1, 0x7ff, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_NEW(r20, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e80)={0x1cc, 0x0, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3ff}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x44010}, 0x4000) r21 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r19, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r21, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5823}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x482c}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4008804) 226.048813ms ago: executing program 0 (id=5185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000000)=""/57, &(0x7f0000000040)=0x39) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000ffff7f00000108001500b9c20a08040012000500160001"], 0x60}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@hbh={{0x48}, {0xee76, 0x0, 0x1, [0x81dc, 0x7, 0xfffc, 0x3, 0xa1, 0x6dbf, 0x4, 0xfbf9, 0x1, 0x70, 0xc, 0x2, 0x6, 0x9, 0x2, 0x1], 0xc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0x1, 0x80000000, 0x4, 'netbios-ns\x00', 'syz0\x00', {0x3ff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x380) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00004000000071101a000000000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003006f56053021e3db5e31a40955c600d35da9e6ac400166db480a0001"], 0xc8}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000010a01030000000000000000018a6b8d574a5c000003"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c810) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38, 0x40044}}], 0x1, 0x4) sendmsg$nl_route(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x44, 0x18, 0x1, 0x1000, 0x8, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_PRIORITY={0x8, 0x6, 0x7f}, @RTA_UID={0x8, 0x19, r11}, @RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_SPORT={0x6, 0x1c, 0x4e20}]}, 0x44}}, 0x44890) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000540)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a1049d587443c7bbdb5ceef5b22556b3529c61560669c0489382e7be87b6ad4abf45224f71d769f07dad0e367d581735910eb687513ba4d3dcd4fdb504c8a6dacd0efcd198468c25fd2bfb95ac929b55fee21b7c4ca00a839542682ff7582988da9b59b2fae29", 0xad}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x24000004) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000100)={0x3b, 0x4, 0x2, 0x7, 0x0, [@loopback, @local]}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xce) 225.315906ms ago: executing program 5 (id=5186): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x3, 0x2, 0x5, 0x6, 0x216, 0x6, 0x80000001, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x52, 0x2de, 0x2, 0x5, 0x300000000000000, 0x3}, &(0x7f0000000780)={0x7f, 0x9, 0x100000001, 0x9, 0x9, 0x5, 0x1, 0x4d2f}, &(0x7f00000007c0)={0x0, 0x3938700}, &(0x7f0000000840)={&(0x7f0000000800)={[0x10001]}, 0x8}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2b, 0x801, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$netrom(r3, &(0x7f0000000580)={{0x3, @default}, [@netrom, @null, @rose, @netrom, @netrom, @netrom, @null, @default]}, &(0x7f0000000200)=0x48) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x2c, 0x2c, 0xd2f, 0x100000, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff1}, {}, {0x7, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x78}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r4, 0x80, 0x7, 0x0, 0x9, {{0xa, 0x4, 0x1, 0x9, 0x28, 0x68, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @loopback, {[@timestamp={0x44, 0x14, 0x82, 0x0, 0x0, [0x1, 0x18000000, 0x9, 0x7]}]}}}}}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES16=r1, @ANYRES64=r0, @ANYRESOCT=r5, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES8=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000800000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000240)="94", 0x1) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32=r12, @ANYBLOB="2f03000000000000000000001766b1b8080e84", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r11, r8}, 0xc) sendmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r13 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000009000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003703000000000000850000001700000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$key(r13, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 217.497808ms ago: executing program 1 (id=5187): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x10000001, 0xffffffff}, 0x8) close(r0) syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) 135.763139ms ago: executing program 3 (id=5188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e000000080005", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) recvmmsg(r6, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x2, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}]}, 0x190) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x791db5641e51ecfe, 0x2c, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 1 (id=5189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 0000 [ 606.662338][T19690] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 606.662351][T19690] R13: 0000000000000000 R14: 00007f6c245b5fa0 R15: 00007ffc88519098 [ 606.662386][T19690] [ 606.662492][T19690] Mem-Info: [ 607.013847][T19690] active_anon:5840 inactive_anon:0 isolated_anon:0 [ 607.013847][T19690] active_file:2392 inactive_file:40045 isolated_file:0 [ 607.013847][T19690] unevictable:768 dirty:362 writeback:0 [ 607.013847][T19690] slab_reclaimable:12118 slab_unreclaimable:110381 [ 607.013847][T19690] mapped:40025 shmem:1390 pagetables:1153 [ 607.013847][T19690] sec_pagetables:0 bounce:0 [ 607.013847][T19690] kernel_misc_reclaimable:0 [ 607.013847][T19690] free:1262044 free_pcp:21760 free_cma:0 [ 607.060067][T19690] Node 0 active_anon:23360kB inactive_anon:0kB active_file:9568kB inactive_file:159980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160200kB dirty:1444kB writeback:0kB shmem:4024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13400kB pagetables:4548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 607.102064][T19690] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 607.144069][T19690] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.180641][T19690] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 607.199429][T19690] Node 0 DMA32 free:1125788kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23312kB inactive_anon:0kB active_file:9568kB inactive_file:158164kB unevictable:1536kB writepending:1444kB present:3129332kB managed:2560948kB mlocked:0kB bounce:0kB free_pcp:74168kB local_pcp:28396kB free_cma:0kB [ 607.299535][T19690] lowmem_reserve[]: 0 0 1 1 1 [ 607.319292][T19690] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 607.356525][T19690] lowmem_reserve[]: 0 0 0 0 0 [ 607.368626][T19690] Node 1 Normal free:3906488kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12608kB local_pcp:9344kB free_cma:0kB [ 607.405370][T19690] lowmem_reserve[]: 0 0 0 0 0 [ 607.410242][T19690] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 607.482301][T19690] Node 0 DMA32: 195*4kB (M) 234*8kB (M) 68*16kB (ME) 1*32kB (M) 9*64kB (UME) 47*128kB (UME) 43*256kB (ME) 28*512kB (UME) 18*1024kB (UM) 12*2048kB (UME) 254*4096kB (M) = 1119100kB [ 607.517555][T19690] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 607.562088][T19690] Node 1 Normal: 196*4kB (UM) 59*8kB (UME) 51*16kB (UME) 209*32kB (UME) 82*64kB (UME) 10*128kB (UME) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3906488kB [ 607.602752][T19690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.615475][T19783] lo speed is unknown, defaulting to 1000 [ 607.622436][T19690] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 607.639469][T19690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.668086][T19690] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 607.694479][T19690] 44049 total pagecache pages [ 607.701481][T19690] 0 pages in swap cache [ 607.711480][T19690] Free swap = 124996kB [ 607.721431][T19690] Total swap = 124996kB [ 607.732558][T19690] 2097051 pages RAM [ 607.738708][T19690] 0 pages HighMem/MovableOnly [ 607.758010][T19690] 424708 pages reserved [ 607.766786][T19690] 0 pages cma reserved [ 607.988627][T19788] lo speed is unknown, defaulting to 1000 [ 608.406560][T19793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4157'. [ 608.944982][T19812] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4165'. [ 608.954936][T19807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4159'. [ 609.242804][T19817] lo speed is unknown, defaulting to 1000 [ 609.899793][T19837] lo speed is unknown, defaulting to 1000 [ 610.718475][T19858] lo speed is unknown, defaulting to 1000 [ 610.831474][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4186'. [ 610.877113][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4186'. [ 610.926961][ T5155] Bluetooth: hci3: command 0x0406 tx timeout [ 611.036847][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4189'. [ 611.263618][T19879] lo speed is unknown, defaulting to 1000 [ 611.356936][T19880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4183'. [ 611.429836][T19883] lo speed is unknown, defaulting to 1000 [ 612.125898][T19905] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4197'. [ 612.254204][T19903] vlan3: entered promiscuous mode [ 612.260315][T19903] vlan2: entered promiscuous mode [ 612.269625][T19903] erspan0: entered promiscuous mode [ 612.489088][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4200'. [ 612.509963][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4202'. [ 612.536983][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4200'. [ 612.728601][T19925] lo speed is unknown, defaulting to 1000 [ 613.441465][T19963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.039550][T19981] __nla_validate_parse: 5 callbacks suppressed [ 614.039571][T19981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4216'. [ 614.343250][T20000] lo speed is unknown, defaulting to 1000 [ 614.380905][T20002] lo speed is unknown, defaulting to 1000 [ 614.523346][T19971] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 614.803380][T20018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4226'. [ 614.822543][T20018] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4226'. [ 615.224182][T20031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4229'. [ 615.242994][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4229'. [ 615.549784][T20032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4228'. [ 615.649507][T20046] FAULT_INJECTION: forcing a failure. [ 615.649507][T20046] name failslab, interval 1, probability 0, space 0, times 0 [ 615.683079][T20046] CPU: 1 UID: 0 PID: 20046 Comm: syz.5.4232 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 615.683106][T20046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 615.683117][T20046] Call Trace: [ 615.683124][T20046] [ 615.683133][T20046] dump_stack_lvl+0x189/0x250 [ 615.683163][T20046] ? __pfx____ratelimit+0x10/0x10 [ 615.683184][T20046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.683211][T20046] ? __pfx__printk+0x10/0x10 [ 615.683235][T20046] ? __pfx___might_resched+0x10/0x10 [ 615.683262][T20046] ? fs_reclaim_acquire+0x7d/0x100 [ 615.683291][T20046] should_fail_ex+0x414/0x560 [ 615.683321][T20046] should_failslab+0xa8/0x100 [ 615.683344][T20046] __kmalloc_noprof+0xcb/0x4f0 [ 615.683372][T20046] ? pfkey_add+0xf65/0x2e00 [ 615.683398][T20046] pfkey_add+0xf65/0x2e00 [ 615.683441][T20046] ? __pfx_pfkey_add+0x10/0x10 [ 615.683459][T20046] ? kmem_cache_free+0x18f/0x400 [ 615.683491][T20046] pfkey_sendmsg+0xbfb/0x1090 [ 615.683529][T20046] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 615.683579][T20046] ? aa_sock_msg_perm+0x94/0x160 [ 615.683603][T20046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.683626][T20046] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 615.683648][T20046] __sock_sendmsg+0x219/0x270 [ 615.683673][T20046] ____sys_sendmsg+0x505/0x830 [ 615.683705][T20046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.683741][T20046] ? import_iovec+0x74/0xa0 [ 615.683763][T20046] ___sys_sendmsg+0x21f/0x2a0 [ 615.683792][T20046] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.683858][T20046] ? __fget_files+0x2a/0x420 [ 615.683877][T20046] ? __fget_files+0x3a0/0x420 [ 615.683908][T20046] __x64_sys_sendmsg+0x19b/0x260 [ 615.683937][T20046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.683974][T20046] ? __pfx_ksys_write+0x10/0x10 [ 615.683989][T20046] ? rcu_is_watching+0x15/0xb0 [ 615.684058][T20046] ? do_syscall_64+0xbe/0x3b0 [ 615.684105][T20046] do_syscall_64+0xfa/0x3b0 [ 615.684128][T20046] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.684152][T20046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.684172][T20046] ? clear_bhb_loop+0x60/0xb0 [ 615.684198][T20046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.684218][T20046] RIP: 0033:0x7f710378e929 [ 615.684238][T20046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.684256][T20046] RSP: 002b:00007f71045a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.684278][T20046] RAX: ffffffffffffffda RBX: 00007f71039b5fa0 RCX: 00007f710378e929 [ 615.684294][T20046] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 615.684307][T20046] RBP: 00007f71045a1090 R08: 0000000000000000 R09: 0000000000000000 [ 615.684320][T20046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.684350][T20046] R13: 0000000000000000 R14: 00007f71039b5fa0 R15: 00007ffcf56451b8 [ 615.684385][T20046] [ 616.317545][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4235'. [ 617.123331][T20028] lo speed is unknown, defaulting to 1000 [ 617.451950][T20063] lo speed is unknown, defaulting to 1000 [ 617.629167][T20076] lo speed is unknown, defaulting to 1000 [ 617.854308][T20079] syzkaller0: entered promiscuous mode [ 617.861072][T20079] syzkaller0: entered allmulticast mode [ 617.885288][T20086] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 619.696015][T20151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4257'. [ 620.910723][T20169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4268'. [ 621.078326][T20175] FAULT_INJECTION: forcing a failure. [ 621.078326][T20175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.107384][T20175] CPU: 1 UID: 0 PID: 20175 Comm: syz.1.4271 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 621.107409][T20175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.107420][T20175] Call Trace: [ 621.107427][T20175] [ 621.107435][T20175] dump_stack_lvl+0x189/0x250 [ 621.107467][T20175] ? __pfx____ratelimit+0x10/0x10 [ 621.107488][T20175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.107515][T20175] ? __pfx__printk+0x10/0x10 [ 621.107536][T20175] ? __might_fault+0xb0/0x130 [ 621.107566][T20175] should_fail_ex+0x414/0x560 [ 621.107595][T20175] _copy_from_user+0x2d/0xb0 [ 621.107614][T20175] ___sys_sendmsg+0x158/0x2a0 [ 621.107644][T20175] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.107706][T20175] ? __fget_files+0x2a/0x420 [ 621.107725][T20175] ? __fget_files+0x3a0/0x420 [ 621.107760][T20175] __sys_sendmmsg+0x227/0x430 [ 621.107792][T20175] ? __pfx___sys_sendmmsg+0x10/0x10 [ 621.107816][T20175] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 621.107863][T20175] ? ksys_write+0x22a/0x250 [ 621.107882][T20175] ? __pfx_ksys_write+0x10/0x10 [ 621.107896][T20175] ? rcu_is_watching+0x15/0xb0 [ 621.107930][T20175] __x64_sys_sendmmsg+0xa0/0xc0 [ 621.107959][T20175] do_syscall_64+0xfa/0x3b0 [ 621.107980][T20175] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.108001][T20175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.108019][T20175] ? clear_bhb_loop+0x60/0xb0 [ 621.108041][T20175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.108058][T20175] RIP: 0033:0x7f8c6e58e929 [ 621.108073][T20175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.108088][T20175] RSP: 002b:00007f8c6f3e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 621.108107][T20175] RAX: ffffffffffffffda RBX: 00007f8c6e7b5fa0 RCX: 00007f8c6e58e929 [ 621.108120][T20175] RDX: 0000000000000002 RSI: 0000200000006140 RDI: 0000000000000003 [ 621.108131][T20175] RBP: 00007f8c6f3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 621.108143][T20175] R10: 0000000000004800 R11: 0000000000000246 R12: 0000000000000001 [ 621.108153][T20175] R13: 0000000000000000 