last executing test programs: 6m0.906435915s ago: executing program 2 (id=18321): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x6, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffd, 0x1000000}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="0bcfbb8fc33aff030000cfe38668", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x15) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r2, 0x11}, 0x20) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000040)=""/11, &(0x7f0000000080)=0xb) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r9, 0x0, 0x0, 0x1, 0x0, 0xd, @loopback, @empty, 0x700, 0x0, 0xfffffffc}}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xf7ffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40901}, 0x8000) setsockopt$packet_int(r5, 0x107, 0x12, &(0x7f0000000280)=0x781a, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000007a00010600000000000000000700000047"], 0x18}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 6m0.506742751s ago: executing program 2 (id=18324): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 6m0.350267508s ago: executing program 2 (id=18327): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="f82f19b8dd", 0x5}, {0x0}], 0x2}}], 0x1, 0x82) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000010000d0400"/20, @ANYBLOB="00000000002101003c001280110001006272696467655f736c6176650000000024000580060002"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6m0.230562921s ago: executing program 2 (id=18328): r0 = socket$igmp6(0xa, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'dummy0\x00', @random="0100002010ff"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x1, 0x8}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r4}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x11, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r4, 0xffffffff, 0x4, 0x1}) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x3, 0x4, {0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="a087ded9aacc0c6a6f24b50a0346f4028ee4ecc7e5d2b74a095481e28c23aaa59452d13c4069090f435aaa29b5b7b4a02031c0e47a2dde5237858594bfe03d957b2e2b118b29dcb102f93f0334db0b3fcb8235cb1c042d7946521ec5c5088e520ba43069c4600a5591eb4dc6f2d6f8b79f0c4c1e3d476c1c5a559b843ba1c89581ddf0cbc2df6cc5cce2c77e5a09eaf034a8fa93454db687fb71", 0x9a}], 0x1}, 0x8081) 5m59.803369069s ago: executing program 2 (id=18331): bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="2a179b2cfb", @ANYRESOCT, @ANYBLOB="0339d6a251e6fc57ebc56abfb44490f3c19d46cb66acde62e27d7d4841039a05a2d9f394d9a1e047c5d5535e1f09038f8fe6b6e226d8a9cfb79b2da817f08ea066da962c4480d79808f74b41cb49019ab069ae43c089af5b019de4065a57677d6cb76ea3c3c16dd0f945d460010331dfdf31e535fe9b15e536323f18f926bbbb558b3db2228828312dc0b0644fece99a10d8180ba02ef3b3483abc92f676787bb8f110957949fe1c6a76def7ada22daba964f8ca260d62320692028fd261684c7dd796f74e3cfa3066", @ANYBLOB="1db235d7b25824f09d8089efd8ebb1abebaccafbc8de12c9bc9eb6f2570955244878dea0014839840b100227a38c888169b94c8b79104f1e0d8d5a9ab2f2f1a06522917c6aad29c9a0e7154dfc470bfcd0ad0029a0b90587fe987acab1c0ad6ff1afee13f8352e6305eaa1c5fd58426f5ea9a1c678dc93e07ff8a8d6848117e8032bff1615198d3d8b7799ea57ba273452a2a542eeb32fe394352010b88436c769dd7bb3cf4c9f3fdbbbe57fb64cc0206ecac70fba1083a28f4f9657f1c5e89627dcbff6c7d2ca0b45191241a095337741be5fb9", @ANYRESOCT, @ANYBLOB="c2f21358f1388e123e9665d886720a52d484f67f6a926d92c1ab96ba525cbced9e45bcb8a3b1fca6c543bf6fd9488016396cce82ccf2a401bdefd3defe29eeeb576ddc514e13f6648ec710adafd565ffb8fd9203c76e7dfd4122603601449fcd8a1ffa53c789e24403eedd01360ada514d78737ae65edfb9d5e78aee2a7d1e14e0176eb804d9cff66a0134f4663723fb28759b4c74090e76dcbe1002c91e390acce7afa21900eacfcba3f42e0d7bd761f14e3d15b91cf40350eb", @ANYRES64, @ANYRESDEC], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) sendfile(r2, r1, 0x0, 0x10000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x91, @mcast1, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000540)=[{&(0x7f0000001ac0)="5800e6ff1300192340834b560a066f0200ff00000b4824ca945f64009400ff0325010ebc00e809005304fff4d500000010000100080c10000000000000000000000000000000000000000000b6560fe2983b0b7c3fcd93f689186f6772c7dd6f73cf4d0c6227a137ffc60ea9d89b5e42189ac3dd73c8f1f8c054b8197fa072e4ca65150232c28836af8b6c3f29b513de9b3d78c5e7d9e1f9431b080556c3f8d5f1cce53d7bb90d8b6e626894f19fa3274a9a93fe329be619c649c5a689aea326041fa12018fc7c398fcb627c6ecb462029f77774ccb218fd4cf6b2c6808945f8bc28587cdcc560dd37ff931b5da0080821f540607beede39", 0xf8}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0xffe5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141694089ffe4d2f87e5890c6aab845013f2325f1a39010703038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000340), &(0x7f0000000640)=r1}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 5m58.742579231s ago: executing program 2 (id=18335): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffe2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001000)=@get={0x1, &(0x7f0000000000)=""/4096, 0x4733}) setsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, 0x0) 5m43.008383716s ago: executing program 32 (id=18335): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffe2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001000)=@get={0x1, &(0x7f0000000000)=""/4096, 0x4733}) setsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, 0x0) 2m56.058061668s ago: executing program 1 (id=19293): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000005bf989bfb7ffff95d80000000000000000000000f900000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) unshare(0x10000000) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbcbbbbbbbbb4aa468739b8508060001080006040001da82ce4f59beaaaaaaaaaaaa0a01010057330377"], 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x4, @empty, 0xde4}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x90}}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) writev(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x3) 2m49.688001621s ago: executing program 1 (id=19327): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x168, 0x9, 0xd0, 0xb, 0x210, 0x250, 0x250, 0x210, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {0xff}, 0x6c}, 0x6000000, 0xa8, 0xd0, 0x0, {0x0, 0x28e}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xc7, 0x3}, {0xffffffffffffffff, 0x4, 0x1}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x4, 0x1}, {0x7, 0xe}, {0x7, 0x8}, 0xfff}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'batadv0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 2m49.547000428s ago: executing program 1 (id=19328): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x5, 0x0, 0xb}}]}}}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@newneigh={0x48, 0x1c, 0x200, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x57, 0x9}, [@NDA_PROTOCOL={0x5, 0xc, 0x81}, @NDA_MASTER={0x8, 0x9, 0x9}, @NDA_IFINDEX={0x8}, @NDA_IFINDEX={0x8}, @NDA_VNI={0x8, 0x7, 0x100}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x48}}, 0x20000080) 2m49.304122685s ago: executing program 1 (id=19330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x100000, 0x5}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r6], 0x60}}, 0x0) 2m48.95368839s ago: executing program 1 (id=19332): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000005000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110080001000000000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000580)=ANY=[], 0x27) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) 2m41.815853175s ago: executing program 1 (id=19353): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x30}]}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r4, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x114, 0x2}], 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x4) bind$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) write(r6, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x5, [@var={0xe, 0x0, 0x0, 0xe, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x8}}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x4}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x3}]}, @fwd={0x8}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000100), 0x7d, 0x0, 0x1, 0x8}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x40400) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000200000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) unshare(0x0) unshare(0x100) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r11, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r12, r12, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRESHEX=r8, @ANYRES64=r3, @ANYRESOCT=r3, @ANYRES16=0x0, @ANYRES32=r13, @ANYRES8=r2], 0x0) 2m26.665516012s ago: executing program 33 (id=19353): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x30}]}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r4, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x114, 0x2}], 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x4) bind$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) write(r6, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x5, [@var={0xe, 0x0, 0x0, 0xe, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x8}}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x4}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x3}]}, @fwd={0x8}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000100), 0x7d, 0x0, 0x1, 0x8}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x40400) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000200000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) unshare(0x0) unshare(0x100) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r11, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r12, r12, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRESHEX=r8, @ANYRES64=r3, @ANYRESOCT=r3, @ANYRES16=0x0, @ANYRES32=r13, @ANYRES8=r2], 0x0) 2m23.034006099s ago: executing program 3 (id=19416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000005000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110080001000000000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000580)=ANY=[], 0x27) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) 2m18.181660887s ago: executing program 3 (id=19429): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c657230000000000000c194c7baa32c178652a3b6e676b50059b89e566fb473ba7f971775b7f33807fa8aa3b69da0d429ef936b7e55f85237c8c486ee65abde130d49ce"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 2m14.436033952s ago: executing program 3 (id=19438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000005000000009500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd56", 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110080001000000000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000580)=ANY=[], 0x27) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) 2m7.84982198s ago: executing program 3 (id=19477): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x8000}, 0x8f) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000006c0)={'filter\x00', 0x0, 0x4, 0xb8, [0x3, 0x5, 0x10, 0x0, 0x4, 0xa], 0x0, &(0x7f0000000480), &(0x7f0000000740)=""/184}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x23, 0x803, 0xfffffffd) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769", @ANYRES32=r8], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0400000008000000090080000800000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r10, &(0x7f000000e340), 0x0, 0x40084) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0400000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0xfffffdf7, 0x1, 0x1, 0x10000, @value=r9}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) 2m0.131647302s ago: executing program 3 (id=19510): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000440)={@broadcast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x4c, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, @mcast2, {[@fragment={0x87, 0x0, 0x8, 0x0, 0x0, 0x0, 0x600}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000500)={0x0, 'veth1_to_batadv\x00', {0x4}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000090a010400000000000000000000000d20000000090a010400000000000000000a0000090900020073797a320000000034000000140a03000000000000000000030000070900010073797a30000000000c000640000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x44000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x1b8, 0x2a8, 0x1b8, 0x2a8, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) getpeername$packet(r1, 0x0, &(0x7f0000000040)=0x31) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18ffffffff0000000000020000005000181100001629aeded1d432d7a45bd5ddb7970600439cfa95420d10e504b5691668190724fcd8f7d1d0ab6feaf71bc5caa8bcbd69cac829d2c07540cc49207f7c812c7ba5db000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014f90000b7030004000000008500000000bc09f475150f0fce5bb857f211df00000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7963501cf76973"], 0x0, 0x58, 0x0, 0xa, 0x10}, 0x28) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 1m59.846721275s ago: executing program 3 (id=19513): unshare(0x60480) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/133, 0x85}], 0x1}, 0xb}], 0x2, 0x60, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r7, 0x0, 0x5}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) clock_gettime(0x0, &(0x7f0000008f00)) recvmmsg$unix(r6, &(0x7f0000008d00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/124, 0x7c}, {&(0x7f00000003c0)=""/51, 0x33}], 0x2}}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000008c80)=[{&(0x7f0000000300)=""/24, 0x18}], 0x1}}], 0x3, 0x12141, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="10007d80", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1m44.632201101s ago: executing program 34 (id=19513): unshare(0x60480) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/133, 0x85}], 0x1}, 0xb}], 0x2, 0x60, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r7, 0x0, 0x5}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) clock_gettime(0x0, &(0x7f0000008f00)) recvmmsg$unix(r6, &(0x7f0000008d00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/124, 0x7c}, {&(0x7f00000003c0)=""/51, 0x33}], 0x2}}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000008c80)=[{&(0x7f0000000300)=""/24, 0x18}], 0x1}}], 0x3, 0x12141, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="10007d80", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 14.747833419s ago: executing program 4 (id=20053): unshare(0x8040480) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000080000000000000800000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x0) r10 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r12}]}}}]}, 0x68}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r10, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={0xffffffffffffffff, 0x0, 0x1000, 0x94, &(0x7f0000000200)="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", &(0x7f0000000080)=""/148, 0x8, 0x0, 0x47, 0x5b, &(0x7f0000000140)="2dd974f8a8804037494f1e8cfc982bb149300fdef259a02304b7ca0c16b4ddb8981016b48aa6ce985eaa2043a44d9285e82330a333d4fc4b0477ca711d412c49490f857a2fd97f", &(0x7f0000001200)="594f5e322f43e0ed08ec6a6d3cc512966fed75476d796f15077bc375bc39afa1094bc823475d857abf315205f98321f2ea50375384ade9480a609300249bbddcc1df04897969fdbc76a6c95cde2cdeb42423f266bc5d32e53ca4c6", 0x2, 0x0, 0x9}, 0x50) r13 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r13, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r13, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x90, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_NAT_SRC={0x4c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x2c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffff7}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x91}, 0x20000000) unshare(0x24040000) 13.890281968s ago: executing program 5 (id=20060): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x810) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r0, @ANYBLOB="01030000000000000000110000000800", @ANYRES32=0x0, @ANYBLOB="1a4f6bda319faf5220917d6dd686b463e8698b7029fe3e2c9fda47158aef92da6144a335bfd6d4e89b4131a6b187ecb39c8c08736157eabc6b51346b407add7b4466530edb101738a15114b6d7a95c74357f0961ca3bb70568adfd7747b8a1c2ffa8ee9cc335b54cd90f4733274c9a89430579114c5cdaff3719c1e665a4f79394f647181d254c8ddcd1c008e2e812444ededb2b6fc7e8d093b16ce8b8aa8dad34b81e23f23ca978a7e9c056580fb9f1fa5d3d1fc190ccf937"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c009900010000001e00000004000801140024009b0bec85891b0e5cb00c098618860048"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r2, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x101) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x80000002, 0x12) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x2000200b}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) epoll_create1(0x0) sendmmsg$inet(r1, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="45a31767b31c3b69c177af59fd8252317994c601000000bc", 0x18}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a4925ddf3dd14992612d22032093742f07fd8d9723bed7707077473de16c3f5820b5dc6f1c37dbaaba20cb5a7", 0xdb}, {&(0x7f0000000300)="47788f64ba10044b682c594fa485c04663ed58f30031ae1cff3613c3178c76ab0613419d80cf2ebb2efedf9237b34b3e925f7695a250556a4ff5e460bfdf593f20253f90740976f323c00df882e4285d5fa368cf147e38ee08ae4aa4fdfe618be117a5e45e516c6259b68e1b9cf170cc831498d2db68532fe3acf3cdef8e18488541cacfa624eecc49d9a853f4a7cc8c3d7d0ac7c271bcfc989591b98b6b1c93d818cf4c0ff77fd8bb4f83102c41ebee199b6877f2477b", 0xb7}, {&(0x7f00000003c0)="5c9272a54353b9022ec5341e4f608bb8", 0x10}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000006c0)="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", 0x800}, {&(0x7f00000016c0)="f303204cc2cca35ff30616e339f76d94f43c6cc5a88ae440d7d0bfac14fe5ee5", 0x20}, {&(0x7f0000000ec0)="47a1695b942808415665898f0b166d388b7ab58f9348105b43a5732870bdfdbf17b3f5f167f7b56ee7792248135ea69b3afaf8e56bdc0b4ec909823797bbdd6c3250a703560973e9c66de3e66b6f14ade17149681f90b9032055d92b59abbe32a7bd0402d314283a113228b27b243c8b9a4c6526ba3ac979f9f9c09d8c71537bdeebf17c7d900034bdc968fb115e76ab0b928f8c393b445d15ce3f", 0x9b}, {&(0x7f0000000400)="26884c2747851f2deb1c1d083d5a9498ebbdd5f8cd2e43502c30408ec9e3492a1ef2e3c79821dc3eb8442c34182cd71b70c333df994581e6642b64cb", 0x3c}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000600)=0xdfa, 0x3) sendto$inet(r1, &(0x7f0000000580)="17", 0x1, 0x10048095, 0x0, 0x0) 13.749791971s ago: executing program 4 (id=20064): syz_emit_ethernet(0x3a, &(0x7f0000000200)={@link_local, @local, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x32, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x8, 0x0, 0x0) r2 = socket(0x22, 0x1, 0x7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000b93e941f3086b5dd5c7291476b000414010026bd7000ffdbdf250800010001000000080201000200000408000100020000000800010001000000080001000200000008000100021f00000800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40ba32ba81037e24) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) 13.556716457s ago: executing program 4 (id=20066): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x12, 0x0, 0x0, 0xd, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_ident={0x2, 0xa, 0x1000, 0x0, 0x6}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x9, @mcast1}}]}, 0x68}}, 0x20000) 13.283789509s ago: executing program 4 (id=20069): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000005bf989bfb7ffff95d80000000000000000000000f900000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) unshare(0x10000000) gettid() r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbcbbbbbbbbb4aa468739b8508060001080006040001da82ce4f59beaaaaaaaaaaaa0a01010057330377"], 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x4, @empty, 0xde4}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x90}}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) writev(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x3) 12.90292472s ago: executing program 5 (id=20072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000050400"/20, @ANYRES32=r2, @ANYBLOB="7f1f35a1e057828bdc0000000000000000200012800b00010065727370616e00001000028005001600fd00000004001200"], 0x40}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000000001e0000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xd1}, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000040) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "000000044000", "75df9881592b9fd38bcad042e286f2cd", '\x00', "36f55ea69a10c4ee"}, 