last executing test programs: 1m31.688668629s ago: executing program 0 (id=3188): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020afc090700000026bd7002fedbdf2505001a00fe8000000000000000000400000000aa64010100000c00002c003000ca862220e83f1ad7"], 0x38}}, 0x40408c0) 1m31.619109034s ago: executing program 0 (id=3190): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) 1m30.741604872s ago: executing program 0 (id=3197): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x4d21}, 0x8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1m30.710162478s ago: executing program 0 (id=3198): unshare(0x26020480) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private=0xa010100, @private=0xa010101}, 0xc) 1m30.625460836s ago: executing program 0 (id=3199): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB="ff5aa60e942f7e22ac2975d519fc3b96d7f99b5b54d0744297a39ac23d76df3129a825cc88883049a3b2ed47ba073f390acce2b9b412a70e23e50500ff25e40de8c68d129bef45e7c34214", @ANYRES32, @ANYBLOB="62c2ed2b8801727e358a2cb370a1537fd9aa60583c1c89b90e3e75b17cc58ff0a4df1af2617456a69abb091f71445a4f71697fcb278fdbfa0ba7fe299b74674257773691f6867fe6cfca8250620050261025acf46e92b7082b17e369e380f3a843dc1f0ae0df6ec0007b7b7ae874a5a04f442c3fdadecd454e9761728fa740ba504497e9de99fcbf94b759ad33c1edafe623cd2e3a12fe5b", @ANYRES64=0x0], 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x448c1}, 0x24004050) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x1410, 0x800, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x4000) r2 = socket$inet6(0xa, 0x3, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000240)={0x10001, 0x6a, 0xa}, 0xc) sendmmsg$inet6(r2, &(0x7f0000001a00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xa7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}, 0x1c, 0x0}}], 0x1, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$kcm(0x28, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, &(0x7f0000000980)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 1m22.325716634s ago: executing program 2 (id=3281): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}, {&(0x7f0000000740)="9030d4958e56e924c194dcc40c17c8be76408b1f8d00818355a400b1025876b70f7cea389d895a81f4f217a265d32410a0ce7339f005ec3cfabf3dc682ccc242b8c74ca222fbb248cc4bcb7d5c56ccfe7818dfdcecf71a9923b0c20ab63efd6c12346d4b178dae4cd036564b6542f27a89d2f3a166fa4abf2665bb135d474aed250ce1cfcbc2b776e5c88501dfc3014f363b2bfe57bf1120dfe198815a0e37372b7f6149fb66a7ea2dff1d9d4d85b5dc9a8c23b7b12c9b04868342", 0xbb}, {&(0x7f0000000840)="b442cf36dd4bfd4f879e4769a8b3c1724652b1c2ed412e9481f6200321884c17f0a4c6b0f51fad1797741762a6c6422534e716e47dc9ae3eaadd3dd22992", 0x3e}, {&(0x7f0000000a40)="0898a9ff58569147df85d037ebab693ae4534e345819a36057f93dca8f4545225f63b7c9373108b956f22be214ba0691013c17a166345e5a3cf5ec0bf7d6a407d9d73923a5f79b19e03e", 0x4a}], 0x5}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1c2789bd018bf77308ae7ed990e4b63b8cf1cf4ae822f1f84abd5420339c722aa7f6d87f5926c484455c67b7a9259ac3f36154b6526320d83fe72e5f5370550de0307d8ad13d192e7d5c14f8b2367b1db7dbe02629646be253b07a1245dce1a721576750f3f592ce4ac96010bf3ce1d9ee389c83a39827b4d9f231ad23f382e2f3d86880015b84a6d3740029d6ffbbf61ae415dc51a6ebd3010000000000008067a9e4abdbbe90455d28993254ab9fa2c5d561ee000000000000000000", 0xbd}, {&(0x7f0000000640)="52f8380baae8e668551434e8e52993134696bf3c1070a44f8ceb3f19887414681b93293f0d2708000000a3d8cd2f44c13665c2b7b19ccc306f2564a04b723aca127f75146ebd099961bb5e6fbbd1b0565354e7a8f71134ab7e87ffe3ff2bc0eaed9485be7a3a004cc22c2d22c782bba426367b93ee2c699f89f97a186b3150c8e2584abae470fbda592a19cdb1712dcf558ff0b2bf908973c3ff49bf0effe80a596908e38ab9193c20b606c490819889722944eed829c7c2da45d09c470dcdb93356afd2be7ad8", 0xc7}], 0x2}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m22.200816134s ago: executing program 2 (id=3284): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x48) syz_emit_ethernet(0xc2, 0x0, &(0x7f0000000040)={0x1, 0x2, [0xa40, 0x1c8, 0xc38, 0x205]}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40, '\x00', r7, 0x0}, 0x50) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000100)=@req={0x8, 0x9, 0x4, 0xd}, 0x10) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, 0x0) 1m21.82630531s ago: executing program 2 (id=3292): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x12) socket(0x9, 0x3, 0x3ff) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600008100000110000000000000000000000ffff64010102fc02000000000000e323d446c0f07a90"], 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) 1m21.522174101s ago: executing program 2 (id=3295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x20000000, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 1m21.364896652s ago: executing program 2 (id=3298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x8, [{@loopback, 0x3}, {@local, 0x80000}]}]}}}], 0x28}, 0x4000810) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) r5 = socket(0x23, 0xa, 0x5) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x14, 0x14}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1m21.17714807s ago: executing program 2 (id=3300): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1m20.948950486s ago: executing program 32 (id=3300): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1m20.905073004s ago: executing program 0 (id=3203): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0xe0}, 0x1, 0x7}, 0x8800) 1m20.830841581s ago: executing program 33 (id=3203): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0xe0}, 0x1, 0x7}, 0x8800) 5.824439669s ago: executing program 3 (id=4317): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000001300)={0x180, 0x1, 0xa, 0x700, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x3a, 0x6, "44f3dbdeb8380b5a1f755f7101d6094c814d153ff74f75db171fcad56bf30d98416ef091fd69d812d5137ddec9cd340f4426aefff857"}, @NFTA_TABLE_USERDATA={0x7f, 0x6, "83250739d14c722cb4fea94848ab055b29e3951ca50366c2546f93034862ed3ad4a2c0a0524a73c85100bd6ed0bc68d6f2937d565780bdefca01307121fafcf9ae399ee6a773311ee666b8edddf177ed230608910d08c299be05959af052c8c03cb2ed380595d8ff852102cb55b347202bd3c415b1315a5baa19cd"}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "8a8db7e581021a6a5b2d594158670c13699cd31f50a222c2850af75e2ab4bf88b2bb31969937c20a80b5bd62bb6094c5463ff0e03324b5d7af85afe4bb6e1fc7e8e2f72fe3e6349ad8682bd7ae896c4f126b92a0f71dc18e1d68fd702816ea6e1a94fec9e110ceca8c257a4b231c917712bd2fba0a0e603dcd417ccb2d4ff62d85ab272968cd777e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x180}, 0x1, 0x0, 0x0, 0x4001}, 0x44000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x58}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x8100, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x31) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000020abc02e18633dae6fe1000094f1bb9e00"/38], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x70bd2a, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r11}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)="97379565fc95232a38db6316effebc6c1b6443b574e121f7ce8d614652fcea23fd25217e888c2b8e31ac3a5d2f83f9a1886c1e26c146b6877546d520ea4b87771d2aef3cf4a67687305c80505ffc09e5f4064778c5714acdc7d513db3e512020668cc8b0beaf77a5ec4a9104dbb708bf82176b9d79cde689b6e978d41ab8f4a979492b20fc5aec5dfb1fef30aeb9278dbf2ffb079fc2b46862b1acfab0e6f9de24d7198486848330eaa377140c92d323c05ebb93b24c38b1dcfacdc89851282b33fd9091b4d4e93e04faaab9fff08690e26fda83a91252223d500efd67a3c01a00f81cad07b608485e2274f7d8cc7af58853", 0xf2}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0xa0}}], 0x1, 0x800) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)="97379565fc95232a38db6316effebc6c1b6443b574e121f7ce8d614652fcea23fd25217e888c2b8e31ac3a5d2f83f9a1886c1e26c146b6877546d520ea4b87771d2aef3cf4a67687305c80505ffc09e5f4064778c5714acdc7d513db3e512020668cc8b0beaf77a5ec4a9104dbb708bf82176b9d79cde689b6e978d41ab8f4a979492b20fc5aec5dfb1fef30aeb9278dbf2ffb079fc2b46862b1acfab0e6f9de24d7198486848330eaa377140c92d323c05ebb93b24c38b1dcfacdc89851282b33fd9091b4d4e93e04faaab9fff08690e26fda83a91252223d500efd67a3c01a00f81cad07b608485e2274f7d8cc7af58853", 0xf2}], 0x1, &(0x7f0000000c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0xa0}}], 0x1, 0x800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) recvmsg$unix(r10, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000600)=""/50, 0x32}, {&(0x7f0000000d40)=""/165, 0xa5}, {&(0x7f0000000e00)=""/181, 0xb5}, {&(0x7f0000000ec0)=""/107, 0x6b}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/27, 0x1b}, {&(0x7f0000000f80)=""/105, 0x69}], 0x7, &(0x7f0000001080)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}, 0x0) 2.761227199s ago: executing program 3 (id=4365): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500"], 0x17c}}, 0x40880) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/uts\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000023c0)=r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r5, r2, 0x0, 0xa, &(0x7f00000000c0)='syzkaller\x00'}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r9) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r12, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000e491f6000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r13 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r13, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r13, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) 2.681115589s ago: executing program 3 (id=4367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) (fail_nth: 4) 2.325965145s ago: executing program 3 (id=4374): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (fail_nth: 4) 2.123836126s ago: executing program 3 (id=4376): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast}) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000"], 0x190) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.108632023s ago: executing program 5 (id=4377): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500"], 0x17c}}, 0x40880) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/uts\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000023c0)=r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r5, r2, 0x0, 0xa, &(0x7f00000000c0)='syzkaller\x00'}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r9) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r12, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000e491f6000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r13 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r13, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r13, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) 1.901878825s ago: executing program 3 (id=4380): r0 = socket$nl_route(0x10, 0x3, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@default, @netrom, @bcast, @netrom, @default, @bcast, @default, @default]}, &(0x7f0000000080)=0x48, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r3, 0xd, 0x9}, 0x8) accept$netrom(r2, 0x0, 0x0) 1.898041876s ago: executing program 5 (id=4382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57) 1.595486846s ago: executing program 6 (id=4384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (fail_nth: 3) 1.539096857s ago: executing program 6 (id=4385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=@mpls_delroute={0x30, 0x18, 0x9, 0x70bd6c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket(0x10, 0x3, 0xc) write(r5, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) r6 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x4000010) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r8, 0x1, 0x6, @multicast}, 0x10) 1.538088812s ago: executing program 4 (id=4386): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x22, &(0x7f0000000040)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x1, 0xe3f7baf87de78dfe, 0x0, 0x0, "5e6bc16ff78a4043"}}}}, 0x0) 1.453036714s ago: executing program 4 (id=4388): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.430014725s ago: executing program 1 (id=4389): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f0000000000), 0x10) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r2, 0x0, 0x0, 0x20012000, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000001000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x11, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070143a8f8ffffffb702000008000000b50a0000000000008500000006002b1e0000950000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.37626104s ago: executing program 4 (id=4390): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x51, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x17, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x17, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x2000000}, "30b00afe4e794d"}}}}}}}, 0x0) 1.236981142s ago: executing program 4 (id=4391): r0 = socket$inet6(0xa, 0x6, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r1, 0x0, 0x6}, 0x18) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078640101011395b109ecac14142100004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb37df67d544a00"/190], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xfffffffffffffdc3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async, rerun: 32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r11, @ANYBLOB="80001e0a0a000200aaaaaaaaaa1b000054ad39d201000040"], 0x30}, 0x1, 0x0, 0x0, 0x2400c080}, 0x0) (async) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r14, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="df4800000000000000000c000000040003800c00018008000100", @ANYRES32=r14, @ANYBLOB="2d555a30f875c9420772592bfbb44c4f5eb54a353e0b5e5c63d60dc4ba660a822c36f1128816f970"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (rerun: 64) 1.118151433s ago: executing program 4 (id=4392): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000341200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098ee68886dd", 0x0, 0x99e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a40)=ANY=[], 0x5c}}, 0x40000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0x5, 0x7, 0xf2}, &(0x7f0000000240)=0x14) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x3c, &(0x7f00000001c0)}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r7, 0x400454da, 0xffffffffffffffff) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = accept$alg(r1, 0x0, 0x0) recvmsg(r8, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x2}, 0x40000102) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$alg(r8, &(0x7f0000005340)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000001480)="7924ac926dd0d43520b9dc643991451ac508cc66d62728590ac0be8a2df4de9db7d03befcfc00ec3b9a3bb6b726de985eb", 0x31}], 0x2, 0x0, 0x0, 0x40}], 0x1, 0x800) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f00000047c0)=""/4051, 0xfd3}, {&(0x7f00000037c0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000006c0)=""/177, 0xb1}], 0x6}, 0x40000100) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 1.007170091s ago: executing program 5 (id=4393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 868.804238ms ago: executing program 5 (id=4394): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000031637f00"/16], 0x48) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 543.857685ms ago: executing program 1 (id=4395): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="d337", 0x2, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c) (fail_nth: 1) 417.020351ms ago: executing program 6 (id=4396): r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000006cc0)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f0000006d00)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x17}, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x12c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x120, 0x4, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_PATTERN={0x29, 0x2, "e3eabb0f1407ba2e575eba7420d06b6373deba128c621dbf95ea214ecf9fcb38d7d9062b81"}, @NL80211_PKTPAT_MASK={0xd9, 0x1, "f8c8acbe9cf8f43bdef4ad1951f563a2e231f66a94d52c4da9374a3c69f09e5e23f65fd11d6da80a9793a209e49e67d9875ff5f2b3c30a36710ccd06d5cfdcbb698b70877f37003454e3ce9f3f0c8c2cece3c77b2a29f327059523b1c3043c21ccff85a0513e77f89f2de03c952402fe5538ab8918a8fbfeb0733cd76f905b3da5c3ec8141fdb72c70d1b73d7024f816ee9393deb3748a5c6e8442bb207a8bdb1d20fdf1bbbb242cf3ee0349c6c4eeb40b69fb6d439bda2ea2d5a329bf9cafe58fe1f8c7a6212b66eb5039c1beb78b2a12344e2dae"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}]}, {0x4}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x14068800}, 0x1) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0xfffe, @multicast1}, 0x10) 234.434963ms ago: executing program 1 (id=4397): r0 = socket$kcm(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x40) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x8c4) r7 = socket(0x6, 0x3, 0x1) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000000140)={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4055, 0xfd7}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000080)=""/31, 0x1f}], 0x3}, 0x12100) 173.137796ms ago: executing program 6 (id=4398): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x112) 171.624774ms ago: executing program 4 (id=4399): socket$inet(0xa, 0x801, 0x84) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80020}, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000300)={0x1, {{0xa, 0x4e22, 0x46, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}, {{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}}}, 0x108) shutdown(r1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 134.61377ms ago: executing program 1 (id=4400): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x80000) getsockname$packet(r3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) (fail_nth: 4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000ce2000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r4, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000c16000/0x4000)=nil, 0x4000, 0x2000003, 0x28011, 0xffffffffffffffff, 0xac9d4000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000003, 0x6e073, r6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 132.407707ms ago: executing program 5 (id=4401): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000040)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x622a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x7ff}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffbfffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@xdp, &(0x7f0000000000)=0x80, 0x80000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000600)={0x14, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x3ffe}]}, 0x14}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={r6, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000380)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f00000000c0)='GPL\x00', 0x0, 0x48, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=@delpolicy={0x2b0, 0x14, 0x400, 0x70bd2b, 0x25dfdbfc, {{@in6=@empty, @in6=@loopback, 0x4e22, 0x9, 0x4e22, 0x4a05, 0x2, 0xc0, 0x0, 0x3c}, 0x6e6bb4}, [@etimer_thresh={0x8, 0xc, 0xa6a}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xa, 0x8a, 0x2}}, @algo_comp={0x13e, 0x3, {{'lzs\x00'}, 0x7b0, "3223604320757711cc655352b4cc2371e51f79aa64e7855e9b186c7b25b499bb87c835275e9133fae420e0338081fa268496021ca7121ca89583acc9c44d5054e8f1421d8f4b1c6a37a2c7d8665b4eaf492337d64e202eb3e84ed9cba2fdd03f6a4b16db8a81bad706e5af45d6d4f22b3c925be2e5676123c78c725d91a73b6ef80755b944829bc2e93c0316e49408f7fd5128dd80f20e86b8f0b033abf7b1fe2d8a34d2ec3aedaf140557b5885cbb81663653ade162ab044b5de4d429f93d0c866fcd8508d94cf31af90c55413f56d01a40dd5478549be156078a30a0984fa637bd21cd1ef579a1ca408a4246377c0ecf379ffa69dd"}}, @sec_ctx={0xc9, 