last executing test programs: 5.759640213s ago: executing program 1 (id=2716): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x80000, 0x9, 0x300, 0x0, 0x55}, 0x9c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000), 0x4) 5.454558318s ago: executing program 1 (id=2718): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r3, r2, 0x23}, 0xc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0xfffffeab, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000000c0)="3061761fc98c4a261e7feb1d6c3bc8fd94445822a4bc864d0a9ddedac2689d9cacbf018fe7319bf69a617347ea5adc101ef975d12e6cfd5c0f507d875a1d67e61e0494a6655e1023208b4fedd434275ef051586f6f78bc48b248d463f15a5e18ecc4afa8c1f8e312821cb601fdcdc9652a20f2eecc4ac67f0af81001bc8298032cce738dba5a15be588412e1df8b3a984688f2f90c8f38d309903e84e407b2ce6801aecb16f651f954688e149b649a694ba42578a4a7e927ea38184634b0d651515f2cee5431d7bc6c5d4b248d689692c3ad394fec50d23277d7d5c522de60d31e1529d99546584d110d5d310db0b3c33ddd057842a1", 0xf6) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000a00)="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", 0x24a}], 0x1}}], 0x1, 0xc0) 5.167012623s ago: executing program 1 (id=2722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a310000224e0500010006000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 3.305967236s ago: executing program 1 (id=2740): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10320) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}}, 0x0, 0x0, 0x3, 0x0, "0c9e089c1b4a04000bde79f0613be7fa187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd30798c4fa3838bb399ad5bd2ff21907c7988d1300000000000000000000000400"}, 0xd8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa"], 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/102, 0x66}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000002740)=""/4083, 0xff3}], 0x3, 0x0, 0x19}, 0x8}], 0x3, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0xfffffffffffffeb7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.10676717s ago: executing program 1 (id=2742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0xb, 0x0, 0x1b}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000580), 0xfe07) select(0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x8000000000000001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "6550c01b21986c5a", "9af8773dad5de4d5dcbd2727fc5b8a076499f3ffffffffffffff00", "0810186b", "fbd1e2072ea0edb6"}, 0x38) shutdown(0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r3, 0x0, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0x138, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xd5, 0x6, "306895d7c563837b46779992b6e53a531d3d8448c1670fa7d636ea99738a57d3de47d463e9d0baf5b25f0c01c34d1cdfe6b22e6b4872b5bd43d8c91de69cb06471acf819c4d5aa887c9c14203564abb1dad4fea7560b781ef665a017ee167cd6191b99925bf4eb54d192b0fe7570d593f1ebe459477b18ad3475d9d065a6570ac4936509823ca6e89dbeb85b7a1a097b1ab2ee8377e95690aa2a9c6b89a6f32df3b3e1460a447602fc605b10ed88d09e32036b621c8b3bbd86aac469a71fecfd547afc1d9cf16d4aafcc154bb87056174f"}, @NFTA_TABLE_USERDATA={0x1d, 0x6, "3d5ffe2b8dae6ea6c708f41a023620cdb6cfa801ec9c58beb0"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x160}}, 0x3) 2.888855447s ago: executing program 2 (id=2745): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001d00)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003", @ANYRESOCT=r4, @ANYRES8=r0], 0x210) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r5, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/142], 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000500"}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) connect$tipc(r2, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a", 0xa2}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, {[@hopopts={0x2f}]}}}}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 2.888335763s ago: executing program 3 (id=2746): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r1, 0x0, 0x0, 0x20048880, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000003c0)={'veth0_to_batadv\x00', {0x2, 0x4e22, @empty}}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={0xffffffffffffffff, r3}, 0xc) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000200)) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x40000200) unshare(0x6a040000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000370410000000ffdbdf25fffd0000", @ANYRES32=0x0, @ANYBLOB="83450500012000004000128008000100736974003400028008000300ffffffff0600"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.744253638s ago: executing program 2 (id=2747): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000300)=""/149, 0x95}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001540)=""/56, 0x38}, 0x2}, {{&(0x7f0000001580)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001600)=""/48, 0x30}, {&(0x7f0000001640)=""/50, 0x32}, {&(0x7f0000001740)=""/139, 0x8b}], 0x3, &(0x7f0000001800)=""/87, 0x57}, 0x4}, {{&(0x7f0000001880)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001900)=[{&(0x7f00000016c0)=""/62, 0x3e}], 0x1, &(0x7f0000001940)=""/194, 0xc2}, 0x3}, {{&(0x7f0000001a40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001ac0)=""/44, 0x2c}, {&(0x7f0000001b00)=""/170, 0xaa}, {&(0x7f0000001bc0)=""/251, 0xfb}, {&(0x7f0000001cc0)=""/7, 0x7}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/224, 0xe0}, {&(0x7f0000001e00)=""/130, 0x82}, {&(0x7f0000001ec0)=""/8, 0x8}], 0x8, &(0x7f0000001f80)=""/177, 0xb1}, 0xd48}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000030c0)=""/153, 0x99}, {&(0x7f0000003180)=""/141, 0x8d}, {&(0x7f0000003240)=""/230, 0xe6}, {&(0x7f0000003340)=""/84, 0x54}, {&(0x7f00000033c0)=""/225, 0xe1}, {&(0x7f00000034c0)=""/77, 0x4d}], 0x6, &(0x7f0000002040)=""/6, 0x6}, 0x2}, {{&(0x7f00000035c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000004940)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/39, 0x27}, {&(0x7f0000004680)=""/147, 0x93}, {&(0x7f0000004740)=""/198, 0xc6}, {&(0x7f0000004840)=""/219, 0xdb}], 0x5, &(0x7f00000049c0)=""/5, 0x5}, 0x1}], 0x6, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, @default, @bpq0, 0x4, 'syz0\x00', @default, 0x1, 0x0, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x401) listen(r5, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.634778652s ago: executing program 1 (id=2748): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r4) shutdown(r2, 0x0) close(r1) 2.314903345s ago: executing program 2 (id=2750): socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000700000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.253212395s ago: executing program 4 (id=2751): unshare(0x2c020680) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r0, 0x1, 0x28, &(0x7f0000000780)=""/155, &(0x7f0000000840)=0x9b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x35) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000011001007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.053923101s ago: executing program 4 (id=2754): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006000806"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095", @ANYRES64, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x4a, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 1.95640926s ago: executing program 2 (id=2755): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0xfffffeab, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000a00)="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", 0x24a}], 0x1, 0x0, 0x0, 0x6d00}}], 0x1, 0xc0) 1.873928899s ago: executing program 3 (id=2757): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001d00)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003", @ANYRESOCT=r4, @ANYRES8=r0], 0x210) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r5, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/142], 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000500"}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) connect$tipc(r2, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a", 0xa2}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x1, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, {[@hopopts={0x2f}]}}}}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 1.806587054s ago: executing program 4 (id=2758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0xb, 0x0, 0x1b}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000580), 0xfe07) select(0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x8000000000000001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "6550c01b21986c5a", "9af8773dad5de4d5dcbd2727fc5b8a076499f3ffffffffffffff00", "0810186b", "fbd1e2072ea0edb6"}, 0x38) shutdown(0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r3, 0x0, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0x138, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xd5, 0x6, "306895d7c563837b46779992b6e53a531d3d8448c1670fa7d636ea99738a57d3de47d463e9d0baf5b25f0c01c34d1cdfe6b22e6b4872b5bd43d8c91de69cb06471acf819c4d5aa887c9c14203564abb1dad4fea7560b781ef665a017ee167cd6191b99925bf4eb54d192b0fe7570d593f1ebe459477b18ad3475d9d065a6570ac4936509823ca6e89dbeb85b7a1a097b1ab2ee8377e95690aa2a9c6b89a6f32df3b3e1460a447602fc605b10ed88d09e32036b621c8b3bbd86aac469a71fecfd547afc1d9cf16d4aafcc154bb87056174f"}, @NFTA_TABLE_USERDATA={0x1d, 0x6, "3d5ffe2b8dae6ea6c708f41a023620cdb6cfa801ec9c58beb0"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x160}}, 0x3) 1.639117906s ago: executing program 3 (id=2760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) (async) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) 1.5847548s ago: executing program 2 (id=2761): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0802000000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r7, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000980)=ANY=[@ANYBLOB="500000000802190000010802110000000802110000000000000000000000000064000100010882848b960c121824969864df54da2ae83e1d13adec1743be95f905350d42d5f2c38d0f3e8a8c769c3c5231b8efbf46ad753bccebf32256db1181f1e80dabe17a52392c774040b1d4018cd53e57fe32ea87f8baca7b8d96b6f05a9d7811e3c5a6a67af4a5298935d6936587e18572"], 0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 1.466621081s ago: executing program 3 (id=2763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000008000000080000000800000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'batadv_slave_1\x00', {'vxcan1\x00'}, 0x3}) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.407081191s ago: executing program 0 (id=2764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r6}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func_proto, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x51]}}, 0x0, 0x4e}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r11}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$can_j1939(r10, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, r13, 0x3, {0x1, 0x0, 0x1}, 0x2}, 0x18, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x20040091) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x6c}}, 0x20000001) 862.254378ms ago: executing program 3 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x60000000) 764.440336ms ago: executing program 4 (id=2766): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r0, 0x5000) getpeername$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x18, 0x5, 0xe2, 0x10, 0x0, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000300)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"ecdb2508f8f6506bdb7afd300b4ee333", r3, r4, {0xff, 0xff}, {0x95, 0x8}, 0xbe8, [0x2, 0x0, 0x2, 0x1, 0xbc, 0x5, 0x6, 0x1, 0x7ff, 0x4, 0x9, 0x3480a191, 0x3, 0xffffffffffffffff, 0x0, 0x6]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x4, 0x2f, &(0x7f0000000440)="d61af3b572278eacbc0ab1a301b2f4eeca41e0ee8e6a960b25941351425d14ea175b9f0a20605ebac39ca07c3c4968", 0x0, 0x1}]}) r5 = accept4(r1, &(0x7f0000000540)=@can, &(0x7f00000005c0)=0x80, 0x80000) syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r5) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000600)={{r2, 0x40, 0x1370, 0xffffffffffffff01, 0xffffffff, 0xffffffffffffffff, 0x1, 0x600, 0x5, 0x8f, 0x5, 0x6, 0x7, 0x5, 0xc00000000}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = accept4(r6, &(0x7f0000001600)=@qipcrtr, &(0x7f0000001680)=0x80, 0x80000) r8 = socket(0xa, 0x8000d, 0x5) syz_emit_ethernet(0x1e, &(0x7f00000016c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @empty, @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "36215ddf3a1fa88d"}}}}, 0x0) unshare(0x22000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001740), r5) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r9, 0x20c, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001840)={0x5, 0x0, 0x8009, 0x3, 0x3, 0x9, 0x6, 0x6}, &(0x7f0000001880)=0x20) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r7) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000003bc0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003b80)={&(0x7f0000001940)={0x220c, r10, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NODE={0x2064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x40, 0x3, "f97b7fed2dde791116a9fce899b88a317441527be820311bc097afb13ae9402cf2224e5050f357dae9ac997d732ab28e73c627434b3af9927f4ab5e0"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10040}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "f8b4c7e66085317bde24631570faac7add0b0863835231f2cea849c36673f02282"}}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xca}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}]}, 0x220c}, 0x1, 0x0, 0x0, 0x20044}, 0x4) r11 