last executing test programs: 2.477911925s ago: executing program 4 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000380006c40969acaca319da2504000000"], 0x14}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0xfffffffffffffed5) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x2b4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x10000055}}}}, [@NL80211_ATTR_NAN_FUNC={0x1f8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1f0, 0xe, 0x0, 0x1, [{0xcc, 0x0, "e2124f28d673fe47c20f773a5b2ebf4fa98f816cb1e39af0cc26debe68b08884bd196eef407a7bf4104d396e5c520417ec837df3b410208927058c41b5441d903dcd5b26eefd4b00f52287257a6c6ac3d8c58c696bc3a099d2b1472527a5757186b62e5442da0d4f8c0cae92d208bc967760d67e5ea3cc2da47b4a21dc2dfa00df9fc68d93512a5c1eba2dac406387f05f982e96c04140f93cbc70c8a7e14e63df3031534a05c01d986c1158489c64f0598c242f057626b72157b6814897fc01e10473498d278bec"}, {0x3c, 0x0, "87b3cf942a59e2dbfeef4562732c3415a81156ff22d9a4cb74fdb95bc587e055664f6f228d73aff73bc6ebd597c8824724b8bf50d98475cc"}, {0xbc, 0x0, "e6a29aa6d9af1a5cb169129ef69096c4487b1585f38d863a8317ae8fe401bbd7b4c816018c0c2e04fb86fa0403764bb1153bcce7efd27787a6f511785ecdcd031d26a6da1f1b2ebb89a7c466350ae974efb2993644cab873e8706a0e67aac9e6312436ffd4c48648762658d7407675b4ab1bcc1f3cb0a9c26cf336ceb096c9a66a8990b3f46fa448f10c82cd0f1382333e21a85f42e1d62352d96d068786dd062b443ac1c639ac1a53f2dcaa6bdd9d2117ccd7dc09a89c4c"}, {0x6, 0x0, "a068"}, {0x1e, 0x0, "92d1033d9c63810c6a6533f74a75ca222618dbe811b6cfb40904"}]}]}, @NL80211_ATTR_NAN_FUNC={0x94, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x9}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xfe}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xf9}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3ca4fef1f330"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x60, 0xd, 0x0, 0x1, [{0x5a, 0x0, "a408d37c498843d840db05192606fc5fe5943c6ec3a4459fc3b943abf3281aaff029fabf30516fd4bd589a9020d1d4c3e2cc0ddaf9722af04c69a7ecd90b155b09834d6ab2d200"/86}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x2513d0904ba85cdb}, 0x44800) recvmmsg(r4, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002540)=""/149, 0x95}, {&(0x7f0000000380)=""/174, 0xae}], 0x2}, 0x3}], 0x1, 0xf0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x8}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000044) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x1a14, 0x40, @mcast1, @mcast2, 0x700, 0x80, 0x7fff, 0x6}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, 0xffffffffffffffff, 0xcfad5000) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r7, 0x0, 0x0) sendmsg$tipc(r8, 0x0, 0x8820) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) ioctl(r1, 0x5, &(0x7f0000000180)="775eaae41445bde5cacbb78f6aa8a9f3671a1a3bf040c605adba7658b6bd9bb857c636396010f6786ea4fa6aa5a6b217c9538c6b645bb8d00357a1cbe5191f1984f025ef2e09274d3c020a1c2a8a363d837a180199e9f0ffc42ee4c9c432fb61f2dddbe0e7210275ec06c1342243d8e3542031a714be2493bba1f5fb6d2c3dba6cc2") 2.210232576s ago: executing program 4 (id=658): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x3) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="00000000368f8c52f4af000035f016a730ba760a195764cbf1342675cd43fbc253a44500ad20c96225205c68743f67cbceb725758ae16d12ec78d87d742ef10a6a0beedf61963f8009beaafb854516172262f7b87a08005710ec7a76d000"/103, @ANYRES16=0x0, @ANYBLOB="11020000000000000000010000002800018014000400000000000000000000000000000000010800060001000000060001000a000000"], 0x3c}}, 0x4000000) close(0x3) 2.072478851s ago: executing program 3 (id=660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.039282783s ago: executing program 2 (id=661): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r4, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRES16=r8, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r9, @ANYBLOB="0500f4350081000020442ff8786eff3b"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004844) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x178, r5, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x138, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2beeb2f196ba7d92ea1c4e9b9f859561142c2a805a33d9f3582f6e8f5491aab8"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x30}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "05d7dcbbaf15812284ac9f5f407b88cd"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d87e8826e9b805a957010bc74459d4a8ad4300d7d48061369b75d6df1a290650"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3cc751d38ef78c428d8a6f635112eea6"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$qrtr(0x2a, 0x2, 0x0) 1.967176532s ago: executing program 0 (id=662): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18) unshare(0x2a020400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008040) writev(r4, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfc, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0xc4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r7, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0xaa, 0xffffffff, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x80, 0x80, 0x6de, 0x4}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r9, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000040) 1.884543831s ago: executing program 4 (id=663): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (fail_nth: 15) 1.849535273s ago: executing program 3 (id=664): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a00000007600000000000000270a0000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) unshare(0x20000400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @local, 0x9}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="f36b4e96df5d87b82f69b7868c9a534d6de2d3f1fc8ff2c693dd49c230347a2db044da732480cd3f36", 0x29}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffdc8, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8000061, 0x2}}]}, 0x20}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r3, 0x26, 0x0, 0x0, @void, @value}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e0, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x10d8, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1340) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r6, &(0x7f0000001480)=""/4096, 0x1000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r5, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000010c0)=@newtfilter={0xd8c, 0x2c, 0x612, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x6, 0x10}, {0xfff3, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0xac, 0x2, [@TCA_BASIC_ACT={0x90, 0x3, [@m_tunnel_key={0x8c, 0x12, 0x0, 0x0, {{0xf}, {0x4}, {0x59, 0x6, "9cbb05073f1fa13458b00468be175f354ca3f3939b09b6a54a275a3734e86e26631f9988add2ffc0e1a78b166ac89f65509fbacb646c9196ec0b57eda150b2e92336cb5b3be0104cd6afc46ddc877e5e571a3e15ac"}, {0xc}, {0xc, 0x8, {0x3, 0x7}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x1494d9e36b80ab31}}, @TCA_BASIC_ACT={0x4}, @TCA_BASIC_POLICE={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0xc2, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @filter_kind_options=@f_u32={{0x8}, {0xc80, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_POLICE={0xc6c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x5af, 0x725f1a5, 0x5c3, 0x80000, 0x5, 0x76ccc04, 0xe, 0xa00000, 0x9, 0xcae9, 0x4, 0x0, 0x30, 0x2, 0x4, 0x5, 0x9, 0x2, 0xff88, 0x1, 0x5, 0xe00, 0x8, 0x9, 0x0, 0x6, 0x5, 0xb, 0xbe, 0xbb, 0x517c, 0x9, 0x3, 0x80000001, 0x3, 0x8, 0x401, 0x1fd5, 0x0, 0x9, 0x8, 0x81, 0xa27a, 0x2, 0x80, 0x0, 0x81, 0x3, 0x0, 0x10000, 0x3dfa, 0x10001, 0x1000, 0x10001, 0x7, 0xf2, 0xff, 0x0, 0x1ff, 0x412a, 0x902a, 0x0, 0x26f8, 0x21b5, 0xa7b0, 0xffff, 0xa1, 0xcaf, 0x8, 0x3, 0x7ff, 0xa607, 0x6, 0x7f, 0x7, 0x9, 0x7, 0x8, 0xad, 0x8, 0x7, 0x9, 0x9, 0x1, 0x1, 0x80, 0xd5, 0x10000, 0x6, 0x5, 0x2, 0x5, 0x1, 0x5, 0x10001, 0x0, 0x5, 0x2c800000, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x6, 0xb2, 0x2, 0x5, 0x3, 0x2, 0x9, 0x3, 0x9, 0xffff, 0xe4e, 0x0, 0x6, 0x95e, 0x0, 0x3, 0x10, 0x4, 0x2, 0x800, 0x3, 0x3ffc000, 0x6, 0x200, 0x7, 0x200, 0x8, 0x7, 0x5, 0xfffffff8, 0x9, 0x5, 0x4, 0x7, 0x9, 0x1000, 0x28, 0x5, 0xb, 0x5871380b, 0x7, 0x8, 0xcc12, 0xa, 0x6, 0x4, 0x0, 0x70000, 0x1000, 0x1, 0x2dc6, 0x5, 0x4, 0xffff, 0x40, 0x3, 0x2c, 0x0, 0x8, 0x400, 0x9, 0x6, 0xff, 0x8, 0x9, 0x4, 0x5, 0x1, 0x9, 0x6, 0x2c8, 0x64eb, 0x0, 0x10, 0x5, 0xa867, 0x6, 0x4, 0x18d8, 0x4, 0x734c, 0x0, 0x2, 0x7, 0xfff, 0x5, 0x2, 0x1ff, 0xfffffffc, 0x2, 0x4, 0x101, 0x3, 0x6, 0x0, 0x1, 0x0, 0x8, 0x504, 0x5e5, 0x2, 0xf, 0x80, 0x8d1, 0x8, 0x5, 0xe, 0xd, 0x0, 0x5, 0x7, 0xffff, 0x239f, 0x2, 0x4, 0xffffff00, 0x6, 0x3, 0x7, 0x8, 0x9, 0xf, 0xdbda, 0x1, 0x5, 0x7fff, 0x7, 0x1, 0x10000, 0x1, 0x1, 0xba93, 0x8d96, 0x3, 0x4, 0x1c, 0x79c4, 0x6, 0x80, 0x91, 0x9, 0x38, 0x0, 0x0, 0x6, 0x2, 0x200, 0xcf63, 0x2, 0x0, 0x55]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x0, 0x581f, 0xd, 0x0, 0x4, 0xb, 0x0, 0x8, 0x6, 0x0, 0xfff, 0xfffffff2, 0x0, 0x7, 0x7ff, 0xfffffff0, 0xffffffff, 0xfffffffc, 0x1, 0x3, 0x100, 0x4, 0x6, 0x443, 0x5, 0x6, 0x907e, 0x3, 0x101, 0x566, 0x9, 0x2b, 0xfff, 0x3, 0x9, 0x5, 0x1, 0x410, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0x7, 0xcdc, 0x7, 0x400, 0x8, 0x10, 0x7e, 0x0, 0x8, 0x5, 0xfffffff4, 0xf8, 0x4, 0x7, 0x7, 0x2, 0x8000, 0x696, 0x0, 0x3, 0x8, 0x4, 0x400, 0x6, 0xbb, 0xfff, 0x740f, 0x4, 0x0, 0xffffe610, 0xff, 0x8, 0x4, 0xe, 0x7ca, 0x9, 0x97, 0xc, 0x1, 0x6, 0x5, 0x6c4e569e, 0x7, 0x0, 0x354, 0x8, 0x1, 0x6, 0x8, 0x1, 0x6, 0x7, 0x8, 0x2, 0x7, 0x6, 0x9, 0x4, 0x7ff, 0xffffff7a, 0x3, 0x6, 0x7fff, 0x331, 0x4, 0x5, 0x4, 0x101, 0x4, 0x5, 0x0, 0x9, 0x4, 0x81, 0x8001, 0x2, 0x0, 0xffffffff, 0x9, 0x1, 0x38b2, 0x9, 0x4, 0x9, 0x8, 0x7, 0x7, 0x133f, 0x10000, 0x0, 0x9, 0x1, 0x2, 0x5, 0x197a, 0x2, 0x5, 0x0, 0xe419, 0x2, 0x7, 0x2, 0x9, 0x298d, 0x2, 0x1, 0x1, 0x5, 0x4, 0xfffffff9, 0x8, 0x8, 0xe19, 0x10000, 0x200, 0x2, 0x71c0000, 0x9, 0x1, 0xff, 0x3, 0x6, 0x1, 0x5, 0x6, 0xe, 0x80, 0x9b, 0x7, 0x4, 0x1, 0x9, 0x0, 0x4, 0x1, 0xfffffff9, 0x8, 0xf6, 0x9, 0x5, 0x8, 0x3, 0x9, 0x5d44, 0x9, 0x5, 0x0, 0x1, 0x3, 0x23e, 0x1, 0x1, 0x6, 0x3, 0xfc61, 0x5, 0xb5f, 0x40, 0x8, 0x5, 0x10001, 0xd5b2, 0x7, 0x5, 0x8, 0xb, 0xdf, 0x9, 0x100, 0x7, 0xffffff01, 0x9, 0x7, 0x8, 0x400, 0x7, 0x200, 0x6, 0xffffffff, 0xd5eb, 0x6, 0xffffff90, 0x100, 0x6, 0xfffffff5, 0x1, 0x7, 0xd, 0x7, 0x4, 0xffff, 0x9, 0x40, 0xf907, 0x25, 0x7, 0x80, 0x80, 0xffffffff, 0x6, 0x4, 0x100, 0x8e9, 0x5, 0x2760, 0x0, 0x8, 0x8, 0xe3f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x101, 0x8, 0x100, 0x3, 0x8, 0x1a2, 0x7, 0x7, 0x0, 0x9, 0x5, 0x10001, 0x7, 0x74f, 0x6, 0xe8, 0x0, 0x3, 0x101, 0x95e, 0x3, 0x200, 0x6, 0x0, 0x2, 0xffffff5f, 0x1ff, 0x6, 0x0, 0x0, 0xfffffff9, 0x0, 0xfffff9cb, 0x872, 0xb47, 0x2, 0x1, 0x9, 0x9, 0xfffffffa, 0x5, 0x5, 0x7f, 0x3, 0x9, 0x7fffffff, 0x3, 0x6, 0x0, 0x2, 0x2, 0x0, 0x4, 0x7ff, 0xb, 0x2, 0x6, 0x6e1, 0x66, 0x0, 0x0, 0x3, 0x5, 0x3, 0x6, 0x5, 0x40, 0x75, 0x81, 0xffffffff, 0x5f, 0x7fffffff, 0x4, 0x7, 0x6, 0x4, 0x2, 0x80, 0x3, 0x6, 0x8, 0x7, 0xa00, 0x1, 0x3, 0x3, 0x10, 0x3, 0x0, 0x0, 0x8, 0x4, 0x1ff, 0x46, 0xec9, 0x1000, 0x3, 0x2, 0x0, 0xfffffffa, 0x4, 0x2, 0xe8, 0x7fff, 0x9, 0x4, 0x3, 0xed9a, 0x4, 0x4, 0x2, 0x8, 0x1, 0x1, 0x2, 0x0, 0x6, 0x3, 0xb, 0x2, 0x1, 0x1, 0x1ff, 0x7, 0x3ff, 0xc01, 0x2, 0x100, 0x4, 0x80000000, 0xfffffff7, 0x7, 0xfffffffa, 0xab51, 0x6, 0x53, 0x813, 0x8, 0x20f, 0x5, 0x734e, 0x8001, 0x1000, 0x20a90197, 0x3ff, 0x9, 0xf90, 0x5, 0xffffff00, 0x202, 0xa4, 0x2, 0x81, 0x5, 0x5, 0x5, 0x2ed9, 0x3ff, 0x23, 0x8, 0xfffffffd, 0x4, 0x8, 0x5, 0x2, 0x1, 0x5, 0x8, 0x7, 0x8, 0x7, 0x0, 0x9, 0x1, 0xa, 0xf9, 0x4, 0x7f, 0x8, 0x9, 0x12b, 0x9c3, 0x7f, 0x6, 0xff4, 0x40, 0x56, 0xc5, 0xfffffffa, 0xd90, 0x9, 0x6, 0xaae8, 0x7ffffffc, 0xa2e, 0x4, 0x3, 0x1f7, 0xde, 0x1, 0xfff712db, 0x10000, 0x3, 0x1, 0x10001, 0x26d0, 0xb2, 0x503f, 0xb, 0xfffffffa, 0xffffffff, 0x1, 0x7, 0x0, 0x3, 0x0, 0x6, 0x939e, 0x0, 0x11, 0x2, 0x2, 0x6, 0xa1ca, 0x8, 0x8, 0x4, 0x3, 0x2, 0x8, 0x100, 0x100, 0x9, 0x6, 0x7, 0x2, 0x8, 0x6, 0x9, 0x8000000, 0x200, 0xba4, 0xbf84, 0x8, 0x4, 0x1, 0x2, 0x10, 0x9f8c, 0x9, 0x9, 0x7ff, 0x1, 0x4, 0x200]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x7, 0x8, 0x1, {0xe0, 0x2, 0x4, 0xb, 0x3, 0x80}, {0x5, 0x1, 0x4000, 0x22, 0x40, 0x8}, 0x9, 0x0, 0x2}}]}, @TCA_U32_HASH={0x8, 0x2, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xd8c}, 0x1, 0x0, 0x0, 0x20040090}, 0x4000000) recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x48001) 1.807756429s ago: executing program 1 (id=665): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x110}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.676572496s ago: executing program 4 (id=666): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.609240416s ago: executing program 1 (id=667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x301, 0xa00, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 1.561870275s ago: executing program 2 (id=668): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9f66}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="f8d598772bc0364a", 0x8}], 0x2, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1}}}], 0x20}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000055000000000000ffffff00850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443d358e15"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001680)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010000", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r8, @ANYBLOB="080003001900000008000100", @ANYRES32=r8, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x19, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018000000240000000000000009000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x1c, &(0x7f0000000040)=""/28, 0x41100, 0x8, '\x00', r3, @fallback=0xe, r6, 0x8, &(0x7f0000000080)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x1, 0x2, 0x8}, 0x10, 0x0, r8, 0x1, 0x0, &(0x7f0000000240)=[{0x2, 0x1, 0x2, 0x8}], 0x10, 0x9, @void, @value}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x1, 0x0, 0x2, 0xfe, 0x2, 0x1000}}, 0x1c}}, 0x20004000) r11 = socket$netlink(0x10, 0x3, 0x15) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) 1.517005543s ago: executing program 0 (id=669): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x4000010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000081100000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x2d, 0x3}, @ssrr={0x89, 0x7, 