last executing test programs: 4.452529798s ago: executing program 2 (id=2300): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016020000b30000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000100000000000000000000000000000000000000004401050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400000000000000000000fe5c00000000000000000000000000000000000001000000006c0000000a000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000320000000a00"], 0x1fc}}, 0x0) 4.215523629s ago: executing program 2 (id=2303): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x28}}, 0x4840) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) close(r1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYRESOCT=r0, @ANYBLOB="00022abd7004fcdbdf250100000006000a004e34000014000700ff02000000000000000000000000000108000800e0000002050004000100000008000b00", @ANYRESDEC, @ANYBLOB="e7abba4dabfcb486dc21be4c1eb5c31dcd409618e995a69f72418c9a6c8a656a093d33a14e0000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x110) r5 = socket(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) write(r5, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) 2.393870006s ago: executing program 0 (id=2315): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r2 = socket$kcm(0x2d, 0x2, 0x0) accept(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0xfffffd7a) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46c", 0x30}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYRESDEC=r3], 0x60}], 0x1, 0x8001) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0300000000000000000000000000e3cd347e9d08", @ANYRES32=0x0, @ANYBLOB="030000000500"/27], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000580)={0xffffffffffffffff, 0x6, 0x1800, 0x6}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.310230939s ago: executing program 1 (id=2318): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xa, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000580)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x21}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1360}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="7e7a1c8b2b3ce7433e736bd9e8ed77944de7546a584ebe68c0c86303c7ddd9e610b0bb77336ff5b284990e94977cf8ddae2385a199b36e9f867bdce684e2469a47c7df2efb55fcdf3a7b97c9a3875687fbb814528c9bfca3cc29c0c98300cd3a1cb07f54086e1f5ff80f6ae7d174d53b7d96618f732d1037d729cb31ef507692876ee4c753674cf5ddd39e0585102ad3a21b02b55f3258e86965bff2f5874416f8b2c035484832c711ca9aa38d6f44376496bef71f57eb1f76f042ab28fa9b3d8c91307c1d214fc8578716609c10b1768e002b11b16595116cd2792be05a922dde7a64011cef1599d48288cfa88316", 0xef}, {&(0x7f0000000600)="a959565e4928a0bb10b5306c8673c785469ea4388704bed8a1307ed9a5c9f0fb8a8836439c92cbc7d8f9c51a36ad5e3f2b60847fd81297949d104ce075fbe6043d6013f1ec3f629a6b09fc728881bf14dc36f7878f26bdc0db3316379406f5076934c731b47955df1018317e26ecdd162f188ddbb54674815c4715e7bc70a8a2f3e75f", 0x83}, {&(0x7f0000001ac0)="c74dbee25a6d367e108e37ca9c315cd7342aaf8e33611c7272b246f48f0277ea0c0402e658303991bebf9f5fcc235d6e601f58181d05b1bba5ac41f3e739000550b003341763afff971a230088b22ed123799a81617cf37d916afc93eccd755b0359df56c0dfb852697e618133c41d954893c903b0694764a92b02df11423dc9f4978a0f976cb0395820d519ff5603ae53624a8cd019b57aef", 0x99}], 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x180}}], 0x2, 0x1) 2.064019692s ago: executing program 4 (id=2320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r1, 0x6, 0x2a, &(0x7f0000000000)="7c0b0e125f3f362365fed527652d1d966b8feb583e15c4781669e8ad5aa2c49f8d7da9a4e42290c60439e3d757837814ef0b2e00f0e87910dea0152920905267c5bb64013076ee9af2a0f0de5df89942df8ec8c61b1f4ae17c25561a25b2439165bdcef53c9b8e1cf273644a4a1005af5751554b19474ddf43", 0x79) 2.045466741s ago: executing program 1 (id=2321): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000005c0), 0x10) (async) bind$can_raw(r1, &(0x7f00000005c0), 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001880)=0xd1, 0x4) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001880)=0xd1, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000440)={&(0x7f00000002c0)=@can={{0x4, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "20cffe95ebf090cf"}, 0x10}}, 0x40) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000340)=@req={0xff, 0xe, 0x2, 0x7}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4212a2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,', 0x0}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="0000000000f0ffffff00"/28], 0x1b) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, &(0x7f0000000380)="8c08ab6757b6915b213cc1f2dba8c051a9d0a35994f861f391dc9278d358700a1a5f92b3cedf1d430f8516f5acc4dc5f23d3c9e182600a674a7f189e3790f7e751d2", &(0x7f0000000e80), 0x4, r6}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, &(0x7f0000000380)="8c08ab6757b6915b213cc1f2dba8c051a9d0a35994f861f391dc9278d358700a1a5f92b3cedf1d430f8516f5acc4dc5f23d3c9e182600a674a7f189e3790f7e751d2", &(0x7f0000000e80), 0x4, r6}, 0x38) close(r6) (async) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES16=r7, @ANYRESDEC=r5, @ANYRESOCT=r8, @ANYRES32=r7], 0x32600) (async) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES16=r7, @ANYRESDEC=r5, @ANYRESOCT=r8, @ANYRES32=r7], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, 0x0, &(0x7f00000000c0)) 1.788290367s ago: executing program 2 (id=2323): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x34, r1, 0x483, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000000)=0xd, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bd3d", 0x2}], 0x1}, 0x20040805) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000640)="8a", 0x1}], 0x1}, 0x8000) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 1.738719006s ago: executing program 4 (id=2324): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x2140dcfffd4d4d7f, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x50) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRES16=r3], 0x1000f) 1.715666365s ago: executing program 1 (id=2325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000040030000401", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaea1586dd6003136c00008700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) writev(r2, 0x0, 0x0) write$tun(r2, 0x0, 0x0) 1.645440127s ago: executing program 4 (id=2326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000003b000000b70002000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x0, 0x207, 0x0, 0x0, 0x9, 0x7}, 0x20) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="fef351f6b11f4247624e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd70400000000011000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4024044) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x55, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) 1.420267094s ago: executing program 3 (id=2328): unshare(0x20000400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r0, 0x24, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0), 0x0, 0xd4, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x3e, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 1.368271084s ago: executing program 3 (id=2329): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x15, 0x12, &(0x7f0000000600)=@raw=[@ldst={0x0, 0x3, 0x6, 0x1, 0x2, 0x20, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @generic={0x0, 0x6, 0xf, 0x7fff, 0x8}], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, &(0x7f00000006c0), 0x41000, 0x4, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xf, 0x9070, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000c00)=[r5], &(0x7f0000000c40)=[{0x2, 0x5, 0x10, 0x5}, {0x5, 0x1, 0xe, 0x8}, {0x2, 0x3, 0x7, 0x4}, {0x0, 0x5, 0x0, 0x8}], 0x10, 0x4}, 0x94) pipe(&(0x7f0000003f80)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000003ec0)={0x1a, 0x1d, &(0x7f0000003940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x4, 0x9, 0x9, 0x8, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003a40)='syzkaller\x00', 0xfff, 0xb9, &(0x7f0000003a80)=""/185, 0x40f00, 0xb5b2c28e1a317370, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003e80)={0x2, 0xb, 0x25, 0x100}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x3, @value=r6}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r10 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r10, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000084"], 0x18}}], 0x2, 0x844) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r3}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000003b40)={@multicast, @remote, @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x5, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2}}}}}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000040)={0x10000000}) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', r8, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1a, &(0x7f0000003840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf37, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x9}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x6, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r15], &(0x7f0000000500)=[{0x5, 0x3, 0x9, 0x5}]}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @local, @empty}}}}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f0000000040)) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmmsg(r9, &(0x7f0000000d00)=[{{&(0x7f0000000600)=@nl=@unspec, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)="b62345beb594a96eb9920af800e6d0a5ac032172beb3c130b3950d556f2047d340d88609b731838a8e4971c1a07cda38edb8377a064df765f2e6304453144370435887bc069e0725e737a7dbdce227d0", 0x50}, {&(0x7f00000009c0)="75b04da67b36588a3dadb63935469e80923c8b1fe4604513c3ea26b0e2642dc076dd4c3159d93858455f0f1d87e9ce658ab660e8faf8cf35ac0af16fe4e9e99bff822f9c6834ab44de24f1bb130c8c7731f231cb85678789840a52bc7bc268fd5f5c28aced07317e951eed93b4bd46f0f1ef30ed2bde95e72f472a755146dcc2ba0e468a1ed31c9f6a293522d4f3806d0b2a5c65", 0x94}, {&(0x7f0000000480)="a8bf0c692c55531e95dacfc9", 0xc}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000680)="401818d9624f3c3a", 0x8}, {&(0x7f0000001e80)="9100a6047394c1cad5afb19c9eac501e434e5feb20d77d07a0b4ba80adf351d508242311a0d819ae548b894ff8b77b687cf2cc08e169a52f3d92ecc31e49ccdceb2541f9626cbe4debcd2aecb96021402ac46d34c4484b37a256b27b3676862fce50c1658824a93462634bdb4c2af9dbae764d5e270dc75ab24469a6358488c3e96d80a6e04b084af01abcee0e9a215c77466d43fbfb002d9681c9348b029be3688c19dcc3d25e389b88f7bbbc8e7d7a5774ddc3d06ff359321dde0010716891c754e8deed4f3b5fb09aa991012efcf584eda051bdfda06c4d594219677e6fa5a00cdc28b9e81f329eff5ac84c99801990064455adf4a5723f122f3cdf63ba56e5e6b0041986ac3af71ae990f60ce69bca6693ba6a09d0e4c2ffd509eef47f34c7294a523f16816d005535f97b488bcf482d91bc9b44709784e9dea641b462a95b3019fcf993900b947aba2eb7ee9a730e5083388d67a3fe71681d554903b3ccdb25886ef0744ed93433fbb42425c5ee714212148aa1ee1525033d270119707c939a7a03ec1b56b827eab64e02d908bedbaf8a5efc696afcf2ed2f8bc372577caf83e85560962a788983632def3760cad5402f9ed90d561d19ed3b62b71b94c55f17524bfdddc578ed60050b5b949b03a809a13ab4c8a4ae2df5d92ec6d23d260b5f9530fb80fcd508fa1303960db8d548213bef9fadd23e7b62d9fa04a95a6b8501973aeb0801749472209598102fa9726d1eadc70397ef17200848da628becd071fe36591e44a452fcdc9b3b3269f29f80bbe361b9401c95d5e1ee166bba87a4730dc82e000095a07f322e2877a6afe4cac3223d11ac6a6de4b7f4d1ce882c74b455f6cd4e3278ae2205bc029921f71b3b11a8466e7cef8eeeb3a8a775face139554b2eca44f42a0af5235de7d81ed6e5fa35c6c914a944b13add598ceb6f4e41ca9eccbbbb755c91dd9e8ece5b282401db7ac9eaccdccce3bfe99a476662f1b97a5b7c38341b98065c8878cb1f6433bac767a58c43777bd56063a90e457857129af8185bc1395c9eae4e8c9e82fb46c78a3902cfcad9356d22e9f0631f1216162fefec1fde56ec6731e95888223b1e063c567aade6133927272300700a2f6fd5b4b0cfc0363478ac1b10a77d7580fd970c3bb34f98b91fd9516441aaad80aff7ba874cb81ebde1cef9d2e8897844b8ee8c8bbbdd47340a8d0bc1192e3cd8c9594cedca8ea4ca3845775ae01b7695392086fbf009d32f577842cf4b081cee921668d50bec8dc7c44c3e82ff1334542fba451f0f75d3bd42c7f5594ea4127dd1d885c9cf0fd9cdf0f054264c33242c444685537546eba29bee77223eca0b28ea7c88ca821ec8501ffc9ef23bf6a65d8722dab3058b19866bcbd8ccaa0fd2d89deb6af6295af7d5e6273a5091498a23335fc87acebf0b80582f876a85a2064df3754ce032656743616baff1ed667fcc7619101d70b181aff5b01d6d5b01d4783c932aec24570574f94977ecdc5a3044bff9e96ffd4a0b1913c63f077dcb4fd636e6ea1be3b30ce938b1098ac52d280202c3b6b48229ebf6741f5eaa2d7e2020a4c2523b4c3be4807b2c8655522c18c40fab44296e03fd964c38d9f4f108ca33ac4903ec8de444185f1541f67271a746d69dd49ee0affe5715225b2ff9aacbae9b6096d7ff0f7f3dc545ead7e0b91f00ba7e0aa99ad9d680ac3c6fa13334c5eb679995f228587e7684bc4a475bd0e97cdc9b871d3169ddb14f0b3729799ba38786dc6e098d5a8f338160ef36b4822ea9ce981131cf4df43c8720f483ed7ca8d874fdee95267a34682225ce1628d0ca2a5fcef016cb0f32342711554a3943c97175e0748c45a4dd29b6424886287a660832f3fac07877ce714a59bd10eb11d287574ae201cbce7367b7b214cb9600c696adb11fecdbae9c32566b9af9fde43f4e2832a392d46070c85da5f8b7324fa94e26d118dcd9325f2da7924f96d55c5b7899c45c03e994487632575971727699b7daa874c72c269d53f1a08983912ff2473e912521470f6dd0261ef533b961ff748d17fc42a5363379bac10703f61d91e86a076bd5384fa41ed613874fbcb9d9ff1bee8595fbfb87c5fed78b854f78bf7b9335609309bf31a20d7d8e364cadefd341cbeb6d7f6107c20b86ca2ddad6f000724451d031991be53ceb4740c701a8fd1efa4163dc122cc046a957fcd02409b4a6e8997225836f5230c6138130ef91409450a38a176f2b48e58f1ee2960b4303e39dfa241b604da49874ba4e5a754505d71fc5a0b0c75edb873f1c9a7dac5eca0bea91525232f1fdadf66d88607db0a56738501454561066787b0343b906c7e5e151cd4d23dea748772f8f2be105a10b728334595df4bd5c4c715ed74cb24cc0aec4c4687a391fd604fb3b5ea0c922050ae545b74b22f5d1ef74b912a1e9829446df53388e99c6bea6312659201ee1a183ae20c9e935d5e047a008885876fd76482fcb138a3013d6eb30cdfe06e6bf961967d45132f81646c4689d77d1084c7b43d8a3ea7cfe9ecd07e66eaae6f9d7aa8e8cfdfcba0819b821ac8c8a758cfd0086b4ec69bc5a98b18c80e0a3cdb9a0e6402df5cadbf344ae5d77ef8d1ce467182cf25a30d49692bca9d4b5d364c4a511ac04cfb9721facd4c59d08a7cb034dc9f3c5b4ec2ae52f80f15545357b47c6ae88fc016c619477191ef340a6cc29ff3695ebb495b9217fc6b8b1013bbe2f0f0ad9dc1245b4e25fe1a224307a4db38cf8465484f027d15c651e514cf4d81348fa81bea19017167b6631aff52932e0074a47ae881a17bbeb5387d83bfb625b27b9756fbc2c7addb77e50f5d7fbb57b877b75dfb21a5e21ac1837a1217afee23ed82ecce6f73a1794057764c46f2df93dfe274e891b50a0d83c65c9ac56d9d07cd993401b4920a078599e1eea54c888e231a1ea52363c5e16efcbb8ec39445f8c18ff0c5ae865442087890816302c8d35341ba0c10f7a0da5521bebae2c3afcb7a8e4086fd991ec689e33640290aa64c51765fdd501528e04d9b01cddcfb963f06cb44529910e57a5762a5952156974fc7d87127e26efc0e6a7ef227471866d7a83873965dbf4d47a6545d7a3a7470132f298d4003db5f296f8566c729aef92b954181c0535c776ace3a42aebba9126dd54d5231103c30904196c9f3855a6f3856e8297b2ec70282263de9b2bf4f22a41090b42ace00b12263e9dd011b8f15686fa0eaa39000f1b7de88996787e3d4bb2dd9ce325613059eda900a2b36528400e38d37cf5c43e4672c7b12eec5e306c74c3b8e68899d2e75f1e9ab4780a73ba2a65efd2a43b6c124e6e9fd43144b041c5c438ca2fd528791b1bc847061d26dc135eabf00203f7905479bab9637f3487680b8187f2dcc830a97084921ef99a820f43a463fa9f196c3636763c97535ca6748711a0aee5eb970922071afd2fdf1a5b3c9b8ced4a2a346f441fcebf9165ed759785e16a4a629791144a0bab186bec22df07688d725d52d76c856f044d9e3d5cbd19ccf8302af707ae48e96056f257c56650e68f72984a22131cad36048f962a2b4a473d7c1dfffeeb24dfd6ea1401251ae52d9861c26af3d852ce4a6f6c7e5edd5e93aa50d16b808c39c68b40818636349c3e734c77bbb01f58f5dbf6453f9a45e76b971d8029a9faafed1a4eb95815fa236502f3779a55a00462b03d860b25904591ed026d082a761fc15f2026ef19e4911fb169ecbc8e92708ca6241654ca4aad350b52a4cfccba3357003d5fb150fb4b9cd1137d308a479f6ef6e7727cc3b12df69a26fd305bf1ef6275eba2d8bf63937c99142a1c2e823a1d4b29ad145e76ed6c8c6757cf867b2fbdfaea8e2d9669afe5cb0c26db35c4885cac557d210388dcdc79dff0623c8779632ebdb19e9a10f2435e0687c06d31f79b0ed9dbeec55c88cf0d7f437ee20135912ebc620a19a154b0132250886534b2c8771dfb5703cdfef56b4e6469535a34d56939f225d276e963d961d78e5f24b725811c775eeb1b57bd4246457bd52cbe815b72e9daae2cdd9a481745b28d7895cbd20c78fa61213cd0451e05adc8e380262ba1841d05344a7e91fc1ddaf0b41c883f8c7bd9cca6d7c670f1b3da558f4533e1de74149dadc7a2f949a917877dd91fb530a9c47509e1c436b40adc5f14fc07796a91ace2a393c231f6393b9efbd610a7362d689cf83db351b18d4527e6d9303a61f5c072fa66ef6083f7ac393134833d3f61f62917f1a2b2933cc04bca66974636d78c64a7ecc77b834c3698b2c410c67b642615bbb19129499d90f2644cf4baede4272b60e9661927a3a2c2f1dfe52284a9e7a1af92cefa75c9e19caf406de0e2fa1e260b367c67b8913bc5e8b9491307774ed2fc33e193f468df2c980e277c73743cc53bf1e72fda80679ee1d9e485db1903f5f8640b165617349da2586cb5f61dae15565ed5321778f9762bb1da95882fe2ea53c7e4df73679e673a8aa7c8c102a21e58e55b02f8ad63f9ae75112a370e1e6a75196eb089634312276ae36e6e98cfbea87ef4b7be4e508c6387ac350f65c74d283580c4af0e63b1aebd2540de15375d3e07ef1d4e6e0be798638f6440c6c01b102f72321553b4667c9844c08ce0b2f164b4c2b63fd3b707db296d7eb8b3ab4d92ae76fe68b3a838782539fc69442399a9384aa55355bc132c81881e67f232ae08dd75cd70f72a2df2bfdadfa0a2404141855dcb11410fb614fbfcb36e03fd96f2e7a05c682addb33f5bd806c496115fc53f91e82bc4c60114331cf1585249994e0aff5673597278d47308a0e7e532b55aa8773d66ee7c79507adf7aa14d117c044bba13a670dc43baf12b0487be0259d3c7a156a6f1b6b32e500bc4302ffdbd7616279148747290a82fd0941401ac3b381f5185f63bf0cba7f34cffd758f9e0fb88c402bd6c17440c89a35dc91c6afb87a6d77ce28a0f17ce36fca1bcb7e1de34f488e0c118b38b2cdc555dd865547dd2b328bbdb3ceb323f8c4d756a5165ccd328fb76c10c22dc03d292c81065964ed154e07d37a452940e98cc7019d1e11bc76c89fc32a87d92fc6cbbfa1428653d14f83e09b52d306b5285fd0a31a6db6832f447f0f7e19cca1cbc42239afa789573ca5333a89eb380874012536aeabbcd116668eb75bcb73a4e08edfad57f7dba82a424270a161c7448c9959d5adf86d2581992fd07488b2bb9be6bb264bf632cb280a372a4d236c4fd0404227bd680fe9db56b95bf762e5ec145dc7f487ce529af5d45f221b003647a8cb5bbbd2807949f4325b79d3ac9931404a9330d857e503fc0caeb8ba6d23305d71f3b8dac06cec37c765ae480e13992760fbdb46ed64ac38ff7719e350262003e068c6bf6cfc9874173b21f2e4f12ad12fabc1e2a000e4bc7e0b9c521988653b017a23dd7a2be8452298f7b9b56015123e9aa85513f1f23b679c86a4e8016067bc10cc0e443855c872a435d7983ad03975689eaf498302d05ba77c4bef967f37a3b0ae736380b43fab8cbe740c73ba5c14c7ba79e8465056c0bcc4131dfe3cbd62755fd182d8687f861952e24341f241399464f9b10d867b5d4b44e16fea027a671d9b66256660452dd1b9d72957610d50ac8c88d36463e2f9d875a85873281de3724d192162334aeb3b94ba428e7d7733dad90efed524d06808ca619a42a1df38f5a701ef1729bf9d4615c67fa9d3420eba6e98ff5da9664d31d5c9b440f999e3a4fdda21c4c50eb214ff600c5aa81e0d21a9e082207d8e8c769ee1ff9f705ea12d215181b0b871", 0x1000}, {&(0x7f0000000a80)="5dc659510070dd0bea8d32a656bdf1c098aa324384dd5a652773f6403ac973ad11dd9acf25bd9a962155216388533058038abb339511cb0db40c16b69187c7b83e79afd4a96424b607d8519502467e06039e4d5d47231665d88ba5bc18f684e64ced4cc4087d03b8e5245327ec60226b25e9f9695211ddaed1af353ccafa6dc95dad11b5c79da1cc42f07da20678685aa51031cc6332875b3845a47bca71b134411cfd54b6fc91ca45f4c98d758d5bdcf681861a17d00887d17c2357beff397d521456dd889a5f419e33ba4034f6c8933933cf7913853678d7a8e838ff20a92937", 0xe1}], 0x7, &(0x7f0000002e80)=[{0x80, 0x107, 0x3, "d52f009754037479c8f4295acb14b0ea064a4b7b30e0bbf1d105783685acc41fb5644f81f7b7c3f328b8cb577a6a6dbc6b39ceab4359a37fb8a0528b1f2f40b2e357fe37fe9eaf8e8359021eee967ac375233cf4b58d6240d2aeaeb5f1d3349d2319d1c7deebd62388023033c196"}, {0x88, 0x110, 0x72, "ca7de024b57c28cf4e4db481184911fc1d7a1b9a9195f90360b933debab08df754b105977176b8b9f42d4958774b1530c2a4bc4e9337dc6718ca8ee02bec01437f96fb3b8735c5523f58bbb62c5b624c1e5d49148fdf3e203774c854ab340139de029fb509441aed3c17d145a536c5660494006d05afa0bd"}, {0x20, 0x103, 0x7, "cb32d8965182abd7be38c9af"}, {0xe0, 0x115, 0x2, "364e52d7f2ff7e9c7db8b468e48d1c1018b199d2f4905f444a0a357ce3f9543ac57e62c1b72900e1b89f9134ed0fa4dd3d477d93c217502ee154b2436459e01cacd13764dc229c7c23f1625622dc65132e8f6123305e6e62d0dd7f81e02b18df5cb32e729063d91853a95ad6e2eea7383df647f3df6f0bb8aa97638e056a1d73711baf6b671e81036fcae99984bf944e45aac765990e0a438d5f29b53169c8d6ad7d2d53ee8158a703cd9a3b7bb57612b1f790c58ce93baef1c06d82b29f036038bae44186a0454aaa36fa"}, {0xc8, 0x116, 0x3, "6f1acc9922d3a1c8fff1de6fe67279b5e4a79a79d55f54b0ef5df80f511b4a04efb7d63de40dd76e7f008ebbc994f4e617bcd69401b0f910f8a92c9b3fd5235316573d9cb736067c3a6ba5ab77f23706afd0933a129e6fafb27268c0fbf63969a062ff0161c9c9e38e64fb3f157349c17fd1ea9cb684b2dab85c549574c561bea8374c67293baed153bd2104ff95da59b60b32818642ce02d8e2dbd2856cfac90bcd46d4bfe3298226484bb8f6979a7fff"}, {0x108, 0x107, 0x8001, "75b18955b4fcc6e4ee268e3a4cf78f1759751b8ae13fe1b178fb7c10549ef936805d86af1811414104569f2f1412f37e63099009c95f646ee83dd00054847882cbe05f01bcdfdc3f30fe66e14d80808abf525a6375b23e10db8c95f6484a55bafba23c5aa0f62db0b2c76d7a7d3e23fc525fc99aebf35d73a95f16c63bb7ba172be1134461d066743fd13184c0fed8cf410f0255b50c46e0d22343930cb04ae13d593c9ab03e98eab25c00448f3d28d2ba4175756b94d797b34b74ba4c9cc5ee06c178228677be9f46f641ef8393a3e84cb8613d45b5051b911f3bee63d5d29dd28a6ab9fa553db70225c85712a85a34462324caec"}, {0xa0, 0x108, 