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) accept4$llc(r11, &(0x7f0000003c00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000003c40)=0x10, 0x800) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) vmsplice(r11, &(0x7f0000004e40)=[{&(0x7f0000003c80)}, {&(0x7f0000003cc0)="81cd2b99768479a125cfbe263831a77da06793cc743ae6ca2d92c9ab38ddf78df5c3e6499d1edeed3a27fa4bd81be8ceb0fb8da7180fe8560605f0d5f1ac5a8090fdf1295b57301c3764551bd75ed512fe6a23fd511a19f4788a03d2c26838f8757ed1a2428c4b7e6f57379edd71685f795b5768fae5a64feb327802f4ab790ffb8ffd09cffdf402ce7d82823d8ab8c906f5e4bb787cc36d1a", 0x99}, {&(0x7f0000003d80)="990cc64c84a6f4832d246903b628baa957c228d41a10cff440b5e9704b7ba4b99d60bc592d07a40a1dae798d920d3d9d81cbb5793349bc06a7445b9aee1c2a1b41e625d288d1cfb93cc54e7bbd2875e5f3d64954add56fd00c4bd088d91cce1e633c2d5726bf7bd83572cfda913aacf7a81dd0882f049f4f27f5d21b890638ac5136c8dac0f6cc11fcd90736631597a3c91feba42e9506e8bc256bd86988bb8053", 0xa1}, {&(0x7f0000003e40)="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", 0x1000}], 0x4, 0xa) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000004ec0)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x0, 0xd8, 0xd8, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, &(0x7f0000004e80), {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x4, 0x1}, {0x3, 0x4}, 0x3ec9351c, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "8c45", 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x100}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xff000000], 'veth0_virt_wifi\x00', 'veth1_macvtap\x00', {0xff}, {}, 0x1d, 0x7, 0x5, 0x60}, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@srh={{0x30}, {0x5e, 0xc4, 0x8, 0x8, 0x2, 0x2000, 0x490}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xc, 'system_u:object_r:mount_tmp_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 598.55464ms ago: executing program 0 (id=2767): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc010000190001000000000000030000fc0200000000000000000000000000000000000000000000000000000000000000000003000200000200000089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000004401050000000000000000000000000000000000000000003200000000000000ac090000000000000000000000000000000000000000ff000000000000000000fdfffffffc02000000000000000000000000000000000000320000000000000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000000000000000000000000001000000003c"], 0x1fc}}, 0x0) 597.990547ms ago: executing program 3 (id=2768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x33, r0, 0x0) r3 = accept4(r1, 0x0, &(0x7f0000000380), 0x800) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r3, 0x80000000) sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26d}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed2", 0x6f}], 0x2}, 0x8000) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r1) socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000280)=0x1000003, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r4, 0x3) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000280)=0x3, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff, 0x2}, 0xe) writev(r5, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0x10000}, {{&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000100)=""/35, 0x23}], 0x3, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{&(0x7f00000009c0)=""/176, 0xb0}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/193, 0xc1}, {&(0x7f0000000e00)=""/142, 0xbf}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000680)=""/158, 0xfffffffffffffd81}, {&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f00000010c0)=""/223, 0xdf}, {&(0x7f0000000a80)=""/21, 0x15}], 0x9}, 0x100}], 0x3, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x40000083) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bf0600000082565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 523.554123ms ago: executing program 0 (id=2769): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x600}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 397.790382ms ago: executing program 0 (id=2770): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001d00)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003", @ANYRESOCT=r4, @ANYRES8=r0], 0x210) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r5, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/142], 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000500"}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) connect$tipc(r2, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0b", 0xa3}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, {[@hopopts={0x2f}]}}}}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 227.473929ms ago: executing program 4 (id=2771): syz_emit_ethernet(0x66, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x2}}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_emit_ethernet(0x80, &(0x7f00000000c0)={@link_local, @empty, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x46, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3]}}}}}}}, 0x0) 226.736482ms ago: executing program 0 (id=2772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) 86.47255ms ago: executing program 4 (id=2773): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}}], 0x2, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x20, 0x7800, 0xd1, 0x3, {{0x18, 0x4, 0x3, 0x3f, 0x60, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x1b, 0x64, [@dev={0xac, 0x14, 0x14, 0x17}, @loopback, @broadcast, @rand_addr=0x64010100, @multicast1, @empty]}, @lsrr={0x83, 0x7, 0xed, [@empty]}, @timestamp_addr={0x44, 0x1c, 0x97, 0x1, 0xa, [{@private=0xa010101, 0x1}, {@private=0xa010101}, {@private=0xa010101, 0x8000}]}, @timestamp={0x44, 0xc, 0x67, 0x0, 0xc, [0x7, 0x401]}]}}}}}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x8000, 0x93, &(0x7f0000000780)=""/147, 0x41100, 0x4, '\x00', r7, 0x25, r0, 0x8, &(0x7f0000000600)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x0, 0x4, 0x7}, {0x4, 0x5, 0xc, 0xc}, {0x1, 0x2, 0xc, 0x2}, {0x2, 0x2, 0xc, 0xa}, {0x5, 0x5, 0x0, 0x1}, {0x4, 0x1, 0xf, 0x5}, {0x3, 0x3, 0x3, 0x7}], 0x10, 0x5}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x1, 0x20000000, 0x13, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x7800, 0x7829, 0xfffffffd, 0x7fffffff}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffc01, '\x00', r9, 0xffffffffffffffff, 0x5}, 0x50) socket$inet6(0xa, 0x80002, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x82, &(0x7f0000000440), &(0x7f0000000480)=0x10) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000b00000008000400", @ANYRES32=r12, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r11], 0x38}}, 0x10) 86.221951ms ago: executing program 0 (id=2774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000007c0), 0x4) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) unshare(0x20000400) accept4$llc(r3, 0x0, &(0x7f0000000240), 0x1000) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 0s ago: executing program 2 (id=2775): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000f80)=0x10, 0x80000) getsockopt$sock_buf(r7, 0x1, 0x3b, &(0x7f0000000fc0)=""/208, &(0x7f00000010c0)=0xd0) r8 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0xeb, 0x8, 0x700000, 0x17, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @private1, 0x40, 0x7800, 0x5, 0x9}}) kernel console output (not intermixed with test programs): b5fa0 RCX: 00007f5c6138d5fc [ 254.873870][T11189] RDX: 000000000000000f RSI: 00007f5c621550a0 RDI: 0000000000000008 [ 254.873881][T11189] RBP: 00007f5c62155090 R08: 0000000000000000 R09: 0000000000000000 [ 254.873891][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.873901][T11189] R13: 00007f5c615b6038 R14: 00007f5c615b5fa0 R15: 00007ffc71e475b8 [ 254.873931][T11189] [ 255.194373][T11208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1625'. [ 255.207179][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1625'. [ 255.225303][T11208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1625'. [ 255.234998][T11208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1625'. [ 255.299610][T11213] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1628'. [ 255.402088][T11217] netlink: 'syz.3.1630': attribute type 13 has an invalid length. [ 255.410427][T11217] netlink: 'syz.3.1630': attribute type 17 has an invalid length. [ 255.436888][T11217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.485615][T11221] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1632'. [ 255.745328][T11228] syzkaller0: entered promiscuous mode [ 255.758434][T11228] syzkaller0: entered allmulticast mode [ 255.783552][T11230] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1636'. [ 255.849871][T11233] syzkaller0: entered promiscuous mode [ 255.871205][T11233] syzkaller0: entered allmulticast mode [ 256.498535][T11259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.599214][T11245] syzkaller0: entered promiscuous mode [ 257.606722][T11245] syzkaller0: entered allmulticast mode [ 257.740936][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1644'. [ 257.958213][T11273] netlink: 'syz.1.1646': attribute type 13 has an invalid length. [ 257.968365][T11273] netlink: 'syz.1.1646': attribute type 17 has an invalid length. [ 258.147111][T11276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.213253][T11276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.265642][T11263] veth5: entered promiscuous mode [ 259.282118][T11281] netlink: 'syz.3.1648': attribute type 13 has an invalid length. [ 259.304568][T11281] netlink: 'syz.3.1648': attribute type 17 has an invalid length. [ 259.348609][T11273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.358442][T11273] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.387127][T11273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.421670][T11281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.443635][T11283] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 259.498922][T11281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.270024][T11306] syzkaller0: entered promiscuous mode [ 260.275835][T11306] syzkaller0: entered allmulticast mode [ 260.748119][T11311] __nla_validate_parse: 1 callbacks suppressed [ 260.748141][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'. [ 263.100133][T11323] bridge0: port 1(dummy0) entered disabled state [ 263.291095][T11333] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 263.474138][T11338] netlink: 'syz.1.1664': attribute type 1 has an invalid length. [ 263.503425][T11344] netlink: 'syz.3.1662': attribute type 10 has an invalid length. [ 263.532763][T11344] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 263.554776][T11344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.584910][T11344] bond0: (slave wlan1): Opening slave failed [ 264.078625][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1669'. [ 264.081372][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 264.133614][T11296] Set syz1 is full, maxelem 65536 reached [ 264.229976][T11356] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 264.361233][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.375486][T11356] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 264.426883][T11356] tipc: Enabled bearer , priority 0 [ 264.575896][T11356] syzkaller0: entered promiscuous mode [ 264.596262][T11356] syzkaller0: entered allmulticast mode [ 264.620759][T11356] tipc: Resetting bearer [ 264.787968][T11363] syzkaller0: entered promiscuous mode [ 264.794553][T11363] syzkaller0: entered allmulticast mode [ 264.810473][T11355] tipc: Resetting bearer [ 264.819949][T11387] netlink: 'syz.4.1680': attribute type 4 has an invalid length. [ 264.833288][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1680'. [ 264.954955][T11389] netlink: 'syz.4.1682': attribute type 4 has an invalid length. [ 264.978725][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 265.064403][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 265.435817][ T5937] tipc: Node number set to 3812357669 [ 266.265266][ T5862] Bluetooth: hci0: command tx timeout [ 266.481794][T11355] tipc: Disabling bearer [ 266.494221][T11393] tipc: Enabling of bearer rejected, failed to enable media [ 268.013491][T11408] syzkaller0: entered promiscuous mode [ 268.031137][T11408] syzkaller0: entered allmulticast mode [ 268.209796][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 268.276649][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 268.526961][T11443] netlink: 'syz.3.1696': attribute type 13 has an invalid length. [ 268.535287][T11443] netlink: 'syz.3.1696': attribute type 17 has an invalid length. [ 268.553341][T11443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.648977][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 268.686827][T11442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.047213][T11450] Set syz0 is full, maxelem 0 reached [ 269.276400][T11463] syzkaller0: entered promiscuous mode [ 269.288694][T11463] syzkaller0: entered allmulticast mode [ 269.300801][T11456] FAULT_INJECTION: forcing a failure. [ 269.300801][T11456] name failslab, interval 1, probability 0, space 0, times 0 [ 269.347804][T11456] CPU: 1 UID: 0 PID: 11456 Comm: syz.2.1702 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 269.347830][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.347841][T11456] Call Trace: [ 269.347848][T11456] [ 269.347857][T11456] dump_stack_lvl+0x189/0x250 [ 269.347883][T11456] ? __pfx____ratelimit+0x10/0x10 [ 269.347906][T11456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.347927][T11456] ? __pfx__printk+0x10/0x10 [ 269.347957][T11456] ? __pfx___might_resched+0x10/0x10 [ 269.347981][T11456] should_fail_ex+0x414/0x560 [ 269.348014][T11456] should_failslab+0xa8/0x100 [ 269.348041][T11456] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 269.348067][T11456] ? __alloc_skb+0x112/0x2d0 [ 269.348094][T11456] __alloc_skb+0x112/0x2d0 [ 269.348121][T11456] netlink_sendmsg+0x5c6/0xb30 [ 269.348155][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.348180][T11456] ? __lock_acquire+0xab9/0xd20 [ 269.348204][T11456] ? aa_sock_msg_perm+0xf1/0x1d0 [ 269.348230][T11456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.348250][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.348274][T11456] __sock_sendmsg+0x21c/0x270 [ 269.348298][T11456] sock_write_iter+0x258/0x330 [ 269.348320][T11456] ? __pfx_sock_write_iter+0x10/0x10 [ 269.348352][T11456] ? bpf_lsm_file_permission+0x9/0x20 [ 269.348373][T11456] ? security_file_permission+0x75/0x290 [ 269.348403][T11456] vfs_write+0x548/0xa90 [ 269.348431][T11456] ? __pfx_sock_write_iter+0x10/0x10 [ 269.348451][T11456] ? __pfx_vfs_write+0x10/0x10 [ 269.348485][T11456] ? __fget_files+0x2a/0x420 [ 269.348520][T11456] ksys_write+0x145/0x250 [ 269.348546][T11456] ? __pfx_ksys_write+0x10/0x10 [ 269.348566][T11456] ? rcu_is_watching+0x15/0xb0 [ 269.348590][T11456] ? do_syscall_64+0xbe/0x3b0 [ 269.348618][T11456] do_syscall_64+0xfa/0x3b0 [ 269.348638][T11456] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.348659][T11456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.348678][T11456] ? clear_bhb_loop+0x60/0xb0 [ 269.348700][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.348719][T11456] RIP: 0033:0x7f984cf8ebe9 [ 269.348736][T11456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.348751][T11456] RSP: 002b:00007f984ddfd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.348771][T11456] RAX: ffffffffffffffda RBX: 00007f984d1b5fa0 RCX: 00007f984cf8ebe9 [ 269.348783][T11456] RDX: 0000000000000029 RSI: 0000200000000100 RDI: 0000000000000005 [ 269.348795][T11456] RBP: 00007f984ddfd090 R08: 0000000000000000 R09: 0000000000000000 [ 269.348806][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.348817][T11456] R13: 00007f984d1b6038 R14: 00007f984d1b5fa0 R15: 00007ffdc8270978 [ 269.348848][T11456] [ 269.678679][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'. [ 269.738882][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 269.790989][T11474] netlink: 'syz.3.1707': attribute type 10 has an invalid length. [ 269.821838][T11474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1707'. [ 269.844772][T11457] syzkaller0: entered promiscuous mode [ 269.850289][T11457] syzkaller0: entered allmulticast mode [ 269.859277][T11474] geneve0: left allmulticast mode [ 269.869926][T11474] team0: Port device geneve0 added [ 271.320846][ T6679] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.329487][ T6679] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.342901][ T6679] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.373542][ T6679] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.646487][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 271.678704][T11496] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1714'. [ 271.714030][T11508] syzkaller0: entered promiscuous mode [ 271.719561][T11508] syzkaller0: entered allmulticast mode [ 271.729977][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1719'. [ 271.778806][T11496] geneve0: entered allmulticast mode [ 271.883849][T11516] netlink: 'syz.1.1723': attribute type 13 has an invalid length. [ 271.946011][T11516] netlink: 'syz.1.1723': attribute type 17 has an invalid length. [ 272.064256][T11516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.111242][T11526] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1726'. [ 272.121547][T11526] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 272.354472][T11538] syzkaller0: entered promiscuous mode [ 272.359990][T11538] syzkaller0: entered allmulticast mode [ 273.967137][T11554] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 273.975188][T11556] netlink: 'syz.2.1733': attribute type 1 has an invalid length. [ 274.180409][T11569] syzkaller0: entered promiscuous mode [ 274.192394][T11569] syzkaller0: entered allmulticast mode [ 274.285694][T11574] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 274.294177][T11574] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1735'. [ 274.451327][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'. [ 274.612506][T11587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.737948][T11597] netlink: 'syz.1.1744': attribute type 1 has an invalid length. [ 274.918881][T11602] netlink: 'syz.4.1748': attribute type 4 has an invalid length. [ 274.987798][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'. [ 275.086287][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 275.185843][T11611] netlink: 'syz.4.1750': attribute type 3 has an invalid length. [ 275.209080][T11612] syz_tun: entered allmulticast mode [ 275.294599][T11612] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.313971][T11612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.360515][T11618] netlink: 'syz.2.1752': attribute type 5 has an invalid length. [ 275.367155][T11611] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 275.391387][T11611] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 275.549114][T11623] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1751'. [ 275.559932][T11611] syz_tun: left allmulticast mode [ 275.713393][T11625] bridge3: entered promiscuous mode [ 275.720814][T11625] bridge3: entered allmulticast mode [ 275.735545][T11634] netlink: 'syz.4.1757': attribute type 29 has an invalid length. [ 275.749626][T11634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1757'. [ 275.837280][T11634] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 276.077119][T11652] netlink: 'syz.1.1762': attribute type 13 has an invalid length. [ 276.101293][T11652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.369894][T11661] team0: Port device geneve0 removed [ 276.381981][ T6670] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.404468][ T6670] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.413785][ T6670] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.426910][ T6670] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.446952][T11666] FAULT_INJECTION: forcing a failure. [ 276.446952][T11666] name failslab, interval 1, probability 0, space 0, times 0 [ 276.472581][T11666] CPU: 0 UID: 0 PID: 11666 Comm: syz.1.1767 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 276.472606][T11666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.472617][T11666] Call Trace: [ 276.472624][T11666] [ 276.472632][T11666] dump_stack_lvl+0x189/0x250 [ 276.472659][T11666] ? __pfx____ratelimit+0x10/0x10 [ 276.472680][T11666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.472701][T11666] ? __pfx__printk+0x10/0x10 [ 276.472730][T11666] ? __pfx___might_resched+0x10/0x10 [ 276.472747][T11666] ? fs_reclaim_acquire+0x7d/0x100 [ 276.472776][T11666] should_fail_ex+0x414/0x560 [ 276.472802][T11666] should_failslab+0xa8/0x100 [ 276.472829][T11666] kmem_cache_alloc_noprof+0x73/0x3c0 [ 276.472851][T11666] ? skb_clone+0x212/0x3a0 [ 276.472873][T11666] skb_clone+0x212/0x3a0 [ 276.472888][T11666] ? nfnetlink_rcv+0x486/0x2520 [ 276.472910][T11666] nfnetlink_rcv+0x4b4/0x2520 [ 276.472933][T11666] ? __dev_queue_xmit+0x1d79/0x3b50 [ 276.472961][T11666] ? __dev_queue_xmit+0x27b/0x3b50 [ 276.472992][T11666] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 276.473027][T11666] ? ref_tracker_free+0x63a/0x7d0 [ 276.473049][T11666] ? __asan_memcpy+0x40/0x70 [ 276.473078][T11666] ? __pfx_ref_tracker_free+0x10/0x10 [ 276.473115][T11666] ? skb_clone+0x246/0x3a0 [ 276.473135][T11666] ? __netlink_deliver_tap+0x807/0x850 [ 276.473161][T11666] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.473200][T11666] netlink_unicast+0x82c/0x9e0 [ 276.473230][T11666] ? __pfx_netlink_unicast+0x10/0x10 [ 276.473252][T11666] ? netlink_sendmsg+0x642/0xb30 [ 276.473272][T11666] ? skb_put+0x11b/0x210 [ 276.473298][T11666] netlink_sendmsg+0x805/0xb30 [ 276.473330][T11666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.473355][T11666] ? aa_sock_msg_perm+0xf1/0x1d0 [ 276.473381][T11666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.473400][T11666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.473424][T11666] __sock_sendmsg+0x21c/0x270 [ 276.473448][T11666] ____sys_sendmsg+0x505/0x830 [ 276.473479][T11666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.473513][T11666] ? import_iovec+0x74/0xa0 [ 276.473534][T11666] ___sys_sendmsg+0x21f/0x2a0 [ 276.473561][T11666] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.473618][T11666] ? __fget_files+0x2a/0x420 [ 276.473642][T11666] ? __fget_files+0x3a0/0x420 [ 276.473677][T11666] __x64_sys_sendmsg+0x19b/0x260 [ 276.473704][T11666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.473740][T11666] ? rcu_is_watching+0x15/0xb0 [ 276.473764][T11666] ? do_syscall_64+0xbe/0x3b0 [ 276.473790][T11666] do_syscall_64+0xfa/0x3b0 [ 276.473811][T11666] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.473830][T11666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.473848][T11666] ? clear_bhb_loop+0x60/0xb0 [ 276.473869][T11666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.473886][T11666] RIP: 0033:0x7f214318ebe9 [ 276.473903][T11666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.473918][T11666] RSP: 002b:00007f2143f5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.473938][T11666] RAX: ffffffffffffffda RBX: 00007f21433b5fa0 RCX: 00007f214318ebe9 [ 276.473951][T11666] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 276.473962][T11666] RBP: 00007f2143f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 276.473973][T11666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.473984][T11666] R13: 00007f21433b6038 R14: 00007f21433b5fa0 R15: 00007ffd93f1d288 [ 276.474013][T11666] [ 277.720909][T11688] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1774'. [ 277.835080][T11693] netlink: 'syz.1.1776': attribute type 13 has an invalid length. [ 277.892372][T11693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.167367][T11715] ip6tnl0: left promiscuous mode [ 278.173166][T11715] ip6tnl0: left allmulticast mode [ 278.186355][T11715] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.194259][T11715] dummy0: left promiscuous mode [ 278.199677][T11715] dummy0: left allmulticast mode [ 278.211852][T11715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.241990][T11716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.327990][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 278.411792][T11715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.573967][T11712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.827561][T11729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1787'. [ 279.001777][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 279.551607][T11766] __nla_validate_parse: 2 callbacks suppressed [ 279.551629][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 279.625733][T11771] validate_nla: 11 callbacks suppressed [ 279.625753][T11771] netlink: 'syz.3.1802': attribute type 74 has an invalid length. [ 280.225963][T11801] netlink: 'syz.1.1812': attribute type 4 has an invalid length. [ 280.420555][T11810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1816'. [ 280.429840][T11810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1816'. [ 280.439017][T11810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1816'. [ 280.448330][T11810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1816'. [ 280.544706][T11814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1815'. [ 280.582484][T11814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1815'. [ 280.628772][T11814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1815'. [ 280.648123][T11814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1815'. [ 280.861064][T11824] netlink: 'syz.0.1821': attribute type 2 has an invalid length. [ 281.024404][T11837] FAULT_INJECTION: forcing a failure. [ 281.024404][T11837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.063074][T11837] CPU: 0 UID: 0 PID: 11837 Comm: syz.2.1824 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 281.063102][T11837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.063112][T11837] Call Trace: [ 281.063120][T11837] [ 281.063128][T11837] dump_stack_lvl+0x189/0x250 [ 281.063156][T11837] ? __pfx____ratelimit+0x10/0x10 [ 281.063178][T11837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.063199][T11837] ? __pfx__printk+0x10/0x10 [ 281.063223][T11837] ? __might_fault+0xb0/0x130 [ 281.063258][T11837] should_fail_ex+0x414/0x560 [ 281.063284][T11837] _copy_from_user+0x2d/0xb0 [ 281.063303][T11837] ___sys_sendmsg+0x158/0x2a0 [ 281.063332][T11837] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.063396][T11837] ? __fget_files+0x2a/0x420 [ 281.063420][T11837] ? __fget_files+0x3a0/0x420 [ 281.063456][T11837] __x64_sys_sendmsg+0x19b/0x260 [ 281.063484][T11837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.063519][T11837] ? __pfx_ksys_write+0x10/0x10 [ 281.063540][T11837] ? rcu_is_watching+0x15/0xb0 [ 281.063564][T11837] ? do_syscall_64+0xbe/0x3b0 [ 281.063590][T11837] do_syscall_64+0xfa/0x3b0 [ 281.063610][T11837] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.063631][T11837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.063650][T11837] ? clear_bhb_loop+0x60/0xb0 [ 281.063673][T11837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.063691][T11837] RIP: 0033:0x7f984cf8ebe9 [ 281.063708][T11837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.063723][T11837] RSP: 002b:00007f984dddc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.063743][T11837] RAX: ffffffffffffffda RBX: 00007f984d1b6090 RCX: 00007f984cf8ebe9 [ 281.063757][T11837] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 281.063768][T11837] RBP: 00007f984dddc090 R08: 0000000000000000 R09: 0000000000000000 [ 281.063779][T11837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.063790][T11837] R13: 00007f984d1b6128 R14: 00007f984d1b6090 R15: 00007ffdc8270978 [ 281.063827][T11837] [ 281.065163][T11829] syzkaller0: entered promiscuous mode [ 281.283875][T11829] syzkaller0: entered allmulticast mode [ 281.425505][T11849] netlink: 'syz.2.1829': attribute type 1 has an invalid length. [ 281.433680][T11849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1829'. [ 281.627207][T11847] syzkaller0: entered promiscuous mode [ 281.652454][T11847] syzkaller0: entered allmulticast mode [ 281.944069][T11863] wg1: left promiscuous mode [ 281.957194][T11863] wg1: left allmulticast mode [ 281.978086][T11863] 0·: left allmulticast mode [ 281.989108][T11863] hsr_slave_0: left allmulticast mode [ 281.999458][T11863] hsr_slave_1: left allmulticast mode [ 282.017412][T11863] vlan2: left allmulticast mode [ 282.024145][T11863] macvtap0: left allmulticast mode [ 282.029801][T11863] geneve2: left promiscuous mode [ 282.038303][T11863] bridge1: left allmulticast mode [ 282.049185][T11863] gtp0: left promiscuous mode [ 282.057508][T11863] gtp0: left allmulticast mode [ 282.071509][T11863] bridge3: left promiscuous mode [ 282.079757][T11863] bridge3: left allmulticast mode [ 282.393100][T11887] bridge4: entered promiscuous mode [ 282.398599][T11887] bridge4: entered allmulticast mode [ 282.791685][T11900] syzkaller0: entered promiscuous mode [ 282.812528][T11900] syzkaller0: entered allmulticast mode [ 283.057948][T11925] netlink: 'syz.1.1852': attribute type 10 has an invalid length. [ 283.059875][T11926] netlink: 'syz.2.1853': attribute type 10 has an invalid length. [ 283.078622][T11926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.090784][T11926] batadv0: entered promiscuous mode [ 283.097792][T11926] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 283.176513][T11926] syz.2.1853 (11926) used greatest stack depth: 17000 bytes left [ 283.517595][T11949] netlink: 'syz.1.1863': attribute type 13 has an invalid length. [ 283.548541][T11949] netlink: 'syz.1.1863': attribute type 17 has an invalid length. [ 283.572132][T11949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.592115][T11951] syzkaller0: entered promiscuous mode [ 283.599259][T11951] syzkaller0: entered allmulticast mode [ 283.646196][T11956] bridge0: entered promiscuous mode [ 283.662611][T11956] vlan0: entered promiscuous mode [ 283.778868][T11961] Set syz0 is full, maxelem 0 reached [ 283.823685][T11963] netlink: 'syz.2.1869': attribute type 4 has an invalid length. [ 283.927929][T11965] block nbd0: server does not support multiple connections per device. [ 283.938631][T11965] block nbd0: shutting down sockets [ 284.127103][T11979] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.462461][T11996] FAULT_INJECTION: forcing a failure. [ 284.462461][T11996] name failslab, interval 1, probability 0, space 0, times 0 [ 284.469126][T11998] netlink: 'syz.0.1879': attribute type 13 has an invalid length. [ 284.480007][T11996] CPU: 1 UID: 0 PID: 11996 Comm: syz.3.1880 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 284.480034][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.480045][T11996] Call Trace: [ 284.480052][T11996] [ 284.480060][T11996] dump_stack_lvl+0x189/0x250 [ 284.480086][T11996] ? __pfx____ratelimit+0x10/0x10 [ 284.480108][T11996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.480129][T11996] ? __pfx__printk+0x10/0x10 [ 284.480158][T11996] ? __pfx___might_resched+0x10/0x10 [ 284.480174][T11996] ? fs_reclaim_acquire+0x7d/0x100 [ 284.480215][T11996] should_fail_ex+0x414/0x560 [ 284.480249][T11996] should_failslab+0xa8/0x100 [ 284.480275][T11996] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 284.480298][T11996] ? __pfx_nf_tables_abort+0x10/0x10 [ 284.480321][T11996] ? __alloc_skb+0x112/0x2d0 [ 284.480348][T11996] __alloc_skb+0x112/0x2d0 [ 284.480374][T11996] netlink_ack+0x146/0xa50 [ 284.480401][T11996] ? __kasan_kmalloc+0x93/0xb0 [ 284.480433][T11996] nfnetlink_rcv+0x2290/0x2520 [ 284.480483][T11996] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 284.480519][T11996] ? ref_tracker_free+0x63a/0x7d0 [ 284.480567][T11996] ? __netlink_deliver_tap+0x807/0x850 [ 284.480589][T11996] ? netlink_deliver_tap+0x2e/0x1b0 [ 284.480628][T11996] netlink_unicast+0x82c/0x9e0 [ 284.480657][T11996] ? __pfx_netlink_unicast+0x10/0x10 [ 284.480679][T11996] ? netlink_sendmsg+0x642/0xb30 [ 284.480698][T11996] ? skb_put+0x11b/0x210 [ 284.480724][T11996] netlink_sendmsg+0x805/0xb30 [ 284.480754][T11996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.480780][T11996] ? aa_sock_msg_perm+0xf1/0x1d0 [ 284.480805][T11996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.480824][T11996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.480847][T11996] __sock_sendmsg+0x21c/0x270 [ 284.480870][T11996] ____sys_sendmsg+0x505/0x830 [ 284.480900][T11996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.480934][T11996] ? import_iovec+0x74/0xa0 [ 284.480955][T11996] ___sys_sendmsg+0x21f/0x2a0 [ 284.480981][T11996] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.481042][T11996] ? __fget_files+0x2a/0x420 [ 284.481074][T11996] ? __fget_files+0x3a0/0x420 [ 284.481109][T11996] __x64_sys_sendmsg+0x19b/0x260 [ 284.481136][T11996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.481170][T11996] ? __pfx_ksys_write+0x10/0x10 [ 284.481190][T11996] ? rcu_is_watching+0x15/0xb0 [ 284.481214][T11996] ? do_syscall_64+0xbe/0x3b0 [ 284.481245][T11996] do_syscall_64+0xfa/0x3b0 [ 284.481265][T11996] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.481286][T11996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.481304][T11996] ? clear_bhb_loop+0x60/0xb0 [ 284.481326][T11996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.481343][T11996] RIP: 0033:0x7fbbea58ebe9 [ 284.481361][T11996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.481377][T11996] RSP: 002b:00007fbbeb3c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.481396][T11996] RAX: ffffffffffffffda RBX: 00007fbbea7b5fa0 RCX: 00007fbbea58ebe9 [ 284.481409][T11996] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 284.481420][T11996] RBP: 00007fbbeb3c9090 R08: 0000000000000000 R09: 0000000000000000 [ 284.481430][T11996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.481441][T11996] R13: 00007fbbea7b6038 R14: 00007fbbea7b5fa0 R15: 00007ffe528c88c8 [ 284.481477][T11996] [ 284.602607][T12000] syzkaller0: entered promiscuous mode [ 284.726762][T12004] __nla_validate_parse: 7 callbacks suppressed [ 284.726780][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 284.850917][T12000] syzkaller0: entered allmulticast mode [ 284.875645][T12009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.905571][T11998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.056562][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1885'. [ 285.067596][T12020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1885'. [ 285.128151][T12021] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1885'. [ 285.421135][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1890'. [ 285.458726][T12043] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1893'. [ 285.779874][T12052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1895'. [ 285.958290][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 286.094493][T12059] syzkaller0: entered promiscuous mode [ 286.108025][T12059] syzkaller0: entered allmulticast mode [ 286.125668][T12068] vlan3: entered promiscuous mode [ 286.473208][T12090] validate_nla: 1 callbacks suppressed [ 286.473225][T12090] netlink: 'syz.1.1909': attribute type 13 has an invalid length. [ 286.508258][T12090] netlink: 'syz.1.1909': attribute type 17 has an invalid length. [ 286.537961][T12090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.618076][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1909'. [ 286.676639][T12090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.346260][T12110] syzkaller0: entered promiscuous mode [ 287.351965][T12110] syzkaller0: entered allmulticast mode [ 287.761305][T12125] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1921'. [ 288.200425][T12150] syzkaller0: entered promiscuous mode [ 288.211551][T12153] netlink: 'syz.0.1931': attribute type 4 has an invalid length. [ 288.214394][T12150] syzkaller0: entered allmulticast mode [ 288.572860][T12164] netlink: 'syz.4.1934': attribute type 4 has an invalid length. [ 288.794687][T12173] netlink: 'syz.2.1937': attribute type 13 has an invalid length. [ 288.816269][T12173] netlink: 'syz.2.1937': attribute type 17 has an invalid length. [ 288.881637][T12179] netlink: 'syz.3.1940': attribute type 4 has an invalid length. [ 288.901905][T12173] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.911721][T12173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.968775][T12173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.047428][T12180] netlink: 'syz.4.1939': attribute type 1 has an invalid length. [ 289.741357][T12201] syzkaller0: entered promiscuous mode [ 289.753172][T12201] syzkaller0: entered allmulticast mode [ 290.358996][T12221] netlink: 'syz.1.1953': attribute type 1 has an invalid length. [ 290.383211][T12221] __nla_validate_parse: 4 callbacks suppressed [ 290.383228][T12221] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1953'. [ 290.527021][T12225] netlink: 'syz.1.1954': attribute type 4 has an invalid length. [ 290.615651][ T30] audit: type=1800 audit(1755044967.555:2): pid=12214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1951" name="cgroup.controllers" dev="tmpfs" ino=1966 res=0 errno=0 [ 290.679982][T12229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1955'. [ 291.044411][T12243] IPVS: set_ctl: invalid protocol: 12 172.30.1.1:20004 [ 292.112952][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1968'. [ 292.326554][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1972'. [ 292.683061][T12297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1976'. [ 292.718818][T12290] syzkaller0: entered promiscuous mode [ 292.725039][T12290] syzkaller0: entered allmulticast mode [ 292.731810][T12287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1974'. [ 292.964175][T12309] FAULT_INJECTION: forcing a failure. [ 292.964175][T12309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.969396][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 292.982224][T12309] CPU: 1 UID: 0 PID: 12309 Comm: syz.2.1981 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 292.982255][T12309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.982266][T12309] Call Trace: [ 292.982276][T12309] [ 292.982284][T12309] dump_stack_lvl+0x189/0x250 [ 292.982313][T12309] ? __pfx____ratelimit+0x10/0x10 [ 292.982336][T12309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.982358][T12309] ? __pfx__printk+0x10/0x10 [ 292.982383][T12309] ? __might_fault+0xb0/0x130 [ 292.982417][T12309] should_fail_ex+0x414/0x560 [ 292.982444][T12309] _copy_from_user+0x2d/0xb0 [ 292.982464][T12309] __sys_bpf+0x1ed/0x870 [ 292.982490][T12309] ? __pfx___sys_bpf+0x10/0x10 [ 292.982526][T12309] ? ksys_write+0x22a/0x250 [ 292.982553][T12309] ? __pfx_ksys_write+0x10/0x10 [ 292.982573][T12309] ? rcu_is_watching+0x15/0xb0 [ 292.982600][T12309] __x64_sys_bpf+0x7c/0x90 [ 292.982622][T12309] do_syscall_64+0xfa/0x3b0 [ 292.982645][T12309] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.982673][T12309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.982692][T12309] ? clear_bhb_loop+0x60/0xb0 [ 292.982714][T12309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.982733][T12309] RIP: 0033:0x7f984cf8ebe9 [ 292.982750][T12309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.982766][T12309] RSP: 002b:00007f984ddfd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.982786][T12309] RAX: ffffffffffffffda RBX: 00007f984d1b5fa0 RCX: 00007f984cf8ebe9 [ 292.982800][T12309] RDX: 0000000000000048 RSI: 00002000000004c0 RDI: 0000000000000000 [ 292.982812][T12309] RBP: 00007f984ddfd090 R08: 0000000000000000 R09: 0000000000000000 [ 292.982831][T12309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.982843][T12309] R13: 00007f984d1b6038 R14: 00007f984d1b5fa0 R15: 00007ffdc8270978 [ 292.982873][T12309] [ 293.297863][T12313] netlink: 'syz.2.1982': attribute type 5 has an invalid length. [ 293.391861][T12316] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1984'. [ 293.607007][T12331] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 293.654933][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 293.664210][T12333] netlink: 'syz.4.1987': attribute type 5 has an invalid length. [ 295.111381][T12341] FAULT_INJECTION: forcing a failure. [ 295.111381][T12341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.147906][T12341] CPU: 0 UID: 0 PID: 12341 Comm: syz.0.1991 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 295.147933][T12341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.147944][T12341] Call Trace: [ 295.147950][T12341] [ 295.147957][T12341] dump_stack_lvl+0x189/0x250 [ 295.147982][T12341] ? __pfx____ratelimit+0x10/0x10 [ 295.148004][T12341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.148024][T12341] ? __pfx__printk+0x10/0x10 [ 295.148048][T12341] ? __might_fault+0xb0/0x130 [ 295.148082][T12341] should_fail_ex+0x414/0x560 [ 295.148108][T12341] _copy_from_user+0x2d/0xb0 [ 295.148126][T12341] ___sys_recvmsg+0x12e/0x510 [ 295.148159][T12341] ? __pfx____sys_recvmsg+0x10/0x10 [ 295.148216][T12341] ? __might_fault+0xb0/0x130 [ 295.148252][T12341] do_recvmmsg+0x307/0x770 [ 295.148285][T12341] ? __pfx_do_recvmmsg+0x10/0x10 [ 295.148321][T12341] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 295.148364][T12341] __x64_sys_recvmmsg+0x190/0x240 [ 295.148394][T12341] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 295.148417][T12341] ? rcu_is_watching+0x15/0xb0 [ 295.148442][T12341] ? do_syscall_64+0xbe/0x3b0 [ 295.148468][T12341] do_syscall_64+0xfa/0x3b0 [ 295.148487][T12341] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.148509][T12341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.148528][T12341] ? clear_bhb_loop+0x60/0xb0 [ 295.148550][T12341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.148568][T12341] RIP: 0033:0x7f5c6138ebe9 [ 295.148586][T12341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.148601][T12341] RSP: 002b:00007f5c62155038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 295.148621][T12341] RAX: ffffffffffffffda RBX: 00007f5c615b5fa0 RCX: 00007f5c6138ebe9 [ 295.148634][T12341] RDX: 0000000000000045 RSI: 0000200000004b40 RDI: 0000000000000003 [ 295.148646][T12341] RBP: 00007f5c62155090 R08: 0000000000000000 R09: 0000000000000000 [ 295.148657][T12341] R10: 0000000000012000 R11: 0000000000000246 R12: 0000000000000002 [ 295.148668][T12341] R13: 00007f5c615b6038 R14: 00007f5c615b5fa0 R15: 00007ffc71e475b8 [ 295.148700][T12341] [ 295.156251][T12346] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1993'. [ 295.447058][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 295.830790][T12368] syzkaller0: entered promiscuous mode [ 295.837253][T12368] syzkaller0: entered allmulticast mode [ 296.055015][T12382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2006'. [ 296.171368][T12387] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 296.201560][T12387] netlink: 'syz.0.2008': attribute type 13 has an invalid length. [ 296.218615][T12387] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2008'. [ 297.560215][T12391] tipc: Enabling of bearer rejected, failed to enable media [ 297.864148][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 298.033131][T12414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.139138][T12417] FAULT_INJECTION: forcing a failure. [ 298.139138][T12417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.154855][T12417] CPU: 1 UID: 0 PID: 12417 Comm: syz.1.2017 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 298.154889][T12417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.154900][T12417] Call Trace: [ 298.154907][T12417] [ 298.154913][T12417] dump_stack_lvl+0x189/0x250 [ 298.154938][T12417] ? __pfx____ratelimit+0x10/0x10 [ 298.154961][T12417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.154982][T12417] ? __pfx__printk+0x10/0x10 [ 298.155006][T12417] ? __might_fault+0xb0/0x130 [ 298.155040][T12417] should_fail_ex+0x414/0x560 [ 298.155067][T12417] _copy_from_user+0x2d/0xb0 [ 298.155086][T12417] ___sys_sendmsg+0x158/0x2a0 [ 298.155120][T12417] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.155183][T12417] ? __fget_files+0x2a/0x420 [ 298.155207][T12417] ? __fget_files+0x3a0/0x420 [ 298.155243][T12417] __x64_sys_sendmsg+0x19b/0x260 [ 298.155269][T12417] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.155304][T12417] ? __pfx_ksys_write+0x10/0x10 [ 298.155324][T12417] ? rcu_is_watching+0x15/0xb0 [ 298.155348][T12417] ? do_syscall_64+0xbe/0x3b0 [ 298.155375][T12417] do_syscall_64+0xfa/0x3b0 [ 298.155395][T12417] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.155416][T12417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.155436][T12417] ? clear_bhb_loop+0x60/0xb0 [ 298.155458][T12417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.155477][T12417] RIP: 0033:0x7f214318ebe9 [ 298.155494][T12417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.155510][T12417] RSP: 002b:00007f2143f5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.155530][T12417] RAX: ffffffffffffffda RBX: 00007f21433b5fa0 RCX: 00007f214318ebe9 [ 298.155543][T12417] RDX: 0000000004000000 RSI: 0000200000001040 RDI: 0000000000000003 [ 298.155555][T12417] RBP: 00007f2143f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 298.155566][T12417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.155577][T12417] R13: 00007f21433b6038 R14: 00007f21433b5fa0 R15: 00007ffd93f1d288 [ 298.155606][T12417] [ 299.058005][T12440] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 299.296490][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2023'. [ 299.926043][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2031'. [ 301.795936][T12492] netlink: 'syz.4.2035': attribute type 4 has an invalid length. [ 301.818751][T12492] FAULT_INJECTION: forcing a failure. [ 301.818751][T12492] name failslab, interval 1, probability 0, space 0, times 0 [ 301.831915][T12491] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2034'. [ 301.832666][T12492] CPU: 0 UID: 0 PID: 12492 Comm: syz.4.2035 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 301.832690][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.832700][T12492] Call Trace: [ 301.832707][T12492] [ 301.832715][T12492] dump_stack_lvl+0x189/0x250 [ 301.832750][T12492] ? __pfx____ratelimit+0x10/0x10 [ 301.832773][T12492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.832795][T12492] ? __pfx__printk+0x10/0x10 [ 301.832823][T12492] ? __pfx___might_resched+0x10/0x10 [ 301.832839][T12492] ? fs_reclaim_acquire+0x7d/0x100 [ 301.832870][T12492] should_fail_ex+0x414/0x560 [ 301.832897][T12492] should_failslab+0xa8/0x100 [ 301.832923][T12492] __kmalloc_noprof+0xcb/0x4f0 [ 301.832944][T12492] ? fib_create_info+0x1728/0x3210 [ 301.832971][T12492] fib_create_info+0x1728/0x3210 [ 301.832996][T12492] ? rcu_is_watching+0x15/0xb0 [ 301.833019][T12492] ? __mutex_lock+0xd36/0x1360 [ 301.833053][T12492] fib_table_insert+0xc6/0x1b50 [ 301.833081][T12492] ? __pfx___mutex_lock+0x10/0x10 [ 301.833101][T12492] ? rtm_to_fib_config+0x107f/0x13c0 [ 301.833141][T12492] inet_rtm_newroute+0x12b/0x210 [ 301.833160][T12492] ? __lock_acquire+0xab9/0xd20 [ 301.833186][T12492] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 301.833228][T12492] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 301.833246][T12492] rtnetlink_rcv_msg+0x7cc/0xb70 [ 301.833269][T12492] ? __lock_acquire+0xab9/0xd20 [ 301.833295][T12492] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 301.833316][T12492] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.833355][T12492] netlink_rcv_skb+0x208/0x470 [ 301.833376][T12492] ? __lock_acquire+0xab9/0xd20 [ 301.833399][T12492] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.833423][T12492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.833457][T12492] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.833501][T12492] netlink_unicast+0x82c/0x9e0 [ 301.833530][T12492] ? __pfx_netlink_unicast+0x10/0x10 [ 301.833552][T12492] ? netlink_sendmsg+0x642/0xb30 [ 301.833572][T12492] ? skb_put+0x11b/0x210 [ 301.833599][T12492] netlink_sendmsg+0x805/0xb30 [ 301.833631][T12492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.833656][T12492] ? aa_sock_msg_perm+0xf1/0x1d0 [ 301.833682][T12492] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.833701][T12492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.833725][T12492] __sock_sendmsg+0x21c/0x270 [ 301.833754][T12492] ____sys_sendmsg+0x505/0x830 [ 301.833789][T12492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.833824][T12492] ? import_iovec+0x74/0xa0 [ 301.833845][T12492] ___sys_sendmsg+0x21f/0x2a0 [ 301.833873][T12492] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.833936][T12492] ? __fget_files+0x2a/0x420 [ 301.833960][T12492] ? __fget_files+0x3a0/0x420 [ 301.833996][T12492] __x64_sys_sendmsg+0x19b/0x260 [ 301.834023][T12492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.834058][T12492] ? __pfx_ksys_write+0x10/0x10 [ 301.834079][T12492] ? rcu_is_watching+0x15/0xb0 [ 301.834102][T12492] ? do_syscall_64+0xbe/0x3b0 [ 301.834128][T12492] do_syscall_64+0xfa/0x3b0 [ 301.834147][T12492] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.834167][T12492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.834185][T12492] ? clear_bhb_loop+0x60/0xb0 [ 301.834208][T12492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.834225][T12492] RIP: 0033:0x7fbb3e18ebe9 [ 301.834241][T12492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.834257][T12492] RSP: 002b:00007fbb3f04e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.834276][T12492] RAX: ffffffffffffffda RBX: 00007fbb3e3b5fa0 RCX: 00007fbb3e18ebe9 [ 301.834289][T12492] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 301.834300][T12492] RBP: 00007fbb3f04e090 R08: 0000000000000000 R09: 0000000000000000 [ 301.834310][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.834321][T12492] R13: 00007fbb3e3b6038 R14: 00007fbb3e3b5fa0 R15: 00007ffffc777d68 [ 301.834350][T12492] [ 301.971718][T12496] netlink: 212936 bytes leftover after parsing attributes in process `syz.2.2034'. [ 302.879362][T12518] FAULT_INJECTION: forcing a failure. [ 302.879362][T12518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.932466][T12518] CPU: 1 UID: 0 PID: 12518 Comm: syz.2.2041 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 302.932492][T12518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.932514][T12518] Call Trace: [ 302.932522][T12518] [ 302.932531][T12518] dump_stack_lvl+0x189/0x250 [ 302.932556][T12518] ? __pfx____ratelimit+0x10/0x10 [ 302.932594][T12518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.932614][T12518] ? __pfx__printk+0x10/0x10 [ 302.932644][T12518] ? __might_fault+0xb0/0x130 [ 302.932679][T12518] should_fail_ex+0x414/0x560 [ 302.932706][T12518] _copy_from_user+0x2d/0xb0 [ 302.932725][T12518] ___sys_recvmsg+0x12e/0x510 [ 302.932759][T12518] ? __pfx____sys_recvmsg+0x10/0x10 [ 302.932817][T12518] ? __might_fault+0xb0/0x130 [ 302.932844][T12518] do_recvmmsg+0x307/0x770 [ 302.932878][T12518] ? __pfx_do_recvmmsg+0x10/0x10 [ 302.932917][T12518] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.932960][T12518] __x64_sys_recvmmsg+0x190/0x240 [ 302.932989][T12518] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 302.933013][T12518] ? rcu_is_watching+0x15/0xb0 [ 302.933037][T12518] ? do_syscall_64+0xbe/0x3b0 [ 302.933064][T12518] do_syscall_64+0xfa/0x3b0 [ 302.933084][T12518] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.933104][T12518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.933123][T12518] ? clear_bhb_loop+0x60/0xb0 [ 302.933144][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.933163][T12518] RIP: 0033:0x7f984cf8ebe9 [ 302.933179][T12518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.933195][T12518] RSP: 002b:00007f984ddfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 302.933215][T12518] RAX: ffffffffffffffda RBX: 00007f984d1b5fa0 RCX: 00007f984cf8ebe9 [ 302.933228][T12518] RDX: 0000000000000045 RSI: 0000200000004b40 RDI: 0000000000000003 [ 302.933239][T12518] RBP: 00007f984ddfd090 R08: 0000000000000000 R09: 0000000000000000 [ 302.933250][T12518] R10: 0000000000012000 R11: 0000000000000246 R12: 0000000000000002 [ 302.933261][T12518] R13: 00007f984d1b6038 R14: 00007f984d1b5fa0 R15: 00007ffdc8270978 [ 302.933291][T12518] [ 303.421868][T12529] macsec1: entered promiscuous mode [ 303.435917][T12529] !: entered promiscuous mode [ 303.446266][T12529] macsec1: entered allmulticast mode [ 303.451619][T12529] !: entered allmulticast mode [ 303.510951][T12529] !: left allmulticast mode [ 303.542642][T12529] !: left promiscuous mode [ 303.791592][T12560] netlink: 'syz.1.2053': attribute type 13 has an invalid length. [ 303.814609][T12560] netlink: 'syz.1.2053': attribute type 17 has an invalid length. [ 303.883377][T12560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.953531][T12549] syzkaller0: entered promiscuous mode [ 303.959158][T12549] syzkaller0: entered allmulticast mode [ 303.967433][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'. [ 304.010971][T12568] Set syz0 is full, maxelem 0 reached [ 304.032563][T12560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.189596][T12578] netem: incorrect gi model size [ 304.219143][T12578] netem: change failed [ 304.424224][T12590] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2064'. [ 304.501670][T12596] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2066'. [ 304.651130][T12603] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2068'. [ 304.722170][T12607] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2070'. [ 304.821746][T12611] syzkaller0: entered promiscuous mode [ 304.831653][T12611] syzkaller0: entered allmulticast mode [ 304.943598][T12618] FAULT_INJECTION: forcing a failure. [ 304.943598][T12618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.957094][T12618] CPU: 1 UID: 0 PID: 12618 Comm: syz.4.2074 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 304.957118][T12618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.957129][T12618] Call Trace: [ 304.957137][T12618] [ 304.957145][T12618] dump_stack_lvl+0x189/0x250 [ 304.957172][T12618] ? __pfx____ratelimit+0x10/0x10 [ 304.957196][T12618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.957218][T12618] ? __pfx__printk+0x10/0x10 [ 304.957256][T12618] should_fail_ex+0x414/0x560 [ 304.957281][T12618] _copy_to_user+0x31/0xb0 [ 304.957302][T12618] simple_read_from_buffer+0xe1/0x170 [ 304.957332][T12618] proc_fail_nth_read+0x1b3/0x220 [ 304.957357][T12618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.957381][T12618] ? rw_verify_area+0x2a6/0x4d0 [ 304.957402][T12618] ? __lock_acquire+0xab9/0xd20 [ 304.957424][T12618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.957447][T12618] vfs_read+0x200/0x980 [ 304.957469][T12618] ? fdget_pos+0x247/0x320 [ 304.957490][T12618] ? __pfx___mutex_lock+0x10/0x10 [ 304.957514][T12618] ? __pfx_vfs_read+0x10/0x10 [ 304.957546][T12618] ? __fget_files+0x2a/0x420 [ 304.957576][T12618] ? __fget_files+0x3a0/0x420 [ 304.957599][T12618] ? __fget_files+0x2a/0x420 [ 304.957634][T12618] ksys_read+0x145/0x250 [ 304.957659][T12618] ? __pfx_ksys_read+0x10/0x10 [ 304.957679][T12618] ? rcu_is_watching+0x15/0xb0 [ 304.957704][T12618] ? do_syscall_64+0xbe/0x3b0 [ 304.957731][T12618] do_syscall_64+0xfa/0x3b0 [ 304.957751][T12618] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.957773][T12618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.957792][T12618] ? clear_bhb_loop+0x60/0xb0 [ 304.957814][T12618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.957833][T12618] RIP: 0033:0x7fbb3e18d5fc [ 304.957850][T12618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 304.957866][T12618] RSP: 002b:00007fbb3f04e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.957886][T12618] RAX: ffffffffffffffda RBX: 00007fbb3e3b5fa0 RCX: 00007fbb3e18d5fc [ 304.957899][T12618] RDX: 000000000000000f RSI: 00007fbb3f04e0a0 RDI: 0000000000000004 [ 304.957910][T12618] RBP: 00007fbb3f04e090 R08: 0000000000000000 R09: 0000000000000000 [ 304.957921][T12618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 304.957931][T12618] R13: 00007fbb3e3b6038 R14: 00007fbb3e3b5fa0 R15: 00007ffffc777d68 [ 304.957967][T12618] [ 305.878452][T12640] FAULT_INJECTION: forcing a failure. [ 305.878452][T12640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.893952][T12640] CPU: 1 UID: 0 PID: 12640 Comm: syz.1.2082 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 305.893977][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.893987][T12640] Call Trace: [ 305.893994][T12640] [ 305.894002][T12640] dump_stack_lvl+0x189/0x250 [ 305.894028][T12640] ? __pfx____ratelimit+0x10/0x10 [ 305.894049][T12640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.894066][T12640] ? __pfx__printk+0x10/0x10 [ 305.894088][T12640] ? __might_fault+0xb0/0x130 [ 305.894135][T12640] should_fail_ex+0x414/0x560 [ 305.894158][T12640] _copy_from_user+0x2d/0xb0 [ 305.894174][T12640] ___sys_sendmsg+0x158/0x2a0 [ 305.894199][T12640] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.894255][T12640] ? __fget_files+0x2a/0x420 [ 305.894276][T12640] ? __fget_files+0x3a0/0x420 [ 305.894307][T12640] __x64_sys_sendmsg+0x19b/0x260 [ 305.894332][T12640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.894361][T12640] ? __pfx_ksys_write+0x10/0x10 [ 305.894379][T12640] ? rcu_is_watching+0x15/0xb0 [ 305.894401][T12640] ? do_syscall_64+0xbe/0x3b0 [ 305.894424][T12640] do_syscall_64+0xfa/0x3b0 [ 305.894441][T12640] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.894459][T12640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.894475][T12640] ? clear_bhb_loop+0x60/0xb0 [ 305.894494][T12640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.894510][T12640] RIP: 0033:0x7f214318ebe9 [ 305.894526][T12640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.894540][T12640] RSP: 002b:00007f2143f5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.894558][T12640] RAX: ffffffffffffffda RBX: 00007f21433b5fa0 RCX: 00007f214318ebe9 [ 305.894569][T12640] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 305.894579][T12640] RBP: 00007f2143f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 305.894589][T12640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.894598][T12640] R13: 00007f21433b6038 R14: 00007f21433b5fa0 R15: 00007ffd93f1d288 [ 305.894625][T12640] [ 306.297348][T12643] syzkaller0: entered promiscuous mode [ 306.307274][T12643] syzkaller0: entered allmulticast mode [ 306.426527][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 306.490585][T12661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.598821][T12669] vlan3: entered promiscuous mode [ 306.790495][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2094'. [ 306.872014][T12685] veth3: entered promiscuous mode [ 306.970466][T12692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.977861][T12692] IPv6: NLM_F_CREATE should be set when creating new route [ 306.999029][T12691] vlan3: entered promiscuous mode [ 307.280681][T12707] netlink: 'syz.4.2104': attribute type 10 has an invalid length. [ 307.290115][T12706] syzkaller0: entered promiscuous mode [ 307.307410][T12706] syzkaller0: entered allmulticast mode [ 307.378852][T12709] netlink: 'syz.2.2105': attribute type 5 has an invalid length. [ 307.380992][T12712] netlink: 'syz.4.2106': attribute type 4 has an invalid length. [ 307.390287][T12709] netlink: 'syz.2.2105': attribute type 5 has an invalid length. [ 307.420674][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 307.794715][T12725] tipc: Cannot configure node identity twice [ 307.808861][T12733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2112'. [ 307.943863][T12734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2113'. [ 308.005269][T12737] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 308.119026][T12752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.128929][T12753] netlink: 'syz.1.2118': attribute type 13 has an invalid length. [ 308.151306][T12754] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 308.158546][T12754] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 308.169592][T12752] netlink: 'syz.4.2119': attribute type 1 has an invalid length. [ 308.199353][T12753] netlink: 'syz.1.2118': attribute type 17 has an invalid length. [ 308.243933][T12758] netlink: 'syz.4.2119': attribute type 3 has an invalid length. [ 308.252459][T12758] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2119'. [ 308.280268][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 308.317684][T12752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.354727][T12764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.365655][T12753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.400796][T12758] vlan0: entered allmulticast mode [ 308.408362][T12758] bond3: (slave vlan0): Opening slave failed [ 308.871489][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 308.946211][T12781] syzkaller0: entered promiscuous mode [ 308.951939][T12781] syzkaller0: entered allmulticast mode [ 309.253280][T12796] FAULT_INJECTION: forcing a failure. [ 309.253280][T12796] name failslab, interval 1, probability 0, space 0, times 0 [ 309.277332][T12796] CPU: 1 UID: 0 PID: 12796 Comm: syz.3.2130 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 309.277360][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.277372][T12796] Call Trace: [ 309.277379][T12796] [ 309.277387][T12796] dump_stack_lvl+0x189/0x250 [ 309.277416][T12796] ? __pfx____ratelimit+0x10/0x10 [ 309.277438][T12796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.277460][T12796] ? __pfx__printk+0x10/0x10 [ 309.277490][T12796] ? __pfx___might_resched+0x10/0x10 [ 309.277507][T12796] ? fs_reclaim_acquire+0x7d/0x100 [ 309.277542][T12796] should_fail_ex+0x414/0x560 [ 309.277569][T12796] should_failslab+0xa8/0x100 [ 309.277596][T12796] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 309.277620][T12796] ? __alloc_skb+0x112/0x2d0 [ 309.277648][T12796] __alloc_skb+0x112/0x2d0 [ 309.277675][T12796] netlink_ack+0x146/0xa50 [ 309.277694][T12796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.277735][T12796] netlink_rcv_skb+0x28c/0x470 [ 309.277755][T12796] ? __lock_acquire+0xab9/0xd20 [ 309.277787][T12796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.277811][T12796] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.277847][T12796] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.277877][T12796] netlink_unicast+0x82c/0x9e0 [ 309.277907][T12796] ? __pfx_netlink_unicast+0x10/0x10 [ 309.277929][T12796] ? netlink_sendmsg+0x642/0xb30 [ 309.277950][T12796] ? skb_put+0x11b/0x210 [ 309.277976][T12796] netlink_sendmsg+0x805/0xb30 [ 309.278005][T12796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.278031][T12796] ? aa_sock_msg_perm+0xf1/0x1d0 [ 309.278057][T12796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 309.278077][T12796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.278102][T12796] __sock_sendmsg+0x21c/0x270 [ 309.278126][T12796] ____sys_sendmsg+0x505/0x830 [ 309.278158][T12796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.278193][T12796] ? import_iovec+0x74/0xa0 [ 309.278216][T12796] ___sys_sendmsg+0x21f/0x2a0 [ 309.278242][T12796] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.278300][T12796] ? __fget_files+0x2a/0x420 [ 309.278324][T12796] ? __fget_files+0x3a0/0x420 [ 309.278359][T12796] __x64_sys_sendmsg+0x19b/0x260 [ 309.278386][T12796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.278420][T12796] ? __pfx_ksys_write+0x10/0x10 [ 309.278440][T12796] ? rcu_is_watching+0x15/0xb0 [ 309.278463][T12796] ? do_syscall_64+0xbe/0x3b0 [ 309.278489][T12796] do_syscall_64+0xfa/0x3b0 [ 309.278509][T12796] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.278531][T12796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.278550][T12796] ? clear_bhb_loop+0x60/0xb0 [ 309.278573][T12796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.278591][T12796] RIP: 0033:0x7fbbea58ebe9 [ 309.278607][T12796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.278623][T12796] RSP: 002b:00007fbbeb3a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.278643][T12796] RAX: ffffffffffffffda RBX: 00007fbbea7b6090 RCX: 00007fbbea58ebe9 [ 309.278656][T12796] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 309.278667][T12796] RBP: 00007fbbeb3a8090 R08: 0000000000000000 R09: 0000000000000000 [ 309.278678][T12796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.278689][T12796] R13: 00007fbbea7b6128 R14: 00007fbbea7b6090 R15: 00007ffe528c88c8 [ 309.278719][T12796] [ 309.707393][T12801] netlink: 'syz.2.2132': attribute type 13 has an invalid length. [ 309.731483][T12801] netlink: 'syz.2.2132': attribute type 17 has an invalid length. [ 309.781804][T12803] openvswitch: netlink: Key type 12304 is out of range max 32 [ 309.806737][T12803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2134'. [ 309.834747][T12801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.948915][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2134'. [ 309.958726][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2134'. [ 310.182133][T12821] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2139'. [ 310.211573][T12823] syzkaller0: entered promiscuous mode [ 310.217812][T12823] syzkaller0: entered allmulticast mode [ 310.325998][T12827] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 310.575536][T12837] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 311.754434][T12893] tipc: Enabled bearer , priority 0 [ 311.797983][T12893] tipc: Disabling bearer [ 312.194684][T12906] syzkaller0: entered promiscuous mode [ 312.198184][T12850] infiniband syz2: set down [ 312.205264][T12850] infiniband syz2: added syzkaller0 [ 312.206021][T12906] syzkaller0: entered allmulticast mode [ 312.313388][T12850] RDS/IB: syz2: added [ 312.319878][T12850] smc: adding ib device syz2 with port count 1 [ 312.349617][T12850] smc: ib device syz2 port 1 has pnetid [ 312.437813][T12921] validate_nla: 2 callbacks suppressed [ 312.437832][T12921] netlink: 'syz.0.2169': attribute type 1 has an invalid length. [ 312.568057][T12924] __nla_validate_parse: 8 callbacks suppressed [ 312.568073][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 312.633382][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'. [ 314.290325][T12940] syzkaller0: entered promiscuous mode [ 314.296054][T12940] syzkaller0: entered allmulticast mode [ 314.511936][T12942] syzkaller0: entered promiscuous mode [ 314.518156][T12942] syzkaller0: entered allmulticast mode [ 314.742983][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2174'. [ 314.955000][T12953] syzkaller0: entered promiscuous mode [ 314.976659][T12953] syzkaller0: entered allmulticast mode [ 315.023871][T12953] macsec1: entered promiscuous mode [ 316.847228][T12962] v: renamed from ip6_vti0 (while UP) [ 317.010101][ T6691] smc: removing ib device syz2 [ 317.520203][T12980] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2181'. [ 317.575077][T12969] veth5: entered promiscuous mode [ 317.649069][T12977] veth1: mtu greater than device maximum [ 317.892211][T12996] netlink: 'syz.4.2186': attribute type 4 has an invalid length. [ 317.926230][T12994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2184'. [ 317.941314][T12994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2184'. [ 317.951172][T12994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2184'. [ 317.972977][T12994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2184'. [ 318.348247][T13000] syzkaller0: entered promiscuous mode [ 318.353980][T13000] syzkaller0: entered allmulticast mode [ 319.109476][T13023] FAULT_INJECTION: forcing a failure. [ 319.109476][T13023] name