0x8, {0xc5, 0x8, 0x1, 0xc, 0xbd, "9ffc82cc9a2316cad572f98e4e7f2eec5d4bb32b701274926406af65b07288b2310b9ba2089bfe1d9e7f6faccfa72a22fbbeef5de1e428142895f8fa5617e88e1ae89546b1c91d08135202c926e747b2cf0db6fc5a07bfccda5389db6052a15d0ae64ea9776e3a537fb8ecfa0f1fb3cc14005640ae5497d63c8e538c4755fb66e97ea393524d8c0c49d04e5ce8fa52c76745582199ae4fd1995806d2ad5f4ed868ebd2c9d2473244c8d26826db362d72e4437309a4ea8a4d8701aaa7d9"}}, @policy_type={0xa, 0x10, {0x1}}, @tfcpad={0x8, 0x16, 0x10000}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2c, 0x3}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r10, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket(0x15, 0x5, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 63.904953ms ago: executing program 6 (id=4402): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400a0}], 0x1, 0x240400d4) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000300)) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001180)=0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) r8 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000140)={0x3, @bcast, r9}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000011c0)={0x0, 0x0, 0x0}, &(0x7f0000001200)=0xc) sendmsg$netlink(r2, &(0x7f00000012c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4}, 0xc, &(0x7f0000001140)=[{&(0x7f0000000080)={0x1024, 0x40, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@generic="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", @typed={0x5, 0xbb, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x138, 0x0, 0x1, [@nested={0x4, 0x75}]}, @nested={0x4, 0x118}]}, 0x1024}, {&(0x7f00000010c0)={0x5c, 0x2b, 0x31, 0x70bd2d, 0x25dfdbff, "", [@nested={0xc, 0x9f, 0x0, 0x1, [@nested={0x4, 0xf3}, @nested={0x4, 0x85}]}, @generic="585d71b574cbce2091a429ed6e1229ff208985c97a1a94a6a4d57d1ca45f41bb8a42a155fa1941326ddb29346087425f1c0e2958b678c8a23976e290eb7e88"]}, 0x5c}], 0x2, &(0x7f0000001240)=[@rights={{0x38, 0x1, 0x1, [r3, r0, r0, r0, r0, r4, r0, r0, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r9, r10}}}], 0x58, 0x4008080}, 0x4000001) 63.709367ms ago: executing program 1 (id=4403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57) 63.318946ms ago: executing program 6 (id=4404): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000021110001000000000000000000100003400c"], 0x34}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 548.304µs ago: executing program 5 (id=4405): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000031637f00"/16], 0x48) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=4406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x9, 0x2}, &(0x7f0000000140)=0x8) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafbe863cac50580318bc98470cca6f706513d128a70dd249fd5", 0x27}, {&(0x7f0000000440)="448b7ce57c8e6d051b9f79565786c01189fcd73a", 0x14}], 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x33b9}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xb9d1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@gettaction={0xf0, 0x32, 0x20, 0x70bd2a, 0x25dfdaff, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6dc0}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xef}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xef9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x0, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) kernel console output (not intermixed with test programs): 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.004034][T15983] RSP: 002b:00007f862bd88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.004047][T15983] RAX: ffffffffffffffda RBX: 00007f862b1b5fa0 RCX: 00007f862af8e9a9 [ 262.004056][T15983] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 262.004063][T15983] RBP: 00007f862bd88090 R08: 0000000000000000 R09: 0000000000000000 [ 262.004070][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.004075][T15983] R13: 0000000000000000 R14: 00007f862b1b5fa0 R15: 00007ffdd62805b8 [ 262.004094][T15983] [ 262.239570][T15985] bond0: (slave bond_slave_0): Releasing backup interface [ 262.256944][T15985] bond0: (slave bond_slave_1): Releasing backup interface [ 262.267604][T15985] team0: Port device team_slave_0 removed [ 262.275816][T15985] team0: Port device team_slave_1 removed [ 262.283046][T15997] FAULT_INJECTION: forcing a failure. [ 262.283046][T15997] name failslab, interval 1, probability 0, space 0, times 0 [ 262.287275][T15985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.298395][T15997] CPU: 0 UID: 0 PID: 15997 Comm: syz.3.3921 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 262.298410][T15997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.298417][T15997] Call Trace: [ 262.298422][T15997] [ 262.298427][T15997] dump_stack_lvl+0x189/0x250 [ 262.298444][T15997] ? __pfx____ratelimit+0x10/0x10 [ 262.298460][T15997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.298471][T15997] ? __pfx__printk+0x10/0x10 [ 262.298489][T15997] ? __pfx___might_resched+0x10/0x10 [ 262.298503][T15997] should_fail_ex+0x414/0x560 [ 262.298517][T15997] should_failslab+0xa8/0x100 [ 262.298533][T15997] __kmalloc_cache_noprof+0x70/0x3d0 [ 262.298547][T15997] ? sctp_association_new+0x89/0x25f0 [ 262.298562][T15997] sctp_association_new+0x89/0x25f0 [ 262.298575][T15997] ? sctp_has_association+0x1cd/0x1f0 [ 262.298586][T15997] ? sctp_has_association+0x2f/0x1f0 [ 262.298604][T15997] sctp_connect_new_asoc+0x2c5/0x690 [ 262.298618][T15997] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 262.298630][T15997] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 262.298640][T15997] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 262.298651][T15997] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 262.298662][T15997] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 262.298674][T15997] ? security_sctp_bind_connect+0x7e/0x2e0 [ 262.298697][T15997] sctp_sendmsg+0x155c/0x2810 [ 262.298716][T15997] ? __pfx_sctp_sendmsg+0x10/0x10 [ 262.298729][T15997] ? aa_sk_perm+0x81e/0x950 [ 262.298747][T15997] ? __pfx_aa_sk_perm+0x10/0x10 [ 262.298764][T15997] ? sock_rps_record_flow+0x19/0x410 [ 262.298779][T15997] ? inet_sendmsg+0x2f4/0x370 [ 262.298790][T15997] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.298803][T15997] __sock_sendmsg+0x19c/0x270 [ 262.298819][T15997] ____sys_sendmsg+0x505/0x830 [ 262.298834][T15997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.298851][T15997] ? import_iovec+0x74/0xa0 [ 262.298867][T15997] ___sys_sendmsg+0x21f/0x2a0 [ 262.298880][T15997] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.298913][T15997] ? __fget_files+0x2a/0x420 [ 262.298922][T15997] ? __fget_files+0x3a0/0x420 [ 262.298937][T15997] __x64_sys_sendmsg+0x19b/0x260 [ 262.298950][T15997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.298968][T15997] ? __pfx_ksys_write+0x10/0x10 [ 262.298984][T15997] ? do_syscall_64+0xbe/0x3b0 [ 262.298997][T15997] do_syscall_64+0xfa/0x3b0 [ 262.299005][T15997] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.299019][T15997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.299029][T15997] ? clear_bhb_loop+0x60/0xb0 [ 262.299041][T15997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.299051][T15997] RIP: 0033:0x7f9d7b38e9a9 [ 262.299061][T15997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.299069][T15997] RSP: 002b:00007f9d791d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.299081][T15997] RAX: ffffffffffffffda RBX: 00007f9d7b5b6160 RCX: 00007f9d7b38e9a9 [ 262.299098][T15997] RDX: 0000000000000814 RSI: 0000200000000f80 RDI: 0000000000000003 [ 262.299104][T15997] RBP: 00007f9d791d5090 R08: 0000000000000000 R09: 0000000000000000 [ 262.299110][T15997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.299116][T15997] R13: 0000000000000001 R14: 00007f9d7b5b6160 R15: 00007ffef9c0c248 [ 262.299137][T15997] [ 262.314537][T15996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.324756][T15985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.434572][T15999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.545679][T16001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.666546][T15985] bond0: (slave wlan1): Releasing backup interface [ 262.680314][ T5903] lo speed is unknown, defaulting to 1000 [ 262.788359][T16004] vcan0: Master is either lo or non-ether device [ 262.897959][T16016] macvtap1: entered promiscuous mode [ 262.924405][T16016] erspan0: entered promiscuous mode [ 262.934867][T16016] macvtap1: entered allmulticast mode [ 262.940319][T16016] erspan0: entered allmulticast mode [ 262.950867][T16023] erspan0: left allmulticast mode [ 262.958469][T16023] erspan0: left promiscuous mode [ 263.058262][T16029] FAULT_INJECTION: forcing a failure. [ 263.058262][T16029] name failslab, interval 1, probability 0, space 0, times 0 [ 263.075226][T16029] CPU: 0 UID: 0 PID: 16029 Comm: syz.3.3936 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 263.075245][T16029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.075252][T16029] Call Trace: [ 263.075258][T16029] [ 263.075263][T16029] dump_stack_lvl+0x189/0x250 [ 263.075280][T16029] ? __pfx____ratelimit+0x10/0x10 [ 263.075298][T16029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.075312][T16029] ? __pfx__printk+0x10/0x10 [ 263.075334][T16029] should_fail_ex+0x414/0x560 [ 263.075349][T16029] should_failslab+0xa8/0x100 [ 263.075367][T16029] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 263.075384][T16029] ? __alloc_skb+0x112/0x2d0 [ 263.075399][T16029] __alloc_skb+0x112/0x2d0 [ 263.075413][T16029] _sctp_make_chunk+0x5e/0x430 [ 263.075423][T16029] ? __lock_acquire+0xab9/0xd20 [ 263.075440][T16029] sctp_make_heartbeat+0xa7/0x470 [ 263.075460][T16029] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 263.075482][T16029] ? sctp_transport_hold+0x142/0x1c0 [ 263.075496][T16029] ? __pfx_sctp_transport_hold+0x10/0x10 [ 263.075513][T16029] sctp_sf_do_prm_requestheartbeat+0x32/0x280 [ 263.075533][T16029] sctp_do_sm+0x1e7/0x5a20 [ 263.075546][T16029] ? __pfx_sctp_pname+0x10/0x10 [ 263.075559][T16029] ? __pfx_sctp_hash_cmp+0x10/0x10 [ 263.075581][T16029] ? __pfx_sctp_do_sm+0x10/0x10 [ 263.075593][T16029] ? stack_trace_save+0x9c/0xe0 [ 263.075607][T16029] ? __pfx_sctp_hash_key+0x10/0x10 [ 263.075618][T16029] ? __pfx_sctp_hash_obj+0x10/0x10 [ 263.075656][T16029] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 263.075669][T16029] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 263.075680][T16029] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 263.075703][T16029] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 263.075720][T16029] sctp_apply_peer_addr_params+0xdf/0x1880 [ 263.075736][T16029] ? __pfx_sctp_addr_id2transport+0x10/0x10 [ 263.075757][T16029] sctp_setsockopt_peer_addr_params+0x5e5/0x940 [ 263.075778][T16029] sctp_setsockopt+0x709/0x1200 [ 263.075790][T16029] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 263.075808][T16029] do_sock_setsockopt+0x179/0x1b0 [ 263.075824][T16029] __x64_sys_setsockopt+0x13f/0x1b0 [ 263.075840][T16029] do_syscall_64+0xfa/0x3b0 [ 263.075852][T16029] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.075867][T16029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.075879][T16029] ? clear_bhb_loop+0x60/0xb0 [ 263.075892][T16029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.075902][T16029] RIP: 0033:0x7f9d7b38e9a9 [ 263.075914][T16029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.075923][T16029] RSP: 002b:00007f9d7c117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 263.075937][T16029] RAX: ffffffffffffffda RBX: 00007f9d7b5b5fa0 RCX: 00007f9d7b38e9a9 [ 263.075945][T16029] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 263.075951][T16029] RBP: 00007f9d7c117090 R08: 000000000000009c R09: 0000000000000000 [ 263.075958][T16029] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 263.075965][T16029] R13: 0000000000000000 R14: 00007f9d7b5b5fa0 R15: 00007ffef9c0c248 [ 263.075982][T16029] [ 263.110460][T16035] FAULT_INJECTION: forcing a failure. [ 263.110460][T16035] name failslab, interval 1, probability 0, space 0, times 0 [ 263.407567][T16035] CPU: 1 UID: 0 PID: 16035 Comm: syz.4.3939 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 263.407586][T16035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.407594][T16035] Call Trace: [ 263.407599][T16035] [ 263.407604][T16035] dump_stack_lvl+0x189/0x250 [ 263.407621][T16035] ? __pfx____ratelimit+0x10/0x10 [ 263.407638][T16035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.407650][T16035] ? __pfx__printk+0x10/0x10 [ 263.407661][T16035] ? __local_bh_enable_ip+0x12d/0x1c0 [ 263.407676][T16035] ? sctp_get_port_local+0xe5d/0x1680 [ 263.407696][T16035] should_fail_ex+0x414/0x560 [ 263.407709][T16035] should_failslab+0xa8/0x100 [ 263.407723][T16035] __kmalloc_cache_noprof+0x70/0x3d0 [ 263.407736][T16035] ? sctp_add_bind_addr+0x8c/0x370 [ 263.407751][T16035] sctp_add_bind_addr+0x8c/0x370 [ 263.407762][T16035] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 263.407774][T16035] sctp_do_bind+0x5ab/0x940 [ 263.407791][T16035] sctp_connect_new_asoc+0x25c/0x690 [ 263.407803][T16035] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 263.407811][T16035] ? __local_bh_enable_ip+0x12d/0x1c0 [ 263.407825][T16035] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 263.407835][T16035] ? security_sctp_bind_connect+0x7e/0x2e0 [ 263.407850][T16035] sctp_sendmsg+0x155c/0x2810 [ 263.407866][T16035] ? __pfx_sctp_sendmsg+0x10/0x10 [ 263.407877][T16035] ? aa_sk_perm+0x81e/0x950 [ 263.407894][T16035] ? __pfx_aa_sk_perm+0x10/0x10 [ 263.407909][T16035] ? sock_rps_record_flow+0x19/0x410 [ 263.407923][T16035] ? inet_sendmsg+0x2f4/0x370 [ 263.407940][T16035] __sock_sendmsg+0x19c/0x270 [ 263.407955][T16035] __sys_sendto+0x3bd/0x520 [ 263.407966][T16035] ? __pfx___sys_sendto+0x10/0x10 [ 263.407974][T16035] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 263.407993][T16035] ? __fget_files+0x3a0/0x420 [ 263.408007][T16035] ? ksys_write+0x22a/0x250 [ 263.408020][T16035] ? __pfx_ksys_write+0x10/0x10 [ 263.408029][T16035] ? rcu_is_watching+0x15/0xb0 [ 263.408043][T16035] __x64_sys_sendto+0xde/0x100 [ 263.408054][T16035] do_syscall_64+0xfa/0x3b0 [ 263.408062][T16035] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.408074][T16035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.408083][T16035] ? clear_bhb_loop+0x60/0xb0 [ 263.408094][T16035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.408102][T16035] RIP: 0033:0x7faa4218e9a9 [ 263.408111][T16035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.408118][T16035] RSP: 002b:00007faa42fad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 263.408130][T16035] RAX: ffffffffffffffda RBX: 00007faa423b5fa0 RCX: 00007faa4218e9a9 [ 263.408136][T16035] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000003 [ 263.408142][T16035] RBP: 00007faa42fad090 R08: 000020000005ffe4 R09: 000000000000001c [ 263.408148][T16035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.408153][T16035] R13: 0000000000000000 R14: 00007faa423b5fa0 R15: 00007ffc62c9b9b8 [ 263.408168][T16035] [ 263.838277][T16050] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 263.862484][T16045] bond0: (slave dummy0): Releasing backup interface [ 263.886289][T16045] bridge_slave_0: left allmulticast mode [ 263.891996][T16045] bridge_slave_0: left promiscuous mode [ 263.897836][T16045] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.919209][T16045] bridge_slave_1: left allmulticast mode [ 263.927779][T16045] bridge_slave_1: left promiscuous mode [ 263.933839][T16045] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.960492][T16045] bond0: (slave bond_slave_0): Releasing backup interface [ 263.971144][T16045] bond0: (slave bond_slave_1): Releasing backup interface [ 263.985151][T16045] team0: Port device team_slave_0 removed [ 264.000653][T16045] team0: Port device team_slave_1 removed [ 264.012455][T16045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.026632][T16045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.037559][T16045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.045371][T16045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.057610][T16045] team0: Port device vlan0 removed [ 264.066387][T16045] bond3: (slave wlan0): Releasing active interface [ 264.073337][T16045] bond3: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 264.094033][T16045] vlan2: entered promiscuous mode [ 264.107161][T16045] bond0: (slave wlan1): Releasing backup interface [ 264.115557][T16045] bond3: (slave vlan2): Releasing active interface [ 264.122214][T16045] vlan2: left promiscuous mode [ 264.128056][T16045] veth1: left promiscuous mode [ 264.140387][T16048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.153535][T16048] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 264.166307][ T3484] tipc: Resetting bearer [ 264.177469][T16057] macvtap2: entered promiscuous mode [ 264.182948][T16057] erspan0: entered promiscuous mode [ 264.188265][T16057] macvtap2: entered allmulticast mode [ 264.193864][T16057] erspan0: entered allmulticast mode [ 264.202809][T16063] erspan0: left allmulticast mode [ 264.211881][T16063] erspan0: left promiscuous mode [ 264.218740][T16067] __nla_validate_parse: 9 callbacks suppressed [ 264.218750][T16067] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3949'. [ 264.267465][T16067] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3949'. [ 264.325811][T16071] tipc: Enabling of bearer rejected, already enabled [ 264.351380][T16076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3952'. [ 264.428761][T16079] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3953'. [ 264.638346][T16089] syzkaller1: entered promiscuous mode [ 264.643955][T16089] syzkaller1: entered allmulticast mode [ 264.956132][T16094] validate_nla: 3 callbacks suppressed [ 264.956145][T16094] netlink: 'syz.3.3958': attribute type 12 has an invalid length. [ 265.049605][T16096] netlink: 'syz.4.3959': attribute type 29 has an invalid length. [ 265.141898][T16098] netlink: 'syz.4.3959': attribute type 29 has an invalid length. [ 265.209137][T16098] netlink: 'syz.4.3959': attribute type 29 has an invalid length. [ 265.218990][T16098] netlink: 'syz.4.3959': attribute type 29 has an invalid length. [ 265.309232][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3960'. [ 265.348770][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3962'. [ 265.442254][T16107] netlink: 'syz.4.3963': attribute type 12 has an invalid length. [ 265.450110][T16107] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3963'. [ 265.476368][T16111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3965'. [ 265.520103][T16113] FAULT_INJECTION: forcing a failure. [ 265.520103][T16113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.536739][T16113] CPU: 0 UID: 0 PID: 16113 Comm: syz.6.3966 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 265.536756][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.536763][T16113] Call Trace: [ 265.536768][T16113] [ 265.536773][T16113] dump_stack_lvl+0x189/0x250 [ 265.536791][T16113] ? __pfx____ratelimit+0x10/0x10 [ 265.536809][T16113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.536822][T16113] ? __pfx__printk+0x10/0x10 [ 265.536837][T16113] ? __might_fault+0xb0/0x130 [ 265.536860][T16113] should_fail_ex+0x414/0x560 [ 265.536876][T16113] _copy_from_iter+0x1db/0x16f0 [ 265.536891][T16113] ? tcp_leave_memory_pressure+0xea/0x100 [ 265.536904][T16113] ? __pfx_tcp_leave_memory_pressure+0x10/0x10 [ 265.536923][T16113] ? __pfx__copy_from_iter+0x10/0x10 [ 265.536941][T16113] ? get_page+0xdc/0x220 [ 265.536958][T16113] ? sk_msg_alloc+0x8e9/0x980 [ 265.536976][T16113] sk_msg_memcopy_from_iter+0x360/0x710 [ 265.537002][T16113] tcp_bpf_sendmsg+0x5ec/0x1a40 [ 265.537030][T16113] ? process_measurement+0x3d8/0x1a40 [ 265.537053][T16113] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 265.537118][T16113] ? __lock_acquire+0xab9/0xd20 [ 265.537130][T16113] ? __pfx_aa_sk_perm+0x10/0x10 [ 265.537145][T16113] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 265.537158][T16113] ? sock_rps_record_flow+0x19/0x410 [ 265.537174][T16113] ? inet_send_prepare+0x5c/0x270 [ 265.537191][T16113] ? inet6_sendmsg+0x101/0x120 [ 265.537208][T16113] __sock_sendmsg+0xe5/0x270 [ 265.537226][T16113] ____sys_sendmsg+0x52d/0x830 [ 265.537242][T16113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.537261][T16113] ? import_iovec+0x74/0xa0 [ 265.537278][T16113] ___sys_sendmsg+0x21f/0x2a0 [ 265.537293][T16113] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.537332][T16113] ? __fget_files+0x2a/0x420 [ 265.537341][T16113] ? __fget_files+0x3a0/0x420 [ 265.537358][T16113] __sys_sendmmsg+0x227/0x430 [ 265.537376][T16113] ? __pfx___sys_sendmmsg+0x10/0x10 [ 265.537387][T16113] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 265.537417][T16113] ? ksys_write+0x22a/0x250 [ 265.537434][T16113] ? __pfx_ksys_write+0x10/0x10 [ 265.537447][T16113] ? rcu_is_watching+0x15/0xb0 [ 265.537466][T16113] __x64_sys_sendmmsg+0xa0/0xc0 [ 265.537481][T16113] do_syscall_64+0xfa/0x3b0 [ 265.537492][T16113] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.537507][T16113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.537518][T16113] ? clear_bhb_loop+0x60/0xb0 [ 265.537532][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.537543][T16113] RIP: 0033:0x7fd7d3f8e9a9 [ 265.537554][T16113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.537564][T16113] RSP: 002b:00007fd7d4edc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 265.537577][T16113] RAX: ffffffffffffffda RBX: 00007fd7d41b5fa0 RCX: 00007fd7d3f8e9a9 [ 265.537586][T16113] RDX: 0000000000000400 RSI: 0000200000002440 RDI: 0000000000000003 [ 265.537593][T16113] RBP: 00007fd7d4edc090 R08: 0000000000000000 R09: 0000000000000000 [ 265.537600][T16113] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 265.537607][T16113] R13: 0000000000000000 R14: 00007fd7d41b5fa0 R15: 00007ffe30c05258 [ 265.537627][T16113] [ 265.925244][T16124] netlink: 'syz.1.3971': attribute type 29 has an invalid length. [ 265.962982][T16126] netlink: 'syz.6.3972': attribute type 1 has an invalid length. [ 266.005827][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3973'. [ 266.013000][T16126] vlan2: entered allmulticast mode [ 266.108763][T16135] lo speed is unknown, defaulting to 1000 [ 266.504660][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3976'. [ 266.634189][T16147] netlink: 'syz.4.3978': attribute type 1 has an invalid length. [ 266.790991][T16152] FAULT_INJECTION: forcing a failure. [ 266.790991][T16152] name failslab, interval 1, probability 0, space 0, times 0 [ 266.851619][T16152] CPU: 1 UID: 0 PID: 16152 Comm: syz.3.3980 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 266.851640][T16152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.851646][T16152] Call Trace: [ 266.851652][T16152] [ 266.851657][T16152] dump_stack_lvl+0x189/0x250 [ 266.851676][T16152] ? __pfx____ratelimit+0x10/0x10 [ 266.851693][T16152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.851706][T16152] ? __pfx__printk+0x10/0x10 [ 266.851724][T16152] ? __pfx___might_resched+0x10/0x10 [ 266.851737][T16152] ? fs_reclaim_acquire+0x7d/0x100 [ 266.851751][T16152] should_fail_ex+0x414/0x560 [ 266.851764][T16152] should_failslab+0xa8/0x100 [ 266.851781][T16152] __kmalloc_noprof+0xcb/0x4f0 [ 266.851795][T16152] ? strset_prepare_data+0x5a1/0xa20 [ 266.851812][T16152] strset_prepare_data+0x5a1/0xa20 [ 266.851832][T16152] ? __pfx_strset_prepare_data+0x10/0x10 [ 266.851845][T16152] ethnl_default_dump_one+0x2f3/0x7e0 [ 266.851866][T16152] ethnl_default_dumpit+0x30c/0x600 [ 266.851878][T16152] ? ethnl_default_dumpit+0xd1/0x600 [ 266.851893][T16152] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 266.851908][T16152] ? __build_skb_around+0x257/0x3e0 [ 266.851923][T16152] genl_dumpit+0x10b/0x1b0 [ 266.851940][T16152] netlink_dump+0x6e1/0xe90 [ 266.851965][T16152] ? __pfx_netlink_dump+0x10/0x10 [ 266.851995][T16152] ? kmem_cache_free+0x18f/0x400 [ 266.852014][T16152] netlink_recvmsg+0x676/0xa30 [ 266.852032][T16152] ? __pfx_netlink_recvmsg+0x10/0x10 [ 266.852047][T16152] ? aa_sock_msg_perm+0x94/0x160 [ 266.852060][T16152] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 266.852071][T16152] ? security_socket_recvmsg+0x7e/0x2e0 [ 266.852086][T16152] ? __pfx_netlink_recvmsg+0x10/0x10 [ 266.852097][T16152] sock_recvmsg+0x229/0x270 [ 266.852116][T16152] ____sys_recvmsg+0x1c9/0x460 [ 266.852137][T16152] ? __pfx_____sys_recvmsg+0x10/0x10 [ 266.852160][T16152] ? import_iovec+0x74/0xa0 [ 266.852171][T16152] ___sys_recvmsg+0x1b5/0x510 [ 266.852182][T16152] ? __pfx____sys_recvmsg+0x10/0x10 [ 266.852199][T16152] ? __fget_files+0x3a0/0x420 [ 266.852210][T16152] __x64_sys_recvmsg+0x198/0x260 [ 266.852219][T16152] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 266.852231][T16152] ? __pfx_ksys_write+0x10/0x10 [ 266.852243][T16152] ? do_syscall_64+0xbe/0x3b0 [ 266.852251][T16152] do_syscall_64+0xfa/0x3b0 [ 266.852257][T16152] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.852267][T16152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.852273][T16152] ? clear_bhb_loop+0x60/0xb0 [ 266.852281][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.852288][T16152] RIP: 0033:0x7f9d7b38e9a9 [ 266.852295][T16152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.852301][T16152] RSP: 002b:00007f9d7c117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 266.852309][T16152] RAX: ffffffffffffffda RBX: 00007f9d7b5b5fa0 RCX: 00007f9d7b38e9a9 [ 266.852314][T16152] RDX: 0000000000012100 RSI: 00002000000001c0 RDI: 0000000000000003 [ 266.852318][T16152] RBP: 00007f9d7c117090 R08: 0000000000000000 R09: 0000000000000000 [ 266.852322][T16152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.852326][T16152] R13: 0000000000000000 R14: 00007f9d7b5b5fa0 R15: 00007ffef9c0c248 [ 266.852337][T16152] [ 267.219069][T16154] bridge_slave_1: left allmulticast mode [ 267.227688][T16154] bridge_slave_1: left promiscuous mode [ 267.235895][T16154] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.248356][T16154] bridge_slave_0: left allmulticast mode [ 267.254517][T16154] bridge_slave_0: left promiscuous mode [ 267.260400][T16154] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.403025][T16163] FAULT_INJECTION: forcing a failure. [ 267.403025][T16163] name failslab, interval 1, probability 0, space 0, times 0 [ 267.432616][T16163] CPU: 1 UID: 0 PID: 16163 Comm: syz.1.3983 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 267.432638][T16163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.432645][T16163] Call Trace: [ 267.432649][T16163] [ 267.432654][T16163] dump_stack_lvl+0x189/0x250 [ 267.432672][T16163] ? __pfx____ratelimit+0x10/0x10 [ 267.432689][T16163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.432702][T16163] ? __pfx__printk+0x10/0x10 [ 267.432719][T16163] ? __pfx___might_resched+0x10/0x10 [ 267.432732][T16163] ? fs_reclaim_acquire+0x7d/0x100 [ 267.432747][T16163] should_fail_ex+0x414/0x560 [ 267.432763][T16163] should_failslab+0xa8/0x100 [ 267.432782][T16163] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 267.432798][T16163] ? process_measurement+0x1640/0x1a40 [ 267.432811][T16163] ? __alloc_skb+0x112/0x2d0 [ 267.432825][T16163] __alloc_skb+0x112/0x2d0 [ 267.432840][T16163] alloc_skb_with_frags+0xca/0x890 [ 267.432854][T16163] ? __pfx_process_measurement+0x10/0x10 [ 267.432866][T16163] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 267.432883][T16163] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 267.432906][T16163] sock_alloc_send_pskb+0x857/0x990 [ 267.432935][T16163] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 267.432950][T16163] ? __local_bh_enable_ip+0x12d/0x1c0 [ 267.432964][T16163] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 267.432984][T16163] j1939_sk_sendmsg+0x6f5/0x1350 [ 267.433012][T16163] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 267.433025][T16163] ? __lock_acquire+0xab9/0xd20 [ 267.433035][T16163] ? aa_sock_msg_perm+0x94/0x160 [ 267.433048][T16163] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.433060][T16163] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 267.433074][T16163] __sock_sendmsg+0x219/0x270 [ 267.433092][T16163] ____sys_sendmsg+0x505/0x830 [ 267.433110][T16163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.433130][T16163] ? import_iovec+0x74/0xa0 [ 267.433148][T16163] ___sys_sendmsg+0x21f/0x2a0 [ 267.433163][T16163] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.433202][T16163] ? __fget_files+0x2a/0x420 [ 267.433212][T16163] ? __fget_files+0x3a0/0x420 [ 267.433229][T16163] __x64_sys_sendmsg+0x19b/0x260 [ 267.433245][T16163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.433265][T16163] ? __pfx_ksys_write+0x10/0x10 [ 267.433278][T16163] ? rcu_is_watching+0x15/0xb0 [ 267.433296][T16163] ? do_syscall_64+0xbe/0x3b0 [ 267.433310][T16163] do_syscall_64+0xfa/0x3b0 [ 267.433320][T16163] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.433336][T16163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.433347][T16163] ? clear_bhb_loop+0x60/0xb0 [ 267.433361][T16163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.433371][T16163] RIP: 0033:0x7f862af8e9a9 [ 267.433382][T16163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.433391][T16163] RSP: 002b:00007f862bd88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.433410][T16163] RAX: ffffffffffffffda RBX: 00007f862b1b5fa0 RCX: 00007f862af8e9a9 [ 267.433418][T16163] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 267.433425][T16163] RBP: 00007f862bd88090 R08: 0000000000000000 R09: 0000000000000000 [ 267.433432][T16163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.433438][T16163] R13: 0000000000000000 R14: 00007f862b1b5fa0 R15: 00007ffdd62805b8 [ 267.433458][T16163] [ 268.501768][T16172] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 268.597729][T16180] macvtap1: entered promiscuous mode [ 268.612408][T16184] SET target dimension over the limit! [ 268.617982][T16180] erspan0: entered promiscuous mode [ 268.626167][T16180] macvtap1: entered allmulticast mode [ 268.641469][T16187] erspan0: left promiscuous mode [ 268.768756][T16190] lo speed is unknown, defaulting to 1000 [ 268.798031][T16198] netlink: 'syz.6.3996': attribute type 13 has an invalid length. [ 268.878751][T16198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.034218][T16208] lo speed is unknown, defaulting to 1000 [ 269.238068][T16224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.247123][T16224] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 269.259840][T16224] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 269.287687][T16226] bridge0: entered allmulticast mode [ 269.770482][T16260] FAULT_INJECTION: forcing a failure. [ 269.770482][T16260] name failslab, interval 1, probability 0, space 0, times 0 [ 269.799652][T16260] CPU: 1 UID: 0 PID: 16260 Comm: syz.5.4013 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 269.799672][T16260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.799680][T16260] Call Trace: [ 269.799685][T16260] [ 269.799690][T16260] dump_stack_lvl+0x189/0x250 [ 269.799709][T16260] ? __pfx____ratelimit+0x10/0x10 [ 269.799727][T16260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.799741][T16260] ? __pfx__printk+0x10/0x10 [ 269.799761][T16260] ? __pfx___might_resched+0x10/0x10 [ 269.799774][T16260] ? fs_reclaim_acquire+0x7d/0x100 [ 269.799788][T16260] should_fail_ex+0x414/0x560 [ 269.799804][T16260] ? page_pool_create_percpu+0x32a/0xbe0 [ 269.799818][T16260] should_failslab+0xa8/0x100 [ 269.799835][T16260] __kvmalloc_node_noprof+0x161/0x5f0 [ 269.799850][T16260] ? page_pool_create_percpu+0x32a/0xbe0 [ 269.799868][T16260] page_pool_create_percpu+0x32a/0xbe0 [ 269.799883][T16260] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 269.799898][T16260] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 269.799912][T16260] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 269.799928][T16260] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.799946][T16260] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 269.799956][T16260] ? 0xffffffffa02057c0 [ 269.799968][T16260] ? 0xffffffffa02057c0 [ 269.800008][T16260] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 269.800026][T16260] ? _copy_from_user+0x94/0xb0 [ 269.800040][T16260] ? bpf_test_init+0x133/0x170 [ 269.800055][T16260] ? xdp_convert_md_to_buff+0x5b/0x330 [ 269.800069][T16260] bpf_prog_test_run_xdp+0x713/0x1000 [ 269.800090][T16260] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 269.800104][T16260] ? __fget_files+0x2a/0x420 [ 269.800116][T16260] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 269.800129][T16260] bpf_prog_test_run+0x2c4/0x340 [ 269.800143][T16260] __sys_bpf+0x4a4/0x860 [ 269.800160][T16260] ? __pfx___sys_bpf+0x10/0x10 [ 269.800184][T16260] ? ksys_write+0x22a/0x250 [ 269.800200][T16260] ? __pfx_ksys_write+0x10/0x10 [ 269.800212][T16260] ? rcu_is_watching+0x15/0xb0 [ 269.800228][T16260] __x64_sys_bpf+0x7c/0x90 [ 269.800243][T16260] do_syscall_64+0xfa/0x3b0 [ 269.800253][T16260] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.800267][T16260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.800278][T16260] ? clear_bhb_loop+0x60/0xb0 [ 269.800290][T16260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.800301][T16260] RIP: 0033:0x7f03df78e9a9 [ 269.800312][T16260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.800322][T16260] RSP: 002b:00007f03e051f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.800336][T16260] RAX: ffffffffffffffda RBX: 00007f03df9b5fa0 RCX: 00007f03df78e9a9 [ 269.800345][T16260] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 269.800352][T16260] RBP: 00007f03e051f090 R08: 0000000000000000 R09: 0000000000000000 [ 269.800359][T16260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.800366][T16260] R13: 0000000000000000 R14: 00007f03df9b5fa0 R15: 00007fff8078aa98 [ 269.800385][T16260] [ 269.800391][T16260] page_pool_create_percpu() gave up with errno -12 [ 270.150129][T16263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.270677][T16277] __nla_validate_parse: 15 callbacks suppressed [ 270.270692][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4016'. [ 270.345525][T16282] validate_nla: 5 callbacks suppressed [ 270.345540][T16282] netlink: 'syz.4.4017': attribute type 10 has an invalid length. [ 270.388597][T16267] lo speed is unknown, defaulting to 1000 [ 270.438116][T16263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.498142][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4020'. [ 270.570162][T16288] tipc: Enabling of bearer rejected, already enabled [ 270.948130][T16309] mac80211_hwsim hwsim15 wlan0: left promiscuous mode [ 270.998203][T16311] netlink: 'syz.1.4024': attribute type 9 has an invalid length. [ 271.018071][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4024'. [ 271.039324][T16311] FAULT_INJECTION: forcing a failure. [ 271.039324][T16311] name failslab, interval 1, probability 0, space 0, times 0 [ 271.059058][T16311] CPU: 1 UID: 0 PID: 16311 Comm: syz.1.4024 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 271.059076][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.059083][T16311] Call Trace: [ 271.059088][T16311] [ 271.059094][T16311] dump_stack_lvl+0x189/0x250 [ 271.059112][T16311] ? __pfx____ratelimit+0x10/0x10 [ 271.059129][T16311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.059141][T16311] ? __pfx__printk+0x10/0x10 [ 271.059159][T16311] ? __pfx___might_resched+0x10/0x10 [ 271.059171][T16311] ? fs_reclaim_acquire+0x7d/0x100 [ 271.059184][T16311] should_fail_ex+0x414/0x560 [ 271.059198][T16311] ? alloc_netdev_mqs+0x8a0/0x1170 [ 271.059211][T16311] should_failslab+0xa8/0x100 [ 271.059229][T16311] __kvmalloc_node_noprof+0x161/0x5f0 [ 271.059246][T16311] ? alloc_netdev_mqs+0x8a0/0x1170 [ 271.059259][T16311] ? __asan_memset+0x22/0x50 [ 271.059273][T16311] alloc_netdev_mqs+0x8a0/0x1170 [ 271.059292][T16311] rtnl_create_link+0x31f/0xd10 [ 271.059311][T16311] rtnl_newlink_create+0x25c/0xb00 [ 271.059329][T16311] ? __pfx_aa_get_newest_label+0x10/0x10 [ 271.059344][T16311] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 271.059356][T16311] ? rtnl_newlink+0x8db/0x1c70 [ 271.059368][T16311] ? __pfx___mutex_lock+0x10/0x10 [ 271.059386][T16311] ? ns_capable+0x8a/0xf0 [ 271.059409][T16311] rtnl_newlink+0x16d6/0x1c70 [ 271.059421][T16311] ? netlink_sendmsg+0x805/0xb30 [ 271.059441][T16311] ? __pfx_rtnl_newlink+0x10/0x10 [ 271.059466][T16311] ? kasan_quarantine_put+0xdd/0x220 [ 271.059479][T16311] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.059500][T16311] ? nlmon_xmit+0xb0/0x100 [ 271.059514][T16311] ? kmem_cache_free+0x18f/0x400 [ 271.059534][T16311] ? __local_bh_enable_ip+0x12d/0x1c0 [ 271.059546][T16311] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.059562][T16311] ? __local_bh_enable_ip+0x12d/0x1c0 [ 271.059573][T16311] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 271.059588][T16311] ? __dev_queue_xmit+0x27b/0x3b50 [ 271.059612][T16311] ? __lock_acquire+0xab9/0xd20 [ 271.059645][T16311] ? __pfx_rtnl_newlink+0x10/0x10 [ 271.059655][T16311] rtnetlink_rcv_msg+0x7cf/0xb70 [ 271.059668][T16311] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 271.059679][T16311] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 271.059688][T16311] ? ref_tracker_free+0x63a/0x7d0 [ 271.059701][T16311] ? __asan_memcpy+0x40/0x70 [ 271.059712][T16311] ? __pfx_ref_tracker_free+0x10/0x10 [ 271.059730][T16311] netlink_rcv_skb+0x208/0x470 [ 271.059748][T16311] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 271.059759][T16311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.059783][T16311] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.059800][T16311] netlink_unicast+0x82c/0x9e0 [ 271.059824][T16311] ? __pfx_netlink_unicast+0x10/0x10 [ 271.059842][T16311] ? netlink_sendmsg+0x642/0xb30 [ 271.059852][T16311] ? skb_put+0x11b/0x210 [ 271.059867][T16311] netlink_sendmsg+0x805/0xb30 [ 271.059886][T16311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.059900][T16311] ? aa_sock_msg_perm+0x94/0x160 [ 271.059914][T16311] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.059927][T16311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.059940][T16311] __sock_sendmsg+0x219/0x270 [ 271.059959][T16311] ____sys_sendmsg+0x505/0x830 [ 271.059977][T16311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.059998][T16311] ? import_iovec+0x74/0xa0 [ 271.060017][T16311] ___sys_sendmsg+0x21f/0x2a0 [ 271.060033][T16311] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.060073][T16311] ? __fget_files+0x2a/0x420 [ 271.060083][T16311] ? __fget_files+0x3a0/0x420 [ 271.060102][T16311] __x64_sys_sendmsg+0x19b/0x260 [ 271.060117][T16311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.060138][T16311] ? __pfx_ksys_write+0x10/0x10 [ 271.060152][T16311] ? rcu_is_watching+0x15/0xb0 [ 271.060170][T16311] ? do_syscall_64+0xbe/0x3b0 [ 271.060185][T16311] do_syscall_64+0xfa/0x3b0 [ 271.060194][T16311] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.060208][T16311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.060219][T16311] ? clear_bhb_loop+0x60/0xb0 [ 271.060233][T16311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.060245][T16311] RIP: 0033:0x7f862af8e9a9 [ 271.060256][T16311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.060266][T16311] RSP: 002b:00007f862bd88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.060281][T16311] RAX: ffffffffffffffda RBX: 00007f862b1b5fa0 RCX: 00007f862af8e9a9 [ 271.060290][T16311] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 271.060297][T16311] RBP: 00007f862bd88090 R08: 0000000000000000 R09: 0000000000000000 [ 271.060305][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.060312][T16311] R13: 0000000000000000 R14: 00007f862b1b5fa0 R15: 00007ffdd62805b8 [ 271.060331][T16311] [ 271.682399][T16323] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4027'. [ 271.796573][T16323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4027'. [ 271.884348][T16335] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4028'. [ 271.924289][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4028'. [ 271.934329][T16341] lo speed is unknown, defaulting to 1000 [ 272.090135][T16341] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 272.107697][T16341] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 272.166018][T16357] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4032'. [ 272.455190][T16374] !: renamed from dummy0 (while UP) [ 272.475744][T16371] lo speed is unknown, defaulting to 1000 [ 272.722325][T16380] lo speed is unknown, defaulting to 1000 [ 273.001474][T16397] lo speed is unknown, defaulting to 1000 [ 273.015207][T16371] IPv6: syztnl1: Disabled Multicast RS [ 273.150683][T16402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4038'. [ 273.658484][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4047'. [ 273.681592][T16421] netlink: 'syz.5.4047': attribute type 1 has an invalid length. [ 273.690720][T16422] FAULT_INJECTION: forcing a failure. [ 273.690720][T16422] name failslab, interval 1, probability 0, space 0, times 0 [ 273.714509][T16421] netlink: 'syz.5.4047': attribute type 2 has an invalid length. [ 273.746746][T16422] CPU: 1 UID: 0 PID: 16422 Comm: syz.4.4046 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 273.746766][T16422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.746774][T16422] Call Trace: [ 273.746780][T16422] [ 273.746785][T16422] dump_stack_lvl+0x189/0x250 [ 273.746806][T16422] ? __pfx____ratelimit+0x10/0x10 [ 273.746829][T16422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.746843][T16422] ? __pfx__printk+0x10/0x10 [ 273.746869][T16422] should_fail_ex+0x414/0x560 [ 273.746886][T16422] should_failslab+0xa8/0x100 [ 273.746904][T16422] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 273.746921][T16422] ? __alloc_skb+0x112/0x2d0 [ 273.746937][T16422] __alloc_skb+0x112/0x2d0 [ 273.746952][T16422] tipc_msg_reverse+0x231/0x8f0 [ 273.746964][T16422] ? net_generic+0x1e/0x240 [ 273.746985][T16422] tipc_sk_respond+0xf1/0x2f0 [ 273.747004][T16422] ? __pfx_tipc_sk_respond+0x10/0x10 [ 273.747028][T16422] __tipc_shutdown+0xaa6/0x1520 [ 273.747059][T16422] ? __pfx___tipc_shutdown+0x10/0x10 [ 273.747076][T16422] ? __pfx_woken_wake_function+0x10/0x10 [ 273.747095][T16422] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 273.747118][T16422] tipc_release+0x5c6/0x2160 [ 273.747144][T16422] ? __pfx_tipc_release+0x10/0x10 [ 273.747157][T16422] ? down_write+0x162/0x1f0 [ 273.747171][T16422] ? __pfx_down_write+0x10/0x10 [ 273.747184][T16422] ? ksys_write+0x1cb/0x250 [ 273.747198][T16422] ? locks_remove_posix+0x381/0x650 [ 273.747219][T16422] sock_close+0xc3/0x240 [ 273.747236][T16422] ? __pfx_sock_close+0x10/0x10 [ 273.747251][T16422] __fput+0x44c/0xa70 [ 273.747273][T16422] fput_close_sync+0x119/0x200 [ 273.747288][T16422] ? __pfx_fput_close_sync+0x10/0x10 [ 273.747316][T16422] __x64_sys_close+0x7f/0x110 [ 273.747330][T16422] do_syscall_64+0xfa/0x3b0 [ 273.747341][T16422] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.747358][T16422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.747369][T16422] ? clear_bhb_loop+0x60/0xb0 [ 273.747385][T16422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.747396][T16422] RIP: 0033:0x7faa4218e9a9 [ 273.747408][T16422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.747419][T16422] RSP: 002b:00007faa42f6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 273.747433][T16422] RAX: ffffffffffffffda RBX: 00007faa423b6160 RCX: 00007faa4218e9a9 [ 273.747442][T16422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 273.747450][T16422] RBP: 00007faa42f6b090 R08: 0000000000000000 R09: 0000000000000000 [ 273.747457][T16422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.747465][T16422] R13: 0000000000000001 R14: 00007faa423b6160 R15: 00007ffc62c9b9b8 [ 273.747485][T16422] [ 274.261182][T16429] netlink: 'syz.3.4050': attribute type 12 has an invalid length. [ 274.568649][T16449] tipc: Enabled bearer , priority 0 [ 274.592300][T16449] syzkaller0: entered promiscuous mode [ 274.597775][T16449] syzkaller0: entered allmulticast mode [ 274.643507][T16449] tipc: Resetting bearer [ 274.654927][T16448] tipc: Resetting bearer [ 274.681351][T16448] tipc: Disabling bearer [ 274.760719][T16459] netlink: 'syz.1.4060': attribute type 10 has an invalid length. [ 274.805544][T16459] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 274.877988][T16467] netlink: 'syz.6.4064': attribute type 12 has an invalid length. [ 274.971454][T16473] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 275.066524][T16480] FAULT_INJECTION: forcing a failure. [ 275.066524][T16480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.083078][T16480] CPU: 0 UID: 0 PID: 16480 Comm: syz.4.4070 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 275.083096][T16480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.083104][T16480] Call Trace: [ 275.083109][T16480] [ 275.083115][T16480] dump_stack_lvl+0x189/0x250 [ 275.083135][T16480] ? __pfx____ratelimit+0x10/0x10 [ 275.083154][T16480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.083168][T16480] ? __pfx__printk+0x10/0x10 [ 275.083185][T16480] ? __might_fault+0xb0/0x130 [ 275.083209][T16480] should_fail_ex+0x414/0x560 [ 275.083226][T16480] _copy_to_iter+0x3f5/0x16f0 [ 275.083250][T16480] ? __pfx__copy_to_iter+0x10/0x10 [ 275.083261][T16480] ? rcu_is_watching+0x15/0xb0 [ 275.083276][T16480] ? trace_contention_end+0x39/0x120 [ 275.083291][T16480] ? __mutex_lock+0x330/0xe80 [ 275.083317][T16480] __skb_datagram_iter+0x41a/0x990 [ 275.083333][T16480] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 275.083355][T16480] skb_copy_datagram_iter+0xc5/0x230 [ 275.083373][T16480] unix_stream_read_actor+0x6c/0xb0 [ 275.083393][T16480] unix_stream_read_generic+0xac3/0x2480 [ 275.083409][T16480] ? arch_stack_walk+0xfc/0x150 [ 275.083444][T16480] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 275.083460][T16480] ? __kasan_kmalloc+0x93/0xb0 [ 275.083475][T16480] ? __pfx_autoremove_wake_function+0x10/0x10 [ 275.083489][T16480] ? __x64_sys_recvmsg+0x198/0x260 [ 275.083500][T16480] ? do_syscall_64+0xfa/0x3b0 [ 275.083510][T16480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.083534][T16480] unix_stream_recvmsg+0x15d/0x1b0 [ 275.083549][T16480] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 275.083559][T16480] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 275.083577][T16480] ? aa_sock_msg_perm+0x94/0x160 [ 275.083591][T16480] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 275.083603][T16480] ? security_socket_recvmsg+0x7e/0x2e0 [ 275.083618][T16480] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 275.083630][T16480] sock_recvmsg+0x229/0x270 [ 275.083650][T16480] ____sys_recvmsg+0x1c9/0x460 [ 275.083670][T16480] ? __pfx_____sys_recvmsg+0x10/0x10 [ 275.083696][T16480] ? import_iovec+0x74/0xa0 [ 275.083713][T16480] ___sys_recvmsg+0x1b5/0x510 [ 275.083732][T16480] ? __pfx____sys_recvmsg+0x10/0x10 [ 275.083764][T16480] ? __fget_files+0x3a0/0x420 [ 275.083782][T16480] __x64_sys_recvmsg+0x198/0x260 [ 275.083798][T16480] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 275.083820][T16480] ? __pfx_ksys_write+0x10/0x10 [ 275.083833][T16480] ? rcu_is_watching+0x15/0xb0 [ 275.083850][T16480] ? do_syscall_64+0xbe/0x3b0 [ 275.083864][T16480] do_syscall_64+0xfa/0x3b0 [ 275.083874][T16480] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.083891][T16480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.083902][T16480] ? clear_bhb_loop+0x60/0xb0 [ 275.083916][T16480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.083928][T16480] RIP: 0033:0x7faa4218e9a9 [ 275.083939][T16480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.083949][T16480] RSP: 002b:00007faa42fad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 275.083962][T16480] RAX: ffffffffffffffda RBX: 00007faa423b5fa0 RCX: 00007faa4218e9a9 [ 275.083971][T16480] RDX: 0000000040020000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 275.083979][T16480] RBP: 00007faa42fad090 R08: 0000000000000000 R09: 0000000000000000 [ 275.083987][T16480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.083994][T16480] R13: 0000000000000000 R14: 00007faa423b5fa0 R15: 00007ffc62c9b9b8 [ 275.084014][T16480] [ 275.454527][T16484] __nla_validate_parse: 5 callbacks suppressed [ 275.454548][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4071'. [ 275.471957][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4071'. [ 275.549196][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4074'. [ 275.688828][T16507] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 275.714354][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4082'. [ 275.948034][T16523] tipc: Enabled bearer , priority 0 [ 275.948255][T16527] FAULT_INJECTION: forcing a failure. [ 275.948255][T16527] name failslab, interval 1, probability 0, space 0, times 0 [ 275.967562][T16522] tipc: Resetting bearer [ 275.974800][T16527] CPU: 1 UID: 0 PID: 16527 Comm: syz.6.4088 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 275.974818][T16527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.974825][T16527] Call Trace: [ 275.974830][T16527] [ 275.974836][T16527] dump_stack_lvl+0x189/0x250 [ 275.974854][T16527] ? __pfx____ratelimit+0x10/0x10 [ 275.974873][T16527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.974886][T16527] ? __pfx__printk+0x10/0x10 [ 275.974906][T16527] ? __pfx___might_resched+0x10/0x10 [ 275.974923][T16527] should_fail_ex+0x414/0x560 [ 275.974939][T16527] should_failslab+0xa8/0x100 [ 275.974957][T16527] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 275.974973][T16527] ? __alloc_skb+0x112/0x2d0 [ 275.974988][T16527] __alloc_skb+0x112/0x2d0 [ 275.975003][T16527] netlink_sendmsg+0x5c6/0xb30 [ 275.975022][T16527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.975036][T16527] ? aa_sock_msg_perm+0x94/0x160 [ 275.975050][T16527] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.975062][T16527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.975074][T16527] __sock_sendmsg+0x219/0x270 [ 275.975092][T16527] ____sys_sendmsg+0x505/0x830 [ 275.975110][T16527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.975130][T16527] ? import_iovec+0x74/0xa0 [ 275.975148][T16527] ___sys_sendmsg+0x21f/0x2a0 [ 275.975163][T16527] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.975201][T16527] ? __fget_files+0x2a/0x420 [ 275.975211][T16527] ? __fget_files+0x3a0/0x420 [ 275.975228][T16527] __x64_sys_sendmsg+0x19b/0x260 [ 275.975243][T16527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.975263][T16527] ? __pfx_ksys_write+0x10/0x10 [ 275.975277][T16527] ? rcu_is_watching+0x15/0xb0 [ 275.975294][T16527] ? do_syscall_64+0xbe/0x3b0 [ 275.975308][T16527] do_syscall_64+0xfa/0x3b0 [ 275.975320][T16527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.975330][T16527] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.975342][T16527] ? clear_bhb_loop+0x60/0xb0 [ 275.975356][T16527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.975372][T16527] RIP: 0033:0x7fd7d3f8e9a9 [ 275.975383][T16527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.975393][T16527] RSP: 002b:00007fd7d4edc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.975406][T16527] RAX: ffffffffffffffda RBX: 00007fd7d41b5fa0 RCX: 00007fd7d3f8e9a9 [ 275.975415][T16527] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 275.975422][T16527] RBP: 00007fd7d4edc090 R08: 0000000000000000 R09: 0000000000000000 [ 275.975430][T16527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.975437][T16527] R13: 0000000000000000 R14: 00007fd7d41b5fa0 R15: 00007ffe30c05258 [ 275.975455][T16527] [ 277.223660][T16522] tipc: Disabling bearer [ 277.237006][T16536] tipc: Enabling of bearer rejected, failed to enable media [ 277.353673][T16557] FAULT_INJECTION: forcing a failure. [ 277.353673][T16557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.354948][T16555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4098'. [ 277.374503][T16557] CPU: 1 UID: 0 PID: 16557 Comm: syz.3.4097 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 277.374520][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.374527][T16557] Call Trace: [ 277.374532][T16557] [ 277.374536][T16557] dump_stack_lvl+0x189/0x250 [ 277.374555][T16557] ? __pfx____ratelimit+0x10/0x10 [ 277.374572][T16557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.374584][T16557] ? __pfx__printk+0x10/0x10 [ 277.374598][T16557] ? __might_fault+0xb0/0x130 [ 277.374618][T16557] should_fail_ex+0x414/0x560 [ 277.374632][T16557] _copy_from_user+0x2d/0xb0 [ 277.374647][T16557] wext_handle_ioctl+0xba/0x1c0 [ 277.374661][T16557] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 277.374670][T16557] ? __lock_acquire+0xab9/0xd20 [ 277.374691][T16557] sock_ioctl+0x15f/0x790 [ 277.374707][T16557] ? __pfx_sock_ioctl+0x10/0x10 [ 277.374721][T16557] ? __fget_files+0x2a/0x420 [ 277.374730][T16557] ? __fget_files+0x3a0/0x420 [ 277.374738][T16557] ? __fget_files+0x2a/0x420 [ 277.374749][T16557] ? bpf_lsm_file_ioctl+0x9/0x20 [ 277.374762][T16557] ? __pfx_sock_ioctl+0x10/0x10 [ 277.374775][T16557] __se_sys_ioctl+0xf9/0x170 [ 277.374790][T16557] do_syscall_64+0xfa/0x3b0 [ 277.374799][T16557] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.374814][T16557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.374824][T16557] ? clear_bhb_loop+0x60/0xb0 [ 277.374836][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.374846][T16557] RIP: 0033:0x7f9d7b38e9a9 [ 277.374856][T16557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.374865][T16557] RSP: 002b:00007f9d7c117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.374878][T16557] RAX: ffffffffffffffda RBX: 00007f9d7b5b5fa0 RCX: 00007f9d7b38e9a9 [ 277.374885][T16557] RDX: 0000200000000140 RSI: 0000000000008b06 RDI: 0000000000000003 [ 277.374892][T16557] RBP: 00007f9d7c117090 R08: 0000000000000000 R09: 0000000000000000 [ 277.374898][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.374904][T16557] R13: 0000000000000000 R14: 00007f9d7b5b5fa0 R15: 00007ffef9c0c248 [ 277.374921][T16557] [ 277.453893][T16551] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4095'. [ 277.631200][T16551] netlink: 248 bytes leftover after parsing attributes in process `syz.5.4095'. [ 277.762831][T16577] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4105'. [ 277.965697][T16594] 8021q: VLANs not supported on bond0 [ 278.204563][T16605] netlink: 'syz.6.4117': attribute type 1 has an invalid length. [ 278.212381][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4117'. [ 278.247687][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4118'. [ 278.398916][T16622] FAULT_INJECTION: forcing a failure. [ 278.398916][T16622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.412390][T16622] CPU: 1 UID: 0 PID: 16622 Comm: syz.6.4123 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 278.412409][T16622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.412417][T16622] Call Trace: [ 278.412422][T16622] [ 278.412428][T16622] dump_stack_lvl+0x189/0x250 [ 278.412446][T16622] ? __pfx____ratelimit+0x10/0x10 [ 278.412464][T16622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.412478][T16622] ? __pfx__printk+0x10/0x10 [ 278.412494][T16622] ? __might_fault+0xb0/0x130 [ 278.412518][T16622] should_fail_ex+0x414/0x560 [ 278.412534][T16622] _copy_from_user+0x2d/0xb0 [ 278.412550][T16622] __sys_bpf+0x1ed/0x860 [ 278.412569][T16622] ? __pfx___sys_bpf+0x10/0x10 [ 278.412595][T16622] ? ksys_write+0x22a/0x250 [ 278.412612][T16622] ? __pfx_ksys_write+0x10/0x10 [ 278.412625][T16622] ? rcu_is_watching+0x15/0xb0 [ 278.412644][T16622] __x64_sys_bpf+0x7c/0x90 [ 278.412660][T16622] do_syscall_64+0xfa/0x3b0 [ 278.412670][T16622] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.412687][T16622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.412699][T16622] ? clear_bhb_loop+0x60/0xb0 [ 278.412713][T16622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.412724][T16622] RIP: 0033:0x7fd7d3f8e9a9 [ 278.412735][T16622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.412745][T16622] RSP: 002b:00007fd7d4edc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.412758][T16622] RAX: ffffffffffffffda RBX: 00007fd7d41b5fa0 RCX: 00007fd7d3f8e9a9 [ 278.412767][T16622] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 278.412774][T16622] RBP: 00007fd7d4edc090 R08: 0000000000000000 R09: 0000000000000000 [ 278.412782][T16622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.412789][T16622] R13: 0000000000000000 R14: 00007fd7d41b5fa0 R15: 00007ffe30c05258 [ 278.412810][T16622] [ 278.770716][T16630] netlink: 'syz.4.4127': attribute type 16 has an invalid length. [ 278.780604][T16630] netlink: 'syz.4.4127': attribute type 17 has an invalid length. [ 279.225545][T16669] netlink: 'syz.3.4142': attribute type 10 has an invalid length. [ 279.257723][T16671] netlink: 'syz.3.4143': attribute type 10 has an invalid length. [ 279.749550][T16676] FAULT_INJECTION: forcing a failure. [ 279.749550][T16676] name failslab, interval 1, probability 0, space 0, times 0 [ 279.762397][T16676] CPU: 1 UID: 0 PID: 16676 Comm: syz.4.4145 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 279.762415][T16676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.762422][T16676] Call Trace: [ 279.762427][T16676] [ 279.762433][T16676] dump_stack_lvl+0x189/0x250 [ 279.762451][T16676] ? __pfx____ratelimit+0x10/0x10 [ 279.762469][T16676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.762482][T16676] ? __pfx__printk+0x10/0x10 [ 279.762503][T16676] ? __pfx___might_resched+0x10/0x10 [ 279.762526][T16676] should_fail_ex+0x414/0x560 [ 279.762541][T16676] should_failslab+0xa8/0x100 [ 279.762560][T16676] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 279.762576][T16676] ? __alloc_skb+0x112/0x2d0 [ 279.762592][T16676] __alloc_skb+0x112/0x2d0 [ 