R14: 00007f8c6e7b5fa0 R15: 00007ffdbc036668 [ 621.108183][T20175] [ 621.362189][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4269'. [ 621.438278][T20185] FAULT_INJECTION: forcing a failure. [ 621.438278][T20185] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 621.452706][T20185] CPU: 1 UID: 0 PID: 20185 Comm: syz.0.4273 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 621.452733][T20185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.452744][T20185] Call Trace: [ 621.452753][T20185] [ 621.452761][T20185] dump_stack_lvl+0x189/0x250 [ 621.452794][T20185] ? __pfx____ratelimit+0x10/0x10 [ 621.452817][T20185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.452844][T20185] ? __pfx__printk+0x10/0x10 [ 621.452883][T20185] ? fs_reclaim_acquire+0x7d/0x100 [ 621.452915][T20185] should_fail_ex+0x414/0x560 [ 621.452945][T20185] prepare_alloc_pages+0x213/0x610 [ 621.452978][T20185] __alloc_frozen_pages_noprof+0x123/0x370 [ 621.453008][T20185] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 621.453031][T20185] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.453056][T20185] ? exc_page_fault+0x9f/0xf0 [ 621.453080][T20185] ? policy_nodemask+0x27c/0x720 [ 621.453107][T20185] alloc_pages_mpol+0x232/0x4a0 [ 621.453133][T20185] alloc_pages_noprof+0xa9/0x190 [ 621.453155][T20185] bpf_prog_test_run_xdp+0xb8d/0x1000 [ 621.453199][T20185] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 621.453230][T20185] ? __fget_files+0x2a/0x420 [ 621.453258][T20185] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 621.453284][T20185] bpf_prog_test_run+0x2c4/0x340 [ 621.453317][T20185] __sys_bpf+0x4a4/0x860 [ 621.453344][T20185] ? __pfx___sys_bpf+0x10/0x10 [ 621.453384][T20185] ? ksys_write+0x22a/0x250 [ 621.453405][T20185] ? __pfx_ksys_write+0x10/0x10 [ 621.453420][T20185] ? rcu_is_watching+0x15/0xb0 [ 621.453468][T20185] __x64_sys_bpf+0x7c/0x90 [ 621.453492][T20185] do_syscall_64+0xfa/0x3b0 [ 621.453515][T20185] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.453536][T20185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.453555][T20185] ? clear_bhb_loop+0x60/0xb0 [ 621.453580][T20185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.453598][T20185] RIP: 0033:0x7fa2fef8e929 [ 621.453616][T20185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.453633][T20185] RSP: 002b:00007fa2ffeb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 621.453654][T20185] RAX: ffffffffffffffda RBX: 00007fa2ff1b5fa0 RCX: 00007fa2fef8e929 [ 621.453668][T20185] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 621.453681][T20185] RBP: 00007fa2ffeb4090 R08: 0000000000000000 R09: 0000000000000000 [ 621.453693][T20185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.453705][T20185] R13: 0000000000000000 R14: 00007fa2ff1b5fa0 R15: 00007fff5c8f93e8 [ 621.453737][T20185] [ 621.786583][T20192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4276'. [ 621.818408][T20194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4278'. [ 621.930172][T20200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4280'. [ 621.955649][T20197] tun0: tun_chr_ioctl cmd 1074812118 [ 622.018029][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4281'. [ 622.146148][T20202] pim6reg: entered allmulticast mode [ 622.160399][T20205] pim6reg: left allmulticast mode [ 622.382273][T20207] lo speed is unknown, defaulting to 1000 [ 622.398348][T20215] FAULT_INJECTION: forcing a failure. [ 622.398348][T20215] name failslab, interval 1, probability 0, space 0, times 0 [ 622.423019][T20215] CPU: 1 UID: 0 PID: 20215 Comm: syz.0.4285 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 622.423047][T20215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.423060][T20215] Call Trace: [ 622.423068][T20215] [ 622.423077][T20215] dump_stack_lvl+0x189/0x250 [ 622.423113][T20215] ? __pfx____ratelimit+0x10/0x10 [ 622.423137][T20215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.423167][T20215] ? __pfx__printk+0x10/0x10 [ 622.423204][T20215] should_fail_ex+0x414/0x560 [ 622.423236][T20215] should_failslab+0xa8/0x100 [ 622.423260][T20215] __kmalloc_cache_noprof+0x70/0x3d0 [ 622.423279][T20215] ? sctp_add_bind_addr+0x8c/0x370 [ 622.423307][T20215] sctp_add_bind_addr+0x8c/0x370 [ 622.423335][T20215] sctp_copy_local_addr_list+0x30b/0x4e0 [ 622.423378][T20215] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 622.423425][T20215] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 622.423452][T20215] ? sctp_v6_is_any+0x64/0x80 [ 622.423479][T20215] ? sctp_copy_one_addr+0x93/0x360 [ 622.423507][T20215] sctp_bind_addr_copy+0xb3/0x3c0 [ 622.423533][T20215] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 622.423571][T20215] sctp_connect_new_asoc+0x2e0/0x690 [ 622.423604][T20215] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 622.423635][T20215] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 622.423666][T20215] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 622.423692][T20215] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 622.423723][T20215] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 622.423751][T20215] ? security_sctp_bind_connect+0x7e/0x2e0 [ 622.423778][T20215] sctp_sendmsg+0x155c/0x2810 [ 622.423822][T20215] ? __pfx_sctp_sendmsg+0x10/0x10 [ 622.423856][T20215] ? aa_sk_perm+0x81e/0x950 [ 622.423889][T20215] ? __pfx_aa_sk_perm+0x10/0x10 [ 622.423917][T20215] ? sock_rps_record_flow+0x19/0x410 [ 622.423943][T20215] ? inet_sendmsg+0x2f4/0x370 [ 622.423963][T20215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 622.423993][T20215] __sock_sendmsg+0x19c/0x270 [ 622.424022][T20215] __sys_sendto+0x3bd/0x520 [ 622.424054][T20215] ? __pfx___sys_sendto+0x10/0x10 [ 622.424079][T20215] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 622.424122][T20215] ? __fget_files+0x3a0/0x420 [ 622.424159][T20215] ? ksys_write+0x22a/0x250 [ 622.424181][T20215] ? __pfx_ksys_write+0x10/0x10 [ 622.424198][T20215] ? rcu_is_watching+0x15/0xb0 [ 622.424236][T20215] __x64_sys_sendto+0xde/0x100 [ 622.424269][T20215] do_syscall_64+0xfa/0x3b0 [ 622.424293][T20215] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.424317][T20215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.424337][T20215] ? clear_bhb_loop+0x60/0xb0 [ 622.424386][T20215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.424413][T20215] RIP: 0033:0x7fa2fef8e929 [ 622.424433][T20215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.424451][T20215] RSP: 002b:00007fa2ffeb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 622.424473][T20215] RAX: ffffffffffffffda RBX: 00007fa2ff1b5fa0 RCX: 00007fa2fef8e929 [ 622.424488][T20215] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 622.424502][T20215] RBP: 00007fa2ffeb4090 R08: 000020000005ffe4 R09: 000000000000001c [ 622.424517][T20215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.424529][T20215] R13: 0000000000000000 R14: 00007fa2ff1b5fa0 R15: 00007fff5c8f93e8 [ 622.424567][T20215] [ 622.940099][T20221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4283'. [ 622.970949][T20226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4289'. [ 622.996598][T20226] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 623.579633][T20252] bridge_slave_0: left allmulticast mode [ 623.586560][T20252] bridge_slave_0: left promiscuous mode [ 623.592410][T20252] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.603036][T20252] bridge_slave_1: left allmulticast mode [ 623.610882][T20252] bridge_slave_1: left promiscuous mode [ 623.619458][T20252] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.638477][T20252] bond0: (slave bond_slave_0): Releasing backup interface [ 623.669382][T20252] bond0: (slave bond_slave_1): Releasing backup interface [ 623.690002][T20252] team0: Port device team_slave_0 removed [ 623.698158][T20252] team0: Port device team_slave_1 removed [ 623.704980][T20252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.713090][T20252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.725207][T20252] team0: Port device vxlan0 removed [ 623.801529][T20260] lo speed is unknown, defaulting to 1000 [ 624.003090][T20268] lo speed is unknown, defaulting to 1000 [ 624.310628][T20271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4302'. [ 624.712202][T20269] Bluetooth: MGMT ver 1.23 [ 625.409579][T20312] FAULT_INJECTION: forcing a failure. [ 625.409579][T20312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.430087][T20312] CPU: 0 UID: 0 PID: 20312 Comm: syz.1.4319 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 625.430116][T20312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.430128][T20312] Call Trace: [ 625.430136][T20312] [ 625.430145][T20312] dump_stack_lvl+0x189/0x250 [ 625.430180][T20312] ? __pfx____ratelimit+0x10/0x10 [ 625.430203][T20312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.430232][T20312] ? __pfx__printk+0x10/0x10 [ 625.430254][T20312] ? __might_fault+0xb0/0x130 [ 625.430285][T20312] should_fail_ex+0x414/0x560 [ 625.430315][T20312] _copy_from_user+0x2d/0xb0 [ 625.430335][T20312] ___sys_sendmsg+0x158/0x2a0 [ 625.430369][T20312] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.430438][T20312] ? __fget_files+0x2a/0x420 [ 625.430459][T20312] ? __fget_files+0x3a0/0x420 [ 625.430492][T20312] __x64_sys_sendmsg+0x19b/0x260 [ 625.430524][T20312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 625.430563][T20312] ? __pfx_ksys_write+0x10/0x10 [ 625.430578][T20312] ? rcu_is_watching+0x15/0xb0 [ 625.430613][T20312] ? do_syscall_64+0xbe/0x3b0 [ 625.430641][T20312] do_syscall_64+0xfa/0x3b0 [ 625.430663][T20312] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.430686][T20312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.430705][T20312] ? clear_bhb_loop+0x60/0xb0 [ 625.430729][T20312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.430747][T20312] RIP: 0033:0x7f8c6e58e929 [ 625.430765][T20312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.430782][T20312] RSP: 002b:00007f8c6f3e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.430801][T20312] RAX: ffffffffffffffda RBX: 00007f8c6e7b5fa0 RCX: 00007f8c6e58e929 [ 625.430815][T20312] RDX: 000000003000c81c RSI: 0000200000000340 RDI: 0000000000000004 [ 625.430827][T20312] RBP: 00007f8c6f3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 625.430838][T20312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.430849][T20312] R13: 0000000000000000 R14: 00007f8c6e7b5fa0 R15: 00007ffdbc036668 [ 625.430882][T20312] [ 625.481155][T20315] lo speed is unknown, defaulting to 1000 [ 625.918637][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4325'. [ 625.942517][T20326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4325'. [ 626.348053][T20342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4331'. [ 626.470179][T20317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4320'. [ 626.557375][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4333'. [ 626.566741][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4331'. [ 627.292800][T20371] netlink: 'syz.0.4341': attribute type 10 has an invalid length. [ 627.613474][T20385] tipc: Enabling of bearer rejected, failed to enable media [ 627.744251][T20390] lo speed is unknown, defaulting to 1000 [ 628.491611][T20421] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4349'. [ 629.434074][T20456] team0: No ports can be present during mode change [ 629.455661][T20456] FAULT_INJECTION: forcing a failure. [ 629.455661][T20456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.469360][T20456] CPU: 1 UID: 0 PID: 20456 Comm: syz.5.4373 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 629.469388][T20456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.469400][T20456] Call Trace: [ 629.469408][T20456] [ 629.469417][T20456] dump_stack_lvl+0x189/0x250 [ 629.469452][T20456] ? __pfx____ratelimit+0x10/0x10 [ 629.469475][T20456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.469504][T20456] ? __pfx__printk+0x10/0x10 [ 629.469540][T20456] should_fail_ex+0x414/0x560 [ 629.469570][T20456] _copy_to_user+0x31/0xb0 [ 629.469592][T20456] simple_read_from_buffer+0xe1/0x170 [ 629.469618][T20456] proc_fail_nth_read+0x1df/0x250 [ 629.469645][T20456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.469671][T20456] ? rw_verify_area+0x258/0x650 [ 629.469699][T20456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.469723][T20456] vfs_read+0x1fd/0x980 [ 629.469758][T20456] ? __pfx___mutex_lock+0x10/0x10 [ 629.469783][T20456] ? __pfx_vfs_read+0x10/0x10 [ 629.469814][T20456] ? __fget_files+0x2a/0x420 [ 629.469841][T20456] ? __fget_files+0x3a0/0x420 [ 629.469861][T20456] ? __fget_files+0x2a/0x420 [ 629.469892][T20456] ksys_read+0x145/0x250 [ 629.469913][T20456] ? __pfx_ksys_read+0x10/0x10 [ 629.469945][T20456] ? rcu_is_watching+0x15/0xb0 [ 629.469980][T20456] ? do_syscall_64+0xbe/0x3b0 [ 629.470009][T20456] do_syscall_64+0xfa/0x3b0 [ 629.470030][T20456] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.470053][T20456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.470075][T20456] ? clear_bhb_loop+0x60/0xb0 [ 629.470098][T20456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.470117][T20456] RIP: 0033:0x7f710378d33c [ 629.470135][T20456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 629.470151][T20456] RSP: 002b:00007f71045a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 629.470171][T20456] RAX: ffffffffffffffda RBX: 00007f71039b5fa0 RCX: 00007f710378d33c [ 629.470185][T20456] RDX: 000000000000000f RSI: 00007f71045a10a0 RDI: 0000000000000004 [ 629.470198][T20456] RBP: 00007f71045a1090 R08: 0000000000000000 R09: 0000000000000000 [ 629.470210][T20456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 629.470221][T20456] R13: 0000000000000000 R14: 00007f71039b5fa0 R15: 00007ffcf56451b8 [ 629.470255][T20456] [ 629.762021][T20460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4375'. [ 629.809851][T20465] lo speed is unknown, defaulting to 1000 [ 629.889238][T20460] nbd: socks must be embedded in a SOCK_ITEM attr [ 630.230709][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4383'. [ 630.242775][T20485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.364746][T17331] Bluetooth: hci6: command 0x0419 tx timeout [ 630.530517][T20495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4376'. [ 630.922743][T20510] lo speed is unknown, defaulting to 1000 [ 631.022507][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4398'. [ 631.694324][T20546] lo speed is unknown, defaulting to 1000 [ 631.755760][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4410'. [ 632.179081][T20571] netlink: 'syz.1.4417': attribute type 6 has an invalid length. [ 632.205547][T20571] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4417'. [ 632.342905][T20572] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4408'. [ 632.346526][T20582] FAULT_INJECTION: forcing a failure. [ 632.346526][T20582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.441475][T20582] CPU: 1 UID: 0 PID: 20582 Comm: syz.6.4421 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 632.441503][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.441531][T20582] Call Trace: [ 632.441540][T20582] [ 632.441549][T20582] dump_stack_lvl+0x189/0x250 [ 632.441584][T20582] ? __pfx____ratelimit+0x10/0x10 [ 632.441608][T20582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.441637][T20582] ? __pfx__printk+0x10/0x10 [ 632.441672][T20582] should_fail_ex+0x414/0x560 [ 632.441703][T20582] _copy_to_user+0x31/0xb0 [ 632.441726][T20582] simple_read_from_buffer+0xe1/0x170 [ 632.441752][T20582] proc_fail_nth_read+0x1df/0x250 [ 632.441779][T20582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.441807][T20582] ? rw_verify_area+0x258/0x650 [ 632.441836][T20582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.441862][T20582] vfs_read+0x1fd/0x980 [ 632.441897][T20582] ? __pfx___mutex_lock+0x10/0x10 [ 632.441923][T20582] ? __pfx_vfs_read+0x10/0x10 [ 632.441954][T20582] ? __fget_files+0x2a/0x420 [ 632.441981][T20582] ? __fget_files+0x3a0/0x420 [ 632.442000][T20582] ? __fget_files+0x2a/0x420 [ 632.442032][T20582] ksys_read+0x145/0x250 [ 632.442048][T20582] ? __fget_files+0x3a0/0x420 [ 632.442070][T20582] ? __pfx_ksys_read+0x10/0x10 [ 632.442106][T20582] ? do_syscall_64+0xbe/0x3b0 [ 632.442134][T20582] do_syscall_64+0xfa/0x3b0 [ 632.442155][T20582] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.442176][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.442195][T20582] ? clear_bhb_loop+0x60/0xb0 [ 632.442218][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.442236][T20582] RIP: 0033:0x7f6c2438d33c [ 632.442253][T20582] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 632.442269][T20582] RSP: 002b:00007f6c251df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.442289][T20582] RAX: ffffffffffffffda RBX: 00007f6c245b5fa0 RCX: 00007f6c2438d33c [ 632.442303][T20582] RDX: 000000000000000f RSI: 00007f6c251df0a0 RDI: 0000000000000005 [ 632.442315][T20582] RBP: 00007f6c251df090 R08: 0000000000000000 R09: 0000000000000000 [ 632.442326][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.442337][T20582] R13: 0000000000000000 R14: 00007f6c245b5fa0 R15: 00007ffc88519098 [ 632.442370][T20582] [ 632.675291][T17331] Bluetooth: hci6: command 0x0419 tx timeout [ 633.260661][T20610] bridge_slave_0: entered promiscuous mode [ 633.507210][T20623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4435'. [ 633.640728][T20626] lo speed is unknown, defaulting to 1000 [ 633.828681][T20642] FAULT_INJECTION: forcing a failure. [ 633.828681][T20642] name failslab, interval 1, probability 0, space 0, times 0 [ 633.857970][T20642] CPU: 0 UID: 0 PID: 20642 Comm: syz.0.4444 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 633.857997][T20642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 633.858009][T20642] Call Trace: [ 633.858017][T20642] [ 633.858026][T20642] dump_stack_lvl+0x189/0x250 [ 633.858060][T20642] ? __pfx____ratelimit+0x10/0x10 [ 633.858082][T20642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.858110][T20642] ? __pfx__printk+0x10/0x10 [ 633.858136][T20642] ? __pfx___might_resched+0x10/0x10 [ 633.858169][T20642] should_fail_ex+0x414/0x560 [ 633.858198][T20642] should_failslab+0xa8/0x100 [ 633.858221][T20642] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 633.858240][T20642] ? __alloc_skb+0x112/0x2d0 [ 633.858270][T20642] __alloc_skb+0x112/0x2d0 [ 633.858309][T20642] netlink_sendmsg+0x5c6/0xb30 [ 633.858343][T20642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.858370][T20642] ? aa_sock_msg_perm+0x94/0x160 [ 633.858396][T20642] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.858419][T20642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.858443][T20642] __sock_sendmsg+0x219/0x270 [ 633.858467][T20642] ____sys_sendmsg+0x505/0x830 [ 633.858499][T20642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.858536][T20642] ? import_iovec+0x74/0xa0 [ 633.858559][T20642] ___sys_sendmsg+0x21f/0x2a0 [ 633.858588][T20642] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.858653][T20642] ? __fget_files+0x2a/0x420 [ 633.858673][T20642] ? __fget_files+0x3a0/0x420 [ 633.858705][T20642] __x64_sys_sendmsg+0x19b/0x260 [ 633.858736][T20642] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.858773][T20642] ? __pfx_ksys_write+0x10/0x10 [ 633.858789][T20642] ? rcu_is_watching+0x15/0xb0 [ 633.858822][T20642] ? do_syscall_64+0xbe/0x3b0 [ 633.858848][T20642] do_syscall_64+0xfa/0x3b0 [ 633.858869][T20642] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.858890][T20642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.858909][T20642] ? clear_bhb_loop+0x60/0xb0 [ 633.858948][T20642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.858967][T20642] RIP: 0033:0x7fa2fef8e929 [ 633.858985][T20642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.859003][T20642] RSP: 002b:00007fa2ffeb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.859024][T20642] RAX: ffffffffffffffda RBX: 00007fa2ff1b5fa0 RCX: 00007fa2fef8e929 [ 633.859038][T20642] RDX: 0000000000008002 RSI: 0000200000000680 RDI: 0000000000000003 [ 633.859051][T20642] RBP: 00007fa2ffeb4090 R08: 0000000000000000 R09: 0000000000000000 [ 633.859063][T20642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.859075][T20642] R13: 0000000000000000 R14: 00007fa2ff1b5fa0 R15: 00007fff5c8f93e8 [ 633.859109][T20642] [ 633.859871][T20644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4442'. [ 634.444088][T20652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4437'. [ 634.453993][T20664] FAULT_INJECTION: forcing a failure. [ 634.453993][T20664] name failslab, interval 1, probability 0, space 0, times 0 [ 634.495135][T20664] CPU: 0 UID: 0 PID: 20664 Comm: syz.0.4451 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 634.495167][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.495182][T20664] Call Trace: [ 634.495191][T20664] [ 634.495201][T20664] dump_stack_lvl+0x189/0x250 [ 634.495247][T20664] ? __pfx____ratelimit+0x10/0x10 [ 634.495274][T20664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.495307][T20664] ? __pfx__printk+0x10/0x10 [ 634.495338][T20664] ? __pfx___might_resched+0x10/0x10 [ 634.495377][T20664] should_fail_ex+0x414/0x560 [ 634.495411][T20664] should_failslab+0xa8/0x100 [ 634.495437][T20664] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 634.495459][T20664] ? __alloc_skb+0x112/0x2d0 [ 634.495493][T20664] __alloc_skb+0x112/0x2d0 [ 634.495527][T20664] netlink_sendmsg+0x5c6/0xb30 [ 634.495578][T20664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.495618][T20664] ? aa_sock_msg_perm+0x94/0x160 [ 634.495644][T20664] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.495666][T20664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.495690][T20664] __sock_sendmsg+0x219/0x270 [ 634.495714][T20664] __sys_sendto+0x3bd/0x520 [ 634.495741][T20664] ? __pfx___sys_sendto+0x10/0x10 [ 634.495783][T20664] ? count_memcg_event_mm+0x21/0x260 [ 634.495823][T20664] ? exc_page_fault+0x76/0xf0 [ 634.495848][T20664] ? do_user_addr_fault+0xc8a/0x1390 [ 634.495877][T20664] __x64_sys_sendto+0xde/0x100 [ 634.495905][T20664] do_syscall_64+0xfa/0x3b0 [ 634.495926][T20664] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.495947][T20664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.495964][T20664] ? clear_bhb_loop+0x60/0xb0 [ 634.495986][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.496003][T20664] RIP: 0033:0x7fa2fef907bc [ 634.496019][T20664] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 634.496035][T20664] RSP: 002b:00007fa2ffeb2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 634.496055][T20664] RAX: ffffffffffffffda RBX: 00007fa2ffeb2fc0 RCX: 00007fa2fef907bc [ 634.496068][T20664] RDX: 0000000000000024 RSI: 00007fa2ffeb3010 RDI: 0000000000000005 [ 634.496080][T20664] RBP: 0000000000000000 R08: 00007fa2ffeb2f14 R09: 000000000000000c [ 634.496091][T20664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 634.496102][T20664] R13: 00007fa2ffeb2f68 R14: 00007fa2ffeb3010 R15: 0000000000000000 [ 634.496132][T20664] [ 635.155921][T20676] lo speed is unknown, defaulting to 1000 [ 635.647724][T20705] wg1: entered promiscuous mode [ 635.657451][T20705] wg1: entered allmulticast mode [ 635.688633][T20707] lo speed is unknown, defaulting to 1000 [ 636.013093][T20717] lo speed is unknown, defaulting to 1000 [ 636.543793][T20729] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4468'. [ 636.559407][T20733] lo speed is unknown, defaulting to 1000 [ 637.219212][T20761] netlink: 45 bytes leftover after parsing attributes in process `syz.3.4483'. [ 637.496282][T20774] FAULT_INJECTION: forcing a failure. [ 637.496282][T20774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 637.528583][T20774] CPU: 1 UID: 0 PID: 20774 Comm: syz.6.4487 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 637.528612][T20774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 637.528625][T20774] Call Trace: [ 637.528634][T20774] [ 637.528643][T20774] dump_stack_lvl+0x189/0x250 [ 637.528679][T20774] ? __pfx____ratelimit+0x10/0x10 [ 637.528703][T20774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.528733][T20774] ? __pfx__printk+0x10/0x10 [ 637.528757][T20774] ? fs_reclaim_acquire+0x7d/0x100 [ 637.528792][T20774] should_fail_ex+0x414/0x560 [ 637.528823][T20774] prepare_alloc_pages+0x213/0x610 [ 637.528857][T20774] __alloc_frozen_pages_noprof+0x123/0x370 [ 637.528886][T20774] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 637.528921][T20774] ? policy_nodemask+0x27c/0x720 [ 637.528948][T20774] alloc_pages_mpol+0x232/0x4a0 [ 637.528989][T20774] vma_alloc_folio_noprof+0xe4/0x200 [ 637.529014][T20774] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 637.529050][T20774] folio_prealloc+0x30/0x180 [ 637.529072][T20774] do_wp_page+0x1231/0x5800 [ 637.529127][T20774] ? __pfx_do_wp_page+0x10/0x10 [ 637.529152][T20774] ? do_raw_spin_lock+0x121/0x290 [ 637.529179][T20774] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 637.529213][T20774] __handle_mm_fault+0x1144/0x5620 [ 637.529266][T20774] ? __pfx___handle_mm_fault+0x10/0x10 [ 637.529313][T20774] ? follow_page_pte+0xe7e/0x14b0 [ 637.529354][T20774] handle_mm_fault+0x40a/0x8e0 [ 637.529397][T20774] __get_user_pages+0x1af4/0x30b0 [ 637.529466][T20774] ? __pfx___get_user_pages+0x10/0x10 [ 637.529494][T20774] ? __gup_longterm_locked+0xbf7/0x15b0 [ 637.529522][T20774] ? down_read_killable+0x1d1/0x350 [ 637.529555][T20774] __gup_longterm_locked+0xd66/0x15b0 [ 637.529597][T20774] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 637.529627][T20774] ? gup_fast_fallback+0x1afc/0x2260 [ 637.529658][T20774] gup_fast_fallback+0x1cd4/0x2260 [ 637.529685][T20774] ? __kernel_text_address+0xd/0x40 [ 637.529749][T20774] ? __pfx_gup_fast_fallback+0x10/0x10 [ 637.529775][T20774] ? kasan_save_track+0x4f/0x80 [ 637.529801][T20774] ? kasan_save_track+0x3e/0x80 [ 637.529826][T20774] ? __kasan_kmalloc+0x93/0xb0 [ 637.529842][T20774] ? sock_kmalloc+0xd6/0x160 [ 637.529859][T20774] ? af_alg_get_rsgl+0x236/0x810 [ 637.529879][T20774] ? skcipher_recvmsg+0x3c0/0x11c0 [ 637.529904][T20774] ? __sys_recvfrom+0x1f6/0x340 [ 637.529927][T20774] ? __x64_sys_recvfrom+0xde/0x100 [ 637.529951][T20774] ? do_syscall_64+0xfa/0x3b0 [ 637.529986][T20774] ? pin_user_pages_fast+0x4d/0xb0 [ 637.530017][T20774] iov_iter_extract_pages+0x35a/0x5e0 [ 637.530048][T20774] extract_iter_to_sg+0xe46/0x24e0 [ 637.530094][T20774] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 637.530122][T20774] ? sock_kmalloc+0xd6/0x160 [ 637.530142][T20774] ? rcu_is_watching+0x15/0xb0 [ 637.530172][T20774] ? trace_kmalloc+0x1f/0xd0 [ 637.530188][T20774] ? __kmalloc_noprof+0x29b/0x4f0 [ 637.530213][T20774] ? __asan_memset+0x22/0x50 [ 637.530244][T20774] af_alg_get_rsgl+0x436/0x810 [ 637.530289][T20774] skcipher_recvmsg+0x3c0/0x11c0 [ 637.530320][T20774] ? aa_sk_perm+0x81e/0x950 [ 637.530358][T20774] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 637.530389][T20774] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 637.530412][T20774] ? security_socket_recvmsg+0x7e/0x2e0 [ 637.530443][T20774] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 637.530469][T20774] sock_recvmsg+0x229/0x270 [ 637.530495][T20774] __sys_recvfrom+0x1f6/0x340 [ 637.530525][T20774] ? __pfx___sys_recvfrom+0x10/0x10 [ 637.530549][T20774] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 637.530588][T20774] ? __fget_files+0x3a0/0x420 [ 637.530623][T20774] ? ksys_write+0x22a/0x250 [ 637.530644][T20774] ? __pfx_ksys_write+0x10/0x10 [ 637.530669][T20774] __x64_sys_recvfrom+0xde/0x100 [ 637.530700][T20774] do_syscall_64+0xfa/0x3b0 [ 637.530722][T20774] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.530744][T20774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.530762][T20774] ? clear_bhb_loop+0x60/0xb0 [ 637.530786][T20774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.530804][T20774] RIP: 0033:0x7f6c2438e929 [ 637.530825][T20774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.530841][T20774] RSP: 002b:00007f6c251be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 637.530861][T20774] RAX: ffffffffffffffda RBX: 00007f6c245b6080 RCX: 00007f6c2438e929 [ 637.530875][T20774] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000003 [ 637.530888][T20774] RBP: 00007f6c251be090 R08: 0000000000000000 R09: fffffffffffffd25 [ 637.530902][T20774] R10: 00000000000003e8 R11: 0000000000000246 R12: 0000000000000002 [ 637.530913][T20774] R13: 0000000000000001 R14: 00007f6c245b6080 R15: 00007ffc88519098 [ 637.530947][T20774] [ 638.174146][T20786] lo speed is unknown, defaulting to 1000 [ 638.579149][T20793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4492'. [ 638.979565][T20810] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4503'. [ 639.137281][T20820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4503'. [ 639.244573][T20827] netlink: 'syz.3.4509': attribute type 1 has an invalid length. [ 639.381009][T20832] lo speed is unknown, defaulting to 1000 [ 639.822042][T20843] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4516'. [ 639.884799][T20843] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 640.155594][T20851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4511'. [ 640.627211][T20869] FAULT_INJECTION: forcing a failure. [ 640.627211][T20869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.704455][T20869] CPU: 0 UID: 0 PID: 20869 Comm: syz.0.4524 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 640.704487][T20869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.704501][T20869] Call Trace: [ 640.704510][T20869] [ 640.704520][T20869] dump_stack_lvl+0x189/0x250 [ 640.704559][T20869] ? __pfx____ratelimit+0x10/0x10 [ 640.704585][T20869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.704618][T20869] ? __pfx__printk+0x10/0x10 [ 640.704642][T20869] ? __might_fault+0xb0/0x130 [ 640.704677][T20869] should_fail_ex+0x414/0x560 [ 640.704711][T20869] _copy_from_user+0x2d/0xb0 [ 640.704732][T20869] ___sys_sendmsg+0x158/0x2a0 [ 640.704768][T20869] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.704845][T20869] ? __fget_files+0x2a/0x420 [ 640.704868][T20869] ? __fget_files+0x3a0/0x420 [ 640.704913][T20869] __x64_sys_sendmsg+0x19b/0x260 [ 640.704950][T20869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 640.704994][T20869] ? __pfx_ksys_write+0x10/0x10 [ 640.705012][T20869] ? rcu_is_watching+0x15/0xb0 [ 640.705051][T20869] ? do_syscall_64+0xbe/0x3b0 [ 640.705082][T20869] do_syscall_64+0xfa/0x3b0 [ 640.705107][T20869] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.705132][T20869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.705153][T20869] ? clear_bhb_loop+0x60/0xb0 [ 640.705181][T20869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.705202][T20869] RIP: 0033:0x7fa2fef8e929 [ 640.705221][T20869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.705240][T20869] RSP: 002b:00007fa2ffeb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.705263][T20869] RAX: ffffffffffffffda RBX: 00007fa2ff1b5fa0 RCX: 00007fa2fef8e929 [ 640.705280][T20869] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 000000000000000b [ 640.705294][T20869] RBP: 00007fa2ffeb4090 R08: 0000000000000000 R09: 0000000000000000 [ 640.705308][T20869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.705321][T20869] R13: 0000000000000000 R14: 00007fa2ff1b5fa0 R15: 00007fff5c8f93e8 [ 640.705358][T20869] [ 641.035055][T20883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4530'. [ 641.046972][T20883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4530'. [ 641.166183][T20890] FAULT_INJECTION: forcing a failure. [ 641.166183][T20890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.180872][T20890] CPU: 0 UID: 0 PID: 20890 Comm: syz.5.4532 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 641.180902][T20890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 641.180916][T20890] Call Trace: [ 641.180924][T20890] [ 641.180934][T20890] dump_stack_lvl+0x189/0x250 [ 641.180970][T20890] ? __pfx____ratelimit+0x10/0x10 [ 641.180995][T20890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.181027][T20890] ? __pfx__printk+0x10/0x10 [ 641.181062][T20890] should_fail_ex+0x414/0x560 [ 641.181094][T20890] _copy_to_user+0x31/0xb0 [ 641.181118][T20890] bpf_test_finish+0x1ab/0x700 [ 641.181147][T20890] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 641.181174][T20890] ? __pfx_bpf_test_finish+0x10/0x10 [ 641.181207][T20890] ? bpf_test_init+0x133/0x170 [ 641.181236][T20890] bpf_prog_test_run_xdp+0x79a/0x1000 [ 641.181283][T20890] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 641.181316][T20890] ? __fget_files+0x2a/0x420 [ 641.181345][T20890] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 641.181373][T20890] bpf_prog_test_run+0x2c4/0x340 [ 641.181407][T20890] __sys_bpf+0x4a4/0x860 [ 641.181436][T20890] ? __pfx___sys_bpf+0x10/0x10 [ 641.181480][T20890] ? ksys_write+0x22a/0x250 [ 641.181502][T20890] ? __pfx_ksys_write+0x10/0x10 [ 641.181518][T20890] ? rcu_is_watching+0x15/0xb0 [ 641.181558][T20890] __x64_sys_bpf+0x7c/0x90 [ 641.181603][T20890] do_syscall_64+0xfa/0x3b0 [ 641.181628][T20890] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.181652][T20890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.181672][T20890] ? clear_bhb_loop+0x60/0xb0 [ 641.181698][T20890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.181717][T20890] RIP: 0033:0x7f710378e929 [ 641.181736][T20890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.181753][T20890] RSP: 002b:00007f71045a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 641.181774][T20890] RAX: ffffffffffffffda RBX: 00007f71039b5fa0 RCX: 00007f710378e929 [ 641.181789][T20890] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 641.181801][T20890] RBP: 00007f71045a1090 R08: 0000000000000000 R09: 0000000000000000 [ 641.181814][T20890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 641.181825][T20890] R13: 0000000000000000 R14: 00007f71039b5fa0 R15: 00007ffcf56451b8 [ 641.181865][T20890] [ 641.712168][T20905] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4538'. [ 641.775374][T20903] lo speed is unknown, defaulting to 1000 [ 642.138006][T20925] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 642.185819][T20926] netlink: 'syz.6.4545': attribute type 11 has an invalid length. [ 642.519516][T20937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4539'. [ 642.948521][T20958] IPv6: addrconf: prefix option has invalid lifetime [ 643.275309][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4559'. [ 643.315586][T20975] vlan2: entered allmulticast mode [ 643.320809][T20975] bridge_slave_0: entered allmulticast mode [ 643.381722][T20981] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 643.459180][T20983] lo speed is unknown, defaulting to 1000 [ 644.309182][T21022] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4563'. [ 644.761143][T21042] FAULT_INJECTION: forcing a failure. [ 644.761143][T21042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.805981][T21042] CPU: 0 UID: 0 PID: 21042 Comm: syz.3.4585 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 644.806009][T21042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 644.806021][T21042] Call Trace: [ 644.806029][T21042] [ 644.806038][T21042] dump_stack_lvl+0x189/0x250 [ 644.806071][T21042] ? __pfx____ratelimit+0x10/0x10 [ 644.806094][T21042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.806122][T21042] ? __pfx__printk+0x10/0x10 [ 644.806142][T21042] ? __might_fault+0xb0/0x130 [ 644.806172][T21042] should_fail_ex+0x414/0x560 [ 644.806201][T21042] _copy_from_iter+0x1db/0x16f0 [ 644.806233][T21042] ? rcu_is_watching+0x15/0xb0 [ 644.806261][T21042] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 644.806298][T21042] ? __pfx__copy_from_iter+0x10/0x10 [ 644.806328][T21042] ? __build_skb_around+0x257/0x3e0 [ 644.806359][T21042] ? netlink_sendmsg+0x642/0xb30 [ 644.806381][T21042] ? skb_put+0x11b/0x210 [ 644.806412][T21042] netlink_sendmsg+0x6b2/0xb30 [ 644.806448][T21042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.806477][T21042] ? aa_sock_msg_perm+0x94/0x160 [ 644.806510][T21042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 644.806535][T21042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.806561][T21042] __sock_sendmsg+0x219/0x270 [ 644.806587][T21042] ____sys_sendmsg+0x505/0x830 [ 644.806622][T21042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.806661][T21042] ? import_iovec+0x74/0xa0 [ 644.806685][T21042] ___sys_sendmsg+0x21f/0x2a0 [ 644.806717][T21042] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.806788][T21042] ? __fget_files+0x2a/0x420 [ 644.806808][T21042] ? __fget_files+0x3a0/0x420 [ 644.806842][T21042] __x64_sys_sendmsg+0x19b/0x260 [ 644.806874][T21042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.806914][T21042] ? __pfx_ksys_write+0x10/0x10 [ 644.806930][T21042] ? rcu_is_watching+0x15/0xb0 [ 644.806963][T21042] ? do_syscall_64+0xbe/0x3b0 [ 644.806991][T21042] do_syscall_64+0xfa/0x3b0 [ 644.807013][T21042] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.807035][T21042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.807054][T21042] ? clear_bhb_loop+0x60/0xb0 [ 644.807078][T21042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.807096][T21042] RIP: 0033:0x7fb47658e929 [ 644.807114][T21042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.807131][T21042] RSP: 002b:00007fb47739d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.807152][T21042] RAX: ffffffffffffffda RBX: 00007fb4767b5fa0 RCX: 00007fb47658e929 [ 644.807166][T21042] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 644.807178][T21042] RBP: 00007fb47739d090 R08: 0000000000000000 R09: 0000000000000000 [ 644.807190][T21042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.807202][T21042] R13: 0000000000000000 R14: 00007fb4767b5fa0 R15: 00007fffea816ef8 [ 644.807235][T21042] [ 645.279089][T21057] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4588'. [ 645.443167][T21065] netlink: 'syz.3.4592': attribute type 153 has an invalid length. [ 645.496474][T21067] lo speed is unknown, defaulting to 1000 [ 645.964717][ T5155] Bluetooth: hci6: command 0x0419 tx timeout [ 646.079627][T21095] syzkaller0: create flow: hash 2853176831 index 1 [ 646.088924][T21087] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4594'. [ 646.315619][T21095] syzkaller0: delete flow: hash 2853176831 index 1 [ 646.761578][T21119] Timeout policy `syz0' can only be used by L3 protocol number 17157 [ 647.955017][T21113] lo speed is unknown, defaulting to 1000 [ 648.025842][T21123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4611'. [ 648.472978][T21147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4621'. [ 648.501264][T21143] lo speed is unknown, defaulting to 1000 [ 648.606039][T21150] netlink: 'syz.6.4622': attribute type 3 has an invalid length. [ 648.644602][T21150] veth0: entered promiscuous mode [ 648.650180][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4622'. [ 648.734028][T21150] veth0 (unregistering): left promiscuous mode [ 649.106791][T21166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4619'. [ 649.276701][T21179] FAULT_INJECTION: forcing a failure. [ 649.276701][T21179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.290493][T21175] lo speed is unknown, defaulting to 1000 [ 649.320728][T21179] CPU: 0 UID: 0 PID: 21179 Comm: syz.3.4631 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 649.320756][T21179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 649.320772][T21179] Call Trace: [ 649.320781][T21179] [ 649.320790][T21179] dump_stack_lvl+0x189/0x250 [ 649.320847][T21179] ? __pfx____ratelimit+0x10/0x10 [ 649.320889][T21179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.320921][T21179] ? __pfx__printk+0x10/0x10 [ 649.320944][T21179] ? __might_fault+0xb0/0x130 [ 649.320976][T21179] should_fail_ex+0x414/0x560 [ 649.321010][T21179] _copy_from_user+0x2d/0xb0 [ 649.321033][T21179] do_sock_getsockopt+0x1cd/0x650 [ 649.321069][T21179] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 649.321099][T21179] ? do_syscall_64+0x80/0x3b0 [ 649.321124][T21179] ? __fget_files+0x3a0/0x420 [ 649.321146][T21179] ? __fget_files+0x2a/0x420 [ 649.321179][T21179] __x64_sys_getsockopt+0x1a5/0x250 [ 649.321208][T21179] ? do_syscall_64+0x80/0x3b0 [ 649.321236][T21179] ? do_syscall_64+0x80/0x3b0 [ 649.321267][T21179] do_syscall_64+0xfa/0x3b0 [ 649.321292][T21179] ? lockdep_hardirqs_on+0x9c/0x150 [ 649.321316][T21179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.321338][T21179] ? clear_bhb_loop+0x60/0xb0 [ 649.321365][T21179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.321385][T21179] RIP: 0033:0x7fb47658e929 [ 649.321405][T21179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.321423][T21179] RSP: 002b:00007fb47735b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 649.321446][T21179] RAX: ffffffffffffffda RBX: 00007fb4767b6160 RCX: 00007fb47658e929 [ 649.321461][T21179] RDX: 0000000000000020 RSI: 0000000000000084 RDI: 0000000000000005 [ 649.321474][T21179] RBP: 00007fb47735b090 R08: 0000200000000140 R09: 0000000000000000 [ 649.321487][T21179] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 649.321501][T21179] R13: 0000000000000001 R14: 00007fb4767b6160 R15: 00007fffea816ef8 [ 649.321538][T21179] [ 649.648476][T21181] lo speed is unknown, defaulting to 1000 [ 650.294818][T21205] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4641'. [ 650.315251][T21202] lo speed is unknown, defaulting to 1000 [ 650.777808][T21233] lo speed is unknown, defaulting to 1000 [ 651.218941][T21253] ip6gre1: entered promiscuous mode [ 651.343564][T21251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4648'. [ 651.506616][T21267] lo speed is unknown, defaulting to 1000 [ 651.576861][T21270] FAULT_INJECTION: forcing a failure. [ 651.576861][T21270] name failslab, interval 1, probability 0, space 0, times 0 [ 651.602694][T21270] CPU: 1 UID: 0 PID: 21270 Comm: syz.1.4660 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 651.602725][T21270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 651.602738][T21270] Call Trace: [ 651.602747][T21270] [ 651.602757][T21270] dump_stack_lvl+0x189/0x250 [ 651.602794][T21270] ? __pfx____ratelimit+0x10/0x10 [ 651.602819][T21270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.602857][T21270] ? __pfx__printk+0x10/0x10 [ 651.602899][T21270] should_fail_ex+0x414/0x560 [ 651.602942][T21270] should_failslab+0xa8/0x100 [ 651.602966][T21270] __kmalloc_cache_noprof+0x70/0x3d0 [ 651.602984][T21270] ? sctp_add_bind_addr+0x8c/0x370 [ 651.603011][T21270] sctp_add_bind_addr+0x8c/0x370 [ 651.603038][T21270] sctp_copy_local_addr_list+0x30b/0x4e0 [ 651.603065][T21270] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 651.603088][T21270] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 651.603113][T21270] ? sctp_v6_is_any+0x64/0x80 [ 651.603139][T21270] ? sctp_copy_one_addr+0x93/0x360 [ 651.603165][T21270] sctp_bind_addr_copy+0xb3/0x3c0 [ 651.603189][T21270] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 651.603225][T21270] sctp_connect_new_asoc+0x2e0/0x690 [ 651.603256][T21270] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 651.603291][T21270] ? sctp_get_af_specific+0x29/0x80 [ 651.603312][T21270] ? sctp_inet6_send_verify+0x80/0x300 [ 651.603333][T21270] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 651.603364][T21270] __sctp_connect+0x5ba/0xd50 [ 651.603406][T21270] ? __pfx___sctp_connect+0x10/0x10 [ 651.603438][T21270] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 651.603464][T21270] ? security_sctp_bind_connect+0x7e/0x2e0 [ 651.603490][T21270] sctp_getsockopt_connectx3+0x2c4/0x440 [ 651.603517][T21270] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 651.603542][T21270] ? __local_bh_enable_ip+0x12d/0x1c0 [ 651.603570][T21270] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 651.603613][T21270] sctp_getsockopt+0x98a/0xb60 [ 651.603644][T21270] do_sock_getsockopt+0x35d/0x650 [ 651.603677][T21270] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 651.603707][T21270] ? do_syscall_64+0x80/0x3b0 [ 651.603730][T21270] ? __fget_files+0x3a0/0x420 [ 651.603750][T21270] ? __fget_files+0x2a/0x420 [ 651.603780][T21270] __x64_sys_getsockopt+0x1a5/0x250 [ 651.603808][T21270] ? do_syscall_64+0x80/0x3b0 [ 651.603833][T21270] ? do_syscall_64+0x80/0x3b0 [ 651.603867][T21270] do_syscall_64+0xfa/0x3b0 [ 651.603889][T21270] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.603911][T21270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.603930][T21270] ? clear_bhb_loop+0x60/0xb0 [ 651.603954][T21270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.603972][T21270] RIP: 0033:0x7f8c6e58e929 [ 651.603990][T21270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.604008][T21270] RSP: 002b:00007f8c6f3e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 651.604029][T21270] RAX: ffffffffffffffda RBX: 00007f8c6e7b5fa0 RCX: 00007f8c6e58e929 [ 651.604043][T21270] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 651.604055][T21270] RBP: 00007f8c6f3e3090 R08: 0000200000000240 R09: 0000000000000000 [ 651.604068][T21270] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 651.604081][T21270] R13: 0000000000000000 R14: 00007f8c6e7b5fa0 R15: 00007ffdbc036668 [ 651.604116][T21270] [ 651.772399][T21278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4658'. [ 651.959303][T21282] FAULT_INJECTION: forcing a failure. [ 651.959303][T21282] name failslab, interval 1, probability 0, space 0, times 0 [ 651.980933][T21278] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4658'. [ 651.993439][T21282] CPU: 1 UID: 0 PID: 21282 Comm: syz.0.4662 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 651.993468][T21282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 651.993482][T21282] Call Trace: [ 651.993490][T21282] [ 651.993500][T21282] dump_stack_lvl+0x189/0x250 [ 651.993538][T21282] ? __pfx____ratelimit+0x10/0x10 [ 651.993573][T21282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.993605][T21282] ? __pfx__printk+0x10/0x10 [ 651.993634][T21282] ? __pfx___might_resched+0x10/0x10 [ 651.993672][T21282] should_fail_ex+0x414/0x560 [ 651.993705][T21282] should_failslab+0xa8/0x100 [ 651.993730][T21282] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 651.993752][T21282] ? __alloc_skb+0x112/0x2d0 [ 651.993785][T21282] __alloc_skb+0x112/0x2d0 [ 651.993818][T21282] netlink_sendmsg+0x5c6/0xb30 [ 651.993857][T21282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.993889][T21282] ? aa_sock_msg_perm+0x94/0x160 [ 651.993918][T21282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 651.993944][T21282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.993972][T21282] __sock_sendmsg+0x219/0x270 [ 651.994010][T21282] ____sys_sendmsg+0x505/0x830 [ 651.994046][T21282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.994086][T21282] ? import_iovec+0x74/0xa0 [ 651.994110][T21282] ___sys_sendmsg+0x21f/0x2a0 [ 651.994142][T21282] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.994209][T21282] ? __fget_files+0x2a/0x420 [ 651.994229][T21282] ? __fget_files+0x3a0/0x420 [ 651.994261][T21282] __x64_sys_sendmsg+0x19b/0x260 [ 651.994293][T21282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 651.994331][T21282] ? __pfx_ksys_write+0x10/0x10 [ 651.994368][T21282] ? rcu_is_watching+0x15/0xb0 [ 651.994407][T21282] ? do_syscall_64+0xbe/0x3b0 [ 651.994438][T21282] do_syscall_64+0xfa/0x3b0 [ 651.994461][T21282] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.994486][T21282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.994506][T21282] ? clear_bhb_loop+0x60/0xb0 [ 651.994532][T21282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.994553][T21282] RIP: 0033:0x7fa2fef8e929 [ 651.994578][T21282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.994598][T21282] RSP: 002b:00007fa2ffeb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.994621][T21282] RAX: ffffffffffffffda RBX: 00007fa2ff1b5fa0 RCX: 00007fa2fef8e929 [ 651.994637][T21282] RDX: 0000000020000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 651.994650][T21282] RBP: 00007fa2ffeb4090 R08: 0000000000000000 R09: 0000000000000000 [ 651.994663][T21282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.994676][T21282] R13: 0000000000000000 R14: 00007fa2ff1b5fa0 R15: 00007fff5c8f93e8 [ 651.994712][T21282] [ 652.602202][T21305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4671'. [ 652.882696][T21312] lo speed is unknown, defaulting to 1000 [ 652.980866][T21319] FAULT_INJECTION: forcing a failure. [ 652.980866][T21319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.025781][T21319] CPU: 1 UID: 0 PID: 21319 Comm: syz.3.4675 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 653.025811][T21319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 653.025824][T21319] Call Trace: [ 653.025833][T21319] [ 653.025842][T21319] dump_stack_lvl+0x189/0x250 [ 653.025878][T21319] ? __pfx____ratelimit+0x10/0x10 [ 653.025902][T21319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.025932][T21319] ? __pfx__printk+0x10/0x10 [ 653.025970][T21319] should_fail_ex+0x414/0x560 [ 653.026002][T21319] _copy_to_user+0x31/0xb0 [ 653.026025][T21319] ipv6_flowlabel_opt+0x1fe6/0x23a0 [ 