0xce, [@multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x7a, 0x0, &(0x7f0000000300)=0x9b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x22040840}, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="050000000000fdffffff0600000008000300", @ANYRES32=r7, @ANYBLOB="08000500060000000a00e80008021100000000002800178004000100040005"], 0xac}, 0x1, 0x0, 0x0, 0x4800}, 0xc810) setsockopt$inet6_int(r4, 0x29, 0x11, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.328356825s ago: executing program 1 (id=670): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x10, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket(0x10, 0x80002, 0x0) (async) syz_emit_ethernet(0x10, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async) 1.282897333s ago: executing program 4 (id=671): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) 1.123946233s ago: executing program 1 (id=672): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0xac}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000340)="e4", 0x1}], 0x1}}], 0x4, 0x4000000) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.064515317s ago: executing program 0 (id=673): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b000000000000000000000000000000000000000000000000000000000004", 0x3e1c, 0x0, 0x0, 0x100}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) 1.063726886s ago: executing program 4 (id=674): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @float={0x4, 0x0, 0x0, 0x10, 0x8}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="00000000000000009500"/24], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, r2, 0x5a, '\x00', 0x0, r0, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r6 = accept4(r5, 0x0, 0x0, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x88c0) 976.989714ms ago: executing program 2 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0903006f7d177e0000002a"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x60, 0x9d, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x40, 0x1, 0x8000000, 0xbae}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x40, 0x6, 0x4, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x1, 0x5, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x64, r1, 0x401, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) 891.757033ms ago: executing program 0 (id=676): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb925"], 0x14}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000006c0)="6d0b1f4f38bdfad50659e830c28f177bb7f0eca4ece2d735069dc3d8310a66388073fdecd0c184c4fb25e7a64bdca2cc1e7b117a41fb1a7541723762a4d65d1e", 0x40}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0) 822.670945ms ago: executing program 3 (id=677): bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0xffff220e11000000) 818.502706ms ago: executing program 1 (id=678): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xad356f19b320d40b) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) syz_genetlink_get_family_id$tipc(&(0x7f0000001780), r4) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000440)=""/150, 0x96}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/238, 0xee}], 0xa}, 0x80000000}], 0x4, 0x40008062, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000c40)="acd1ad359814667ddd1c9357bc81138cb25d3b8e42d7e2323c4ae18025aa5d242643a8f4b73fe1ff824fb4e74086648b07c8bfd3034194c43609acb2d30da70e94d33dfccf9ada125eb103ff093c9bc4dbe0b6029a8519d2a60ea58a51726f94e675fd4503cf3aa42b38284463df614fae4193e925a760061340a1e43eaa0cd25bee488d155c5f88907aa1991733f9e55bdff671ebce0b3953642cfcfeb5afb0fbe624615f6bd5a45d670befd93280b6d3e2dc5962d8237d9997b361809462117792fe2085720b510e290716b3760b596c67a76c94e607687eeb35006b4cbcefc3ec07c747cd11ccee011eac099638ffb828dfcc378c63303444576d013679b4") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xffeff010}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x10000000000, 0x0, 0x20000001}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001740)={0x7, 0x5, 0x8200, 0x8, 0x8, 0x70, 0x3, 0x8}, 0x20) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001500)={r9}, 0x8) 696.22133ms ago: executing program 2 (id=679): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @dev}}) (async) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @dev}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='memory.low\x00', 0x2, 0x0) (async) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='memory.low\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000800)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000800)) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x68, 0x14, 0x70b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0x10}, {0xb, 0xc}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xfc, 0x200, 0x80000e, 0x2, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xc, 0x8, 0xd, 0x1, 0xa, 0x6}}, {0x4}}]}]}, 0x68}}, 0x4000000) getsockname$unix(r3, &(0x7f0000000300), &(0x7f0000000380)=0x6e) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000005c0)={0x18, 0x0, {0x2, @remote, 'veth0_to_bridge\x00'}}, 0x1e) sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) bind$llc(r3, &(0x7f00000003c0)={0x1a, 0xf, 0x1, 0x5, 0xb, 0x0, @random="e13ee14b4add"}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r8, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c804}, 0x40004) r9 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000020c0)=""/4083, 0xff3}, {&(0x7f0000000000)=""/95, 0x5f}, {&(0x7f0000002040)=""/107, 0x6b}, {&(0x7f0000001040)=""/4065, 0xfe1}, {&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f0000000440)=""/86, 0x56}], 0x6}, 0x4) (async) recvmsg(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000020c0)=""/4083, 0xff3}, {&(0x7f0000000000)=""/95, 0x5f}, {&(0x7f0000002040)=""/107, 0x6b}, {&(0x7f0000001040)=""/4065, 0xfe1}, {&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f0000000440)=""/86, 0x56}], 0x6}, 0x4) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf255e00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 695.613758ms ago: executing program 3 (id=680): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0xfff0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@local, @loopback, [], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x80, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], [0xff, 0x0, 0xffffff00, 0xff000000], 'macvlan0\x00', 'wg2\x00', {0xff}, {0xff}, 0x62, 0x6, 0x1, 0x24}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) unshare(0x400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "46908c7972395c32", "382cd52e911587df8b7ec4ea058bbb45900bb751b4f758bfc01b049fe94bdd4a", "a67da582", "e06ed919ffcace90"}, 0x38) pipe(0x0) mmap(&(0x7f0000f4b000/0x2000)=nil, 0x2000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf57b}, [@call={0x85, 0x0, 0x0, 0x78}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8766}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x77, &(0x7f0000000200)=""/119, 0x41000, 0xa2ebd3ca0e14e4c1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780), 0x10, 0x8, @void, @value}, 0x94) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x800000000ff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0x950, 0x5}, &(0x7f0000000680)=0x8) 503.921903ms ago: executing program 0 (id=681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, 0x0, 0x15) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365cfe54a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0xfffe}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) close(0x3) 365.619737ms ago: executing program 3 (id=682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {0x7fff}, @broadcast, @device_a, @from_mac=@broadcast}, 0x4, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @void, @void, @val={0x5, 0x3, {0xa3, 0x3f}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 272.391183ms ago: executing program 2 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {0x7fff}, @broadcast, @device_a, @from_mac=@broadcast}, 0x4, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @void, @void, @val={0x5, 0x3, {0xa3, 0x3f}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (fail_nth: 1) 271.675945ms ago: executing program 0 (id=684): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) 271.11403ms ago: executing program 1 (id=685): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000280)=0x1b0, 0x4) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000080)=0xa4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 139.722766ms ago: executing program 3 (id=686): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b000000000000000000000000000000000000000000000000000000000004", 0x3e1c, 0x0, 0x0, 0x100}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) 0s ago: executing program 2 (id=687): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) unshare(0x400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x2}, 0xe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000001634d0f0b36abe7c89ae882e5fd6d33ead1949145aae3fd575b5b0c77780d0d17284cb8caae21a92992e89a15d8988fd96b15e4c5d058f0c8dbb41da611f7ab2b0694681088afece7bb4f309fe105c249eb04f9e7c2ecf0c38f09196a033bd000000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) recvmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f00000009c0)=""/257, 0x101}, {&(0x7f0000003e00)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000006080)=""/4108, 0x100c}, {&(0x7f0000002e00)=""/4086, 0xff6}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xad}, {{0x0, 0x0, 0x0}, 0xca}], 0x8, 0x20, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. [ 80.988559][ T5821] cgroup: Unknown subsys name 'net' [ 81.122232][ T5821] cgroup: Unknown subsys name 'cpuset' [ 81.131354][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.970530][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.800503][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.815286][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.827655][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.831461][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.839539][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.843150][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.865851][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.869184][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.873375][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.881848][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.888496][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.895003][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.901249][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.916030][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.918030][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.932769][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.933459][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.949140][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.956734][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.957871][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.964290][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.986994][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.987337][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.002856][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.013929][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.925789][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.961563][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.979805][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.010147][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.102672][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.267251][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.275421][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.283131][ T5841] bridge_slave_0: entered allmulticast mode [ 88.290807][ T5841] bridge_slave_0: entered promiscuous mode [ 88.356608][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.364294][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.372442][ T5841] bridge_slave_1: entered allmulticast mode [ 88.379897][ T5841] bridge_slave_1: entered promiscuous mode [ 88.421096][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.428541][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.435744][ T5835] bridge_slave_0: entered allmulticast mode [ 88.444065][ T5835] bridge_slave_0: entered promiscuous mode [ 88.453257][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.461157][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.468841][ T5835] bridge_slave_1: entered allmulticast mode [ 88.476448][ T5835] bridge_slave_1: entered promiscuous mode [ 88.497452][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.504666][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.512687][ T5831] bridge_slave_0: entered allmulticast mode [ 88.519979][ T5831] bridge_slave_0: entered promiscuous mode [ 88.527378][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.534990][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.542524][ T5832] bridge_slave_0: entered allmulticast mode [ 88.550775][ T5832] bridge_slave_0: entered promiscuous mode [ 88.601420][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.609997][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.617141][ T5831] bridge_slave_1: entered allmulticast mode [ 88.625589][ T5831] bridge_slave_1: entered promiscuous mode [ 88.633066][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.640321][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.647467][ T5832] bridge_slave_1: entered allmulticast mode [ 88.654853][ T5832] bridge_slave_1: entered promiscuous mode [ 88.692443][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.699843][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.707123][ T5838] bridge_slave_0: entered allmulticast mode [ 88.714666][ T5838] bridge_slave_0: entered promiscuous mode [ 88.740850][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.753087][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.789413][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.796575][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.804199][ T5838] bridge_slave_1: entered allmulticast mode [ 88.811700][ T5838] bridge_slave_1: entered promiscuous mode [ 