0x9, "59b2d02d80a01dd153baa720b59e395951d425d2d7ed293b1003f34d7b87f03b89d489edb21c6032592695f0b05228a810c05fc86cba9c18e745466752093b7143799cc274f7c7fceea7ee74c5a028ed33fee1042baac6d8b5bdfb30922a48ef586165a7021168c50df55eccf6c8820eea249401a4c3c8ec2e7ce38c2f36b4c1de480549dcb3cbf55c"}, {0x68, 0x1, 0x7, "8e0b07607a67ebd34b9a3032d5f27e1d224f2f1a829b2235717b97bd5af33de4352914f83e634b5e3d9e8e431dbf312c4ca879e46e21cb7448076659e3edd834f91a786f9856efea1b1ed2790c9fceb87be16c3b220e5aa7"}, {0x38, 0x109, 0xfffeffff, "b2d83bbfd2a4506dafc386c9ede7af2fd75e9e23429b067f4bd883bac93724d0ac0b17fcb52a"}, {0x78, 0x10c, 0x7d, "c014527b1ccb953fdfbc6f385f2f35310870c235be23721b8ea69d2b9dc69a0d8d921f48a0d6f04218e82d02e729c3f2b0bb75ba15da7788b3ddcb1099ec67ef0af2c0aa83be0be343a488b38a63421e4afdc52c48e0949a3da543e5c81e8b5d91f680"}], 0x590}}, {{&(0x7f0000000c00)=@l2={0x1f, 0xc23, @none, 0xcf2e}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000c80)="3853cc24ef842f55f3cf615f0ba717916b7fc636935f974ededa63dac6c0acddc99c619ae1a3e7591c1fa91b224485e7062b031e923af6313a055f8fb840cadbb0e8f3ee13880ef583", 0x49}], 0x1, &(0x7f0000003440)=[{0x88, 0x11, 0x10, "ea79e5201b3826f76878e7a55f91e3252f1aa1859afaa392ab3be831a2c8f86d5efb78687d1b119b8eab9f9d761dfc563fc17654924913fcc796e6f04ea6364e3a35f9263b85f78d44b1cbf77ce2473c08148c031f6effc110132555d2f988c06f99894bd33ae36a12655aaf1467af9c5a8acbf4"}, {0x20, 0x109, 0x6, "9294d0f5c1e8e6e489d70efa4f"}, {0x110, 0x116, 0x9, "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"}, {0x108, 0x11c, 0x1000, "64e42c9f92101f50d7d888449e0a7d606f47d355a25bf9307783787c1d8bdd26ce3a7502d31f2b293885aa6b2c6737e672238e9029d817c1d19368664a5152ce86eba56cd4afa8fe5250436f7dd6dc963fae70da2030f8f9872a90441ee96964f1f36f08abf35cfbfb7932fe835c6aec1ad91882fbe2cc39d00ded549f0b5c4d2195a1e8cea978df2e1af3b7ca79a3cc44ded1337d0ac0db32c7082c28ccb0bae4ab9c92a0b80b6f7893e36d10dd420b126fc66fc9d79ccaea8190b80e73e5c6ab34bcb5ac4851d5e8a77b9536d68a78d9cd8452f4ce8b3007f3a14fc92c1bd4a6056606db4682a07d85e91e3de055d546"}, {0xc0, 0x6, 0xc96a, "5a4313c9adf158847d432502f46ca65bcd05893afe991bd08eea60235c7f827490c6c9f6e7bd51f853bb4378c4260de51aab47eb5c0f66b4fc1ef96d904fb63e46e1c21163e9cacc7a6b32736616ae2417b286a8c5490c9d5385b0c58afa2d8aaeaf7f75544b9ecaaf626a5bb4323ac5e42f6f07844f908758f1dc43571720d1c84e62225dff800e1cbc6e39b449dc9bc745f4abfea8ba961bd8018f04360e19b147e1804977395980"}, {0x70, 0x6, 0x7b, "98a8e323426c6f2747927855ed010b11ee25cd46de7860ef3692f819cdb25f7fd36f57c2ad7c2d6f51fcee662a7a1099e295fbf2aa7cdba224d327d382241d101cc7fa54c1ac3760bfe19ae6ab2a0144761d2365f74520b2580343f671992e2e"}], 0x3f0}}], 0x2, 0x20000000) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r17}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r16}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @sk_reuseport, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.190410213s ago: executing program 0 (id=2330): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f0000000140)) 1.112264417s ago: executing program 1 (id=2331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001418edffff110800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom$packet(r9, 0x0, 0x0, 0x40000020, 0x0, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="f8000000160011040000000000000000ffffffff00000000000000000000000064010102000000000000000000000000000000004e2200000000000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000280)={'lo\x00'}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) r12 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) close(r2) 1.111521869s ago: executing program 3 (id=2332): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getuid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) recvmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0, 0x35}, 0x8}], 0x3, 0x20, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x884c}, 0x20050800) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0xffffffffffffff51, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_MODE={0x7f, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000001000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018000000400000000000000000000000950000000000b000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x1f00, 0x8}, 0x94) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x8000000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, 0x0, 0x200c0082) sendmsg$TIPC_NL_MON_PEER_GET(r5, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6}, 0xfffffffffffffdd9) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 1.063265803s ago: executing program 0 (id=2333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r4, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x719f, 0x0, 0x0, 0xfffffffffffffc92, 0x0, 0x0}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x7) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f00000001c0)=[{&(0x7f0000000240)="00214717a70700000000030600710a06069d856829c2f5d7a3", 0x19}], 0x1, 0x0, 0x0) 980.629526ms ago: executing program 3 (id=2334): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000001000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000004000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00b0ff00bfa100000000000007010000f8ffffffb702000008000000b50a000000001000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x1f00, 0x8}, 0x94) 848.196517ms ago: executing program 2 (id=2335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg(r1, &(0x7f0000001540)=[{{&(0x7f00000005c0)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, 0x0}}], 0x1, 0x300) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x60000018}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000043000000080a05000000000000000000020000060c00034000000000000000020900020073797a32000000000900010073797a3000000000140000001100010000000000000000000a00000a"], 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000f5351844c2d8652011f366bb79535f1d09a507bb11f9b48fbd2df886c055a5930ecf6feea028054ebbe082a2551876fbcbb006edd0b198fb7b8ded572a6c6d4780c905a0b89cce7ce00a6a28585f13004d1ff6e399f03c38c2a3d99750fb68b98789ab424740921d536d8c34900a", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) sendmmsg(r1, &(0x7f0000001540)=[{{&(0x7f00000005c0)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, 0x0}}], 0x1, 0x300) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x60000018}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000043000000080a05000000000000000000020000060c00034000000000000000020900020073797a32000000000900010073797a3000000000140000001100010000000000000000000a00000a"], 0x8c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000f5351844c2d8652011f366bb79535f1d09a507bb11f9b48fbd2df886c055a5930ecf6feea028054ebbe082a2551876fbcbb006edd0b198fb7b8ded572a6c6d4780c905a0b89cce7ce00a6a28585f13004d1ff6e399f03c38c2a3d99750fb68b98789ab424740921d536d8c34900a", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x0) (async) 844.452777ms ago: executing program 3 (id=2336): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x2140dcfffd4d4d7f, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x50) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRES16=r3], 0x1000f) 832.01231ms ago: executing program 0 (id=2337): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016020000b30000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000020000000000000000000000000000000000000000000004401050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400000000000000000000fe5c00000000000000000000000000000000000001000000006c0000000a000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000320000000a00"], 0x1fc}}, 0x0) 648.190413ms ago: executing program 4 (id=2338): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES64=r2, @ANYRES16], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r4, &(0x7f0000000340), &(0x7f0000000380)=0x10, 0x80000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x439, 0x70bd26, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x121}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15, 0xffffffff}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xc}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000240), &(0x7f0000000280)=0x10) socket$can_j1939(0x1d, 0x2, 0x7) 617.929824ms ago: executing program 0 (id=2339): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x480) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911075000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) listen(r0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x10000000000, 0x0, 0x9, 0x0, 0x1, 0x9}, 0x0, 0x0) 586.964486ms ago: executing program 3 (id=2340): socket(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000008000000b704000000000000850000000300000095000000000000005af5d2b62b0be667bbccece0b7445de2d278e62b553d898bb8bd6b1d49dfb10c2abd0558bb60d10e16759c6314344575d631f9b0e8bb6187d1facb9be1ef3a42972e1108a366e59ec1aa27c1f1bcbab4498d8e00818e4b9b628370bd32bd493cf964c6595b313942a4a75e61cf664179d9aa1fc055eb0609e72b257d270ec884867c7f0c198000"/206], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x6a040000) mmap(&(0x7f00002bc000/0x1000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0xffffc000) syz_emit_ethernet(0xfffffffffffffda6, &(0x7f0000000c00)={@local, @random="1f6822b84b12", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "38b88f", 0x0, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, {[@dstopts={0x2f, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @pad1]}, @fragment={0x32, 0x0, 0x8, 0x1, 0x0, 0x5, 0x65}, @dstopts={0x88, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x5d}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x9e}, @calipso={0x7, 0x0, {0x1, 0x0, 0x5, 0x2, [0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0x1ff}, @generic={0x9, 0x0, "186c6d7de9522b18378e282caf18474e6089dab91af77dafc586ab634628b4444cbdc52ae5f30a685c56ca8ad19f0ea39bc5fdf74fd36451f4bf9977abbb2391a9c8e807c2123979762a45aa4af82470b83564c513ca28caa8d551e9c067ffc069eb33fe853eded65b76d752175b316f5702ee5f09c63017cded0f2b5e0fd7a245a9f5b02ca0646beeaff23e19f8389aefa3f10c5c3696f22d5a5b8f06e87b633024935d4d4265f9e23a65d933da"}, @pad1]}, @dstopts={0x11, 0x0, '\x00', [@pad1]}, @dstopts={0x48, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x6}]}, @fragment={0x87, 0x0, 0xf, 0x1, 0x0, 0x1f, 0x65}], @mlv2_report={0x8f, 0x0, 0x0, 0x5, 0x0, [{0x8, 0x0, 0x0, @loopback, [@ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @remote], [0x801, 0x3, 0x1, 0x2, 0x1, 0x2]}, {0x9, 0x0, 0x0, @private2, [@dev={0xfe, 0x80, '\x00', 0xd}], [0x10001, 0x9, 0x2]}]}}}}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000300)=0xb, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.kill\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r6 = accept4(r2, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000a80)) recvmmsg(r6, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1}, 0xc0}], 0x2, 0x40002020, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000b944e8a3ddafd3af724966fa644853c15d8a9f3d9247c5a75601005f724a43863acf6df83c56f608acbc4650173f11a12b6087a9de780609de"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r1}, 0x18) unshare(0x64000600) r8 = socket$inet6(0x10, 0x2, 0x0) write(r8, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@delqdisc={0x34, 0x25, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {0xe}, {0x2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 533.18156ms ago: executing program 1 (id=2341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000040030000401", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaea1586dd6003136c00008700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) writev(r2, 0x0, 0x0) write$tun(r2, 0x0, 0x0) 420.082326ms ago: executing program 2 (id=2342): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@local, 0x0}, &(0x7f0000000480)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x29, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7fffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x1, 0xc, 0x5, 0x4, 0xffffffffffffffff, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @alu={0x4, 0x0, 0x9, 0x5, 0x2, 0x100, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x665, 0x0, 0x0, 0x0, 0x9}, @map_idx, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x4, '\x00', r7, 0x0, r1, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x81, 0x10, 0x40d}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000580)=[r1, r3], &(0x7f00000005c0)=[{0x5, 0x1, 0xe34b, 0xa}, {0x0, 0x5, 0x2, 0x7}, {0x2, 0x5, 0xe, 0x5}, {0x3, 0x1, 0x1, 0xa}, {0x2, 0x5, 0xf, 0x6}, {0x4, 0x1, 0x9, 0x6}, {0x5, 0x3, 0x9, 0x9}, {0x0, 0x3, 0x7, 0x7}, {0x3, 0x3, 0xc, 0x9}], 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) getpeername$packet(r10, 0x0, 0x0) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r11, 0x3a}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="6f987ef80ea122ac0477d29c199404e56898d3db5c07625838f1948450452318fc8a3ca8b5df42bf08006f480173d182e31a2c82fc28b0d8a9be613a2985eeed67bf7e27348eea8d6f94bb2cdc5bd4e567b6b9", 0x53}], 0x1}}], 0x1, 0x0) 376.439276ms ago: executing program 0 (id=2343): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname(r1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x802, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0x4, 0x200, 0x3c5033c7, 0x2, 0xff]}, &(0x7f0000000000)=0x54) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c3615"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x50, r8, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffff421, 0x3b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip_vti0\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}}, 0x4044884) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) 375.03636ms ago: executing program 4 (id=2344): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c, 0x2000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_PROTECT, @IFLA_BRPORT_LEARNING={0x5}]}}}]}, 0x54}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c, 0x2000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_PROTECT, @IFLA_BRPORT_LEARNING={0x5}]}}}]}, 0x54}}, 0x4000) (async) 100.456058ms ago: executing program 2 (id=2345): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x1c) 24.396752ms ago: executing program 1 (id=2346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006900030500000000000000000020000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x26) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000004400008008000300", @ANYRES32=r8, @ANYBLOB="0c00238005000f0015000000"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, 0x0, 0x20000000) r9 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x10, 0x100000) r10 = accept4(r9, &(0x7f00000003c0), &(0x7f0000000000)=0xffffffffffffff7b, 0x80000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r10, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x4c, r11, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc845}, 0x880) 0s ago: executing program 4 (id=2347): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000001000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000004000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00d0ff00bfa100000000000007010000f8ffffffb702000008000000b50a000000001000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x1f00, 0x8}, 0x94) kernel console output (not intermixed with test programs): .501122][ T9944] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 227.501155][ T9944] ? rcu_is_watching+0x15/0xb0 [ 227.501192][ T9944] ? do_syscall_64+0xbe/0x3b0 [ 227.501223][ T9944] do_syscall_64+0xfa/0x3b0 [ 227.501246][ T9944] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.501270][ T9944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.501291][ T9944] ? clear_bhb_loop+0x60/0xb0 [ 227.501318][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.501338][ T9944] RIP: 0033:0x7f557898e929 [ 227.501357][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.501376][ T9944] RSP: 002b:00007f55767f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 227.501399][ T9944] RAX: ffffffffffffffda RBX: 00007f5578bb5fa0 RCX: 00007f557898e929 [ 227.501414][ T9944] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 227.501426][ T9944] RBP: 00007f55767f6090 R08: 0000000000000000 R09: 0000000000000000 [ 227.501440][ T9944] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 227.501454][ T9944] R13: 0000000000000000 R14: 00007f5578bb5fa0 R15: 00007ffec1e2d9f8 [ 227.501488][ T9944] [ 228.134949][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1281'. [ 228.180801][ T9966] lo speed is unknown, defaulting to 1000 [ 228.426263][ T9972] lo speed is unknown, defaulting to 1000 [ 228.678550][ T9966] netlink: 'syz.2.1281': attribute type 6 has an invalid length. [ 228.708775][ T9988] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 228.879773][ T1164] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 228.999805][ T9991] lo speed is unknown, defaulting to 1000 [ 230.122193][T10009] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 230.882652][ T3021] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 230.916655][T10023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1299'. [ 230.981414][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 231.023021][T10027] netlink: 'syz.0.1297': attribute type 9 has an invalid length. [ 231.050224][T10027] netlink: 'syz.0.1297': attribute type 7 has an invalid length. [ 231.085989][T10027] netlink: 'syz.0.1297': attribute type 8 has an invalid length. [ 231.531133][T10039] lo speed is unknown, defaulting to 1000 [ 232.703163][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1312'. [ 233.220148][T10088] lo speed is unknown, defaulting to 1000 [ 233.630674][T10101] pimreg: entered allmulticast mode [ 233.637749][T10101] pimreg: left allmulticast mode [ 234.169643][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 234.333597][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 234.384996][T10118] veth0_to_team: entered promiscuous mode [ 234.458023][T10118] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443) [ 234.507235][T10118] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 234.723383][ T7735] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 235.011003][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 235.672850][T10166] FAULT_INJECTION: forcing a failure. [ 235.672850][T10166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.734533][T10166] CPU: 1 UID: 0 PID: 10166 Comm: syz.4.1335 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 235.734564][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.734578][T10166] Call Trace: [ 235.734587][T10166] [ 235.734596][T10166] dump_stack_lvl+0x189/0x250 [ 235.734636][T10166] ? __pfx____ratelimit+0x10/0x10 [ 235.734662][T10166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.734695][T10166] ? __pfx__printk+0x10/0x10 [ 235.734719][T10166] ? __might_fault+0xb0/0x130 [ 235.734765][T10166] should_fail_ex+0x414/0x560 [ 235.734798][T10166] _copy_from_user+0x2d/0xb0 [ 235.734820][T10166] ___sys_sendmsg+0x158/0x2a0 [ 235.734855][T10166] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.734949][T10166] ? __fget_files+0x2a/0x420 [ 235.734970][T10166] ? __fget_files+0x3a0/0x420 [ 235.735006][T10166] __x64_sys_sendmsg+0x19b/0x260 [ 235.735041][T10166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.735083][T10166] ? __pfx_ksys_write+0x10/0x10 [ 235.735114][T10166] ? rcu_is_watching+0x15/0xb0 [ 235.735153][T10166] ? do_syscall_64+0xbe/0x3b0 [ 235.735184][T10166] do_syscall_64+0xfa/0x3b0 [ 235.735207][T10166] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.735231][T10166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.735252][T10166] ? clear_bhb_loop+0x60/0xb0 [ 235.735280][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.735300][T10166] RIP: 0033:0x7f616c58e929 [ 235.735320][T10166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.735339][T10166] RSP: 002b:00007f616d3c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.735362][T10166] RAX: ffffffffffffffda RBX: 00007f616c7b6080 RCX: 00007f616c58e929 [ 235.735378][T10166] RDX: 0000000000008040 RSI: 0000200000000180 RDI: 0000000000000003 [ 235.735393][T10166] RBP: 00007f616d3c0090 R08: 0000000000000000 R09: 0000000000000000 [ 235.735405][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.735418][T10166] R13: 0000000000000000 R14: 00007f616c7b6080 R15: 00007fff874e5158 [ 235.735453][T10166] [ 235.947996][T10173] netlink: 'syz.3.1338': attribute type 39 has an invalid length. [ 236.000185][ T1164] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 236.353003][T10186] Cannot find add_set index 4 as target [ 236.527764][T10193] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1345'. [ 