653.026072][T21319] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 653.026105][T21319] ? register_lock_class+0x51/0x320 [ 653.026140][T21319] ? __lock_acquire+0xab9/0xd20 [ 653.026182][T21319] ? __local_bh_enable_ip+0x12d/0x1c0 [ 653.026212][T21319] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.026236][T21319] ? __local_bh_enable_ip+0x12d/0x1c0 [ 653.026281][T21319] do_ipv6_setsockopt+0xe8a/0x2fb0 [ 653.026322][T21319] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 653.026352][T21319] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 653.026399][T21319] ? __pfx___might_resched+0x10/0x10 [ 653.026430][T21319] ? rcu_read_lock_any_held+0xb3/0x120 [ 653.026451][T21319] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 653.026480][T21319] ? vfs_write+0x8d8/0xa90 [ 653.026517][T21319] ? aa_sk_perm+0x81e/0x950 [ 653.026546][T21319] ? __pfx_aa_sk_perm+0x10/0x10 [ 653.026567][T21319] ? __lock_acquire+0xab9/0xd20 [ 653.026604][T21319] ipv6_setsockopt+0x59/0x170 [ 653.026621][T21319] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 653.026648][T21319] do_sock_setsockopt+0x25a/0x3e0 [ 653.026680][T21319] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 653.026714][T21319] ? __fget_files+0x2a/0x420 [ 653.026745][T21319] __x64_sys_setsockopt+0x18b/0x220 [ 653.026783][T21319] do_syscall_64+0xfa/0x3b0 [ 653.026805][T21319] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.026827][T21319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.026846][T21319] ? clear_bhb_loop+0x60/0xb0 [ 653.026870][T21319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.026887][T21319] RIP: 0033:0x7fb47658e929 [ 653.026905][T21319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.026922][T21319] RSP: 002b:00007fb47739d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 653.026942][T21319] RAX: ffffffffffffffda RBX: 00007fb4767b5fa0 RCX: 00007fb47658e929 [ 653.026956][T21319] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 653.026967][T21319] RBP: 00007fb47739d090 R08: 0000000000000020 R09: 0000000000000000 [ 653.026979][T21319] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 653.026992][T21319] R13: 0000000000000000 R14: 00007fb4767b5fa0 R15: 00007fffea816ef8 [ 653.027025][T21319] [ 653.410206][T21317] lo speed is unknown, defaulting to 1000 [ 653.564283][T21326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4678'. [ 653.625263][T21331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4672'. [ 653.880471][T21339] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4680'. [ 654.552518][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4692'. [ 655.461761][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4697'. [ 655.506754][T21394] lo speed is unknown, defaulting to 1000 [ 656.021656][T21405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4700'. [ 656.353298][T21412] lo speed is unknown, defaulting to 1000 [ 656.455279][T21419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4707'. [ 656.708303][T21429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4710'. [ 657.175988][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4716'. [ 657.247182][T21450] vlan0: entered promiscuous mode [ 657.252271][T21450] ip6gretap0: entered promiscuous mode [ 657.296591][T21448] lo speed is unknown, defaulting to 1000 [ 657.931720][T21482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4730'. [ 658.149408][T21489] FAULT_INJECTION: forcing a failure. [ 658.149408][T21489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.166710][T21489] CPU: 0 UID: 0 PID: 21489 Comm: syz.3.4732 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 658.166738][T21489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 658.166750][T21489] Call Trace: [ 658.166759][T21489] [ 658.166768][T21489] dump_stack_lvl+0x189/0x250 [ 658.166802][T21489] ? __pfx____ratelimit+0x10/0x10 [ 658.166827][T21489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.166856][T21489] ? __pfx__printk+0x10/0x10 [ 658.166892][T21489] should_fail_ex+0x414/0x560 [ 658.166922][T21489] _copy_to_user+0x31/0xb0 [ 658.166945][T21489] simple_read_from_buffer+0xe1/0x170 [ 658.166971][T21489] proc_fail_nth_read+0x1df/0x250 [ 658.166998][T21489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 658.167025][T21489] ? rw_verify_area+0x258/0x650 [ 658.167053][T21489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 658.167077][T21489] vfs_read+0x1fd/0x980 [ 658.167113][T21489] ? __pfx___mutex_lock+0x10/0x10 [ 658.167137][T21489] ? __pfx_vfs_read+0x10/0x10 [ 658.167166][T21489] ? __fget_files+0x2a/0x420 [ 658.167194][T21489] ? __fget_files+0x3a0/0x420 [ 658.167213][T21489] ? __fget_files+0x2a/0x420 [ 658.167251][T21489] ksys_read+0x145/0x250 [ 658.167272][T21489] ? __pfx_ksys_read+0x10/0x10 [ 658.167297][T21489] ? fput+0xa0/0xd0 [ 658.167325][T21489] ? do_syscall_64+0xbe/0x3b0 [ 658.167353][T21489] do_syscall_64+0xfa/0x3b0 [ 658.167374][T21489] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.167396][T21489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.167414][T21489] ? clear_bhb_loop+0x60/0xb0 [ 658.167437][T21489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.167455][T21489] RIP: 0033:0x7fb47658d33c [ 658.167472][T21489] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 658.167488][T21489] RSP: 002b:00007fb47739d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 658.167508][T21489] RAX: ffffffffffffffda RBX: 00007fb4767b5fa0 RCX: 00007fb47658d33c [ 658.167522][T21489] RDX: 000000000000000f RSI: 00007fb47739d0a0 RDI: 0000000000000003 [ 658.167534][T21489] RBP: 00007fb47739d090 R08: 0000000000000000 R09: 0000000000000000 [ 658.167547][T21489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.167559][T21489] R13: 0000000000000000 R14: 00007fb4767b5fa0 R15: 00007fffea816ef8 [ 658.167593][T21489] [ 658.514781][T21492] netlink: 'syz.3.4734': attribute type 4 has an invalid length. [ 658.539711][T21492] netlink: 'syz.3.4734': attribute type 10 has an invalid length. [ 658.567888][T21498] __nla_validate_parse: 2 callbacks suppressed [ 658.567906][T21498] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4735'. [ 658.595323][T21498] team0: Mode changed to "loadbalance" [ 658.663026][T21492] team0: Port device geneve1 added [ 658.926700][T21509] lo speed is unknown, defaulting to 1000 [ 659.367961][T21528] lo speed is unknown, defaulting to 1000 [ 659.617141][T21540] openvswitch: netlink: IP tunnel TTL not specified. [ 659.640938][T21541] lo speed is unknown, defaulting to 1000 [ 660.163530][T21554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4745'. [ 660.204285][T21553] lo speed is unknown, defaulting to 1000 [ 660.788715][T21578] FAULT_INJECTION: forcing a failure. [ 660.788715][T21578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.844692][T21578] CPU: 0 UID: 0 PID: 21578 Comm: syz.1.4762 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 660.844724][T21578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 660.844738][T21578] Call Trace: [ 660.844746][T21578] [ 660.844756][T21578] dump_stack_lvl+0x189/0x250 [ 660.844794][T21578] ? __pfx____ratelimit+0x10/0x10 [ 660.844819][T21578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.844851][T21578] ? __pfx__printk+0x10/0x10 [ 660.844891][T21578] should_fail_ex+0x414/0x560 [ 660.844924][T21578] _copy_to_user+0x31/0xb0 [ 660.844948][T21578] simple_read_from_buffer+0xe1/0x170 [ 660.844985][T21578] proc_fail_nth_read+0x1df/0x250 [ 660.845015][T21578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 660.845045][T21578] ? rw_verify_area+0x258/0x650 [ 660.845074][T21578] ? aa_sk_perm+0x81e/0x950 [ 660.845097][T21578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 660.845125][T21578] vfs_read+0x1fd/0x980 [ 660.845156][T21578] ? __pfx_aa_sk_perm+0x10/0x10 [ 660.845179][T21578] ? tomoyo_socket_bind_permission+0x150/0x290 [ 660.845216][T21578] ? __pfx_vfs_read+0x10/0x10 [ 660.845248][T21578] ? smc_bind+0x59/0x370 [ 660.845274][T21578] ? __sys_bind+0x2e9/0x3e0 [ 660.845303][T21578] ? __pfx___sys_bind+0x10/0x10 [ 660.845338][T21578] ksys_read+0x145/0x250 [ 660.845360][T21578] ? __pfx_ksys_read+0x10/0x10 [ 660.845389][T21578] ? rcu_is_watching+0x15/0xb0 [ 660.845429][T21578] ? do_syscall_64+0xbe/0x3b0 [ 660.845460][T21578] do_syscall_64+0xfa/0x3b0 [ 660.845484][T21578] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.845509][T21578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.845543][T21578] ? clear_bhb_loop+0x60/0xb0 [ 660.845567][T21578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.845587][T21578] RIP: 0033:0x7f8c6e58d33c [ 660.845617][T21578] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 660.845634][T21578] RSP: 002b:00007f8c6f3e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 660.845655][T21578] RAX: ffffffffffffffda RBX: 00007f8c6e7b5fa0 RCX: 00007f8c6e58d33c [ 660.845669][T21578] RDX: 000000000000000f RSI: 00007f8c6f3e30a0 RDI: 0000000000000004 [ 660.845681][T21578] RBP: 00007f8c6f3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 660.845692][T21578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.845703][T21578] R13: 0000000000000000 R14: 00007f8c6e7b5fa0 R15: 00007ffdbc036668 [ 660.845735][T21578] [ 661.301141][T21553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 661.708080][T21608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4773'. [ 661.810132][T21606] lo speed is unknown, defaulting to 1000 [ 661.903578][T21614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4773'. [ 662.484732][T21632] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4772'. [ 662.540661][T21645] netlink: 332 bytes leftover after parsing attributes in process `syz.6.4783'. [ 662.580976][T21645] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4783'. [ 662.615429][T21645] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4783'. [ 662.722726][T21645] lo speed is unknown, defaulting to 1000 [ 663.210258][T21660] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 663.429353][T21671] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4790'. [ 663.492677][T21675] netlink: 'syz.5.4793': attribute type 1 has an invalid length. [ 663.651569][T21676] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 663.793228][T21682] lo speed is unknown, defaulting to 1000 [ 663.793254][T21685] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 663.837601][T21685] FAULT_INJECTION: forcing a failure. [ 663.837601][T21685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.871355][T21685] CPU: 1 UID: 0 PID: 21685 Comm: syz.3.4796 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 663.871387][T21685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.871401][T21685] Call Trace: [ 663.871411][T21685] [ 663.871421][T21685] dump_stack_lvl+0x189/0x250 [ 663.871456][T21685] ? __pfx____ratelimit+0x10/0x10 [ 663.871482][T21685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.871515][T21685] ? __pfx__printk+0x10/0x10 [ 663.871567][T21685] should_fail_ex+0x414/0x560 [ 663.871601][T21685] _copy_to_user+0x31/0xb0 [ 663.871625][T21685] simple_read_from_buffer+0xe1/0x170 [ 663.871654][T21685] proc_fail_nth_read+0x1df/0x250 [ 663.871691][T21685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 663.871721][T21685] ? rw_verify_area+0x258/0x650 [ 663.871752][T21685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 663.871779][T21685] vfs_read+0x1fd/0x980 [ 663.871817][T21685] ? __pfx___mutex_lock+0x10/0x10 [ 663.871845][T21685] ? __pfx_vfs_read+0x10/0x10 [ 663.871879][T21685] ? __fget_files+0x2a/0x420 [ 663.871909][T21685] ? __fget_files+0x3a0/0x420 [ 663.871930][T21685] ? __fget_files+0x2a/0x420 [ 663.871964][T21685] ksys_read+0x145/0x250 [ 663.871986][T21685] ? __pfx_ksys_read+0x10/0x10 [ 663.872014][T21685] ? rcu_is_watching+0x15/0xb0 [ 663.872052][T21685] ? do_syscall_64+0xbe/0x3b0 [ 663.872082][T21685] do_syscall_64+0xfa/0x3b0 [ 663.872106][T21685] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.872129][T21685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.872149][T21685] ? clear_bhb_loop+0x60/0xb0 [ 663.872175][T21685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.872195][T21685] RIP: 0033:0x7fb47658d33c [ 663.872213][T21685] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 663.872231][T21685] RSP: 002b:00007fb47739d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 663.872254][T21685] RAX: ffffffffffffffda RBX: 00007fb4767b5fa0 RCX: 00007fb47658d33c [ 663.872269][T21685] RDX: 000000000000000f RSI: 00007fb47739d0a0 RDI: 0000000000000004 [ 663.872282][T21685] RBP: 00007fb47739d090 R08: 0000000000000000 R09: 0000000000000000 [ 663.872295][T21685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.872308][T21685] R13: 0000000000000000 R14: 00007fb4767b5fa0 R15: 00007fffea816ef8 [ 663.872344][T21685] [ 664.873557][T21702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4795'. [ 664.953620][T21709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4805'. [ 665.427596][T21722] vlan3: entered promiscuous mode [ 665.451434][T21722] vlan2: entered promiscuous mode [ 665.480703][T21722] erspan0: entered promiscuous mode [ 665.572637][T21730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4813'. [ 665.854149][T21741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4818'. [ 665.966852][T21742] syzkaller0: entered promiscuous mode [ 665.984926][T21742] syzkaller0: entered allmulticast mode [ 666.060064][T21749] lo speed is unknown, defaulting to 1000 [ 666.501794][T21757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4822'. [ 666.517912][T21757] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4822'. [ 666.539021][T21754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4820'. [ 666.935188][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4825'. [ 667.176531][T21779] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4829'. [ 667.242892][T21782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4830'. [ 668.960640][T21796] lo speed is unknown, defaulting to 1000 [ 668.960787][T21799] FAULT_INJECTION: forcing a failure. [ 668.960787][T21799] name failslab, interval 1, probability 0, space 0, times 0 [ 669.000872][T21799] CPU: 0 UID: 0 PID: 21799 Comm: syz.5.4834 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 669.000916][T21799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 669.000927][T21799] Call Trace: [ 669.000936][T21799] [ 669.000945][T21799] dump_stack_lvl+0x189/0x250 [ 669.000981][T21799] ? __pfx____ratelimit+0x10/0x10 [ 669.001004][T21799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.001033][T21799] ? __pfx__printk+0x10/0x10 [ 669.001067][T21799] should_fail_ex+0x414/0x560 [ 669.001097][T21799] should_failslab+0xa8/0x100 [ 669.001120][T21799] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 669.001139][T21799] ? __alloc_skb+0x112/0x2d0 [ 669.001169][T21799] __alloc_skb+0x112/0x2d0 [ 669.001211][T21799] _sctp_make_chunk+0x5e/0x430 [ 669.001241][T21799] sctp_make_init+0x58b/0xd30 [ 669.001277][T21799] ? __pfx_sctp_make_init+0x10/0x10 [ 669.001299][T21799] ? arch_stack_walk+0xfc/0x150 [ 669.001333][T21799] ? stack_trace_save+0x9c/0xe0 [ 669.001357][T21799] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 669.001390][T21799] sctp_do_sm+0x1e7/0x5a20 [ 669.001407][T21799] ? __pfx_sctp_pname+0x10/0x10 [ 669.001427][T21799] ? kasan_save_track+0x3e/0x80 [ 669.001454][T21799] ? sctp_stream_init_ext+0x57/0x180 [ 669.001471][T21799] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 669.001495][T21799] ? sctp_sendmsg+0x1941/0x2810 [ 669.001517][T21799] ? __sock_sendmsg+0x19c/0x270 [ 669.001535][T21799] ? __sys_sendto+0x3bd/0x520 [ 669.001558][T21799] ? do_syscall_64+0xfa/0x3b0 [ 669.001580][T21799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.001602][T21799] ? __pfx_sctp_do_sm+0x10/0x10 [ 669.001668][T21799] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 669.001710][T21799] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 669.001741][T21799] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 669.001764][T21799] ? __asan_memcpy+0x40/0x70 [ 669.001796][T21799] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 669.001838][T21799] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 669.001863][T21799] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 669.001890][T21799] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 669.001914][T21799] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 669.001937][T21799] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 