88.822419][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.874078][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.887430][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.912407][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.926259][ T5841] team0: Port device team_slave_0 added [ 88.936000][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.950347][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.003536][ T5841] team0: Port device team_slave_1 added [ 89.010416][ T5845] Bluetooth: hci1: command tx timeout [ 89.010422][ T5847] Bluetooth: hci2: command tx timeout [ 89.057583][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.088609][ T5845] Bluetooth: hci4: command tx timeout [ 89.088672][ T5847] Bluetooth: hci3: command tx timeout [ 89.094109][ T5837] Bluetooth: hci0: command tx timeout [ 89.129890][ T5832] team0: Port device team_slave_0 added [ 89.137676][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.166530][ T5835] team0: Port device team_slave_0 added [ 89.174002][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.181557][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.208501][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.223590][ T5831] team0: Port device team_slave_0 added [ 89.233681][ T5831] team0: Port device team_slave_1 added [ 89.241405][ T5832] team0: Port device team_slave_1 added [ 89.262749][ T5835] team0: Port device team_slave_1 added [ 89.283903][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.291719][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.318115][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.377034][ T5838] team0: Port device team_slave_0 added [ 89.387637][ T5838] team0: Port device team_slave_1 added [ 89.415839][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.422915][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.449197][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.473870][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.482822][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.509909][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.554943][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.562043][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.588994][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.601478][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.608708][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.635073][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.653628][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.661214][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.687542][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.699735][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.706699][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.732839][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.752188][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.759570][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.785602][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.809294][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.816308][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.844402][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.937647][ T5841] hsr_slave_0: entered promiscuous mode [ 89.944192][ T5841] hsr_slave_1: entered promiscuous mode [ 90.012196][ T5832] hsr_slave_0: entered promiscuous mode [ 90.020515][ T5832] hsr_slave_1: entered promiscuous mode [ 90.027007][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.035160][ T5832] Cannot create hsr debugfs directory [ 90.049570][ T5835] hsr_slave_0: entered promiscuous mode [ 90.056087][ T5835] hsr_slave_1: entered promiscuous mode [ 90.062509][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.070455][ T5835] Cannot create hsr debugfs directory [ 90.082635][ T5838] hsr_slave_0: entered promiscuous mode [ 90.089062][ T5838] hsr_slave_1: entered promiscuous mode [ 90.095084][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.102842][ T5838] Cannot create hsr debugfs directory [ 90.249747][ T5831] hsr_slave_0: entered promiscuous mode [ 90.256270][ T5831] hsr_slave_1: entered promiscuous mode [ 90.262851][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.270514][ T5831] Cannot create hsr debugfs directory [ 90.855968][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.881536][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.899336][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.930896][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.966120][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.005090][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.019385][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.043995][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.086989][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.094116][ T5837] Bluetooth: hci1: command tx timeout [ 91.099686][ T5845] Bluetooth: hci2: command tx timeout [ 91.112669][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.141095][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.165607][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.169634][ T5845] Bluetooth: hci0: command tx timeout [ 91.172792][ T5847] Bluetooth: hci3: command tx timeout [ 91.183613][ T5837] Bluetooth: hci4: command tx timeout [ 91.306132][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.350374][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.385510][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.401019][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.511620][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.545350][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.560032][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.581639][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.617934][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.633368][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.687189][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.700859][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.756501][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.764161][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.775732][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.782991][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.806370][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.813643][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.825545][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.856950][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.864194][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.901735][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.924138][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.971395][ T976] cfg80211: failed to load regulatory.db [ 91.989808][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.006564][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.013890][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.032116][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.039268][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.086212][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.093356][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.125121][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.132270][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.370969][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.541801][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.607808][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.615238][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.639514][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.646799][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.804520][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.040000][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.076630][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.173543][ T5837] Bluetooth: hci1: command tx timeout [ 93.187337][ T5847] Bluetooth: hci2: command tx timeout [ 93.253371][ T5847] Bluetooth: hci4: command tx timeout [ 93.259617][ T5847] Bluetooth: hci3: command tx timeout [ 93.261062][ T5837] Bluetooth: hci0: command tx timeout [ 93.295404][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.361108][ T5832] veth0_vlan: entered promiscuous mode [ 93.421500][ T5832] veth1_vlan: entered promiscuous mode [ 93.447680][ T5835] veth0_vlan: entered promiscuous mode [ 93.521377][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.541620][ T5835] veth1_vlan: entered promiscuous mode [ 93.559681][ T5838] veth0_vlan: entered promiscuous mode [ 93.604759][ T5838] veth1_vlan: entered promiscuous mode [ 93.644396][ T5832] veth0_macvtap: entered promiscuous mode [ 93.673492][ T5835] veth0_macvtap: entered promiscuous mode [ 93.688897][ T5835] veth1_macvtap: entered promiscuous mode [ 93.706164][ T5832] veth1_macvtap: entered promiscuous mode [ 93.737547][ T5841] veth0_vlan: entered promiscuous mode [ 93.762659][ T5831] veth0_vlan: entered promiscuous mode [ 93.783196][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.811635][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.826768][ T5841] veth1_vlan: entered promiscuous mode [ 93.838294][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.857786][ T5831] veth1_vlan: entered promiscuous mode [ 93.873927][ T1001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.884763][ T1001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.897485][ T5838] veth0_macvtap: entered promiscuous mode [ 93.909315][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.924645][ T1001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.934769][ T1001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.961689][ T1001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.975718][ T5838] veth1_macvtap: entered promiscuous mode [ 93.991526][ T1001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.001610][ T1001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.026551][ T1001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.095326][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.115798][ T5841] veth0_macvtap: entered promiscuous mode [ 94.134874][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.145508][ T5841] veth1_macvtap: entered promiscuous mode [ 94.205932][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.215211][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.243859][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.255911][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.265993][ T5831] veth0_macvtap: entered promiscuous mode [ 94.275720][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.285098][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.330611][ T5831] veth1_macvtap: entered promiscuous mode [ 94.345171][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.392800][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.415902][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.438043][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.440024][ T1001] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.464833][ T1001] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.479262][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.500926][ T1001] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.511634][ T1001] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.533142][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.537805][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.541588][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.644687][ T1149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.670647][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.676321][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.694688][ T1149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.709725][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.733683][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.744770][ T1149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.757075][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.767460][ T1149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.880851][ T5956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.917821][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.951302][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.004191][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.004679][ T5956] Zero length message leads to an empty skb [ 95.033360][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.124650][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.170043][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.226292][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.249093][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 95.268102][ T5837] Bluetooth: hci2: command tx timeout [ 95.269020][ T5845] Bluetooth: hci1: command tx timeout [ 95.298370][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.328769][ T5845] Bluetooth: hci3: command tx timeout [ 95.332806][ T5837] Bluetooth: hci0: command tx timeout [ 95.334355][ T5847] Bluetooth: hci4: command tx timeout [ 95.474367][ T5966] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.543160][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.577801][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.659764][ T5968] syz_tun: entered allmulticast mode [ 95.707600][ T5967] syz_tun: left allmulticast mode [ 95.741701][ T5971] syz_tun: entered allmulticast mode [ 95.801430][ T5970] syz_tun: left allmulticast mode [ 96.062996][ T5978] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 96.167621][ T5981] netlink: 164504 bytes leftover after parsing attributes in process `syz.0.1'. [ 96.190042][ T5980] netlink: 324 bytes leftover after parsing attributes in process `syz.4.10'. [ 96.614907][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 96.678372][ T5990] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 96.725179][ T5987] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11'. [ 96.792043][ T5996] lo speed is unknown, defaulting to 1000 [ 96.893890][ T24] IPVS: starting estimator thread 0... [ 96.942210][ T6000] netlink: 'syz.0.14': attribute type 11 has an invalid length. [ 96.988260][ T6000] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14'. [ 