279.762606][T16676] netlink_sendmsg+0x5c6/0xb30 [ 279.762626][T16676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.762640][T16676] ? aa_sock_msg_perm+0x94/0x160 [ 279.762654][T16676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.762667][T16676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.762679][T16676] __sock_sendmsg+0x219/0x270 [ 279.762698][T16676] ____sys_sendmsg+0x505/0x830 [ 279.762714][T16676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.762735][T16676] ? import_iovec+0x74/0xa0 [ 279.762753][T16676] ___sys_sendmsg+0x21f/0x2a0 [ 279.762767][T16676] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.762806][T16676] ? __fget_files+0x2a/0x420 [ 279.762816][T16676] ? __fget_files+0x3a0/0x420 [ 279.762834][T16676] __x64_sys_sendmsg+0x19b/0x260 [ 279.762849][T16676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.762870][T16676] ? __pfx_ksys_write+0x10/0x10 [ 279.762883][T16676] ? rcu_is_watching+0x15/0xb0 [ 279.762900][T16676] ? do_syscall_64+0xbe/0x3b0 [ 279.762915][T16676] do_syscall_64+0xfa/0x3b0 [ 279.762925][T16676] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.762942][T16676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.762954][T16676] ? clear_bhb_loop+0x60/0xb0 [ 279.762968][T16676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.762979][T16676] RIP: 0033:0x7faa4218e9a9 [ 279.762991][T16676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.763001][T16676] RSP: 002b:00007faa42fad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.763014][T16676] RAX: ffffffffffffffda RBX: 00007faa423b5fa0 RCX: 00007faa4218e9a9 [ 279.763023][T16676] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 279.763030][T16676] RBP: 00007faa42fad090 R08: 0000000000000000 R09: 0000000000000000 [ 279.763038][T16676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.763045][T16676] R13: 0000000000000000 R14: 00007faa423b5fa0 R15: 00007ffc62c9b9b8 [ 279.763065][T16676] [ 279.784219][T16642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.345881][T16709] lo speed is unknown, defaulting to 1000 [ 280.514848][T16723] __nla_validate_parse: 5 callbacks suppressed [ 280.514861][T16723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4159'. [ 280.798580][T16735] netlink: 'syz.3.4162': attribute type 1 has an invalid length. [ 280.844927][T16735] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.888681][T16735] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.895777][T16735] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 280.917241][T16735] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 281.014373][T16737] veth3: entered promiscuous mode [ 281.057620][T16737] bond4: (slave veth3): Enslaving as an active interface with a down link [ 281.085343][T16741] erspan0: entered allmulticast mode [ 281.116789][T16750] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4166'. [ 281.150006][T16735] netlink: 'syz.3.4162': attribute type 11 has an invalid length. [ 281.273514][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4167'. [ 281.376356][T16762] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4171'. [ 281.396017][T16765] FAULT_INJECTION: forcing a failure. [ 281.396017][T16765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.439456][T16765] CPU: 1 UID: 0 PID: 16765 Comm: syz.3.4170 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 281.439475][T16765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.439483][T16765] Call Trace: [ 281.439488][T16765] [ 281.439494][T16765] dump_stack_lvl+0x189/0x250 [ 281.439513][T16765] ? __pfx____ratelimit+0x10/0x10 [ 281.439531][T16765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.439545][T16765] ? __pfx__printk+0x10/0x10 [ 281.439561][T16765] ? __might_fault+0xb0/0x130 [ 281.439584][T16765] should_fail_ex+0x414/0x560 [ 281.439601][T16765] _copy_from_user+0x2d/0xb0 [ 281.439617][T16765] ___sys_sendmsg+0x158/0x2a0 [ 281.439633][T16765] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.439671][T16765] ? __fget_files+0x2a/0x420 [ 281.439684][T16765] ? __fget_files+0x3a0/0x420 [ 281.439702][T16765] __sys_sendmmsg+0x227/0x430 [ 281.439719][T16765] ? __pfx___sys_sendmmsg+0x10/0x10 [ 281.439730][T16765] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 281.439760][T16765] ? ksys_write+0x22a/0x250 [ 281.439777][T16765] ? __pfx_ksys_write+0x10/0x10 [ 281.439789][T16765] ? rcu_is_watching+0x15/0xb0 [ 281.439808][T16765] __x64_sys_sendmmsg+0xa0/0xc0 [ 281.439823][T16765] do_syscall_64+0xfa/0x3b0 [ 281.439833][T16765] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.439850][T16765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.439862][T16765] ? clear_bhb_loop+0x60/0xb0 [ 281.439876][T16765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.439887][T16765] RIP: 0033:0x7f9d7b38e9a9 [ 281.439898][T16765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.439908][T16765] RSP: 002b:00007f9d7c117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 281.439922][T16765] RAX: ffffffffffffffda RBX: 00007f9d7b5b5fa0 RCX: 00007f9d7b38e9a9 [ 281.439931][T16765] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 281.439939][T16765] RBP: 00007f9d7c117090 R08: 0000000000000000 R09: 0000000000000000 [ 281.439947][T16765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.439954][T16765] R13: 0000000000000000 R14: 00007f9d7b5b5fa0 R15: 00007ffef9c0c248 [ 281.439974][T16765] [ 281.797471][T16782] bond0: (slave wlan1): Releasing backup interface [ 281.861303][T16778] lo speed is unknown, defaulting to 1000 [ 281.864174][T16784] netlink: 'syz.6.4175': attribute type 13 has an invalid length. [ 281.875664][T16784] netlink: 'syz.6.4175': attribute type 17 has an invalid length. [ 281.889042][T16784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.949374][ T5903] IPVS: starting estimator thread 0... [ 281.990246][T16793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.010990][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4184'. [ 282.051620][T16794] IPVS: using max 43 ests per chain, 103200 per kthread [ 282.066336][T16793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.136553][T16793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.322754][T16816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4191'. [ 282.496305][T16831] netlink: 'syz.6.4196': attribute type 10 has an invalid length. [ 282.508056][T16831] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 282.531935][T16832] tipc: Resetting bearer [ 282.548421][T16832] bond5: (slave wlan0): Releasing active interface [ 282.577588][T16832] bond0: (slave wlan1): Releasing backup interface [ 282.605791][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4195'. [ 282.614898][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4195'. [ 282.619155][T16838] FAULT_INJECTION: forcing a failure. [ 282.619155][T16838] name failslab, interval 1, probability 0, space 0, times 0 [ 282.638189][T16838] CPU: 0 UID: 0 PID: 16838 Comm: syz.3.4198 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 282.638206][T16838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.638213][T16838] Call Trace: [ 282.638218][T16838] [ 282.638223][T16838] dump_stack_lvl+0x189/0x250 [ 282.638241][T16838] ? __pfx____ratelimit+0x10/0x10 [ 282.638258][T16838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.638272][T16838] ? __pfx__printk+0x10/0x10 [ 282.638291][T16838] ? __pfx___might_resched+0x10/0x10 [ 282.638308][T16838] should_fail_ex+0x414/0x560 [ 282.638325][T16838] should_failslab+0xa8/0x100 [ 282.638342][T16838] kmem_cache_alloc_noprof+0x73/0x3c0 [ 282.638357][T16838] ? ptlock_alloc+0x20/0x70 [ 282.638375][T16838] ptlock_alloc+0x20/0x70 [ 282.638389][T16838] pte_alloc_one+0x7d/0x170 [ 282.638404][T16838] __pte_alloc+0x25/0x1a0 [ 282.638418][T16838] __handle_mm_fault+0x4b8a/0x5620 [ 282.638446][T16838] ? __pfx___handle_mm_fault+0x10/0x10 [ 282.638474][T16838] ? find_vma+0xe7/0x160 [ 282.638489][T16838] ? __pfx_find_vma+0x10/0x10 [ 282.638509][T16838] handle_mm_fault+0x40a/0x8e0 [ 282.638530][T16838] do_user_addr_fault+0x764/0x1390 [ 282.638553][T16838] exc_page_fault+0x76/0xf0 [ 282.638567][T16838] ? __might_fault+0xb0/0x130 [ 282.638582][T16838] asm_exc_page_fault+0x26/0x30 [ 282.638592][T16838] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 282.638606][T16838] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 282.638616][T16838] RSP: 0018:ffffc900047efd10 EFLAGS: 00050206 [ 282.638627][T16838] RAX: 00007ffffffff001 RBX: 0000000000000f00 RCX: 0000000000000f00 [ 282.638635][T16838] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffff888035b2e000 [ 282.638643][T16838] RBP: 0000000000000000 R08: ffff888035b2eeff R09: 1ffff11006b65ddf [ 282.638652][T16838] R10: dffffc0000000000 R11: ffffed1006b65de0 R12: ffff88803156d000 [ 282.638660][T16838] R13: 0000000000000000 R14: ffff888035b2e000 R15: 00002000000000c0 [ 282.638679][T16838] _copy_from_user+0x7a/0xb0 [ 282.638695][T16838] memdup_sockptr_noprof+0x70/0xd0 [ 282.638710][T16838] raw_setsockopt+0x421/0x1160 [ 282.638725][T16838] ? __pfx_aa_sk_perm+0x10/0x10 [ 282.638742][T16838] ? __pfx_raw_setsockopt+0x10/0x10 [ 282.638755][T16838] ? __fget_files+0x2a/0x420 [ 282.638765][T16838] ? aa_sock_opt_perm+0x74/0x110 [ 282.638778][T16838] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 282.638790][T16838] ? __pfx_raw_setsockopt+0x10/0x10 [ 282.638803][T16838] do_sock_setsockopt+0x179/0x1b0 [ 282.638821][T16838] __x64_sys_setsockopt+0x13f/0x1b0 [ 282.638837][T16838] do_syscall_64+0xfa/0x3b0 [ 282.638848][T16838] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.638863][T16838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.638882][T16838] ? clear_bhb_loop+0x60/0xb0 [ 282.638895][T16838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.638905][T16838] RIP: 0033:0x7f9d7b38e9a9 [ 282.638915][T16838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.638925][T16838] RSP: 002b:00007f9d7c117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.638937][T16838] RAX: ffffffffffffffda RBX: 00007f9d7b5b5fa0 RCX: 00007f9d7b38e9a9 [ 282.638945][T16838] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003 [ 282.638952][T16838] RBP: 00007f9d7c117090 R08: 0000000000000f00 R09: 0000000000000000 [ 282.638960][T16838] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 282.638967][T16838] R13: 0000000000000000 R14: 00007f9d7b5b5fa0 R15: 00007ffef9c0c248 [ 282.638986][T16838] [ 282.658868][T16834] lo speed is unknown, defaulting to 1000 [ 282.732183][T16839] netlink: 'syz.6.4197': attribute type 13 has an invalid length. [ 282.958995][T16847] tipc: Enabled bearer , priority 0 [ 283.084433][T16839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.106607][T16847] tipc: Resetting bearer [ 283.409934][T16872] validate_nla: 1 callbacks suppressed [ 283.409949][T16872] netlink: 'syz.5.4207': attribute type 9 has an invalid length. [ 283.473811][T16872] netlink: 'syz.5.4207': attribute type 7 has an invalid length. [ 283.510496][T16872] netlink: 'syz.5.4207': attribute type 8 has an invalid length. [ 283.584758][T16847] tipc: Disabling bearer [ 283.681185][T16863] lo speed is unknown, defaulting to 1000 [ 283.875791][T16877] syzkaller1: entered promiscuous mode [ 283.881346][T16877] syzkaller1: entered allmulticast mode [ 283.919925][T16902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4214'. [ 283.968141][T16902] tipc: Enabling of bearer rejected, already enabled [ 284.544496][T16915] netlink: 'syz.1.4219': attribute type 10 has an invalid length. [ 285.092903][T16915] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 285.267825][T16946] netlink: 'syz.3.4229': attribute type 21 has an invalid length. [ 285.281456][T16947] netlink: 'syz.3.4229': attribute type 21 has an invalid length. [ 285.299706][T16946] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4229'. [ 286.094983][T16947] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.130605][T16967] FAULT_INJECTION: forcing a failure. [ 286.130605][T16967] name failslab, interval 1, probability 0, space 0, times 0 [ 286.143656][T16967] CPU: 0 UID: 0 PID: 16967 Comm: syz.1.4232 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 286.143674][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.143680][T16967] Call Trace: [ 286.143686][T16967] [ 286.143691][T16967] dump_stack_lvl+0x189/0x250 [ 286.143709][T16967] ? __pfx____ratelimit+0x10/0x10 [ 286.143727][T16967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.143741][T16967] ? __pfx__printk+0x10/0x10 [ 286.143755][T16967] ? __lock_acquire+0xab9/0xd20 [ 286.143765][T16967] should_fail_ex+0x414/0x560 [ 286.143775][T16967] should_failslab+0xa8/0x100 [ 286.143786][T16967] kmem_cache_alloc_noprof+0x73/0x3c0 [ 286.143795][T16967] ? skb_clone+0x212/0x3a0 [ 286.143804][T16967] ? __pfx_skb_network_protocol+0x10/0x10 [ 286.143814][T16967] skb_clone+0x212/0x3a0 [ 286.143821][T16967] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 286.143829][T16967] dev_queue_xmit_nit+0x416/0xcc0 [ 286.143836][T16967] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 286.143847][T16967] dev_hard_start_xmit+0x1be/0x830 [ 286.143862][T16967] __dev_queue_xmit+0x1b8d/0x3b50 [ 286.143874][T16967] ? __dev_queue_xmit+0x27b/0x3b50 [ 286.143888][T16967] ? __pfx___dev_queue_xmit+0x10/0x10 [ 286.143904][T16967] ? __copy_skb_header+0xa7/0x550 [ 286.143918][T16967] ? __asan_memcpy+0x40/0x70 [ 286.143944][T16967] ? skb_clone+0x246/0x3a0 [ 286.143960][T16967] __netlink_deliver_tap+0x5ad/0x850 [ 286.143974][T16967] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.143981][T16967] netlink_deliver_tap+0x19c/0x1b0 [ 286.143988][T16967] netlink_unicast+0x7fa/0x9e0 [ 286.144001][T16967] ? __pfx_netlink_unicast+0x10/0x10 [ 286.144011][T16967] ? netlink_sendmsg+0x642/0xb30 [ 286.144017][T16967] ? skb_put+0x11b/0x210 [ 286.144026][T16967] netlink_sendmsg+0x805/0xb30 [ 286.144036][T16967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.144044][T16967] ? aa_sock_msg_perm+0x94/0x160 [ 286.144061][T16967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.144069][T16967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.144076][T16967] __sock_sendmsg+0x219/0x270 [ 286.144087][T16967] __sys_sendto+0x3bd/0x520 [ 286.144095][T16967] ? __pfx___sys_sendto+0x10/0x10 [ 286.144106][T16967] ? count_memcg_event_mm+0x21/0x260 [ 286.144119][T16967] ? exc_page_fault+0x76/0xf0 [ 286.144131][T16967] ? do_user_addr_fault+0xc8a/0x1390 [ 286.144139][T16967] __x64_sys_sendto+0xde/0x100 [ 286.144148][T16967] do_syscall_64+0xfa/0x3b0 [ 286.144154][T16967] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.144164][T16967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.144171][T16967] ? clear_bhb_loop+0x60/0xb0 [ 286.144180][T16967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.144186][T16967] RIP: 0033:0x7f862af9083c [ 286.144194][T16967] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 286.144200][T16967] RSP: 002b:00007f862bd86ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 286.144208][T16967] RAX: ffffffffffffffda RBX: 00007f862bd86fc0 RCX: 00007f862af9083c [ 286.144213][T16967] RDX: 0000000000000020 RSI: 00007f862bd87010 RDI: 0000000000000005 [ 286.144218][T16967] RBP: 0000000000000000 R08: 00007f862bd86f14 R09: 000000000000000c [ 286.144222][T16967] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 286.144226][T16967] R13: 00007f862bd86f68 R14: 00007f862bd87010 R15: 0000000000000000 [ 286.144241][T16967] [ 286.145239][T16964] __nla_validate_parse: 5 callbacks suppressed [ 286.145255][T16964] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4231'. [ 286.498385][T16949] lo speed is unknown, defaulting to 1000 [ 286.560410][T16947] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.695407][T16947] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.805466][T16947] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.820585][T16984] netlink: 'syz.1.4237': attribute type 10 has an invalid length. [ 286.934723][T16993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4241'. [ 286.946818][ T1342] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.974424][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.992194][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4242'. [ 287.006408][T16997] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 287.012789][T16997] dvmrp1: linktype set to 773 [ 287.017875][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.034391][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.052749][T16999] Cannot find set identified by id 1 to match [ 287.158839][T17001] lo speed is unknown, defaulting to 1000 [ 287.180581][T17008] netlink: 'syz.3.4245': attribute type 13 has an invalid length. [ 287.247216][T17008] netlink: 'syz.3.4245': attribute type 17 has an invalid length. [ 287.265978][ T5951] IPVS: starting estimator thread 0... [ 287.306066][T17021] team0: Mode changed to "roundrobin" [ 287.365778][T17008] 0ªî{X¹¦: left allmulticast mode [ 287.376836][T17019] IPVS: using max 43 ests per chain, 103200 per kthread [ 287.406966][T17026] FAULT_INJECTION: forcing a failure. [ 287.406966][T17026] name failslab, interval 1, probability 0, space 0, times 0 [ 287.419666][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.6.4253 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 287.419685][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.419692][T17026] Call Trace: [ 287.419697][T17026] [ 287.419703][T17026] dump_stack_lvl+0x189/0x250 [ 287.419723][T17026] ? __pfx____ratelimit+0x10/0x10 [ 287.419741][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.419754][T17026] ? __pfx__printk+0x10/0x10 [ 287.419774][T17026] ? __pfx___might_resched+0x10/0x10 [ 287.419791][T17026] should_fail_ex+0x414/0x560 [ 287.419807][T17026] should_failslab+0xa8/0x100 [ 287.419825][T17026] __kmalloc_noprof+0xcb/0x4f0 [ 287.419841][T17026] ? sk_prot_alloc+0xe7/0x220 [ 287.419857][T17026] sk_prot_alloc+0xe7/0x220 [ 287.419867][T17026] ? sk_alloc+0x24/0x370 [ 287.419881][T17026] sk_alloc+0x3a/0x370 [ 287.419892][T17026] ? bpf_ctx_init+0x167/0x1d0 [ 287.419912][T17026] bpf_prog_test_run_skb+0x2ed/0x1560 [ 287.419929][T17026] ? __fget_files+0x2a/0x420 [ 287.419950][T17026] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 287.419967][T17026] bpf_prog_test_run+0x2c4/0x340 [ 287.419979][T17026] __sys_bpf+0x4a4/0x860 [ 287.419998][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 287.420023][T17026] ? ksys_write+0x22a/0x250 [ 287.420041][T17026] ? __pfx_ksys_write+0x10/0x10 [ 287.420054][T17026] ? rcu_is_watching+0x15/0xb0 [ 287.420073][T17026] __x64_sys_bpf+0x7c/0x90 [ 287.420089][T17026] do_syscall_64+0xfa/0x3b0 [ 287.420100][T17026] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.420116][T17026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.420128][T17026] ? clear_bhb_loop+0x60/0xb0 [ 287.420141][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.420151][T17026] RIP: 0033:0x7fd7d3f8e9a9 [ 287.420162][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.420172][T17026] RSP: 002b:00007fd7d4edc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.420186][T17026] RAX: ffffffffffffffda RBX: 00007fd7d41b5fa0 RCX: 00007fd7d3f8e9a9 [ 287.420194][T17026] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 287.420202][T17026] RBP: 00007fd7d4edc090 R08: 0000000000000000 R09: 0000000000000000 [ 287.420209][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.420216][T17026] R13: 0000000000000000 R14: 