669.001964][T21799] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 669.001989][T21799] ? security_sctp_bind_connect+0x7e/0x2e0 [ 669.002012][T21799] sctp_sendmsg+0x1941/0x2810 [ 669.002051][T21799] ? __pfx_sctp_sendmsg+0x10/0x10 [ 669.002079][T21799] ? aa_sk_perm+0x81e/0x950 [ 669.002105][T21799] ? __pfx_aa_sk_perm+0x10/0x10 [ 669.002129][T21799] ? sock_rps_record_flow+0x19/0x410 [ 669.002153][T21799] ? inet_sendmsg+0x2f4/0x370 [ 669.002170][T21799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 669.002204][T21799] __sock_sendmsg+0x19c/0x270 [ 669.002229][T21799] __sys_sendto+0x3bd/0x520 [ 669.002256][T21799] ? __pfx___sys_sendto+0x10/0x10 [ 669.002276][T21799] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 669.002313][T21799] ? __fget_files+0x3a0/0x420 [ 669.002346][T21799] ? ksys_write+0x22a/0x250 [ 669.002365][T21799] ? __pfx_ksys_write+0x10/0x10 [ 669.002379][T21799] ? rcu_is_watching+0x15/0xb0 [ 669.002412][T21799] __x64_sys_sendto+0xde/0x100 [ 669.002440][T21799] do_syscall_64+0xfa/0x3b0 [ 669.002461][T21799] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.002481][T21799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.002499][T21799] ? clear_bhb_loop+0x60/0xb0 [ 669.002521][T21799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.002538][T21799] RIP: 0033:0x7f710378e929 [ 669.002556][T21799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.002571][T21799] RSP: 002b:00007f7104580038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 669.002590][T21799] RAX: ffffffffffffffda RBX: 00007f71039b6080 RCX: 00007f710378e929 [ 669.002603][T21799] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000006 [ 669.002614][T21799] RBP: 00007f7104580090 R08: 000020000005ffe4 R09: 000000000000001c [ 669.002626][T21799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.002637][T21799] R13: 0000000000000000 R14: 00007f71039b6080 R15: 00007ffcf56451b8 [ 669.002668][T21799] [ 669.629229][T21806] lo speed is unknown, defaulting to 1000 [ 670.082075][T21838] FAULT_INJECTION: forcing a failure. [ 670.082075][T21838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.100760][T21841] __nla_validate_parse: 4 callbacks suppressed [ 670.100777][T21841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4839'. [ 670.123548][T21838] CPU: 1 UID: 0 PID: 21838 Comm: syz.5.4850 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 670.123576][T21838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 670.123588][T21838] Call Trace: [ 670.123596][T21838] [ 670.123605][T21838] dump_stack_lvl+0x189/0x250 [ 670.123639][T21838] ? __pfx____ratelimit+0x10/0x10 [ 670.123663][T21838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.123692][T21838] ? __pfx__printk+0x10/0x10 [ 670.123717][T21838] ? 0xffffffffa0201718 [ 670.123744][T21838] should_fail_ex+0x414/0x560 [ 670.123775][T21838] _copy_to_user+0x31/0xb0 [ 670.123797][T21838] bpf_test_finish+0x1ab/0x700 [ 670.123839][T21838] ? __pfx_bpf_test_finish+0x10/0x10 [ 670.123869][T21838] ? rep_movs_alternative+0x4a/0x90 [ 670.123904][T21838] bpf_prog_test_run_xdp+0x79a/0x1000 [ 670.123947][T21838] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 670.123978][T21838] ? __fget_files+0x2a/0x420 [ 670.124006][T21838] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 670.124031][T21838] bpf_prog_test_run+0x2c4/0x340 [ 670.124064][T21838] __sys_bpf+0x4a4/0x860 [ 670.124091][T21838] ? __pfx___sys_bpf+0x10/0x10 [ 670.124132][T21838] ? ksys_write+0x22a/0x250 [ 670.124153][T21838] ? __pfx_ksys_write+0x10/0x10 [ 670.124168][T21838] ? rcu_is_watching+0x15/0xb0 [ 670.124205][T21838] __x64_sys_bpf+0x7c/0x90 [ 670.124236][T21838] do_syscall_64+0xfa/0x3b0 [ 670.124258][T21838] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.124281][T21838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.124299][T21838] ? clear_bhb_loop+0x60/0xb0 [ 670.124331][T21838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.124367][T21838] RIP: 0033:0x7f710378e929 [ 670.124386][T21838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.124405][T21838] RSP: 002b:00007f71045a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 670.124427][T21838] RAX: ffffffffffffffda RBX: 00007f71039b5fa0 RCX: 00007f710378e929 [ 670.124443][T21838] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 670.124456][T21838] RBP: 00007f71045a1090 R08: 0000000000000000 R09: 0000000000000000 [ 670.124468][T21838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.124481][T21838] R13: 0000000000000000 R14: 00007f71039b5fa0 R15: 00007ffcf56451b8 [ 670.124518][T21838] [ 670.365387][T21844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4851'. [ 670.561550][T21854] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4853'. [ 670.622305][T21857] syzkaller1: entered promiscuous mode [ 670.632344][T21857] syzkaller1: entered allmulticast mode [ 670.758299][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4856'. [ 671.090975][T21877] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 671.109829][T21878] netlink: 'syz.0.4862': attribute type 10 has an invalid length. [ 671.128437][T21878] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 671.303625][T21889] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4868'. [ 671.485736][T21897] lo speed is unknown, defaulting to 1000 [ 671.543591][T21899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4873'. [ 671.842745][T21916] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 672.041159][T21926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4880'. [ 672.106553][T21922] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4872'. [ 672.297052][T21930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4880'. [ 672.375117][T21937] netlink: 'syz.5.4882': attribute type 10 has an invalid length. [ 672.448244][T21937] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 672.663269][T21948] FAULT_INJECTION: forcing a failure. [ 672.663269][T21948] name failslab, interval 1, probability 0, space 0, times 0 [ 672.735250][T21948] CPU: 0 UID: 0 PID: 21948 Comm: syz.5.4885 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 672.735279][T21948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 672.735292][T21948] Call Trace: [ 672.735300][T21948] [ 672.735310][T21948] dump_stack_lvl+0x189/0x250 [ 672.735345][T21948] ? __pfx____ratelimit+0x10/0x10 [ 672.735369][T21948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 672.735399][T21948] ? __pfx__printk+0x10/0x10 [ 672.735428][T21948] ? __pfx___might_resched+0x10/0x10 [ 672.735463][T21948] should_fail_ex+0x414/0x560 [ 672.735495][T21948] should_failslab+0xa8/0x100 [ 672.735518][T21948] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 672.735538][T21948] ? __alloc_skb+0x112/0x2d0 [ 672.735581][T21948] __alloc_skb+0x112/0x2d0 [ 672.735613][T21948] netlink_sendmsg+0x5c6/0xb30 [ 672.735659][T21948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.735686][T21948] ? aa_sock_msg_perm+0x94/0x160 [ 672.735711][T21948] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.735734][T21948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.735758][T21948] __sock_sendmsg+0x219/0x270 [ 672.735782][T21948] ____sys_sendmsg+0x505/0x830 [ 672.735815][T21948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.735859][T21948] ? import_iovec+0x74/0xa0 [ 672.735881][T21948] ___sys_sendmsg+0x21f/0x2a0 [ 672.735910][T21948] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.735976][T21948] ? __fget_files+0x2a/0x420 [ 672.735995][T21948] ? __fget_files+0x3a0/0x420 [ 672.736026][T21948] __x64_sys_sendmsg+0x19b/0x260 [ 672.736056][T21948] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.736093][T21948] ? __pfx_ksys_write+0x10/0x10 [ 672.736107][T21948] ? rcu_is_watching+0x15/0xb0 [ 672.736140][T21948] ? do_syscall_64+0xbe/0x3b0 [ 672.736167][T21948] do_syscall_64+0xfa/0x3b0 [ 672.736187][T21948] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.736208][T21948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.736226][T21948] ? clear_bhb_loop+0x60/0xb0 [ 672.736248][T21948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.736265][T21948] RIP: 0033:0x7f710378e929 [ 672.736287][T21948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.736302][T21948] RSP: 002b:00007f71045a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.736321][T21948] RAX: ffffffffffffffda RBX: 00007f71039b5fa0 RCX: 00007f710378e929 [ 672.736334][T21948] RDX: 000000003000c81c RSI: 0000200000000340 RDI: 0000000000000004 [ 672.736345][T21948] RBP: 00007f71045a1090 R08: 0000000000000000 R09: 0000000000000000 [ 672.736356][T21948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.736367][T21948] R13: 0000000000000000 R14: 00007f71039b5fa0 R15: 00007ffcf56451b8 [ 672.736397][T21948] [ 673.374146][T21964] lo speed is unknown, defaulting to 1000 [ 673.461147][T21975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4897'. [ 674.065633][T21989] lo speed is unknown, defaulting to 1000 [ 675.214580][T22010] __nla_validate_parse: 6 callbacks suppressed [ 675.214599][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4909'. [ 675.519643][T22024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4915'. [ 675.688259][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'. [ 675.708038][T22033] lo speed is unknown, defaulting to 1000 [ 675.717110][T22035] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 675.727025][T22035] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 675.747678][T22035] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 675.928642][T22042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4921'. [ 676.274948][T22057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4928'. [ 676.320689][T22057] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 676.504674][T22058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4919'. [ 676.629658][T22072] x_tables: duplicate underflow at hook 1 [ 677.012893][T22087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4938'. [ 677.215144][T22093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4938'. [ 677.362160][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4940'. [ 677.368276][T22097] netlink: 'syz.5.4941': attribute type 2 has an invalid length. [ 677.399818][T22097] netlink: 'syz.5.4941': attribute type 2 has an invalid length. [ 677.399836][T22096] bridge_slave_1 (unregistering): left allmulticast mode [ 677.407797][T22097] netlink: 'syz.5.4941': attribute type 2 has an invalid length. [ 677.416289][T22096] bridge_slave_1 (unregistering): left promiscuous mode [ 677.450654][T22096] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.542880][T22097] lo speed is unknown, defaulting to 1000 [ 677.744812][T22109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.071442][T22121] lo speed is unknown, defaulting to 1000 [ 678.201781][T22128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.330916][T22123] lo speed is unknown, defaulting to 1000 [ 678.385026][T22129] netlink: 'syz.3.4949': attribute type 1 has an invalid length. [ 678.407511][T22129] netlink: 'syz.3.4949': attribute type 1 has an invalid length. [ 678.488359][T22133] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4952'. [ 679.230747][T22149] netlink: 'syz.1.4957': attribute type 30 has an invalid length. [ 679.268799][T22152] netlink: 'syz.3.4958': attribute type 2 has an invalid length. [ 679.302018][T22152] netlink: 'syz.3.4958': attribute type 2 has an invalid length. [ 679.332249][T22152] netlink: 'syz.3.4958': attribute type 2 has an invalid length. [ 679.954162][T22175] lo speed is unknown, defaulting to 1000 [ 680.273241][T22197] __nla_validate_parse: 2 callbacks suppressed [ 680.273261][T22197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4973'. [ 680.535093][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4978'. [ 680.617762][T22207] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4967'. [ 680.957673][T22220] openvswitch: netlink: Duplicate or invalid key (type 0). [ 681.012729][T22220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.092490][T22219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4982'. [ 681.771735][T22247] lo speed is unknown, defaulting to 1000 [ 682.041701][T22261] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5000'. [ 682.231003][T22266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5002'. [ 682.407648][T22269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4994'. [ 682.620125][ T5155] Bluetooth: hci5: command 0x0406 tx timeout [ 682.712043][T22284] netlink: 'syz.5.5005': attribute type 11 has an invalid length. [ 682.779593][T22291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5008'. [ 682.998811][T22299] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5012'. [ 683.286923][T22315] x_tables: duplicate underflow at hook 4 [ 683.509773][T22331] FAULT_INJECTION: forcing a failure. [ 683.509773][T22331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.664929][T22331] CPU: 1 UID: 0 PID: 22331 Comm: syz.1.5024 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 683.664960][T22331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 683.664974][T22331] Call Trace: [ 683.664983][T22331] [ 683.664993][T22331] dump_stack_lvl+0x189/0x250 [ 683.665032][T22331] ? __pfx____ratelimit+0x10/0x10 [ 683.665057][T22331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.665090][T22331] ? __pfx__printk+0x10/0x10 [ 683.665114][T22331] ? __might_fault+0xb0/0x130 [ 683.665149][T22331] should_fail_ex+0x414/0x560 [ 683.665183][T22331] _copy_from_user+0x2d/0xb0 [ 683.665206][T22331] __sys_bpf+0x1ed/0x860 [ 683.665238][T22331] ? __pfx___sys_bpf+0x10/0x10 [ 683.665283][T22331] ? ksys_write+0x22a/0x250 [ 683.665307][T22331] ? __pfx_ksys_write+0x10/0x10 [ 683.665324][T22331] ? rcu_is_watching+0x15/0xb0 [ 683.665366][T22331] __x64_sys_bpf+0x7c/0x90 [ 683.665392][T22331] do_syscall_64+0xfa/0x3b0 [ 683.665416][T22331] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.665441][T22331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.665462][T22331] ? clear_bhb_loop+0x60/0xb0 [ 683.665489][T22331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.665510][T22331] RIP: 0033:0x7f8c6e58e929 [ 683.665529][T22331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.665559][T22331] RSP: 002b:00007f8c6f3e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 683.665590][T22331] RAX: ffffffffffffffda RBX: 00007f8c6e7b5fa0 RCX: 00007f8c6e58e929 [ 683.665605][T22331] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 683.665619][T22331] RBP: 00007f8c6f3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 683.665632][T22331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.665645][T22331] R13: 0000000000000000 R14: 00007f8c6e7b5fa0 R15: 00007ffdbc036668 [ 683.665681][T22331] [ 683.923401][T22340] netlink: 'syz.1.5028': attribute type 1 has an invalid length. [ 683.947161][T22340] netlink: 'syz.1.5028': attribute type 2 has an invalid length. [ 683.963472][T22340] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.5028'. [ 684.399635][T22361] tipc: Started in network mode [ 684.420311][T22361] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 684.442932][T22361] tipc: Enabled bearer , priority 10 [ 684.512824][T22367] netlink: 'syz.3.5035': attribute type 1 has an invalid length. [ 684.533133][T22367] netlink: 'syz.3.5035': attribute type 4 has an invalid length. [ 684.587504][T22373] xt_hashlimit: max too large, truncated to 1048576 [ 684.598605][T22373] No such timeout policy "syz1" [ 684.634993][T22374] tipc: Enabling of bearer rejected, already enabled [ 684.889372][T22392] netlink: 'syz.1.5044': attribute type 21 has an invalid length. [ 684.897588][T22392] netlink: 'syz.1.5044': attribute type 1 has an invalid length. [ 685.126733][T22406] netlink: 'syz.3.5050': attribute type 5 has an invalid length. [ 685.210728][T22409] lo speed is unknown, defaulting to 1000 [ 685.268205][T22405] tc_dump_action: action bad kind [ 685.309212][T22417] __nla_validate_parse: 7 callbacks suppressed [ 685.309230][T22417] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5052'. [ 685.556092][T16009] tipc: Node number set to 1 [ 685.749936][T22430] lo speed is unknown, defaulting to 1000 [ 686.171981][T22454] lo speed is unknown, defaulting to 1000 [ 686.177067][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5064'. [ 686.796220][T22469] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5063'. [ 