failslab, interval 1, probability 0, space 0, times 0 [ 319.127922][T13023] CPU: 1 UID: 0 PID: 13023 Comm: syz.0.2192 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 319.127950][T13023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.127961][T13023] Call Trace: [ 319.127969][T13023] [ 319.127977][T13023] dump_stack_lvl+0x189/0x250 [ 319.128005][T13023] ? __pfx____ratelimit+0x10/0x10 [ 319.128027][T13023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.128049][T13023] ? __pfx__printk+0x10/0x10 [ 319.128076][T13023] ? __pfx___might_resched+0x10/0x10 [ 319.128094][T13023] ? fs_reclaim_acquire+0x7d/0x100 [ 319.128125][T13023] should_fail_ex+0x414/0x560 [ 319.128150][T13023] should_failslab+0xa8/0x100 [ 319.128177][T13023] kmem_cache_alloc_noprof+0x73/0x3c0 [ 319.128200][T13023] ? security_file_alloc+0x34/0x330 [ 319.128225][T13023] security_file_alloc+0x34/0x330 [ 319.128248][T13023] init_file+0x93/0x2f0 [ 319.128269][T13023] alloc_empty_file+0x6e/0x1d0 [ 319.128290][T13023] alloc_file_pseudo+0x13d/0x210 [ 319.128313][T13023] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 319.128330][T13023] ? __local_bh_enable_ip+0x12d/0x1c0 [ 319.128363][T13023] anon_inode_getfile+0xc5/0x1a0 [ 319.128387][T13023] bpf_link_prime+0xfc/0x220 [ 319.128410][T13023] bpf_raw_tp_link_attach+0x49a/0x6c0 [ 319.128435][T13023] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 319.128466][T13023] ? __fget_files+0x2a/0x420 [ 319.128500][T13023] bpf_raw_tracepoint_open+0x1b2/0x220 [ 319.128529][T13023] __sys_bpf+0x75a/0x870 [ 319.128554][T13023] ? __pfx___sys_bpf+0x10/0x10 [ 319.128572][T13023] ? bpf_trace_run2+0x322/0x4b0 [ 319.128615][T13023] ? rcu_is_watching+0x15/0xb0 [ 319.128638][T13023] __x64_sys_bpf+0x7c/0x90 [ 319.128660][T13023] do_syscall_64+0xfa/0x3b0 [ 319.128680][T13023] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.128701][T13023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.128720][T13023] ? clear_bhb_loop+0x60/0xb0 [ 319.128741][T13023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.128760][T13023] RIP: 0033:0x7f5c6138ebe9 [ 319.128776][T13023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.128792][T13023] RSP: 002b:00007f5c62155038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.128812][T13023] RAX: ffffffffffffffda RBX: 00007f5c615b5fa0 RCX: 00007f5c6138ebe9 [ 319.128825][T13023] RDX: 0000000000000010 RSI: 0000200000000600 RDI: 0000000000000011 [ 319.128836][T13023] RBP: 00007f5c62155090 R08: 0000000000000000 R09: 0000000000000000 [ 319.128852][T13023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.128862][T13023] R13: 00007f5c615b6038 R14: 00007f5c615b5fa0 R15: 00007ffc71e475b8 [ 319.128892][T13023] [ 319.691097][T13032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.797557][T13009] syzkaller0: entered promiscuous mode [ 320.803139][T13009] syzkaller0: entered allmulticast mode [ 320.840413][T13030] tipc: Enabling of bearer rejected, failed to enable media [ 320.956698][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2196'. [ 321.202972][T13057] FAULT_INJECTION: forcing a failure. [ 321.202972][T13057] name failslab, interval 1, probability 0, space 0, times 0 [ 321.218019][T13058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.219036][T13057] CPU: 0 UID: 0 PID: 13057 Comm: syz.1.2203 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 321.219060][T13057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.219070][T13057] Call Trace: [ 321.219078][T13057] [ 321.219085][T13057] dump_stack_lvl+0x189/0x250 [ 321.219116][T13057] ? __pfx____ratelimit+0x10/0x10 [ 321.219139][T13057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.219160][T13057] ? __pfx__printk+0x10/0x10 [ 321.219186][T13057] ? __pfx___might_resched+0x10/0x10 [ 321.219203][T13057] ? fs_reclaim_acquire+0x7d/0x100 [ 321.219233][T13057] should_fail_ex+0x414/0x560 [ 321.219259][T13057] should_failslab+0xa8/0x100 [ 321.219285][T13057] kmem_cache_alloc_noprof+0x73/0x3c0 [ 321.219308][T13057] ? security_file_alloc+0x34/0x330 [ 321.219332][T13057] security_file_alloc+0x34/0x330 [ 321.219353][T13057] init_file+0x93/0x2f0 [ 321.219375][T13057] alloc_empty_file+0x6e/0x1d0 [ 321.219395][T13057] alloc_file_pseudo+0x13d/0x210 [ 321.219417][T13057] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 321.219450][T13057] anon_inode_getfd+0xca/0x1b0 [ 321.219474][T13057] map_create+0x10a2/0x14d0 [ 321.219500][T13057] ? security_bpf+0x7e/0x300 [ 321.219524][T13057] __sys_bpf+0x60f/0x870 [ 321.219548][T13057] ? __pfx___sys_bpf+0x10/0x10 [ 321.219582][T13057] ? ksys_write+0x22a/0x250 [ 321.219605][T13057] ? __pfx_ksys_write+0x10/0x10 [ 321.219625][T13057] ? rcu_is_watching+0x15/0xb0 [ 321.219651][T13057] __x64_sys_bpf+0x7c/0x90 [ 321.219672][T13057] do_syscall_64+0xfa/0x3b0 [ 321.219692][T13057] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.219713][T13057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.219732][T13057] ? clear_bhb_loop+0x60/0xb0 [ 321.219753][T13057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.219771][T13057] RIP: 0033:0x7f214318ebe9 [ 321.219787][T13057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.219803][T13057] RSP: 002b:00007f2143f5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 321.219821][T13057] RAX: ffffffffffffffda RBX: 00007f21433b5fa0 RCX: 00007f214318ebe9 [ 321.219834][T13057] RDX: 0000000000000048 RSI: 00002000000004c0 RDI: 0000000000000000 [ 321.219845][T13057] RBP: 00007f2143f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 321.219862][T13057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.219872][T13057] R13: 00007f21433b6038 R14: 00007f21433b5fa0 R15: 00007ffd93f1d288 [ 321.219901][T13057] [ 321.385627][T13064] netlink: 'syz.1.2204': attribute type 13 has an invalid length. [ 321.487091][T13064] netlink: 'syz.1.2204': attribute type 17 has an invalid length. [ 321.509684][T13043] ip6gretap0: entered promiscuous mode [ 321.520274][T13043] vlan3: entered promiscuous mode [ 321.544617][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 321.583215][T13064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.663721][T13064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.723529][T13069] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 321.763215][T13069] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2205'. [ 321.951271][T13075] syzkaller0: entered promiscuous mode [ 321.957069][T13075] syzkaller0: entered allmulticast mode [ 323.294953][T13101] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2212'. [ 323.976578][T13078] vlan0: entered promiscuous mode [ 323.981790][T13078] bond0: entered promiscuous mode [ 324.127754][T13106] syz.3.2213 (13106) used obsolete PPPIOCDETACH ioctl [ 324.145732][T13108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.153045][T13108] IPv6: NLM_F_CREATE should be set when creating new route [ 324.547844][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2221'. [ 324.985276][T13136] syzkaller0: entered promiscuous mode [ 324.991089][T13136] syzkaller0: entered allmulticast mode [ 325.004695][T13144] netlink: 'syz.4.2226': attribute type 1 has an invalid length. [ 325.036371][T13144] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2226'. [ 325.110699][T13146] netlink: 'syz.0.2227': attribute type 1 has an invalid length. [ 325.121381][T13146] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2227'. [ 325.270242][T13148] syzkaller0: entered promiscuous mode [ 325.279902][T13148] syzkaller0: entered allmulticast mode [ 325.593704][T13160] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2232'. [ 325.594981][T13158] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 325.877673][T13172] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 326.100556][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 327.933852][T13197] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 327.943610][T13199] syzkaller0: entered promiscuous mode [ 327.943635][T13199] syzkaller0: entered allmulticast mode [ 328.413377][T13218] bond0: (slave batadv0): Releasing backup interface [ 328.435138][T13218] batadv0: left promiscuous mode [ 328.444796][T13222] netlink: 'syz.4.2248': attribute type 4 has an invalid length. [ 328.633708][T13231] FAULT_INJECTION: forcing a failure. [ 328.633708][T13231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.670100][T13231] CPU: 0 UID: 0 PID: 13231 Comm: syz.3.2251 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 328.670128][T13231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.670140][T13231] Call Trace: [ 328.670148][T13231] [ 328.670157][T13231] dump_stack_lvl+0x189/0x250 [ 328.670185][T13231] ? __pfx____ratelimit+0x10/0x10 [ 328.670208][T13231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.670230][T13231] ? __pfx__printk+0x10/0x10 [ 328.670267][T13231] should_fail_ex+0x414/0x560 [ 328.670293][T13231] _copy_to_user+0x31/0xb0 [ 328.670313][T13231] simple_read_from_buffer+0xe1/0x170 [ 328.670344][T13231] proc_fail_nth_read+0x1b3/0x220 [ 328.670368][T13231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.670392][T13231] ? rw_verify_area+0x2a6/0x4d0 [ 328.670412][T13231] ? __lock_acquire+0xab9/0xd20 [ 328.670434][T13231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.670456][T13231] vfs_read+0x200/0x980 [ 328.670477][T13231] ? fdget_pos+0x247/0x320 [ 328.670497][T13231] ? __pfx___mutex_lock+0x10/0x10 [ 328.670520][T13231] ? __pfx_vfs_read+0x10/0x10 [ 328.670544][T13231] ? __fget_files+0x2a/0x420 [ 328.670573][T13231] ? __fget_files+0x3a0/0x420 [ 328.670595][T13231] ? __fget_files+0x2a/0x420 [ 328.670629][T13231] ksys_read+0x145/0x250 [ 328.670653][T13231] ? __pfx_ksys_read+0x10/0x10 [ 328.670672][T13231] ? rcu_is_watching+0x15/0xb0 [ 328.670695][T13231] ? do_syscall_64+0xbe/0x3b0 [ 328.670721][T13231] do_syscall_64+0xfa/0x3b0 [ 328.670742][T13231] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.670763][T13231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.670781][T13231] ? clear_bhb_loop+0x60/0xb0 [ 328.670802][T13231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.670840][T13231] RIP: 0033:0x7fbbea58d5fc [ 328.670858][T13231] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 328.670874][T13231] RSP: 002b:00007fbbeb3a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.670893][T13231] RAX: ffffffffffffffda RBX: 00007fbbea7b6090 RCX: 00007fbbea58d5fc [ 328.670905][T13231] RDX: 000000000000000f RSI: 00007fbbeb3a80a0 RDI: 0000000000000009 [ 328.670917][T13231] RBP: 00007fbbeb3a8090 R08: 0000000000000000 R09: 0000000000000000 [ 328.670928][T13231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.670938][T13231] R13: 00007fbbea7b6128 R14: 00007fbbea7b6090 R15: 00007ffe528c88c8 [ 328.670968][T13231] [ 329.166746][T13233] syzkaller0: entered promiscuous mode [ 329.186682][T13225] netlink: 'syz.0.2250': attribute type 2 has an invalid length. [ 329.191218][T13233] syzkaller0: entered allmulticast mode [ 329.197613][T13225] netlink: 'syz.0.2250': attribute type 1 has an invalid length. [ 329.262998][T13248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.318934][T13248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2255'. [ 329.393921][T13250] syzkaller0: entered promiscuous mode [ 329.404270][T13250] syzkaller0: entered allmulticast mode [ 329.592690][T13259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2260'. [ 330.384907][T13265] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2262'. [ 330.960379][T13267] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 331.153075][T13271] team0: Mode changed to "broadcast" [ 331.160761][T13271] tipc: Enabled bearer , priority 0 [ 331.180853][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2264'. [ 331.198488][T13273] ip6gretap0: entered promiscuous mode [ 331.210804][T13273] vlan0: entered promiscuous mode [ 331.302809][T13283] netlink: 'syz.3.2268': attribute type 13 has an invalid length. [ 331.336257][T13283] netlink: 'syz.3.2268': attribute type 17 has an invalid length. [ 331.414576][T13283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.429983][T13283] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.453697][T13283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.483963][T13290] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 331.598108][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2268'. [ 331.627069][T13306] netlink: 'syz.4.2274': attribute type 13 has an invalid length. [ 331.635229][T13306] netlink: 'syz.4.2274': attribute type 17 has an invalid length. [ 331.653189][T13283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.949638][T13306] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.957181][T13306] tipc: Resetting bearer [ 331.968902][T13306] tipc: Resetting bearer [ 331.980900][T13306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.252545][ T5937] tipc: Node number set to 4194305 [ 332.254928][T13315] syzkaller0: entered promiscuous mode [ 332.266565][T13315] syzkaller0: entered allmulticast mode [ 332.268579][T13296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.644758][T13322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2278'. [ 332.939714][T13326] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2280'. [ 332.981417][T13326] gretap0: entered promiscuous mode [ 333.128274][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2281'. [ 333.187727][T13344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.229938][T13347] netlink: 'syz.2.2285': attribute type 13 has an invalid length. [ 333.240118][T13347] netlink: 'syz.2.2285': attribute type 17 has an invalid length. [ 