237.388071][T10234] FAULT_INJECTION: forcing a failure. [ 237.388071][T10234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.408802][T10234] CPU: 1 UID: 0 PID: 10234 Comm: syz.2.1359 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 237.408835][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.408848][T10234] Call Trace: [ 237.408856][T10234] [ 237.408865][T10234] dump_stack_lvl+0x189/0x250 [ 237.408905][T10234] ? __pfx____ratelimit+0x10/0x10 [ 237.408930][T10234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.408963][T10234] ? __pfx__printk+0x10/0x10 [ 237.408987][T10234] ? __might_fault+0xb0/0x130 [ 237.409041][T10234] should_fail_ex+0x414/0x560 [ 237.409073][T10234] _copy_from_user+0x2d/0xb0 [ 237.409094][T10234] ___sys_sendmsg+0x158/0x2a0 [ 237.409128][T10234] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.409201][T10234] ? __fget_files+0x2a/0x420 [ 237.409223][T10234] ? __fget_files+0x3a0/0x420 [ 237.409258][T10234] __x64_sys_sendmsg+0x19b/0x260 [ 237.409291][T10234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.409333][T10234] ? __pfx_ksys_write+0x10/0x10 [ 237.409363][T10234] ? rcu_is_watching+0x15/0xb0 [ 237.409401][T10234] ? do_syscall_64+0xbe/0x3b0 [ 237.409430][T10234] do_syscall_64+0xfa/0x3b0 [ 237.409452][T10234] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.409476][T10234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.409497][T10234] ? clear_bhb_loop+0x60/0xb0 [ 237.409523][T10234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.409544][T10234] RIP: 0033:0x7f02da38e929 [ 237.409563][T10234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.409582][T10234] RSP: 002b:00007f02db1d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.409606][T10234] RAX: ffffffffffffffda RBX: 00007f02da5b5fa0 RCX: 00007f02da38e929 [ 237.409621][T10234] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 237.409634][T10234] RBP: 00007f02db1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 237.409647][T10234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.409659][T10234] R13: 0000000000000000 R14: 00007f02da5b5fa0 R15: 00007ffd4ad3cfd8 [ 237.409691][T10234] [ 237.693597][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 238.665938][T10265] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1370'. [ 238.918716][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 238.949967][T10278] netlink: 'syz.1.1372': attribute type 39 has an invalid length. [ 239.124178][T10280] FAULT_INJECTION: forcing a failure. [ 239.124178][T10280] name failslab, interval 1, probability 0, space 0, times 0 [ 239.184811][T10280] CPU: 0 UID: 0 PID: 10280 Comm: syz.2.1374 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 239.184843][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.184856][T10280] Call Trace: [ 239.184865][T10280] [ 239.184875][T10280] dump_stack_lvl+0x189/0x250 [ 239.184922][T10280] ? __pfx____ratelimit+0x10/0x10 [ 239.184946][T10280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.184986][T10280] ? __pfx__printk+0x10/0x10 [ 239.185016][T10280] ? __pfx___might_resched+0x10/0x10 [ 239.185054][T10280] should_fail_ex+0x414/0x560 [ 239.185086][T10280] should_failslab+0xa8/0x100 [ 239.185111][T10280] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 239.185146][T10280] ? __alloc_skb+0x112/0x2d0 [ 239.185178][T10280] __alloc_skb+0x112/0x2d0 [ 239.185210][T10280] netlink_sendmsg+0x5c6/0xb30 [ 239.185247][T10280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.185277][T10280] ? aa_sock_msg_perm+0x94/0x160 [ 239.185303][T10280] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.185330][T10280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.185357][T10280] __sock_sendmsg+0x219/0x270 [ 239.185383][T10280] ____sys_sendmsg+0x505/0x830 [ 239.185420][T10280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.185459][T10280] ? import_iovec+0x74/0xa0 [ 239.185482][T10280] ___sys_sendmsg+0x21f/0x2a0 [ 239.185516][T10280] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.185587][T10280] ? __fget_files+0x2a/0x420 [ 239.185630][T10280] ? __fget_files+0x3a0/0x420 [ 239.185667][T10280] __x64_sys_sendmsg+0x19b/0x260 [ 239.185703][T10280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.185745][T10280] ? __pfx_ksys_write+0x10/0x10 [ 239.185776][T10280] ? rcu_is_watching+0x15/0xb0 [ 239.185813][T10280] ? do_syscall_64+0xbe/0x3b0 [ 239.185842][T10280] do_syscall_64+0xfa/0x3b0 [ 239.185866][T10280] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.185891][T10280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.185920][T10280] ? clear_bhb_loop+0x60/0xb0 [ 239.185947][T10280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.185968][T10280] RIP: 0033:0x7f02da38e929 [ 239.185988][T10280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.186007][T10280] RSP: 002b:00007f02db1d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.186030][T10280] RAX: ffffffffffffffda RBX: 00007f02da5b5fa0 RCX: 00007f02da38e929 [ 239.186046][T10280] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 239.186060][T10280] RBP: 00007f02db1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 239.186075][T10280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.186088][T10280] R13: 0000000000000000 R14: 00007f02da5b5fa0 R15: 00007ffd4ad3cfd8 [ 239.186123][T10280] [ 239.487965][T10250] delete_channel: no stack [ 240.485018][ T2997] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 241.109084][T10354] netlink: 'syz.3.1401': attribute type 30 has an invalid length. [ 241.340241][T10363] FAULT_INJECTION: forcing a failure. [ 241.340241][T10363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.390656][T10363] CPU: 1 UID: 0 PID: 10363 Comm: syz.4.1403 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 241.390687][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.390700][T10363] Call Trace: [ 241.390708][T10363] [ 241.390717][T10363] dump_stack_lvl+0x189/0x250 [ 241.390755][T10363] ? __pfx____ratelimit+0x10/0x10 [ 241.390779][T10363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.390812][T10363] ? __pfx__printk+0x10/0x10 [ 241.390844][T10363] ? __might_fault+0xb0/0x130 [ 241.390911][T10363] should_fail_ex+0x414/0x560 [ 241.390943][T10363] _copy_from_iter+0x1db/0x16f0 [ 241.390979][T10363] ? rcu_is_watching+0x15/0xb0 [ 241.391013][T10363] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 241.391050][T10363] ? __pfx__copy_from_iter+0x10/0x10 [ 241.391083][T10363] ? __build_skb_around+0x257/0x3e0 [ 241.391116][T10363] ? netlink_sendmsg+0x642/0xb30 [ 241.391141][T10363] ? skb_put+0x11b/0x210 [ 241.391174][T10363] netlink_sendmsg+0x6b2/0xb30 [ 241.391211][T10363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.391242][T10363] ? aa_sock_msg_perm+0x94/0x160 [ 241.391272][T10363] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.391298][T10363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.391326][T10363] __sock_sendmsg+0x219/0x270 [ 241.391365][T10363] ____sys_sendmsg+0x505/0x830 [ 241.391401][T10363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.391441][T10363] ? import_iovec+0x74/0xa0 [ 241.391465][T10363] ___sys_sendmsg+0x21f/0x2a0 [ 241.391498][T10363] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.391569][T10363] ? __fget_files+0x2a/0x420 [ 241.391591][T10363] ? __fget_files+0x3a0/0x420 [ 241.391625][T10363] __x64_sys_sendmsg+0x19b/0x260 [ 241.391659][T10363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.391699][T10363] ? __pfx_ksys_write+0x10/0x10 [ 241.391729][T10363] ? rcu_is_watching+0x15/0xb0 [ 241.391766][T10363] ? do_syscall_64+0xbe/0x3b0 [ 241.391795][T10363] do_syscall_64+0xfa/0x3b0 [ 241.391824][T10363] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.391847][T10363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.391866][T10363] ? clear_bhb_loop+0x60/0xb0 [ 241.391891][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.391911][T10363] RIP: 0033:0x7f616c58e929 [ 241.391929][T10363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.391947][T10363] RSP: 002b:00007f616d3c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.391969][T10363] RAX: ffffffffffffffda RBX: 00007f616c7b6080 RCX: 00007f616c58e929 [ 241.391985][T10363] RDX: 0000000000008040 RSI: 0000200000000180 RDI: 0000000000000003 [ 241.391998][T10363] RBP: 00007f616d3c0090 R08: 0000000000000000 R09: 0000000000000000 [ 241.392011][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.392024][T10363] R13: 0000000000000000 R14: 00007f616c7b6080 R15: 00007fff874e5158 [ 241.392056][T10363] [ 241.760800][ T7736] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 241.932908][T10378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.996309][T10380] netlink: 'syz.2.1410': attribute type 1 has an invalid length. [ 242.062327][T10380] netlink: 16118 bytes leftover after parsing attributes in process `syz.2.1410'. [ 242.071730][T10387] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.156958][T10378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.162866][T10391] netlink: 'syz.1.1412': attribute type 27 has an invalid length. [ 242.586734][T10400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1413'. [ 242.806856][T10403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.926946][T10406] bridge0: entered promiscuous mode [ 243.140902][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 243.616067][T10422] lo speed is unknown, defaulting to 1000 [ 243.705930][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'. [ 244.195632][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1428'. [ 244.414188][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1429'. [ 244.687495][T10454] lo speed is unknown, defaulting to 1000 [ 245.203001][T10467] lo speed is unknown, defaulting to 1000 [ 245.551436][T10477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 245.599812][ T5972] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 245.639724][ T3021] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 246.015676][T10486] lo speed is unknown, defaulting to 1000 [ 246.060862][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1440'. [ 246.077051][T10490] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 246.098820][T10490] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1441'. [ 246.144072][T10494] netlink: 'syz.2.1442': attribute type 32 has an invalid length. [ 246.335792][T10495] tipc: Started in network mode [ 246.351334][T10495] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 246.393482][T10495] tipc: Enabled bearer , priority 0 [ 246.684499][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1445'. [ 246.712825][T10509] openvswitch: netlink: Duplicate or invalid key (type 0). [ 246.722306][T10509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.729523][T10507] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1445'. [ 247.388763][ T5907] tipc: Node number set to 11578026 [ 247.519357][ T1164] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 247.872179][T10548] __nla_validate_parse: 2 callbacks suppressed [ 247.872199][T10548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1458'. [ 248.380250][T10569] FAULT_INJECTION: forcing a failure. [ 248.380250][T10569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.420801][T10569] CPU: 1 UID: 0 PID: 10569 Comm: syz.4.1466 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 248.420832][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.420846][T10569] Call Trace: [ 248.420854][T10569] [ 248.420864][T10569] dump_stack_lvl+0x189/0x250 [ 248.420901][T10569] ? __pfx____ratelimit+0x10/0x10 [ 248.420926][T10569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.420960][T10569] ? __pfx__printk+0x10/0x10 [ 248.420983][T10569] ? __might_fault+0xb0/0x130 [ 248.421031][T10569] should_fail_ex+0x414/0x560 [ 248.421063][T10569] _copy_from_user+0x2d/0xb0 [ 248.421084][T10569] kstrtouint_from_user+0xc4/0x170 [ 248.421117][T10569] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 248.421166][T10569] proc_fail_nth_write+0x88/0x240 [ 248.421191][T10569] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 248.421224][T10569] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 248.421261][T10569] vfs_write+0x27b/0xa90 [ 248.421305][T10569] ? __pfx_vfs_write+0x10/0x10 [ 248.421340][T10569] ? __fget_files+0x2a/0x420 [ 248.421368][T10569] ? __fget_files+0x3a0/0x420 [ 248.421390][T10569] ? __fget_files+0x2a/0x420 [ 248.421423][T10569] ksys_write+0x145/0x250 [ 248.421460][T10569] ? __pfx_ksys_write+0x10/0x10 [ 248.421488][T10569] ? rcu_is_watching+0x15/0xb0 [ 248.421528][T10569] ? do_syscall_64+0xbe/0x3b0 [ 248.421558][T10569] do_syscall_64+0xfa/0x3b0 [ 248.421581][T10569] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.421604][T10569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.421625][T10569] ? clear_bhb_loop+0x60/0xb0 [ 248.421662][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.421681][T10569] RIP: 0033:0x7f616c58d3df [ 248.421700][T10569] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 248.421718][T10569] RSP: 002b:00007f616d3c0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 248.421739][T10569] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f616c58d3df [ 248.421754][T10569] RDX: 0000000000000001 RSI: 00007f616d3c00a0 RDI: 0000000000000005 [ 248.421767][T10569] RBP: 00007f616d3c0090 R08: 0000000000000000 R09: 0000000000000000 [ 248.421779][T10569] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 248.421791][T10569] R13: 0000000000000000 R14: 00007f616c7b6080 R15: 00007fff874e5158 [ 248.421825][T10569] [ 248.720140][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1467'. [ 249.052589][T10588] macsec0: entered promiscuous mode [ 249.072408][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 249.126597][T10592] FAULT_INJECTION: forcing a failure. [ 249.126597][T10592] name failslab, interval 1, probability 0, space 0, times 0 [ 249.149961][T10588] veth1_macvtap: left promiscuous mode [ 249.162746][T10592] CPU: 1 UID: 0 PID: 10592 Comm: syz.2.1472 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 249.162794][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.162808][T10592] Call Trace: [ 249.162816][T10592] [ 249.162826][T10592] dump_stack_lvl+0x189/0x250 [ 249.162864][T10592] ? __pfx____ratelimit+0x10/0x10 [ 249.162888][T10592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.162929][T10592] ? __pfx__printk+0x10/0x10 [ 249.162959][T10592] ? __pfx___might_resched+0x10/0x10 [ 249.162990][T10592] ? fs_reclaim_acquire+0x7d/0x100 [ 249.163021][T10592] should_fail_ex+0x414/0x560 [ 249.163053][T10592] should_failslab+0xa8/0x100 [ 249.163078][T10592] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 249.163099][T10592] ? wakeup_source_register+0x77/0x380 [ 249.163127][T10592] kstrdup+0x42/0x100 [ 249.163154][T10592] wakeup_source_register+0x77/0x380 [ 249.163182][T10592] ep_insert+0xff3/0x1a00 [ 249.163234][T10592] ? __pfx_ep_insert+0x10/0x10 [ 249.163283][T10592] ? bpf_lsm_capable+0x9/0x20 [ 249.163312][T10592] do_epoll_ctl+0x7f4/0xe90 [ 249.163355][T10592] __x64_sys_epoll_ctl+0x163/0x1a0 [ 249.163405][T10592] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 249.163434][T10592] ? rcu_is_watching+0x15/0xb0 [ 249.163471][T10592] ? do_syscall_64+0xbe/0x3b0 [ 249.163518][T10592] do_syscall_64+0xfa/0x3b0 [ 249.163542][T10592] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.163565][T10592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.163587][T10592] ? clear_bhb_loop+0x60/0xb0 [ 249.163614][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.163634][T10592] RIP: 0033:0x7f02da38e929 [ 249.163654][T10592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.163674][T10592] RSP: 002b:00007f02db1d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 249.163696][T10592] RAX: ffffffffffffffda RBX: 00007f02da5b5fa0 RCX: 00007f02da38e929 [ 249.163712][T10592] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 249.163723][T10592] RBP: 00007f02db1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 249.163736][T10592] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 249.163749][T10592] R13: 0000000000000000 R14: 00007f02da5b5fa0 R15: 00007ffd4ad3cfd8 [ 249.163781][T10592] [ 249.453421][T10588] macsec0 (unregistering): left promiscuous mode [ 249.479569][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 249.665033][T10610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1479'. [ 249.752722][T10615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.762195][T10615] batadv_slave_1: entered promiscuous mode [ 249.785922][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 249.814390][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 249.844528][T10617] netlink: 'syz.4.1480': attribute type 30 has an invalid length. [ 249.847299][T10620] veth3: entered promiscuous mode [ 249.874820][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1480'. [ 249.879548][T10624] x_tables: duplicate underflow at hook 1 [ 249.897525][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 249.904222][T10616] veth5: entered promiscuous mode [ 250.032443][T10628] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1483'. [ 250.145115][T10630] lo speed is unknown, defaulting to 1000 [ 250.371184][T10638] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 250.991705][T10660] lo speed is unknown, defaulting to 1000 [ 251.362830][ T2997] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 251.552576][T10674] lo speed is unknown, defaulting to 1000 [ 252.123667][T10660] netlink: 'syz.1.1493': attribute type 4 has an invalid length. [ 252.607541][T10710] lo speed is unknown, defaulting to 1000 [ 253.061283][T10716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.134089][T10716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.192250][T10716] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 253.225351][T10716] bond0 (unregistering): Released all slaves [ 253.279701][ T2997] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 253.392460][T10731] __nla_validate_parse: 4 callbacks suppressed [ 253.392480][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1510'. [ 253.460208][T10731] geneve3: entered promiscuous mode [ 253.692314][T10737] lo speed is unknown, defaulting to 1000 [ 254.032403][T10759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.036074][T10757] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1517'. [ 254.224708][T10761] can: request_module (can-proto-0) failed. [ 254.719450][T10788] Cannot find set identified by id 0 to match [ 254.967152][T10794] lo speed is unknown, defaulting to 1000 [ 255.066658][T10801] lo speed is unknown, defaulting to 1000 [ 255.143402][T10803] lo speed is unknown, defaulting to 1000 [ 255.318208][T10804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1531'. [ 255.417449][T10811] lo speed is unknown, defaulting to 1000 [ 255.454809][T10817] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1535'. [ 255.503626][T10819] netlink: 'syz.3.1536': attribute type 10 has an invalid length. [ 255.591736][T10822] netlink: 'syz.3.1536': attribute type 10 has an invalid length. [ 255.771006][T10819] team0: Port device dummy0 added [ 255.813518][T10817] team0: Port device dummy0 removed [ 255.861607][T10817] bridge0: port 3(batadv0) entered disabled state [ 255.908998][T10817] bridge_slave_0: left allmulticast mode [ 255.924274][T10817] bridge_slave_0: left promiscuous mode [ 255.944405][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.976914][T10817] bridge_slave_1: left allmulticast mode [ 255.987706][T10817] bridge_slave_1: left promiscuous mode [ 255.994736][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.033131][T10835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1542'. [ 256.043553][T10817] team0: Port device team_slave_0 removed [ 256.115276][T10817] team0: Port device team_slave_1 removed [ 256.115730][T10840] netlink: 'syz.2.1541': attribute type 39 has an invalid length. [ 256.149456][T10817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.198544][T10817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.275971][T10817] bond1: (slave gretap1): Releasing active interface [ 256.303823][T10817] bond2: (slave bond3): Releasing backup interface [ 256.337808][T10822] team0: Port device dummy0 removed [ 256.362534][T10822] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 256.484898][ T7731] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 256.732048][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 256.782649][T10844] dvmrp1: entered allmulticast mode [ 256.855371][T10843] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1544'. [ 257.497364][T10873] lo speed is unknown, defaulting to 