97.033916][ T5996] lo speed is unknown, defaulting to 1000 [ 97.054843][ T5999] IPVS: using max 24 ests per chain, 57600 per kthread [ 97.071824][ T5996] lo speed is unknown, defaulting to 1000 [ 97.133909][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 97.200553][ T5996] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.291706][ T5996] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.324490][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15'. [ 97.366548][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15'. [ 97.630403][ T6003] ip6gretap0: entered promiscuous mode [ 97.662216][ T6003] syz_tun: entered promiscuous mode [ 97.705837][ T5996] lo speed is unknown, defaulting to 1000 [ 97.737901][ T5996] lo speed is unknown, defaulting to 1000 [ 97.791011][ T5996] lo speed is unknown, defaulting to 1000 [ 97.845480][ T5996] lo speed is unknown, defaulting to 1000 [ 97.890950][ T5996] lo speed is unknown, defaulting to 1000 [ 97.946006][ T5996] lo speed is unknown, defaulting to 1000 [ 98.428277][ T6025] netlink: 'syz.2.24': attribute type 32 has an invalid length. [ 98.434154][ T6022] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 98.503722][ T6025] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 98.620592][ T6026] vcan1: entered allmulticast mode [ 98.693535][ T6020] syz.4.21 (6020) used greatest stack depth: 16184 bytes left [ 99.831117][ T6066] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.950632][ T6075] __nla_validate_parse: 12 callbacks suppressed [ 99.950655][ T6075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.40'. [ 100.035381][ T6075] openvswitch: netlink: EtherType 0 is less than min 600 [ 100.362884][ T6094] netlink: 'syz.1.47': attribute type 4 has an invalid length. [ 100.434396][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 100.516614][ T6096] netlink: 64 bytes leftover after parsing attributes in process `syz.3.48'. [ 100.534677][ T6098] netlink: 'syz.2.49': attribute type 1 has an invalid length. [ 100.695945][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.51'. [ 100.939267][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.55'. [ 101.080875][ T6117] netlink: 830 bytes leftover after parsing attributes in process `syz.3.57'. [ 101.129999][ T6117] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.422166][ T6133] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 101.433879][ T6133] netlink: 56 bytes leftover after parsing attributes in process `syz.3.63'. [ 101.597463][ T6136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.64'. [ 101.781329][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 102.111366][ T6151] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.69'. [ 103.260515][ T6189] lo speed is unknown, defaulting to 1000 [ 103.935326][ T6213] netlink: 'syz.3.93': attribute type 72 has an invalid length. [ 104.406904][ T6226] FAULT_INJECTION: forcing a failure. [ 104.406904][ T6226] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.426477][ T6226] CPU: 0 UID: 0 PID: 6226 Comm: syz.2.99 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 104.426506][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.426518][ T6226] Call Trace: [ 104.426526][ T6226] [ 104.426534][ T6226] dump_stack_lvl+0x189/0x250 [ 104.426570][ T6226] ? __pfx____ratelimit+0x10/0x10 [ 104.426600][ T6226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.426629][ T6226] ? __pfx__printk+0x10/0x10 [ 104.426650][ T6226] ? __might_fault+0xb0/0x130 [ 104.426681][ T6226] should_fail_ex+0x414/0x560 [ 104.426711][ T6226] _copy_from_iter+0x1db/0x16f0 [ 104.426744][ T6226] ? rcu_is_watching+0x15/0xb0 [ 104.426775][ T6226] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 104.426795][ T6226] ? __pfx__copy_from_iter+0x10/0x10 [ 104.426825][ T6226] ? __build_skb_around+0x257/0x3e0 [ 104.426852][ T6226] ? netlink_sendmsg+0x642/0xb30 [ 104.426873][ T6226] ? skb_put+0x11b/0x210 [ 104.426901][ T6226] netlink_sendmsg+0x6b2/0xb30 [ 104.426935][ T6226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.426961][ T6226] ? aa_sock_msg_perm+0x94/0x160 [ 104.426988][ T6226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.427011][ T6226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.427035][ T6226] __sock_sendmsg+0x219/0x270 [ 104.427058][ T6226] ____sys_sendmsg+0x52d/0x830 [ 104.427107][ T6226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.427143][ T6226] ? import_iovec+0x74/0xa0 [ 104.427167][ T6226] ___sys_sendmsg+0x21f/0x2a0 [ 104.427196][ T6226] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.427266][ T6226] ? __fget_files+0x2a/0x420 [ 104.427286][ T6226] ? __fget_files+0x3a0/0x420 [ 104.427319][ T6226] __sys_sendmmsg+0x227/0x430 [ 104.427352][ T6226] ? __pfx___sys_sendmmsg+0x10/0x10 [ 104.427376][ T6226] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 104.427424][ T6226] ? ksys_write+0x22a/0x250 [ 104.427446][ T6226] ? __pfx_ksys_write+0x10/0x10 [ 104.427461][ T6226] ? rcu_is_watching+0x15/0xb0 [ 104.427496][ T6226] __x64_sys_sendmmsg+0xa0/0xc0 [ 104.427524][ T6226] do_syscall_64+0xfa/0x3b0 [ 104.427541][ T6226] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.427569][ T6226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.427588][ T6226] ? clear_bhb_loop+0x60/0xb0 [ 104.427612][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.427630][ T6226] RIP: 0033:0x7f9c3858e929 [ 104.427648][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.427663][ T6226] RSP: 002b:00007f9c39494038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.427684][ T6226] RAX: ffffffffffffffda RBX: 00007f9c387b5fa0 RCX: 00007f9c3858e929 [ 104.427697][ T6226] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 104.427709][ T6226] RBP: 00007f9c39494090 R08: 0000000000000000 R09: 0000000000000000 [ 104.427720][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.427732][ T6226] R13: 0000000000000000 R14: 00007f9c387b5fa0 R15: 00007ffe9a85ef88 [ 104.427765][ T6226] [ 105.109981][ T6243] __nla_validate_parse: 4 callbacks suppressed [ 105.110001][ T6243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'. [ 105.640217][ T6258] netlink: 324 bytes leftover after parsing attributes in process `syz.1.111'. [ 105.865776][ T6262] Cannot find add_set index 4 as target [ 105.943247][ T6266] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.116'. [ 106.161308][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 106.999694][ T6291] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.128'. [ 107.250002][ T6295] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.129'. [ 107.452884][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 108.038360][ T6320] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.139'. [ 108.810411][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 108.868308][ T6347] xt_bpf: check failed: parse error [ 109.247523][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 109.535290][ T6369] FAULT_INJECTION: forcing a failure. [ 109.535290][ T6369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.553958][ T6369] CPU: 1 UID: 0 PID: 6369 Comm: syz.3.160 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 109.553988][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.553999][ T6369] Call Trace: [ 109.554007][ T6369] [ 109.554016][ T6369] dump_stack_lvl+0x189/0x250 [ 109.554060][ T6369] ? __pfx____ratelimit+0x10/0x10 [ 109.554091][ T6369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.554121][ T6369] ? __pfx__printk+0x10/0x10 [ 109.554143][ T6369] ? __might_fault+0xb0/0x130 [ 109.554175][ T6369] should_fail_ex+0x414/0x560 [ 109.554206][ T6369] _copy_from_user+0x2d/0xb0 [ 109.554227][ T6369] do_ipv6_setsockopt+0x32d/0x2fb0 [ 109.554260][ T6369] ? aa_label_sk_perm+0x413/0x560 [ 109.554286][ T6369] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 109.554313][ T6369] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 109.554354][ T6369] ? __pfx___might_resched+0x10/0x10 [ 109.554383][ T6369] ? rcu_read_lock_any_held+0xb3/0x120 [ 109.554403][ T6369] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 109.554425][ T6369] ? vfs_write+0x8d8/0xa90 [ 109.554457][ T6369] ? aa_sk_perm+0x81e/0x950 [ 109.554484][ T6369] ? __pfx_aa_sk_perm+0x10/0x10 [ 109.554503][ T6369] ? __lock_acquire+0xab9/0xd20 [ 109.554539][ T6369] ipv6_setsockopt+0x59/0x170 [ 109.554565][ T6369] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 109.554591][ T6369] do_sock_setsockopt+0x257/0x3e0 [ 109.554621][ T6369] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 109.554652][ T6369] ? __fget_files+0x2a/0x420 [ 109.554683][ T6369] __x64_sys_setsockopt+0x18b/0x220 [ 109.554713][ T6369] do_syscall_64+0xfa/0x3b0 [ 109.554730][ T6369] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.554757][ T6369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.554775][ T6369] ? clear_bhb_loop+0x60/0xb0 [ 109.554798][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.554815][ T6369] RIP: 0033:0x7f0e9a38e929 [ 109.554833][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.554848][ T6369] RSP: 002b:00007f0e9b1ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.554870][ T6369] RAX: ffffffffffffffda RBX: 00007f0e9a5b5fa0 RCX: 00007f0e9a38e929 [ 109.554884][ T6369] RDX: 0000000000000011 RSI: 0000000000000029 RDI: 0000000000000003 [ 109.554895][ T6369] RBP: 00007f0e9b1ba090 R08: 0000000000000004 R09: 0000000000000000 [ 109.554906][ T6369] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000001 [ 109.554918][ T6369] R13: 0000000000000000 R14: 00007f0e9a5b5fa0 R15: 00007fffa7fe5dc8 [ 109.554948][ T6369] [ 109.866123][ T6376] netlink: 'syz.2.163': attribute type 2 has an invalid length. [ 110.364856][ T6394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.171'. [ 110.398168][ T6394] openvswitch: netlink: EtherType 0 is less than min 600 [ 110.514064][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'. [ 110.804400][ T6412] syz_tun: entered allmulticast mode [ 110.813713][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 110.850010][ T6412] syz_tun: left allmulticast mode [ 110.900212][ T6416] syz_tun: entered allmulticast mode [ 110.915616][ T6416] syz_tun: left allmulticast mode [ 111.123263][ T6426] sit0: entered promiscuous mode [ 111.131168][ T6424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.183'. [ 111.184946][ T6426] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 111.216188][ T6426] netlink: 1 bytes leftover after parsing attributes in process `syz.3.184'. [ 111.248822][ T6424] tipc: Started in network mode [ 111.254106][ T6424] tipc: Node identity fe800000000000000000000000000026, cluster identity 4711 [ 111.269688][ T6424] tipc: Enabled bearer , priority 10 [ 111.313524][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.187'. [ 111.328635][ T6436] openvswitch: netlink: EtherType 0 is less than min 600 [ 111.361191][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 112.116215][ T6461] netlink: 324 bytes leftover after parsing attributes in process `syz.4.196'. [ 112.188463][ T6464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.198'. [ 112.208253][ T6464] tipc: Enabling of bearer rejected, already enabled [ 112.270298][ T10] tipc: Node number set to 4269801510 [ 112.393288][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 112.883333][ T6484] netlink: 'syz.1.206': attribute type 21 has an invalid length. [ 113.853139][ T6506] lo speed is unknown, defaulting to 1000 [ 114.118428][ T6519] netlink: 'syz.0.217': attribute type 10 has an invalid length. [ 114.418855][ T6519] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.500258][ T6536] syz_tun: entered allmulticast mode [ 114.539934][ T6535] syz_tun: left allmulticast mode [ 114.678611][ T6543] FAULT_INJECTION: forcing a failure. [ 114.678611][ T6543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.698191][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.4.228 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 114.698222][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.698232][ T6543] Call Trace: [ 114.698240][ T6543] [ 114.698249][ T6543] dump_stack_lvl+0x189/0x250 [ 114.698285][ T6543] ? __pfx____ratelimit+0x10/0x10 [ 114.698315][ T6543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.698346][ T6543] ? __pfx__printk+0x10/0x10 [ 114.698368][ T6543] ? __might_fault+0xb0/0x130 [ 114.698400][ T6543] should_fail_ex+0x414/0x560 [ 114.698431][ T6543] _copy_from_user+0x2d/0xb0 [ 114.698452][ T6543] generic_map_update_batch+0x572/0x7f0 [ 114.698489][ T6543] ? __pfx_generic_map_update_batch+0x10/0x10 [ 114.698510][ T6543] ? __fget_files+0x2a/0x420 [ 114.698540][ T6543] ? __pfx_generic_map_update_batch+0x10/0x10 [ 114.698560][ T6543] bpf_map_do_batch+0x36c/0x5f0 [ 114.698593][ T6543] __sys_bpf+0x384/0x860 [ 114.698622][ T6543] ? __pfx___sys_bpf+0x10/0x10 [ 114.698663][ T6543] ? ksys_write+0x22a/0x250 [ 114.698685][ T6543] ? __pfx_ksys_write+0x10/0x10 [ 114.698700][ T6543] ? rcu_is_watching+0x15/0xb0 [ 114.698737][ T6543] __x64_sys_bpf+0x7c/0x90 [ 114.698762][ T6543] do_syscall_64+0xfa/0x3b0 [ 114.698780][ T6543] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.698808][ T6543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.698826][ T6543] ? clear_bhb_loop+0x60/0xb0 [ 114.698850][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.698869][ T6543] RIP: 0033:0x7fc184d8e929 [ 114.698887][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.698904][ T6543] RSP: 002b:00007fc182bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.698926][ T6543] RAX: ffffffffffffffda RBX: 00007fc184fb5fa0 RCX: 00007fc184d8e929 [ 114.698939][ T6543] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 114.698951][ T6543] RBP: 00007fc182bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.698963][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.698984][ T6543] R13: 0000000000000000 R14: 00007fc184fb5fa0 R15: 00007ffff1a7a148 [ 114.699017][ T6543] [ 115.189193][ T6555] FAULT_INJECTION: forcing a failure. [ 115.189193][ T6555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.267401][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.4.232 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 115.267431][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.267442][ T6555] Call Trace: [ 115.267450][ T6555] [ 115.267459][ T6555] dump_stack_lvl+0x189/0x250 [ 115.267494][ T6555] ? __pfx____ratelimit+0x10/0x10 [ 115.267525][ T6555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.267554][ T6555] ? __pfx__printk+0x10/0x10 [ 115.267575][ T6555] ? __might_fault+0xb0/0x130 [ 115.267605][ T6555] should_fail_ex+0x414/0x560 [ 115.267635][ T6555] _copy_from_user+0x2d/0xb0 [ 115.267655][ T6555] ___sys_sendmsg+0x158/0x2a0 [ 115.267686][ T6555] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.267749][ T6555] ? __fget_files+0x2a/0x420 [ 115.267770][ T6555] ? __fget_files+0x3a0/0x420 [ 115.267800][ T6555] __x64_sys_sendmsg+0x19b/0x260 [ 115.267830][ T6555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.267869][ T6555] ? __pfx_ksys_write+0x10/0x10 [ 115.267884][ T6555] ? rcu_is_watching+0x15/0xb0 [ 115.267919][ T6555] ? do_syscall_64+0xbe/0x3b0 [ 115.267973][ T6555] do_syscall_64+0xfa/0x3b0 [ 115.267991][ T6555] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.268019][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.268037][ T6555] ? clear_bhb_loop+0x60/0xb0 [ 115.268062][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.268080][ T6555] RIP: 0033:0x7fc184d8e929 [ 115.268099][ T6555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.268115][ T6555] RSP: 002b:00007fc182bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.268137][ T6555] RAX: ffffffffffffffda RBX: 00007fc184fb5fa0 RCX: 00007fc184d8e929 [ 115.268152][ T6555] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 115.268163][ T6555] RBP: 00007fc182bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.268174][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.268186][ T6555] R13: 0000000000000000 R14: 00007fc184fb5fa0 R15: 00007ffff1a7a148 [ 115.268216][ T6555] [ 115.272130][ T6553] mac80211_hwsim hwsim6 : renamed from wlan1 (while UP) [ 115.460406][ T6561] __nla_validate_parse: 6 callbacks suppressed [ 115.460424][ T6561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'. [ 115.609879][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 115.782248][ T6568] syz_tun: entered allmulticast mode [ 115.820933][ T6567] syz_tun: left allmulticast mode [ 115.882509][ T6573] warning: `syz.2.241' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.469463][ T6590] netlink: 'syz.4.248': attribute type 72 has an invalid length. [ 117.004320][ T6605] netlink: 'syz.4.253': attribute type 10 has an invalid length. [ 117.102327][ T6605] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.142035][ T6609] syz_tun: entered allmulticast mode [ 117.187628][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 117.211916][ T6608] syz_tun: left allmulticast mode [ 117.219661][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 117.948428][ T6629] netlink: 'syz.0.262': attribute type 72 has an invalid length. [ 118.031611][ T6633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.264'. [ 118.047231][ T6633] openvswitch: netlink: EtherType 0 is less than min 600 [ 118.310199][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.266'. [ 118.449817][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 118.489231][ T6642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.268'. [ 118.764437][ T6649] netlink: 324 bytes leftover after parsing attributes in process `syz.3.271'. [ 118.998756][ T6653] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 119.048642][ T6653] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 119.066637][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 119.131478][ T6657] trusted_key: syz.1.274 sent an empty control message without MSG_MORE. [ 119.283858][ T6660] netlink: 'syz.4.276': attribute type 72 has an invalid length. [ 120.384067][ T6703] Driver unsupported XDP return value 0 on prog (id 83) dev N/A, expect packet loss! [ 121.033648][ T6723] lo speed is unknown, defaulting to 1000 [ 121.070675][ T6729] __nla_validate_parse: 1 callbacks suppressed [ 121.070695][ T6729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.301'. [ 121.343152][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 121.383577][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 121.431498][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 121.474023][ T6738] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.305'. [ 121.919317][ T6755] FAULT_INJECTION: forcing a failure. [ 121.919317][ T6755] name failslab, interval 1, probability 0, space 0, times 1 [ 122.018673][ T6755] CPU: 1 UID: 0 PID: 6755 Comm: syz.3.309 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 122.018704][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.018715][ T6755] Call Trace: [ 122.018723][ T6755] [ 122.018732][ T6755] dump_stack_lvl+0x189/0x250 [ 122.018768][ T6755] ? __pfx____ratelimit+0x10/0x10 [ 122.018809][ T6755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.018839][ T6755] ? __pfx__printk+0x10/0x10 [ 122.018865][ T6755] ? __pfx___might_resched+0x10/0x10 [ 122.018891][ T6755] ? fs_reclaim_acquire+0x7d/0x100 [ 122.018930][ T6755] should_fail_ex+0x414/0x560 [ 122.018960][ T6755] should_failslab+0xa8/0x100 [ 122.018982][ T6755] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 122.019001][ T6755] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.019028][ T6755] ? __alloc_skb+0x112/0x2d0 [ 122.019057][ T6755] __alloc_skb+0x112/0x2d0 [ 122.019086][ T6755] sock_wmalloc+0xb2/0x130 [ 122.019119][ T6755] l2tp_ip_sendmsg+0x1bb/0x1630 [ 122.019153][ T6755] ? inet_sendmsg+0x2f4/0x370 [ 122.019171][ T6755] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.019198][ T6755] __sock_sendmsg+0x19c/0x270 [ 122.019222][ T6755] ____sys_sendmsg+0x52d/0x830 [ 122.019256][ T6755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.019292][ T6755] ? import_iovec+0x74/0xa0 [ 122.019316][ T6755] ___sys_sendmsg+0x21f/0x2a0 [ 122.019345][ T6755] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.019421][ T6755] ? __might_fault+0xb0/0x130 [ 122.019447][ T6755] __sys_sendmmsg+0x227/0x430 [ 122.019481][ T6755] ? __pfx___sys_sendmmsg+0x10/0x10 [ 122.019506][ T6755] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 122.019558][ T6755] ? ksys_write+0x22a/0x250 [ 122.019580][ T6755] ? __pfx_ksys_write+0x10/0x10 [ 122.019596][ T6755] ? rcu_is_watching+0x15/0xb0 [ 122.019633][ T6755] __x64_sys_sendmmsg+0xa0/0xc0 [ 122.019662][ T6755] do_syscall_64+0xfa/0x3b0 [ 122.019680][ T6755] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.019707][ T6755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.019727][ T6755] ? clear_bhb_loop+0x60/0xb0 [ 122.019751][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.019770][ T6755] RIP: 0033:0x7f0e9a38e929 [ 122.019788][ T6755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.019805][ T6755] RSP: 002b:00007f0e9b199038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 122.019828][ T6755] RAX: ffffffffffffffda RBX: 00007f0e9a5b6080 RCX: 00007f0e9a38e929 [ 122.019842][ T6755] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000006 [ 122.019854][ T6755] RBP: 00007f0e9b199090 R08: 0000000000000000 R09: 0000000000000000 [ 122.019866][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.019877][ T6755] R13: 0000000000000000 R14: 00007f0e9a5b6080 R15: 00007fffa7fe5dc8 [ 122.020005][ T6755] [ 122.068804][ T6759] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 122.392493][ T6759] netlink: 232 bytes leftover after parsing attributes in process `syz.2.311'. [ 122.433500][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 122.698436][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 122.739413][ T6784] xt_hashlimit: size too large, truncated to 1048576 [ 122.816437][ T6780] bridge_slave_1: left allmulticast mode [ 122.873000][ T6780] bridge_slave_1: left promiscuous mode [ 122.881556][ T6785] netlink: 324 bytes leftover after parsing attributes in process `syz.2.317'. [ 122.925337][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.071057][ T6780] bridge_slave_0: left allmulticast mode [ 123.097107][ T6780] bridge_slave_0: left promiscuous mode [ 123.140705][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.247730][ T6794] netlink: 324 bytes leftover after parsing attributes in process `syz.2.319'. [ 123.421932][ T6797] syz_tun: entered allmulticast mode [ 123.455440][ T6790] syz_tun: left allmulticast mode [ 123.525720][ T6777] lo speed is unknown, defaulting to 1000 [ 124.861781][ T6834] syz_tun: entered allmulticast mode [ 124.891582][ T6833] syz_tun: left allmulticast mode [ 125.482052][ T6848] FAULT_INJECTION: forcing a failure. [ 125.482052][ T6848] name failslab, interval 1, probability 0, space 0, times 0 [ 125.528698][ T6848] CPU: 0 UID: 0 PID: 6848 Comm: syz.2.336 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 125.528728][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.528739][ T6848] Call Trace: [ 125.528746][ T6848] [ 125.528755][ T6848] dump_stack_lvl+0x189/0x250 [ 125.528789][ T6848] ? __pfx____ratelimit+0x10/0x10 [ 125.528818][ T6848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.528848][ T6848] ? __pfx__printk+0x10/0x10 [ 125.528877][ T6848] ? __pfx___might_resched+0x10/0x10 [ 125.528912][ T6848] should_fail_ex+0x414/0x560 [ 125.528943][ T6848] should_failslab+0xa8/0x100 [ 125.528966][ T6848] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 125.528985][ T6848] ? __alloc_skb+0x112/0x2d0 [ 125.529006][ T6848] ? __pfx___mutex_trylock_common+0x10/0x10 [ 125.529032][ T6848] __alloc_skb+0x112/0x2d0 [ 125.529061][ T6848] netlink_dump+0x22b/0xe20 [ 125.529087][ T6848] ? __netlink_lookup+0xbd/0x810 [ 125.529119][ T6848] ? __pfx_netlink_dump+0x10/0x10 [ 125.529156][ T6848] ? netlink_lookup+0x30/0x200 [ 125.529177][ T6848] ? netlink_lookup+0x30/0x200 [ 125.529194][ T6848] ? netlink_lookup+0x30/0x200 [ 125.529222][ T6848] __netlink_dump_start+0x5cb/0x7e0 [ 125.529263][ T6848] unix_diag_handler_dump+0x199/0x900 [ 125.529300][ T6848] ? __pfx_unix_diag_handler_dump+0x10/0x10 [ 125.529319][ T6848] ? __pfx_unix_diag_dump+0x10/0x10 [ 125.529341][ T6848] ? sock_diag_lock_handler+0x19/0x290 [ 125.529362][ T6848] ? sock_diag_lock_handler+0x19/0x290 [ 125.529390][ T6848] sock_diag_rcv_msg+0x4c9/0x600 [ 125.529417][ T6848] netlink_rcv_skb+0x205/0x470 [ 125.529442][ T6848] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 125.529466][ T6848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.529506][ T6848] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.529528][ T6848] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.529557][ T6848] netlink_unicast+0x758/0x8d0 [ 125.529593][ T6848] netlink_sendmsg+0x805/0xb30 [ 125.529628][ T6848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.529656][ T6848] ? aa_sock_msg_perm+0x94/0x160 [ 125.529683][ T6848] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.529706][ T6848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.529730][ T6848] __sock_sendmsg+0x219/0x270 [ 125.529755][ T6848] sock_write_iter+0x258/0x330 [ 125.529778][ T6848] ? __pfx_sock_write_iter+0x10/0x10 [ 125.529810][ T6848] ? bpf_lsm_file_permission+0x9/0x20 [ 125.529835][ T6848] ? security_file_permission+0x75/0x290 [ 125.529867][ T6848] vfs_write+0x548/0xa90 [ 125.529903][ T6848] ? __pfx_sock_write_iter+0x10/0x10 [ 125.529922][ T6848] ? __pfx_vfs_write+0x10/0x10 [ 125.529964][ T6848] ? __fget_files+0x2a/0x420 [ 125.529993][ T6848] ksys_write+0x145/0x250 [ 125.530011][ T6848] ? __pfx_ksys_write+0x10/0x10 [ 125.530024][ T6848] ? rcu_is_watching+0x15/0xb0 [ 125.530061][ T6848] ? do_syscall_64+0xbe/0x3b0 [ 125.530085][ T6848] do_syscall_64+0xfa/0x3b0 [ 125.530103][ T6848] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.530131][ T6848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.530150][ T6848] ? clear_bhb_loop+0x60/0xb0 [ 125.530175][ T6848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.530194][ T6848] RIP: 0033:0x7f9c3858e929 [ 125.530212][ T6848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.530241][ T6848] RSP: 002b:00007f9c39494038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.530264][ T6848] RAX: ffffffffffffffda RBX: 00007f9c387b5fa0 RCX: 00007f9c3858e929 [ 125.530277][ T6848] RDX: 0000000000000029 RSI: 00002000000002c0 RDI: 0000000000000006 [ 125.530289][ T6848] RBP: 00007f9c39494090 R08: 0000000000000000 R09: 0000000000000000 [ 125.530301][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.530313][ T6848] R13: 0000000000000000 R14: 00007f9c387b5fa0 R15: 00007ffe9a85ef88 [ 125.530347][ T6848] [ 126.146323][ T6853] __nla_validate_parse: 3 callbacks suppressed [ 126.146346][ T6853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.340'. [ 126.253961][ T6853] openvswitch: netlink: EtherType 0 is less than min 600 [ 126.503864][ T6863] netlink: 14 bytes leftover after parsing attributes in process `syz.1.339'. [ 126.674745][ T6869] syz.1.339 uses obsolete (PF_INET,SOCK_PACKET) [ 127.000948][ T6863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.038840][ T6863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.082327][ T6863] bond0 (unregistering): Released all slaves [ 127.634178][ T6889] FAULT_INJECTION: forcing a failure. [ 127.634178][ T6889] name failslab, interval 1, probability 0, space 0, times 0 [ 127.672060][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 127.708066][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.4.348 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 127.708096][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.708108][ T6889] Call Trace: [ 127.708115][ T6889] [ 127.708123][ T6889] dump_stack_lvl+0x189/0x250 [ 127.708158][ T6889] ? __pfx____ratelimit+0x10/0x10 [ 127.708196][ T6889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.708226][ T6889] ? __pfx__printk+0x10/0x10 [ 127.708256][ T6889] ? ref_tracker_alloc+0x318/0x460 [ 127.708285][ T6889] should_fail_ex+0x414/0x560 [ 127.708316][ T6889] should_failslab+0xa8/0x100 [ 127.708339][ T6889] kmem_cache_alloc_noprof+0x73/0x3c0 [ 127.708369][ T6889] ? skb_clone+0x212/0x3a0 [ 127.708402][ T6889] skb_clone+0x212/0x3a0 [ 127.708435][ T6889] __netlink_deliver_tap+0x404/0x850 [ 127.708474][ T6889] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.708499][ T6889] netlink_deliver_tap+0x19c/0x1b0 [ 127.708523][ T6889] netlink_unicast+0x72f/0x8d0 [ 127.708558][ T6889] netlink_sendmsg+0x805/0xb30 [ 127.708593][ T6889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.708620][ T6889] ? aa_sock_msg_perm+0x94/0x160 [ 127.708648][ T6889] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.708672][ T6889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.708697][ T6889] __sock_sendmsg+0x219/0x270 [ 127.708721][ T6889] ____sys_sendmsg+0x52d/0x830 [ 127.708756][ T6889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.708801][ T6889] ? import_iovec+0x74/0xa0 [ 127.708826][ T6889] ___sys_sendmsg+0x21f/0x2a0 [ 127.708857][ T6889] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.708927][ T6889] ? __fget_files+0x2a/0x420 [ 127.708947][ T6889] ? __fget_files+0x3a0/0x420 [ 127.708980][ T6889] __sys_sendmmsg+0x227/0x430 [ 127.709015][ T6889] ? __pfx___sys_sendmmsg+0x10/0x10 [ 127.709039][ T6889] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 127.709092][ T6889] ? ksys_write+0x22a/0x250 [ 127.709113][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 127.709127][ T6889] ? rcu_is_watching+0x15/0xb0 [ 127.709172][ T6889] __x64_sys_sendmmsg+0xa0/0xc0 [ 127.709202][ T6889] do_syscall_64+0xfa/0x3b0 [ 127.709219][ T6889] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.709248][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.709267][ T6889] ? clear_bhb_loop+0x60/0xb0 [ 127.709291][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.709309][ T6889] RIP: 0033:0x7fc184d8e929 [ 127.709326][ T6889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.709342][ T6889] RSP: 002b:00007fc182bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.709364][ T6889] RAX: ffffffffffffffda RBX: 00007fc184fb5fa0 RCX: 00007fc184d8e929 [ 127.709378][ T6889] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 127.709391][ T6889] RBP: 00007fc182bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.709402][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.709413][ T6889] R13: 0000000000000000 R14: 00007fc184fb5fa0 R15: 00007ffff1a7a148 [ 127.709446][ T6889] [ 128.159222][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'. [ 128.168743][ T6901] openvswitch: netlink: EtherType 0 is less than min 600 [ 128.256086][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'. [ 128.732800][ T6922] netlink: 'syz.3.360': attribute type 12 has an invalid length. [ 128.984809][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.365'. [ 129.018825][ T6938] netlink: 324 bytes leftover after parsing attributes in process `syz.0.366'. [ 129.038193][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 129.277287][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'. [ 129.313013][ T6941] openvswitch: netlink: EtherType 0 is less than min 600 [ 129.703037][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.371'. [ 130.490252][ T6976] openvswitch: netlink: EtherType 0 is less than min 600 [ 131.252284][ T7006] FAULT_INJECTION: forcing a failure. [ 131.252284][ T7006] name failslab, interval 1, probability 0, space 0, times 0 [ 131.298874][ T7006] CPU: 1 UID: 0 PID: 7006 Comm: syz.3.395 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 131.298903][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.298915][ T7006] Call Trace: [ 131.298923][ T7006] [ 131.298931][ T7006] dump_stack_lvl+0x189/0x250 [ 131.298967][ T7006] ? __pfx____ratelimit+0x10/0x10 [ 131.298996][ T7006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.299026][ T7006] ? __pfx__printk+0x10/0x10 [ 131.299044][ T7006] ? rcu_is_watching+0x15/0xb0 [ 131.299090][ T7006] should_fail_ex+0x414/0x560 [ 131.299122][ T7006] should_failslab+0xa8/0x100 [ 131.299157][ T7006] kmem_cache_alloc_noprof+0x73/0x3c0 [ 131.299186][ T7006] ? skb_clone+0x212/0x3a0 [ 131.299219][ T7006] skb_clone+0x212/0x3a0 [ 131.299251][ T7006] __netlink_deliver_tap+0x404/0x850 [ 131.299290][ T7006] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.299315][ T7006] netlink_deliver_tap+0x19c/0x1b0 [ 131.299339][ T7006] netlink_dump+0x8e4/0xe20 [ 131.299358][ T7006] ? __skb_try_recv_from_queue+0x58f/0x730 [ 131.299401][ T7006] ? __pfx_netlink_dump+0x10/0x10 [ 131.299452][ T7006] netlink_recvmsg+0x676/0xa30 [ 131.299487][ T7006] ? __pfx_netlink_recvmsg+0x10/0x10 [ 131.299516][ T7006] ? __lock_acquire+0xab9/0xd20 [ 131.299540][ T7006] ? aa_sock_msg_perm+0x94/0x160 [ 131.299567][ T7006] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 131.299591][ T7006] ? security_socket_recvmsg+0x7e/0x2e0 [ 131.299621][ T7006] ? __pfx_netlink_recvmsg+0x10/0x10 [ 131.299645][ T7006] sock_recvmsg+0x229/0x270 [ 131.299672][ T7006] ____sys_recvmsg+0x1c9/0x460 [ 131.299710][ T7006] ? __pfx_____sys_recvmsg+0x10/0x10 [ 131.299757][ T7006] ? import_iovec+0x74/0xa0 [ 131.299781][ T7006] ___sys_recvmsg+0x1b5/0x510 [ 131.299816][ T7006] ? __pfx____sys_recvmsg+0x10/0x10 [ 131.299878][ T7006] ? __fget_files+0x3a0/0x420 [ 131.299913][ T7006] do_recvmmsg+0x307/0x770 [ 131.299951][ T7006] ? __pfx_do_recvmmsg+0x10/0x10 [ 131.299994][ T7006] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.300036][ T7006] __x64_sys_recvmmsg+0x190/0x240 [ 131.300067][ T7006] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 131.300092][ T7006] ? rcu_is_watching+0x15/0xb0 [ 131.300134][ T7006] ? do_syscall_64+0xbe/0x3b0 [ 131.300158][ T7006] do_syscall_64+0xfa/0x3b0 [ 131.300174][ T7006] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.300203][ T7006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.300222][ T7006] ? clear_bhb_loop+0x60/0xb0 [ 131.300246][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.300265][ T7006] RIP: 0033:0x7f0e9a38e929 [ 131.300284][ T7006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.300300][ T7006] RSP: 002b:00007f0e9b1ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 131.300321][ T7006] RAX: ffffffffffffffda RBX: 00007f0e9a5b5fa0 RCX: 00007f0e9a38e929 [ 131.300335][ T7006] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 131.300347][ T7006] RBP: 00007f0e9b1ba090 R08: 0000000000000000 R09: 0000000000000000 [ 131.300359][ T7006] R10: 0000000040008062 R11: 0000000000000246 R12: 0000000000000001 [ 131.300371][ T7006] R13: 0000000000000000 R14: 00007f0e9a5b5fa0 R15: 00007fffa7fe5dc8 [ 131.300404][ T7006] [ 131.447051][ T7014] __nla_validate_parse: 8 callbacks suppressed [ 131.447070][ T7014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'. [ 131.495225][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.396'. [ 131.500077][ T7014] openvswitch: netlink: EtherType 0 is less than min 600 [ 131.707648][ T7018] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 131.734933][ T7018] netlink: 204 bytes leftover after parsing attributes in process `syz.1.399'. [ 131.744698][ T7018] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 132.466417][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.410'. [ 132.475694][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 132.559816][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.411'. [ 132.581752][ T7050] openvswitch: netlink: EtherType 0 is less than min 600 [ 132.800736][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.414'. [ 132.896524][ T7060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.415'. [ 132.933390][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.248244][ T7071] netlink: 324 bytes leftover after parsing attributes in process `syz.2.419'. [ 133.642463][ T7085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.426'. [ 133.851727][ T7097] syz_tun: entered allmulticast mode [ 133.860829][ T7096] syz_tun: left allmulticast mode [ 134.821136][ T7133] FAULT_INJECTION: forcing a failure. [ 134.821136][ T7133] name failslab, interval 1, probability 0, space 0, times 0 [ 134.834080][ T7133] CPU: 1 UID: 0 PID: 7133 Comm: syz.2.446 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 134.834109][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.834120][ T7133] Call Trace: [ 134.834128][ T7133] [ 134.834137][ T7133] dump_stack_lvl+0x189/0x250 [ 134.834172][ T7133] ? __pfx____ratelimit+0x10/0x10 [ 134.834202][ T7133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.834232][ T7133] ? __pfx__printk+0x10/0x10 [ 134.834250][ T7133] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 134.834289][ T7133] should_fail_ex+0x414/0x560 [ 134.834320][ T7133] should_failslab+0xa8/0x100 [ 134.834343][ T7133] kmem_cache_alloc_noprof+0x73/0x3c0 [ 134.834373][ T7133] ? skb_clone+0x212/0x3a0 [ 134.834407][ T7133] skb_clone+0x212/0x3a0 [ 134.834440][ T7133] __netlink_deliver_tap+0x404/0x850 [ 134.834480][ T7133] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.834506][ T7133] netlink_deliver_tap+0x19c/0x1b0 [ 134.834530][ T7133] netlink_dump+0x8e4/0xe20 [ 134.834568][ T7133] ? __pfx_netlink_dump+0x10/0x10 [ 134.834607][ T7133] ? netlink_lookup+0x30/0x200 [ 134.834628][ T7133] ? netlink_lookup+0x30/0x200 [ 134.834646][ T7133] ? netlink_lookup+0x30/0x200 [ 134.834675][ T7133] __netlink_dump_start+0x5cb/0x7e0 [ 134.834709][ T7133] rtnetlink_rcv_msg+0x9eb/0xb70 [ 134.834734][ T7133] ? __pfx_br_vlan_rtm_dump+0x10/0x10 [ 134.834758][ T7133] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 134.834780][ T7133] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.834801][ T7133] ? ref_tracker_free+0x63a/0x7d0 [ 134.834824][ T7133] ? __pfx_rtnl_dumpit+0x10/0x10 [ 134.834846][ T7133] ? __pfx_br_vlan_rtm_dump+0x10/0x10 [ 134.834869][ T7133] ? __skb_clone+0x63/0x7a0 [ 134.834906][ T7133] netlink_rcv_skb+0x205/0x470 [ 134.834931][ T7133] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.834956][ T7133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.834996][ T7133] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.835018][ T7133] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.835049][ T7133] netlink_unicast+0x758/0x8d0 [ 134.835091][ T7133] netlink_sendmsg+0x805/0xb30 [ 134.835127][ T7133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.835155][ T7133] ? aa_sock_msg_perm+0x94/0x160 [ 134.835183][ T7133] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.835208][ T7133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.835233][ T7133] __sock_sendmsg+0x219/0x270 [ 134.835258][ T7133] ____sys_sendmsg+0x505/0x830 [ 134.835292][ T7133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.835332][ T7133] ? import_iovec+0x74/0xa0 [ 134.835356][ T7133] ___sys_sendmsg+0x21f/0x2a0 [ 134.835386][ T7133] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.835459][ T7133] ? __fget_files+0x2a/0x420 [ 134.835480][ T7133] ? __fget_files+0x3a0/0x420 [ 134.835515][ T7133] __x64_sys_sendmsg+0x19b/0x260 [ 134.835546][ T7133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.835585][ T7133] ? __pfx_ksys_write+0x10/0x10 [ 134.835601][ T7133] ? rcu_is_watching+0x15/0xb0 [ 134.835637][ T7133] ? do_syscall_64+0xbe/0x3b0 [ 134.835662][ T7133] do_syscall_64+0xfa/0x3b0 [ 134.835678][ T7133] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.835707][ T7133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.835726][ T7133] ? clear_bhb_loop+0x60/0xb0 [ 134.835751][ T7133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.835770][ T7133] RIP: 0033:0x7f9c3858e929 [ 134.835789][ T7133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.835805][ T7133] RSP: 002b:00007f9c39494038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.835826][ T7133] RAX: ffffffffffffffda RBX: 00007f9c387b5fa0 RCX: 00007f9c3858e929 [ 134.835840][ T7133] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000003 [ 134.835852][ T7133] RBP: 00007f9c39494090 R08: 0000000000000000 R09: 0000000000000000 [ 134.835864][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.835876][ T7133] R13: 0000000000000000 R14: 00007f9c387b5fa0 R15: 00007ffe9a85ef88 [ 134.835910][ T7133] [ 135.449770][ T7143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 135.742367][ T7156] set match dimension is over the limit! [ 135.755546][ T7156] x_tables: duplicate underflow at hook 2 [ 136.844121][ T7197] FAULT_INJECTION: forcing a failure. [ 136.844121][ T7197] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 136.875897][ T7197] CPU: 0 UID: 0 PID: 7197 Comm: syz.2.469 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 136.875934][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.875946][ T7197] Call Trace: [ 136.875955][ T7197] [ 136.875964][ T7197] dump_stack_lvl+0x189/0x250 [ 136.875997][ T7197] ? __pfx____ratelimit+0x10/0x10 [ 136.876027][ T7197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.876056][ T7197] ? __pfx__printk+0x10/0x10 [ 136.876080][ T7197] ? fs_reclaim_acquire+0x7d/0x100 [ 136.876113][ T7197] should_fail_ex+0x414/0x560 [ 136.876144][ T7197] prepare_alloc_pages+0x213/0x610 [ 136.876176][ T7197] __alloc_frozen_pages_noprof+0x123/0x370 [ 136.876205][ T7197] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.876239][ T7197] ? policy_nodemask+0x27c/0x720 [ 136.876256][ T7197] ? __lock_acquire+0xab9/0xd20 [ 136.876290][ T7197] alloc_pages_mpol+0x232/0x4a0 [ 136.876318][ T7197] vma_alloc_folio_noprof+0xe4/0x200 [ 136.876338][ T7197] ? page_table_check_set+0x18d/0x730 [ 136.876360][ T7197] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 136.876396][ T7197] folio_prealloc+0x30/0x180 [ 136.876419][ T7197] __handle_mm_fault+0x2c88/0x5620 [ 136.876473][ T7197] ? __pfx___handle_mm_fault+0x10/0x10 [ 136.876520][ T7197] ? follow_page_pte+0x8d6/0x14b0 [ 136.876561][ T7197] handle_mm_fault+0x40a/0x8e0 [ 136.876602][ T7197] __get_user_pages+0x1af4/0x30b0 [ 136.876670][ T7197] ? __pfx___get_user_pages+0x10/0x10 [ 136.876696][ T7197] ? __gup_longterm_locked+0x309/0x15b0 [ 136.876723][ T7197] ? down_read_killable+0x1d1/0x350 [ 136.876742][ T7197] ? try_get_folio+0x633/0x660 [ 136.876764][ T7197] __gup_longterm_locked+0x3e3/0x15b0 [ 136.876821][ T7197] gup_fast_fallback+0x1cd4/0x2260 [ 136.876904][ T7197] ? __pfx_gup_fast_fallback+0x10/0x10 [ 136.876934][ T7197] ? rcu_is_watching+0x15/0xb0 [ 136.876967][ T7197] ? is_valid_gup_args+0x11f/0x200 [ 136.876997][ T7197] ? pin_user_pages_fast+0x4d/0xb0 [ 136.877027][ T7197] rds_cmsg_rdma_args+0x8f4/0x1240 [ 136.877091][ T7197] rds_cmsg_send+0x33d/0x5c0 [ 136.877130][ T7197] rds_sendmsg+0x1129/0x1f00 [ 136.877172][ T7197] ? __pfx_rds_sendmsg+0x10/0x10 [ 136.877192][ T7197] ? aa_sk_perm+0x81e/0x950 [ 136.877222][ T7197] ? __pfx_aa_sk_perm+0x10/0x10 [ 136.877242][ T7197] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 136.877277][ T7197] ? aa_sock_msg_perm+0x94/0x160 [ 136.877303][ T7197] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.877327][ T7197] ? __pfx_rds_sendmsg+0x10/0x10 [ 136.877356][ T7197] __sock_sendmsg+0x219/0x270 [ 136.877382][ T7197] ____sys_sendmsg+0x505/0x830 [ 136.877417][ T7197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.877457][ T7197] ? import_iovec+0x74/0xa0 [ 136.877482][ T7197] ___sys_sendmsg+0x21f/0x2a0 [ 136.877512][ T7197] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.877586][ T7197] ? __fget_files+0x2a/0x420 [ 136.877606][ T7197] ? __fget_files+0x3a0/0x420 [ 136.877641][ T7197] __x64_sys_sendmsg+0x19b/0x260 [ 136.877672][ T7197] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.877711][ T7197] ? __pfx_ksys_write+0x10/0x10 [ 136.877727][ T7197] ? rcu_is_watching+0x15/0xb0 [ 136.877761][ T7197] ? do_syscall_64+0xbe/0x3b0 [ 136.877785][ T7197] do_syscall_64+0xfa/0x3b0 [ 136.877803][ T7197] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.877841][ T7197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.877860][ T7197] ? clear_bhb_loop+0x60/0xb0 [ 136.877882][ T7197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.877901][ T7197] RIP: 0033:0x7f9c3858e929 [ 136.877919][ T7197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.877935][ T7197] RSP: 002b:00007f9c39494038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.877956][ T7197] RAX: ffffffffffffffda RBX: 00007f9c387b5fa0 RCX: 00007f9c3858e929 [ 136.877970][ T7197] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 136.877983][ T7197] RBP: 00007f9c39494090 R08: 0000000000000000 R09: 0000000000000000 [ 136.877995][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.878007][ T7197] R13: 0000000000000000 R14: 00007f9c387b5fa0 R15: 00007ffe9a85ef88 [ 136.878040][ T7197] [ 137.312390][ T7203] __nla_validate_parse: 8 callbacks suppressed [ 137.312412][ T7203] netlink: 324 bytes leftover after parsing attributes in process `syz.1.470'. [ 137.757904][ T7214] netlink: 'syz.1.471': attribute type 4 has an invalid length. [ 137.790172][ T7219] netlink: 'syz.4.474': attribute type 10 has an invalid length. [ 137.834401][ T7219] veth0_vlan: left promiscuous mode [ 137.843639][ T7223] netlink: 256 bytes leftover after parsing attributes in process `syz.2.476'. [ 137.847165][ T7219] veth0_vlan: entered promiscuous mode [ 137.883270][ T7219] team0: Device veth0_vlan failed to register rx_handler [ 138.335054][ T7233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.478'. [ 138.360144][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.478'. [ 138.700478][ T7240] syz_tun: entered allmulticast mode [ 138.707805][ T7240] syz_tun: left allmulticast mode [ 139.430971][ T7263] lo speed is unknown, defaulting to 1000 [ 139.620732][ T7271] syz_tun: entered allmulticast mode [ 139.640892][ T7271] syz_tun: left allmulticast mode [ 139.659806][ T7272] netlink: 324 bytes leftover after parsing attributes in process `syz.4.495'. [ 140.020751][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 140.283799][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.342131][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.373379][ T1163] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.444121][ T76] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.102444][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.503'. [ 141.948712][ T7373] syz_tun: entered allmulticast mode [ 141.966131][ T7373] syz_tun: left allmulticast mode [ 142.477836][ T7397] syz_tun: entered allmulticast mode [ 142.727199][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 142.807376][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.521'. [ 142.986783][ T7415] netlink: 324 bytes leftover after parsing attributes in process `syz.3.522'. [ 143.644314][ T7435] syz_tun: entered allmulticast mode [ 143.651603][ T7435] syz_tun: left allmulticast mode [ 143.776865][ T7442] set match dimension is over the limit! [ 144.046270][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.536'. [ 145.218601][ T7485] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 145.247914][ T7485] team0: Device ipvlan2 is already an upper device of the team interface [ 145.579164][ T7505] veth0: entered promiscuous mode [ 145.598968][ T7505] veth0: left promiscuous mode [ 145.665081][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 145.704476][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 145.761867][ T7505] netlink: 'syz.3.548': attribute type 18 has an invalid length. [ 145.818189][ T7512] veth0: entered promiscuous mode [ 145.862360][ T7513] veth0: left promiscuous mode [ 146.140172][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 146.175351][ T7533] syz_tun: entered allmulticast mode [ 146.182530][ T7533] syz_tun: left allmulticast mode [ 146.972381][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.567'. [ 147.065109][ T7567] syz_tun: entered allmulticast mode [ 147.094020][ T7566] syz_tun: left allmulticast mode [ 147.271130][ T7574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.572'. [ 147.638693][ T7589] netlink: 'syz.4.577': attribute type 10 has an invalid length. [ 148.136960][ T7611] syz_tun: entered allmulticast mode [ 148.146576][ T7606] syz_tun: left allmulticast mode [ 148.423695][ T7622] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 148.438497][ T7621] netlink: 324 bytes leftover after parsing attributes in process `syz.3.589'. [ 148.584033][ T7624] netlink: 324 bytes leftover after parsing attributes in process `syz.1.590'. [ 149.159629][ T7641] syz_tun: entered allmulticast mode [ 149.182673][ T7640] syz_tun: left allmulticast mode [ 149.266696][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 149.517227][ T7651] bond0: entered promiscuous mode [ 149.524473][ T7649] netlink: 324 bytes leftover after parsing attributes in process `syz.1.602'. [ 149.551858][ T7651] bond_slave_0: entered promiscuous mode [ 149.576268][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.604'. [ 149.585748][ T7651] bond_slave_1: entered promiscuous mode [ 149.593287][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.604'. [ 149.595022][ T7651] batadv_slave_0: entered promiscuous mode [ 149.645495][ T7651] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 149.684583][ T7651] Cannot create hsr debugfs directory [ 149.715978][ T7651] hsr1: entered promiscuous mode [ 149.983738][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 149.997713][ T7673] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 150.013632][ T7673] netlink: 56 bytes leftover after parsing attributes in process `syz.3.607'. [ 150.143762][ T7676] syz_tun: entered allmulticast mode [ 150.151741][ T7675] syz_tun: left allmulticast mode [ 150.903912][ T7705] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 150.947856][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 151.071797][ T7716] syz_tun: entered allmulticast mode [ 151.081792][ T7715] syz_tun: left allmulticast mode [ 151.595421][ T7738] bond0: (slave vxlan1): Enslaving as an active interface with an up link [ 151.636826][ T1103] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.660461][ T1103] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.705201][ T1103] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.731700][ T1103] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.941985][ T5916] IPVS: starting estimator thread 0... [ 152.048686][ T7750] IPVS: using max 22 ests per chain, 52800 per kthread [ 152.103707][ T7749] syzkaller0: entered promiscuous mode [ 152.109603][ T7749] syzkaller0: entered allmulticast mode [ 152.117654][ T7756] syz_tun: entered allmulticast mode [ 152.657399][ T7781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.646'. [ 153.681210][ T7760] syz_tun: left allmulticast mode [ 153.929922][ T7791] netlink: 324 bytes leftover after parsing attributes in process `syz.4.650'. [ 153.982498][ T7801] FAULT_INJECTION: forcing a failure. [ 153.982498][ T7801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.031718][ T7801] CPU: 1 UID: 0 PID: 7801 Comm: syz.1.651 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 154.031749][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.031761][ T7801] Call Trace: [ 154.031769][ T7801] [ 154.031776][ T7801] dump_stack_lvl+0x189/0x250 [ 154.031812][ T7801] ? __pfx____ratelimit+0x10/0x10 [ 154.031840][ T7801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.031928][ T7801] ? __pfx__printk+0x10/0x10 [ 154.031950][ T7801] ? __might_fault+0xb0/0x130 [ 154.031983][ T7801] should_fail_ex+0x414/0x560 [ 154.032013][ T7801] _copy_from_user+0x2d/0xb0 [ 154.032034][ T7801] generic_map_update_batch+0x51b/0x7f0 [ 154.032070][ T7801] ? __pfx_generic_map_update_batch+0x10/0x10 [ 154.032091][ T7801] ? __fget_files+0x2a/0x420 [ 154.032121][ T7801] ? __pfx_generic_map_update_batch+0x10/0x10 [ 154.032141][ T7801] bpf_map_do_batch+0x36c/0x5f0 [ 154.032176][ T7801] __sys_bpf+0x384/0x860 [ 154.032204][ T7801] ? __pfx___sys_bpf+0x10/0x10 [ 154.032246][ T7801] ? ksys_write+0x22a/0x250 [ 154.032268][ T7801] ? __pfx_ksys_write+0x10/0x10 [ 154.032283][ T7801] ? rcu_is_watching+0x15/0xb0 [ 154.032321][ T7801] __x64_sys_bpf+0x7c/0x90 [ 154.032345][ T7801] do_syscall_64+0xfa/0x3b0 [ 154.032363][ T7801] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.032391][ T7801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.032411][ T7801] ? clear_bhb_loop+0x60/0xb0 [ 154.032435][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.032454][ T7801] RIP: 0033:0x7f5e5f38e929 [ 154.032473][ T7801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.032489][ T7801] RSP: 002b:00007f5e5d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.032511][ T7801] RAX: ffffffffffffffda RBX: 00007f5e5f5b5fa0 RCX: 00007f5e5f38e929 [ 154.032525][ T7801] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 154.032537][ T7801] RBP: 00007f5e5d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.032550][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.032562][ T7801] R13: 0000000000000000 R14: 00007f5e5f5b5fa0 R15: 00007ffd644c4328 [ 154.032595][ T7801] [ 154.523802][ T7808] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.653'. [ 154.561714][ T7806] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.653'. [ 154.634030][ T7812] tipc: Failed to remove unknown binding: 66,1,1/0:1542388648/1542388650 [ 154.655144][ T7815] syz_tun: entered allmulticast mode [ 154.674675][ T7814] syz_tun: left allmulticast mode [ 155.100753][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.663'. [ 155.416860][ T7841] netlink: 36 bytes leftover after parsing attributes in process `syz.2.668'. [ 155.491352][ T7847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.668'. [ 155.565689][ T7846] netlink: 84 bytes leftover after parsing attributes in process `syz.0.669'. [ 155.607609][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.669'. [ 155.694577][ T7858] syz_tun: entered allmulticast mode [ 155.740642][ T7855] syz_tun: left allmulticast mode [ 156.214879][ T7871] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.676'. [ 156.379419][ T7880] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 156.709148][ T7887] FAULT_INJECTION: forcing a failure. [ 156.709148][ T7887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.761342][ T7887] CPU: 1 UID: 0 PID: 7887 Comm: syz.2.683 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 156.761373][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.761384][ T7887] Call Trace: [ 156.761392][ T7887] [ 156.761400][ T7887] dump_stack_lvl+0x189/0x250 [ 156.761437][ T7887] ? __pfx____ratelimit+0x10/0x10 [ 156.761466][ T7887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.761495][ T7887] ? __pfx__printk+0x10/0x10 [ 156.761517][ T7887] ? __might_fault+0xb0/0x130 [ 156.761548][ T7887] should_fail_ex+0x414/0x560 [ 156.761579][ T7887] _copy_from_user+0x2d/0xb0 [ 156.761600][ T7887] ___sys_sendmsg+0x158/0x2a0 [ 156.761630][ T7887] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.761699][ T7887] ? __fget_files+0x2a/0x420 [ 156.761721][ T7887] ? __fget_files+0x3a0/0x420 [ 156.761761][ T7887] __x64_sys_sendmsg+0x19b/0x260 [ 156.761792][ T7887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.761830][ T7887] ? __pfx_ksys_write+0x10/0x10 [ 156.761847][ T7887] ? rcu_is_watching+0x15/0xb0 [ 156.761883][ T7887] ? do_syscall_64+0xbe/0x3b0 [ 156.761906][ T7887] do_syscall_64+0xfa/0x3b0 [ 156.761923][ T7887] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.761951][ T7887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.761969][ T7887] ? clear_bhb_loop+0x60/0xb0 [ 156.761993][ T7887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.762010][ T7887] RIP: 0033:0x7f9c3858e929 [ 156.762029][ T7887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.762045][ T7887] RSP: 002b:00007f9c39494038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.762067][ T7887] RAX: ffffffffffffffda RBX: 00007f9c387b5fa0 RCX: 00007f9c3858e929 [ 156.762082][ T7887] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 156.762094][ T7887] RBP: 00007f9c39494090 R08: 0000000000000000 R09: 0000000000000000 [ 156.762106][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.762118][ T7887] R13: 0000000000000000 R14: 00007f9c387b5fa0 R15: 00007ffe9a85ef88 [ 156.762149][ T7887] [ 156.763413][ T7890] syz_tun: entered allmulticast mode [ 156.993403][ T7891] netlink: 'syz.1.685': attribute type 15 has an invalid length. [ 157.003963][ T7891] netlink: 666 bytes leftover after parsing attributes in process `syz.1.685'. [ 157.048849][ C0] ------------[ cut here ]------------ [ 157.054910][ C0] WARNING: CPU: 0 PID: 7902 at net/ipv4/ipmr.c:2302 ip_mr_output+0xbb1/0xe70 [ 157.063884][ C0] Modules linked in: [ 157.068079][ C0] CPU: 0 UID: 0 PID: 7902 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 157.080673][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.091427][ C0] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 157.096778][ C0] Code: df e9 63 f6 ff ff e8 fe 71 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 3a 11 4c ff e9 45 f6 ff ff e8 e0 71 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 d2 71 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 157.116492][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 157.122740][ C0] RAX: ffffffff89f9ed10 