00007fd7d41b5fa0 R15: 00007ffe30c05258 [ 287.420236][T17026] [ 287.665445][T17008] erspan0: left allmulticast mode [ 287.807192][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4257'. [ 287.818580][T17008] tipc: Resetting bearer [ 287.828174][T17008] tipc: Resetting bearer [ 287.837856][T17008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.169268][T17063] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4268'. [ 288.185115][T17063] 8021q: VLANs not supported on gre0 [ 288.267940][T17061] gtp0: entered promiscuous mode [ 288.279595][T17061] gtp0: entered allmulticast mode [ 288.390480][T17076] FAULT_INJECTION: forcing a failure. [ 288.390480][T17076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.403716][T17076] CPU: 0 UID: 0 PID: 17076 Comm: syz.5.4272 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 288.403735][T17076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.403743][T17076] Call Trace: [ 288.403748][T17076] [ 288.403754][T17076] dump_stack_lvl+0x189/0x250 [ 288.403773][T17076] ? __pfx____ratelimit+0x10/0x10 [ 288.403791][T17076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.403804][T17076] ? __pfx__printk+0x10/0x10 [ 288.403820][T17076] ? __might_fault+0xb0/0x130 [ 288.403844][T17076] should_fail_ex+0x414/0x560 [ 288.403860][T17076] _copy_from_iter+0x1db/0x16f0 [ 288.403877][T17076] ? rcu_is_watching+0x15/0xb0 [ 288.403891][T17076] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 288.403907][T17076] ? __pfx__copy_from_iter+0x10/0x10 [ 288.403922][T17076] ? __build_skb_around+0x257/0x3e0 [ 288.403938][T17076] ? netlink_sendmsg+0x642/0xb30 [ 288.403948][T17076] ? skb_put+0x11b/0x210 [ 288.403963][T17076] netlink_sendmsg+0x6b2/0xb30 [ 288.403981][T17076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.403996][T17076] ? aa_sock_msg_perm+0x94/0x160 [ 288.404009][T17076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.404021][T17076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.404048][T17076] __sock_sendmsg+0x219/0x270 [ 288.404067][T17076] ____sys_sendmsg+0x505/0x830 [ 288.404084][T17076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.404104][T17076] ? import_iovec+0x74/0xa0 [ 288.404123][T17076] ___sys_sendmsg+0x21f/0x2a0 [ 288.404138][T17076] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.404176][T17076] ? __fget_files+0x2a/0x420 [ 288.404187][T17076] ? __fget_files+0x3a0/0x420 [ 288.404203][T17076] __x64_sys_sendmsg+0x19b/0x260 [ 288.404218][T17076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.404238][T17076] ? __pfx_ksys_write+0x10/0x10 [ 288.404252][T17076] ? rcu_is_watching+0x15/0xb0 [ 288.404269][T17076] ? do_syscall_64+0xbe/0x3b0 [ 288.404284][T17076] do_syscall_64+0xfa/0x3b0 [ 288.404295][T17076] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.404311][T17076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.404322][T17076] ? clear_bhb_loop+0x60/0xb0 [ 288.404336][T17076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.404348][T17076] RIP: 0033:0x7f03df78e9a9 [ 288.404359][T17076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.404369][T17076] RSP: 002b:00007f03e051f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.404382][T17076] RAX: ffffffffffffffda RBX: 00007f03df9b5fa0 RCX: 00007f03df78e9a9 [ 288.404391][T17076] RDX: 0000000000004054 RSI: 0000200000000000 RDI: 000000000000000f [ 288.404399][T17076] RBP: 00007f03e051f090 R08: 0000000000000000 R09: 0000000000000000 [ 288.404407][T17076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.404414][T17076] R13: 0000000000000000 R14: 00007f03df9b5fa0 R15: 00007fff8078aa98 [ 288.404433][T17076] [ 288.737393][T17079] FAULT_INJECTION: forcing a failure. [ 288.737393][T17079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.758275][T17079] CPU: 0 UID: 0 PID: 17079 Comm: syz.4.4274 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 288.758293][T17079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.758301][T17079] Call Trace: [ 288.758306][T17079] [ 288.758311][T17079] dump_stack_lvl+0x189/0x250 [ 288.758330][T17079] ? __pfx____ratelimit+0x10/0x10 [ 288.758348][T17079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.758361][T17079] ? __pfx__printk+0x10/0x10 [ 288.758377][T17079] ? __might_fault+0xb0/0x130 [ 288.758401][T17079] should_fail_ex+0x414/0x560 [ 288.758417][T17079] _copy_from_user+0x2d/0xb0 [ 288.758440][T17079] ____sys_sendmsg+0x2fe/0x830 [ 288.758458][T17079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.758478][T17079] ? import_iovec+0x74/0xa0 [ 288.758496][T17079] ___sys_sendmsg+0x21f/0x2a0 [ 288.758512][T17079] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.758550][T17079] ? __fget_files+0x2a/0x420 [ 288.758561][T17079] ? __fget_files+0x3a0/0x420 [ 288.758578][T17079] __x64_sys_sendmsg+0x19b/0x260 [ 288.758594][T17079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.758614][T17079] ? __pfx_ksys_write+0x10/0x10 [ 288.758627][T17079] ? rcu_is_watching+0x15/0xb0 [ 288.758645][T17079] ? do_syscall_64+0xbe/0x3b0 [ 288.758659][T17079] do_syscall_64+0xfa/0x3b0 [ 288.758669][T17079] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.758685][T17079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.758696][T17079] ? clear_bhb_loop+0x60/0xb0 [ 288.758711][T17079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.758722][T17079] RIP: 0033:0x7faa4218e9a9 [ 288.758748][T17079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.758758][T17079] RSP: 002b:00007faa42fad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.758771][T17079] RAX: ffffffffffffffda RBX: 00007faa423b5fa0 RCX: 00007faa4218e9a9 [ 288.758780][T17079] RDX: 000000000000c000 RSI: 0000200000000880 RDI: 0000000000000003 [ 288.758788][T17079] RBP: 00007faa42fad090 R08: 0000000000000000 R09: 0000000000000000 [ 288.758795][T17079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.758802][T17079] R13: 0000000000000000 R14: 00007faa423b5fa0 R15: 00007ffc62c9b9b8 [ 288.758821][T17079] [ 289.171930][T17105] FAULT_INJECTION: forcing a failure. [ 289.171930][T17105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.196558][T17105] CPU: 1 UID: 0 PID: 17105 Comm: syz.6.4284 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 289.196577][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.196585][T17105] Call Trace: [ 289.196591][T17105] [ 289.196596][T17105] dump_stack_lvl+0x189/0x250 [ 289.196616][T17105] ? __pfx____ratelimit+0x10/0x10 [ 289.196635][T17105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.196648][T17105] ? __pfx__printk+0x10/0x10 [ 289.196665][T17105] ? __might_fault+0xb0/0x130 [ 289.196689][T17105] should_fail_ex+0x414/0x560 [ 289.196705][T17105] _copy_from_iter+0x1db/0x16f0 [ 289.196723][T17105] ? rcu_is_watching+0x15/0xb0 [ 289.196738][T17105] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 289.196756][T17105] ? __pfx__copy_from_iter+0x10/0x10 [ 289.196772][T17105] ? __build_skb_around+0x257/0x3e0 [ 289.196788][T17105] ? netlink_sendmsg+0x642/0xb30 [ 289.196799][T17105] ? skb_put+0x11b/0x210 [ 289.196814][T17105] netlink_sendmsg+0x6b2/0xb30 [ 289.196833][T17105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.196848][T17105] ? aa_sock_msg_perm+0x94/0x160 [ 289.196863][T17105] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.196876][T17105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.196889][T17105] __sock_sendmsg+0x219/0x270 [ 289.196908][T17105] ____sys_sendmsg+0x505/0x830 [ 289.196926][T17105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.196946][T17105] ? import_iovec+0x74/0xa0 [ 289.196965][T17105] ___sys_sendmsg+0x21f/0x2a0 [ 289.196981][T17105] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.197020][T17105] ? __fget_files+0x2a/0x420 [ 289.197031][T17105] ? __fget_files+0x3a0/0x420 [ 289.197049][T17105] __x64_sys_sendmsg+0x19b/0x260 [ 289.197065][T17105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.197086][T17105] ? __pfx_ksys_write+0x10/0x10 [ 289.197101][T17105] ? rcu_is_watching+0x15/0xb0 [ 289.197118][T17105] ? do_syscall_64+0xbe/0x3b0 [ 289.197133][T17105] do_syscall_64+0xfa/0x3b0 [ 289.197143][T17105] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.197160][T17105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.197179][T17105] ? clear_bhb_loop+0x60/0xb0 [ 289.197194][T17105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.197205][T17105] RIP: 0033:0x7fd7d3f8e9a9 [ 289.197217][T17105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.197227][T17105] RSP: 002b:00007fd7d4edc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.197241][T17105] RAX: ffffffffffffffda RBX: 00007fd7d41b5fa0 RCX: 00007fd7d3f8e9a9 [ 289.197250][T17105] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 289.197258][T17105] RBP: 00007fd7d4edc090 R08: 0000000000000000 R09: 0000000000000000 [ 289.197266][T17105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.197274][T17105] R13: 0000000000000000 R14: 00007fd7d41b5fa0 R15: 00007ffe30c05258 [ 289.197294][T17105] [ 289.567137][T17116] FAULT_INJECTION: forcing a failure. [ 289.567137][T17116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.582441][T17116] CPU: 0 UID: 0 PID: 17116 Comm: syz.4.4288 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 289.582460][T17116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.582467][T17116] Call Trace: [ 289.582473][T17116] [ 289.582478][T17116] dump_stack_lvl+0x189/0x250 [ 289.582497][T17116] ? __pfx____ratelimit+0x10/0x10 [ 289.582515][T17116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.582534][T17116] ? __pfx__printk+0x10/0x10 [ 289.582550][T17116] ? __might_fault+0xb0/0x130 [ 289.582574][T17116] should_fail_ex+0x414/0x560 [ 289.582591][T17116] _copy_from_user+0x2d/0xb0 [ 289.582608][T17116] kstrtouint_from_user+0xc4/0x170 [ 289.582629][T17116] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 289.582656][T17116] proc_fail_nth_write+0x88/0x240 [ 289.582669][T17116] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 289.582685][T17116] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 289.582698][T17116] vfs_write+0x27e/0xa90 [ 289.582720][T17116] ? __pfx_vfs_write+0x10/0x10 [ 289.582736][T17116] ? __fget_files+0x2a/0x420 [ 289.582751][T17116] ? __fget_files+0x3a0/0x420 [ 289.582760][T17116] ? __fget_files+0x2a/0x420 [ 289.582777][T17116] ksys_write+0x145/0x250 [ 289.582793][T17116] ? __pfx_ksys_write+0x10/0x10 [ 289.582806][T17116] ? rcu_is_watching+0x15/0xb0 [ 289.582824][T17116] ? do_syscall_64+0xbe/0x3b0 [ 289.582839][T17116] do_syscall_64+0xfa/0x3b0 [ 289.582849][T17116] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.582866][T17116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.582877][T17116] ? clear_bhb_loop+0x60/0xb0 [ 289.582891][T17116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.582908][T17116] RIP: 0033:0x7faa4218d45f [ 289.582930][T17116] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 289.582939][T17116] RSP: 002b:00007faa42fad030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 289.582953][T17116] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faa4218d45f [ 289.582961][T17116] RDX: 0000000000000001 RSI: 00007faa42fad0a0 RDI: 0000000000000004 [ 289.582967][T17116] RBP: 00007faa42fad090 R08: 0000000000000000 R09: 0000000000000000 [ 289.582974][T17116] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 289.582980][T17116] R13: 0000000000000000 R14: 00007faa423b5fa0 R15: 00007ffc62c9b9b8 [ 289.582998][T17116] [ 289.935939][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4289'. [ 289.949884][T17118] caif0: Master is either lo or non-ether device [ 290.072454][T17142] FAULT_INJECTION: forcing a failure. [ 290.072454][T17142] name failslab, interval 1, probability 0, space 0, times 0 [ 290.086931][T17142] CPU: 0 UID: 0 PID: 17142 Comm: syz.5.4297 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 290.086949][T17142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.086956][T17142] Call Trace: [ 290.086961][T17142] [ 290.086966][T17142] dump_stack_lvl+0x189/0x250 [ 290.086986][T17142] ? __pfx____ratelimit+0x10/0x10 [ 290.087004][T17142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.087018][T17142] ? __pfx__printk+0x10/0x10 [ 290.087037][T17142] ? __pfx___might_resched+0x10/0x10 [ 290.087055][T17142] should_fail_ex+0x414/0x560 [ 290.087071][T17142] should_failslab+0xa8/0x100 [ 290.087089][T17142] __kmalloc_noprof+0xcb/0x4f0 [ 290.087104][T17142] ? sk_prot_alloc+0xe7/0x220 [ 290.087120][T17142] sk_prot_alloc+0xe7/0x220 [ 290.087131][T17142] ? sk_alloc+0x24/0x370 [ 290.087144][T17142] sk_alloc+0x3a/0x370 [ 290.087155][T17142] ? bpf_ctx_init+0x167/0x1d0 [ 290.087174][T17142] bpf_prog_test_run_skb+0x2ed/0x1560 [ 290.087191][T17142] ? __fget_files+0x2a/0x420 [ 290.087212][T17142] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 290.087230][T17142] bpf_prog_test_run+0x2c4/0x340 [ 290.087246][T17142] __sys_bpf+0x4a4/0x860 [ 290.087265][T17142] ? __pfx___sys_bpf+0x10/0x10 [ 290.087290][T17142] ? ksys_write+0x22a/0x250 [ 290.087308][T17142] ? __pfx_ksys_write+0x10/0x10 [ 290.087321][T17142] ? rcu_is_watching+0x15/0xb0 [ 290.087340][T17142] __x64_sys_bpf+0x7c/0x90 [ 290.087357][T17142] do_syscall_64+0xfa/0x3b0 [ 290.087367][T17142] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.087384][T17142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.087396][T17142] ? clear_bhb_loop+0x60/0xb0 [ 290.087416][T17142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.087427][T17142] RIP: 0033:0x7f03df78e9a9 [ 290.087439][T17142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.087449][T17142] RSP: 002b:00007f03e051f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.087462][T17142] RAX: ffffffffffffffda RBX: 00007f03df9b5fa0 RCX: 00007f03df78e9a9 [ 290.087471][T17142] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 290.087479][T17142] RBP: 00007f03e051f090 R08: 0000000000000000 R09: 0000000000000000 [ 290.087486][T17142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.087493][T17142] R13: 0000000000000000 R14: 00007f03df9b5fa0 R15: 00007fff8078aa98 [ 290.087513][T17142] [ 290.338754][T17137] lo speed is unknown, defaulting to 1000 [ 290.458377][T17150] dummy0: mtu less than device minimum [ 290.574559][T17158] tipc: Enabled bearer , priority 0 [ 290.617184][T17157] tipc: Disabling bearer [ 290.829745][T17174] FAULT_INJECTION: forcing a failure. [ 290.829745][T17174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.851939][T17174] CPU: 1 UID: 0 PID: 17174 Comm: syz.6.4310 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 290.851960][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.851968][T17174] Call Trace: [ 290.851973][T17174] [ 290.851979][T17174] dump_stack_lvl+0x189/0x250 [ 290.851999][T17174] ? __pfx____ratelimit+0x10/0x10 [ 290.852017][T17174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.852031][T17174] ? __pfx__printk+0x10/0x10 [ 290.852048][T17174] ? __might_fault+0xb0/0x130 [ 290.852072][T17174] should_fail_ex+0x414/0x560 [ 290.852088][T17174] _copy_from_iter+0x3f5/0x16f0 [ 290.852106][T17174] ? rcu_is_watching+0x15/0xb0 [ 290.852124][T17174] ? __pfx__copy_from_iter+0x10/0x10 [ 290.852140][T17174] ? __build_skb_around+0x257/0x3e0 [ 290.852155][T17174] ? netlink_sendmsg+0x642/0xb30 [ 290.852166][T17174] ? skb_put+0x11b/0x210 [ 290.852181][T17174] netlink_sendmsg+0x6b2/0xb30 [ 290.852200][T17174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.852214][T17174] ? aa_sock_msg_perm+0x94/0x160 [ 290.852228][T17174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.852241][T17174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.852253][T17174] __sock_sendmsg+0x219/0x270 [ 290.852272][T17174] ____sys_sendmsg+0x505/0x830 [ 290.852290][T17174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.852309][T17174] ? import_iovec+0x74/0xa0 [ 290.852331][T17174] ___sys_sendmsg+0x21f/0x2a0 [ 290.852346][T17174] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.852385][T17174] ? __fget_files+0x2a/0x420 [ 290.852401][T17174] ? __fget_files+0x3a0/0x420 [ 290.852419][T17174] __x64_sys_sendmsg+0x19b/0x260 [ 290.852435][T17174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.852456][T17174] ? __pfx_ksys_write+0x10/0x10 [ 290.852469][T17174] ? rcu_is_watching+0x15/0xb0 [ 290.852486][T17174] ? do_syscall_64+0xbe/0x3b0 [ 290.852501][T17174] do_syscall_64+0xfa/0x3b0 [ 290.852511][T17174] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.852528][T17174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.852540][T17174] ? clear_bhb_loop+0x60/0xb0 [ 290.852555][T17174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.852566][T17174] RIP: 0033:0x7fd7d3f8e9a9 [ 290.852577][T17174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.852588][T17174] RSP: 002b:00007fd7d4edc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.852602][T17174] RAX: ffffffffffffffda RBX: 00007fd7d41b5fa0 RCX: 00007fd7d3f8e9a9 [ 290.852610][T17174] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 290.852618][T17174] RBP: 00007fd7d4edc090 R08: 0000000000000000 R09: 0000000000000000 [ 290.852625][T17174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.852633][T17174] R13: 0000000000000000 R14: 00007fd7d41b5fa0 R15: 00007ffe30c05258 [ 290.852653][T17174] [ 291.314384][T17186] tipc: Enabling of bearer rejected, failed to enable media [ 291.331456][T17186] netlink: 'syz.3.4317': attribute type 39 has an invalid length. [ 291.409846][T17197] netlink: 'syz.6.4321': attribute type 10 has an invalid length. [ 291.530833][T17205] FAULT_INJECTION: forcing a failure. [ 291.530833][T17205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.547957][T17205] CPU: 1 UID: 0 PID: 17205 Comm: syz.5.4323 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 291.547975][T17205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.547982][T17205] Call Trace: [ 291.547987][T17205] [ 291.547992][T17205] dump_stack_lvl+0x189/0x250 [ 291.548010][T17205] ? __pfx____ratelimit+0x10/0x10 [ 291.548028][T17205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.548041][T17205] ? __pfx__printk+0x10/0x10 [ 291.548057][T17205] ? __might_fault+0xb0/0x130 [ 291.548079][T17205] should_fail_ex+0x414/0x560 [ 291.548094][T17205] _copy_to_iter+0x3f5/0x16f0 [ 291.548116][T17205] ? __pfx__copy_to_iter+0x10/0x10 [ 291.548128][T17205] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 291.548146][T17205] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 291.548163][T17205] __skb_datagram_iter+0xf8/0x990 [ 291.548178][T17205] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 291.548198][T17205] skb_copy_datagram_iter+0xc5/0x230 [ 291.548214][T17205] netlink_recvmsg+0x2ab/0xa30 [ 291.548232][T17205] ? __pfx_netlink_recvmsg+0x10/0x10 [ 291.548246][T17205] ? aa_sock_msg_perm+0x94/0x160 [ 291.548260][T17205] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 291.548269][T17205] ? security_socket_recvmsg+0x7e/0x2e0 [ 291.548285][T17205] ? __pfx_netlink_recvmsg+0x10/0x10 [ 291.548296][T17205] sock_recvmsg+0x229/0x270 [ 291.548315][T17205] ____sys_recvmsg+0x1c9/0x460 [ 291.548333][T17205] ? __pfx_____sys_recvmsg+0x10/0x10 [ 291.548357][T17205] ? import_iovec+0x74/0xa0 [ 291.548372][T17205] ___sys_recvmsg+0x1b5/0x510 [ 291.548387][T17205] ? __pfx____sys_recvmsg+0x10/0x10 [ 291.548423][T17205] ? __fget_files+0x3a0/0x420 [ 291.548442][T17205] __x64_sys_recvmsg+0x198/0x260 [ 291.548458][T17205] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 291.548478][T17205] ? __pfx_ksys_write+0x10/0x10 [ 291.548492][T17205] ? rcu_is_watching+0x15/0xb0 [ 291.548508][T17205] ? do_syscall_64+0xbe/0x3b0 [ 291.548523][T17205] do_syscall_64+0xfa/0x3b0 [ 291.548534][T17205] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.548549][T17205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.548560][T17205] ? clear_bhb_loop+0x60/0xb0 [ 291.548574][T17205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.548585][T17205] RIP: 0033:0x7f03df78e9a9 [ 291.548596][T17205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.548606][T17205] RSP: 002b:00007f03e051f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 291.548620][T17205] RAX: ffffffffffffffda RBX: 00007f03df9b5fa0 RCX: 00007f03df78e9a9 [ 291.548628][T17205] RDX: 0000000040000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 291.548636][T17205] RBP: 00007f03e051f090 R08: 0000000000000000 R09: 0000000000000000 [ 291.548643][T17205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.548650][T17205] R13: 0000000000000000 R14: 00007f03df9b5fa0 R15: 00007fff8078aa98 [ 291.548668][T17205] [ 291.548884][T17207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4325'. [ 291.550013][T17209] FAULT_INJECTION: forcing a failure. [ 291.550013][T17209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.567415][T17203] netlink: 'syz.6.4324': attribute type 13 has an invalid length. [ 291.575038][T17209] CPU: 1 UID: 0 PID: 17209 Comm: syz.4.4326 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 291.575052][T17209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.575060][T17209] Call Trace: [ 291.575064][T17209] [ 291.575069][T17209] dump_stack_lvl+0x189/0x250 [ 291.575085][T17209] ? __pfx____ratelimit+0x10/0x10 [ 291.575101][T17209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.575113][T17209] ? __pfx__printk+0x10/0x10 [ 291.575127][T17209] ? __might_fault+0xb0/0x130 [ 291.575147][T17209] should_fail_ex+0x414/0x560 [ 291.575162][T17209] _copy_to_iter+0x3f5/0x16f0 [ 291.575183][T17209] ? __pfx__copy_to_iter+0x10/0x10 [ 291.575193][T17209] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 291.575210][T17209] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 291.575226][T17209] __skb_datagram_iter+0xf8/0x990 [ 291.575240][T17209] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 291.575258][T17209] skb_copy_datagram_iter+0xc5/0x230 [ 291.575273][T17209] netlink_recvmsg+0x2ab/0xa30 [ 291.575290][T17209] ? __pfx_netlink_recvmsg+0x10/0x10 [ 291.575304][T17209] ? aa_sock_msg_perm+0x94/0x160 [ 291.575316][T17209] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 291.575326][T17209] ? security_socket_recvmsg+0x7e/0x2e0 [ 291.575339][T17209] ? __pfx_netlink_recvmsg+0x10/0x10 [ 291.575350][T17209] sock_recvmsg+0x229/0x270 [ 291.575366][T17209] ____sys_recvmsg+0x1c9/0x460 [ 291.575384][T17209] ? __pfx_____sys_recvmsg+0x10/0x10 [ 291.575411][T17209] ? import_iovec+0x74/0xa0 [ 291.575427][T17209] ___sys_recvmsg+0x1b5/0x510 [ 291.575442][T17209] ? __pfx____sys_recvmsg+0x10/0x10 [ 291.575470][T17209] ? __fget_files+0x3a0/0x420 [ 291.575487][T17209] do_recvmmsg+0x307/0x770 [ 291.575504][T17209] ? __pfx_do_recvmmsg+0x10/0x10 [ 291.575524][T17209] ? _copy_from_user+0x94/0xb0 [ 291.575548][T17209] __x64_sys_recvmmsg+0x1af/0x240 [ 291.575562][T17209] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 291.575573][T17209] ? rcu_is_watching+0x15/0xb0 [ 291.575588][T17209] ? do_syscall_64+0xbe/0x3b0 [ 291.575601][T17209] do_syscall_64+0xfa/0x3b0 [ 291.575610][T17209] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.575624][T17209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.575634][T17209] ? clear_bhb_loop+0x60/0xb0 [ 291.575647][T17209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.575656][T17209] RIP: 0033:0x7faa4218e9a9 [ 291.575666][T17209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.575675][T17209] RSP: 002b:00007faa42fad038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 291.575687][T17209] RAX: ffffffffffffffda RBX: 00007faa423b5fa0 RCX: 00007faa4218e9a9 [ 291.575695][T17209] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 291.575702][T17209] RBP: 00007faa42fad090 R08: 0000200000003700 R09: 0000000000000000 [ 291.575709][T17209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.575715][T17209] R13: 0000000000000000 R14: 00007faa423b5fa0 R15: 00007ffc62c9b9b8 [ 291.575732][T17209] [ 291.719781][T17212] lo speed is unknown, defaulting to 1000 [ 291.746272][T17203] netlink: 'syz.6.4324': attribute type 17 has an invalid length. [ 291.827401][T17219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.988156][T17221] bond0: (slave team0): Releasing backup interface [ 292.204876][T17221] tipc: Resetting bearer [ 292.211209][T17221] bond0: (slave bond_slave_0): Releasing backup interface [ 292.223931][T17221] bond0: (slave bond_slave_1): Releasing backup interface [ 292.239451][T17221] team0: Port device team_slave_0 removed [ 292.246530][T17221] team0: Port device team_slave_1 removed [ 292.254943][T17221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.263386][T17221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.272672][T17221] bond0: (slave wlan1): Releasing backup interface [ 292.291980][T17203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.331920][T17219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.440806][T17242] FAULT_INJECTION: forcing a failure. [ 292.440806][T17242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.455568][T17242] CPU: 1 UID: 0 PID: 17242 Comm: syz.4.4336 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 292.455587][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.455594][T17242] Call Trace: [ 292.455600][T17242] [ 292.455605][T17242] dump_stack_lvl+0x189/0x250 [ 292.455624][T17242] ? __pfx____ratelimit+0x10/0x10 [ 292.455642][T17242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.455655][T17242] ? __pfx__printk+0x10/0x10 [ 292.455671][T17242] ? __might_fault+0xb0/0x130 [ 292.455695][T17242] should_fail_ex+0x414/0x560 [ 292.455711][T17242] _copy_from_iter+0x1db/0x16f0 [ 292.455728][T17242] ? rcu_is_watching+0x15/0xb0 [ 292.455743][T17242] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 292.455760][T17242] ? __pfx__copy_from_iter+0x10/0x10 [ 292.455775][T17242] ? __build_skb_around+0x257/0x3e0 [ 292.455790][T17242] ? netlink_sendmsg+0x642/0xb30 [ 292.455801][T17242] ? skb_put+0x11b/0x210 [ 292.455816][T17242] netlink_sendmsg+0x6b2/0xb30 [ 292.455834][T17242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.455848][T17242] ? aa_sock_msg_perm+0x94/0x160 [ 292.455862][T17242] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.455874][T17242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.455887][T17242] __sock_sendmsg+0x219/0x270 [ 292.455906][T17242] ____sys_sendmsg+0x505/0x830 [ 292.455923][T17242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.455943][T17242] ? import_iovec+0x74/0xa0 [ 292.455961][T17242] ___sys_sendmsg+0x21f/0x2a0 [ 292.455976][T17242] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.456013][T17242] ? __fget_files+0x2a/0x420 [ 292.456023][T17242] ? __fget_files+0x3a0/0x420 [ 292.456040][T17242] __x64_sys_sendmsg+0x19b/0x260 [ 292.456056][T17242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.456076][T17242] ? __pfx_ksys_write+0x10/0x10 [ 292.456095][T17242] ? do_syscall_64+0xbe/0x3b0 [ 292.456109][T17242] do_syscall_64+0xfa/0x3b0 [ 292.456119][T17242] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.456136][T17242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.456147][T17242] ? clear_bhb_loop+0x60/0xb0 [ 292.456167][T17242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.456178][T17242] RIP: 0033:0x7faa4218e9a9 [ 292.456190][T17242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.456200][T17242] RSP: 002b:00007faa42fad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.456213][T17242] RAX: ffffffffffffffda RBX: 00007faa423b5fa0 RCX: 00007faa4218e9a9 [ 292.456222][T17242] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 292.456230][T17242] RBP: 00007faa42fad090 R08: 0000000000000000 R09: 0000000000000000 [ 292.456237][T17242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.456244][T17242] R13: 0000000000000000 R14: 00007faa423b5fa0 R15: 00007ffc62c9b9b8 [ 292.456263][T17242] [ 292.457671][T17242] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4336'. [ 292.910270][T17256] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4340'. [ 292.987465][T17259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4341'. [ 293.038334][T17259] vlan2: entered allmulticast mode [ 293.043581][T17259] veth1: entered allmulticast mode [ 293.183387][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 293.236224][T17271] FAULT_INJECTION: forcing a failure. [ 293.236224][T17271] name failslab, interval 1, probability 0, space 0, times 0 [ 293.257319][T17271] CPU: 0 UID: 0 PID: 17271 Comm: syz.1.4347 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 293.257337][T17271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.257344][T17271] Call Trace: [ 293.257349][T17271] [ 293.257354][T17271] dump_stack_lvl+0x189/0x250 [ 293.257372][T17271] ? __pfx____ratelimit+0x10/0x10 [ 293.257388][T17271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.257401][T17271] ? __pfx__printk+0x10/0x10 [ 293.257419][T17271] ? __pfx___might_resched+0x10/0x10 [ 293.257436][T17271] should_fail_ex+0x414/0x560 [ 293.257451][T17271] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 293.257462][T17271] should_failslab+0xa8/0x100 [ 293.257480][T17271] __kvmalloc_node_noprof+0x161/0x5f0 [ 293.257496][T17271] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 293.257510][T17271] bpf_test_run_xdp_live+0x18e/0x1b10 [ 293.257529][T17271] ? stack_depot_save_flags+0x40/0x900 [ 293.257549][T17271] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 293.257559][T17271] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 293.257569][T17271] ? bpf_prog_test_run+0x2c4/0x340 [ 293.257578][T17271] ? __sys_bpf+0x4a4/0x860 [ 293.257592][T17271] ? __x64_sys_bpf+0x7c/0x90 [ 293.257619][T17271] ? __lock_acquire+0xab9/0xd20 [ 293.257638][T17271] ? __might_fault+0xb0/0x130 [ 293.257660][T17271] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 293.257677][T17271] ? _copy_from_user+0x94/0xb0 [ 293.257693][T17271] ? bpf_test_init+0x133/0x170 [ 293.257708][T17271] ? xdp_convert_md_to_buff+0x5b/0x330 [ 293.257721][T17271] bpf_prog_test_run_xdp+0x713/0x1000 [ 293.257742][T17271] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 293.257757][T17271] ? __fget_files+0x2a/0x420 [ 293.257771][T17271] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 293.257783][T17271] bpf_prog_test_run+0x2c4/0x340 [ 293.257795][T17271] __sys_bpf+0x4a4/0x860 [ 293.257813][T17271] ? __pfx___sys_bpf+0x10/0x10 [ 293.257838][T17271] ? ksys_write+0x22a/0x250 [ 293.257854][T17271] ? __pfx_ksys_write+0x10/0x10 [ 293.257866][T17271] ? rcu_is_watching+0x15/0xb0 [ 293.257885][T17271] __x64_sys_bpf+0x7c/0x90 [ 293.257901][T17271] do_syscall_64+0xfa/0x3b0 [ 293.257912][T17271] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.257928][T17271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.257939][T17271] ? clear_bhb_loop+0x60/0xb0 [ 293.257953][T17271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.257964][T17271] RIP: 0033:0x7f862af8e9a9 [ 293.257975][T17271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.257985][T17271] RSP: 002b:00007f862bd88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.257999][T17271] RAX: ffffffffffffffda RBX: 00007f862b1b5fa0 RCX: 00007f862af8e9a9 [ 293.258007][T17271] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 293.258015][T17271] RBP: 00007f862bd88090 R08: 0000000000000000 R09: 0000000000000000 [ 293.258022][T17271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.258029][T17271] R13: 0000000000000000 R14: 00007f862b1b5fa0 R15: 00007ffdd62805b8 [ 293.258048][T17271] [ 293.645167][T17275] netlink: 'syz.6.4349': attribute type 10 has an invalid length. [ 293.655403][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4350'. [ 293.665708][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4350'. [ 293.738133][T17282] lo speed is unknown, defaulting to 1000 [ 293.772124][T17282] netlink: 'syz.1.4352': attribute type 13 has an invalid length. [ 293.779926][T17282] netlink: 'syz.1.4352': attribute type 17 has an invalid length. [ 293.792791][T17282] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 293.810544][ T5902] IPVS: starting estimator thread 0... [ 293.901695][T17285] IPVS: using max 43 ests per chain, 103200 per kthread [ 293.940635][T17291] tipc: Resetting bearer [ 293.959995][T17291] bond0: (slave wlan1): Releasing backup interface [ 294.056040][T17295] netlink: 'syz.1.4357': attribute type 12 has an invalid length. [ 294.076455][ T13] IPVS: stop unused estimator thread 0... [ 294.194057][T17304] netlink: 'syz.4.4360': attribute type 29 has an invalid length. [ 294.214566][T17304] netlink: 'syz.4.4360': attribute type 29 has an invalid length. [ 294.346794][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4361'. [ 294.384424][T17311] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4361'. [ 294.451238][T17318] FAULT_INJECTION: forcing a failure. [ 294.451238][T17318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.466954][T17318] CPU: 1 UID: 0 PID: 17318 Comm: syz.3.4367 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 294.466973][T17318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.466981][T17318] Call Trace: [ 294.466986][T17318] [ 294.466992][T17318] dump_stack_lvl+0x189/0x250 [ 294.467010][T17318] ? __pfx____ratelimit+0x10/0x10 [ 294.467029][T17318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.467043][T17318] ? __pfx__printk+0x10/0x10 [ 294.467059][T17318] ? __might_fault+0xb0/0x130 [ 294.467082][T17318] should_fail_ex+0x414/0x560 [ 294.467098][T17318] _copy_from_iter+0x1db/0x16f0 [ 294.467115][T17318] ? rcu_is_watching+0x15/0xb0 [ 294.467130][T17318] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 294.467148][T17318] ? __pfx__copy_from_iter+0x10/0x10 [ 294.467164][T17318] ? __build_skb_around+0x257/0x3e0 [ 294.467179][T17318] ? netlink_sendmsg+0x642/0xb30 [ 294.467190][T17318] ? skb_put+0x11b/0x210 [ 294.467205][T17318] netlink_sendmsg+0x6b2/0xb30 [ 294.467223][T17318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.467237][T17318] ? aa_sock_msg_perm+0x94/0x160 [ 294.467251][T17318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 294.467263][T17318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.467275][T17318] __sock_sendmsg+0x219/0x270 [ 294.467293][T17318] ____sys_sendmsg+0x505/0x830 [ 294.467311][T17318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.467331][T17318] ? import_iovec+0x74/0xa0 [ 294.467350][T17318] ___sys_sendmsg+0x21f/0x2a0 [ 294.467376][T17318] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.467414][T17318] ? __fget_files+0x2a/0x420 [ 294.467424][T17318] ? __fget_files+0x3a0/0x420 [ 294.467442][T17318] __x64_sys_sendmsg+0x19b/0x260 [ 294.467457][T17318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.467478][T17318] ? __pfx_ksys_write+0x10/0x10 [ 294.467491][T17318] ? rcu_is_watching+0x15/0xb0 [ 294.467506][T17318] ? do_syscall_64+0xbe/0x3b0 [ 294.467520][T17318] do_syscall_64+0xfa/0x3b0 [ 294.467530][T17318] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.467545][T17318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.467557][T17318] ? clear_bhb_loop+0x60/0xb0 [ 294.467571][T17318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.467582][T17318] RIP: 0033:0x7f9d7b38e9a9 [ 294.467593][T17318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.467603][T17318] RSP: 002b:00007f9d7c117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.467618][T17318] RAX: ffffffffffffffda RBX: 00007f9d7b5b5fa0 RCX: 00007f9d7b38e9a9 [ 294.467626][T17318] RDX: 0000000000000840 RSI: 0000200000000280 RDI: 0000000000000003 [ 294.467633][T17318] RBP: 00007f9d7c117090 R08: 0000000000000000 R09: 0000000000000000 [ 294.467640][T17318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.467646][T17318] R13: 0000000000000000 R14: 00007f9d7b5b5fa0 R15: 00007ffef9c0c248 [ 294.467664][T17318] [ 294.816107][T17335] FAULT_INJECTION: forcing a failure. [ 294.816107][T17335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.835890][T17334] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4373'. [ 294.845279][T17335] CPU: 0 UID: 0 PID: 17335 Comm: syz.3.4374 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 294.845298][T17335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.845305][T17335] Call Trace: [ 294.845311][T17335] [ 294.845316][T17335] dump_stack_lvl+0x189/0x250 [ 294.845336][T17335] ? __pfx____ratelimit+0x10/0x10 [ 294.845354][T17335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.845367][T17335] ? __pfx__printk+0x10/0x10 [ 294.845382][T17335] ? __might_fault+0xb0/0x130 [ 294.845406][T17335] should_fail_ex+0x414/0x560 [ 294.845420][T17335] _copy_from_iter+0x1db/0x16f0 [ 294.845442][T17335] ? __pfx__copy_from_iter+0x10/0x10 [ 294.845457][T17335] ? __build_skb_around+0x257/0x3e0 [ 294.845473][T17335] ? netlink_sendmsg+0x642/0xb30 [ 294.845483][T17335] ? skb_put+0x11b/0x210 [ 294.845498][T17335] netlink_sendmsg+0x6b2/0xb30 [ 294.845516][T17335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.845529][T17335] ? aa_sock_msg_perm+0x94/0x160 [ 294.845543][T17335] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 294.845555][T17335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.845568][T17335] __sock_sendmsg+0x219/0x270 [ 294.845586][T17335] ____sys_sendmsg+0x505/0x830 [ 294.845603][T17335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.845623][T17335] ? import_iovec+0x74/0xa0 [ 294.845641][T17335] ___sys_sendmsg+0x21f/0x2a0 [ 294.845656][T17335] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.845696][T17335] ? __fget_files+0x2a/0x420 [ 294.845705][T17335] ? __fget_files+0x3a0/0x420 [ 294.845723][T17335] __x64_sys_sendmsg+0x19b/0x260 [ 294.845739][T17335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.845758][T17335] ? __pfx_ksys_write+0x10/0x10 [ 294.845771][T17335] ? rcu_is_watching+0x15/0xb0 [ 294.845789][T17335] ? do_syscall_64+0xbe/0x3b0 [ 294.845802][T17335] do_syscall_64+0xfa/0x3b0 [ 294.845813][T17335] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.845829][T17335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.845841][T17335] ? clear_bhb_loop+0x60/0xb0 [ 294.845855][T17335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.845866][T17335] RIP: 0033:0x7f9d7b38e9a9 [ 294.845878][T17335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.845888][T17335] RSP: 002b:00007f9d7c117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.845902][T17335] RAX: ffffffffffffffda RBX: 00007f9d7b5b5fa0 RCX: 00007f9d7b38e9a9 [ 294.845910][T17335] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 294.845918][T17335] RBP: 00007f9d7c117090 R08: 0000000000000000 R09: 0000000000000000 [ 294.845924][T17335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.845931][T17335] R13: 0000000000000000 R14: 00007f9d7b5b5fa0 R15: 00007ffef9c0c248 [ 294.845950][T17335] [ 294.904068][T17337] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4375'. [ 295.229208][T17347] FAULT_INJECTION: forcing a failure. [ 295.229208][T17347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.264950][T17347] CPU: 