0x0) socket(0x1d, 0x1, 0xfffffffb) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@gettaction={0xbc, 0x32, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0xbc}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8) 7.92763083s ago: executing program 5 (id=20097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000), 0xfffffffffffffef1) 7.839434405s ago: executing program 5 (id=20098): socket$inet(0x2, 0x800, 0xb6f) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x29, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000280000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0xffe) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) socket$packet(0x11, 0x3, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) socket$kcm(0xa, 0x2, 0x88) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) 6.417274779s ago: executing program 5 (id=20107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000050400"/20, @ANYRES32=r2, @ANYBLOB="7f1f35a1e057828bdc0000000000000000200012800b00010065727370616e00001000028005001600fd00000004001200"], 0x40}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000000001e0000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xd1}, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000040) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "000000044000", "75df9881592b9fd38bcad042e286f2cd", '\x00', "36f55ea69a10c4ee"}, 0x0) socket(0x1d, 0x1, 0xfffffffb) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@gettaction={0xbc, 0x32, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0xbc}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8) 5.718216297s ago: executing program 6 (id=20113): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x8010000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000005c0)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000440)=""/70, 0x46}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/217, 0xd9}, {&(0x7f0000000040)=""/218, 0xda}, {&(0x7f0000000340)=""/103, 0x67}], 0x8}, 0x80000002}], 0x4, 0x10122, 0x0) 5.528549775s ago: executing program 4 (id=20115): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$kcm(0x25, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0xfff}, {&(0x7f00000011c0)="14d5", 0x2}], 0x2, 0xf) readv(r2, &(0x7f0000000940)=[{&(0x7f00000004c0)=""/88, 0x58}], 0x1) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ce2000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r0, 0x913e0000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9000911", 0x19}, {&(0x7f0000002580)="09c69e16e1536fcff84a6c972f929bd77111f8ed22e8b95278dba0549bed73bf9a", 0x21}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000c16000/0x4000)=nil, 0x4000, 0x2000003, 0x28011, r8, 0xac9d4000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4.740333333s ago: executing program 6 (id=20119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380050003"], 0x38}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="0bcfbb8fc33aff030000cfe38668", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.569054383s ago: executing program 7 (id=20120): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, 0x0, 0x2, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020400) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="18000000720001070000000000000002070000f70c62"], 0x18}}, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) 4.498261838s ago: executing program 6 (id=20121): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x3f9a, 0x0, 0x10001}, 0x0, 0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) 4.438206992s ago: executing program 4 (id=20122): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000005000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110080001000000000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000580)=ANY=[], 0x27) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) 3.556728968s ago: executing program 6 (id=20127): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0xe) 3.408494113s ago: executing program 7 (id=20128): socket(0x2a, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x98, 0x90, 0x130, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@mpls_getnetconf={0x44, 0x52, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffb}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x240080c0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) 3.38757672s ago: executing program 6 (id=20129): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x8010000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000005c0)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000440)=""/70, 0x46}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/217, 0xd9}, {&(0x7f0000000040)=""/218, 0xda}, {&(0x7f0000000340)=""/103, 0x67}], 0x8}, 0x80000002}], 0x4, 0x10122, 0x0) 3.049302232s ago: executing program 0 (id=20130): socket(0x2a, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x98, 0x90, 0x130, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@mpls_getnetconf={0x44, 0x52, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffb}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x240080c0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) 2.812926474s ago: executing program 7 (id=20131): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 2.682196679s ago: executing program 7 (id=20132): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x11e, 0x488, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x3f9a, 0x0, 0x10001}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, 0x1}, 0xc) 2.613606348s ago: executing program 0 (id=20133): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0xfffffffe}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfff}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x45}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0xb}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) 2.407436719s ago: executing program 6 (id=20134): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r5, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) clock_gettime(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000070000000000000000010c00028005000100000000000800074000000000440010800800024000000fff0800024000000007080001"], 0xe0}}, 0x0) syz_genetlink_get_family_id$smc(0x0, r5) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78) write(r7, &(0x7f0000000000)="c0", 0x1) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 2.282201032s ago: executing program 0 (id=20135): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x14, 0x30, 0x1, 0x2, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x6b}, 0xc000040) 2.039843167s ago: executing program 0 (id=20136): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x98}}, 0x4048010) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x6, 0x3, 0x0, "05a2e47f6eea"}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="60050000", @ANYRES16=r5, @ANYBLOB="010026bd7400000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="0600cd00000000003b05330000a810000802110000010802110000005050505050509c00c000c081202f02000000010582898004962d1a80"], 0x560}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4001) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r1, 0x1, 0x81, 0x54}) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0xc8, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7d70}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x36}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd151}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000240)="ed59cee5d52839361d33360fc1ce4fd20fb00f6cea8d26e8c99f350392c0aeffd0afc163e0f4aa4c33b9ffc7d1b80756aa2f73d86bf9035f0dac71e497271697cce63ace7b3376b0b783f70552c33b1512992503f9fd53c998e9f38647d65bc96c76f4bbc79e8e319f4666e728e48382b7a2aa16015784", 0x77) 1.382203524s ago: executing program 0 (id=20137): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, 0x0, 0x0, 0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) 588.179464ms ago: executing program 5 (id=20138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0) (fail_nth: 5) 456.769377ms ago: executing program 7 (id=20139): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0xffa4, 0x14, 0x0, &(0x7f0000000240)) 319.875299ms ago: executing program 0 (id=20140): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x8000}, 0x8f) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000006c0)={'filter\x00', 0x0, 0x4, 0xb8, [0x3, 0x5, 0x10, 0x0, 0x4, 0xa], 0x0, &(0x7f0000000480), &(0x7f0000000740)=""/184}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x23, 0x803, 0xfffffffd) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r8], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r10, &(0x7f000000e340), 0x0, 0x40084) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0400000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0xfffffdf7, 0x1, 0x1, 0x10000, @value=r9}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) 0s ago: executing program 7 (id=20141): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000005bf989bfb7ffff95d80000000000000000000000f900000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) unshare(0x10000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbcbbbbbbbbb4aa468739b8508060001080006040001da82ce4f59beaaaaaaaaaaaa0a01010057330377"], 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x4, @empty, 0xde4}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x90}}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) writev(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x3) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.0.19336'. [ 2515.091591][ T476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19336'. [ 2515.231164][ T459] lo speed is unknown, defaulting to 1000 [ 2515.392977][ T483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19339'. [ 2516.002387][ T472] lo speed is unknown, defaulting to 1000 [ 2516.203134][ T497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19338'. [ 2516.610644][ T502] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19342'. [ 2517.135834][ T506] FAULT_INJECTION: forcing a failure. [ 2517.135834][ T506] name failslab, interval 1, probability 0, space 0, times 0 [ 2517.163342][ T506] CPU: 1 UID: 0 PID: 506 Comm: syz.0.19344 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2517.163376][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2517.163391][ T506] Call Trace: [ 2517.163400][ T506] [ 2517.163410][ T506] dump_stack_lvl+0x189/0x250 [ 2517.163442][ T506] ? __pfx____ratelimit+0x10/0x10 [ 2517.163476][ T506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2517.163502][ T506] ? __pfx__printk+0x10/0x10 [ 2517.163542][ T506] ? __lock_acquire+0xab9/0xd20 [ 2517.163577][ T506] should_fail_ex+0x414/0x560 [ 2517.163606][ T506] should_failslab+0xa8/0x100 [ 2517.163640][ T506] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2517.163668][ T506] ? skb_clone+0x212/0x3a0 [ 2517.163700][ T506] skb_clone+0x212/0x3a0 [ 2517.163731][ T506] __netlink_deliver_tap+0x404/0x850 [ 2517.163767][ T506] ? netlink_deliver_tap+0x2e/0x1b0 [ 2517.163789][ T506] netlink_deliver_tap+0x19c/0x1b0 [ 2517.163812][ T506] netlink_unicast+0x7fa/0x9e0 [ 2517.163853][ T506] ? __pfx_netlink_unicast+0x10/0x10 [ 2517.163885][ T506] ? netlink_sendmsg+0x642/0xb30 [ 2517.163903][ T506] ? skb_put+0x11b/0x210 [ 2517.163930][ T506] netlink_sendmsg+0x805/0xb30 [ 2517.163963][ T506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2517.163988][ T506] ? aa_sock_msg_perm+0x94/0x160 [ 2517.164014][ T506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2517.164035][ T506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2517.164057][ T506] __sock_sendmsg+0x219/0x270 [ 2517.164092][ T506] ____sys_sendmsg+0x505/0x830 [ 2517.164123][ T506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2517.164160][ T506] ? import_iovec+0x74/0xa0 [ 2517.164193][ T506] ___sys_sendmsg+0x21f/0x2a0 [ 2517.164221][ T506] ? __pfx____sys_sendmsg+0x10/0x10 [ 2517.164289][ T506] ? __fget_files+0x2a/0x420 [ 2517.164307][ T506] ? __fget_files+0x3a0/0x420 [ 2517.164340][ T506] __x64_sys_sendmsg+0x19b/0x260 [ 2517.164369][ T506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2517.164405][ T506] ? __pfx_ksys_write+0x10/0x10 [ 2517.164431][ T506] ? rcu_is_watching+0x15/0xb0 [ 2517.164468][ T506] ? do_syscall_64+0xbe/0x3b0 [ 2517.164493][ T506] do_syscall_64+0xfa/0x3b0 [ 2517.164512][ T506] ? lockdep_hardirqs_on+0x9c/0x150 [ 2517.164551][ T506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2517.164573][ T506] ? clear_bhb_loop+0x60/0xb0 [ 2517.164600][ T506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2517.164622][ T506] RIP: 0033:0x7fea6f58e9a9 [ 2517.164642][ T506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2517.164661][ T506] RSP: 002b:00007fea70368038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2517.164685][ T506] RAX: ffffffffffffffda RBX: 00007fea6f7b5fa0 RCX: 00007fea6f58e9a9 [ 2517.164701][ T506] RDX: 0000000024002800 RSI: 0000200000000040 RDI: 0000000000000003 [ 2517.164715][ T506] RBP: 00007fea70368090 R08: 0000000000000000 R09: 0000000000000000 [ 2517.164729][ T506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2517.164742][ T506] R13: 0000000000000000 R14: 00007fea6f7b5fa0 R15: 00007fffc41678c8 [ 2517.164778][ T506] [ 2517.664127][ T509] vlan2: entered promiscuous mode [ 2517.676450][ T509] vlan2: entered allmulticast mode [ 2517.686661][ T509] hsr_slave_1: entered allmulticast mode [ 2517.980030][ T509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19345'. [ 2518.585071][ T480] lo speed is unknown, defaulting to 1000 [ 2519.717252][ T527] syzkaller0: entered promiscuous mode [ 2519.734263][ T527] syzkaller0: entered allmulticast mode [ 2520.372270][ T529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2520.440960][ T532] FAULT_INJECTION: forcing a failure. [ 2520.440960][ T532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2520.517110][ T532] CPU: 1 UID: 0 PID: 532 Comm: syz.0.19352 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2520.517143][ T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2520.517157][ T532] Call Trace: [ 2520.517166][ T532] [ 2520.517185][ T532] dump_stack_lvl+0x189/0x250 [ 2520.517217][ T532] ? __pfx____ratelimit+0x10/0x10 [ 2520.517249][ T532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2520.517276][ T532] ? __pfx__printk+0x10/0x10 [ 2520.517317][ T532] should_fail_ex+0x414/0x560 [ 2520.517346][ T532] _copy_to_user+0x31/0xb0 [ 2520.517378][ T532] simple_read_from_buffer+0xe1/0x170 [ 2520.517414][ T532] proc_fail_nth_read+0x1df/0x250 [ 2520.517439][ T532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2520.517464][ T532] ? rw_verify_area+0x258/0x650 [ 2520.517490][ T532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2520.517513][ T532] vfs_read+0x200/0x980 [ 2520.517554][ T532] ? __pfx___mutex_lock+0x10/0x10 [ 2520.517576][ T532] ? __pfx_vfs_read+0x10/0x10 [ 2520.517606][ T532] ? __fget_files+0x2a/0x420 [ 2520.517631][ T532] ? __fget_files+0x3a0/0x420 [ 2520.517648][ T532] ? __fget_files+0x2a/0x420 [ 2520.517678][ T532] ksys_read+0x145/0x250 [ 2520.517707][ T532] ? __pfx_ksys_read+0x10/0x10 [ 2520.517734][ T532] ? rcu_is_watching+0x15/0xb0 [ 2520.517760][ T532] ? trace_sys_enter+0x25/0x120 [ 2520.517788][ T532] do_syscall_64+0xfa/0x3b0 [ 2520.517811][ T532] ? lockdep_hardirqs_on+0x9c/0x150 [ 2520.517841][ T532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2520.517862][ T532] ? clear_bhb_loop+0x60/0xb0 [ 2520.517887][ T532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2520.517914][ T532] RIP: 0033:0x7fea6f58d3bc [ 2520.517934][ T532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2520.517952][ T532] RSP: 002b:00007fea70368030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2520.517975][ T532] RAX: ffffffffffffffda RBX: 00007fea6f7b5fa0 RCX: 00007fea6f58d3bc [ 2520.517991][ T532] RDX: 000000000000000f RSI: 00007fea703680a0 RDI: 0000000000000005 [ 2520.518004][ T532] RBP: 00007fea70368090 R08: 0000000000000000 R09: 0000000000000000 [ 2520.518017][ T532] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000002 [ 2520.518030][ T532] R13: 0000000000000000 R14: 00007fea6f7b5fa0 R15: 00007fffc41678c8 [ 2520.518065][ T532] [ 2520.799509][ T535] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 2521.142410][ T546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19355'. [ 2521.756168][ T553] lo speed is unknown, defaulting to 1000 [ 2522.042729][ T561] FAULT_INJECTION: forcing a failure. [ 2522.042729][ T561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2522.097381][ T561] CPU: 0 UID: 0 PID: 561 Comm: syz.0.19358 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2522.097415][ T561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2522.097429][ T561] Call Trace: [ 2522.097438][ T561] [ 2522.097449][ T561] dump_stack_lvl+0x189/0x250 [ 2522.097480][ T561] ? __pfx____ratelimit+0x10/0x10 [ 2522.097514][ T561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2522.097539][ T561] ? __pfx__printk+0x10/0x10 [ 2522.097569][ T561] ? __might_fault+0xb0/0x130 [ 2522.097611][ T561] should_fail_ex+0x414/0x560 [ 2522.097640][ T561] _copy_from_user+0x2d/0xb0 [ 2522.097670][ T561] generic_map_update_batch+0x51b/0x7f0 [ 2522.097713][ T561] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2522.097739][ T561] ? __fget_files+0x2a/0x420 [ 2522.097767][ T561] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2522.097799][ T561] bpf_map_do_batch+0x369/0x5f0 [ 2522.097826][ T561] __sys_bpf+0x384/0x860 [ 2522.097861][ T561] ? __pfx___sys_bpf+0x10/0x10 [ 2522.097908][ T561] ? ksys_write+0x22a/0x250 [ 2522.097939][ T561] ? __pfx_ksys_write+0x10/0x10 [ 2522.097976][ T561] __x64_sys_bpf+0x7c/0x90 [ 2522.098006][ T561] do_syscall_64+0xfa/0x3b0 [ 2522.098032][ T561] ? lockdep_hardirqs_on+0x9c/0x150 [ 2522.098064][ T561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.098085][ T561] ? clear_bhb_loop+0x60/0xb0 [ 2522.098111][ T561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.098132][ T561] RIP: 0033:0x7fea6f58e9a9 [ 2522.098152][ T561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2522.098171][ T561] RSP: 002b:00007fea70368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2522.098194][ T561] RAX: ffffffffffffffda RBX: 00007fea6f7b5fa0 RCX: 00007fea6f58e9a9 [ 2522.098210][ T561] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 2522.098224][ T561] RBP: 00007fea70368090 R08: 0000000000000000 R09: 0000000000000000 [ 2522.098237][ T561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2522.098249][ T561] R13: 0000000000000000 R14: 00007fea6f7b5fa0 R15: 00007fffc41678c8 [ 2522.098282][ T561] [ 2523.025940][ T583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19357'. [ 2523.619013][ T581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19363'. [ 2523.662592][ T559] lo speed is unknown, defaulting to 1000 [ 2525.355558][ T588] lo speed is unknown, defaulting to 1000 [ 2525.753142][ T602] lo speed is unknown, defaulting to 1000 [ 2526.202939][ T613] syzkaller0: entered promiscuous mode [ 2526.226151][ T613] syzkaller0: entered allmulticast mode [ 2526.372865][ T607] lo speed is unknown, defaulting to 1000 [ 2527.437423][ T622] tipc: Enabled bearer , priority 0 [ 2527.583705][ T622] syzkaller0: entered promiscuous mode [ 2527.589781][ T622] syzkaller0: entered allmulticast mode [ 2527.596400][ T622] tipc: Resetting bearer [ 2527.672718][ T621] tipc: Resetting bearer [ 2528.529721][ T3629] tipc: Node number set to 2065415748 [ 2529.034310][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2530.703156][ T621] tipc: Disabling bearer [ 2531.243589][ T629] lo speed is unknown, defaulting to 1000 [ 2531.441229][ T645] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19383'. [ 2531.590332][ T651] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2531.599804][ T647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19383'. [ 2532.111849][ T660] netlink: 'syz.0.19387': attribute type 4 has an invalid length. [ 2532.168546][ T660] netlink: 'syz.0.19387': attribute type 4 has an invalid length. [ 2532.899068][ T646] lo speed is unknown, defaulting to 1000 [ 2533.056305][ T670] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19391'. [ 2533.196850][ T672] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19391'. [ 2533.499957][ T678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19393'. [ 2535.026987][ T680] lo speed is unknown, defaulting to 1000 [ 2535.356397][ T718] syzkaller0: entered promiscuous mode [ 2535.378008][ T718] syzkaller0: entered allmulticast mode [ 2536.336780][ T684] lo speed is unknown, defaulting to 1000 [ 2536.669831][T17491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2536.689237][T17491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2536.717132][T17491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2536.799801][T17491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2536.827528][T17491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2537.463443][ T726] lo speed is unknown, defaulting to 1000 [ 2537.676012][ T745] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19409'. [ 2537.797213][ T745] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 2537.807602][ T745] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 2537.823367][ T747] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19409'. [ 2538.022523][ T752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19410'. [ 2538.267726][ T753] bond3: entered promiscuous mode [ 2538.301983][ T733] lo speed is unknown, defaulting to 1000 [ 2538.763143][ T766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19414'. [ 2538.855515][ T767] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19414'. [ 2538.960229][T17491] Bluetooth: hci1: command tx timeout [ 2539.268796][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2540.217299][ T733] chnl_net:caif_netlink_parms(): no params data found [ 2540.437151][ T756] lo speed is unknown, defaulting to 1000 [ 2540.866247][ T733] bridge0: port 1(bridge_slave_0) entered blocking state [ 2540.907616][ T733] bridge0: port 1(bridge_slave_0) entered disabled state [ 2540.925184][ T733] bridge_slave_0: entered allmulticast mode [ 2540.942964][ T733] bridge_slave_0: entered promiscuous mode [ 2540.961324][ T733] bridge0: port 2(bridge_slave_1) entered blocking state [ 2540.988338][ T733] bridge0: port 2(bridge_slave_1) entered disabled state [ 2540.995809][ T733] bridge_slave_1: entered allmulticast mode [ 2541.029700][T17491] Bluetooth: hci1: command tx timeout [ 2541.037647][ T733] bridge_slave_1: entered promiscuous mode [ 2541.197626][ T733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2541.232966][ T733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2541.384995][ T775] lo speed is unknown, defaulting to 1000 [ 2541.448920][ T733] team0: Port device team_slave_0 added [ 2541.489475][ T733] team0: Port device team_slave_1 added [ 2541.764761][ T733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2541.789103][ T733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2541.832002][ T733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2541.860720][ T733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2541.869804][ T733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2541.897466][ T733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2542.336797][ T733] hsr_slave_0: entered promiscuous mode [ 2542.370672][ T733] hsr_slave_1: entered promiscuous mode [ 2542.389585][ T733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2542.397216][ T733] Cannot create hsr debugfs directory [ 2542.935678][ T816] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2542.969442][ T816] bridge0: port 2(bridge_slave_1) entered disabled state [ 2542.978876][ T816] bridge0: port 1(bridge_slave_0) entered disabled state [ 2543.110737][T17491] Bluetooth: hci1: command tx timeout [ 2543.931976][ T733] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2543.975058][ T733] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2544.010875][ T733] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2544.081660][ T813] lo speed is unknown, defaulting to 1000 [ 2544.082323][ T733] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2544.557329][ T733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2544.630308][ T733] 8021q: adding VLAN 0 to HW filter on device team0 [ 2544.674825][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 2544.682104][ T8061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2544.742508][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 2544.749912][ T8061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2544.855878][ T733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2544.902723][ T733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2545.086245][ T821] lo speed is unknown, defaulting to 1000 [ 2545.190588][T17491] Bluetooth: hci1: command tx timeout [ 2545.335781][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19431'. [ 2545.587693][ T733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2546.096748][ T824] lo speed is unknown, defaulting to 1000 [ 2546.466942][ T836] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2546.767746][ T874] xt_hashlimit: size too large, truncated to 1048576 [ 2546.975944][ T733] veth0_vlan: entered promiscuous mode [ 2547.043197][ T733] veth1_vlan: entered promiscuous mode [ 2547.334702][ T733] veth0_macvtap: entered promiscuous mode [ 2547.372791][ T733] veth1_macvtap: entered promiscuous mode [ 2547.447042][ T733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2547.500874][ T733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2547.562255][T15826] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2547.624936][T15826] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2547.664118][T15826] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2547.710966][T15826] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2548.049176][T15826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2548.057057][T15826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2548.314563][ T8114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2548.351432][ T8114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2548.465985][ T889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19439'. [ 2548.713947][ T893] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19440'. [ 2548.742507][ T893] netlink: 64 bytes leftover after parsing attributes in process `syz.5.19440'. [ 2548.779142][ T893] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19440'. [ 2548.845150][ T893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19440'. [ 2548.962854][ T893] bridge_slave_0: left allmulticast mode [ 2548.975883][ T893] bridge_slave_0: left promiscuous mode [ 2548.988176][ T893] bridge0: port 1(bridge_slave_0) entered disabled state [ 2549.042475][ T893] bridge_slave_1: left allmulticast mode [ 2549.048878][ T893] bridge_slave_1: left promiscuous mode [ 2549.059982][ T893] bridge0: port 2(bridge_slave_1) entered disabled state [ 2549.140119][ T893] bond0: (slave bond_slave_0): Releasing backup interface [ 2549.148829][ T902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19441'. [ 2549.165121][ T893] bond0: (slave bond_slave_1): Releasing backup interface [ 2549.227130][ T893] team0: Port device team_slave_0 removed [ 2549.261454][ T893] team0: Port device team_slave_1 removed [ 2549.275445][ T893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2549.294683][ T893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2549.326245][ T905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2549.352358][ T893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2549.374254][ T893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2549.615752][ T896] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 2549.711125][ T884] lo speed is unknown, defaulting to 1000 [ 2550.732642][ T953] FAULT_INJECTION: forcing a failure. [ 2550.732642][ T953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2550.795564][ T955] FAULT_INJECTION: forcing a failure. [ 2550.795564][ T955] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.809581][ T953] CPU: 1 UID: 0 PID: 953 Comm: syz.5.19454 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2550.809613][ T953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2550.809627][ T953] Call Trace: [ 2550.809636][ T953] [ 2550.809646][ T953] dump_stack_lvl+0x189/0x250 [ 2550.809677][ T953] ? __pfx____ratelimit+0x10/0x10 [ 2550.809704][ T953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2550.809725][ T953] ? __pfx__printk+0x10/0x10 [ 2550.809759][ T953] should_fail_ex+0x414/0x560 [ 2550.809781][ T953] _copy_to_user+0x31/0xb0 [ 2550.809807][ T953] simple_read_from_buffer+0xe1/0x170 [ 2550.809838][ T953] proc_fail_nth_read+0x1df/0x250 [ 2550.809857][ T953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2550.809877][ T953] ? rw_verify_area+0x258/0x650 [ 2550.809898][ T953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2550.809922][ T953] vfs_read+0x200/0x980 [ 2550.809950][ T953] ? __pfx___mutex_lock+0x10/0x10 [ 2550.809967][ T953] ? __pfx_vfs_read+0x10/0x10 [ 2550.809991][ T953] ? __fget_files+0x2a/0x420 [ 2550.810010][ T953] ? __fget_files+0x3a0/0x420 [ 2550.810024][ T953] ? __fget_files+0x2a/0x420 [ 2550.810047][ T953] ksys_read+0x145/0x250 [ 2550.810072][ T953] ? __pfx_ksys_read+0x10/0x10 [ 2550.810099][ T953] ? do_syscall_64+0xbe/0x3b0 [ 2550.810119][ T953] do_syscall_64+0xfa/0x3b0 [ 2550.810134][ T953] ? lockdep_hardirqs_on+0x9c/0x150 [ 2550.810159][ T953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2550.810177][ T953] ? clear_bhb_loop+0x60/0xb0 [ 2550.810197][ T953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2550.810214][ T953] RIP: 0033:0x7f57b9d8d3bc [ 2550.810230][ T953] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2550.810245][ T953] RSP: 002b:00007f57bacd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2550.810264][ T953] RAX: ffffffffffffffda RBX: 00007f57b9fb5fa0 RCX: 00007f57b9d8d3bc [ 2550.810278][ T953] RDX: 000000000000000f RSI: 00007f57bacd50a0 RDI: 0000000000000004 [ 2550.810304][ T953] RBP: 00007f57bacd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2550.810322][ T953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2550.810340][ T953] R13: 0000000000000000 R14: 00007f57b9fb5fa0 R15: 00007ffd0dd9ce38 [ 2550.810368][ T953] [ 2550.828003][ T955] CPU: 0 UID: 0 PID: 955 Comm: syz.4.19453 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2550.828043][ T955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2550.828060][ T955] Call Trace: [ 2550.828072][ T955] [ 2550.828084][ T955] dump_stack_lvl+0x189/0x250 [ 2550.828121][ T955] ? __pfx____ratelimit+0x10/0x10 [ 2550.828159][ T955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2550.828188][ T955] ? __pfx__printk+0x10/0x10 [ 2550.828223][ T955] ? __pfx___might_resched+0x10/0x10 [ 2550.828298][ T955] ? fs_reclaim_acquire+0x7d/0x100 [ 2550.828327][ T955] should_fail_ex+0x414/0x560 [ 2550.828364][ T955] should_failslab+0xa8/0x100 [ 2550.828402][ T955] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2550.828444][ T955] ? can_rx_register+0x16d/0x790 [ 2550.828476][ T955] can_rx_register+0x16d/0x790 [ 2550.828500][ T955] ? __pfx_raw_rcv+0x10/0x10 [ 2550.828531][ T955] raw_enable_filters+0x98/0x200 [ 2550.828568][ T955] raw_setsockopt+0xbd4/0x1160 [ 2550.828610][ T955] ? __pfx_aa_sk_perm+0x10/0x10 [ 2550.828647][ T955] ? __pfx_raw_setsockopt+0x10/0x10 [ 2550.828674][ T955] ? __fget_files+0x2a/0x420 [ 2550.828698][ T955] ? aa_sock_opt_perm+0x74/0x110 [ 2550.828725][ T955] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2550.828750][ T955] ? __pfx_raw_setsockopt+0x10/0x10 [ 2550.828779][ T955] do_sock_setsockopt+0x179/0x1b0 [ 2550.828813][ T955] __x64_sys_setsockopt+0x13f/0x1b0 [ 2550.828846][ T955] do_syscall_64+0xfa/0x3b0 [ 2550.828869][ T955] ? lockdep_hardirqs_on+0x9c/0x150 [ 2550.828903][ T955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2550.828927][ T955] ? clear_bhb_loop+0x60/0xb0 [ 2550.828957][ T955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2550.828981][ T955] RIP: 0033:0x7fe04698e9a9 [ 2550.829002][ T955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2550.829022][ T955] RSP: 002b:00007fe04772c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2550.829050][ T955] RAX: ffffffffffffffda RBX: 00007fe046bb5fa0 RCX: 00007fe04698e9a9 [ 2550.829068][ T955] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000004 [ 2550.829083][ T955] RBP: 00007fe04772c090 R08: 0000000000000f00 R09: 0000000000000000 [ 2550.829099][ T955] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 2550.829115][ T955] R13: 0000000000000000 R14: 00007fe046bb5fa0 R15: 00007ffda5b35358 [ 2550.829155][ T955] [ 2551.539277][ T974] netlink: 180 bytes leftover after parsing attributes in process `syz.5.19458'. [ 2552.006043][ T969] lo speed is unknown, defaulting to 1000 [ 2552.727474][ T1009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19464'. [ 2552.757169][ T1009] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2552.854150][ T1013] FAULT_INJECTION: forcing a failure. [ 2552.854150][ T1013] name failslab, interval 1, probability 0, space 0, times 0 [ 2552.870300][ T1013] CPU: 1 UID: 0 PID: 1013 Comm: syz.5.19465 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2552.870334][ T1013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2552.870348][ T1013] Call Trace: [ 2552.870358][ T1013] [ 2552.870368][ T1013] dump_stack_lvl+0x189/0x250 [ 2552.870400][ T1013] ? __pfx____ratelimit+0x10/0x10 [ 2552.870433][ T1013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2552.870459][ T1013] ? __pfx__printk+0x10/0x10 [ 2552.870490][ T1013] ? __pfx___might_resched+0x10/0x10 [ 2552.870516][ T1013] ? fs_reclaim_acquire+0x7d/0x100 [ 2552.870543][ T1013] should_fail_ex+0x414/0x560 [ 2552.870571][ T1013] should_failslab+0xa8/0x100 [ 2552.870604][ T1013] __kmalloc_noprof+0xcb/0x4f0 [ 2552.870631][ T1013] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2552.870653][ T1013] ? sock_kmalloc+0xd6/0x160 [ 2552.870685][ T1013] sock_kmalloc+0xd6/0x160 [ 2552.870714][ T1013] hash_recvmsg+0x1d4/0x840 [ 2552.870744][ T1013] ? __pfx_hash_recvmsg+0x10/0x10 [ 2552.870768][ T1013] sock_recvmsg_nosec+0x186/0x1c0 [ 2552.870803][ T1013] ____sys_recvmsg+0x3aa/0x460 [ 2552.870839][ T1013] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2552.870883][ T1013] ? import_iovec+0x74/0xa0 [ 2552.870917][ T1013] ___sys_recvmsg+0x1b5/0x510 [ 2552.870949][ T1013] ? __pfx____sys_recvmsg+0x10/0x10 [ 2552.871011][ T1013] ? __might_fault+0xb0/0x130 [ 2552.871044][ T1013] do_recvmmsg+0x307/0x770 [ 2552.871105][ T1013] ? __pfx_do_recvmmsg+0x10/0x10 [ 2552.871146][ T1013] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2552.871189][ T1013] __x64_sys_recvmmsg+0x190/0x240 [ 2552.871218][ T1013] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2552.871241][ T1013] ? rcu_is_watching+0x15/0xb0 [ 2552.871272][ T1013] ? do_syscall_64+0xbe/0x3b0 [ 2552.871297][ T1013] do_syscall_64+0xfa/0x3b0 [ 2552.871316][ T1013] ? lockdep_hardirqs_on+0x9c/0x150 [ 2552.871353][ T1013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2552.871374][ T1013] ? clear_bhb_loop+0x60/0xb0 [ 2552.871400][ T1013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2552.871421][ T1013] RIP: 0033:0x7f57b9d8e9a9 [ 2552.871441][ T1013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2552.871459][ T1013] RSP: 002b:00007f57bacd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2552.871482][ T1013] RAX: ffffffffffffffda RBX: 00007f57b9fb5fa0 RCX: 00007f57b9d8e9a9 [ 2552.871497][ T1013] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000007 [ 2552.871511][ T1013] RBP: 00007f57bacd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2552.871524][ T1013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2552.871536][ T1013] R13: 0000000000000000 R14: 00007f57b9fb5fa0 R15: 00007ffd0dd9ce38 [ 2552.871571][ T1013] [ 2553.949214][ T1032] netlink: 44 bytes leftover after parsing attributes in process `syz.5.19470'. [ 2554.690583][ T1054] Cannot find set identified by id 0 to match [ 2554.860067][ T981] lo speed is unknown, defaulting to 1000 [ 2555.383288][ T1067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19477'. [ 2555.767735][ T984] lo speed is unknown, defaulting to 1000 [ 2556.047665][ T1074] netlink: 44 bytes leftover after parsing attributes in process `syz.6.19483'. [ 2556.540585][ T1049] lo speed is unknown, defaulting to 1000 [ 2556.755800][ T1082] pim6reg: entered allmulticast mode [ 2556.777093][ T1085] pim6reg: left allmulticast mode [ 2557.390432][ T1101] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19492'. [ 2557.526882][ T1103] FAULT_INJECTION: forcing a failure. [ 2557.526882][ T1103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2557.542069][ T1103] CPU: 1 UID: 0 PID: 1103 Comm: syz.0.19493 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2557.542100][ T1103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2557.542114][ T1103] Call Trace: [ 2557.542123][ T1103] [ 2557.542132][ T1103] dump_stack_lvl+0x189/0x250 [ 2557.542164][ T1103] ? __pfx____ratelimit+0x10/0x10 [ 2557.542195][ T1103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2557.542221][ T1103] ? __pfx__printk+0x10/0x10 [ 2557.542264][ T1103] should_fail_ex+0x414/0x560 [ 2557.542291][ T1103] _copy_to_user+0x31/0xb0 [ 2557.542322][ T1103] simple_read_from_buffer+0xe1/0x170 [ 2557.542358][ T1103] proc_fail_nth_read+0x1df/0x250 [ 2557.542383][ T1103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2557.542408][ T1103] ? rw_verify_area+0x258/0x650 [ 2557.542434][ T1103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2557.542457][ T1103] vfs_read+0x200/0x980 [ 2557.542491][ T1103] ? __pfx___mutex_lock+0x10/0x10 [ 2557.542513][ T1103] ? __pfx_vfs_read+0x10/0x10 [ 2557.542542][ T1103] ? __fget_files+0x2a/0x420 [ 2557.542566][ T1103] ? __fget_files+0x3a0/0x420 [ 2557.542584][ T1103] ? __fget_files+0x2a/0x420 [ 2557.542613][ T1103] ksys_read+0x145/0x250 [ 2557.542645][ T1103] ? __pfx_ksys_read+0x10/0x10 [ 2557.542679][ T1103] ? do_syscall_64+0xbe/0x3b0 [ 2557.542705][ T1103] do_syscall_64+0xfa/0x3b0 [ 2557.542724][ T1103] ? lockdep_hardirqs_on+0x9c/0x150 [ 2557.542756][ T1103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2557.542776][ T1103] ? clear_bhb_loop+0x60/0xb0 [ 2557.542803][ T1103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2557.542823][ T1103] RIP: 0033:0x7fea6f58d3bc [ 2557.542842][ T1103] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2557.542860][ T1103] RSP: 002b:00007fea70368030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2557.542883][ T1103] RAX: ffffffffffffffda RBX: 00007fea6f7b5fa0 RCX: 00007fea6f58d3bc [ 2557.542899][ T1103] RDX: 000000000000000f RSI: 00007fea703680a0 RDI: 0000000000000004 [ 2557.542913][ T1103] RBP: 00007fea70368090 R08: 0000000000000000 R09: 0000000000000000 [ 2557.542925][ T1103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2557.542938][ T1103] R13: 0000000000000000 R14: 00007fea6f7b5fa0 R15: 00007fffc41678c8 [ 2557.542980][ T1103] [ 2558.689991][ T1116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19494'. [ 2559.691464][ T1105] lo speed is unknown, defaulting to 1000 [ 2560.267743][ T1093] lo speed is unknown, defaulting to 1000 [ 2562.393008][ T1131] lo speed is unknown, defaulting to 1000 [ 2564.445641][ T1184] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19520'. [ 2564.675004][ T1178] lo speed is unknown, defaulting to 1000 [ 2564.687737][ T1188] netlink: 'syz.0.19523': attribute type 4 has an invalid length. [ 2564.729615][ T1188] netlink: 'syz.0.19523': attribute type 4 has an invalid length. [ 2565.258133][ T1198] tipc: Enabling of bearer rejected, failed to enable media [ 2565.288714][ T1198] syzkaller0: entered promiscuous mode [ 2565.294335][ T1198] syzkaller0: entered allmulticast mode [ 2566.250934][ T1208] netlink: 'syz.6.19529': attribute type 4 has an invalid length. [ 2566.275331][ T1208] netlink: 152 bytes leftover after parsing attributes in process `syz.6.19529'. [ 2566.349452][ T1208] : renamed from bond0 (while UP) [ 2566.856638][ T1220] netlink: 'syz.6.19534': attribute type 2 has an invalid length. [ 2566.877888][ T1220] netlink: 'syz.6.19534': attribute type 1 has an invalid length. [ 2566.885764][ T1220] netlink: 152 bytes leftover after parsing attributes in process `syz.6.19534'. [ 2567.132692][ T1226] netlink: 32 bytes leftover after parsing attributes in process `syz.6.19537'. [ 2567.436366][ T1237] netlink: 180 bytes leftover after parsing attributes in process `syz.4.19541'. [ 2568.050097][ T1262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19548'. [ 2568.077979][ T1262] netlink: 'syz.0.19548': attribute type 1 has an invalid length. [ 2568.222157][ T1266] netlink: 256 bytes leftover after parsing attributes in process `syz.0.19549'. [ 2568.258981][ T1266] netlink: 'syz.0.19549': attribute type 13 has an invalid length. [ 2568.277323][ T1266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19549'. [ 2568.474591][ T1267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19546'. [ 2568.587334][ T1267] vlan2: entered promiscuous mode [ 2568.612480][ T1267] bond0: entered promiscuous mode [ 2568.849312][ T1255] lo speed is unknown, defaulting to 1000 [ 2569.787029][ T1283] lo speed is unknown, defaulting to 1000 [ 2570.389739][T20292] Bluetooth: hci1: command 0x0405 tx timeout [ 2570.786418][ T1317] vxcan2: entered promiscuous mode [ 2571.381933][ T1330] netlink: 'syz.4.19566': attribute type 3 has an invalid length. [ 2571.390508][ T1330] netlink: 'syz.4.19566': attribute type 3 has an invalid length. [ 2571.540584][ T1332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19567'. [ 2572.143165][ T1324] lo speed is unknown, defaulting to 1000 [ 2572.602568][ T1350] netlink: 'syz.6.19573': attribute type 1 has an invalid length. [ 2572.625898][ T1350] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.19573'. [ 2573.034135][ T1359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19577'. [ 2573.054020][ T1359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19577'. [ 2573.125747][ T1359] gtp0: entered promiscuous mode [ 2573.149076][ T1359] gtp0: entered allmulticast mode [ 2574.055974][ T1395] netlink: 14 bytes leftover after parsing attributes in process `syz.5.19586'. [ 2574.892033][ T1395] bond0 (unregistering): Released all slaves [ 2574.973991][ T1378] lo speed is unknown, defaulting to 1000 [ 2575.296908][ T1421] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2575.662052][ T1436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19594'. [ 2575.887548][ T1445] xt_hashlimit: max too large, truncated to 1048576 [ 2575.954326][ T1384] lo speed is unknown, defaulting to 1000 [ 2576.061396][ T1447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19597'. [ 2576.234708][ T1451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2576.899876][ T1464] netlink: 32 bytes leftover after parsing attributes in process `syz.5.19605'. [ 2577.910657][ T1488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19610'. [ 2577.936865][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19610'. [ 2577.968319][ T1490] bridge0: port 3(syz_tun) entered blocking state [ 2577.982492][ T1488] netlink: 'syz.0.19610': attribute type 14 has an invalid length. [ 2578.007994][ T1490] bridge0: port 3(syz_tun) entered disabled state [ 2578.028702][ T1490] syz_tun: entered allmulticast mode [ 2578.074284][ T1490] syz_tun: entered promiscuous mode [ 2578.324039][ T1467] lo speed is unknown, defaulting to 1000 [ 2578.561252][ T1497] netlink: 'syz.4.19614': attribute type 1 has an invalid length. [ 2578.996719][T20292] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2579.024456][T20292] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2579.034082][T20292] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2579.055924][T20292] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2579.070262][T20292] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2579.865308][ T1532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19622'. [ 2579.977062][ T1512] lo speed is unknown, defaulting to 1000 [ 2579.989469][ T1537] tipc: Enabling of bearer rejected, failed to enable media [ 2580.007431][ T1532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19622'. [ 2580.756187][ T1561] netlink: 'syz.0.19630': attribute type 2 has an invalid length. [ 2580.814161][ T1561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19630'. [ 2581.108470][T17491] Bluetooth: hci7: command tx timeout [ 2581.993086][ T1512] chnl_net:caif_netlink_parms(): no params data found [ 2582.542181][ T1512] bridge0: port 1(bridge_slave_0) entered blocking state [ 2582.553821][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state [ 2582.577704][ T1512] bridge_slave_0: entered allmulticast mode [ 2582.607617][ T1512] bridge_slave_0: entered promiscuous mode [ 2582.630356][ T1512] bridge0: port 2(bridge_slave_1) entered blocking state [ 2582.661468][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state [ 2582.675728][ T1512] bridge_slave_1: entered allmulticast mode [ 2582.686810][ T1603] netlink: 'syz.5.19639': attribute type 10 has an invalid length. [ 2582.687653][ T1512] bridge_slave_1: entered promiscuous mode [ 2582.718517][ T1603] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19639'. [ 2582.775542][ T1606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19641'. [ 2582.876827][ T1603] bridge0: port 1(batadv0) entered blocking state [ 2582.886035][ T1603] bridge0: port 1(batadv0) entered disabled state [ 2582.919409][ T1603] batadv0: entered allmulticast mode [ 2582.942717][ T1603] batadv0: entered promiscuous mode [ 2582.960567][T32555] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2582.970841][T32555] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2582.989555][ T1603] bridge0: port 1(batadv0) entered blocking state [ 2582.996148][ T1603] bridge0: port 1(batadv0) entered forwarding state [ 2583.105452][ T1512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2583.165111][ T1512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2583.198417][T17491] Bluetooth: hci7: command tx timeout [ 2583.290262][ T1512] team0: Port device team_slave_0 added [ 2583.327293][ T1512] team0: Port device team_slave_1 added [ 2583.569617][ T1512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2583.604312][ T1512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2583.653247][ T1512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2583.672242][ T1512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2583.712621][ T1512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2583.786197][ T1512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2584.037203][ T1512] hsr_slave_0: entered promiscuous mode [ 2584.071755][ T1512] hsr_slave_1: entered promiscuous mode [ 2584.086034][ T1512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2584.089671][ T1639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19648'. [ 2584.103404][ T1512] Cannot create hsr debugfs directory [ 2584.364818][ T1619] lo speed is unknown, defaulting to 1000 [ 2584.654965][ T1652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19652'. [ 2585.129406][ T1615] lo speed is unknown, defaulting to 1000 [ 2585.271569][T17491] Bluetooth: hci7: command tx timeout [ 2585.489893][ T1512] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2585.641350][ T1512] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2585.679824][ T1512] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2585.681543][ T1668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19656'. [ 2585.702578][ T1512] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2585.821326][ T1668] netlink: 'syz.6.19656': attribute type 1 has an invalid length. [ 2585.831362][ T1668] netlink: 32 bytes leftover after parsing attributes in process `syz.6.19656'. [ 2585.848546][ T1668] bridge0: port 2(bridge_slave_1) entered disabled state [ 2585.856266][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 2585.863519][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2586.247648][ T1671] netlink: 240 bytes leftover after parsing attributes in process `syz.5.19657'. [ 2586.258414][ T1671] netlink: 48 bytes leftover after parsing attributes in process `syz.5.19657'. [ 2586.430829][ T1512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2586.485319][ T1512] 8021q: adding VLAN 0 to HW filter on device team0 [ 2586.506863][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 2586.514133][ T8114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2586.594998][T15796] bridge0: port 2(bridge_slave_1) entered blocking state [ 2586.602263][T15796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2586.925690][ T1685] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19659'. [ 2587.349142][T17491] Bluetooth: hci7: command tx timeout [ 2587.442663][ T1694] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19661'. [ 2587.501673][ T1512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2588.283482][ T1710] netlink: 'syz.0.19663': attribute type 20 has an invalid length. [ 2588.350043][ T1713] FAULT_INJECTION: forcing a failure. [ 2588.350043][ T1713] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2588.409618][ T1713] CPU: 1 UID: 0 PID: 1713 Comm: syz.6.19664 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2588.409653][ T1713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2588.409666][ T1713] Call Trace: [ 2588.409677][ T1713] [ 2588.409687][ T1713] dump_stack_lvl+0x189/0x250 [ 2588.409718][ T1713] ? __pfx____ratelimit+0x10/0x10 [ 2588.409751][ T1713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2588.409777][ T1713] ? __pfx__printk+0x10/0x10 [ 2588.409808][ T1713] ? fs_reclaim_acquire+0x7d/0x100 [ 2588.409839][ T1713] should_fail_ex+0x414/0x560 [ 2588.409867][ T1713] prepare_alloc_pages+0x213/0x610 [ 2588.409898][ T1713] __alloc_frozen_pages_noprof+0x123/0x370 [ 2588.409933][ T1713] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2588.409977][ T1713] alloc_pages_bulk_noprof+0x560/0x710 [ 2588.410008][ T1713] ? alloc_pages_noprof+0xbe/0x190 [ 2588.410044][ T1713] kasan_populate_vmalloc+0xba/0x1a0 [ 2588.410076][ T1713] alloc_vmap_area+0xd51/0x1490 [ 2588.410124][ T1713] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2588.410153][ T1713] ? __kasan_kmalloc+0x93/0xb0 [ 2588.410183][ T1713] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 2588.410213][ T1713] ? __sys_bpf+0x67e/0x860 [ 2588.410242][ T1713] ? __get_vm_area_node+0x13f/0x300 [ 2588.410271][ T1713] ? dev_map_alloc+0x146/0x540 [ 2588.410291][ T1713] __get_vm_area_node+0x1f8/0x300 [ 2588.410329][ T1713] __vmalloc_node_range_noprof+0x301/0x12f0 [ 2588.410362][ T1713] ? dev_map_alloc+0x146/0x540 [ 2588.410415][ T1713] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2588.410446][ T1713] ? rcu_is_watching+0x15/0xb0 [ 2588.410472][ T1713] ? trace_kmalloc+0x1f/0xd0 [ 2588.410496][ T1713] ? __kmalloc_node_noprof+0x293/0x4e0 [ 2588.410524][ T1713] ? bpf_map_area_alloc+0x64/0x180 [ 2588.410549][ T1713] bpf_map_area_alloc+0x12d/0x180 [ 2588.410571][ T1713] ? dev_map_alloc+0x146/0x540 [ 2588.410594][ T1713] dev_map_alloc+0x146/0x540 [ 2588.410619][ T1713] map_create+0xaa3/0x1310 [ 2588.410662][ T1713] ? security_bpf+0x7e/0x300 [ 2588.410685][ T1713] __sys_bpf+0x67e/0x860 [ 2588.410720][ T1713] ? __pfx___sys_bpf+0x10/0x10 [ 2588.410766][ T1713] ? ksys_write+0x22a/0x250 [ 2588.410797][ T1713] ? __pfx_ksys_write+0x10/0x10 [ 2588.410834][ T1713] __x64_sys_bpf+0x7c/0x90 [ 2588.410869][ T1713] do_syscall_64+0xfa/0x3b0 [ 2588.410888][ T1713] ? lockdep_hardirqs_on+0x9c/0x150 [ 2588.410919][ T1713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2588.410947][ T1713] ? clear_bhb_loop+0x60/0xb0 [ 2588.410973][ T1713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2588.410993][ T1713] RIP: 0033:0x7fa0aff8e9a9 [ 2588.411012][ T1713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2588.411030][ T1713] RSP: 002b:00007fa0b0dcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2588.411053][ T1713] RAX: ffffffffffffffda RBX: 00007fa0b01b5fa0 RCX: 00007fa0aff8e9a9 [ 2588.411070][ T1713] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 2588.411083][ T1713] RBP: 00007fa0b0dcb090 R08: 0000000000000000 R09: 0000000000000000 [ 2588.411097][ T1713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2588.411110][ T1713] R13: 0000000000000001 R14: 00007fa0b01b5fa0 R15: 00007fffb98c5088 [ 2588.411144][ T1713] [ 2588.755387][ T1512] veth0_vlan: entered promiscuous mode [ 2588.771693][ T1512] veth1_vlan: entered promiscuous mode [ 2589.051466][ T1512] veth0_macvtap: entered promiscuous mode [ 2589.296875][ T1512] veth1_macvtap: entered promiscuous mode [ 2589.532487][ T1732] syzkaller0: entered promiscuous mode [ 2589.565095][ T1732] syzkaller0: entered allmulticast mode [ 2589.629398][ T1512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2589.653280][ T1512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2590.477651][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2593.139125][T15826] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2593.178796][T15826] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2593.230012][T15826] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2593.251331][T15826] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2593.518614][T32555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2593.559752][T32555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2593.560573][ T1763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19674'. [ 2593.648183][T15826] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2593.685558][T15826] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2593.704695][T15826] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2593.727297][T32555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2593.736871][T15826] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2593.746481][T32555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2593.749513][ T1763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19674'. [ 2594.125961][ T1752] lo speed is unknown, defaulting to 1000 [ 2594.388966][ T1787] FAULT_INJECTION: forcing a failure. [ 2594.388966][ T1787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2594.416263][ T1787] CPU: 0 UID: 0 PID: 1787 Comm: syz.7.19678 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2594.416296][ T1787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2594.416310][ T1787] Call Trace: [ 2594.416320][ T1787] [ 2594.416330][ T1787] dump_stack_lvl+0x189/0x250 [ 2594.416360][ T1787] ? __pfx____ratelimit+0x10/0x10 [ 2594.416393][ T1787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2594.416419][ T1787] ? __pfx__printk+0x10/0x10 [ 2594.416462][ T1787] should_fail_ex+0x414/0x560 [ 2594.416491][ T1787] _copy_to_user+0x31/0xb0 [ 2594.416522][ T1787] simple_read_from_buffer+0xe1/0x170 [ 2594.416559][ T1787] proc_fail_nth_read+0x1df/0x250 [ 2594.416584][ T1787] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2594.416609][ T1787] ? rw_verify_area+0x258/0x650 [ 2594.416636][ T1787] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2594.416659][ T1787] vfs_read+0x200/0x980 [ 2594.416699][ T1787] ? __pfx___mutex_lock+0x10/0x10 [ 2594.416721][ T1787] ? __pfx_vfs_read+0x10/0x10 [ 2594.416750][ T1787] ? __fget_files+0x2a/0x420 [ 2594.416774][ T1787] ? __fget_files+0x3a0/0x420 [ 2594.416791][ T1787] ? __fget_files+0x2a/0x420 [ 2594.416820][ T1787] ksys_read+0x145/0x250 [ 2594.416851][ T1787] ? __pfx_ksys_read+0x10/0x10 [ 2594.416875][ T1787] ? rcu_is_watching+0x15/0xb0 [ 2594.416906][ T1787] ? do_syscall_64+0xbe/0x3b0 [ 2594.416931][ T1787] do_syscall_64+0xfa/0x3b0 [ 2594.416949][ T1787] ? lockdep_hardirqs_on+0x9c/0x150 [ 2594.416979][ T1787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2594.417001][ T1787] ? clear_bhb_loop+0x60/0xb0 [ 2594.417032][ T1787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2594.417053][ T1787] RIP: 0033:0x7f95b218d3bc [ 2594.417072][ T1787] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2594.417090][ T1787] RSP: 002b:00007f95b3053030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2594.417112][ T1787] RAX: ffffffffffffffda RBX: 00007f95b23b5fa0 RCX: 00007f95b218d3bc [ 2594.417127][ T1787] RDX: 000000000000000f RSI: 00007f95b30530a0 RDI: 0000000000000005 [ 2594.417140][ T1787] RBP: 00007f95b3053090 R08: 0000000000000000 R09: 0000000000000000 [ 2594.417153][ T1787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2594.417166][ T1787] R13: 0000000000000000 R14: 00007f95b23b5fa0 R15: 00007fff44171908 [ 2594.417201][ T1787] [ 2594.431876][ T1785] tipc: Started in network mode [ 2594.764755][ T1785] tipc: Node identity e68dbfa41369, cluster identity 4711 [ 2594.790765][ T1785] tipc: Enabled bearer , priority 0 [ 2594.814680][ T1788] syzkaller0: entered promiscuous mode [ 2594.834384][ T1788] syzkaller0: entered allmulticast mode [ 2595.007177][ T1789] tipc: Resetting bearer [ 2595.019991][ T1788] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19677'. [ 2595.084709][ T1784] tipc: Resetting bearer [ 2595.217224][ T1784] tipc: Disabling bearer [ 2596.068293][ T1814] lo speed is unknown, defaulting to 1000 [ 2596.833620][ T1838] wireguard0: entered promiscuous mode [ 2596.855177][ T1838] wireguard0: entered allmulticast mode [ 2597.160568][ T1845] netlink: 180 bytes leftover after parsing attributes in process `syz.6.19691'. [ 2597.872058][ T1858] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 2599.187554][ T1884] FAULT_INJECTION: forcing a failure. [ 2599.187554][ T1884] name failslab, interval 1, probability 0, space 0, times 0 [ 2599.246971][ T1884] CPU: 1 UID: 0 PID: 1884 Comm: syz.7.19702 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2599.247003][ T1884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2599.247017][ T1884] Call Trace: [ 2599.247032][ T1884] [ 2599.247042][ T1884] dump_stack_lvl+0x189/0x250 [ 2599.247073][ T1884] ? __pfx____ratelimit+0x10/0x10 [ 2599.247105][ T1884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2599.247130][ T1884] ? __pfx__printk+0x10/0x10 [ 2599.247166][ T1884] ? __pfx___might_resched+0x10/0x10 [ 2599.247189][ T1884] ? fs_reclaim_acquire+0x7d/0x100 [ 2599.247214][ T1884] should_fail_ex+0x414/0x560 [ 2599.247242][ T1884] should_failslab+0xa8/0x100 [ 2599.247274][ T1884] __kmalloc_noprof+0xcb/0x4f0 [ 2599.247302][ T1884] ? security_sk_alloc+0x52/0x390 [ 2599.247335][ T1884] security_sk_alloc+0x52/0x390 [ 2599.247366][ T1884] sk_prot_alloc+0x101/0x220 [ 2599.247387][ T1884] ? sk_alloc+0x24/0x370 [ 2599.247410][ T1884] sk_alloc+0x3a/0x370 [ 2599.247430][ T1884] ? bpf_ctx_init+0x167/0x1d0 [ 2599.247463][ T1884] bpf_prog_test_run_skb+0x2ed/0x1560 [ 2599.247494][ T1884] ? __fget_files+0x2a/0x420 [ 2599.247528][ T1884] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2599.247560][ T1884] bpf_prog_test_run+0x2c4/0x340 [ 2599.247586][ T1884] __sys_bpf+0x4a4/0x860 [ 2599.247619][ T1884] ? __pfx___sys_bpf+0x10/0x10 [ 2599.247663][ T1884] ? ksys_write+0x22a/0x250 [ 2599.247693][ T1884] ? __pfx_ksys_write+0x10/0x10 [ 2599.247716][ T1884] ? rcu_is_watching+0x15/0xb0 [ 2599.247749][ T1884] __x64_sys_bpf+0x7c/0x90 [ 2599.247780][ T1884] do_syscall_64+0xfa/0x3b0 [ 2599.247799][ T1884] ? lockdep_hardirqs_on+0x9c/0x150 [ 2599.247828][ T1884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2599.247847][ T1884] ? clear_bhb_loop+0x60/0xb0 [ 2599.247870][ T1884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2599.247889][ T1884] RIP: 0033:0x7f95b218e9a9 [ 2599.247908][ T1884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2599.247925][ T1884] RSP: 002b:00007f95b3053038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2599.247946][ T1884] RAX: ffffffffffffffda RBX: 00007f95b23b5fa0 RCX: 00007f95b218e9a9 [ 2599.247962][ T1884] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 2599.247975][ T1884] RBP: 00007f95b3053090 R08: 0000000000000000 R09: 0000000000000000 [ 2599.247988][ T1884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2599.248001][ T1884] R13: 0000000000000000 R14: 00007f95b23b5fa0 R15: 00007fff44171908 [ 2599.248042][ T1884] [ 2599.529744][ T1886] netlink: 'syz.4.19703': attribute type 3 has an invalid length. [ 2599.537622][ T1886] netlink: 666 bytes leftover after parsing attributes in process `syz.4.19703'. [ 2599.594091][ T1865] lo speed is unknown, defaulting to 1000 [ 2599.881768][ T1898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19697'. [ 2600.564181][ T1870] lo speed is unknown, defaulting to 1000 [ 2601.038548][ T1909] netlink: 'syz.4.19711': attribute type 4 has an invalid length. [ 2601.077434][ T1909] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19711'. [ 2601.097761][ T1912] netlink: 40 bytes leftover after parsing attributes