RBX: ffff888030fba140 RCX: ffff88807de95a00 [ 157.124121][ T7903] lo speed is unknown, defaulting to 1000 [ 157.130814][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.130850][ C0] RBP: ffffc90000007a10 R08: ffff88807de95a00 R09: 0000000000000004 [ 157.130865][ C0] R10: 0000000000000003 R11: ffffffff89f9e160 R12: 0000000000000010 [ 157.130878][ C0] R13: dffffc0000000000 R14: ffff8880561b1e00 R15: 0000000000000000 [ 157.130894][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 157.178226][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.185020][ C0] CR2: 00007fcd5b7fffe8 CR3: 000000007817e000 CR4: 00000000003526f0 [ 157.193177][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.201303][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 157.209518][ C0] Call Trace: [ 157.212822][ C0] [ 157.215689][ C0] ? __pfx_dst_output+0x10/0x10 [ 157.220636][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 157.226056][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 157.232306][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 157.237382][ C0] ? skb_dst+0x4f/0xd0 [ 157.241577][ C0] ? dst_output+0x177/0x1c0 [ 157.246299][ C0] igmp_send_report+0x89e/0xdb0 [ 157.251247][ C0] ? __pfx_igmp_send_report+0x10/0x10 [ 157.256665][ C0] ? do_raw_spin_lock+0x121/0x290 [ 157.261811][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 157.267061][ C0] igmp_timer_expire+0x204/0x510 [ 157.272176][ C0] call_timer_fn+0x17e/0x5f0 [ 157.276811][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 157.282375][ C0] ? call_timer_fn+0xbe/0x5f0 [ 157.287103][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 157.292326][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.297577][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.302877][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 157.308412][ C0] __run_timer_base+0x61a/0x860 [ 157.313306][ C0] ? ktime_get+0x3e/0x1f0 [ 157.317702][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 157.323164][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 157.329544][ C0] run_timer_softirq+0xb7/0x180 [ 157.334451][ C0] handle_softirqs+0x286/0x870 [ 157.339394][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 157.343224][ T7889] syz_tun: left allmulticast mode [ 157.344207][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 157.354700][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 157.360002][ C0] __irq_exit_rcu+0xca/0x1f0 [ 157.364636][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 157.370009][ C0] irq_exit_rcu+0x9/0x30 [ 157.374299][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 157.380004][ C0] [ 157.382957][ C0] [ 157.386002][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.392031][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 157.398750][ C0] Code: 74 05 e8 cb 4e 5f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d3 3a 28 f6 65 8b 05 bc 43 34 07 85 c0 74 40 48 c7 04 24 0e 36 [ 157.418936][ C0] RSP: 0018:ffffc9000f7ef140 EFLAGS: 00000206 [ 157.425055][ C0] RAX: 53850684d9d88500 RBX: 0000000000000a06 RCX: 53850684d9d88500 [ 157.433130][ C0] RDX: 0000000000000006 RSI: ffffffff8d982dfc RDI: 0000000000000001 [ 157.441170][ C0] RBP: ffffc9000f7ef1c0 R08: ffffffff8fa10ff7 R09: 1ffffffff1f421fe [ 157.449246][ C0] R10: dffffc0000000000 R11: fffffbfff1f421ff R12: dffffc0000000000 [ 157.457348][ C0] R13: ffff888033354900 R14: ffffffff99c9d928 R15: 1ffff92001efde28 [ 157.465432][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 157.471940][ C0] ? mas_destroy+0x1680/0x1c70 [ 157.476772][ C0] debug_check_no_obj_freed+0x451/0x470 [ 157.482605][ C0] ? mas_destroy+0x1680/0x1c70 [ 157.487417][ C0] kmem_cache_free+0x113/0x400 [ 157.492276][ C0] mas_destroy+0x1680/0x1c70 [ 157.497118][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 157.502152][ C0] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 157.508310][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 157.514623][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.519930][ C0] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 157.526044][ C0] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 157.532381][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 157.539043][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 157.544107][ C0] ? kmem_cache_alloc_bulk_noprof+0x4fd/0x790 [ 157.550240][ C0] ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0 [ 157.556452][ C0] ? trace_ma_write+0x87/0x1f0 [ 157.561403][ C0] mas_store_prealloc+0xb69/0xf60 [ 157.566576][ C0] ? __pfx_mas_store_prealloc+0x10/0x10 [ 157.572300][ C0] mmap_region+0x1485/0x1f30 [ 157.577023][ C0] ? __pfx_mmap_region+0x10/0x10 [ 157.582030][ C0] ? unmapped_area_topdown+0x571/0x590 [ 157.587788][ C0] ? __kasan_slab_free+0x62/0x70 [ 157.592904][ C0] ? kfree+0x18e/0x440 [ 157.597091][ C0] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 157.603376][ C0] ? bpf_lsm_mmap_addr+0x9/0x20 [ 157.608312][ C0] ? security_mmap_addr+0x71/0x270 [ 157.613493][ C0] ? shmem_mapping+0xd/0x50 [ 157.618201][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 157.623714][ C0] do_mmap+0xc45/0x10d0 [ 157.628009][ C0] ? __pfx_do_mmap+0x10/0x10 [ 157.632736][ C0] ? down_write_killable+0x178/0x230 [ 157.638110][ C0] ? end_current_label_crit_section+0x152/0x180 [ 157.644568][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 157.650308][ C0] vm_mmap_pgoff+0x31b/0x4c0 [ 157.654974][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 157.660363][ C0] ? __fget_files+0x2a/0x420 [ 157.665001][ C0] ? __fget_files+0x3a0/0x420 [ 157.669773][ C0] ? __fget_files+0x2a/0x420 [ 157.674412][ C0] ksys_mmap_pgoff+0x51f/0x760 [ 157.679514][ C0] do_syscall_64+0xfa/0x3b0 [ 157.684065][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.689444][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.696060][ C0] ? clear_bhb_loop+0x60/0xb0 [ 157.700891][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.707038][ C0] RIP: 0033:0x7fcd5bad1242 [ 157.711713][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 157.731901][ C0] RSP: 002b:00007ffe0c2f4d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 157.740419][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd5bad1242 [ 157.748602][ C0] RDX: 0000000000000001 RSI: 0000000000006050 RDI: 0000000000000000 [ 157.756709][ C0] RBP: 0000000000000802 R08: 0000000000000003 R09: 0000000000000000 [ 157.764767][ C0] R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000000 [ 157.772803][ C0] R13: 00007fcd5baa6050 R14: 00007ffe0c2f51c0 R15: 00000fffc185e9b4 [ 157.780879][ C0] [ 157.784280][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 157.791594][ C0] CPU: 0 UID: 0 PID: 7902 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 157.804050][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.814220][ C0] Call Trace: [ 157.817529][ C0] [ 157.820382][ C0] dump_stack_lvl+0x99/0x250 [ 157.824995][ C0] ? __asan_memcpy+0x40/0x70 [ 157.829630][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.835189][ C0] ? __pfx__printk+0x10/0x10 [ 157.839810][ C0] panic+0x2db/0x790 [ 157.844012][ C0] ? __pfx_panic+0x10/0x10 [ 157.848695][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 157.853947][ C0] __warn+0x31b/0x4b0 [ 157.857964][ C0] ? ip_mr_output+0xbb1/0xe70 [ 157.862776][ C0] ? ip_mr_output+0xbb1/0xe70 [ 157.867467][ C0] report_bug+0x2be/0x4f0 [ 157.871820][ C0] ? ip_mr_output+0xbb1/0xe70 [ 157.876596][ C0] ? ip_mr_output+0xbb1/0xe70 [ 157.881297][ C0] ? ip_mr_output+0xbb3/0xe70 [ 157.886019][ C0] handle_bug+0x84/0x160 [ 157.890288][ C0] exc_invalid_op+0x1a/0x50 [ 157.894807][ C0] asm_exc_invalid_op+0x1a/0x20 [ 157.899695][ C0] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 157.905006][ C0] Code: df e9 63 f6 ff ff e8 fe 71 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 3a 11 4c ff e9 45 f6 ff ff e8 e0 71 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 d2 71 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 157.924618][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 157.931223][ C0] RAX: ffffffff89f9ed10 RBX: ffff888030fba140 RCX: ffff88807de95a00 [ 157.939202][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.947282][ C0] RBP: ffffc90000007a10 R08: ffff88807de95a00 R09: 0000000000000004 [ 157.955267][ C0] R10: 0000000000000003 R11: ffffffff89f9e160 R12: 0000000000000010 [ 157.963342][ C0] R13: dffffc0000000000 R14: ffff8880561b1e00 R15: 0000000000000000 [ 157.971408][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 157.976470][ C0] ? ip_mr_output+0xbb0/0xe70 [ 157.981420][ C0] ? __pfx_dst_output+0x10/0x10 [ 157.986286][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 157.991660][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 157.997732][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 158.002774][ C0] ? skb_dst+0x4f/0xd0 [ 158.006854][ C0] ? dst_output+0x177/0x1c0 [ 158.011385][ C0] igmp_send_report+0x89e/0xdb0 [ 158.016250][ C0] ? __pfx_igmp_send_report+0x10/0x10 [ 158.021656][ C0] ? do_raw_spin_lock+0x121/0x290 [ 158.026710][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 158.031918][ C0] igmp_timer_expire+0x204/0x510 [ 158.036956][ C0] call_timer_fn+0x17e/0x5f0 [ 158.041571][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 158.047046][ C0] ? call_timer_fn+0xbe/0x5f0 [ 158.051846][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 158.057102][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.062325][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.067538][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 158.073099][ C0] __run_timer_base+0x61a/0x860 [ 158.078141][ C0] ? ktime_get+0x3e/0x1f0 [ 158.082489][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 158.087967][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 158.094490][ C0] run_timer_softirq+0xb7/0x180 [ 158.099359][ C0] handle_softirqs+0x286/0x870 [ 158.104222][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 158.109192][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 158.114513][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 158.119728][ C0] __irq_exit_rcu+0xca/0x1f0 [ 158.124330][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 158.129633][ C0] irq_exit_rcu+0x9/0x30 [ 158.133995][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 158.139756][ C0] [ 158.142702][ C0] [ 158.145637][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 158.151634][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 158.158241][ C0] Code: 74 05 e8 cb 4e 5f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d3 3a 28 f6 65 8b 05 bc 43 34 07 85 c0 74 40 48 c7 04 24 0e 36 [ 158.178158][ C0] RSP: 0018:ffffc9000f7ef140 EFLAGS: 00000206 [ 158.184235][ C0] RAX: 53850684d9d88500 RBX: 0000000000000a06 RCX: 53850684d9d88500 [ 158.192214][ C0] RDX: 0000000000000006 RSI: ffffffff8d982dfc RDI: 0000000000000001 [ 158.200202][ C0] RBP: ffffc9000f7ef1c0 R08: ffffffff8fa10ff7 R09: 1ffffffff1f421fe [ 158.208195][ C0] R10: dffffc0000000000 R11: fffffbfff1f421ff R12: dffffc0000000000 [ 158.216343][ C0] R13: ffff888033354900 R14: ffffffff99c9d928 R15: 1ffff92001efde28 [ 158.224339][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 158.230860][ C0] ? mas_destroy+0x1680/0x1c70 [ 158.235652][ C0] debug_check_no_obj_freed+0x451/0x470 [ 158.241221][ C0] ? mas_destroy+0x1680/0x1c70 [ 158.245991][ C0] kmem_cache_free+0x113/0x400 [ 158.250764][ C0] mas_destroy+0x1680/0x1c70 [ 158.255658][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 158.260708][ C0] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 158.266792][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 158.273034][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.278329][ C0] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 158.284398][ C0] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 158.290641][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 158.297268][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 158.302330][ C0] ? kmem_cache_alloc_bulk_noprof+0x4fd/0x790 [ 158.308452][ C0] ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0 [ 158.314642][ C0] ? trace_ma_write+0x87/0x1f0 [ 158.319429][ C0] mas_store_prealloc+0xb69/0xf60 [ 158.324506][ C0] ? __pfx_mas_store_prealloc+0x10/0x10 [ 158.330087][ C0] mmap_region+0x1485/0x1f30 [ 158.334710][ C0] ? __pfx_mmap_region+0x10/0x10 [ 158.339652][ C0] ? unmapped_area_topdown+0x571/0x590 [ 158.345384][ C0] ? __kasan_slab_free+0x62/0x70 [ 158.350327][ C0] ? kfree+0x18e/0x440 [ 158.354459][ C0] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 158.360455][ C0] ? bpf_lsm_mmap_addr+0x9/0x20 [ 158.365309][ C0] ? security_mmap_addr+0x71/0x270 [ 158.370423][ C0] ? shmem_mapping+0xd/0x50 [ 158.374928][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 158.380393][ C0] do_mmap+0xc45/0x10d0 [ 158.384568][ C0] ? __pfx_do_mmap+0x10/0x10 [ 158.389207][ C0] ? down_write_killable+0x178/0x230 [ 158.394522][ C0] ? end_current_label_crit_section+0x152/0x180 [ 158.400971][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 158.406623][ C0] vm_mmap_pgoff+0x31b/0x4c0 [ 158.411242][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 158.416566][ C0] ? __fget_files+0x2a/0x420 [ 158.421339][ C0] ? __fget_files+0x3a0/0x420 [ 158.426019][ C0] ? __fget_files+0x2a/0x420 [ 158.430787][ C0] ksys_mmap_pgoff+0x51f/0x760 [ 158.435575][ C0] do_syscall_64+0xfa/0x3b0 [ 158.440087][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.445377][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.451536][ C0] ? clear_bhb_loop+0x60/0xb0 [ 158.456225][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.462118][ C0] RIP: 0033:0x7fcd5bad1242 [ 158.466536][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 158.486242][ C0] RSP: 002b:00007ffe0c2f4d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 158.494663][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd5bad1242 [ 158.502635][ C0] RDX: 0000000000000001 RSI: 0000000000006050 RDI: 0000000000000000 [ 158.510782][ C0] RBP: 0000000000000802 R08: 0000000000000003 R09: 0000000000000000 [ 158.519185][ C0] R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000000 [ 158.527155][ C0] R13: 00007fcd5baa6050 R14: 00007ffe0c2f51c0 R15: 00000fffc185e9b4 [ 158.535235][ C0] [ 158.538579][ C0] Kernel Offset: disabled [ 158.543084][ C0] Rebooting in 86400 seconds..