1 UID: 0 PID: 17347 Comm: syz.4.4379 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 295.264969][T17347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.264976][T17347] Call Trace: [ 295.264980][T17347] [ 295.264985][T17347] dump_stack_lvl+0x189/0x250 [ 295.265003][T17347] ? __pfx____ratelimit+0x10/0x10 [ 295.265019][T17347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.265033][T17347] ? __pfx__printk+0x10/0x10 [ 295.265048][T17347] ? __might_fault+0xb0/0x130 [ 295.265072][T17347] should_fail_ex+0x414/0x560 [ 295.265088][T17347] _copy_from_iter+0x1db/0x16f0 [ 295.265105][T17347] ? rcu_is_watching+0x15/0xb0 [ 295.265119][T17347] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 295.265137][T17347] ? __pfx__copy_from_iter+0x10/0x10 [ 295.265152][T17347] ? __build_skb_around+0x257/0x3e0 [ 295.265167][T17347] ? netlink_sendmsg+0x642/0xb30 [ 295.265177][T17347] ? skb_put+0x11b/0x210 [ 295.265192][T17347] netlink_sendmsg+0x6b2/0xb30 [ 295.265209][T17347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.265223][T17347] ? aa_sock_msg_perm+0x94/0x160 [ 295.265237][T17347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.265249][T17347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.265262][T17347] __sock_sendmsg+0x219/0x270 [ 295.265280][T17347] ____sys_sendmsg+0x505/0x830 [ 295.265298][T17347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.265317][T17347] ? import_iovec+0x74/0xa0 [ 295.265335][T17347] ___sys_sendmsg+0x21f/0x2a0 [ 295.265350][T17347] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.265393][T17347] ? __fget_files+0x2a/0x420 [ 295.265403][T17347] ? __fget_files+0x3a0/0x420 [ 295.265421][T17347] __x64_sys_sendmsg+0x19b/0x260 [ 295.265436][T17347] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.265456][T17347] ? __pfx_ksys_write+0x10/0x10 [ 295.265470][T17347] ? rcu_is_watching+0x15/0xb0 [ 295.265486][T17347] ? do_syscall_64+0xbe/0x3b0 [ 295.265500][T17347] do_syscall_64+0xfa/0x3b0 [ 295.265510][T17347] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.265526][T17347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.265538][T17347] ? clear_bhb_loop+0x60/0xb0 [ 295.265552][T17347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.265563][T17347] RIP: 0033:0x7faa4218e9a9 [ 295.265574][T17347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.265585][T17347] RSP: 002b:00007faa42fad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.265599][T17347] RAX: ffffffffffffffda RBX: 00007faa423b5fa0 RCX: 00007faa4218e9a9 [ 295.265608][T17347] RDX: 0000000020008844 RSI: 0000200000000000 RDI: 0000000000000003 [ 295.265616][T17347] RBP: 00007faa42fad090 R08: 0000000000000000 R09: 0000000000000000 [ 295.265623][T17347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.265630][T17347] R13: 0000000000000000 R14: 00007faa423b5fa0 R15: 00007ffc62c9b9b8 [ 295.265649][T17347] [ 295.868357][T17374] lo speed is unknown, defaulting to 1000 [ 296.362722][T17408] lo speed is unknown, defaulting to 1000 [ 296.381447][T17404] validate_nla: 6 callbacks suppressed [ 296.381460][T17404] netlink: 'syz.5.4394': attribute type 13 has an invalid length. [ 296.431251][T17404] netlink: 'syz.5.4394': attribute type 17 has an invalid length. [ 296.521646][T17404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.543719][T17404] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.557426][T17404] tipc: Resetting bearer [ 296.563828][T17404] tipc: Resetting bearer [ 296.581660][T17404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.631968][T17411] FAULT_INJECTION: forcing a failure. [ 296.631968][T17411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.645247][T17411] CPU: 0 UID: 0 PID: 17411 Comm: syz.1.4395 Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 296.645265][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.645272][T17411] Call Trace: [ 296.645279][T17411] [ 296.645284][T17411] dump_stack_lvl+0x189/0x250 [ 296.645302][T17411] ? __pfx____ratelimit+0x10/0x10 [ 296.645321][T17411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.645335][T17411] ? __pfx__printk+0x10/0x10 [ 296.645351][T17411] ? __might_fault+0xb0/0x130 [ 296.645382][T17411] should_fail_ex+0x414/0x560 [ 296.645398][T17411] _copy_from_user+0x2d/0xb0 [ 296.645415][T17411] __sys_sendto+0x25c/0x520 [ 296.645430][T17411] ? __pfx___sys_sendto+0x10/0x10 [ 296.645441][T17411] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 296.645462][T17411] ? __fget_files+0x3a0/0x420 [ 296.645481][T17411] ? ksys_write+0x22a/0x250 [ 296.645498][T17411] ? __pfx_ksys_write+0x10/0x10 [ 296.645511][T17411] ? rcu_is_watching+0x15/0xb0 [ 296.645529][T17411] __x64_sys_sendto+0xde/0x100 [ 296.645543][T17411] do_syscall_64+0xfa/0x3b0 [ 296.645556][T17411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.645567][T17411] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.645579][T17411] ? clear_bhb_loop+0x60/0xb0 [ 296.645593][T17411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.645605][T17411] RIP: 0033:0x7f862af8e9a9 [ 296.645616][T17411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.645627][T17411] RSP: 002b:00007f862bd88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 296.645640][T17411] RAX: ffffffffffffffda RBX: 00007f862b1b5fa0 RCX: 00007f862af8e9a9 [ 296.645649][T17411] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 296.645656][T17411] RBP: 00007f862bd88090 R08: 0000200000000280 R09: 000000000000001c [ 296.645664][T17411] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000001 [ 296.645671][T17411] R13: 0000000000000000 R14: 00007f862b1b5fa0 R15: 00007ffdd62805b8 [ 296.645691][T17411] [ 297.048196][T17428] __nla_validate_parse: 2 callbacks suppressed [ 297.048208][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4401'. [ 297.122052][ C0] ------------[ cut here ]------------ [ 297.127768][ C0] WARNING: CPU: 0 PID: 17433 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 297.137355][ C0] Modules linked in: [ 297.141443][ C0] CPU: 0 UID: 0 PID: 17433 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 297.153711][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.163783][ C0] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 297.169608][ C0] Code: 0f 0b 90 e9 62 fe ff ff e8 5a a7 c9 f7 90 0f 0b 90 e9 95 fe ff ff e8 4c a7 c9 f7 90 0f 0b 90 e9 bb fe ff ff e8 3e a7 c9 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 297.189266][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 297.195435][ C0] RAX: ffffffff89f68312 RBX: dffffc0000000000 RCX: ffff88807d27bc00 [ 297.203471][ C0] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 297.211433][ C0] RBP: 0000000000000fff R08: ffff888026d62b1f R09: 1ffff11004dac563 [ 297.219435][ C0] R10: dffffc0000000000 R11: ffffed1004dac564 R12: ffff888026d62880 [ 297.225144][T17435] lo speed is unknown, defaulting to 1000 [ 297.227428][ C0] R13: dffffc0000000000 R14: ffff888026d62b04 R15: 1ffff11004dac512 [ 297.241111][ C0] FS: 00005555913b8500(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 297.250070][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.256668][ C0] CR2: 00007f862b04e3e1 CR3: 00000000772ae000 CR4: 00000000003526f0 [ 297.261125][T17439] netlink: 'syz.5.4405': attribute type 13 has an invalid length. [ 297.264668][ C0] Call Trace: [ 297.264678][ C0] [ 297.264690][ C0] ? inet6_cleanup_sock+0x197/0x230 [ 297.264716][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 297.264733][ C0] __sk_destruct+0x86/0x660 [ 297.264749][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 297.264762][ C0] ? rcu_core+0xc34/0x1710 [ 297.264779][ C0] rcu_core+0xca8/0x1710 [ 297.264806][ C0] ? __pfx_rcu_core+0x10/0x10 [ 297.264825][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 297.264840][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 297.264867][ C0] handle_softirqs+0x286/0x870 [ 297.264885][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 297.287999][T17439] netlink: 'syz.5.4405': attribute type 17 has an invalid length. [ 297.289558][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 297.311178][T17439] tipc: Resetting bearer [ 297.312439][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 297.312465][ C0] __irq_exit_rcu+0xca/0x1f0 [ 297.312480][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 297.312506][ C0] irq_exit_rcu+0x9/0x30 [ 297.312520][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 297.312539][ C0] [ 297.312545][ C0] [ 297.312552][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 297.312566][ C0] RIP: 0010:check_preemption_disabled+0x17/0x120 [ 297.312580][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 ee cd 30 07 48 89 44 24 08 <65> 8b 05 f6 cd 30 07 65 8b 0d eb cd 30 07 f7 c1 ff ff ff 7f 74 23 [ 297.312592][ C0] RSP: 0018:ffffc90002e676a0 EFLAGS: 00000286 [ 297.312606][ C0] RAX: 5c4f8cda8d686000 RBX: ffffffff82012183 RCX: ffff88807d27bc00 [ 297.312615][ C0] RDX: 0000000000000000 RSI: ffffffff8be28c20 RDI: ffffffff8be28be0 [ 297.312625][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172aae5 [ 297.329192][ C0] R10: ffffc90002e67818 R11: ffffffff81ad0050 R12: 1ffff920005ccef9 [ 297.329206][ C0] R13: ffffc90002e67800 R14: ffffc90002e677c8 R15: ffffffff8172aae5 [ 297.329216][ C0] ? unwind_next_frame+0xa5/0x2390 [ 297.329236][ C0] ? shmem_symlink+0xa3/0x510 [ 297.341790][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 297.341811][ C0] ? unwind_next_frame+0xa5/0x2390 [ 297.341832][ C0] ? shmem_symlink+0xa3/0x510 [ 297.341843][ C0] ? unwind_next_frame+0xa5/0x2390 [ 297.341856][ C0] rcu_is_watching+0x15/0xb0 [ 297.341869][ C0] ? shmem_symlink+0xa3/0x510 [ 297.341880][ C0] ? unwind_next_frame+0xa5/0x2390 [ 297.341891][ C0] unwind_next_frame+0xd4/0x2390 [ 297.341909][ C0] ? unwind_next_frame+0xa5/0x2390 [ 297.341923][ C0] ? shmem_get_inode+0x346/0xe90 [ 297.341943][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 297.341960][ C0] arch_stack_walk+0x11c/0x150 [ 297.341980][ C0] ? shmem_symlink+0xa3/0x510 [ 297.341994][ C0] stack_trace_save+0x9c/0xe0 [ 297.342010][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 297.342030][ C0] ? xa_load+0x60/0x210 [ 297.342046][ C0] kasan_save_track+0x3e/0x80 [ 297.342062][ C0] ? kasan_save_track+0x3e/0x80 [ 297.342075][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 297.342090][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 297.342105][ C0] ? security_inode_alloc+0x39/0x330 [ 297.342119][ C0] ? inode_init_always_gfp+0x9ed/0xdc0 [ 297.581106][ C0] ? alloc_inode+0x82/0x1b0 [ 297.585642][ C0] ? new_inode+0x22/0x170 [ 297.589959][ C0] ? shmem_get_inode+0x346/0xe90 [ 297.594907][ C0] ? shmem_symlink+0xa3/0x510 [ 297.599580][ C0] __kasan_slab_alloc+0x6c/0x80 [ 297.604431][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 297.609876][ C0] ? security_inode_alloc+0x39/0x330 [ 297.615166][ C0] security_inode_alloc+0x39/0x330 [ 297.620268][ C0] inode_init_always_gfp+0x9ed/0xdc0 [ 297.625564][ C0] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 297.631012][ C0] alloc_inode+0x82/0x1b0 [ 297.635349][ C0] new_inode+0x22/0x170 [ 297.639494][ C0] shmem_get_inode+0x346/0xe90 [ 297.644263][ C0] shmem_symlink+0xa3/0x510 [ 297.648749][ C0] ? inode_permission+0x149/0x470 [ 297.653766][ C0] ? may_create+0x227/0x320 [ 297.658254][ C0] vfs_symlink+0x143/0x2f0 [ 297.662677][ C0] do_symlinkat+0x1b1/0x3f0 [ 297.667166][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 297.672187][ C0] ? getname_flags+0x1e5/0x540 [ 297.676931][ C0] __x64_sys_symlinkat+0x95/0xb0 [ 297.681873][ C0] do_syscall_64+0xfa/0x3b0 [ 297.686359][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.691559][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.697606][ C0] ? clear_bhb_loop+0x60/0xb0 [ 297.702289][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.708184][ C0] RIP: 0033:0x7f862af8df27 [ 297.712621][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.732233][ C0] RSP: 002b:00007ffdd6280938 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 297.740636][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f862af8df27 [ 297.748626][ C0] RDX: 00007f862b0125c9 RSI: 00000000ffffff9c RDI: 00007ffdd62809d0 [ 297.756603][ C0] RBP: 00007ffdd628097c R08: 0000000000000013 R09: 00007ffdd6280687 [ 297.764598][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000155 [ 297.772567][ C0] R13: 00000000000927c0 R14: 000000000004884f R15: 00007ffdd62809d0 [ 297.780514][ C0] [ 297.783530][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 297.790796][ C0] CPU: 0 UID: 0 PID: 17433 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-01600-g1b02c861714b #0 PREEMPT(full) [ 297.803006][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.813036][ C0] Call Trace: [ 297.816288][ C0] [ 297.819110][ C0] dump_stack_lvl+0x99/0x250 [ 297.823677][ C0] ? __asan_memcpy+0x40/0x70 [ 297.828242][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.833413][ C0] ? __pfx__printk+0x10/0x10 [ 297.837982][ C0] panic+0x2db/0x790 [ 297.841852][ C0] ? __pfx_panic+0x10/0x10 [ 297.846238][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 297.851416][ C0] __warn+0x31b/0x4b0 [ 297.855370][ C0] ? inet_sock_destruct+0x623/0x730 [ 297.860542][ C0] ? inet_sock_destruct+0x623/0x730 [ 297.865713][ C0] report_bug+0x2be/0x4f0 [ 297.870019][ C0] ? inet_sock_destruct+0x623/0x730 [ 297.875190][ C0] ? inet_sock_destruct+0x623/0x730 [ 297.880362][ C0] ? inet_sock_destruct+0x625/0x730 [ 297.885533][ C0] handle_bug+0x84/0x160 [ 297.889745][ C0] exc_invalid_op+0x1a/0x50 [ 297.894222][ C0] asm_exc_invalid_op+0x1a/0x20 [ 297.899042][ C0] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 297.904819][ C0] Code: 0f 0b 90 e9 62 fe ff ff e8 5a a7 c9 f7 90 0f 0b 90 e9 95 fe ff ff e8 4c a7 c9 f7 90 0f 0b 90 e9 bb fe ff ff e8 3e a7 c9 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 297.924395][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 297.930435][ C0] RAX: ffffffff89f68312 RBX: dffffc0000000000 RCX: ffff88807d27bc00 [ 297.938378][ C0] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 297.946322][ C0] RBP: 0000000000000fff R08: ffff888026d62b1f R09: 1ffff11004dac563 [ 297.954266][ C0] R10: dffffc0000000000 R11: ffffed1004dac564 R12: ffff888026d62880 [ 297.962211][ C0] R13: dffffc0000000000 R14: ffff888026d62b04 R15: 1ffff11004dac512 [ 297.970156][ C0] ? inet_sock_destruct+0x622/0x730 [ 297.975329][ C0] ? inet_sock_destruct+0x622/0x730 [ 297.980500][ C0] ? inet6_cleanup_sock+0x197/0x230 [ 297.985669][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 297.991274][ C0] __sk_destruct+0x86/0x660 [ 297.995752][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 298.000833][ C0] ? rcu_core+0xc34/0x1710 [ 298.005221][ C0] rcu_core+0xca8/0x1710 [ 298.009445][ C0] ? __pfx_rcu_core+0x10/0x10 [ 298.014106][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 298.019708][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 298.025929][ C0] handle_softirqs+0x286/0x870 [ 298.030666][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 298.035403][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 298.040661][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 298.045837][ C0] __irq_exit_rcu+0xca/0x1f0 [ 298.050399][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 298.055571][ C0] irq_exit_rcu+0x9/0x30 [ 298.059784][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 298.065391][ C0] [ 298.068295][ C0] [ 298.071201][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.077149][ C0] RIP: 0010:check_preemption_disabled+0x17/0x120 [ 298.083445][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 ee cd 30 07 48 89 44 24 08 <65> 8b 05 f6 cd 30 07 65 8b 0d eb cd 30 07 f7 c1 ff ff ff 7f 74 23 [ 298.103019][ C0] RSP: 0018:ffffc90002e676a0 EFLAGS: 00000286 [ 298.109059][ C0] RAX: 5c4f8cda8d686000 RBX: ffffffff82012183 RCX: ffff88807d27bc00 [ 298.117002][ C0] RDX: 0000000000000000 RSI: ffffffff8be28c20 RDI: ffffffff8be28be0 [ 298.124946][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172aae5 [ 298.132887][ C0] R10: ffffc90002e67818 R11: ffffffff81ad0050 R12: 1ffff920005ccef9 [ 298.140832][ C0] R13: ffffc90002e67800 R14: ffffc90002e677c8 R15: ffffffff8172aae5 [ 298.148774][ C0] ? unwind_next_frame+0xa5/0x2390 [ 298.153857][ C0] ? shmem_symlink+0xa3/0x510 [ 298.158502][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.164627][ C0] ? unwind_next_frame+0xa5/0x2390 [ 298.169714][ C0] ? shmem_symlink+0xa3/0x510 [ 298.174360][ C0] ? unwind_next_frame+0xa5/0x2390 [ 298.179441][ C0] rcu_is_watching+0x15/0xb0 [ 298.184003][ C0] ? shmem_symlink+0xa3/0x510 [ 298.188649][ C0] ? unwind_next_frame+0xa5/0x2390 [ 298.193729][ C0] unwind_next_frame+0xd4/0x2390 [ 298.198639][ C0] ? unwind_next_frame+0xa5/0x2390 [ 298.203721][ C0] ? shmem_get_inode+0x346/0xe90 [ 298.208636][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.214763][ C0] arch_stack_walk+0x11c/0x150 [ 298.219507][ C0] ? shmem_symlink+0xa3/0x510 [ 298.224155][ C0] stack_trace_save+0x9c/0xe0 [ 298.228806][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 298.234157][ C0] ? xa_load+0x60/0x210 [ 298.238286][ C0] kasan_save_track+0x3e/0x80 [ 298.242936][ C0] ? kasan_save_track+0x3e/0x80 [ 298.247758][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 298.252752][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 298.258356][ C0] ? security_inode_alloc+0x39/0x330 [ 298.263613][ C0] ? inode_init_always_gfp+0x9ed/0xdc0 [ 298.269042][ C0] ? alloc_inode+0x82/0x1b0 [ 298.273516][ C0] ? new_inode+0x22/0x170 [ 298.277819][ C0] ? shmem_get_inode+0x346/0xe90 [ 298.282726][ C0] ? shmem_symlink+0xa3/0x510 [ 298.287396][ C0] __kasan_slab_alloc+0x6c/0x80 [ 298.292219][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 298.297654][ C0] ? security_inode_alloc+0x39/0x330 [ 298.302910][ C0] security_inode_alloc+0x39/0x330 [ 298.307993][ C0] inode_init_always_gfp+0x9ed/0xdc0 [ 298.313255][ C0] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 298.318687][ C0] alloc_inode+0x82/0x1b0 [ 298.322991][ C0] new_inode+0x22/0x170 [ 298.327124][ C0] shmem_get_inode+0x346/0xe90 [ 298.331864][ C0] shmem_symlink+0xa3/0x510 [ 298.336337][ C0] ? inode_permission+0x149/0x470 [ 298.341330][ C0] ? may_create+0x227/0x320 [ 298.345804][ C0] vfs_symlink+0x143/0x2f0 [ 298.350195][ C0] do_symlinkat+0x1b1/0x3f0 [ 298.354672][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 298.359673][ C0] ? getname_flags+0x1e5/0x540 [ 298.364408][ C0] __x64_sys_symlinkat+0x95/0xb0 [ 298.369319][ C0] do_syscall_64+0xfa/0x3b0 [ 298.373794][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.378964][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.384999][ C0] ? clear_bhb_loop+0x60/0xb0 [ 298.389651][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.395512][ C0] RIP: 0033:0x7f862af8df27 [ 298.399901][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.419477][ C0] RSP: 002b:00007ffdd6280938 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 298.427860][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f862af8df27 [ 298.435803][ C0] RDX: 00007f862b0125c9 RSI: 00000000ffffff9c RDI: 00007ffdd62809d0 [ 298.443746][ C0] RBP: 00007ffdd628097c R08: 0000000000000013 R09: 00007ffdd6280687 [ 298.451687][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000155 [ 298.459628][ C0] R13: 00000000000927c0 R14: 000000000004884f R15: 00007ffdd62809d0 [ 298.467580][ C0] [ 298.470682][ C0] Kernel Offset: disabled [ 298.474984][ C0] Rebooting in 86400 seconds..