in process `syz.7.19712'. [ 2601.656973][ T1878] lo speed is unknown, defaulting to 1000 [ 2601.724203][ T1928] netlink: 'syz.4.19714': attribute type 2 has an invalid length. [ 2601.930282][ T1928] : entered promiscuous mode [ 2604.460312][ T1957] batman_adv: batadv0: Adding interface: vlan2 [ 2604.466543][ T1957] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2604.499740][ T1957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2604.532657][ T1957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2604.554477][ T1957] batman_adv: batadv0: Interface activated: vlan2 [ 2604.749487][ T1959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19723'. [ 2604.784063][ T1959] netlink: 14 bytes leftover after parsing attributes in process `syz.6.19723'. [ 2604.815326][ T1959] hsr_slave_0: left promiscuous mode [ 2604.834183][ T1959] hsr_slave_1: left promiscuous mode [ 2604.850973][ T1960] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000 [ 2604.861932][ T1960] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20001 [ 2605.033172][ T1951] lo speed is unknown, defaulting to 1000 [ 2605.107703][ T1962] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2605.160114][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 2605.168128][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 2605.470877][ T1964] netlink: 32 bytes leftover after parsing attributes in process `syz.6.19725'. [ 2605.509365][ T1964] erspan0: entered promiscuous mode [ 2605.529533][ T1964] erspan0: entered allmulticast mode [ 2605.632315][ T1953] lo speed is unknown, defaulting to 1000 [ 2606.415978][ T1964] lo speed is unknown, defaulting to 1000 [ 2606.458129][ T1973] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19727'. [ 2607.076954][ T1985] mac80211_hwsim hwsim151 wlan0: entered promiscuous mode [ 2608.032735][ T2005] syzkaller1: entered promiscuous mode [ 2608.043013][ T2005] syzkaller1: entered allmulticast mode [ 2608.667454][ T2023] geneve2: entered promiscuous mode [ 2608.734895][ T2024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19735'. [ 2609.022660][ T1984] lo speed is unknown, defaulting to 1000 [ 2609.737491][ T1988] lo speed is unknown, defaulting to 1000 [ 2610.784917][ T2002] lo speed is unknown, defaulting to 1000 [ 2612.349508][ T2068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19746'. [ 2613.789518][ T2093] FAULT_INJECTION: forcing a failure. [ 2613.789518][ T2093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2613.857277][ T2093] CPU: 0 UID: 0 PID: 2093 Comm: syz.0.19754 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2613.857311][ T2093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2613.857325][ T2093] Call Trace: [ 2613.857334][ T2093] [ 2613.857344][ T2093] dump_stack_lvl+0x189/0x250 [ 2613.857375][ T2093] ? __pfx____ratelimit+0x10/0x10 [ 2613.857408][ T2093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2613.857434][ T2093] ? __pfx__printk+0x10/0x10 [ 2613.857463][ T2093] ? __might_fault+0xb0/0x130 [ 2613.857505][ T2093] should_fail_ex+0x414/0x560 [ 2613.857535][ T2093] _copy_from_user+0x2d/0xb0 [ 2613.857565][ T2093] __sys_bpf+0x1ed/0x860 [ 2613.857601][ T2093] ? __pfx___sys_bpf+0x10/0x10 [ 2613.857648][ T2093] ? ksys_write+0x22a/0x250 [ 2613.857686][ T2093] ? __pfx_ksys_write+0x10/0x10 [ 2613.857712][ T2093] ? rcu_is_watching+0x15/0xb0 [ 2613.857746][ T2093] __x64_sys_bpf+0x7c/0x90 [ 2613.857780][ T2093] do_syscall_64+0xfa/0x3b0 [ 2613.857799][ T2093] ? lockdep_hardirqs_on+0x9c/0x150 [ 2613.857831][ T2093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2613.857852][ T2093] ? clear_bhb_loop+0x60/0xb0 [ 2613.857878][ T2093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2613.857899][ T2093] RIP: 0033:0x7fea6f58e9a9 [ 2613.857918][ T2093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2613.857937][ T2093] RSP: 002b:00007fea70347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2613.857960][ T2093] RAX: ffffffffffffffda RBX: 00007fea6f7b6080 RCX: 00007fea6f58e9a9 [ 2613.857976][ T2093] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 2613.857990][ T2093] RBP: 00007fea70347090 R08: 0000000000000000 R09: 0000000000000000 [ 2613.858003][ T2093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2613.858016][ T2093] R13: 0000000000000000 R14: 00007fea6f7b6080 R15: 00007fffc41678c8 [ 2613.858050][ T2093] [ 2614.077652][ T2095] xt_hashlimit: size too large, truncated to 1048576 [ 2614.248540][ T2083] lo speed is unknown, defaulting to 1000 [ 2614.605526][ T2105] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19758'. [ 2614.624554][ T2105] dummy0: entered promiscuous mode [ 2614.666778][ T2105] dummy0: left promiscuous mode [ 2614.991770][ T2124] netlink: 44 bytes leftover after parsing attributes in process `syz.5.19761'. [ 2615.476352][ T30] audit: type=1800 audit(1753104227.426:4): pid=2125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.19762" name="cgroup.controllers" dev="tmpfs" ino=110 res=0 errno=0 [ 2616.291053][ T2151] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19768'. [ 2616.481372][ T2142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19768'. [ 2617.001503][ T2169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19772'. [ 2617.306836][ T2170] can: request_module (can-proto-4) failed. [ 2617.920252][ T2189] netlink: 104 bytes leftover after parsing attributes in process `syz.6.19775'. [ 2617.943323][ T2133] lo speed is unknown, defaulting to 1000 [ 2618.221228][ T2197] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20004 [ 2619.317455][ T2211] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 2619.334346][ T2140] lo speed is unknown, defaulting to 1000 [ 2621.070776][ T2222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19784'. [ 2621.160630][ T2224] netlink: 'syz.4.19784': attribute type 10 has an invalid length. [ 2621.350388][ T2192] lo speed is unknown, defaulting to 1000 [ 2621.581254][ T2228] FAULT_INJECTION: forcing a failure. [ 2621.581254][ T2228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2621.619128][ T2228] CPU: 1 UID: 0 PID: 2228 Comm: syz.4.19785 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2621.619161][ T2228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2621.619174][ T2228] Call Trace: [ 2621.619184][ T2228] [ 2621.619194][ T2228] dump_stack_lvl+0x189/0x250 [ 2621.619226][ T2228] ? __pfx____ratelimit+0x10/0x10 [ 2621.619266][ T2228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2621.619290][ T2228] ? __pfx__printk+0x10/0x10 [ 2621.619319][ T2228] ? __might_fault+0xb0/0x130 [ 2621.619359][ T2228] should_fail_ex+0x414/0x560 [ 2621.619388][ T2228] _copy_from_user+0x2d/0xb0 [ 2621.619417][ T2228] ___sys_sendmsg+0x158/0x2a0 [ 2621.619446][ T2228] ? __pfx____sys_sendmsg+0x10/0x10 [ 2621.619512][ T2228] ? __fget_files+0x2a/0x420 [ 2621.619530][ T2228] ? __fget_files+0x3a0/0x420 [ 2621.619561][ T2228] __x64_sys_sendmsg+0x19b/0x260 [ 2621.619588][ T2228] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2621.619623][ T2228] ? __pfx_ksys_write+0x10/0x10 [ 2621.619649][ T2228] ? rcu_is_watching+0x15/0xb0 [ 2621.619679][ T2228] ? do_syscall_64+0xbe/0x3b0 [ 2621.619704][ T2228] do_syscall_64+0xfa/0x3b0 [ 2621.619722][ T2228] ? lockdep_hardirqs_on+0x9c/0x150 [ 2621.619753][ T2228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2621.619773][ T2228] ? clear_bhb_loop+0x60/0xb0 [ 2621.619799][ T2228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2621.619820][ T2228] RIP: 0033:0x7fe04698e9a9 [ 2621.619840][ T2228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2621.619858][ T2228] RSP: 002b:00007fe04772c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2621.619882][ T2228] RAX: ffffffffffffffda RBX: 00007fe046bb5fa0 RCX: 00007fe04698e9a9 [ 2621.619898][ T2228] RDX: 0000000004008000 RSI: 0000200000004980 RDI: 0000000000000004 [ 2621.619924][ T2228] RBP: 00007fe04772c090 R08: 0000000000000000 R09: 0000000000000000 [ 2621.619937][ T2228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2621.619949][ T2228] R13: 0000000000000000 R14: 00007fe046bb5fa0 R15: 00007ffda5b35358 [ 2621.619982][ T2228] [ 2622.317032][ T2181] lo speed is unknown, defaulting to 1000 [ 2623.481715][ T2173] lo speed is unknown, defaulting to 1000 [ 2625.204962][T18089] IPVS: starting estimator thread 0... [ 2625.309129][ T2269] IPVS: using max 27 ests per chain, 64800 per kthread [ 2625.479775][ T2257] lo speed is unknown, defaulting to 1000 [ 2626.064102][ T2283] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input19 [ 2626.562120][ T2298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19802'. [ 2626.577175][ T2298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19802'. [ 2626.645611][ T2301] macvlan0: entered allmulticast mode [ 2626.706289][ T2301] netlink: 96 bytes leftover after parsing attributes in process `syz.6.19803'. [ 2627.024713][ T2285] lo speed is unknown, defaulting to 1000 [ 2628.197050][ T2324] netlink: 72 bytes leftover after parsing attributes in process `syz.5.19808'. [ 2629.656970][ T2355] netlink: 'syz.0.19813': attribute type 13 has an invalid length. [ 2630.359537][ T2318] lo speed is unknown, defaulting to 1000 [ 2630.734916][ T2372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19817'. [ 2631.306128][ T2382] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19821'. [ 2631.345486][ T2321] lo speed is unknown, defaulting to 1000 [ 2631.554137][ T2387] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19821'. [ 2632.197572][ T2420] tipc: Enabling of bearer rejected, already enabled [ 2632.564185][ T2433] FAULT_INJECTION: forcing a failure. [ 2632.564185][ T2433] name failslab, interval 1, probability 0, space 0, times 0 [ 2632.592379][ T2433] CPU: 0 UID: 0 PID: 2433 Comm: syz.5.19832 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2632.592412][ T2433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2632.592426][ T2433] Call Trace: [ 2632.592435][ T2433] [ 2632.592445][ T2433] dump_stack_lvl+0x189/0x250 [ 2632.592478][ T2433] ? __pfx____ratelimit+0x10/0x10 [ 2632.592511][ T2433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2632.592538][ T2433] ? __pfx__printk+0x10/0x10 [ 2632.592575][ T2433] ? __pfx___might_resched+0x10/0x10 [ 2632.592607][ T2433] should_fail_ex+0x414/0x560 [ 2632.592636][ T2433] should_failslab+0xa8/0x100 [ 2632.592671][ T2433] __kmalloc_cache_noprof+0x70/0x3d0 [ 2632.592701][ T2433] ? allocate_cgrp_cset_links+0xc9/0x320 [ 2632.592730][ T2433] allocate_cgrp_cset_links+0xc9/0x320 [ 2632.592765][ T2433] find_css_set+0x9dd/0x1560 [ 2632.592800][ T2433] ? __lock_acquire+0xab9/0xd20 [ 2632.592824][ T2433] ? __pfx_find_css_set+0x10/0x10 [ 2632.592885][ T2433] cgroup_migrate_prepare_dst+0x130/0x700 [ 2632.592923][ T2433] cgroup_attach_task+0x5ae/0x970 [ 2632.592952][ T2433] ? cgroup_attach_task+0x1fb/0x970 [ 2632.592977][ T2433] ? __pfx_cgroup_attach_task+0x10/0x10 [ 2632.593017][ T2433] ? cgroup_attach_permissions+0x4f0/0x9e0 [ 2632.593054][ T2433] __cgroup_procs_write+0x2a7/0x300 [ 2632.593092][ T2433] cgroup_procs_write+0x27/0x50 [ 2632.593110][ T2433] ? __pfx_cgroup_procs_write+0x10/0x10 [ 2632.593137][ T2433] cgroup_file_write+0x39b/0x740 [ 2632.593177][ T2433] ? __pfx_cgroup_file_write+0x10/0x10 [ 2632.593226][ T2433] ? __pfx_cgroup_file_write+0x10/0x10 [ 2632.593256][ T2433] kernfs_fop_write_iter+0x375/0x4f0 [ 2632.593295][ T2433] vfs_write+0x548/0xa90 [ 2632.593331][ T2433] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2632.593361][ T2433] ? __pfx_vfs_write+0x10/0x10 [ 2632.593406][ T2433] ? __fget_files+0x2a/0x420 [ 2632.593438][ T2433] ksys_write+0x145/0x250 [ 2632.593470][ T2433] ? __pfx_ksys_write+0x10/0x10 [ 2632.593495][ T2433] ? rcu_is_watching+0x15/0xb0 [ 2632.593528][ T2433] ? do_syscall_64+0xbe/0x3b0 [ 2632.593555][ T2433] do_syscall_64+0xfa/0x3b0 [ 2632.593574][ T2433] ? lockdep_hardirqs_on+0x9c/0x150 [ 2632.593605][ T2433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2632.593628][ T2433] ? clear_bhb_loop+0x60/0xb0 [ 2632.593655][ T2433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2632.593676][ T2433] RIP: 0033:0x7f57b9d8e9a9 [ 2632.593695][ T2433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2632.593715][ T2433] RSP: 002b:00007f57bacd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2632.593736][ T2433] RAX: ffffffffffffffda RBX: 00007f57b9fb5fa0 RCX: 00007f57b9d8e9a9 [ 2632.593752][ T2433] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000007 [ 2632.593765][ T2433] RBP: 00007f57bacd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2632.593778][ T2433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2632.593791][ T2433] R13: 0000000000000000 R14: 00007f57b9fb5fa0 R15: 00007ffd0dd9ce38 [ 2632.593828][ T2433] [ 2633.048193][ T2431] veth0: entered promiscuous mode [ 2633.061444][ T2422] veth0: left promiscuous mode [ 2633.564332][ T2452] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19838'. [ 2633.795684][ T2456] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19838'. [ 2633.887724][ T2467] vlan2: entered promiscuous mode [ 2633.915254][ T2467] vlan2: entered allmulticast mode [ 2633.925615][ T2467] hsr_slave_1: entered allmulticast mode [ 2633.934178][ T2465] tipc: Enabling of bearer rejected, already enabled [ 2634.072352][ T2467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19842'. [ 2634.101422][ T2467] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19842'. [ 2634.151930][ T2467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19842'. [ 2634.765028][ T2489] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19848'. [ 2634.844996][ T2498] netlink: 180 bytes leftover after parsing attributes in process `syz.4.19849'. [ 2634.939800][ T2497] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19848'. [ 2635.315790][ T2520] tipc: Enabling of bearer rejected, already enabled [ 2635.737394][ T2533] FAULT_INJECTION: forcing a failure. [ 2635.737394][ T2533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2635.773229][ T2533] CPU: 1 UID: 0 PID: 2533 Comm: syz.4.19857 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2635.773262][ T2533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2635.773277][ T2533] Call Trace: [ 2635.773286][ T2533] [ 2635.773297][ T2533] dump_stack_lvl+0x189/0x250 [ 2635.773329][ T2533] ? __pfx____ratelimit+0x10/0x10 [ 2635.773363][ T2533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2635.773388][ T2533] ? __pfx__printk+0x10/0x10 [ 2635.773417][ T2533] ? __might_fault+0xb0/0x130 [ 2635.773460][ T2533] should_fail_ex+0x414/0x560 [ 2635.773490][ T2533] _copy_from_user+0x2d/0xb0 [ 2635.773519][ T2533] kstrtouint_from_user+0xc4/0x170 [ 2635.773547][ T2533] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2635.773591][ T2533] proc_fail_nth_write+0x88/0x240 [ 2635.773614][ T2533] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2635.773642][ T2533] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2635.773666][ T2533] vfs_write+0x27e/0xa90 [ 2635.773705][ T2533] ? __pfx_vfs_write+0x10/0x10 [ 2635.773736][ T2533] ? __fget_files+0x2a/0x420 [ 2635.773760][ T2533] ? __fget_files+0x3a0/0x420 [ 2635.773778][ T2533] ? __fget_files+0x2a/0x420 [ 2635.773816][ T2533] ksys_write+0x145/0x250 [ 2635.773848][ T2533] ? __pfx_ksys_write+0x10/0x10 [ 2635.773873][ T2533] ? rcu_is_watching+0x15/0xb0 [ 2635.773906][ T2533] ? do_syscall_64+0xbe/0x3b0 [ 2635.773931][ T2533] do_syscall_64+0xfa/0x3b0 [ 2635.773950][ T2533] ? lockdep_hardirqs_on+0x9c/0x150 [ 2635.773983][ T2533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2635.774004][ T2533] ? clear_bhb_loop+0x60/0xb0 [ 2635.774031][ T2533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2635.774051][ T2533] RIP: 0033:0x7fe04698d45f [ 2635.774071][ T2533] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2635.774090][ T2533] RSP: 002b:00007fe04772c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2635.774112][ T2533] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe04698d45f [ 2635.774127][ T2533] RDX: 0000000000000001 RSI: 00007fe04772c0a0 RDI: 0000000000000004 [ 2635.774140][ T2533] RBP: 00007fe04772c090 R08: 0000000000000000 R09: fffffffffffffe40 [ 2635.774154][ T2533] R10: 0000000040000146 R11: 0000000000000293 R12: 0000000000000001 [ 2635.774168][ T2533] R13: 0000000000000000 R14: 00007fe046bb5fa0 R15: 00007ffda5b35358 [ 2635.774201][ T2533] [ 2636.044290][ T2535] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2636.190755][ T2544] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.19860'. [ 2636.217017][ T2549] hsr0: entered promiscuous mode [ 2636.224366][ T2549] macsec1: entered promiscuous mode [ 2636.235832][ T2549] macsec1: entered allmulticast mode [ 2636.243772][ T2549] hsr0: entered allmulticast mode [ 2636.251705][ T2549] hsr_slave_0: entered allmulticast mode [ 2636.257484][ T2549] hsr_slave_1: entered allmulticast mode [ 2636.284920][ T2549] hsr0: left allmulticast mode [ 2636.298633][ T2549] hsr_slave_0: left allmulticast mode [ 2636.304240][ T2549] hsr_slave_1: left allmulticast mode [ 2636.499598][ T2564] netlink: 180 bytes leftover after parsing attributes in process `syz.4.19865'. [ 2636.775785][ T2574] tipc: Enabled bearer , priority 0 [ 2636.801592][ T2574] syzkaller0: entered promiscuous mode [ 2636.823068][ T2574] syzkaller0: entered allmulticast mode [ 2636.853944][ T2574] tipc: Resetting bearer [ 2636.885920][ T2570] tipc: Resetting bearer [ 2636.972882][ T2570] tipc: Disabling bearer [ 2637.176557][ T2593] netlink: 'syz.6.19873': attribute type 39 has an invalid length. [ 2637.298066][ T2592] nbd6: detected capacity change from 0 to 15419640280776711 [ 2637.320400][T17491] block nbd6: Receive control failed (result -32) [ 2637.538843][ T2583] lo speed is unknown, defaulting to 1000 [ 2637.749686][ T2610] netlink: 'syz.4.19879': attribute type 20 has an invalid length. [ 2638.655903][ T2631] xt_ecn: cannot match TCP bits for non-tcp packets [ 2638.854424][ T2633] syz_tun: entered allmulticast mode [ 2638.907098][ T2630] syz_tun: left allmulticast mode [ 2639.101290][ T2646] tipc: Enabling of bearer rejected, already enabled [ 2640.635767][ T2688] __nla_validate_parse: 2 callbacks suppressed [ 2640.635790][ T2688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19893'. [ 2640.643166][ T2648] lo speed is unknown, defaulting to 1000 [ 2640.682154][ T2688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19893'. [ 2640.698620][ T2688] netlink: 'syz.4.19893': attribute type 12 has an invalid length. [ 2641.461830][ T2702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19896'. [ 2641.530964][ T2702] bridge_slave_1: left allmulticast mode [ 2641.536671][ T2702] bridge_slave_1: left promiscuous mode [ 2641.571923][ T2702] bridge0: port 2(bridge_slave_1) entered disabled state [ 2641.628563][ T2702] bridge_slave_0: left allmulticast mode [ 2641.644613][ T2702] bridge_slave_0: left promiscuous mode [ 2641.671236][ T2702] bridge0: port 1(bridge_slave_0) entered disabled state [ 2642.065697][ T2675] lo speed is unknown, defaulting to 1000 [ 2642.132565][ T2718] tipc: Enabling of bearer rejected, already enabled [ 2642.169505][ T2721] macvlan0: entered allmulticast mode [ 2642.196407][ T2721] netlink: 'syz.5.19900': attribute type 1 has an invalid length. [ 2642.220915][ T2721] netlink: 'syz.5.19900': attribute type 2 has an invalid length. [ 2642.267357][ T2721] netlink: 44 bytes leftover after parsing attributes in process `syz.5.19900'. [ 2642.304673][ T2721] smc: net device bond0 erased user defined pnetid SYZ2 [ 2642.584046][ T2734] netlink: 180 bytes leftover after parsing attributes in process `syz.7.19903'. [ 2642.816067][ T2738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19904'. [ 2642.950276][ T2742] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19906'. [ 2643.084971][ T2744] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19906'. [ 2643.475943][ T2759] FAULT_INJECTION: forcing a failure. [ 2643.475943][ T2759] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.488734][ T2759] CPU: 1 UID: 0 PID: 2759 Comm: syz.5.19910 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2643.488766][ T2759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2643.488780][ T2759] Call Trace: [ 2643.488791][ T2759] [ 2643.488800][ T2759] dump_stack_lvl+0x189/0x250 [ 2643.488832][ T2759] ? __pfx____ratelimit+0x10/0x10 [ 2643.488865][ T2759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2643.488890][ T2759] ? __pfx__printk+0x10/0x10 [ 2643.488930][ T2759] should_fail_ex+0x414/0x560 [ 2643.488955][ T2759] should_failslab+0xa8/0x100 [ 2643.488987][ T2759] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2643.489014][ T2759] ? skb_clone+0x212/0x3a0 [ 2643.489045][ T2759] skb_clone+0x212/0x3a0 [ 2643.489074][ T2759] bpf_clone_redirect+0xad/0x3d0 [ 2643.489111][ T2759] ? bpf_test_run+0x197/0x7b0 [ 2643.489142][ T2759] bpf_prog_4a8c2353fb668905+0x65/0x71 [ 2643.489167][ T2759] ? ktime_get+0x3e/0x1f0 [ 2643.489201][ T2759] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 2643.489230][ T2759] ? lockdep_hardirqs_on+0x9c/0x150 [ 2643.489261][ T2759] ? ktime_get+0x3e/0x1f0 [ 2643.489285][ T2759] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 2643.489329][ T2759] ? __local_bh_disable_ip+0xf1/0x190 [ 2643.489354][ T2759] ? __pfx___cant_migrate+0x10/0x10 [ 2643.489377][ T2759] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2643.489400][ T2759] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2643.489429][ T2759] ? bpf_test_timer_continue+0x136/0x350 [ 2643.489455][ T2759] bpf_test_run+0x318/0x7b0 [ 2643.489512][ T2759] ? __pfx_bpf_test_run+0x10/0x10 [ 2643.489573][ T2759] ? slab_build_skb+0x273/0x3e0 [ 2643.489594][ T2759] ? convert___skb_to_skb+0x3d/0x590 [ 2643.489628][ T2759] bpf_prog_test_run_skb+0xb30/0x1560 [ 2643.489679][ T2759] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2643.489712][ T2759] bpf_prog_test_run+0x2c4/0x340 [ 2643.489739][ T2759] __sys_bpf+0x4a4/0x860 [ 2643.489774][ T2759] ? __pfx___sys_bpf+0x10/0x10 [ 2643.489820][ T2759] ? ksys_write+0x22a/0x250 [ 2643.489850][ T2759] ? __pfx_ksys_write+0x10/0x10 [ 2643.489875][ T2759] ? rcu_is_watching+0x15/0xb0 [ 2643.489907][ T2759] __x64_sys_bpf+0x7c/0x90 [ 2643.489938][ T2759] do_syscall_64+0xfa/0x3b0 [ 2643.489956][ T2759] ? lockdep_hardirqs_on+0x9c/0x150 [ 2643.489985][ T2759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2643.490005][ T2759] ? clear_bhb_loop+0x60/0xb0 [ 2643.490031][ T2759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2643.490052][ T2759] RIP: 0033:0x7f57b9d8e9a9 [ 2643.490070][ T2759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2643.490090][ T2759] RSP: 002b:00007f57bacd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2643.490112][ T2759] RAX: ffffffffffffffda RBX: 00007f57b9fb5fa0 RCX: 00007f57b9d8e9a9 [ 2643.490128][ T2759] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 2643.490141][ T2759] RBP: 00007f57bacd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2643.490154][ T2759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2643.490166][ T2759] R13: 0000000000000000 R14: 00007f57b9fb5fa0 R15: 00007ffd0dd9ce38 [ 2643.490198][ T2759] [ 2643.906520][ T2768] tipc: Started in network mode [ 2643.927665][ T2768] tipc: Node identity ba38bac2a5fe, cluster identity 4711 [ 2643.996842][ T2768] tipc: Enabled bearer , priority 0 [ 2644.261367][ T2771] syzkaller0: entered promiscuous mode [ 2644.266909][ T2771] syzkaller0: entered allmulticast mode [ 2644.383361][ T2774] tipc: Resetting bearer [ 2644.627118][ T2766] tipc: Resetting bearer [ 2644.740989][ T2766] tipc: Disabling bearer [ 2644.772362][ T2785] netlink: 180 bytes leftover after parsing attributes in process `syz.5.19915'. [ 2645.087012][ T2800] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19917'. [ 2645.154787][ T2800] erspan0: entered promiscuous mode [ 2645.162010][ T2800] erspan0: entered allmulticast mode [ 2645.473694][ T2760] lo speed is unknown, defaulting to 1000 [ 2646.850924][ T2847] tipc: Enabled bearer , priority 0 [ 2646.889017][ T2847] syzkaller0: entered promiscuous mode [ 2646.894554][ T2847] syzkaller0: entered allmulticast mode [ 2646.953640][ T2847] tipc: Resetting bearer [ 2647.004751][ T2844] tipc: Resetting bearer [ 2647.105405][ T2844] tipc: Disabling bearer [ 2647.394040][ T2854] netlink: 180 bytes leftover after parsing attributes in process `syz.6.19928'. [ 2648.011124][ T2801] lo speed is unknown, defaulting to 1000 [ 2648.726617][ T2797] lo speed is unknown, defaulting to 1000 [ 2648.868440][ T5850] Bluetooth: hci6: command 0x0406 tx timeout [ 2649.284946][ T2830] lo speed is unknown, defaulting to 1000 [ 2650.121832][ T2875] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19932'. [ 2650.370437][ T2875] FAULT_INJECTION: forcing a failure. [ 2650.370437][ T2875] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.403698][ T2875] CPU: 1 UID: 0 PID: 2875 Comm: syz.0.19932 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2650.403749][ T2875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2650.403773][ T2875] Call Trace: [ 2650.403790][ T2875] [ 2650.403800][ T2875] dump_stack_lvl+0x189/0x250 [ 2650.403831][ T2875] ? __pfx____ratelimit+0x10/0x10 [ 2650.403864][ T2875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2650.403890][ T2875] ? __pfx__printk+0x10/0x10 [ 2650.403926][ T2875] ? __pfx___might_resched+0x10/0x10 [ 2650.403950][ T2875] ? fs_reclaim_acquire+0x7d/0x100 [ 2650.403977][ T2875] should_fail_ex+0x414/0x560 [ 2650.404005][ T2875] should_failslab+0xa8/0x100 [ 2650.404038][ T2875] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2650.404068][ T2875] ? __alloc_skb+0x112/0x2d0 [ 2650.404095][ T2875] __alloc_skb+0x112/0x2d0 [ 2650.404121][ T2875] nl80211_send_scan_start+0x2f/0x170 [ 2650.404160][ T2875] nl80211_trigger_scan+0x1ab5/0x1f30 [ 2650.404211][ T2875] genl_family_rcv_msg_doit+0x215/0x300 [ 2650.404248][ T2875] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2650.404291][ T2875] ? bpf_lsm_capable+0x9/0x20 [ 2650.404318][ T2875] ? security_capable+0x7e/0x2e0 [ 2650.404349][ T2875] genl_rcv_msg+0x60e/0x790 [ 2650.404383][ T2875] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2650.404408][ T2875] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2650.404431][ T2875] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 2650.404460][ T2875] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2650.404488][ T2875] ? __asan_memcpy+0x40/0x70 [ 2650.404512][ T2875] ? __pfx_ref_tracker_free+0x10/0x10 [ 2650.404545][ T2875] netlink_rcv_skb+0x208/0x470 [ 2650.404576][ T2875] ? __lock_acquire+0xab9/0xd20 [ 2650.404597][ T2875] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2650.404626][ T2875] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2650.404682][ T2875] ? down_read+0x1ad/0x2e0 [ 2650.404708][ T2875] genl_rcv+0x28/0x40 [ 2650.404732][ T2875] netlink_unicast+0x82c/0x9e0 [ 2650.404773][ T2875] ? __pfx_netlink_unicast+0x10/0x10 [ 2650.404812][ T2875] ? netlink_sendmsg+0x642/0xb30 [ 2650.404831][ T2875] ? skb_put+0x11b/0x210 [ 2650.404857][ T2875] netlink_sendmsg+0x805/0xb30 [ 2650.404889][ T2875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2650.404914][ T2875] ? aa_sock_msg_perm+0x94/0x160 [ 2650.404939][ T2875] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2650.404960][ T2875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2650.404982][ T2875] __sock_sendmsg+0x219/0x270 [ 2650.405015][ T2875] ____sys_sendmsg+0x505/0x830 [ 2650.405047][ T2875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2650.405084][ T2875] ? import_iovec+0x74/0xa0 [ 2650.405117][ T2875] ___sys_sendmsg+0x21f/0x2a0 [ 2650.405145][ T2875] ? __pfx____sys_sendmsg+0x10/0x10 [ 2650.405214][ T2875] ? __fget_files+0x2a/0x420 [ 2650.405232][ T2875] ? __fget_files+0x3a0/0x420 [ 2650.405264][ T2875] __x64_sys_sendmsg+0x19b/0x260 [ 2650.405292][ T2875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2650.405329][ T2875] ? __pfx_ksys_write+0x10/0x10 [ 2650.405355][ T2875] ? rcu_is_watching+0x15/0xb0 [ 2650.405386][ T2875] ? do_syscall_64+0xbe/0x3b0 [ 2650.405411][ T2875] do_syscall_64+0xfa/0x3b0 [ 2650.405430][ T2875] ? lockdep_hardirqs_on+0x9c/0x150 [ 2650.405461][ T2875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2650.405482][ T2875] ? clear_bhb_loop+0x60/0xb0 [ 2650.405508][ T2875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2650.405529][ T2875] RIP: 0033:0x7fea6f58e9a9 [ 2650.405545][ T2875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2650.405562][ T2875] RSP: 002b:00007fea70368038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2650.405585][ T2875] RAX: ffffffffffffffda RBX: 00007fea6f7b5fa0 RCX: 00007fea6f58e9a9 [ 2650.405600][ T2875] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 2650.405614][ T2875] RBP: 00007fea70368090 R08: 0000000000000000 R09: 0000000000000000 [ 2650.405627][ T2875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2650.405640][ T2875] R13: 0000000000000000 R14: 00007fea6f7b5fa0 R15: 00007fffc41678c8 [ 2650.405675][ T2875] [ 2651.836426][ T2890] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 2651.922871][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2652.947395][ T2897] netlink: 180 bytes leftover after parsing attributes in process `syz.6.19939'. [ 2652.967039][ T2895] tipc: Enabling of bearer rejected, already enabled [ 2653.022687][ T2893] tipc: Enabled bearer , priority 0 [ 2653.051234][ T2893] syzkaller0: entered promiscuous mode [ 2653.071724][ T2893] syzkaller0: entered allmulticast mode [ 2653.207229][ T2893] tipc: Resetting bearer [ 2653.285425][ T2892] tipc: Resetting bearer [ 2653.420145][ T2892] tipc: Disabling bearer [ 2653.556083][ T2917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19941'. [ 2653.612764][ T2913] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19941'. [ 2653.625555][ T2913] netlink: 48 bytes leftover after parsing attributes in process `syz.6.19941'. [ 2654.516278][ T2949] netlink: 348 bytes leftover after parsing attributes in process `syz.5.19953'. [ 2654.630518][ T2954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19955'. [ 2654.641753][ T2954] erspan0: entered promiscuous mode [ 2654.647169][ T2954] erspan0: entered allmulticast mode [ 2654.775399][ T2958] FAULT_INJECTION: forcing a failure. [ 2654.775399][ T2958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2654.794633][ T2958] CPU: 1 UID: 0 PID: 2958 Comm: syz.5.19956 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2654.794671][ T2958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2654.794684][ T2958] Call Trace: [ 2654.794693][ T2958] [ 2654.794703][ T2958] dump_stack_lvl+0x189/0x250 [ 2654.794733][ T2958] ? __pfx____ratelimit+0x10/0x10 [ 2654.794766][ T2958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2654.794790][ T2958] ? __pfx__printk+0x10/0x10 [ 2654.794819][ T2958] ? __might_fault+0xb0/0x130 [ 2654.794866][ T2958] should_fail_ex+0x414/0x560 [ 2654.794895][ T2958] _copy_from_iter+0x1db/0x16f0 [ 2654.794926][ T2958] ? rcu_is_watching+0x15/0xb0 [ 2654.794953][ T2958] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 2654.794985][ T2958] ? __pfx__copy_from_iter+0x10/0x10 [ 2654.795013][ T2958] ? __build_skb_around+0x257/0x3e0 [ 2654.795039][ T2958] ? netlink_sendmsg+0x642/0xb30 [ 2654.795059][ T2958] ? skb_put+0x11b/0x210 [ 2654.795085][ T2958] netlink_sendmsg+0x6b2/0xb30 [ 2654.795116][ T2958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2654.795142][ T2958] ? aa_sock_msg_perm+0x94/0x160 [ 2654.795166][ T2958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2654.795188][ T2958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2654.795210][ T2958] __sock_sendmsg+0x219/0x270 [ 2654.795244][ T2958] ____sys_sendmsg+0x505/0x830 [ 2654.795275][ T2958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2654.795311][ T2958] ? import_iovec+0x74/0xa0 [ 2654.795343][ T2958] ___sys_sendmsg+0x21f/0x2a0 [ 2654.795382][ T2958] ? __pfx____sys_sendmsg+0x10/0x10 [ 2654.795448][ T2958] ? __fget_files+0x2a/0x420 [ 2654.795467][ T2958] ? __fget_files+0x3a0/0x420 [ 2654.795498][ T2958] __x64_sys_sendmsg+0x19b/0x260 [ 2654.795526][ T2958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2654.795563][ T2958] ? __pfx_ksys_write+0x10/0x10 [ 2654.795598][ T2958] ? do_syscall_64+0xbe/0x3b0 [ 2654.795624][ T2958] do_syscall_64+0xfa/0x3b0 [ 2654.795643][ T2958] ? lockdep_hardirqs_on+0x9c/0x150 [ 2654.795673][ T2958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2654.795695][ T2958] ? clear_bhb_loop+0x60/0xb0 [ 2654.795721][ T2958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2654.795741][ T2958] RIP: 0033:0x7f57b9d8e9a9 [ 2654.795760][ T2958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2654.795780][ T2958] RSP: 002b:00007f57bacd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2654.795802][ T2958] RAX: ffffffffffffffda RBX: 00007f57b9fb5fa0 RCX: 00007f57b9d8e9a9 [ 2654.795818][ T2958] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 2654.795832][ T2958] RBP: 00007f57bacd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2654.795845][ T2958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2654.795857][ T2958] R13: 0000000000000000 R14: 00007f57b9fb5fa0 R15: 00007ffd0dd9ce38 [ 2654.795892][ T2958] [ 2655.351301][ T2956] lo speed is unknown, defaulting to 1000 [ 2655.651233][ T2973] FAULT_INJECTION: forcing a failure. [ 2655.651233][ T2973] name failslab, interval 1, probability 0, space 0, times 0 [ 2655.688722][ T2973] CPU: 0 UID: 0 PID: 2973 Comm: syz.5.19961 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2655.688756][ T2973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2655.688771][ T2973] Call Trace: [ 2655.688780][ T2973] [ 2655.688790][ T2973] dump_stack_lvl+0x189/0x250 [ 2655.688821][ T2973] ? __pfx____ratelimit+0x10/0x10 [ 2655.688854][ T2973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2655.688881][ T2973] ? __pfx__printk+0x10/0x10 [ 2655.688912][ T2973] ? __pfx___might_resched+0x10/0x10 [ 2655.688938][ T2973] ? fs_reclaim_acquire+0x7d/0x100 [ 2655.688963][ T2973] should_fail_ex+0x414/0x560 [ 2655.688991][ T2973] should_failslab+0xa8/0x100 [ 2655.689023][ T2973] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2655.689051][ T2973] ? can_rx_register+0x16d/0x790 [ 2655.689087][ T2973] can_rx_register+0x16d/0x790 [ 2655.689110][ T2973] ? __pfx_raw_rcv+0x10/0x10 [ 2655.689137][ T2973] raw_enable_filters+0x98/0x200 [ 2655.689169][ T2973] raw_setsockopt+0xbd4/0x1160 [ 2655.689195][ T2973] ? __pfx_aa_sk_perm+0x10/0x10 [ 2655.689228][ T2973] ? __pfx_raw_setsockopt+0x10/0x10 [ 2655.689252][ T2973] ? __fget_files+0x2a/0x420 [ 2655.689271][ T2973] ? aa_sock_opt_perm+0x74/0x110 [ 2655.689295][ T2973] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2655.689318][ T2973] ? __pfx_raw_setsockopt+0x10/0x10 [ 2655.689344][ T2973] do_sock_setsockopt+0x179/0x1b0 [ 2655.689375][ T2973] __x64_sys_setsockopt+0x13f/0x1b0 [ 2655.689406][ T2973] do_syscall_64+0xfa/0x3b0 [ 2655.689426][ T2973] ? lockdep_hardirqs_on+0x9c/0x150 [ 2655.689457][ T2973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2655.689479][ T2973] ? clear_bhb_loop+0x60/0xb0 [ 2655.689506][ T2973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2655.689527][ T2973] RIP: 0033:0x7f57b9d8e9a9 [ 2655.689546][ T2973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2655.689565][ T2973] RSP: 002b:00007f57bacd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2655.689587][ T2973] RAX: ffffffffffffffda RBX: 00007f57b9fb5fa0 RCX: 00007f57b9d8e9a9 [ 2655.689602][ T2973] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000004 [ 2655.689615][ T2973] RBP: 00007f57bacd5090 R08: 0000000000000f00 R09: 0000000000000000 [ 2655.689628][ T2973] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 2655.689641][ T2973] R13: 0000000000000000 R14: 00007f57b9fb5fa0 R15: 00007ffd0dd9ce38 [ 2655.689677][ T2973] [ 2655.725732][ T2974] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19960'. [ 2656.067594][ T2974] geneve2: entered promiscuous mode [ 2656.073768][ T2974] geneve2: entered allmulticast mode [ 2656.279268][ T2985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19964'. [ 2656.556267][ T2965] lo speed is unknown, defaulting to 1000 [ 2657.193891][ T3001] netlink: 32 bytes leftover after parsing attributes in process `syz.5.19969'. [ 2657.240474][ T3001] erspan0: entered promiscuous mode [ 2657.256147][ T3001] erspan0: entered allmulticast mode [ 2657.319582][ T3006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19972'. [ 2657.912488][ T3018] FAULT_INJECTION: forcing a failure. [ 2657.912488][ T3018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2657.941564][ T3018] CPU: 1 UID: 0 PID: 3018 Comm: syz.4.19976 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2657.941596][ T3018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2657.941610][ T3018] Call Trace: [ 2657.941619][ T3018] [ 2657.941630][ T3018] dump_stack_lvl+0x189/0x250 [ 2657.941662][ T3018] ? __pfx____ratelimit+0x10/0x10 [ 2657.941694][ T3018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2657.941719][ T3018] ? __pfx__printk+0x10/0x10 [ 2657.941785][ T3018] should_fail_ex+0x414/0x560 [ 2657.941813][ T3018] _copy_to_iter+0x575/0x16f0 [ 2657.941853][ T3018] ? __pfx__copy_to_iter+0x10/0x10 [ 2657.941883][ T3018] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 2657.941918][ T3018] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 2657.941953][ T3018] __skb_datagram_iter+0xf8/0x990 [ 2657.941981][ T3018] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 2657.942018][ T3018] skb_copy_datagram_iter+0xc5/0x230 [ 2657.942050][ T3018] netlink_recvmsg+0x2ab/0xa30 [ 2657.942083][ T3018] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2657.942107][ T3018] ? __lock_acquire+0xab9/0xd20 [ 2657.942126][ T3018] ? aa_sock_msg_perm+0x94/0x160 [ 2657.942150][ T3018] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2657.942173][ T3018] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2657.942195][ T3018] sock_recvmsg_nosec+0x186/0x1c0 [ 2657.942230][ T3018] ____sys_recvmsg+0x3aa/0x460 [ 2657.942264][ T3018] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2657.942307][ T3018] ? import_iovec+0x74/0xa0 [ 2657.942338][ T3018] ___sys_recvmsg+0x1b5/0x510 [ 2657.942370][ T3018] ? __pfx____sys_recvmsg+0x10/0x10 [ 2657.942432][ T3018] ? __might_fault+0xb0/0x130 [ 2657.942466][ T3018] do_recvmmsg+0x307/0x770 [ 2657.942501][ T3018] ? __pfx_do_recvmmsg+0x10/0x10 [ 2657.942541][ T3018] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2657.942585][ T3018] __x64_sys_recvmmsg+0x190/0x240 [ 2657.942614][ T3018] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2657.942638][ T3018] ? rcu_is_watching+0x15/0xb0 [ 2657.942668][ T3018] ? do_syscall_64+0xbe/0x3b0 [ 2657.942700][ T3018] do_syscall_64+0xfa/0x3b0 [ 2657.942718][ T3018] ? lockdep_hardirqs_on+0x9c/0x150 [ 2657.942750][ T3018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2657.942776][ T3018] ? clear_bhb_loop+0x60/0xb0 [ 2657.942803][ T3018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2657.942824][ T3018] RIP: 0033:0x7fe04698e9a9 [ 2657.942843][ T3018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2657.942861][ T3018] RSP: 002b:00007fe04772c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2657.942890][ T3018] RAX: ffffffffffffffda RBX: 00007fe046bb5fa0 RCX: 00007fe04698e9a9 [ 2657.942905][ T3018] RDX: 0000000000000008 RSI: 0000200000006040 RDI: 0000000000000003 [ 2657.942919][ T3018] RBP: 00007fe04772c090 R08: 0000000000000000 R09: 0000000000000000 [ 2657.942932][ T3018] R10: 0000000000012000 R11: 0000000000000246 R12: 0000000000000002 [ 2657.942944][ T3018] R13: 0000000000000000 R14: 00007fe046bb5fa0 R15: 00007ffda5b35358 [ 2657.942978][ T3018] [ 2658.632666][ T3032] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19981'. [ 2658.644120][ T3032] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 2658.801252][ T3004] lo speed is unknown, defaulting to 1000 [ 2660.315464][ T3067] netlink: 32 bytes leftover after parsing attributes in process `syz.6.19993'. [ 2660.801186][ T3076] FAULT_INJECTION: forcing a failure. [ 2660.801186][ T3076] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.856831][ T3076] CPU: 1 UID: 0 PID: 3076 Comm: syz.7.19996 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2660.856866][ T3076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2660.856880][ T3076] Call Trace: [ 2660.856889][ T3076] [ 2660.856899][ T3076] dump_stack_lvl+0x189/0x250 [ 2660.856931][ T3076] ? __pfx____ratelimit+0x10/0x10 [ 2660.856964][ T3076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2660.856990][ T3076] ? __pfx__printk+0x10/0x10 [ 2660.857026][ T3076] ? __pfx___might_resched+0x10/0x10 [ 2660.857050][ T3076] ? fs_reclaim_acquire+0x7d/0x100 [ 2660.857077][ T3076] should_fail_ex+0x414/0x560 [ 2660.857105][ T3076] should_failslab+0xa8/0x100 [ 2660.857138][ T3076] __kmalloc_cache_noprof+0x70/0x3d0 [ 2660.857166][ T3076] ? hash_netnet_create+0x6d5/0x1440 [ 2660.857209][ T3076] hash_netnet_create+0x6d5/0x1440 [ 2660.857238][ T3076] ? __lock_acquire+0xab9/0xd20 [ 2660.857277][ T3076] ? __pfx_hash_netnet_create+0x10/0x10 [ 2660.857311][ T3076] ? __nla_parse+0x40/0x60 [ 2660.857335][ T3076] ? __pfx_hash_netnet_create+0x10/0x10 [ 2660.857368][ T3076] ip_set_create+0xa94/0x1940 [ 2660.857401][ T3076] ? ip_set_create+0x4a2/0x1940 [ 2660.857440][ T3076] ? __pfx_ip_set_create+0x10/0x10 [ 2660.857505][ T3076] nfnetlink_rcv_msg+0xb4d/0x1130 [ 2660.857541][ T3076] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 2660.857592][ T3076] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2660.857618][ T3076] ? kasan_save_free_info+0x46/0x50 [ 2660.857698][ T3076] netlink_rcv_skb+0x208/0x470 [ 2660.857729][ T3076] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2660.857761][ T3076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2660.857806][ T3076] ? bpf_lsm_capable+0x9/0x20 [ 2660.857833][ T3076] ? security_capable+0x7e/0x2e0 [ 2660.857864][ T3076] nfnetlink_rcv+0x26a/0x2520 [ 2660.857896][ T3076] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2660.857936][ T3076] ? __dev_queue_xmit+0x27b/0x3b50 [ 2660.857977][ T3076] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2660.858006][ T3076] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2660.858049][ T3076] ? ref_tracker_free+0x63a/0x7d0 [ 2660.858074][ T3076] ? __asan_memcpy+0x40/0x70 [ 2660.858098][ T3076] ? __pfx_ref_tracker_free+0x10/0x10 [ 2660.858142][ T3076] ? skb_clone+0x246/0x3a0 [ 2660.858171][ T3076] ? __netlink_deliver_tap+0x807/0x850 [ 2660.858191][ T3076] ? netlink_deliver_tap+0x2e/0x1b0 [ 2660.858219][ T3076] ? netlink_deliver_tap+0x2e/0x1b0 [ 2660.858250][ T3076] netlink_unicast+0x82c/0x9e0 [ 2660.858290][ T3076] ? __pfx_netlink_unicast+0x10/0x10 [ 2660.858324][ T3076] ? netlink_sendmsg+0x642/0xb30 [ 2660.858342][ T3076] ? skb_put+0x11b/0x210 [ 2660.858369][ T3076] netlink_sendmsg+0x805/0xb30 [ 2660.858402][ T3076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2660.858427][ T3076] ? aa_sock_msg_perm+0x94/0x160 [ 2660.858462][ T3076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2660.858486][ T3076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2660.858507][ T3076] __sock_sendmsg+0x219/0x270 [ 2660.858548][ T3076] ____sys_sendmsg+0x505/0x830 [ 2660.858581][ T3076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2660.858616][ T3076] ? import_iovec+0x74/0xa0 [ 2660.858650][ T3076] ___sys_sendmsg+0x21f/0x2a0 [ 2660.858678][ T3076] ? __pfx____sys_sendmsg+0x10/0x10 [ 2660.858747][ T3076] ? __fget_files+0x2a/0x420 [ 2660.858765][ T3076] ? __fget_files+0x3a0/0x420 [ 2660.858797][ T3076] __x64_sys_sendmsg+0x19b/0x260 [ 2660.858826][ T3076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2660.858862][ T3076] ? __pfx_ksys_write+0x10/0x10 [ 2660.858888][ T3076] ? rcu_is_watching+0x15/0xb0 [ 2660.858919][ T3076] ? do_syscall_64+0xbe/0x3b0 [ 2660.858945][ T3076] do_syscall_64+0xfa/0x3b0 [ 2660.858964][ T3076] ? lockdep_hardirqs_on+0x9c/0x150 [ 2660.858996][ T3076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2660.859017][ T3076] ? clear_bhb_loop+0x60/0xb0 [ 2660.859043][ T3076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2660.859064][ T3076] RIP: 0033:0x7f95b218e9a9 [ 2660.859084][ T3076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2660.859103][ T3076] RSP: 002b:00007f95b3053038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2660.859125][ T3076] RAX: ffffffffffffffda RBX: 00007f95b23b5fa0 RCX: 00007f95b218e9a9 [ 2660.859141][ T3076] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 2660.859154][ T3076] RBP: 00007f95b3053090 R08: 0000000000000000 R09: 0000000000000000 [ 2660.859167][ T3076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2660.859179][ T3076] R13: 0000000000000000 R14: 00007f95b23b5fa0 R15: 00007fff44171908 [ 2660.859214][ T3076] [ 2661.030124][ T3069] lo speed is unknown, defaulting to 1000 [ 2661.817465][ T3094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20005'. [ 2661.862962][ T3095] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20004'. [ 2661.905823][ T3095] team_slave_0: entered promiscuous mode [ 2661.911665][ T3095] team_slave_1: entered promiscuous mode [ 2661.941129][ T3095] macvtap1: entered promiscuous mode [ 2661.947460][ T3095] team0: entered promiscuous mode [ 2661.978452][ T3095] macvtap1: entered allmulticast mode [ 2661.983911][ T3095] team0: entered allmulticast mode [ 2662.022977][ T3095] team_slave_0: entered allmulticast mode [ 2662.037916][ T3095] team_slave_1: entered allmulticast mode [ 2662.059355][ T3095] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2662.103275][ T3101] team0: left allmulticast mode [ 2662.109044][ T3101] team_slave_0: left allmulticast mode [ 2662.119461][ T3101] team_slave_1: left allmulticast mode [ 2662.129610][ T3101] team0: left promiscuous mode [ 2662.135109][ T3101] team_slave_0: left promiscuous mode [ 2662.140676][ T3101] team_slave_1: left promiscuous mode [ 2662.475781][ T3120] FAULT_INJECTION: forcing a failure. [ 2662.475781][ T3120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2662.533218][ T3120] CPU: 0 UID: 0 PID: 3120 Comm: syz.7.20011 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2662.533251][ T3120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2662.533265][ T3120] Call Trace: [ 2662.533273][ T3120] [ 2662.533283][ T3120] dump_stack_lvl+0x189/0x250 [ 2662.533313][ T3120] ? __pfx____ratelimit+0x10/0x10 [ 2662.533347][ T3120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2662.533372][ T3120] ? __pfx__printk+0x10/0x10 [ 2662.533400][ T3120] ? __might_fault+0xb0/0x130 [ 2662.533443][ T3120] should_fail_ex+0x414/0x560 [ 2662.533471][ T3120] _copy_from_iter+0x1db/0x16f0 [ 2662.533501][ T3120] ? rcu_is_watching+0x15/0xb0 [ 2662.533527][ T3120] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 2662.533559][ T3120] ? __pfx__copy_from_iter+0x10/0x10 [ 2662.533587][ T3120] ? __build_skb_around+0x257/0x3e0 [ 2662.533613][ T3120] ? netlink_sendmsg+0x642/0xb30 [ 2662.533640][ T3120] ? skb_put+0x11b/0x210 [ 2662.533666][ T3120] netlink_sendmsg+0x6b2/0xb30 [ 2662.533697][ T3120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2662.533722][ T3120] ? aa_sock_msg_perm+0x94/0x160 [ 2662.533746][ T3120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2662.533768][ T3120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2662.533790][ T3120] __sock_sendmsg+0x219/0x270 [ 2662.533824][ T3120] ____sys_sendmsg+0x505/0x830 [ 2662.533855][ T3120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2662.533891][ T3120] ? import_iovec+0x74/0xa0 [ 2662.533924][ T3120] ___sys_sendmsg+0x21f/0x2a0 [ 2662.533950][ T3120] ? __pfx____sys_sendmsg+0x10/0x10 [ 2662.534017][ T3120] ? __fget_files+0x2a/0x420 [ 2662.534034][ T3120] ? __fget_files+0x3a0/0x420 [ 2662.534066][ T3120] __x64_sys_sendmsg+0x19b/0x260 [ 2662.534093][ T3120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2662.534129][ T3120] ? __pfx_ksys_write+0x10/0x10 [ 2662.534155][ T3120] ? rcu_is_watching+0x15/0xb0 [ 2662.534185][ T3120] ? do_syscall_64+0xbe/0x3b0 [ 2662.534210][ T3120] do_syscall_64+0xfa/0x3b0 [ 2662.534234][ T3120] ? lockdep_hardirqs_on+0x9c/0x150 [ 2662.534264][ T3120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2662.534285][ T3120] ? clear_bhb_loop+0x60/0xb0 [ 2662.534311][ T3120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2662.534331][ T3120] RIP: 0033:0x7f95b218e9a9 [ 2662.534350][ T3120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2662.534368][ T3120] RSP: 002b:00007f95b3053038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2662.534391][ T3120] RAX: ffffffffffffffda RBX: 00007f95b23b5fa0 RCX: 00007f95b218e9a9 [ 2662.534407][ T3120] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2662.534421][ T3120] RBP: 00007f95b3053090 R08: 0000000000000000 R09: 0000000000000000 [ 2662.534434][ T3120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2662.534447][ T3120] R13: 0000000000000000 R14: 00007f95b23b5fa0 R15: 00007fff44171908 [ 2662.534481][ T3120] [ 2662.836843][ T3125] FAULT_INJECTION: forcing a failure. [ 2662.836843][ T3125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2662.865800][ T3125] CPU: 1 UID: 0 PID: 3125 Comm: syz.0.20012 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2662.865834][ T3125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2662.865848][ T3125] Call Trace: [ 2662.865858][ T3125] [ 2662.865869][ T3125] dump_stack_lvl+0x189/0x250 [ 2662.865905][ T3125] ? __pfx____ratelimit+0x10/0x10 [ 2662.865938][ T3125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2662.865963][ T3125] ? __pfx__printk+0x10/0x10 [ 2662.865992][ T3125] ? __might_fault+0xb0/0x130 [ 2662.866034][ T3125] should_fail_ex+0x414/0x560 [ 2662.866062][ T3125] _copy_from_iter+0x1db/0x16f0 [ 2662.866093][ T3125] ? rcu_is_watching+0x15/0xb0 [ 2662.866119][ T3125] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 2662.866150][ T3125] ? __pfx__copy_from_iter+0x10/0x10 [ 2662.866178][ T3125] ? __build_skb_around+0x257/0x3e0 [ 2662.866204][ T3125] ? netlink_sendmsg+0x642/0xb30 [ 2662.866227][ T3125] ? skb_put+0x11b/0x210 [ 2662.866253][ T3125] netlink_sendmsg+0x6b2/0xb30 [ 2662.866285][ T3125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2662.866314][ T3125] ? aa_sock_msg_perm+0x94/0x160 [ 2662.866338][ T3125] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2662.866361][ T3125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2662.866390][ T3125] __sock_sendmsg+0x219/0x270 [ 2662.866424][ T3125] ____sys_sendmsg+0x505/0x830 [ 2662.866455][ T3125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2662.866494][ T3125] ? import_iovec+0x74/0xa0 [ 2662.866528][ T3125] ___sys_sendmsg+0x21f/0x2a0 [ 2662.866555][ T3125] ? __pfx____sys_sendmsg+0x10/0x10 [ 2662.866586][ T3125] ? rcu_read_lock_any_held+0xb3/0x120 [ 2662.866628][ T3125] ? sb_end_write+0xe9/0x1c0 [ 2662.866663][ T3125] ? __pfx_vfs_write+0x10/0x10 [ 2662.866703][ T3125] __x64_sys_sendmsg+0x19b/0x260 [ 2662.866731][ T3125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2662.866768][ T3125] ? __pfx_ksys_write+0x10/0x10 [ 2662.866793][ T3125] ? rcu_is_watching+0x15/0xb0 [ 2662.866823][ T3125] ? do_syscall_64+0xbe/0x3b0 [ 2662.866849][ T3125] do_syscall_64+0xfa/0x3b0 [ 2662.866868][ T3125] ? lockdep_hardirqs_on+0x9c/0x150 [ 2662.866899][ T3125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2662.866920][ T3125] ? clear_bhb_loop+0x60/0xb0 [ 2662.866946][ T3125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2662.866967][ T3125] RIP: 0033:0x7fea6f58e9a9 [ 2662.866986][ T3125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2662.867004][ T3125] RSP: 002b:00007fea70368038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2662.867027][ T3125] RAX: ffffffffffffffda RBX: 00007fea6f7b5fa0 RCX: 00007fea6f58e9a9 [ 2662.867042][ T3125] RDX: 00000000040c8480 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2662.867056][ T3125] RBP: 00007fea70368090 R08: 0000000000000000 R09: 0000000000000000 [ 2662.867069][ T3125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2662.867082][ T3125] R13: 0000000000000000 R14: 00007fea6f7b5fa0 R15: 00007fffc41678c8 [ 2662.867115][ T3125] [ 2664.207032][ T3149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20023'. [ 2664.270816][ T3153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20024'. [ 2664.460616][ T3149] team0: Port device team_slave_0 removed [ 2664.831132][ T3175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2665.371312][ T3196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20035'. [ 2665.500382][ T3202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.20036'. [ 2665.916804][ T3205] lo speed is unknown, defaulting to 1000 [ 2666.309611][ T3229] FAULT_INJECTION: forcing a failure. [ 2666.309611][ T3229] name failslab, interval 1, probability 0, space 0, times 0 [ 2666.324602][ T3229] CPU: 1 UID: 0 PID: 3229 Comm: syz.7.20044 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2666.324635][ T3229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2666.324649][ T3229] Call Trace: [ 2666.324658][ T3229] [ 2666.324667][ T3229] dump_stack_lvl+0x189/0x250 [ 2666.324699][ T3229] ? __pfx____ratelimit+0x10/0x10 [ 2666.324731][ T3229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2666.324757][ T3229] ? __pfx__printk+0x10/0x10 [ 2666.324792][ T3229] ? __pfx___might_resched+0x10/0x10 [ 2666.324822][ T3229] should_fail_ex+0x414/0x560 [ 2666.324849][ T3229] should_failslab+0xa8/0x100 [ 2666.324888][ T3229] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2666.324919][ T3229] ? __alloc_skb+0x112/0x2d0 [ 2666.324946][ T3229] __alloc_skb+0x112/0x2d0 [ 2666.324971][ T3229] netlink_sendmsg+0x5c6/0xb30 [ 2666.325003][ T3229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2666.325028][ T3229] ? aa_sock_msg_perm+0x94/0x160 [ 2666.325052][ T3229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2666.325075][ T3229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2666.325097][ T3229] __sock_sendmsg+0x219/0x270 [ 2666.325136][ T3229] ____sys_sendmsg+0x505/0x830 [ 2666.325167][ T3229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2666.325203][ T3229] ? import_iovec+0x74/0xa0 [ 2666.325236][ T3229] ___sys_sendmsg+0x21f/0x2a0 [ 2666.325263][ T3229] ? __pfx____sys_sendmsg+0x10/0x10 [ 2666.325328][ T3229] ? __fget_files+0x2a/0x420 [ 2666.325346][ T3229] ? __fget_files+0x3a0/0x420 [ 2666.325377][ T3229] __x64_sys_sendmsg+0x19b/0x260 [ 2666.325405][ T3229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2666.325442][ T3229] ? __pfx_ksys_write+0x10/0x10 [ 2666.325467][ T3229] ? rcu_is_watching+0x15/0xb0 [ 2666.325497][ T3229] ? do_syscall_64+0xbe/0x3b0 [ 2666.325523][ T3229] do_syscall_64+0xfa/0x3b0 [ 2666.325542][ T3229] ? lockdep_hardirqs_on+0x9c/0x150 [ 2666.325573][ T3229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2666.325594][ T3229] ? clear_bhb_loop+0x60/0xb0 [ 2666.325620][ T3229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2666.325641][ T3229] RIP: 0033:0x7f95b218e9a9 [ 2666.325660][ T3229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2666.325678][ T3229] RSP: 002b:00007f95b3053038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2666.325700][ T3229] RAX: ffffffffffffffda RBX: 00007f95b23b5fa0 RCX: 00007f95b218e9a9 [ 2666.325715][ T3229] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 2666.325728][ T3229] RBP: 00007f95b3053090 R08: 0000000000000000 R09: 0000000000000000 [ 2666.325741][ T3229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2666.325754][ T3229] R13: 0000000000000000 R14: 00007f95b23b5fa0 R15: 00007fff44171908 [ 2666.325788][ T3229] [ 2666.740875][ T3236] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20043'. [ 2667.093376][ T3244] netlink: 32 bytes leftover after parsing attributes in process `syz.7.20048'. [ 2667.372579][ T3247] netlink: 32 bytes leftover after parsing attributes in process `syz.7.20048'. [ 2667.845083][ T3265] FAULT_INJECTION: forcing a failure. [ 2667.845083][ T3265] name failslab, interval 1, probability 0, space 0, times 0 [ 2667.914962][ T3265] CPU: 0 UID: 0 PID: 3265 Comm: syz.6.20056 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2667.914995][ T3265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2667.915008][ T3265] Call Trace: [ 2667.915018][ T3265] [ 2667.915028][ T3265] dump_stack_lvl+0x189/0x250 [ 2667.915061][ T3265] ? __pfx____ratelimit+0x10/0x10 [ 2667.915094][ T3265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2667.915119][ T3265] ? __pfx__printk+0x10/0x10 [ 2667.915154][ T3265] ? __pfx___might_resched+0x10/0x10 [ 2667.915186][ T3265] should_fail_ex+0x414/0x560 [ 2667.915214][ T3265] should_failslab+0xa8/0x100 [ 2667.915248][ T3265] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2667.915280][ T3265] ? __alloc_skb+0x112/0x2d0 [ 2667.915306][ T3265] __alloc_skb+0x112/0x2d0 [ 2667.915333][ T3265] netlink_sendmsg+0x5c6/0xb30 [ 2667.915366][ T3265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2667.915391][ T3265] ? aa_sock_msg_perm+0x94/0x160 [ 2667.915416][ T3265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2667.915439][ T3265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2667.915461][ T3265] __sock_sendmsg+0x219/0x270 [ 2667.915495][ T3265] ____sys_sendmsg+0x505/0x830 [ 2667.915526][ T3265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2667.915562][ T3265] ? import_iovec+0x74/0xa0 [ 2667.915595][ T3265] ___sys_sendmsg+0x21f/0x2a0 [ 2667.915623][ T3265] ? __pfx____sys_sendmsg+0x10/0x10 [ 2667.915689][ T3265] ? __fget_files+0x2a/0x420 [ 2667.915707][ T3265] ? __fget_files+0x3a0/0x420 [ 2667.915739][ T3265] __x64_sys_sendmsg+0x19b/0x260 [ 2667.915767][ T3265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2667.915803][ T3265] ? __pfx_ksys_write+0x10/0x10 [ 2667.915829][ T3265] ? rcu_is_watching+0x15/0xb0 [ 2667.915861][ T3265] ? do_syscall_64+0xbe/0x3b0 [ 2667.915887][ T3265] do_syscall_64+0xfa/0x3b0 [ 2667.915914][ T3265] ? lockdep_hardirqs_on+0x9c/0x150 [ 2667.915945][ T3265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2667.915966][ T3265] ? clear_bhb_loop+0x60/0xb0 [ 2667.915997][ T3265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2667.916018][ T3265] RIP: 0033:0x7fa0aff8e9a9 [ 2667.916036][ T3265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2667.916054][ T3265] RSP: 002b:00007fa0b0dcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2667.916076][ T3265] RAX: ffffffffffffffda RBX: 00007fa0b01b5fa0 RCX: 00007fa0aff8e9a9 [ 2667.916092][ T3265] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2667.916106][ T3265] RBP: 00007fa0b0dcb090 R08: 0000000000000000 R09: 0000000000000000 [ 2667.916119][ T3265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2667.916132][ T3265] R13: 0000000000000000 R14: 00007fa0b01b5fa0 R15: 00007fffb98c5088 [ 2667.916165][ T3265] [ 2668.229467][ T3271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20057'. [ 2668.844486][ T3296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20065'. [ 2669.036945][ T3303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20065'. [ 2669.150346][ T3307] geneve3: entered promiscuous mode [ 2669.375515][ T3318] syz_tun: left allmulticast mode [ 2669.382060][ T3318] syz_tun: left promiscuous mode [ 2669.387814][ T3318] bridge0: port 3(syz_tun) entered disabled state [ 2669.442883][ T3318] bridge_slave_0: left allmulticast mode [ 2669.451146][ T3318] bridge_slave_0: left promiscuous mode [ 2669.457070][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 2669.486659][ T3322] netlink: 32 bytes leftover after parsing attributes in process `syz.5.20072'. [ 2669.506183][ T3318] bridge_slave_1: left allmulticast mode [ 2669.514367][ T3318] bridge_slave_1: left promiscuous mode [ 2669.521916][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 2669.575485][ T3318] bond0: (slave bond_slave_0): Releasing backup interface [ 2669.616396][ T3318] bond0: (slave bond_slave_1): Releasing backup interface [ 2669.680544][ T3318] team0: Failed to send options change via netlink (err -105) [ 2669.690921][ T3318] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 2669.709378][ T3318] team0: Port device team_slave_0 removed [ 2669.769339][ T3318] team0: Failed to send options change via netlink (err -105) [ 2669.781031][ T3318] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 2669.819244][ T3318] team0: Port device team_slave_1 removed [ 2669.843186][ T3318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2669.874671][ T3318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2669.963451][ T3318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2669.976150][ T3318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2670.621728][ T3353] netlink: 'syz.7.20076': attribute type 9 has an invalid length. [ 2670.647569][ T3309] lo speed is unknown, defaulting to 1000 [ 2670.676656][ T3353] netlink: 211988 bytes leftover after parsing attributes in process `syz.7.20076'. [ 2671.156636][ T3367] netlink: 32 bytes leftover after parsing attributes in process `syz.6.20081'. [ 2671.242623][ T3368] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20082'. [ 