1000 [ 257.693619][T10883] lo speed is unknown, defaulting to 1000 [ 258.344660][T10898] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1558'. [ 258.395802][T10896] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.506513][T10896] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.556269][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'. [ 258.634710][T10900] netlink: 'syz.3.1559': attribute type 21 has an invalid length. [ 258.669076][T10896] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.700778][T10900] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1559'. [ 258.711693][T10903] lo speed is unknown, defaulting to 1000 [ 258.757893][T10896] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.982166][ T7731] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.042063][ T2997] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 259.094001][ T2997] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.168941][ T7731] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.360639][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 259.390068][ T7731] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.567648][T10936] lo speed is unknown, defaulting to 1000 [ 259.759498][T10948] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1570'. [ 259.904728][T10949] lo speed is unknown, defaulting to 1000 [ 260.081487][T10958] team0: Device gtp0 is of different type [ 260.307709][T10949] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1571'. [ 260.600574][T10970] lo speed is unknown, defaulting to 1000 [ 260.935863][T10980] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1580'. [ 261.025477][T10980] nbd: couldn't find a device at index 17 [ 261.232318][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1583'. [ 261.452591][T11004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1587'. [ 261.493230][T10999] lo speed is unknown, defaulting to 1000 [ 261.518644][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 262.218922][T11026] IPVS: Error connecting to the multicast addr [ 262.238773][ T7736] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 262.282717][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 262.368059][T11019] lo speed is unknown, defaulting to 1000 [ 262.773931][T11039] lo speed is unknown, defaulting to 1000 [ 262.864926][ T7733] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.881590][ T7733] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.914413][ T7733] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.960306][ T3021] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.056690][T11055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.065046][T11055] bridge0: port 1(bond3) entered blocking state [ 263.073922][T11055] bridge0: port 1(bond3) entered disabled state [ 263.080827][T11055] bond3: entered allmulticast mode [ 263.095320][T11055] bond3: entered promiscuous mode [ 263.104524][T11055] bridge0: port 1(bond3) entered blocking state [ 263.111703][T11055] bridge0: port 1(bond3) entered forwarding state [ 263.128630][ T1164] bridge0: port 1(bond3) entered disabled state [ 263.170925][T11055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1602'. [ 263.186300][T11055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1602'. [ 263.386231][T11067] lo speed is unknown, defaulting to 1000 [ 263.901082][T11094] netlink: 'syz.3.1615': attribute type 9 has an invalid length. [ 263.909277][T11094] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.1615'. [ 264.175710][T11102] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1617'. [ 264.226271][T11102] netlink: 'syz.2.1617': attribute type 7 has an invalid length. [ 264.354187][T11102] : entered promiscuous mode [ 264.517036][T11120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.802215][ T7736] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 264.873579][T11133] lo speed is unknown, defaulting to 1000 [ 265.095615][T11150] netlink: 'syz.3.1630': attribute type 13 has an invalid length. [ 265.188851][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 265.197860][T11152] netlink: 'syz.3.1630': attribute type 21 has an invalid length. [ 265.367550][T11150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.666288][T11151] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.674191][T11151] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.837316][T11151] tipc: Resetting bearer [ 266.197436][T11151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.498473][T11172] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1634'. [ 266.513223][T11165] syzkaller1: entered promiscuous mode [ 266.530592][T11165] syzkaller1: entered allmulticast mode [ 266.558512][ T3021] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.633127][ T3021] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.649555][ T7731] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.668731][ T7731] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.954101][T11210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1646'. [ 266.957246][T11212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.989725][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 267.498012][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 267.541571][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 267.580009][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 267.935589][T11247] xt_hashlimit: size too large, truncated to 1048576 [ 268.000182][ T7736] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 268.696830][T11269] netlink: 'syz.1.1664': attribute type 5 has an invalid length. [ 268.736927][T11269] netlink: 'syz.1.1664': attribute type 7 has an invalid length. [ 268.754198][T11273] Cannot find del_set index 0 as target [ 268.776998][T11269] : entered promiscuous mode [ 268.785829][T11275] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1665'. [ 268.829078][T11277] netlink: 'syz.4.1666': attribute type 3 has an invalid length. [ 268.833202][T11267] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 268.926544][T11276] lo speed is unknown, defaulting to 1000 [ 268.949797][T11285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.173187][T11294] netlink: 'syz.4.1669': attribute type 39 has an invalid length. [ 269.849416][T11310] __nla_validate_parse: 2 callbacks suppressed [ 269.849437][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 270.161265][T11314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.558834][ T7733] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 270.771265][T11346] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1690'. [ 270.915212][T11350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1693'. [ 271.996083][T11403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1717'. [ 272.044301][T11400] lo speed is unknown, defaulting to 1000 [ 272.051788][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1720'. [ 272.088663][T11406] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1720'. [ 272.267122][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 272.323044][T11415] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1723'. [ 272.582747][T11431] tun0: tun_chr_ioctl cmd 2147767520 [ 272.934204][T11441] sctp: [Deprecated]: syz.3.1734 (pid 11441) Use of int in maxseg socket option. [ 272.934204][T11441] Use struct sctp_assoc_value instead [ 273.207979][T11451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.511083][T11454] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 273.643226][ T2997] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.676092][ T2997] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.685233][ T2997] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.694730][ T2997] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.746699][T11475] lo speed is unknown, defaulting to 1000 [ 273.759352][ T7736] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 274.055869][T11484] netlink: 'syz.3.1747': attribute type 39 has an invalid length. [ 274.663125][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 274.802532][T11507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.119401][T11523] lo speed is unknown, defaulting to 1000 [ 275.497800][T11541] lo speed is unknown, defaulting to 1000 [ 275.960886][T11560] siw: device registration error -23 [ 276.320306][ T7733] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 276.453160][T11574] lo speed is unknown, defaulting to 1000 [ 276.930346][T11598] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1787'. [ 276.949305][T11598] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1787'. [ 277.134229][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 277.188969][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 278.106975][T11627] netlink: 'syz.3.1795': attribute type 10 has an invalid length. [ 278.369100][T11636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.484192][T11627] team0: Cannot enslave team device to itself [ 278.539436][T11626] lo speed is unknown, defaulting to 1000 [ 279.091859][T11658] lo speed is unknown, defaulting to 1000 [ 279.103495][T11667] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1806'. [ 279.148590][T11667] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1806'. [ 279.191619][T11672] tipc: Started in network mode [ 279.197020][T11672] tipc: Node identity 4, cluster identity 4711 [ 279.206459][T11672] tipc: Node number set to 4 [ 279.519411][ T2997] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 279.706974][T11700] netlink: 'syz.2.1817': attribute type 39 has an invalid length. [ 279.715830][T11699] netlink: 'syz.1.1818': attribute type 39 has an invalid length. [ 280.116139][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1822'. [ 280.233592][T11716] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.438831][T11729] netlink: 'syz.4.1829': attribute type 1 has an invalid length. [ 280.446617][T11729] netlink: 'syz.4.1829': attribute type 4 has an invalid length. [ 280.487655][T11730] netlink: 'syz.4.1829': attribute type 1 has an invalid length. [ 280.509613][T11729] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1829'. [ 280.532484][T11730] netlink: 'syz.4.1829': attribute type 4 has an invalid length. [ 280.563473][T11730] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1829'. [ 280.588432][T11734] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 280.598344][T11732] IPVS: stopping backup sync thread 11734 ... [ 280.623872][T11738] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 280.792588][T11746] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 280.823155][T11749] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 280.842299][T11746] bond1: entered promiscuous mode [ 280.844587][T11751] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1833'. [ 280.850676][T11746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.891571][T11751] batadv1: entered promiscuous mode [ 280.896838][T11751] batadv1: entered allmulticast mode [ 280.904161][T11751] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 280.913822][T11751] bond1: (slave batadv1): making interface the new active one [ 280.922900][T11751] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 281.113460][T11765] FAULT_INJECTION: forcing a failure. [ 281.113460][T11765] name failslab, interval 1, probability 0, space 0, times 0 [ 281.126725][T11765] CPU: 0 UID: 0 PID: 11765 Comm: syz.3.1838 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 281.126761][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.126774][T11765] Call Trace: [ 281.126782][T11765] [ 281.126790][T11765] dump_stack_lvl+0x189/0x250 [ 281.126825][T11765] ? __pfx____ratelimit+0x10/0x10 [ 281.126848][T11765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.126878][T11765] ? __pfx__printk+0x10/0x10 [ 281.126906][T11765] ? __pfx___might_resched+0x10/0x10 [ 281.126935][T11765] ? fs_reclaim_acquire+0x7d/0x100 [ 281.126962][T11765] should_fail_ex+0x414/0x560 [ 281.126992][T11765] should_failslab+0xa8/0x100 [ 281.127015][T11765] kmem_cache_alloc_noprof+0x73/0x3c0 [ 281.127044][T11765] ? __kernfs_new_node+0xd7/0x7e0 [ 281.127073][T11765] __kernfs_new_node+0xd7/0x7e0 [ 281.127096][T11765] ? __lock_acquire+0xab9/0xd20 [ 281.127133][T11765] ? __pfx___kernfs_new_node+0x10/0x10 [ 281.127157][T11765] ? kernfs_root+0x1c/0x230 [ 281.127186][T11765] ? kernfs_root+0x1c/0x230 [ 281.127207][T11765] ? kernfs_root+0x1c/0x230 [ 281.127226][T11765] ? kernfs_root+0x1c/0x230 [ 281.127253][T11765] kernfs_new_node+0x102/0x210 [ 281.127282][T11765] __kernfs_create_file+0x4b/0x2e0 [ 281.127315][T11765] sysfs_add_file_mode_ns+0x238/0x300 [ 281.127355][T11765] internal_create_group+0x66d/0x1110 [ 281.127395][T11765] ? __pfx_internal_create_group+0x10/0x10 [ 281.127430][T11765] sysfs_create_groups+0x59/0x120 [ 281.127455][T11765] device_add_attrs+0x1c4/0x5a0 [ 281.127483][T11765] ? __pfx_device_add_attrs+0x10/0x10 [ 281.127500][T11765] ? kobject_put+0x43f/0x480 [ 281.127529][T11765] ? device_add_class_symlinks+0x21f/0x240 [ 281.127553][T11765] device_add+0x496/0xb50 [ 281.127572][T11765] ? device_initialize+0x24b/0x440 [ 281.127594][T11765] wakeup_source_sysfs_add+0x1af/0x280 [ 281.127620][T11765] wakeup_source_register+0x18a/0x380 [ 281.127644][T11765] ep_insert+0xff3/0x1a00 [ 281.127690][T11765] ? __pfx_ep_insert+0x10/0x10 [ 281.127733][T11765] ? bpf_lsm_capable+0x9/0x20 [ 281.127766][T11765] do_epoll_ctl+0x7f4/0xe90 [ 281.127805][T11765] __x64_sys_epoll_ctl+0x163/0x1a0 [ 281.127838][T11765] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 281.127867][T11765] ? rcu_is_watching+0x15/0xb0 [ 281.127902][T11765] ? do_syscall_64+0xbe/0x3b0 [ 281.127929][T11765] do_syscall_64+0xfa/0x3b0 [ 281.127950][T11765] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.127971][T11765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.127990][T11765] ? clear_bhb_loop+0x60/0xb0 [ 281.128031][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.128050][T11765] RIP: 0033:0x7f557898e929 [ 281.128069][T11765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.128086][T11765] RSP: 002b:00007f55767f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 281.128107][T11765] RAX: ffffffffffffffda RBX: 00007f5578bb5fa0 RCX: 00007f557898e929 [ 281.128122][T11765] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 281.128135][T11765] RBP: 00007f55767f6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.128148][T11765] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 281.128160][T11765] R13: 0000000000000000 R14: 00007f5578bb5fa0 R15: 00007ffec1e2d9f8 [ 281.128193][T11765] [ 281.456352][ T7731] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 281.721771][T11776] netlink: 'syz.4.1840': attribute type 39 has an invalid length. [ 281.894490][T11784] team0: Port device geneve0 added [ 282.010457][T11784] lo speed is unknown, defaulting to 1000 [ 282.124231][T11795] __nla_validate_parse: 2 callbacks suppressed [ 282.124251][T11795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1849'. [ 282.186960][T11794] xt_hashlimit: size too large, truncated to 1048576 [ 282.205186][T11794] xt_hashlimit: max too large, truncated to 1048576 [ 282.373757][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 282.537880][T11811] FAULT_INJECTION: forcing a failure. [ 282.537880][T11811] name failslab, interval 1, probability 0, space 0, times 0 [ 282.588761][T11811] CPU: 1 UID: 0 PID: 11811 Comm: syz.4.1854 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 282.588794][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.588807][T11811] Call Trace: [ 282.588816][T11811] [ 282.588826][T11811] dump_stack_lvl+0x189/0x250 [ 282.588872][T11811] ? __pfx____ratelimit+0x10/0x10 [ 282.588897][T11811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.588930][T11811] ? __pfx__printk+0x10/0x10 [ 282.588961][T11811] ? __pfx___might_resched+0x10/0x10 [ 282.588992][T11811] ? fs_reclaim_acquire+0x7d/0x100 [ 282.589023][T11811] should_fail_ex+0x414/0x560 [ 282.589055][T11811] should_failslab+0xa8/0x100 [ 282.589079][T11811] kmem_cache_alloc_noprof+0x73/0x3c0 [ 282.589113][T11811] ? __kernfs_new_node+0xd7/0x7e0 [ 282.589145][T11811] __kernfs_new_node+0xd7/0x7e0 [ 282.589170][T11811] ? __lock_acquire+0xab9/0xd20 [ 282.589209][T11811] ? __pfx___kernfs_new_node+0x10/0x10 [ 282.589236][T11811] ? kernfs_root+0x1c/0x230 [ 282.589269][T11811] ? kernfs_root+0x1c/0x230 [ 282.589292][T11811] ? kernfs_root+0x1c/0x230 [ 282.589314][T11811] ? kernfs_root+0x1c/0x230 [ 282.589345][T11811] kernfs_new_node+0x102/0x210 [ 282.589378][T11811] __kernfs_create_file+0x4b/0x2e0 [ 282.589415][T11811] sysfs_add_file_mode_ns+0x238/0x300 [ 282.589461][T11811] internal_create_group+0x66d/0x1110 [ 282.589507][T11811] ? __pfx_internal_create_group+0x10/0x10 [ 282.589547][T11811] sysfs_create_groups+0x59/0x120 [ 282.589577][T11811] device_add_attrs+0x1c4/0x5a0 [ 282.589607][T11811] ? __pfx_device_add_attrs+0x10/0x10 [ 282.589627][T11811] ? kobject_put+0x43f/0x480 [ 282.589672][T11811] ? device_add_class_symlinks+0x21f/0x240 [ 282.589698][T11811] device_add+0x496/0xb50 [ 282.589718][T11811] ? device_initialize+0x24b/0x440 [ 282.589743][T11811] wakeup_source_sysfs_add+0x1af/0x280 [ 282.589772][T11811] wakeup_source_register+0x18a/0x380 [ 282.589801][T11811] ep_insert+0xff3/0x1a00 [ 282.589860][T11811] ? __pfx_ep_insert+0x10/0x10 [ 282.589907][T11811] ? bpf_lsm_capable+0x9/0x20 [ 282.589937][T11811] do_epoll_ctl+0x7f4/0xe90 [ 282.589979][T11811] __x64_sys_epoll_ctl+0x163/0x1a0 [ 282.590034][T11811] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 282.590066][T11811] ? rcu_is_watching+0x15/0xb0 [ 282.590106][T11811] ? do_syscall_64+0xbe/0x3b0 [ 282.590136][T11811] do_syscall_64+0xfa/0x3b0 [ 282.590161][T11811] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.590184][T11811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.590205][T11811] ? clear_bhb_loop+0x60/0xb0 [ 282.590232][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.590253][T11811] RIP: 0033:0x7f616c58e929 [ 282.590272][T11811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.590292][T11811] RSP: 002b:00007f616d3e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 282.590315][T11811] RAX: ffffffffffffffda RBX: 00007f616c7b5fa0 RCX: 00007f616c58e929 [ 282.590332][T11811] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 282.590344][T11811] RBP: 00007f616d3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 282.590358][T11811] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 282.590372][T11811] R13: 0000000000000000 R14: 00007f616c7b5fa0 R15: 00007fff874e5158 [ 282.590418][T11811] [ 283.224086][T11826] netlink: 410 bytes leftover after parsing attributes in process `syz.1.1859'. [ 283.836812][T11850] validate_nla: 1 callbacks suppressed [ 283.836832][T11850] netlink: 'syz.3.1864': attribute type 39 has an invalid length. [ 284.259812][T11862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1869'. [ 284.711686][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 284.765990][T11874] lo speed is unknown, defaulting to 1000 [ 285.220869][T11889] lo speed is unknown, defaulting to 1000 [ 285.229209][T11896] netlink: 'syz.2.1880': attribute type 83 has an invalid length. [ 285.279340][ T7731] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 285.306153][T11897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1880'. [ 285.327042][T11882] bond0: (slave dummy0): Releasing backup interface [ 285.378692][T11900] xt_policy: output policy not valid in PREROUTING and INPUT [ 285.928174][T11911] lo speed is unknown, defaulting to 1000 [ 285.940194][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1876'. [ 285.949914][T11889] netlink: 'syz.1.1876': attribute type 2 has an invalid length. [ 286.284634][T11933] netlink: 'syz.0.1892': attribute type 1 has an invalid length. [ 286.338868][T11936] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 286.643335][T11911] netlink: 'syz.3.1883': attribute type 2 has an invalid length. [ 286.776605][T11953] lo speed is unknown, defaulting to 1000 [ 287.035638][T11963] FAULT_INJECTION: forcing a failure. [ 287.035638][T11963] name failslab, interval 1, probability 0, space 0, times 0 [ 287.055996][T11963] CPU: 1 UID: 0 PID: 11963 Comm: syz.4.1901 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 287.056027][T11963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.056039][T11963] Call Trace: [ 287.056046][T11963] [ 287.056056][T11963] dump_stack_lvl+0x189/0x250 [ 287.056090][T11963] ? __pfx____ratelimit+0x10/0x10 [ 287.056113][T11963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.056143][T11963] ? __pfx__printk+0x10/0x10 [ 287.056170][T11963] ? __pfx___might_resched+0x10/0x10 [ 287.056198][T11963] ? fs_reclaim_acquire+0x7d/0x100 [ 287.056226][T11963] should_fail_ex+0x414/0x560 [ 287.056255][T11963] should_failslab+0xa8/0x100 [ 287.056277][T11963] kmem_cache_alloc_noprof+0x73/0x3c0 [ 287.056307][T11963] ? __kernfs_new_node+0xd7/0x7e0 [ 287.056335][T11963] __kernfs_new_node+0xd7/0x7e0 [ 287.056357][T11963] ? __lock_acquire+0xab9/0xd20 [ 287.056391][T11963] ? __pfx___kernfs_new_node+0x10/0x10 [ 287.056416][T11963] ? kernfs_root+0x1c/0x230 [ 287.056443][T11963] ? kernfs_root+0x1c/0x230 [ 287.056463][T11963] ? kernfs_root+0x1c/0x230 [ 287.056482][T11963] ? kernfs_root+0x1c/0x230 [ 287.056506][T11963] kernfs_new_node+0x102/0x210 [ 287.056540][T11963] kernfs_create_dir_ns+0x44/0x130 [ 287.056569][T11963] sysfs_create_dir_ns+0x123/0x280 [ 287.056594][T11963] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 287.056618][T11963] ? do_raw_spin_unlock+0x122/0x240 [ 287.056645][T11963] kobject_add_internal+0x59f/0xb40 [ 287.056680][T11963] kobject_add+0x155/0x220 [ 287.056710][T11963] ? __pfx_kobject_add+0x10/0x10 [ 287.056741][T11963] ? get_device_parent+0x366/0x3a0 [ 287.056766][T11963] device_add+0x408/0xb50 [ 287.056784][T11963] ? device_initialize+0x24b/0x440 [ 287.056806][T11963] netdev_register_kobject+0x178/0x310 [ 287.056841][T11963] register_netdevice+0x126c/0x1ae0 [ 287.056871][T11963] ? __pfx_css_rstat_updated+0x10/0x10 [ 287.056939][T11963] ? __pfx_register_netdevice+0x10/0x10 [ 287.056968][T11963] ? __sock_sendmsg+0x219/0x270 [ 287.056986][T11963] ? ____sys_sendmsg+0x505/0x830 [ 287.057011][T11963] ? ___sys_sendmsg+0x21f/0x2a0 [ 287.057034][T11963] ? __x64_sys_sendmsg+0x19b/0x260 [ 287.057058][T11963] ? do_syscall_64+0xfa/0x3b0 [ 287.057078][T11963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.057110][T11963] macsec_newlink+0x6be/0x11b0 [ 287.057143][T11963] ? __pfx_macsec_handle_frame+0x10/0x10 [ 287.057183][T11963] ? __pfx_macsec_newlink+0x10/0x10 [ 287.057210][T11963] ? alloc_netdev_mqs+0xc59/0x1170 [ 287.057226][T11963] ? rcu_is_watching+0x15/0xb0 [ 287.057253][T11963] ? alloc_netdev_mqs+0xc59/0x1170 [ 287.057269][T11963] ? trace_kmalloc+0x1f/0xd0 [ 287.057296][T11963] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 287.057314][T11963] ? alloc_netdev_mqs+0xc59/0x1170 [ 287.057337][T11963] ? validate_linkmsg+0x765/0x950 [ 287.057366][T11963] ? __pfx_macsec_newlink+0x10/0x10 [ 287.057394][T11963] rtnl_newlink_create+0x30d/0xb00 [ 287.057425][T11963] ? __mutex_lock+0x51b/0xe80 [ 287.057451][T11963] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 287.057474][T11963] ? rtnl_newlink+0x8db/0x1c70 [ 287.057498][T11963] ? __pfx___mutex_lock+0x10/0x10 [ 287.057555][T11963] ? ns_capable+0x8a/0xf0 [ 287.057587][T11963] rtnl_newlink+0x16d6/0x1c70 [ 287.057628][T11963] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.057659][T11963] ? __lock_acquire+0xab9/0xd20 [ 287.057699][T11963] ? __lock_acquire+0xab9/0xd20 [ 287.057747][T11963] ? is_bpf_text_address+0x26/0x2b0 [ 287.057781][T11963] ? is_bpf_text_address+0x292/0x2b0 [ 287.057809][T11963] ? is_bpf_text_address+0x26/0x2b0 [ 287.057840][T11963] ? kernel_text_address+0xa5/0xe0 [ 287.057879][T11963] ? __lock_acquire+0xab9/0xd20 [ 287.057944][T11963] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.057966][T11963] rtnetlink_rcv_msg+0x7cc/0xb70 [ 287.057991][T11963] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 287.058012][T11963] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.058052][T11963] netlink_rcv_skb+0x208/0x470 [ 287.058075][T11963] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.058099][T11963] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.058136][T11963] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.058157][T11963] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.058185][T11963] netlink_unicast+0x75b/0x8d0 [ 287.058217][T11963] netlink_sendmsg+0x805/0xb30 [ 287.058250][T11963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.058277][T11963] ? aa_sock_msg_perm+0x94/0x160 [ 287.058304][T11963] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.058326][T11963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.058350][T11963] __sock_sendmsg+0x219/0x270 [ 287.058374][T11963] ____sys_sendmsg+0x505/0x830 [ 287.058406][T11963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.058443][T11963] ? import_iovec+0x74/0xa0 [ 287.058495][T11963] ___sys_sendmsg+0x21f/0x2a0 [ 287.058526][T11963] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.058602][T11963] ? __fget_files+0x2a/0x420 [ 287.058622][T11963] ? __fget_files+0x3a0/0x420 [ 287.058655][T11963] __x64_sys_sendmsg+0x19b/0x260 [ 287.058686][T11963] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.058726][T11963] ? __pfx_ksys_write+0x10/0x10 [ 287.058753][T11963] ? rcu_is_watching+0x15/0xb0 [ 287.058788][T11963] ? do_syscall_64+0xbe/0x3b0 [ 287.058816][T11963] do_syscall_64+0xfa/0x3b0 [ 287.058837][T11963] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.058858][T11963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.058877][T11963] ? clear_bhb_loop+0x60/0xb0 [ 287.058901][T11963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.058919][T11963] RIP: 0033:0x7f616c58e929 [ 287.058938][T11963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.058955][T11963] RSP: 002b:00007f616d3e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.058976][T11963] RAX: ffffffffffffffda RBX: 00007f616c7b5fa0 RCX: 00007f616c58e929 [ 287.058990][T11963] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 287.059003][T11963] RBP: 00007f616d3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 287.059014][T11963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.059025][T11963] R13: 0000000000000000 R14: 00007f616c7b5fa0 R15: 00007fff874e5158 [ 287.059058][T11963] [ 287.656453][ T7735] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 287.675924][T11963] kobject: kobject_add_internal failed for macsec2 (error: -12 parent: net) [ 288.134445][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 288.147422][T11982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1907'. [ 288.250632][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1913'. [ 288.352908][T11993] netlink: 'syz.0.1911': attribute type 10 has an invalid length. [ 288.382083][T11993] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.390048][T11993] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.485211][T12003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1917'. [ 289.014064][T12029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1925'. [ 289.028026][T12029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1925'. [ 289.305198][T12034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1927'. [ 289.759943][T12036] lo speed is unknown, defaulting to 1000 [ 289.920286][T12050] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1932'. [ 290.244277][T12063] syz_tun: entered allmulticast mode [ 290.279868][T12063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1936'. [ 290.301129][T12063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1936'. [ 290.368540][T12063] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 290.413942][ T7736] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 290.446185][T12062] syz_tun: left allmulticast mode [ 290.827315][T12077] lo speed is unknown, defaulting to 1000 [ 291.123615][T12086] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 291.135585][T12086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.231436][T12094] FAULT_INJECTION: forcing a failure. [ 291.231436][T12094] name failslab, interval 1, probability 0, space 0, times 0 [ 291.256071][T12094] CPU: 1 UID: 0 PID: 12094 Comm: syz.2.1946 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 291.256104][T12094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.256117][T12094] Call Trace: [ 291.256126][T12094] [ 291.256135][T12094] dump_stack_lvl+0x189/0x250 [ 291.256175][T12094] ? __pfx____ratelimit+0x10/0x10 [ 291.256200][T12094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.256233][T12094] ? __pfx__printk+0x10/0x10 [ 291.256260][T12094] ? __pfx___might_resched+0x10/0x10 [ 291.256294][T12094] ? fs_reclaim_acquire+0x7d/0x100 [ 291.256336][T12094] should_fail_ex+0x414/0x560 [ 291.256369][T12094] should_failslab+0xa8/0x100 [ 291.256392][T12094] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 291.256414][T12094] ? __kernfs_new_node+0x9c/0x7e0 [ 291.256445][T12094] kstrdup+0x42/0x100 [ 291.256472][T12094] __kernfs_new_node+0x9c/0x7e0 [ 291.256509][T12094] ? __pfx___kernfs_new_node+0x10/0x10 [ 291.256533][T12094] ? kernfs_root+0x1c/0x230 [ 291.256564][T12094] ? kernfs_root+0x1c/0x230 [ 291.256586][T12094] ? kernfs_root+0x1c/0x230 [ 291.256616][T12094] kernfs_new_node+0x102/0x210 [ 291.256676][T12094] kernfs_create_link+0xa7/0x200 [ 291.256714][T12094] sysfs_do_create_link_sd+0x83/0x110 [ 291.256741][T12094] device_add_class_symlinks+0x1cf/0x240 [ 291.256769][T12094] device_add+0x475/0xb50 [ 291.256791][T12094] ? device_initialize+0x24b/0x440 [ 291.256815][T12094] netdev_register_kobject+0x178/0x310 [ 291.256856][T12094] register_netdevice+0x126c/0x1ae0 [ 291.256910][T12094] ? __pfx_register_netdevice+0x10/0x10 [ 291.256940][T12094] ? __sock_sendmsg+0x219/0x270 [ 291.256959][T12094] ? ____sys_sendmsg+0x505/0x830 [ 291.256985][T12094] ? ___sys_sendmsg+0x21f/0x2a0 [ 291.257021][T12094] ? __x64_sys_sendmsg+0x19b/0x260 [ 291.257049][T12094] ? do_syscall_64+0xfa/0x3b0 [ 291.257082][T12094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.257119][T12094] macsec_newlink+0x6be/0x11b0 [ 291.257158][T12094] ? __pfx_macsec_handle_frame+0x10/0x10 [ 291.257205][T12094] ? __pfx_macsec_newlink+0x10/0x10 [ 291.257238][T12094] ? alloc_netdev_mqs+0xc59/0x1170 [ 291.257259][T12094] ? rcu_is_watching+0x15/0xb0 [ 291.257290][T12094] ? alloc_netdev_mqs+0xc59/0x1170 [ 291.257310][T12094] ? trace_kmalloc+0x1f/0xd0 [ 291.257347][T12094] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 291.257369][T12094] ? alloc_netdev_mqs+0xc59/0x1170 [ 291.257401][T12094] ? validate_linkmsg+0x765/0x950 [ 291.257435][T12094] ? __pfx_macsec_newlink+0x10/0x10 [ 291.257469][T12094] rtnl_newlink_create+0x30d/0xb00 [ 291.257503][T12094] ? nla_memcpy+0x5b/0xc0 [ 291.257533][T12094] ? __pfx_aa_get_newest_label+0x10/0x10 [ 291.257564][T12094] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 291.257591][T12094] ? rtnl_newlink+0x8db/0x1c70 [ 291.257620][T12094] ? __pfx___mutex_lock+0x10/0x10 [ 291.257657][T12094] ? ns_capable+0x8a/0xf0 [ 291.257694][T12094] rtnl_newlink+0x16d6/0x1c70 [ 291.257739][T12094] ? __pfx_rtnl_newlink+0x10/0x10 [ 291.257763][T12094] ? is_bpf_text_address+0x26/0x2b0 [ 291.257804][T12094] ? __lock_acquire+0xab9/0xd20 [ 291.257848][T12094] ? __lock_acquire+0xab9/0xd20 [ 291.257913][T12094] ? is_bpf_text_address+0x26/0x2b0 [ 291.257948][T12094] ? is_bpf_text_address+0x292/0x2b0 [ 291.257977][T12094] ? is_bpf_text_address+0x26/0x2b0 [ 291.258023][T12094] ? kernel_text_address+0xa5/0xe0 [ 291.258060][T12094] ? __lock_acquire+0xab9/0xd20 [ 291.258111][T12094] ? __pfx_rtnl_newlink+0x10/0x10 [ 291.258132][T12094] rtnetlink_rcv_msg+0x7cc/0xb70 [ 291.258157][T12094] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 291.258178][T12094] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.258224][T12094] netlink_rcv_skb+0x208/0x470 [ 291.258252][T12094] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.258278][T12094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.258318][T12094] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.258343][T12094] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.258373][T12094] netlink_unicast+0x75b/0x8d0 [ 291.258410][T12094] netlink_sendmsg+0x805/0xb30 [ 291.258447][T12094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.258477][T12094] ? aa_sock_msg_perm+0x94/0x160 [ 291.258523][T12094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.258550][T12094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.258578][T12094] __sock_sendmsg+0x219/0x270 [ 291.258605][T12094] ____sys_sendmsg+0x505/0x830 [ 291.258642][T12094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.258685][T12094] ? import_iovec+0x74/0xa0 [ 291.258710][T12094] ___sys_sendmsg+0x21f/0x2a0 [ 291.258744][T12094] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.258820][T12094] ? __fget_files+0x2a/0x420 [ 291.258842][T12094] ? __fget_files+0x3a0/0x420 [ 291.258879][T12094] __x64_sys_sendmsg+0x19b/0x260 [ 291.258914][T12094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.258958][T12094] ? __pfx_ksys_write+0x10/0x10 [ 291.258988][T12094] ? rcu_is_watching+0x15/0xb0 [ 291.259036][T12094] ? do_syscall_64+0xbe/0x3b0 [ 291.259067][T12094] do_syscall_64+0xfa/0x3b0 [ 291.259091][T12094] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.259115][T12094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.259136][T12094] ? clear_bhb_loop+0x60/0xb0 [ 291.259163][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.259184][T12094] RIP: 0033:0x7f02da38e929 [ 291.259205][T12094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.259224][T12094] RSP: 002b:00007f02db1d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.259248][T12094] RAX: ffffffffffffffda RBX: 00007f02da5b5fa0 RCX: 00007f02da38e929 [ 291.259265][T12094] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 291.259279][T12094] RBP: 00007f02db1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 291.259292][T12094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.259305][T12094] R13: 0000000000000000 R14: 00007f02da5b5fa0 R15: 00007ffd4ad3cfd8 [ 291.259341][T12094] [ 292.137374][T12115] netlink: 'syz.1.1952': attribute type 15 has an invalid length. [ 292.519225][T12132] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 292.637379][T12135] FAULT_INJECTION: forcing a failure. [ 292.637379][T12135] name failslab, interval 1, probability 0, space 0, times 0 [ 292.656997][T12135] CPU: 1 UID: 0 PID: 12135 Comm: syz.4.1960 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 292.657030][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.657043][T12135] Call Trace: [ 292.657052][T12135] [ 292.657061][T12135] dump_stack_lvl+0x189/0x250 [ 292.657100][T12135] ? __pfx____ratelimit+0x10/0x10 [ 292.657125][T12135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.657158][T12135] ? __pfx__printk+0x10/0x10 [ 292.657189][T12135] ? __pfx___might_resched+0x10/0x10 [ 292.657227][T12135] should_fail_ex+0x414/0x560 [ 292.657259][T12135] should_failslab+0xa8/0x100 [ 292.657284][T12135] __kmalloc_cache_noprof+0x70/0x3d0 [ 292.657304][T12135] ? kobject_uevent_env+0x27c/0x8c0 [ 292.657337][T12135] ? __pfx_dev_uevent_name+0x10/0x10 [ 292.657366][T12135] kobject_uevent_env+0x27c/0x8c0 [ 292.657407][T12135] device_add+0x557/0xb50 [ 292.657434][T12135] wakeup_source_sysfs_add+0x1af/0x280 [ 292.657464][T12135] wakeup_source_register+0x18a/0x380 [ 292.657491][T12135] ep_insert+0xff3/0x1a00 [ 292.657541][T12135] ? __pfx_ep_insert+0x10/0x10 [ 292.657589][T12135] ? bpf_lsm_capable+0x9/0x20 [ 292.657619][T12135] do_epoll_ctl+0x7f4/0xe90 [ 292.657662][T12135] __x64_sys_epoll_ctl+0x163/0x1a0 [ 292.657699][T12135] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 292.657731][T12135] ? rcu_is_watching+0x15/0xb0 [ 292.657770][T12135] ? do_syscall_64+0xbe/0x3b0 [ 292.657812][T12135] do_syscall_64+0xfa/0x3b0 [ 292.657835][T12135] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.657857][T12135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.657877][T12135] ? clear_bhb_loop+0x60/0xb0 [ 292.657903][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.657930][T12135] RIP: 0033:0x7f616c58e929 [ 292.657948][T12135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.657969][T12135] RSP: 002b:00007f616d3e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 292.657992][T12135] RAX: ffffffffffffffda RBX: 00007f616c7b5fa0 RCX: 00007f616c58e929 [ 292.658007][T12135] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 292.658019][T12135] RBP: 00007f616d3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 292.658032][T12135] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 292.658045][T12135] R13: 0000000000000000 R14: 00007f616c7b5fa0 R15: 00007fff874e5158 [ 292.658078][T12135] [ 292.681816][T12137] FAULT_INJECTION: forcing a failure. [ 292.681816][T12137] name failslab, interval 1, probability 0, space 0, times 0 [ 292.928610][T12137] CPU: 1 UID: 0 PID: 12137 Comm: syz.0.1961 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 292.928643][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.928657][T12137] Call Trace: [ 292.928665][T12137] [ 292.928674][T12137] dump_stack_lvl+0x189/0x250 [ 292.928713][T12137] ? __pfx____ratelimit+0x10/0x10 [ 292.928739][T12137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.928773][T12137] ? __pfx__printk+0x10/0x10 [ 292.928800][T12137] ? __pfx___might_resched+0x10/0x10 [ 292.928833][T12137] ? fs_reclaim_acquire+0x7d/0x100 [ 292.928864][T12137] should_fail_ex+0x414/0x560 [ 292.928897][T12137] should_failslab+0xa8/0x100 [ 292.928923][T12137] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 292.928946][T12137] ? __kernfs_new_node+0x9c/0x7e0 [ 292.928979][T12137] kstrdup+0x42/0x100 [ 292.929007][T12137] __kernfs_new_node+0x9c/0x7e0 [ 292.929046][T12137] ? __pfx___kernfs_new_node+0x10/0x10 [ 292.929071][T12137] ? kernfs_root+0x1c/0x230 [ 292.929104][T12137] ? kernfs_root+0x1c/0x230 [ 292.929127][T12137] ? kernfs_root+0x1c/0x230 [ 292.929168][T12137] kernfs_new_node+0x102/0x210 [ 292.929201][T12137] kernfs_create_link+0xa7/0x200 [ 292.929239][T12137] sysfs_do_create_link_sd+0x83/0x110 [ 292.929266][T12137] device_add_class_symlinks+0x1cf/0x240 [ 292.929296][T12137] device_add+0x475/0xb50 [ 292.929317][T12137] ? device_initialize+0x24b/0x440 [ 292.929342][T12137] netdev_register_kobject+0x178/0x310 [ 292.929383][T12137] register_netdevice+0x126c/0x1ae0 [ 292.929436][T12137] ? __pfx_register_netdevice+0x10/0x10 [ 292.929466][T12137] ? __sock_sendmsg+0x219/0x270 [ 292.929485][T12137] ? ____sys_sendmsg+0x505/0x830 [ 292.929512][T12137] ? ___sys_sendmsg+0x21f/0x2a0 [ 292.929539][T12137] ? __x64_sys_sendmsg+0x19b/0x260 [ 292.929567][T12137] ? do_syscall_64+0xfa/0x3b0 [ 292.929592][T12137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.929628][T12137] macsec_newlink+0x6be/0x11b0 [ 292.929673][T12137] ? __pfx_macsec_handle_frame+0x10/0x10 [ 292.929729][T12137] ? __pfx_macsec_newlink+0x10/0x10 [ 292.929773][T12137] ? alloc_netdev_mqs+0xc59/0x1170 [ 292.929792][T12137] ? rcu_is_watching+0x15/0xb0 [ 292.929823][T12137] ? alloc_netdev_mqs+0xc59/0x1170 [ 292.929841][T12137] ? trace_kmalloc+0x1f/0xd0 [ 292.929870][T12137] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 292.929890][T12137] ? alloc_netdev_mqs+0xc59/0x1170 [ 292.929916][T12137] ? validate_linkmsg+0x765/0x950 [ 292.929949][T12137] ? __pfx_macsec_newlink+0x10/0x10 [ 292.929980][T12137] rtnl_newlink_create+0x30d/0xb00 [ 292.930014][T12137] ? nla_memcpy+0x5b/0xc0 [ 292.930041][T12137] ? __pfx_aa_get_newest_label+0x10/0x10 [ 292.930071][T12137] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 292.930097][T12137] ? rtnl_newlink+0x8db/0x1c70 [ 292.930124][T12137] ? __pfx___mutex_lock+0x10/0x10 [ 292.930166][T12137] ? ns_capable+0x8a/0xf0 [ 292.930203][T12137] rtnl_newlink+0x16d6/0x1c70 [ 292.930229][T12137] ? netlink_sendmsg+0x805/0xb30 [ 292.930267][T12137] ? __pfx_rtnl_newlink+0x10/0x10 [ 292.930319][T12137] ? kasan_quarantine_put+0xdd/0x220 [ 292.930350][T12137] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.930379][T12137] ? nlmon_xmit+0xb0/0x100 [ 292.930396][T12137] ? kmem_cache_free+0x18f/0x400 [ 292.930424][T12137] ? __local_bh_enable_ip+0x12d/0x1c0 [ 292.930454][T12137] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.930477][T12137] ? __local_bh_enable_ip+0x12d/0x1c0 [ 292.930507][T12137] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 292.930541][T12137] ? __dev_queue_xmit+0x27e/0x3a70 [ 292.930597][T12137] ? __lock_acquire+0xab9/0xd20 [ 292.930649][T12137] ? __pfx_rtnl_newlink+0x10/0x10 [ 292.930673][T12137] rtnetlink_rcv_msg+0x7cc/0xb70 [ 292.930701][T12137] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 292.930722][T12137] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.930743][T12137] ? ref_tracker_free+0x63a/0x7d0 [ 292.930767][T12137] ? __copy_skb_header+0xa7/0x550 [ 292.930797][T12137] ? __pfx_ref_tracker_free+0x10/0x10 [ 292.930822][T12137] ? __skb_clone+0x63/0x7a0 [ 292.930859][T12137] netlink_rcv_skb+0x208/0x470 [ 292.930884][T12137] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.930911][T12137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.930949][T12137] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.930972][T12137] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.931002][T12137] netlink_unicast+0x75b/0x8d0 [ 292.931034][T12137] netlink_sendmsg+0x805/0xb30 [ 292.931068][T12137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.931094][T12137] ? aa_sock_msg_perm+0x94/0x160 [ 292.931120][T12137] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.931150][T12137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.931175][T12137] __sock_sendmsg+0x219/0x270 [ 292.931199][T12137] ____sys_sendmsg+0x505/0x830 [ 292.931233][T12137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.931272][T12137] ? import_iovec+0x74/0xa0 [ 292.931294][T12137] ___sys_sendmsg+0x21f/0x2a0 [ 292.931326][T12137] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.931394][T12137] ? __fget_files+0x2a/0x420 [ 292.931415][T12137] ? __fget_files+0x3a0/0x420 [ 292.931447][T12137] __x64_sys_sendmsg+0x19b/0x260 [ 292.931479][T12137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.931518][T12137] ? __pfx_ksys_write+0x10/0x10 [ 292.931546][T12137] ? rcu_is_watching+0x15/0xb0 [ 292.931582][T12137] ? do_syscall_64+0xbe/0x3b0 [ 292.931610][T12137] do_syscall_64+0xfa/0x3b0 [ 292.931631][T12137] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.931652][T12137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.931671][T12137] ? clear_bhb_loop+0x60/0xb0 [ 292.931695][T12137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.931714][T12137] RIP: 0033:0x7f1fb798e929 [ 292.931731][T12137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.931749][T12137] RSP: 002b:00007f1fb874d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.931770][T12137] RAX: ffffffffffffffda RBX: 00007f1fb7bb5fa0 RCX: 00007f1fb798e929 [ 292.931785][T12137] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 292.931797][T12137] RBP: 00007f1fb874d090 R08: 0000000000000000 R09: 0000000000000000 [ 292.931809][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.931821][T12137] R13: 0000000000000000 R14: 00007f1fb7bb5fa0 R15: 00007ffd4c338818 [ 292.931853][T12137] [ 293.617818][ T7735] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 293.910309][T12163] __nla_validate_parse: 8 callbacks suppressed [ 293.910329][T12163] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1967'. [ 293.943181][T12162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.989333][T12162] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 294.023619][T12168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1970'. [ 294.027287][T12167] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 294.032741][T12168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1970'. [ 294.032781][T12168] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 294.032909][T12168] FAULT_INJECTION: forcing a failure. [ 294.032909][T12168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.032947][T12168] CPU: 1 UID: 0 PID: 12168 Comm: syz.4.1970 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 294.032975][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.032990][T12168] Call Trace: [ 294.032999][T12168] [ 294.033009][T12168] dump_stack_lvl+0x189/0x250 [ 294.033048][T12168] ? __pfx____ratelimit+0x10/0x10 [ 294.033081][T12168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.033115][T12168] ? __pfx__printk+0x10/0x10 [ 294.033155][T12168] should_fail_ex+0x414/0x560 [ 294.033189][T12168] _copy_to_user+0x31/0xb0 [ 294.033213][T12168] simple_read_from_buffer+0xe1/0x170 [ 294.033242][T12168] proc_fail_nth_read+0x1df/0x250 [ 294.033272][T12168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.033302][T12168] ? rw_verify_area+0x258/0x650 [ 294.033334][T12168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.033362][T12168] vfs_read+0x1fd/0x980 [ 294.033402][T12168] ? __pfx___mutex_lock+0x10/0x10 [ 294.033429][T12168] ? __pfx_vfs_read+0x10/0x10 [ 294.033465][T12168] ? __fget_files+0x2a/0x420 [ 294.033495][T12168] ? __fget_files+0x3a0/0x420 [ 294.033517][T12168] ? __fget_files+0x2a/0x420 [ 294.033553][T12168] ksys_read+0x145/0x250 [ 294.033588][T12168] ? __pfx_ksys_read+0x10/0x10 [ 294.033623][T12168] ? rcu_is_watching+0x15/0xb0 [ 294.033683][T12168] ? do_syscall_64+0xbe/0x3b0 [ 294.033719][T12168] do_syscall_64+0xfa/0x3b0 [ 294.033747][T12168] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.033775][T12168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.033799][T12168] ? clear_bhb_loop+0x60/0xb0 [ 294.033828][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.033853][T12168] RIP: 0033:0x7f616c58d33c [ 294.033875][T12168] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 294.033897][T12168] RSP: 002b:00007f616d3e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.033925][T12168] RAX: ffffffffffffffda RBX: 00007f616c7b5fa0 RCX: 00007f616c58d33c [ 294.033944][T12168] RDX: 000000000000000f RSI: 00007f616d3e10a0 RDI: 0000000000000008 [ 294.033960][T12168] RBP: 00007f616d3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 294.033975][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.033991][T12168] R13: 0000000000000000 R14: 00007f616c7b5fa0 R15: 00007fff874e5158 [ 294.034030][T12168] [ 294.411854][T12180] FAULT_INJECTION: forcing a failure. [ 294.411854][T12180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.451473][T12180] CPU: 1 UID: 0 PID: 12180 Comm: syz.4.1976 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 294.451506][T12180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.451519][T12180] Call Trace: [ 294.451528][T12180] [ 294.451537][T12180] dump_stack_lvl+0x189/0x250 [ 294.451575][T12180] ? __pfx____ratelimit+0x10/0x10 [ 294.451599][T12180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.451631][T12180] ? __pfx__printk+0x10/0x10 [ 294.451669][T12180] should_fail_ex+0x414/0x560 [ 294.451700][T12180] _copy_to_user+0x31/0xb0 [ 294.451724][T12180] simple_read_from_buffer+0xe1/0x170 [ 294.451751][T12180] proc_fail_nth_read+0x1df/0x250 [ 294.451779][T12180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.451817][T12180] ? rw_verify_area+0x258/0x650 [ 294.451847][T12180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.451873][T12180] vfs_read+0x1fd/0x980 [ 294.451911][T12180] ? __pfx___mutex_lock+0x10/0x10 [ 294.451936][T12180] ? __pfx_vfs_read+0x10/0x10 [ 294.451969][T12180] ? __fget_files+0x2a/0x420 [ 294.451997][T12180] ? __fget_files+0x3a0/0x420 [ 294.452018][T12180] ? __fget_files+0x2a/0x420 [ 294.452050][T12180] ksys_read+0x145/0x250 [ 294.452084][T12180] ? __pfx_ksys_read+0x10/0x10 [ 294.452113][T12180] ? rcu_is_watching+0x15/0xb0 [ 294.452152][T12180] ? do_syscall_64+0xbe/0x3b0 [ 294.452181][T12180] do_syscall_64+0xfa/0x3b0 [ 294.452204][T12180] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.452226][T12180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.452247][T12180] ? clear_bhb_loop+0x60/0xb0 [ 294.452272][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.452292][T12180] RIP: 0033:0x7f616c58d33c [ 294.452311][T12180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 294.452330][T12180] RSP: 002b:00007f616d3e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.452353][T12180] RAX: ffffffffffffffda RBX: 00007f616c7b5fa0 RCX: 00007f616c58d33c [ 294.452372][T12180] RDX: 000000000000000f RSI: 00007f616d3e10a0 RDI: 0000000000000005 [ 294.452385][T12180] RBP: 00007f616d3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 294.452415][T12180] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 294.452429][T12180] R13: 0000000000000000 R14: 00007f616c7b5fa0 R15: 00007fff874e5158 [ 294.452464][T12180] [ 294.778919][T12183] lo speed is unknown, defaulting to 1000 [ 295.262991][T12199] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1981'. [ 295.306805][T12199] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1981'. [ 295.453960][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'. [ 295.492337][T12201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1984'. [ 295.506485][T12211] netlink: 'syz.1.1987': attribute type 10 has an invalid length. [ 295.515056][T12201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1984'. [ 295.529337][T12211] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1987'. [ 295.546172][T12201] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 295.563023][T12211] dummy0: entered promiscuous mode [ 295.572537][T12211] bridge0: port 1(dummy0) entered blocking state [ 295.586899][T12211] bridge0: port 1(dummy0) entered disabled state [ 295.595740][T12211] dummy0: entered allmulticast mode [ 295.608161][T12211] bridge0: port 1(dummy0) entered blocking state [ 295.614746][T12211] bridge0: port 1(dummy0) entered forwarding state [ 296.037099][T12234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1993'. [ 296.159968][ T7735] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 296.217834][T12234] lo speed is unknown, defaulting to 1000 [ 296.373373][T12243] lo speed is unknown, defaulting to 1000 [ 296.598105][T12249] bridge0: left promiscuous mode [ 296.668088][T12250] FAULT_INJECTION: forcing a failure. [ 296.668088][T12250] name failslab, interval 1, probability 0, space 0, times 0 [ 296.702687][T12250] CPU: 0 UID: 0 PID: 12250 Comm: syz.3.1997 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 296.702720][T12250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.702734][T12250] Call Trace: [ 296.702742][T12250] [ 296.702751][T12250] dump_stack_lvl+0x189/0x250 [ 296.702791][T12250] ? __pfx____ratelimit+0x10/0x10 [ 296.702827][T12250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.702871][T12250] ? __pfx__printk+0x10/0x10 [ 296.702932][T12250] ? __pfx___might_resched+0x10/0x10 [ 296.702965][T12250] ? fs_reclaim_acquire+0x7d/0x100 [ 296.702998][T12250] should_fail_ex+0x414/0x560 [ 296.703029][T12250] should_failslab+0xa8/0x100 [ 296.703054][T12250] __kmalloc_cache_noprof+0x70/0x3d0 [ 296.703073][T12250] ? resv_map_alloc+0x51/0x2c0 [ 296.703106][T12250] resv_map_alloc+0x51/0x2c0 [ 296.703138][T12250] hugetlbfs_get_inode+0x68/0x660 [ 296.703166][T12250] ? fput+0xa0/0xd0 [ 296.703197][T12250] hugetlb_file_setup+0x21d/0x630 [ 296.703229][T12250] ksys_mmap_pgoff+0x22f/0x760 [ 296.703270][T12250] do_syscall_64+0xfa/0x3b0 [ 296.703294][T12250] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.703317][T12250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.703338][T12250] ? clear_bhb_loop+0x60/0xb0 [ 296.703363][T12250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.703383][T12250] RIP: 0033:0x7f557898e929 [ 296.703401][T12250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.703419][T12250] RSP: 002b:00007f55767d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 296.703442][T12250] RAX: ffffffffffffffda RBX: 00007f5578bb6080 RCX: 00007f557898e929 [ 296.703458][T12250] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 296.703471][T12250] RBP: 00007f55767d5090 R08: ffffffffffffffff R09: 0000000000000000 [ 296.703485][T12250] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000001 [ 296.703498][T12250] R13: 0000000000000000 R14: 00007f5578bb6080 R15: 00007ffec1e2d9f8 [ 296.703532][T12250] [ 297.054417][ T1164] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.075933][ T1164] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.084586][ T1164] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.093329][T12259] netlink: 'syz.0.2000': attribute type 39 has an invalid length. [ 297.101975][ T1164] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.241339][T12264] netlink: 'syz.4.2001': attribute type 39 has an invalid length. [ 297.356679][T12268] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 297.430622][T12268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.544556][T12270] bond2: (slave gretap1): making interface the new active one [ 297.589462][T12270] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 297.811345][T12268] bond2 (unregistering): (slave gretap1): Releasing active interface [ 297.841579][T12268] bond2 (unregistering): Released all slaves [ 298.757590][T12304] lo speed is unknown, defaulting to 1000 [ 299.363691][ T7733] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 300.026939][T12341] netlink: 'syz.1.2026': attribute type 5 has an invalid length. [ 300.048136][T12341] ip6erspan0: entered allmulticast mode [ 300.448570][T12355] lo speed is unknown, defaulting to 1000 [ 300.990329][T12369] __nla_validate_parse: 2 callbacks suppressed [ 300.990359][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2033'. [ 301.135178][T12371] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2034'. [ 301.325280][T12373] lo speed is unknown, defaulting to 1000 [ 301.378150][T12379] bridge2: entered promiscuous mode [ 301.409243][T12379] bridge2: entered allmulticast mode [ 301.437500][T12380] bridge3: entered promiscuous mode [ 301.449299][T12380] bridge3: entered allmulticast mode [ 301.663316][T12392] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 301.663330][T12391] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 301.716911][T12400] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2040'. [ 301.755241][T12392] bond2: entered promiscuous mode [ 301.777093][T12392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.837068][T12400] batadv2: entered promiscuous mode [ 301.851683][T12400] batadv2: entered allmulticast mode [ 301.864234][T12400] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 301.881685][T12400] bond2: (slave batadv2): making interface the new active one [ 301.894564][T12400] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 301.906872][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 301.920170][ T7736] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 301.949654][T12404] FAULT_INJECTION: forcing a failure. [ 301.949654][T12404] name failslab, interval 1, probability 0, space 0, times 0 [ 301.982994][T12404] CPU: 0 UID: 0 PID: 12404 Comm: syz.4.2042 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 301.983027][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.983040][T12404] Call Trace: [ 301.983048][T12404] [ 301.983058][T12404] dump_stack_lvl+0x189/0x250 [ 301.983095][T12404] ? __pfx____ratelimit+0x10/0x10 [ 301.983119][T12404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.983151][T12404] ? __pfx__printk+0x10/0x10 [ 301.983181][T12404] ? __pfx___might_resched+0x10/0x10 [ 301.983218][T12404] should_fail_ex+0x414/0x560 [ 301.983248][T12404] should_failslab+0xa8/0x100 [ 301.983282][T12404] kmem_cache_alloc_noprof+0x73/0x3c0 [ 301.983315][T12404] ? security_inode_alloc+0x39/0x330 [ 301.983350][T12404] security_inode_alloc+0x39/0x330 [ 301.983381][T12404] inode_init_always_gfp+0x9ed/0xdc0 [ 301.983411][T12404] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 301.983441][T12404] alloc_inode+0x82/0x1b0 [ 301.983463][T12404] new_inode+0x22/0x170 [ 301.983484][T12404] ? resv_map_alloc+0x1da/0x2c0 [ 301.983515][T12404] hugetlbfs_get_inode+0x80/0x660 [ 301.983553][T12404] hugetlb_file_setup+0x21d/0x630 [ 301.983582][T12404] ksys_mmap_pgoff+0x22f/0x760 [ 301.983621][T12404] do_syscall_64+0xfa/0x3b0 [ 301.983645][T12404] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.983667][T12404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.983687][T12404] ? clear_bhb_loop+0x60/0xb0 [ 301.983711][T12404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.983731][T12404] RIP: 0033:0x7f616c58e929 [ 301.983749][T12404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.983768][T12404] RSP: 002b:00007f616d3c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 301.983790][T12404] RAX: ffffffffffffffda RBX: 00007f616c7b6080 RCX: 00007f616c58e929 [ 301.983804][T12404] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 301.983817][T12404] RBP: 00007f616d3c0090 R08: ffffffffffffffff R09: 0000000000000000 [ 301.983830][T12404] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000001 [ 301.983842][T12404] R13: 0000000000000000 R14: 00007f616c7b6080 R15: 00007fff874e5158 [ 301.983893][T12404] [ 302.627816][T12425] netlink: 'syz.1.2047': attribute type 39 has an invalid length. [ 302.784735][T12430] FAULT_INJECTION: forcing a failure. [ 302.784735][T12430] name failslab, interval 1, probability 0, space 0, times 0 [ 302.829169][T12430] CPU: 0 UID: 0 PID: 12430 Comm: syz.0.2051 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 302.829202][T12430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.829216][T12430] Call Trace: [ 302.829225][T12430] [ 302.829234][T12430] dump_stack_lvl+0x189/0x250 [ 302.829273][T12430] ? __pfx____ratelimit+0x10/0x10 [ 302.829299][T12430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.829332][T12430] ? __pfx__printk+0x10/0x10 [ 302.829363][T12430] ? __pfx___might_resched+0x10/0x10 [ 302.829396][T12430] ? fs_reclaim_acquire+0x7d/0x100 [ 302.829427][T12430] should_fail_ex+0x414/0x560 [ 302.829475][T12430] should_failslab+0xa8/0x100 [ 302.829499][T12430] kmem_cache_alloc_noprof+0x73/0x3c0 [ 302.829532][T12430] ? __kernfs_new_node+0xd7/0x7e0 [ 302.829562][T12430] __kernfs_new_node+0xd7/0x7e0 [ 302.829587][T12430] ? __lock_acquire+0xab9/0xd20 [ 302.829627][T12430] ? __pfx___kernfs_new_node+0x10/0x10 [ 302.829654][T12430] ? kernfs_root+0x1c/0x230 [ 302.829699][T12430] ? kernfs_root+0x1c/0x230 [ 302.829721][T12430] ? kernfs_root+0x1c/0x230 [ 302.829742][T12430] ? kernfs_root+0x1c/0x230 [ 302.829770][T12430] kernfs_new_node+0x102/0x210 [ 302.829802][T12430] __kernfs_create_file+0x4b/0x2e0 [ 302.829837][T12430] sysfs_add_file_mode_ns+0x238/0x300 [ 302.829880][T12430] internal_create_group+0x66d/0x1110 [ 302.829923][T12430] ? __pfx_internal_create_group+0x10/0x10 [ 302.829951][T12430] ? kernfs_add_one+0xf0/0x520 [ 302.829984][T12430] sysfs_create_groups+0x59/0x120 [ 302.830012][T12430] device_add_attrs+0xe0/0x5a0 [ 302.830042][T12430] ? __pfx_device_add_attrs+0x10/0x10 [ 302.830070][T12430] ? device_add_class_symlinks+0x21f/0x240 [ 302.830096][T12430] device_add+0x496/0xb50 [ 302.830116][T12430] ? device_initialize+0x24b/0x440 [ 302.830140][T12430] netdev_register_kobject+0x178/0x310 [ 302.830178][T12430] register_netdevice+0x126c/0x1ae0 [ 302.830228][T12430] ? __pfx_register_netdevice+0x10/0x10 [ 302.830257][T12430] ? __sock_sendmsg+0x219/0x270 [ 302.830277][T12430] ? ____sys_sendmsg+0x505/0x830 [ 302.830303][T12430] ? ___sys_sendmsg+0x21f/0x2a0 [ 302.830328][T12430] ? __x64_sys_sendmsg+0x19b/0x260 [ 302.830356][T12430] ? do_syscall_64+0xfa/0x3b0 [ 302.830378][T12430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.830414][T12430] macsec_newlink+0x6be/0x11b0 [ 302.830459][T12430] ? __pfx_macsec_handle_frame+0x10/0x10 [ 302.830505][T12430] ? __pfx_macsec_newlink+0x10/0x10 [ 302.830535][T12430] ? alloc_netdev_mqs+0xc59/0x1170 [ 302.830553][T12430] ? rcu_is_watching+0x15/0xb0 [ 302.830585][T12430] ? alloc_netdev_mqs+0xc59/0x1170 [ 302.830604][T12430] ? trace_kmalloc+0x1f/0xd0 [ 302.830643][T12430] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 302.830662][T12430] ? alloc_netdev_mqs+0xc59/0x1170 [ 302.830705][T12430] ? validate_linkmsg+0x765/0x950 [ 302.830737][T12430] ? __pfx_macsec_newlink+0x10/0x10 [ 302.830770][T12430] rtnl_newlink_create+0x30d/0xb00 [ 302.830805][T12430] ? __mutex_lock+0x51b/0xe80 [ 302.830836][T12430] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 302.830861][T12430] ? rtnl_newlink+0x8db/0x1c70 [ 302.830889][T12430] ? __pfx___mutex_lock+0x10/0x10 [ 302.830925][T12430] ? ns_capable+0x8a/0xf0 [ 302.830960][T12430] rtnl_newlink+0x16d6/0x1c70 [ 302.830987][T12430] ? netlink_sendmsg+0x805/0xb30 [ 302.831027][T12430] ? __pfx_rtnl_newlink+0x10/0x10 [ 302.831080][T12430] ? kasan_quarantine_put+0xdd/0x220 [ 302.831111][T12430] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.831140][T12430] ? nlmon_xmit+0xb0/0x100 [ 302.831157][T12430] ? kmem_cache_free+0x18f/0x400 [ 302.831186][T12430] ? __local_bh_enable_ip+0x12d/0x1c0 [ 302.831217][T12430] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.831240][T12430] ? __local_bh_enable_ip+0x12d/0x1c0 [ 302.831271][T12430] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 302.831306][T12430] ? __dev_queue_xmit+0x27e/0x3a70 [ 302.831353][T12430] ? __lock_acquire+0xab9/0xd20 [ 302.831412][T12430] ? __pfx_rtnl_newlink+0x10/0x10 [ 302.831454][T12430] rtnetlink_rcv_msg+0x7cc/0xb70 [ 302.831482][T12430] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 302.831504][T12430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.831523][T12430] ? ref_tracker_free+0x63a/0x7d0 [ 302.831547][T12430] ? __copy_skb_header+0xa7/0x550 [ 302.831577][T12430] ? __pfx_ref_tracker_free+0x10/0x10 [ 302.831602][T12430] ? __skb_clone+0x63/0x7a0 [ 302.831638][T12430] netlink_rcv_skb+0x208/0x470 [ 