687.069433][T22487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5072'. [ 687.417011][T22496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5075'. [ 687.622941][T22506] FAULT_INJECTION: forcing a failure. [ 687.622941][T22506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.643141][T22506] CPU: 0 UID: 0 PID: 22506 Comm: syz.3.5079 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 687.643168][T22506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 687.643181][T22506] Call Trace: [ 687.643190][T22506] [ 687.643198][T22506] dump_stack_lvl+0x189/0x250 [ 687.643233][T22506] ? __pfx____ratelimit+0x10/0x10 [ 687.643256][T22506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.643286][T22506] ? __pfx__printk+0x10/0x10 [ 687.643321][T22506] should_fail_ex+0x414/0x560 [ 687.643353][T22506] _copy_to_user+0x31/0xb0 [ 687.643376][T22506] simple_read_from_buffer+0xe1/0x170 [ 687.643402][T22506] proc_fail_nth_read+0x1df/0x250 [ 687.643430][T22506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 687.643456][T22506] ? rw_verify_area+0x258/0x650 [ 687.643499][T22506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 687.643524][T22506] vfs_read+0x1fd/0x980 [ 687.643560][T22506] ? __pfx___mutex_lock+0x10/0x10 [ 687.643586][T22506] ? __pfx_vfs_read+0x10/0x10 [ 687.643617][T22506] ? __fget_files+0x2a/0x420 [ 687.643644][T22506] ? __fget_files+0x3a0/0x420 [ 687.643664][T22506] ? __fget_files+0x2a/0x420 [ 687.643696][T22506] ksys_read+0x145/0x250 [ 687.643711][T22506] ? __fget_files+0x2a/0x420 [ 687.643735][T22506] ? __pfx_ksys_read+0x10/0x10 [ 687.643770][T22506] ? do_syscall_64+0xbe/0x3b0 [ 687.643805][T22506] do_syscall_64+0xfa/0x3b0 [ 687.643827][T22506] ? lockdep_hardirqs_on+0x9c/0x150 [ 687.643850][T22506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.643869][T22506] ? clear_bhb_loop+0x60/0xb0 [ 687.643894][T22506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.643914][T22506] RIP: 0033:0x7fb47658d33c [ 687.643931][T22506] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 687.643948][T22506] RSP: 002b:00007fb47739d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 687.643968][T22506] RAX: ffffffffffffffda RBX: 00007fb4767b5fa0 RCX: 00007fb47658d33c [ 687.643983][T22506] RDX: 000000000000000f RSI: 00007fb47739d0a0 RDI: 0000000000000004 [ 687.643995][T22506] RBP: 00007fb47739d090 R08: 0000000000000000 R09: 0000000000000000 [ 687.644008][T22506] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 687.644020][T22506] R13: 0000000000000000 R14: 00007fb4767b5fa0 R15: 00007fffea816ef8 [ 687.644054][T22506] [ 687.652982][T22507] x_tables: duplicate underflow at hook 3 [ 687.749277][T22511] netlink: 'syz.0.5080': attribute type 10 has an invalid length. [ 687.819102][T22509] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.5080'. [ 688.074561][T22519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5083'. [ 688.091900][T22521] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5084'. [ 688.258374][T22529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5084'. [ 688.513539][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5087'. [ 688.760129][T22546] FAULT_INJECTION: forcing a failure. [ 688.760129][T22546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 688.807820][T22546] CPU: 1 UID: 0 PID: 22546 Comm: syz.6.5092 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 688.807851][T22546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 688.807864][T22546] Call Trace: [ 688.807872][T22546] [ 688.807881][T22546] dump_stack_lvl+0x189/0x250 [ 688.807915][T22546] ? __pfx____ratelimit+0x10/0x10 [ 688.807938][T22546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.807968][T22546] ? __pfx__printk+0x10/0x10 [ 688.807991][T22546] ? fs_reclaim_acquire+0x7d/0x100 [ 688.808023][T22546] should_fail_ex+0x414/0x560 [ 688.808054][T22546] prepare_alloc_pages+0x213/0x610 [ 688.808086][T22546] __alloc_frozen_pages_noprof+0x123/0x370 [ 688.808116][T22546] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 688.808152][T22546] ? policy_nodemask+0x27c/0x720 [ 688.808187][T22546] ? __lock_acquire+0xab9/0xd20 [ 688.808222][T22546] alloc_pages_mpol+0x232/0x4a0 [ 688.808251][T22546] vma_alloc_folio_noprof+0xe4/0x200 [ 688.808274][T22546] ? page_table_check_set+0x18d/0x730 [ 688.808297][T22546] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 688.808343][T22546] folio_prealloc+0x30/0x180 [ 688.808368][T22546] __handle_mm_fault+0x2c88/0x5620 [ 688.808423][T22546] ? __pfx___handle_mm_fault+0x10/0x10 [ 688.808472][T22546] ? follow_page_pte+0x8d6/0x14b0 [ 688.808516][T22546] handle_mm_fault+0x40a/0x8e0 [ 688.808571][T22546] __get_user_pages+0x1af4/0x30b0 [ 688.808640][T22546] ? __pfx___get_user_pages+0x10/0x10 [ 688.808667][T22546] ? __gup_longterm_locked+0x309/0x15b0 [ 688.808695][T22546] ? down_read_killable+0x1d1/0x350 [ 688.808720][T22546] ? try_get_folio+0x633/0x660 [ 688.808742][T22546] __gup_longterm_locked+0x3e3/0x15b0 [ 688.808800][T22546] gup_fast_fallback+0x1cd4/0x2260 [ 688.808871][T22546] ? __pfx_gup_fast_fallback+0x10/0x10 [ 688.808907][T22546] ? rcu_is_watching+0x15/0xb0 [ 688.808938][T22546] ? is_valid_gup_args+0x11f/0x200 [ 688.808966][T22546] ? pin_user_pages_fast+0x4d/0xb0 [ 688.808993][T22546] rds_cmsg_rdma_args+0x8f4/0x1240 [ 688.809047][T22546] rds_cmsg_send+0x33d/0x5c0 [ 688.809089][T22546] rds_sendmsg+0x1129/0x1f00 [ 688.809131][T22546] ? __pfx_rds_sendmsg+0x10/0x10 [ 688.809153][T22546] ? aa_sk_perm+0x81e/0x950 [ 688.809182][T22546] ? __pfx_aa_sk_perm+0x10/0x10 [ 688.809203][T22546] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 688.809239][T22546] ? aa_sock_msg_perm+0x94/0x160 [ 688.809267][T22546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 688.809291][T22546] ? __pfx_rds_sendmsg+0x10/0x10 [ 688.809324][T22546] __sock_sendmsg+0x219/0x270 [ 688.809351][T22546] ____sys_sendmsg+0x505/0x830 [ 688.809387][T22546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.809427][T22546] ? import_iovec+0x74/0xa0 [ 688.809452][T22546] ___sys_sendmsg+0x21f/0x2a0 [ 688.809484][T22546] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.809556][T22546] ? __fget_files+0x2a/0x420 [ 688.809577][T22546] ? __fget_files+0x3a0/0x420 [ 688.809611][T22546] __x64_sys_sendmsg+0x19b/0x260 [ 688.809643][T22546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 688.809684][T22546] ? __pfx_ksys_write+0x10/0x10 [ 688.809700][T22546] ? rcu_is_watching+0x15/0xb0 [ 688.809736][T22546] ? do_syscall_64+0xbe/0x3b0 [ 688.809765][T22546] do_syscall_64+0xfa/0x3b0 [ 688.809787][T22546] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.809810][T22546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.809829][T22546] ? clear_bhb_loop+0x60/0xb0 [ 688.809853][T22546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.809872][T22546] RIP: 0033:0x7f6c2438e929 [ 688.809890][T22546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.809907][T22546] RSP: 002b:00007f6c251df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.809928][T22546] RAX: ffffffffffffffda RBX: 00007f6c245b5fa0 RCX: 00007f6c2438e929 [ 688.809942][T22546] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000006 [ 688.809954][T22546] RBP: 00007f6c251df090 R08: 0000000000000000 R09: 0000000000000000 [ 688.809966][T22546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 688.809978][T22546] R13: 0000000000000000 R14: 00007f6c245b5fa0 R15: 00007ffc88519098 [ 688.810012][T22546] [ 689.710813][T22571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.831994][T22580] lo speed is unknown, defaulting to 1000 [ 689.974202][T22592] lo speed is unknown, defaulting to 1000 [ 690.095596][T22600] pimreg: left allmulticast mode [ 690.530525][T22578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.602760][T22619] team0: No ports can be present during mode change [ 690.962487][ T65] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.979857][ T65] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.994226][T12636] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.014546][T12636] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.031968][T22649] lo speed is unknown, defaulting to 1000 [ 691.051417][T22651] vlan0: entered promiscuous mode [ 691.350587][T22654] lo speed is unknown, defaulting to 1000 [ 691.601765][T22667] netlink: 'syz.0.5135': attribute type 1 has an invalid length. [ 691.643888][T22667] __nla_validate_parse: 4 callbacks suppressed [ 691.643906][T22667] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5135'. [ 691.822572][T22654] FAULT_INJECTION: forcing a failure. [ 691.822572][T22654] name failslab, interval 1, probability 0, space 0, times 0 [ 691.864474][T22654] CPU: 0 UID: 0 PID: 22654 Comm: syz.3.5130 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 691.864505][T22654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.864518][T22654] Call Trace: [ 691.864527][T22654] [ 691.864536][T22654] dump_stack_lvl+0x189/0x250 [ 691.864574][T22654] ? __pfx____ratelimit+0x10/0x10 [ 691.864600][T22654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.864633][T22654] ? __pfx__printk+0x10/0x10 [ 691.864664][T22654] ? __pfx___might_resched+0x10/0x10 [ 691.864702][T22654] should_fail_ex+0x414/0x560 [ 691.864735][T22654] should_failslab+0xa8/0x100 [ 691.864765][T22654] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 691.864795][T22654] ? __alloc_skb+0x112/0x2d0 [ 691.864830][T22654] __alloc_skb+0x112/0x2d0 [ 691.864863][T22654] netlink_sendmsg+0x5c6/0xb30 [ 691.864902][T22654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.864935][T22654] ? aa_sock_msg_perm+0x94/0x160 [ 691.864964][T22654] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 691.864991][T22654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.865019][T22654] __sock_sendmsg+0x219/0x270 [ 691.865047][T22654] ____sys_sendmsg+0x505/0x830 [ 691.865085][T22654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 691.865129][T22654] ? import_iovec+0x74/0xa0 [ 691.865155][T22654] ___sys_sendmsg+0x21f/0x2a0 [ 691.865189][T22654] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.865266][T22654] ? __fget_files+0x2a/0x420 [ 691.865289][T22654] ? __fget_files+0x3a0/0x420 [ 691.865325][T22654] __x64_sys_sendmsg+0x19b/0x260 [ 691.865360][T22654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 691.865403][T22654] ? __pfx_ksys_write+0x10/0x10 [ 691.865420][T22654] ? rcu_is_watching+0x15/0xb0 [ 691.865459][T22654] ? do_syscall_64+0xbe/0x3b0 [ 691.865490][T22654] do_syscall_64+0xfa/0x3b0 [ 691.865525][T22654] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.865549][T22654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.865568][T22654] ? clear_bhb_loop+0x60/0xb0 [ 691.865593][T22654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.865613][T22654] RIP: 0033:0x7fb47658e929 [ 691.865641][T22654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.865659][T22654] RSP: 002b:00007fb47739d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.865679][T22654] RAX: ffffffffffffffda RBX: 00007fb4767b5fa0 RCX: 00007fb47658e929 [ 691.865693][T22654] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000014 [ 691.865705][T22654] RBP: 00007fb47739d090 R08: 0000000000000000 R09: 0000000000000000 [ 691.865717][T22654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.865728][T22654] R13: 0000000000000000 R14: 00007fb4767b5fa0 R15: 00007fffea816ef8 [ 691.865761][T22654] [ 692.188261][T22649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.547416][T22688] geneve0: entered promiscuous mode [ 692.659550][T22686] lo speed is unknown, defaulting to 1000 [ 692.831617][T22705] sctp: [Deprecated]: syz.0.5148 (pid 22705) Use of int in max_burst socket option. [ 692.831617][T22705] Use struct sctp_assoc_value instead [ 692.863671][T22705] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5148'. [ 692.874129][T22705] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5148'. [ 692.884661][T22707] sit0: entered promiscuous mode [ 692.899530][T22707] netlink: 'syz.3.5146': attribute type 1 has an invalid length. [ 692.930808][T22707] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5146'. [ 692.954953][T22713] FAULT_INJECTION: forcing a failure. [ 692.954953][T22713] name failslab, interval 1, probability 0, space 0, times 0 [ 692.967966][T22713] CPU: 0 UID: 0 PID: 22713 Comm: syz.6.5153 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 692.967993][T22713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 692.968006][T22713] Call Trace: [ 692.968015][T22713] [ 692.968023][T22713] dump_stack_lvl+0x189/0x250 [ 692.968062][T22713] ? __pfx____ratelimit+0x10/0x10 [ 692.968088][T22713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.968121][T22713] ? __pfx__printk+0x10/0x10 [ 692.968151][T22713] ? __pfx___might_resched+0x10/0x10 [ 692.968201][T22713] should_fail_ex+0x414/0x560 [ 692.968233][T22713] should_failslab+0xa8/0x100 [ 692.968256][T22713] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 692.968276][T22713] ? __alloc_skb+0x112/0x2d0 [ 692.968308][T22713] __alloc_skb+0x112/0x2d0 [ 692.968339][T22713] netlink_dump+0x22b/0xe20 [ 692.968378][T22713] ? __pfx_netlink_dump+0x10/0x10 [ 692.968419][T22713] ? genl_start+0x499/0x6c0 [ 692.968446][T22713] __netlink_dump_start+0x5cb/0x7e0 [ 692.968481][T22713] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 692.968505][T22713] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 692.968523][T22713] ? genl_get_cmd+0x67f/0x910 [ 692.968555][T22713] ? __pfx___mutex_lock+0x10/0x10 [ 692.968580][T22713] ? __pfx_genl_start+0x10/0x10 [ 692.968596][T22713] ? __pfx_genl_dumpit+0x10/0x10 [ 692.968611][T22713] ? __pfx_genl_done+0x10/0x10 [ 692.968647][T22713] genl_rcv_msg+0x5da/0x790 [ 692.968674][T22713] ? __pfx_genl_rcv_msg+0x10/0x10 [ 692.968698][T22713] ? __pfx_smcr_nl_get_device+0x10/0x10 [ 692.968746][T22713] netlink_rcv_skb+0x205/0x470 [ 692.968772][T22713] ? __pfx_genl_rcv_msg+0x10/0x10 [ 692.968792][T22713] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 692.968838][T22713] ? down_read+0x1ad/0x2e0 [ 692.968873][T22713] genl_rcv+0x28/0x40 [ 692.968901][T22713] netlink_unicast+0x758/0x8d0 [ 692.968937][T22713] netlink_sendmsg+0x805/0xb30 [ 692.968974][T22713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.969004][T22713] ? aa_sock_msg_perm+0x94/0x160 [ 692.969032][T22713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 692.969057][T22713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.969084][T22713] __sock_sendmsg+0x219/0x270 [ 692.969110][T22713] ____sys_sendmsg+0x505/0x830 [ 692.969151][T22713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.969192][T22713] ? import_iovec+0x74/0xa0 [ 692.969217][T22713] ___sys_sendmsg+0x21f/0x2a0 [ 692.969249][T22713] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.969322][T22713] ? __fget_files+0x2a/0x420 [ 692.969344][T22713] ? __fget_files+0x3a0/0x420 [ 692.969379][T22713] __x64_sys_sendmsg+0x19b/0x260 [ 692.969412][T22713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 692.969453][T22713] ? __pfx_ksys_write+0x10/0x10 [ 692.969469][T22713] ? rcu_is_watching+0x15/0xb0 [ 692.969506][T22713] ? do_syscall_64+0xbe/0x3b0 [ 692.969535][T22713] do_syscall_64+0xfa/0x3b0 [ 692.969558][T22713] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.969580][T22713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.969599][T22713] ? clear_bhb_loop+0x60/0xb0 [ 692.969624][T22713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.969643][T22713] RIP: 0033:0x7f6c2438e929 [ 692.969661][T22713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.969684][T22713] RSP: 002b:00007f6c251df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.969705][T22713] RAX: ffffffffffffffda RBX: 00007f6c245b5fa0 RCX: 00007f6c2438e929 [ 692.969719][T22713] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 692.969731][T22713] RBP: 00007f6c251df090 R08: 0000000000000000 R09: 0000000000000000 [ 692.969744][T22713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.969755][T22713] R13: 0000000000000000 R14: 00007f6c245b5fa0 R15: 00007ffc88519098 [ 692.969790][T22713] [ 692.991400][T22714] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5154'. [ 693.409690][T22726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.571087][T22720] syz.6.5155: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 693.587142][T22720] CPU: 0 UID: 0 PID: 22720 Comm: syz.6.5155 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 