2671.287018][ T3371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2671.427105][ T3372] netlink: 32 bytes leftover after parsing attributes in process `syz.6.20081'. [ 2671.631488][ T3380] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20084'. [ 2672.034764][ T3316] lo speed is unknown, defaulting to 1000 [ 2672.796064][ T3410] nbd: must specify at least one socket [ 2672.998825][ T3417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20090'. [ 2673.121903][ T3417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20090'. [ 2673.192234][ T3326] lo speed is unknown, defaulting to 1000 [ 2673.767392][ T3428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20093'. [ 2673.862284][ T3428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20093'. [ 2674.079688][ T3386] lo speed is unknown, defaulting to 1000 [ 2674.788525][T17491] Bluetooth: hci7: command tx timeout [ 2676.024866][ T3472] FAULT_INJECTION: forcing a failure. [ 2676.024866][ T3472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2676.060534][ T3472] CPU: 1 UID: 0 PID: 3472 Comm: syz.6.20109 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2676.060566][ T3472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2676.060580][ T3472] Call Trace: [ 2676.060590][ T3472] [ 2676.060600][ T3472] dump_stack_lvl+0x189/0x250 [ 2676.060630][ T3472] ? __pfx____ratelimit+0x10/0x10 [ 2676.060662][ T3472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2676.060687][ T3472] ? __pfx__printk+0x10/0x10 [ 2676.060716][ T3472] ? __might_fault+0xb0/0x130 [ 2676.060757][ T3472] should_fail_ex+0x414/0x560 [ 2676.060784][ T3472] _copy_from_user+0x2d/0xb0 [ 2676.060814][ T3472] ___sys_sendmsg+0x158/0x2a0 [ 2676.060842][ T3472] ? __pfx____sys_sendmsg+0x10/0x10 [ 2676.060908][ T3472] ? __fget_files+0x2a/0x420 [ 2676.060926][ T3472] ? __fget_files+0x3a0/0x420 [ 2676.060957][ T3472] __x64_sys_sendmsg+0x19b/0x260 [ 2676.060985][ T3472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2676.061020][ T3472] ? __pfx_ksys_write+0x10/0x10 [ 2676.061045][ T3472] ? rcu_is_watching+0x15/0xb0 [ 2676.061076][ T3472] ? do_syscall_64+0xbe/0x3b0 [ 2676.061100][ T3472] do_syscall_64+0xfa/0x3b0 [ 2676.061119][ T3472] ? lockdep_hardirqs_on+0x9c/0x150 [ 2676.061149][ T3472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2676.061170][ T3472] ? clear_bhb_loop+0x60/0xb0 [ 2676.061195][ T3472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2676.061214][ T3472] RIP: 0033:0x7fa0aff8e9a9 [ 2676.061233][ T3472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2676.061261][ T3472] RSP: 002b:00007fa0b0dcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2676.061284][ T3472] RAX: ffffffffffffffda RBX: 00007fa0b01b5fa0 RCX: 00007fa0aff8e9a9 [ 2676.061299][ T3472] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 2676.061312][ T3472] RBP: 00007fa0b0dcb090 R08: 0000000000000000 R09: 0000000000000000 [ 2676.061326][ T3472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2676.061338][ T3472] R13: 0000000000000000 R14: 00007fa0b01b5fa0 R15: 00007fffb98c5088 [ 2676.061371][ T3472] [ 2676.290479][ T3474] __nla_validate_parse: 4 callbacks suppressed [ 2676.290498][ T3474] netlink: 32 bytes leftover after parsing attributes in process `syz.5.20107'. [ 2677.825588][ T3474] lo speed is unknown, defaulting to 1000 [ 2678.761912][ T3520] lo speed is unknown, defaulting to 1000 [ 2679.113907][ T3542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20128'. [ 2679.399307][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20130'. [ 2679.588888][ T5850] Bluetooth: hci1: command 0x0405 tx timeout [ 2680.274035][ T3555] netlink: 40 bytes leftover after parsing attributes in process `syz.6.20134'. [ 2681.878817][ T3569] FAULT_INJECTION: forcing a failure. [ 2681.878817][ T3569] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.928486][ T3569] CPU: 0 UID: 0 PID: 3569 Comm: syz.5.20138 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2681.928524][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2681.928538][ T3569] Call Trace: [ 2681.928547][ T3569] [ 2681.928558][ T3569] dump_stack_lvl+0x189/0x250 [ 2681.928590][ T3569] ? __pfx____ratelimit+0x10/0x10 [ 2681.928624][ T3569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2681.928650][ T3569] ? __pfx__printk+0x10/0x10 [ 2681.928681][ T3569] ? __lock_acquire+0xab9/0xd20 [ 2681.928714][ T3569] should_fail_ex+0x414/0x560 [ 2681.928742][ T3569] should_failslab+0xa8/0x100 [ 2681.928777][ T3569] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2681.928805][ T3569] ? skb_clone+0x212/0x3a0 [ 2681.928836][ T3569] skb_clone+0x212/0x3a0 [ 2681.928866][ T3569] __netlink_deliver_tap+0x404/0x850 [ 2681.928902][ T3569] ? netlink_deliver_tap+0x2e/0x1b0 [ 2681.928924][ T3569] netlink_deliver_tap+0x19c/0x1b0 [ 2681.928945][ T3569] netlink_unicast+0x7fa/0x9e0 [ 2681.928992][ T3569] ? __pfx_netlink_unicast+0x10/0x10 [ 2681.929023][ T3569] ? netlink_sendmsg+0x642/0xb30 [ 2681.929041][ T3569] ? skb_put+0x11b/0x210 [ 2681.929066][ T3569] netlink_sendmsg+0x805/0xb30 [ 2681.929096][ T3569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2681.929120][ T3569] ? aa_sock_msg_perm+0x94/0x160 [ 2681.929143][ T3569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2681.929165][ T3569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2681.929186][ T3569] __sock_sendmsg+0x219/0x270 [ 2681.929219][ T3569] ____sys_sendmsg+0x505/0x830 [ 2681.929251][ T3569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2681.929287][ T3569] ? import_iovec+0x74/0xa0 [ 2681.929320][ T3569] ___sys_sendmsg+0x21f/0x2a0 [ 2681.929346][ T3569] ? __pfx____sys_sendmsg+0x10/0x10 [ 2681.929410][ T3569] ? __fget_files+0x2a/0x420 [ 2681.929428][ T3569] ? __fget_files+0x3a0/0x420 [ 2681.929457][ T3569] __x64_sys_sendmsg+0x19b/0x260 [ 2681.929485][ T3569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2681.929518][ T3569] ? __pfx_ksys_write+0x10/0x10 [ 2681.929545][ T3569] ? rcu_is_watching+0x15/0xb0 [ 2681.929574][ T3569] ? do_syscall_64+0xbe/0x3b0 [ 2681.929600][ T3569] do_syscall_64+0xfa/0x3b0 [ 2681.929619][ T3569] ? lockdep_hardirqs_on+0x9c/0x150 [ 2681.929649][ T3569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2681.929670][ T3569] ? clear_bhb_loop+0x60/0xb0 [ 2681.929692][ T3569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2681.929709][ T3569] RIP: 0033:0x7f57b9d8e9a9 [ 2681.929725][ T3569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2681.929742][ T3569] RSP: 002b:00007f57bacd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2681.929761][ T3569] RAX: ffffffffffffffda RBX: 00007f57b9fb5fa0 RCX: 00007f57b9d8e9a9 [ 2681.929774][ T3569] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 2681.929785][ T3569] RBP: 00007f57bacd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2681.929796][ T3569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2681.929807][ T3569] R13: 0000000000000000 R14: 00007f57b9fb5fa0 R15: 00007ffd0dd9ce38 [ 2681.929834][ T3569] [ 2682.299169][ T31] INFO: task syz.1.19353:535 blocked for more than 143 seconds. [ 2682.306867][ T31] Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 [ 2682.325434][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2682.336017][ T31] task:syz.1.19353 state:D stack:24520 pid:535 tgid:534 ppid:29424 task_flags:0x400140 flags:0x00004004 [ 2682.373833][ T31] Call Trace: [ 2682.399119][ T31] [ 2682.411785][ T31] __schedule+0x16f5/0x4d00 [ 2682.426717][ T31] ? __lock_acquire+0xab9/0xd20 [ 2682.472090][ T31] ? schedule+0x165/0x360 [ 2682.489511][ T31] ? __pfx___schedule+0x10/0x10 [ 2682.526945][ T31] ? schedule+0x91/0x360 [ 2682.563544][ T31] schedule+0x165/0x360 [ 2682.609912][ T31] schedule_preempt_disabled+0x13/0x30 [ 2682.629570][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2682.653930][ T31] __mutex_lock+0x724/0xe80 [ 2682.676884][ T31] ? __mutex_lock+0x51b/0xe80 [ 2682.702451][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 2682.733355][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2682.752466][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 2682.775314][ T31] ? __nlmsg_put+0xef/0x1b0 [ 2682.793421][ T31] ? genlmsg_put+0x137/0x2e0 [ 2682.814978][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 2682.849493][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2682.876144][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 2682.898683][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 2682.920808][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2682.947536][ T31] genl_rcv_msg+0x60e/0x790 [ 2682.957680][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2682.979053][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 2682.995704][ T31] ? __asan_memcpy+0x40/0x70 [ 2683.011862][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 2683.032311][ T31] netlink_rcv_skb+0x208/0x470 [ 2683.049457][ T31] ? __lock_acquire+0xab9/0xd20 [ 2683.065732][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2683.089411][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2683.109023][ T31] ? down_read+0x1ad/0x2e0 [ 2683.113526][ T31] genl_rcv+0x28/0x40 [ 2683.139052][ T31] netlink_unicast+0x82c/0x9e0 [ 2683.154232][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2683.184858][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2683.198452][ T31] ? skb_put+0x11b/0x210 [ 2683.202792][ T31] netlink_sendmsg+0x805/0xb30 [ 2683.234394][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2683.252004][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 2683.257033][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2683.289279][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2683.294750][ T31] __sock_sendmsg+0x219/0x270 [ 2683.321246][ T31] ____sys_sendmsg+0x505/0x830 [ 2683.326110][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2683.373387][ T31] ? import_iovec+0x74/0xa0 [ 2683.399193][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 2683.419076][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 2683.434685][ T31] ? futex_wait+0x285/0x360 [ 2683.458840][ T31] ? bpf_trace_run2+0x186/0x4b0 [ 2683.463812][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 2683.501026][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2683.506605][ T31] ? rcu_is_watching+0x15/0xb0 [ 2683.533275][ T31] ? trace_sys_enter+0x25/0x120 [ 2683.553539][ T31] do_syscall_64+0xfa/0x3b0 [ 2683.578466][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2683.590716][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2683.611238][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2683.616078][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2683.649448][ T31] RIP: 0033:0x7fc07038e9a9 [ 2683.659182][ T31] RSP: 002b:00007fc0712d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2683.681664][ T31] RAX: ffffffffffffffda RBX: 00007fc0705b5fa0 RCX: 00007fc07038e9a9 [ 2683.725685][ T31] RDX: 0000000000000010 RSI: 0000200000001540 RDI: 000000000000000b [ 2683.749961][ T31] RBP: 00007fc070410d69 R08: 0000000000000000 R09: 0000000000000000 [ 2683.782153][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2683.810403][ T31] R13: 0000000000000000 R14: 00007fc0705b5fa0 R15: 00007ffecac17fd8 [ 2683.859089][ T31] [ 2683.862291][ T31] [ 2683.862291][ T31] Showing all locks held in the system: [ 2683.909243][ T31] 1 lock held by khungtaskd/31: [ 2683.949011][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2683.998558][ T31] 2 locks held by getty/5609: [ 2684.003417][ T31] #0: ffff888030dcd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2684.032309][ T3573] lo speed is unknown, defaulting to 1000 [ 2684.044392][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2684.093028][ T31] 3 locks held by kworker/1:3/3629: [ 2684.109187][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2684.187536][ T31] #1: ffffc9000b91fbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2684.225388][ T31] #2: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2684.262068][ T31] 2 locks held by kworker/u8:9/15791: [ 2684.278736][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2684.297135][ T3590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20140'. [ 2684.317495][ T31] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 2684.342960][ T31] 2 locks held by kworker/u8:37/15823: [ 2684.375644][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2684.418602][ T31] #1: ffffc90003f0fbc0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2684.451829][ T31] 2 locks held by syz.2.18335/29538: [ 2684.468328][ T31] #0: ffffffff8f583d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2684.498522][ T31] #1: ffffffff8e41b808 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 2684.538642][ T31] 2 locks held by syz.1.19353/535: [ 2684.543830][ T31] #0: ffffffff8f583d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2684.577815][ T31] #1: ffffffff8e41b808 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 2684.608438][ T31] 2 locks held by syz.3.19513/1161: [ 2684.613785][ T31] #0: ffffffff8f583d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2684.630686][ T31] #1: ffffffff8e41b808 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 2684.641761][ T31] 1 lock held by syz.6.20134/3555: [ 2684.646986][ T31] 5 locks held by syz.0.20140/3573: [ 2684.653063][ T31] 2 locks held by syz.0.20140/3594: [ 2684.658987][ T31] 3 locks held by syz.7.20141/3574: [ 2684.664294][ T31] #0: ffff888057aa4408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 2684.675272][ T31] #1: ffff888074d049d8 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x2a/0x2f0 [ 2684.685809][ T31] #2: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 2684.725266][ T31] 5 locks held by syz.7.20141/3576: [ 2684.735737][ T31] 1 lock held by syz.7.20141/3577: [ 2684.746123][ T31] #0: ffff88807704ca08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 2684.788782][ T31] 4 locks held by syz.7.20141/3579: [ 2684.796366][ T31] #0: ffffffff8f511e70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2684.824094][ T31] #1: ffffffff8f276430 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 2684.858445][ T31] #2: ffffffff8f2765f0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 2684.877682][ T31] #3: ffff888041d5cf60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 2684.899163][ T31] 2 locks held by syz.7.20141/3580: [ 2684.906758][ T31] #0: ffff888042301408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 2684.919778][ T31] #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 2684.933057][ T31] [ 2684.935548][ T31] ============================================= [ 2684.935548][ T31] [ 2684.945030][ T31] NMI backtrace for cpu 0 [ 2684.945049][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2684.945074][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2684.945086][ T31] Call Trace: [ 2684.945095][ T31] [ 2684.945105][ T31] dump_stack_lvl+0x189/0x250 [ 2684.945133][ T31] ? __wake_up_klogd+0xd9/0x110 [ 2684.945167][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2684.945193][ T31] ? __pfx__printk+0x10/0x10 [ 2684.945235][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2684.945268][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2684.945292][ T31] ? _printk+0xcf/0x120 [ 2684.945326][ T31] ? __pfx__printk+0x10/0x10 [ 2684.945357][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2684.945381][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2684.945413][ T31] watchdog+0xfee/0x1030 [ 2684.945435][ T31] ? watchdog+0x1de/0x1030 [ 2684.945465][ T31] kthread+0x70e/0x8a0 [ 2684.945498][ T31] ? __pfx_watchdog+0x10/0x10 [ 2684.945517][ T31] ? __pfx_kthread+0x10/0x10 [ 2684.945549][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2684.945579][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2684.945608][ T31] ? __pfx_kthread+0x10/0x10 [ 2684.945639][ T31] ret_from_fork+0x3fc/0x770 [ 2684.945665][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2684.945701][ T31] ? __switch_to_asm+0x39/0x70 [ 2684.945727][ T31] ? __switch_to_asm+0x33/0x70 [ 2684.945753][ T31] ? __pfx_kthread+0x10/0x10 [ 2684.945784][ T31] ret_from_fork_asm+0x1a/0x30 [ 2684.945830][ T31] [ 2684.945838][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2685.116353][ C1] NMI backtrace for cpu 1 [ 2685.116373][ C1] CPU: 1 UID: 0 PID: 15791 Comm: kworker/u8:9 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2685.116398][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2685.116411][ C1] Workqueue: bat_events batadv_nc_worker [ 2685.116444][ C1] RIP: 0010:do_raw_spin_lock+0x12e/0x290 [ 2685.116473][ C1] Code: 00 48 89 df be 04 00 00 00 e8 8e 5b 83 00 48 8d 7c 24 40 be 04 00 00 00 e8 7f 5b 83 00 8b 44 24 40 b9 01 00 00 00 f0 0f b1 0b <0f> 85 dd 00 00 00 65 8b 1d 89 bf 01 11 48 b9 00 00 00 00 00 fc ff [ 2685.116489][ C1] RSP: 0018:ffffc90004bef8c0 EFLAGS: 00000246 [ 2685.116504][ C1] RAX: 0000000000000000 RBX: ffff8880774289c0 RCX: 0000000000000001 [ 2685.116516][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90004bef900 [ 2685.116528][ C1] RBP: ffffc90004bef978 R08: 0000000000000003 R09: 0000000000000004 [ 2685.116540][ C1] R10: dffffc0000000000 R11: fffff5200097df20 R12: ffff8880774289d0 [ 2685.116554][ C1] R13: ffff8880774289c8 R14: 1ffff1100ee8513a R15: 1ffff1100ee85139 [ 2685.116568][ C1] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 2685.116587][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2685.116600][ C1] CR2: 0000200000fb9030 CR3: 00000000758a6000 CR4: 00000000003526f0 [ 2685.116616][ C1] Call Trace: [ 2685.116624][ C1] [ 2685.116637][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 2685.116667][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2685.116700][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 2685.116724][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 2685.116758][ C1] batadv_nc_purge_paths+0xe7/0x3b0 [ 2685.116792][ C1] batadv_nc_worker+0x369/0x610 [ 2685.116817][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 2685.116840][ C1] process_scheduled_works+0xae1/0x17b0 [ 2685.116877][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2685.116908][ C1] worker_thread+0x8a0/0xda0 [ 2685.116945][ C1] kthread+0x70e/0x8a0 [ 2685.116971][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2685.116991][ C1] ? __pfx_kthread+0x10/0x10 [ 2685.117016][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2685.117041][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2685.117066][ C1] ? __pfx_kthread+0x10/0x10 [ 2685.117090][ C1] ret_from_fork+0x3fc/0x770 [ 2685.117111][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2685.117132][ C1] ? __switch_to_asm+0x39/0x70 [ 2685.117156][ C1] ? __switch_to_asm+0x33/0x70 [ 2685.117178][ C1] ? __pfx_kthread+0x10/0x10 [ 2685.117203][ C1] ret_from_fork_asm+0x1a/0x30 [ 2685.117235][ C1] [ 2685.377098][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2685.384007][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 2685.395844][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2685.405937][ T31] Call Trace: [ 2685.409262][ T31] [ 2685.412217][ T31] dump_stack_lvl+0x99/0x250 [ 2685.416856][ T31] ? __asan_memcpy+0x40/0x70 [ 2685.421487][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2685.426722][ T31] ? __pfx__printk+0x10/0x10 [ 2685.431364][ T31] panic+0x2db/0x790 [ 2685.435385][ T31] ? __pfx_panic+0x10/0x10 [ 2685.439954][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 2685.445801][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2685.451304][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 2685.457509][ T31] watchdog+0x102d/0x1030 [ 2685.461870][ T31] ? watchdog+0x1de/0x1030 [ 2685.466327][ T31] kthread+0x70e/0x8a0 [ 2685.470435][ T31] ? __pfx_watchdog+0x10/0x10 [ 2685.475140][ T31] ? __pfx_kthread+0x10/0x10 [ 2685.479769][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2685.485005][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2685.490239][ T31] ? __pfx_kthread+0x10/0x10 [ 2685.494866][ T31] ret_from_fork+0x3fc/0x770 [ 2685.499485][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2685.504632][ T31] ? __switch_to_asm+0x39/0x70 [ 2685.509512][ T31] ? __switch_to_asm+0x33/0x70 [ 2685.514310][ T31] ? __pfx_kthread+0x10/0x10 [ 2685.518939][ T31] ret_from_fork_asm+0x1a/0x30 [ 2685.523758][ T31] [ 2685.527156][ T31] Kernel Offset: disabled [ 2685.531505][ T31] Rebooting in 86400 seconds..