302.831662][T12430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.831687][T12430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.831725][T12430] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.831748][T12430] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.831777][T12430] netlink_unicast+0x75b/0x8d0 [ 302.831811][T12430] netlink_sendmsg+0x805/0xb30 [ 302.831865][T12430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.831895][T12430] ? aa_sock_msg_perm+0x94/0x160 [ 302.831924][T12430] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.831951][T12430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.831978][T12430] __sock_sendmsg+0x219/0x270 [ 302.832006][T12430] ____sys_sendmsg+0x505/0x830 [ 302.832043][T12430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.832086][T12430] ? import_iovec+0x74/0xa0 [ 302.832111][T12430] ___sys_sendmsg+0x21f/0x2a0 [ 302.832145][T12430] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.832221][T12430] ? __fget_files+0x2a/0x420 [ 302.832244][T12430] ? __fget_files+0x3a0/0x420 [ 302.832281][T12430] __x64_sys_sendmsg+0x19b/0x260 [ 302.832315][T12430] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.832359][T12430] ? __pfx_ksys_write+0x10/0x10 [ 302.832389][T12430] ? rcu_is_watching+0x15/0xb0 [ 302.832429][T12430] ? do_syscall_64+0xbe/0x3b0 [ 302.832466][T12430] do_syscall_64+0xfa/0x3b0 [ 302.832489][T12430] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.832511][T12430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.832533][T12430] ? clear_bhb_loop+0x60/0xb0 [ 302.832559][T12430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.832579][T12430] RIP: 0033:0x7f1fb798e929 [ 302.832599][T12430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.832618][T12430] RSP: 002b:00007f1fb874d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.832642][T12430] RAX: ffffffffffffffda RBX: 00007f1fb7bb5fa0 RCX: 00007f1fb798e929 [ 302.832657][T12430] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 302.832671][T12430] RBP: 00007f1fb874d090 R08: 0000000000000000 R09: 0000000000000000 [ 302.832684][T12430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 302.832696][T12430] R13: 0000000000000000 R14: 00007f1fb7bb5fa0 R15: 00007ffd4c338818 [ 302.832732][T12430] [ 302.837475][T12427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2050'. [ 303.862136][T12456] lo: entered allmulticast mode [ 303.900621][T12456] tunl0: entered allmulticast mode [ 303.925122][T12456] gre0: entered allmulticast mode [ 303.932943][T12460] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 304.006646][T12456] gretap0: entered allmulticast mode [ 304.017187][T12456] erspan0: entered allmulticast mode [ 304.031177][T12456] ip_vti0: entered allmulticast mode [ 304.041166][T12456] ip6_vti0: entered allmulticast mode [ 304.049640][T12456] sit0: entered allmulticast mode [ 304.058968][T12456] ip6tnl0: entered allmulticast mode [ 304.066763][T12456] ip6gre0: entered allmulticast mode [ 304.076329][T12456] ip6gretap0: entered allmulticast mode [ 304.084767][T12456] vcan0: entered allmulticast mode [ 304.091920][T12456] bond0: entered allmulticast mode [ 304.097136][T12456] bond_slave_0: entered allmulticast mode [ 304.102962][T12456] bond_slave_1: entered allmulticast mode [ 304.113542][T12456] team0: entered allmulticast mode [ 304.119027][T12456] team_slave_0: entered allmulticast mode [ 304.124791][T12456] team_slave_1: entered allmulticast mode [ 304.132304][T12456] nlmon0: entered allmulticast mode [ 304.139546][T12456] caif0: entered allmulticast mode [ 304.145200][T12456] batadv0: entered allmulticast mode [ 304.155580][T12456] vxcan0: entered allmulticast mode [ 304.162069][T12456] vxcan1: entered allmulticast mode [ 304.174333][T12456] veth0: entered allmulticast mode [ 304.183387][T12456] veth1: entered allmulticast mode [ 304.194358][T12456] wg0: entered allmulticast mode [ 304.203188][T12456] wg1: entered allmulticast mode [ 304.214883][T12456] wg2: entered allmulticast mode [ 304.222684][T12456] veth0_to_bridge: entered allmulticast mode [ 304.236156][T12456] bridge_slave_0: entered allmulticast mode [ 304.245368][T12456] veth1_to_bridge: entered allmulticast mode [ 304.255808][T12456] bridge_slave_1: entered allmulticast mode [ 304.263659][T12456] veth0_to_bond: entered allmulticast mode [ 304.274889][T12456] veth1_to_bond: entered allmulticast mode [ 304.285408][T12456] veth0_to_team: entered allmulticast mode [ 304.297235][T12456] veth1_to_team: entered allmulticast mode [ 304.313175][T12456] veth0_to_batadv: entered allmulticast mode [ 304.341597][T12456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.350466][T12456] batadv_slave_0: entered allmulticast mode [ 304.360004][T12456] veth1_to_batadv: entered allmulticast mode [ 304.370436][T12456] batadv_slave_1: left promiscuous mode [ 304.376024][T12456] batadv_slave_1: entered allmulticast mode [ 304.382648][T12456] xfrm0: entered allmulticast mode [ 304.394133][T12456] veth0_to_hsr: entered allmulticast mode [ 304.403452][T12456] hsr_slave_0: entered allmulticast mode [ 304.412690][T12456] veth1_to_hsr: entered allmulticast mode [ 304.422631][T12456] hsr_slave_1: entered allmulticast mode [ 304.435216][T12456] hsr0: entered allmulticast mode [ 304.445515][T12456] veth1_virt_wifi: entered allmulticast mode [ 304.461598][T12456] veth0_virt_wifi: entered allmulticast mode [ 304.470767][T12456] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 304.489708][T12456] veth1_vlan: entered allmulticast mode [ 304.506672][T12456] veth0_vlan: entered allmulticast mode [ 304.529996][T12456] vlan0: entered allmulticast mode [ 304.535287][T12456] vlan1: entered allmulticast mode [ 304.553884][T12456] macvlan0: entered allmulticast mode [ 304.564676][T12456] macvlan1: entered allmulticast mode [ 304.573142][T12456] ipvlan0: entered allmulticast mode [ 304.579264][T12456] ipvlan1: entered allmulticast mode [ 304.585690][T12456] veth1_macvtap: entered allmulticast mode [ 304.596004][T12456] veth0_macvtap: entered allmulticast mode [ 304.614882][T12456] macvtap0: entered allmulticast mode [ 304.626758][T12456] geneve0: entered allmulticast mode [ 304.636031][T12456] geneve1: entered allmulticast mode [ 304.646728][T12456] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 304.656776][T12456] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 304.666342][T12456] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 304.680440][T12456] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 304.701532][T12456] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 304.715596][T12456] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 304.724371][T12456] sit1: entered allmulticast mode [ 304.733348][T12456] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 304.742027][T12456] macvlan2: entered allmulticast mode [ 304.752912][T12456] vxlan0: entered allmulticast mode [ 304.758766][T12456] macvlan0.0: entered allmulticast mode [ 304.764490][T12456] : entered allmulticast mode [ 304.769839][T12456] ip6tnl1: entered allmulticast mode [ 304.775215][T12456] veth0_to_hsr.3: entered allmulticast mode [ 304.781370][T12456] : entered allmulticast mode [ 304.787001][T12456] bridge0: entered allmulticast mode [ 304.796175][T12456] syztnl2: entered allmulticast mode [ 304.802602][T12456] vlan2: left promiscuous mode [ 304.807394][T12456] bridge0: left promiscuous mode [ 304.812588][T12456] vlan2: entered allmulticast mode [ 304.818642][T12456] sit2: entered allmulticast mode [ 304.847027][T12456] bond1: entered allmulticast mode [ 304.853949][T12456] syzkaller0: entered allmulticast mode [ 304.859995][T12456] bridge1: left promiscuous mode [ 304.864947][T12456] bridge1: entered allmulticast mode [ 304.870515][T12456] macsec1: entered allmulticast mode [ 304.875987][T12456] bond2: entered allmulticast mode [ 304.881546][T12456] veth2: entered allmulticast mode [ 304.886787][T12456] veth3: left promiscuous mode [ 304.891865][T12456] veth3: entered allmulticast mode [ 304.897147][T12456] veth4: entered allmulticast mode [ 304.902570][T12456] veth5: left promiscuous mode [ 304.907351][T12456] veth5: entered allmulticast mode [ 304.912886][T12456] mac80211_hwsim hwsim21 wlan2: entered allmulticast mode [ 304.924362][T12456] vxlan1: entered allmulticast mode [ 304.948018][T12458] bridge4: entered promiscuous mode [ 304.985033][T12472] FAULT_INJECTION: forcing a failure. [ 304.985033][T12472] name failslab, interval 1, probability 0, space 0, times 0 [ 305.009269][T12472] CPU: 1 UID: 0 PID: 12472 Comm: syz.4.2064 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 305.009303][T12472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.009330][T12472] Call Trace: [ 305.009339][T12472] [ 305.009349][T12472] dump_stack_lvl+0x189/0x250 [ 305.009388][T12472] ? __pfx____ratelimit+0x10/0x10 [ 305.009413][T12472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.009447][T12472] ? __pfx__printk+0x10/0x10 [ 305.009477][T12472] ? __pfx___might_resched+0x10/0x10 [ 305.009509][T12472] ? fs_reclaim_acquire+0x7d/0x100 [ 305.009541][T12472] should_fail_ex+0x414/0x560 [ 305.009573][T12472] should_failslab+0xa8/0x100 [ 305.009597][T12472] kmem_cache_alloc_noprof+0x73/0x3c0 [ 305.009631][T12472] ? __kernfs_new_node+0xd7/0x7e0 [ 305.009664][T12472] __kernfs_new_node+0xd7/0x7e0 [ 305.009689][T12472] ? __lock_acquire+0xab9/0xd20 [ 305.009728][T12472] ? __pfx___kernfs_new_node+0x10/0x10 [ 305.009756][T12472] ? kernfs_root+0x1c/0x230 [ 305.009788][T12472] ? kernfs_root+0x1c/0x230 [ 305.009811][T12472] ? kernfs_root+0x1c/0x230 [ 305.009833][T12472] ? kernfs_root+0x1c/0x230 [ 305.009863][T12472] kernfs_new_node+0x102/0x210 [ 305.009896][T12472] __kernfs_create_file+0x4b/0x2e0 [ 305.009933][T12472] sysfs_add_file_mode_ns+0x238/0x300 [ 305.009979][T12472] internal_create_group+0x66d/0x1110 [ 305.010024][T12472] ? __pfx_internal_create_group+0x10/0x10 [ 305.010057][T12472] ? kernfs_add_one+0xf0/0x520 [ 305.010092][T12472] sysfs_create_groups+0x59/0x120 [ 305.010122][T12472] device_add_attrs+0xe0/0x5a0 [ 305.010152][T12472] ? __pfx_device_add_attrs+0x10/0x10 [ 305.010188][T12472] ? device_add_class_symlinks+0x21f/0x240 [ 305.010215][T12472] device_add+0x496/0xb50 [ 305.010236][T12472] ? device_initialize+0x24b/0x440 [ 305.010261][T12472] netdev_register_kobject+0x178/0x310 [ 305.010300][T12472] register_netdevice+0x126c/0x1ae0 [ 305.010334][T12472] ? __pfx_css_rstat_updated+0x10/0x10 [ 305.010383][T12472] ? __pfx_register_netdevice+0x10/0x10 [ 305.010412][T12472] ? __sock_sendmsg+0x219/0x270 [ 305.010432][T12472] ? ____sys_sendmsg+0x505/0x830 [ 305.010459][T12472] ? ___sys_sendmsg+0x21f/0x2a0 [ 305.010486][T12472] ? __x64_sys_sendmsg+0x19b/0x260 [ 305.010514][T12472] ? do_syscall_64+0xfa/0x3b0 [ 305.010538][T12472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.010576][T12472] macsec_newlink+0x6be/0x11b0 [ 305.010615][T12472] ? __pfx_macsec_handle_frame+0x10/0x10 [ 305.010662][T12472] ? __pfx_macsec_newlink+0x10/0x10 [ 305.010694][T12472] ? alloc_netdev_mqs+0xc59/0x1170 [ 305.010714][T12472] ? rcu_is_watching+0x15/0xb0 [ 305.010745][T12472] ? alloc_netdev_mqs+0xc59/0x1170 [ 305.010765][T12472] ? trace_kmalloc+0x1f/0xd0 [ 305.010794][T12472] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 305.010815][T12472] ? alloc_netdev_mqs+0xc59/0x1170 [ 305.010842][T12472] ? validate_linkmsg+0x765/0x950 [ 305.010876][T12472] ? __pfx_macsec_newlink+0x10/0x10 [ 305.010909][T12472] rtnl_newlink_create+0x30d/0xb00 [ 305.010944][T12472] ? __mutex_lock+0x51b/0xe80 [ 305.010975][T12472] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 305.011002][T12472] ? rtnl_newlink+0x8db/0x1c70 [ 305.011030][T12472] ? __pfx___mutex_lock+0x10/0x10 [ 305.011074][T12472] ? ns_capable+0x8a/0xf0 [ 305.011110][T12472] rtnl_newlink+0x16d6/0x1c70 [ 305.011156][T12472] ? __pfx_rtnl_newlink+0x10/0x10 [ 305.011180][T12472] ? is_bpf_text_address+0x26/0x2b0 [ 305.011221][T12472] ? __lock_acquire+0xab9/0xd20 [ 305.011266][T12472] ? __lock_acquire+0xab9/0xd20 [ 305.011320][T12472] ? is_bpf_text_address+0x26/0x2b0 [ 305.011358][T12472] ? is_bpf_text_address+0x292/0x2b0 [ 305.011388][T12472] ? is_bpf_text_address+0x26/0x2b0 [ 305.011424][T12472] ? kernel_text_address+0xa5/0xe0 [ 305.011467][T12472] ? __lock_acquire+0xab9/0xd20 [ 305.011526][T12472] ? __pfx_rtnl_newlink+0x10/0x10 [ 305.011551][T12472] rtnetlink_rcv_msg+0x7cc/0xb70 [ 305.011581][T12472] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 305.011604][T12472] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.011650][T12472] netlink_rcv_skb+0x208/0x470 [ 305.011677][T12472] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.011705][T12472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.011747][T12472] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.011771][T12472] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.011803][T12472] netlink_unicast+0x75b/0x8d0 [ 305.011840][T12472] netlink_sendmsg+0x805/0xb30 [ 305.011877][T12472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.011908][T12472] ? aa_sock_msg_perm+0x94/0x160 [ 305.011936][T12472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.011962][T12472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.011989][T12472] __sock_sendmsg+0x219/0x270 [ 305.012014][T12472] ____sys_sendmsg+0x505/0x830 [ 305.012058][T12472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.012101][T12472] ? import_iovec+0x74/0xa0 [ 305.012125][T12472] ___sys_sendmsg+0x21f/0x2a0 [ 305.012159][T12472] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.012233][T12472] ? __fget_files+0x2a/0x420 [ 305.012255][T12472] ? __fget_files+0x3a0/0x420 [ 305.012291][T12472] __x64_sys_sendmsg+0x19b/0x260 [ 305.012326][T12472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.012369][T12472] ? __pfx_ksys_write+0x10/0x10 [ 305.012399][T12472] ? rcu_is_watching+0x15/0xb0 [ 305.012438][T12472] ? do_syscall_64+0xbe/0x3b0 [ 305.012469][T12472] do_syscall_64+0xfa/0x3b0 [ 305.012492][T12472] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.012515][T12472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.012536][T12472] ? clear_bhb_loop+0x60/0xb0 [ 305.012564][T12472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.012584][T12472] RIP: 0033:0x7f616c58e929 [ 305.012605][T12472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.012623][T12472] RSP: 002b:00007f616d3e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.012647][T12472] RAX: ffffffffffffffda RBX: 00007f616c7b5fa0 RCX: 00007f616c58e929 [ 305.012663][T12472] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 305.012677][T12472] RBP: 00007f616d3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 305.012691][T12472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.012703][T12472] R13: 0000000000000000 R14: 00007f616c7b5fa0 R15: 00007fff874e5158 [ 305.012739][T12472] [ 305.016725][ T7736] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.470905][T12484] netlink: 'syz.0.2066': attribute type 39 has an invalid length. [ 305.483610][T12474] lo: left allmulticast mode [ 305.738316][ T7736] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.767743][ T7736] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.788030][ T7736] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.919874][T12495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2072'. [ 305.956855][T12497] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 306.142277][T12509] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2078'. [ 306.187378][T12510] netlink: 'syz.2.2076': attribute type 39 has an invalid length. [ 306.420709][T12519] netlink: 'syz.3.2082': attribute type 27 has an invalid length. [ 306.909662][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'. [ 307.195228][T12544] dummy0: left allmulticast mode [ 307.203376][T12544] bridge0: port 1(dummy0) entered disabled state [ 308.447213][T12597] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 308.797741][T12604] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2112'. [ 308.872295][T12607] lo speed is unknown, defaulting to 1000 [ 308.885928][T12609] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2115'. [ 308.914876][T12604] lo: entered allmulticast mode [ 308.935468][T12604] tunl0: entered allmulticast mode [ 308.951398][T12604] gre0: entered allmulticast mode [ 308.974780][T12604] gretap0: entered allmulticast mode [ 308.997256][T12604] erspan0: entered allmulticast mode [ 309.007677][T12604] ip_vti0: entered allmulticast mode [ 309.020282][T12604] ip6_vti0: entered allmulticast mode [ 309.033005][T12604] sit0: entered allmulticast mode [ 309.042309][T12604] ip6tnl0: entered allmulticast mode [ 309.052909][T12604] ip6gre0: entered allmulticast mode [ 309.061290][T12604] ip6gretap0: entered allmulticast mode [ 309.070923][T12620] netlink: 'syz.1.2118': attribute type 3 has an invalid length. [ 309.081609][T12604] bridge0: entered allmulticast mode [ 309.087505][T12604] team0: entered allmulticast mode [ 309.093135][T12604] team_slave_0: entered allmulticast mode [ 309.099476][T12604] team_slave_1: entered allmulticast mode [ 309.106316][T12604] !: entered allmulticast mode [ 309.116210][T12604] nlmon0: entered allmulticast mode [ 309.123449][T12604] caif0: entered allmulticast mode [ 309.129617][T12604] batadv0: entered allmulticast mode [ 309.138498][T12604] veth0: entered allmulticast mode [ 309.147779][T12604] veth1: entered allmulticast mode [ 309.157135][T12604] wg0: entered allmulticast mode [ 309.165376][T12604] wg1: entered allmulticast mode [ 309.173153][T12604] wg2: entered allmulticast mode [ 309.184800][T12604] veth0_to_bridge: entered allmulticast mode [ 309.197054][T12604] veth1_to_bridge: entered allmulticast mode [ 309.210290][T12604] veth0_to_bond: entered allmulticast mode [ 309.218065][T12604] @: entered allmulticast mode [ 309.224413][T12604] veth1_to_bond: entered allmulticast mode [ 309.233309][T12604] bond_slave_1: entered allmulticast mode [ 309.240167][T12604] veth0_to_team: entered allmulticast mode [ 309.250228][T12604] veth1_to_team: entered allmulticast mode [ 309.260266][T12604] veth0_to_batadv: entered allmulticast mode [ 309.269372][T12604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.277322][T12604] batadv_slave_0: entered allmulticast mode [ 309.287219][T12604] veth1_to_batadv: entered allmulticast mode [ 309.296462][T12604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.305484][T12604] batadv_slave_1: entered allmulticast mode [ 309.314623][T12604] xfrm0: entered allmulticast mode [ 309.323887][T12604] veth0_to_hsr: entered allmulticast mode [ 309.333671][T12604] hsr_slave_0: entered allmulticast mode [ 309.343098][T12604] veth1_to_hsr: entered allmulticast mode [ 309.352126][T12604] hsr_slave_1: entered allmulticast mode [ 309.361896][T12604] hsr0: entered allmulticast mode [ 309.373173][T12604] veth1_virt_wifi: entered allmulticast mode [ 309.386576][T12604] veth0_virt_wifi: entered allmulticast mode [ 309.395520][T12604] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 309.404721][T12604] veth1_vlan: entered allmulticast mode [ 309.413395][T12604] veth0_vlan: entered allmulticast mode [ 309.427451][T12604] vlan1: entered allmulticast mode [ 309.433418][T12604] macvlan0: entered allmulticast mode [ 309.443364][T12604] macvlan1: entered allmulticast mode [ 309.451577][T12604] ipvlan0: entered allmulticast mode [ 309.457399][T12604] ipvlan1: entered allmulticast mode [ 309.464582][T12604] veth1_macvtap: entered allmulticast mode [ 309.473819][T12604] veth0_macvtap: entered allmulticast mode [ 309.484810][T12604] macvtap0: entered allmulticast mode [ 309.493074][T12604] geneve0: entered allmulticast mode [ 309.503225][T12604] geneve1: entered allmulticast mode [ 309.512827][T12604] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 309.525615][T12604] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 309.536651][T12604] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 309.546845][T12604] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 309.566398][T12604] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 309.582073][T12604] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 309.594952][T12604] bond1: entered allmulticast mode [ 309.602072][T12604] erspan1: entered allmulticast mode [ 309.608122][T12604] ipvlan2: entered allmulticast mode [ 309.614640][T12604] ip6gre1: entered allmulticast mode [ 309.626789][T12604] macsec0: entered allmulticast mode [ 309.635252][T12604] geneve2: entered allmulticast mode [ 309.645254][T12604] geneve3: left promiscuous mode [ 309.653487][T12604] geneve3: entered allmulticast mode [ 309.664320][T12604] syztnl0: entered allmulticast mode [ 309.673475][T12604] bridge2: left promiscuous mode [ 309.683935][T12604] bridge3: left promiscuous mode [ 309.691761][T12604] gtp0: entered allmulticast mode [ 309.698188][T12604] bridge4: left promiscuous mode [ 309.705040][T12604] bridge4: entered allmulticast mode [ 309.728478][T12617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2117'. [ 309.737476][T12617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2117'. [ 309.749661][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2118'. [ 309.764457][ T7736] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.791471][ T7736] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.862010][ T7736] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.878955][ T7736] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.044557][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2120'. [ 310.161420][T12626] lo speed is unknown, defaulting to 1000 [ 311.226575][T12690] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2136'. [ 311.250670][T12690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2136'. [ 311.276459][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2136'. [ 311.544375][T12702] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2137'. [ 311.652339][T12710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2140'. [ 312.025275][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2143'. [ 312.216270][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2145'. [ 312.259347][T12727] vlan0: entered promiscuous mode [ 312.264604][T12727] erspan0: entered promiscuous mode [ 312.264687][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2146'. [ 312.380300][T12731] IPv6: Can't replace route, no match found [ 312.884555][T12760] lo speed is unknown, defaulting to 1000 [ 313.299711][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2158'. [ 313.623284][T12775] lo speed is unknown, defaulting to 1000 [ 313.632941][T12779] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2160'. [ 314.029744][T12783] lo speed is unknown, defaulting to 1000 [ 314.958934][T12821] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 315.309067][T12821] lo speed is unknown, defaulting to 1000 [ 315.518002][T12846] netlink: 'syz.4.2179': attribute type 2 has an invalid length. [ 315.863615][T12860] gretap0: entered promiscuous mode [ 315.909260][T12860] macvlan3: entered promiscuous mode [ 315.935954][T12860] macvlan3: entered allmulticast mode [ 315.963100][T12860] gretap0: entered allmulticast mode [ 316.000863][T12876] netlink: 'syz.0.2186': attribute type 10 has an invalid length. [ 316.029241][T12855] tipc: Started in network mode [ 316.039129][T12855] tipc: Node identity ac14140f, cluster identity 229 [ 316.046709][T12855] tipc: New replicast peer: 255.255.255.255 [ 316.060514][T12855] tipc: Enabled bearer , priority 10 [ 316.075918][T12876] bridge0: left allmulticast mode [ 316.085683][T12869] tipc: Disabling bearer [ 316.769847][T12909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.216109][T12932] __nla_validate_parse: 10 callbacks suppressed [ 317.216127][T12932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2202'. [ 317.526621][T12941] lo speed is unknown, defaulting to 1000 [ 317.958838][T12949] lo speed is unknown, defaulting to 1000 [ 317.994042][T12965] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2209'. [ 318.043830][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2209'. [ 318.056085][T12965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2209'. [ 318.132504][T12965] batman_adv: batadv0: Removing interface: dummy0 [ 318.156311][T12965] bridge_slave_0: left allmulticast mode [ 318.173184][T12965] bridge_slave_0: left promiscuous mode [ 318.190260][T12965] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.216447][T12965] bridge_slave_1: left allmulticast mode [ 318.224266][T12965] bridge_slave_1: left promiscuous mode [ 318.231794][T12965] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.252500][T12965] bond0: (slave bond_slave_0): Releasing backup interface [ 318.267788][T12965] bond0: (slave bond_slave_1): Releasing backup interface [ 318.292946][T12965] team0: Port device C removed [ 318.307763][T12965] team0: Port device team_slave_1 removed [ 318.314978][T12965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.356976][T12976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2213'. [ 318.376671][T12958] lo speed is unknown, defaulting to 1000 [ 318.564685][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 318.634216][T12981] lo speed is unknown, defaulting to 1000 [ 318.891924][T12988] lo: left allmulticast mode [ 319.826922][T13014] lo: entered allmulticast mode [ 319.854321][T13012] lo: left allmulticast mode [ 319.983400][T13019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.167213][T13017] lo speed is unknown, defaulting to 1000 [ 320.344799][T13028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2231'. [ 320.476998][T13034] netlink: 'syz.4.2232': attribute type 39 has an invalid length. [ 320.819175][T13045] pim6reg1: entered promiscuous mode [ 320.825488][T13045] pim6reg1: entered allmulticast mode [ 321.333697][T13078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2244'. [ 321.533348][T13089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2246'. [ 321.550280][T13089] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2246'. [ 322.066220][T13111] netlink: 'syz.2.2252': attribute type 1 has an invalid length. [ 322.176308][T13115] lo speed is unknown, defaulting to 1000 [ 322.440671][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 322.539850][T13128] netlink: 'syz.1.2255': attribute type 39 has an invalid length. [ 322.587275][T13131] netlink: 'syz.4.2256': attribute type 10 has an invalid length. [ 322.625858][T13131] veth0_vlan: left promiscuous mode [ 322.633817][T13131] veth0_vlan: entered promiscuous mode [ 322.696070][T13131] team0: Device veth0_vlan failed to register rx_handler [ 322.955034][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 322.990064][T13146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2259'. [ 323.040298][T13146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.059177][T13146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.376385][T13162] lo speed is unknown, defaulting to 1000 [ 323.428891][T13163] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:0 [ 323.444726][T13165] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2267'. [ 324.825512][T13209] netlink: 'syz.4.2276': attribute type 39 has an invalid length. [ 325.047229][T13220] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2282'. [ 325.225922][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2282'. [ 325.305238][T13226] bond0: entered promiscuous mode [ 325.329947][T13226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.484328][T13224] lo speed is unknown, defaulting to 1000 [ 326.089195][T13257] lo speed is unknown, defaulting to 1000 [ 326.138125][T13261] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2293'. [ 326.152299][T13252] lo speed is unknown, defaulting to 1000 [ 326.541925][T13261] team0: Port device geneve0 removed [ 326.557720][T13284] netlink: 'syz.4.2298': attribute type 39 has an invalid length. [ 327.616886][T13301] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.680861][T13301] bond0: (slave bond3): Enslaving as an active interface with an up link [ 327.959272][T13313] erspan0: entered promiscuous mode [ 327.999542][T13313] batman_adv: batadv0: Adding interface: macvlan3 [ 328.006034][T13313] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.080665][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2306'. [ 328.090281][T13313] batman_adv: batadv0: Interface activated: macvlan3 [ 328.101683][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2307'. [ 328.168364][T13306] lo speed is unknown, defaulting to 1000 [ 328.193196][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 328.627802][T13341] tipc: Invalid UDP bearer configuration [ 328.627865][T13341] tipc: Enabling of bearer rejected, failed to enable media [ 328.648165][T13325] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 329.064151][T13353] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2316'. [ 329.073457][T13353] netlink: zone id is out of range [ 329.079057][T13353] netlink: zone id is out of range [ 329.084357][T13353] netlink: zone id is out of range [ 329.092171][T13353] netlink: zone id is out of range [ 329.097466][T13353] netlink: zone id is out of range [ 329.102853][T13353] netlink: zone id is out of range [ 329.108130][T13353] netlink: zone id is out of range [ 329.174755][T13353] netlink: zone id is out of range [ 329.211353][T13353] netlink: zone id is out of range [ 329.216527][T13353] netlink: zone id is out of range [ 329.425904][T13368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.441019][T13370] netlink: 'syz.0.2315': attribute type 39 has an invalid length. [ 329.916653][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2326'. [ 330.506088][T13406] C: renamed from team_slave_0 [ 330.551620][T13406] netlink: 'syz.1.2331': attribute type 3 has an invalid length. [ 330.581108][T13406] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2331'. [ 330.629132][T13406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2331'. [ 330.735744][T13419] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2335'. [ 330.825852][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2338'. [ 330.935615][T13423] bridge0: entered promiscuous mode [ 331.054146][T13428] lo speed is unknown, defaulting to 1000 [ 331.201287][T13431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2340'. [ 331.412870][T13448] ================================================================== [ 331.420988][T13448] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 331.428652][T13448] Read of size 1 at addr ffff888047523430 by task syz.2.2345/13448 [ 331.436565][T13448] [ 331.438926][T13448] CPU: 0 UID: 0 PID: 13448 Comm: syz.2.2345 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 331.438958][T13448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.438972][T13448] Call Trace: [ 331.438982][T13448] [ 331.438991][T13448] dump_stack_lvl+0x189/0x250 [ 331.439027][T13448] ? __virt_addr_valid+0x1c8/0x5c0 [ 331.439048][T13448] ? rcu_is_watching+0x15/0xb0 [ 331.439080][T13448] ? __kasan_check_byte+0x12/0x40 [ 331.439101][T13448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.439134][T13448] ? rcu_is_watching+0x15/0xb0 [ 331.439166][T13448] ? lock_release+0x4b/0x3e0 [ 331.439213][T13448] ? __virt_addr_valid+0x1c8/0x5c0 [ 331.439235][T13448] ? __virt_addr_valid+0x4a5/0x5c0 [ 331.439257][T13448] print_report+0xd2/0x2b0 [ 331.439286][T13448] ? rose_get_neigh+0x391/0x990 [ 331.439311][T13448] kasan_report+0x118/0x150 [ 331.439334][T13448] ? rose_get_neigh+0x391/0x990 [ 331.439358][T13448] rose_get_neigh+0x391/0x990 [ 331.439383][T13448] rose_connect+0x416/0x10a0 [ 331.439411][T13448] ? __pfx_current_check_access_socket+0x10/0x10 [ 331.439442][T13448] ? aa_sk_perm+0x81e/0x950 [ 331.439465][T13448] ? __might_fault+0xb0/0x130 [ 331.439496][T13448] ? __pfx_rose_connect+0x10/0x10 [ 331.439524][T13448] ? aa_af_perm+0x210/0x2b0 [ 331.439546][T13448] ? tomoyo_socket_connect_permission+0x164/0x290 [ 331.439582][T13448] ? bpf_lsm_socket_connect+0x9/0x20 [ 331.439610][T13448] __sys_connect+0x313/0x440 [ 331.439639][T13448] ? __pfx___sys_connect+0x10/0x10 [ 331.439673][T13448] ? rcu_is_watching+0x15/0xb0 [ 331.439708][T13448] __x64_sys_connect+0x7a/0x90 [ 331.439733][T13448] do_syscall_64+0xfa/0x3b0 [ 331.439757][T13448] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.439780][T13448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.439800][T13448] ? clear_bhb_loop+0x60/0xb0 [ 331.439824][T13448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.439845][T13448] RIP: 0033:0x7f02da38e929 [ 331.439864][T13448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.439884][T13448] RSP: 002b:00007f02db1d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 331.439906][T13448] RAX: ffffffffffffffda RBX: 00007f02da5b5fa0 RCX: 00007f02da38e929 [ 331.439922][T13448] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 331.439935][T13448] RBP: 00007f02da410b39 R08: 0000000000000000 R09: 0000000000000000 [ 331.439948][T13448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.439960][T13448] R13: 0000000000000000 R14: 00007f02da5b5fa0 R15: 00007ffd4ad3cfd8 [ 331.439985][T13448] [ 331.439993][T13448] [ 331.700040][T13448] Allocated by task 11398: [ 331.704459][T13448] kasan_save_track+0x3e/0x80 [ 331.709154][T13448] __kasan_kmalloc+0x93/0xb0 [ 331.713750][T13448] __kmalloc_cache_noprof+0x230/0x3d0 [ 331.719126][T13448] rose_add_node+0x23a/0xde0 [ 331.723729][T13448] rose_rt_ioctl+0xa48/0xfb0 [ 331.728319][T13448] rose_ioctl+0x3ce/0x8b0 [ 331.732655][T13448] sock_do_ioctl+0xd9/0x300 [ 331.737159][T13448] sock_ioctl+0x576/0x790 [ 331.741484][T13448] __se_sys_ioctl+0xfc/0x170 [ 331.746083][T13448] do_syscall_64+0xfa/0x3b0 [ 331.750591][T13448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.756487][T13448] [ 331.758812][T13448] Freed by task 13305: [ 331.762875][T13448] kasan_save_track+0x3e/0x80 [ 331.767561][T13448] kasan_save_free_info+0x46/0x50 [ 331.772593][T13448] __kasan_slab_free+0x62/0x70 [ 331.777373][T13448] kfree+0x18e/0x440 [ 331.781283][T13448] rose_rt_device_down+0x66d/0x6c0 [ 331.786396][T13448] rose_device_event+0x603/0x6a0 [ 331.791347][T13448] notifier_call_chain+0x1b3/0x3e0 [ 331.796472][T13448] __dev_notify_flags+0x18d/0x2e0 [ 331.801504][T13448] netif_change_flags+0xe8/0x1a0 [ 331.806454][T13448] dev_change_flags+0x130/0x260 [ 331.811311][T13448] dev_ioctl+0x7b4/0x1150 [ 331.815645][T13448] sock_do_ioctl+0x22c/0x300 [ 331.820236][T13448] sock_ioctl+0x576/0x790 [ 331.824570][T13448] __se_sys_ioctl+0xfc/0x170 [ 331.829163][T13448] do_syscall_64+0xfa/0x3b0 [ 331.833673][T13448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.839564][T13448] [ 331.841899][T13448] The buggy address belongs to the object at ffff888047523400 [ 331.841899][T13448] which belongs to the cache kmalloc-512 of size 512 [ 331.855949][T13448] The buggy address is located 48 bytes inside of [ 331.855949][T13448] freed 512-byte region [ffff888047523400, ffff888047523600) [ 331.869652][T13448] [ 331.871995][T13448] The buggy address belongs to the physical page: [ 331.878405][T13448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888047520000 pfn:0x47520 [ 331.888476][T13448] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 331.897067][T13448] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 331.905591][T13448] page_type: f5(slab) [ 331.909578][T13448] raw: 00fff00000000240 ffff88801a441c80 ffffea00016c3d10 ffffea000141e210 [ 331.918164][T13448] raw: ffff888047520000 0000000000100005 00000000f5000000 0000000000000000 [ 331.926849][T13448] head: 00fff00000000240 ffff88801a441c80 ffffea00016c3d10 ffffea000141e210 [ 331.935529][T13448] head: ffff888047520000 0000000000100005 00000000f5000000 0000000000000000 [ 331.944202][T13448] head: 00fff00000000002 ffffea00011d4801 00000000ffffffff 00000000ffffffff [ 331.952888][T13448] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 331.961555][T13448] page dumped because: kasan: bad access detected [ 331.967980][T13448] page_owner tracks the page as allocated [ 331.973693][T13448] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10949, tgid 10947 (syz.4.1571), ts 259979178905, free_ts 256850370519 [ 331.995233][T13448] post_alloc_hook+0x240/0x2a0 [ 332.000009][T13448] get_page_from_freelist+0x21e4/0x22c0 [ 332.005567][T13448] __alloc_frozen_pages_noprof+0x181/0x370 [ 332.011385][T13448] alloc_pages_mpol+0x232/0x4a0 [ 332.016249][T13448] allocate_slab+0x8a/0x3b0 [ 332.020759][T13448] ___slab_alloc+0xbfc/0x1480 [ 332.025447][T13448] __kmalloc_cache_noprof+0x296/0x3d0 [ 332.030825][T13448] rxrpc_alloc_peer+0x7d/0x330 [ 332.035592][T13448] rxrpc_service_prealloc_one+0x1f4/0xe00 [ 332.041314][T13448] afs_charge_preallocation+0x394/0x4e0 [ 332.046869][T13448] afs_open_socket+0x302/0x3a0 [ 332.051635][T13448] afs_net_init+0x67d/0x880 [ 332.056154][T13448] ops_init+0x359/0x5c0 [ 332.060336][T13448] setup_net+0x219/0x4b0 [ 332.064595][T13448] copy_net_ns+0x31b/0x4d0 [ 332.069043][T13448] create_new_namespaces+0x3f3/0x720 [ 332.074350][T13448] page last free pid 5848 tgid 5848 stack trace: [ 332.080675][T13448] __free_frozen_pages+0xc71/0xe70 [ 332.085800][T13448] __put_partials+0x161/0x1c0 [ 332.090511][T13448] put_cpu_partial+0x17c/0x250 [ 332.095371][T13448] __slab_free+0x2f7/0x400 [ 332.099798][T13448] qlist_free_all+0x97/0x140 [ 332.104503][T13448] kasan_quarantine_reduce+0x148/0x160 [ 332.109963][T13448] __kasan_slab_alloc+0x22/0x80 [ 332.114811][T13448] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 332.120274][T13448] alloc_pid+0x9f/0xab0 [ 332.124449][T13448] copy_process+0x198e/0x3c00 [ 332.129123][T13448] kernel_clone+0x21e/0x870 [ 332.133630][T13448] __x64_sys_clone+0x18b/0x1e0 [ 332.138390][T13448] do_syscall_64+0xfa/0x3b0 [ 332.142903][T13448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.148801][T13448] [ 332.151127][T13448] Memory state around the buggy address: [ 332.156768][T13448] ffff888047523300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.164823][T13448] ffff888047523380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.172877][T13448] >ffff888047523400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.180932][T13448] ^ [ 332.186557][T13448] ffff888047523480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.194615][T13448] ffff888047523500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.202672][T13448] ================================================================== [ 332.210847][T13448] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 332.218062][T13448] CPU: 0 UID: 0 PID: 13448 Comm: syz.2.2345 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 332.230153][T13448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.240231][T13448] Call Trace: [ 332.243529][T13448] [ 332.246472][T13448] dump_stack_lvl+0x99/0x250 [ 332.251108][T13448] ? __asan_memcpy+0x40/0x70 [ 332.255737][T13448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.260969][T13448] ? __pfx__printk+0x10/0x10 [ 332.265611][T13448] panic+0x2db/0x790 [ 332.269553][T13448] ? __pfx_panic+0x10/0x10 [ 332.274007][T13448] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 332.279920][T13448] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 332.285825][T13448] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.292163][T13448] ? print_memory_metadata+0x314/0x400 [ 332.297635][T13448] ? rose_get_neigh+0x391/0x990 [ 332.302488][T13448] check_panic_on_warn+0x89/0xb0 [ 332.307435][T13448] ? rose_get_neigh+0x391/0x990 [ 332.312299][T13448] end_report+0x78/0x160 [ 332.316554][T13448] kasan_report+0x129/0x150 [ 332.321055][T13448] ? rose_get_neigh+0x391/0x990 [ 332.325919][T13448] rose_get_neigh+0x391/0x990 [ 332.330602][T13448] rose_connect+0x416/0x10a0 [ 332.335201][T13448] ? __pfx_current_check_access_socket+0x10/0x10 [ 332.341533][T13448] ? aa_sk_perm+0x81e/0x950 [ 332.346037][T13448] ? __might_fault+0xb0/0x130 [ 332.350729][T13448] ? __pfx_rose_connect+0x10/0x10 [ 332.355772][T13448] ? aa_af_perm+0x210/0x2b0 [ 332.360286][T13448] ? tomoyo_socket_connect_permission+0x164/0x290 [ 332.366730][T13448] ? bpf_lsm_socket_connect+0x9/0x20 [ 332.372027][T13448] __sys_connect+0x313/0x440 [ 332.376630][T13448] ? __pfx___sys_connect+0x10/0x10 [ 332.381779][T13448] ? rcu_is_watching+0x15/0xb0 [ 332.386585][T13448] __x64_sys_connect+0x7a/0x90 [ 332.391374][T13448] do_syscall_64+0xfa/0x3b0 [ 332.395888][T13448] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.401100][T13448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.407188][T13448] ? clear_bhb_loop+0x60/0xb0 [ 332.411874][T13448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.417769][T13448] RIP: 0033:0x7f02da38e929 [ 332.422190][T13448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.441810][T13448] RSP: 002b:00007f02db1d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 332.450242][T13448] RAX: ffffffffffffffda RBX: 00007f02da5b5fa0 RCX: 00007f02da38e929 [ 332.458223][T13448] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 332.466202][T13448] RBP: 00007f02da410b39 R08: 0000000000000000 R09: 0000000000000000 [ 332.474189][T13448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.482172][T13448] R13: 0000000000000000 R14: 00007f02da5b5fa0 R15: 00007ffd4ad3cfd8 [ 332.490162][T13448] [ 332.493513][T13448] Kernel Offset: disabled [ 332.497844][T13448] Rebooting in 86400 seconds..