693.587169][T22720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 693.587181][T22720] Call Trace: [ 693.587190][T22720] [ 693.587199][T22720] dump_stack_lvl+0x189/0x250 [ 693.587238][T22720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.587269][T22720] ? __pfx__printk+0x10/0x10 [ 693.587291][T22720] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 693.587313][T22720] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 693.587338][T22720] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 693.587363][T22720] warn_alloc+0x214/0x310 [ 693.587386][T22720] ? stack_depot_save_flags+0x40/0x900 [ 693.587416][T22720] ? __pfx_warn_alloc+0x10/0x10 [ 693.587442][T22720] ? kasan_save_track+0x4f/0x80 [ 693.587471][T22720] ? xskq_create+0x56/0x170 [ 693.587492][T22720] ? xsk_init_queue+0xb0/0x110 [ 693.587510][T22720] ? xsk_setsockopt+0x43f/0x710 [ 693.587527][T22720] ? do_sock_setsockopt+0x25a/0x3e0 [ 693.587553][T22720] ? __x64_sys_setsockopt+0x18b/0x220 [ 693.587579][T22720] ? do_syscall_64+0xfa/0x3b0 [ 693.587601][T22720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.587639][T22720] __vmalloc_node_range_noprof+0x125/0x12f0 [ 693.587693][T22720] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 693.587722][T22720] ? __kasan_kmalloc+0x93/0xb0 [ 693.587744][T22720] vmalloc_user_noprof+0xad/0xf0 [ 693.587767][T22720] ? xskq_create+0xbf/0x170 [ 693.587789][T22720] xskq_create+0xbf/0x170 [ 693.587814][T22720] xsk_init_queue+0xb0/0x110 [ 693.587838][T22720] xsk_setsockopt+0x43f/0x710 [ 693.587862][T22720] ? __pfx_xsk_setsockopt+0x10/0x10 [ 693.587880][T22720] ? __lock_acquire+0xab9/0xd20 [ 693.587919][T22720] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 693.587943][T22720] ? __pfx_xsk_setsockopt+0x10/0x10 [ 693.587964][T22720] do_sock_setsockopt+0x25a/0x3e0 [ 693.587996][T22720] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 693.588029][T22720] ? __fget_files+0x2a/0x420 [ 693.588060][T22720] __x64_sys_setsockopt+0x18b/0x220 [ 693.588096][T22720] do_syscall_64+0xfa/0x3b0 [ 693.588118][T22720] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.588140][T22720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.588160][T22720] ? clear_bhb_loop+0x60/0xb0 [ 693.588185][T22720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.588204][T22720] RIP: 0033:0x7f6c2438e929 [ 693.588223][T22720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.588240][T22720] RSP: 002b:00007f6c251be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 693.588262][T22720] RAX: ffffffffffffffda RBX: 00007f6c245b6080 RCX: 00007f6c2438e929 [ 693.588277][T22720] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 693.588290][T22720] RBP: 00007f6c24410b39 R08: 0000000000000004 R09: 0000000000000000 [ 693.588302][T22720] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.588315][T22720] R13: 0000000000000000 R14: 00007f6c245b6080 R15: 00007ffc88519098 [ 693.588349][T22720] [ 693.588358][T22720] Mem-Info: [ 693.988001][T22720] active_anon:5944 inactive_anon:0 isolated_anon:0 [ 693.988001][T22720] active_file:2562 inactive_file:40079 isolated_file:0 [ 693.988001][T22720] unevictable:768 dirty:344 writeback:0 [ 693.988001][T22720] slab_reclaimable:12134 slab_unreclaimable:113169 [ 693.988001][T22720] mapped:41230 shmem:1368 pagetables:1136 [ 693.988001][T22720] sec_pagetables:0 bounce:0 [ 693.988001][T22720] kernel_misc_reclaimable:0 [ 693.988001][T22720] free:1272313 free_pcp:16779 free_cma:0 [ 694.106273][T22720] Node 0 active_anon:23576kB inactive_anon:0kB active_file:10248kB inactive_file:160116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164920kB dirty:1376kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13552kB pagetables:4180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 694.164052][T22720] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 694.220487][T22720] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.279553][T22720] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 694.320107][T22720] Node 0 DMA32 free:1165152kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23428kB inactive_anon:0kB active_file:10248kB inactive_file:158300kB unevictable:1536kB writepending:1376kB present:3129332kB managed:2560948kB mlocked:0kB bounce:0kB free_pcp:57924kB local_pcp:26648kB free_cma:0kB [ 694.367610][T22720] lowmem_reserve[]: 0 0 1 1 1 [ 694.372446][T22720] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 694.408425][T22720] lowmem_reserve[]: 0 0 0 0 0 [ 694.413260][T22720] Node 1 Normal free:3909768kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:9344kB local_pcp:9344kB free_cma:0kB [ 694.449647][T22720] lowmem_reserve[]: 0 0 0 0 0 [ 694.454506][T22720] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 694.480162][T22720] Node 0 DMA32: 1981*4kB (UME) 627*8kB (UME) 288*16kB (UME) 211*32kB (UME) 138*64kB (UME) 96*128kB (UME) 76*256kB (UME) 41*512kB (UME) 30*1024kB (UM) 16*2048kB (UME) 248*4096kB (M) = 1165164kB [ 694.499839][T22720] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 694.522881][T22720] Node 1 Normal: 196*4kB (UM) 59*8kB (UME) 52*16kB (UME) 227*32kB (UME) 88*64kB (UME) 12*128kB (UME) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3909768kB [ 694.544812][T22720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.557405][T22720] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 694.571704][T22720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.594244][T22720] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 694.603852][T22720] 44006 total pagecache pages [ 694.608968][T22720] 0 pages in swap cache [ 694.613203][T22720] Free swap = 124996kB [ 694.617827][T22720] Total swap = 124996kB [ 694.622121][T22720] 2097051 pages RAM [ 694.626086][T22720] 0 pages HighMem/MovableOnly [ 694.631023][T22720] 424708 pages reserved [ 694.635421][T22720] 0 pages cma reserved [ 695.021909][T22766] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5167'. [ 695.043018][T22768] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5169'. [ 695.223317][T22780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5169'. [ 695.593351][T22799] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5181'. [ 695.738524][T22808] netlink: 'syz.0.5185': attribute type 5 has an invalid length. [ 695.793063][T22808] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 695.814796][T22812] netlink: 'syz.5.5186': attribute type 10 has an invalid length. [ 695.837990][T22815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5188'. [ 695.880701][T22812] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 695.898777][ T31] INFO: task syz.4.3569:17960 blocked for more than 143 seconds. [ 695.909206][ T31] Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 [ 695.925001][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.933956][ T31] task:syz.4.3569 state:D stack:25352 pid:17960 tgid:17958 ppid:16107 task_flags:0x400140 flags:0x00004004 [ 695.962445][ T31] Call Trace: [ 695.969322][ T31] [ 695.975508][ T31] __schedule+0x16f5/0x4d00 [ 695.985853][ T31] ? __lock_acquire+0xab9/0xd20 [ 695.996712][ T31] ? schedule+0x165/0x360 [ 696.020510][ T31] ? __pfx___schedule+0x10/0x10 [ 696.031489][ T31] ? schedule+0x91/0x360 [ 696.040663][ T31] schedule+0x165/0x360 [ 696.045679][ T31] schedule_preempt_disabled+0x13/0x30 [ 696.051385][ T31] __mutex_lock+0x724/0xe80 [ 696.056051][ T31] ? __mutex_lock+0x51b/0xe80 [ 696.060852][ T31] ? nfsd_nl_listener_set_doit+0x12a/0x1650 [ 696.073223][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 696.078727][ T31] ? __asan_memset+0x22/0x50 [ 696.083865][ T31] ? ____sys_sendmsg+0x505/0x830 [ 696.093118][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 696.111162][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 696.124303][ T31] nfsd_nl_listener_set_doit+0x12a/0x1650 [ 696.141622][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 696.154256][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 696.171773][ T31] ? __nla_parse+0x40/0x60 [ 696.186066][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 696.196578][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 696.202286][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 696.208699][ T31] ? bpf_lsm_capable+0x9/0x20 [ 696.213491][ T31] ? security_capable+0x7e/0x2e0 [ 696.218634][ T31] genl_rcv_msg+0x60e/0x790 [ 696.223346][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.228569][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 696.235020][ T31] netlink_rcv_skb+0x205/0x470 [ 696.239908][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.255402][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.266394][ T31] ? down_read+0x1ad/0x2e0 [ 696.275624][ T31] genl_rcv+0x28/0x40 [ 696.279683][ T31] netlink_unicast+0x758/0x8d0 [ 696.304457][ T31] netlink_sendmsg+0x805/0xb30 [ 696.311400][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.319176][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 696.326489][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.332259][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.338950][ T31] __sock_sendmsg+0x219/0x270 [ 696.343755][ T31] ____sys_sendmsg+0x505/0x830 [ 696.348808][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.354145][ T31] ? import_iovec+0x74/0xa0 [ 696.358965][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 696.363664][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.368947][ T31] ? __fget_files+0x2a/0x420 [ 696.373621][ T31] ? __fget_files+0x3a0/0x420 [ 696.378364][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 696.383317][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 696.388903][ T31] ? do_syscall_64+0xbe/0x3b0 [ 696.393604][ T31] do_syscall_64+0xfa/0x3b0 [ 696.398199][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.403439][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.411174][ T31] ? clear_bhb_loop+0x60/0xb0 [ 696.417409][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.423326][ T31] RIP: 0033:0x7fdfc998e929 [ 696.427832][ T31] RSP: 002b:00007fdfca874038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.436415][ T31] RAX: ffffffffffffffda RBX: 00007fdfc9bb6080 RCX: 00007fdfc998e929 [ 696.444520][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e [ 696.452509][ T31] RBP: 00007fdfc9a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 696.460699][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.468785][ T31] R13: 0000000000000000 R14: 00007fdfc9bb6080 R15: 00007ffee9497178 [ 696.476808][ T31] [ 696.500232][ T31] [ 696.500232][ T31] Showing all locks held in the system: [ 696.541804][ T31] 1 lock held by khungtaskd/31: [ 696.551165][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 696.563993][ T31] 2 locks held by getty/5600: [ 696.568712][ T31] #0: ffff8880307a40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 696.578693][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 696.588930][ T31] 3 locks held by kworker/u8:9/12628: [ 696.594305][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 696.607738][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 696.619342][ T31] #2: ffffffff99cb7790 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x9a/0x250 [ 696.631158][ T31] 2 locks held by syz.2.3568/17952: [ 696.637335][ T31] #0: ffffffff8f577c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 696.645687][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 696.656028][ T31] 2 locks held by syz.4.3569/17960: [ 696.661249][ T31] #0: ffffffff8f577c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 696.669490][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 696.679777][ T31] [ 696.682110][ T31] ============================================= [ 696.682110][ T31] [ 696.690731][ T31] NMI backtrace for cpu 0 [ 696.690746][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 696.690768][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.690780][ T31] Call Trace: [ 696.690788][ T31] [ 696.690797][ T31] dump_stack_lvl+0x189/0x250 [ 696.690827][ T31] ? __wake_up_klogd+0xd9/0x110 [ 696.690853][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.690883][ T31] ? __pfx__printk+0x10/0x10 [ 696.690918][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 696.690952][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 696.690979][ T31] ? _printk+0xcf/0x120 [ 696.691004][ T31] ? __pfx__printk+0x10/0x10 [ 696.691027][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 696.691054][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 696.691088][ T31] watchdog+0xfee/0x1030 [ 696.691116][ T31] ? watchdog+0x1de/0x1030 [ 696.691151][ T31] kthread+0x70e/0x8a0 [ 696.691178][ T31] ? __pfx_watchdog+0x10/0x10 [ 696.691202][ T31] ? __pfx_kthread+0x10/0x10 [ 696.691225][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 696.691246][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.691266][ T31] ? __pfx_kthread+0x10/0x10 [ 696.691289][ T31] ret_from_fork+0x3f9/0x770 [ 696.691320][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 696.691354][ T31] ? __switch_to_asm+0x39/0x70 [ 696.691372][ T31] ? __switch_to_asm+0x33/0x70 [ 696.691390][ T31] ? __pfx_kthread+0x10/0x10 [ 696.691413][ T31] ret_from_fork_asm+0x1a/0x30 [ 696.691451][ T31] [ 696.691459][ T31] Sending NMI from CPU 0 to CPUs 1: [ 696.850047][ C1] NMI backtrace for cpu 1 [ 696.850067][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 696.850086][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.850096][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 696.850119][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 a6 20 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 696.850134][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 696.850148][ C1] RAX: de123020125da500 RBX: ffffffff81975d58 RCX: de123020125da500 [ 696.850161][ C1] RDX: 0000000000000001 RSI: ffffffff8d985d64 RDI: ffffffff8be28b80 [ 696.850173][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 696.850185][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa13bf0 [ 696.850196][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a59b40 [ 696.850207][ C1] FS: 0000000000000000(0000) GS:ffff888125d49000(0000) knlGS:0000000000000000 [ 696.850220][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.850231][ C1] CR2: 00007fa2ff17f678 CR3: 000000007e4c2000 CR4: 00000000003526f0 [ 696.850246][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 696.850255][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 696.850266][ C1] Call Trace: [ 696.850273][ C1] [ 696.850279][ C1] default_idle+0x13/0x20 [ 696.850301][ C1] default_idle_call+0x74/0xb0 [ 696.850323][ C1] do_idle+0x1e8/0x510 [ 696.850347][ C1] ? __pfx_do_idle+0x10/0x10 [ 696.850360][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.850389][ C1] cpu_startup_entry+0x44/0x60 [ 696.850424][ C1] start_secondary+0x101/0x110 [ 696.850442][ C1] common_startup_64+0x13e/0x147 [ 696.850468][ C1] [ 696.851207][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 697.040960][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 697.052759][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 697.062806][ T31] Call Trace: [ 697.066088][ T31] [ 697.069017][ T31] dump_stack_lvl+0x99/0x250 [ 697.073618][ T31] ? __asan_memcpy+0x40/0x70 [ 697.078216][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 697.083423][ T31] ? __pfx__printk+0x10/0x10 [ 697.088023][ T31] panic+0x2db/0x790 [ 697.091928][ T31] ? __pfx_panic+0x10/0x10 [ 697.096359][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 697.102175][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 697.107548][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 697.113716][ T31] watchdog+0x102d/0x1030 [ 697.118057][ T31] ? watchdog+0x1de/0x1030 [ 697.122501][ T31] kthread+0x70e/0x8a0 [ 697.126575][ T31] ? __pfx_watchdog+0x10/0x10 [ 697.131261][ T31] ? __pfx_kthread+0x10/0x10 [ 697.135859][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 697.141054][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.146254][ T31] ? __pfx_kthread+0x10/0x10 [ 697.150922][ T31] ret_from_fork+0x3f9/0x770 [ 697.155564][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 697.160691][ T31] ? __switch_to_asm+0x39/0x70 [ 697.165459][ T31] ? __switch_to_asm+0x33/0x70 [ 697.170234][ T31] ? __pfx_kthread+0x10/0x10 [ 697.174837][ T31] ret_from_fork_asm+0x1a/0x30 [ 697.179624][ T31] [ 697.183015][ T31] Kernel Offset: disabled [ 697.187337][ T31] Rebooting in 86400 seconds..