333.249890][T13348] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 333.406121][T13335] geneve2: left promiscuous mode [ 333.421565][T13335] geneve2: left allmulticast mode [ 333.450703][T13347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.670487][T13365] netlink: 'syz.0.2289': attribute type 13 has an invalid length. [ 333.692375][T13365] netlink: 'syz.0.2289': attribute type 17 has an invalid length. [ 333.696835][T13368] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 333.757412][T13365] erspan0: left promiscuous mode [ 333.793590][T13365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.807433][T13365] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.819078][T13365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.919301][T13341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.994353][T13359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.096443][T13382] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 334.106583][T13382] team0: Device macvtap1 is already an upper device of the team interface [ 334.158373][T13386] syzkaller0: entered promiscuous mode [ 334.164042][T13386] syzkaller0: entered allmulticast mode [ 334.175026][T13386] tipc: Enabled bearer , priority 0 [ 334.276458][T13385] tipc: Resetting bearer [ 334.293379][T13385] tipc: Disabling bearer [ 334.677042][T13396] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 334.836659][T13404] 8021q: VLANs not supported on ipvlan0 [ 334.846987][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'. [ 335.211611][T13416] netlink: 'syz.4.2308': attribute type 23 has an invalid length. [ 335.546399][T13429] netlink: 'syz.0.2312': attribute type 13 has an invalid length. [ 335.590267][T13429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.595036][T13431] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 335.636049][T13428] vlan0: entered promiscuous mode [ 335.744580][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'. [ 335.855166][T13440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.074612][T13449] batadv_slave_1: entered promiscuous mode [ 336.303139][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 336.355822][T13461] validate_nla: 2 callbacks suppressed [ 336.355841][T13461] netlink: 'syz.1.2325': attribute type 1 has an invalid length. [ 336.373357][T13461] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2325'. [ 336.534524][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2329'. [ 336.565478][T13471] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.2329'. [ 336.675465][T13475] netlink: 'syz.0.2331': attribute type 13 has an invalid length. [ 336.698063][T13475] netlink: 'syz.0.2331': attribute type 17 has an invalid length. [ 336.698110][T13479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2332'. [ 336.708302][T13477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2332'. [ 336.806581][T13475] net_ratelimit: 1 callbacks suppressed [ 336.806592][T13475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.943352][T13489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.000590][T13494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.083871][T13494] netlink: 'syz.3.2334': attribute type 1 has an invalid length. [ 337.140643][T13494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 337.147266][T13503] netlink: 'syz.3.2334': attribute type 3 has an invalid length. [ 337.147305][T13503] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2334'. [ 337.200520][T13503] vlan0: entered allmulticast mode [ 337.212204][ T5937] IPVS: starting estimator thread 0... [ 337.224153][T13503] bond3: (slave vlan0): Opening slave failed [ 337.250858][T13463] sctp: [Deprecated]: syz.2.2326 (pid 13463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.250858][T13463] Use struct sctp_sack_info instead [ 337.332360][T13507] IPVS: using max 25 ests per chain, 60000 per kthread [ 337.448176][T13513] vlan0: entered promiscuous mode [ 337.561036][T13517] netlink: 'syz.2.2344': attribute type 29 has an invalid length. [ 337.585615][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2344'. [ 337.603241][T13517] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 337.624987][ T49] IPVS: stop unused estimator thread 0... [ 337.739792][T13526] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 337.918157][T13535] bridge0: port 1(erspan0) entered blocking state [ 337.925590][T13535] bridge0: port 1(erspan0) entered disabled state [ 337.933115][T13535] erspan0: entered allmulticast mode [ 337.940751][T13535] erspan0: entered promiscuous mode [ 337.951587][T13535] bridge0: port 1(erspan0) entered blocking state [ 337.959459][T13535] bridge0: port 1(erspan0) entered forwarding state [ 338.013960][T13543] FAULT_INJECTION: forcing a failure. [ 338.013960][T13543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.045418][T13543] CPU: 0 UID: 0 PID: 13543 Comm: syz.0.2353 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 338.045444][T13543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.045455][T13543] Call Trace: [ 338.045462][T13543] [ 338.045470][T13543] dump_stack_lvl+0x189/0x250 [ 338.045498][T13543] ? __pfx____ratelimit+0x10/0x10 [ 338.045521][T13543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.045543][T13543] ? __pfx__printk+0x10/0x10 [ 338.045580][T13543] should_fail_ex+0x414/0x560 [ 338.045607][T13543] _copy_to_user+0x31/0xb0 [ 338.045628][T13543] simple_read_from_buffer+0xe1/0x170 [ 338.045658][T13543] proc_fail_nth_read+0x1b3/0x220 [ 338.045683][T13543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.045707][T13543] ? rw_verify_area+0x2a6/0x4d0 [ 338.045735][T13543] ? __lock_acquire+0xab9/0xd20 [ 338.045757][T13543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.045780][T13543] vfs_read+0x200/0x980 [ 338.045800][T13543] ? fdget_pos+0x247/0x320 [ 338.045822][T13543] ? __pfx___mutex_lock+0x10/0x10 [ 338.045846][T13543] ? __pfx_vfs_read+0x10/0x10 [ 338.045870][T13543] ? __fget_files+0x2a/0x420 [ 338.045900][T13543] ? __fget_files+0x3a0/0x420 [ 338.045923][T13543] ? __fget_files+0x2a/0x420 [ 338.045956][T13543] ksys_read+0x145/0x250 [ 338.045981][T13543] ? __pfx_ksys_read+0x10/0x10 [ 338.046004][T13543] ? rcu_is_watching+0x15/0xb0 [ 338.046023][T13543] ? trace_sys_enter+0x25/0x100 [ 338.046054][T13543] do_syscall_64+0xfa/0x3b0 [ 338.046075][T13543] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.046096][T13543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.046115][T13543] ? clear_bhb_loop+0x60/0xb0 [ 338.046136][T13543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.046155][T13543] RIP: 0033:0x7f5c6138d5fc [ 338.046172][T13543] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 338.046187][T13543] RSP: 002b:00007f5c62155030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.046212][T13543] RAX: ffffffffffffffda RBX: 00007f5c615b5fa0 RCX: 00007f5c6138d5fc [ 338.046225][T13543] RDX: 000000000000000f RSI: 00007f5c621550a0 RDI: 000000000000000b [ 338.046237][T13543] RBP: 00007f5c62155090 R08: 0000000000000000 R09: 0000000000000000 [ 338.046248][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.046259][T13543] R13: 00007f5c615b6038 R14: 00007f5c615b5fa0 R15: 00007ffc71e475b8 [ 338.046291][T13543] [ 338.376902][T13551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.397169][T13535] erspan0: left allmulticast mode [ 338.402440][T13535] erspan0: left promiscuous mode [ 338.407619][T13535] bridge0: port 1(erspan0) entered disabled state [ 338.656688][T13563] FAULT_INJECTION: forcing a failure. [ 338.656688][T13563] name failslab, interval 1, probability 0, space 0, times 0 [ 338.706514][T13568] tipc: Enabling of bearer rejected, failed to enable media [ 338.710733][T13563] CPU: 1 UID: 0 PID: 13563 Comm: syz.1.2359 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 338.710762][T13563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.710774][T13563] Call Trace: [ 338.710781][T13563] [ 338.710789][T13563] dump_stack_lvl+0x189/0x250 [ 338.710816][T13563] ? __pfx____ratelimit+0x10/0x10 [ 338.710839][T13563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.710860][T13563] ? __pfx__printk+0x10/0x10 [ 338.710899][T13563] ? __pfx___might_resched+0x10/0x10 [ 338.710917][T13563] ? fs_reclaim_acquire+0x7d/0x100 [ 338.710948][T13563] should_fail_ex+0x414/0x560 [ 338.710974][T13563] should_failslab+0xa8/0x100 [ 338.711001][T13563] __kmalloc_cache_noprof+0x70/0x3d0 [ 338.711024][T13563] ? genl_start+0x1c9/0x6c0 [ 338.711047][T13563] genl_start+0x1c9/0x6c0 [ 338.711062][T13563] ? netlink_lookup+0x30/0x200 [ 338.711090][T13563] __netlink_dump_start+0x466/0x7e0 [ 338.711121][T13563] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 338.711143][T13563] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 338.711160][T13563] ? genl_get_cmd+0x7d9/0x910 [ 338.711190][T13563] ? __pfx_genl_start+0x10/0x10 [ 338.711204][T13563] ? __pfx_genl_dumpit+0x10/0x10 [ 338.711218][T13563] ? __pfx_genl_done+0x10/0x10 [ 338.711251][T13563] genl_rcv_msg+0x5da/0x790 [ 338.711275][T13563] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.711292][T13563] ? __pfx_psample_nl_cmd_get_group_dumpit+0x10/0x10 [ 338.711322][T13563] ? __asan_memcpy+0x40/0x70 [ 338.711342][T13563] ? __pfx_ref_tracker_free+0x10/0x10 [ 338.711371][T13563] netlink_rcv_skb+0x208/0x470 [ 338.711391][T13563] ? __lock_acquire+0xab9/0xd20 [ 338.711415][T13563] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.711434][T13563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.711476][T13563] ? down_read+0x1ad/0x2e0 [ 338.711502][T13563] genl_rcv+0x28/0x40 [ 338.711526][T13563] netlink_unicast+0x82c/0x9e0 [ 338.711556][T13563] ? __pfx_netlink_unicast+0x10/0x10 [ 338.711577][T13563] ? netlink_sendmsg+0x642/0xb30 [ 338.711597][T13563] ? skb_put+0x11b/0x210 [ 338.711624][T13563] netlink_sendmsg+0x805/0xb30 [ 338.711660][T13563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.711686][T13563] ? aa_sock_msg_perm+0xf1/0x1d0 [ 338.711712][T13563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.711731][T13563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.711754][T13563] __sock_sendmsg+0x21c/0x270 [ 338.711780][T13563] ____sys_sendmsg+0x505/0x830 [ 338.711811][T13563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.711847][T13563] ? import_iovec+0x74/0xa0 [ 338.711874][T13563] ___sys_sendmsg+0x21f/0x2a0 [ 338.711901][T13563] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.711966][T13563] ? __fget_files+0x2a/0x420 [ 338.711990][T13563] ? __fget_files+0x3a0/0x420 [ 338.712027][T13563] __x64_sys_sendmsg+0x19b/0x260 [ 338.712055][T13563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.712091][T13563] ? __pfx_ksys_write+0x10/0x10 [ 338.712110][T13563] ? rcu_is_watching+0x15/0xb0 [ 338.712134][T13563] ? do_syscall_64+0xbe/0x3b0 [ 338.712160][T13563] do_syscall_64+0xfa/0x3b0 [ 338.712179][T13563] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.712200][T13563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.712218][T13563] ? clear_bhb_loop+0x60/0xb0 [ 338.712240][T13563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.712258][T13563] RIP: 0033:0x7f214318ebe9 [ 338.712275][T13563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.712290][T13563] RSP: 002b:00007f2143f5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.712310][T13563] RAX: ffffffffffffffda RBX: 00007f21433b5fa0 RCX: 00007f214318ebe9 [ 338.712367][T13563] RDX: 0000000004000000 RSI: 0000200000001040 RDI: 0000000000000003 [ 338.712380][T13563] RBP: 00007f2143f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 338.712391][T13563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.712401][T13563] R13: 00007f21433b6038 R14: 00007f21433b5fa0 R15: 00007ffd93f1d288 [ 338.712432][T13563] [ 339.137278][T13570] vlan0: entered promiscuous mode [ 340.263025][T13624] vlan0: entered promiscuous mode [ 340.282516][T13624] ip6gretap0: entered promiscuous mode [ 340.350509][T13622] vlan0: entered promiscuous mode [ 342.402443][T13632] netlink: 'syz.4.2383': attribute type 21 has an invalid length. [ 342.534799][T13641] __nla_validate_parse: 5 callbacks suppressed [ 342.534821][T13641] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2383'. [ 342.570782][T13641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2383'. [ 342.633759][T13645] FAULT_INJECTION: forcing a failure. [ 342.633759][T13645] name failslab, interval 1, probability 0, space 0, times 0 [ 342.651518][T13645] CPU: 0 UID: 0 PID: 13645 Comm: syz.1.2389 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 342.651546][T13645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.651557][T13645] Call Trace: [ 342.651565][T13645] [ 342.651573][T13645] dump_stack_lvl+0x189/0x250 [ 342.651600][T13645] ? __pfx____ratelimit+0x10/0x10 [ 342.651623][T13645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.651645][T13645] ? __pfx__printk+0x10/0x10 [ 342.651670][T13645] ? __lock_acquire+0xab9/0xd20 [ 342.651711][T13645] should_fail_ex+0x414/0x560 [ 342.651737][T13645] should_failslab+0xa8/0x100 [ 342.651764][T13645] kmem_cache_alloc_noprof+0x73/0x3c0 [ 342.651787][T13645] ? skb_clone+0x212/0x3a0 [ 342.651810][T13645] skb_clone+0x212/0x3a0 [ 342.651831][T13645] __netlink_deliver_tap+0x404/0x850 [ 342.651867][T13645] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.651892][T13645] netlink_deliver_tap+0x19c/0x1b0 [ 342.651916][T13645] netlink_unicast+0x7fa/0x9e0 [ 342.651946][T13645] ? __pfx_netlink_unicast+0x10/0x10 [ 342.651969][T13645] ? netlink_sendmsg+0x642/0xb30 [ 342.651989][T13645] ? skb_put+0x11b/0x210 [ 342.652016][T13645] netlink_sendmsg+0x805/0xb30 [ 342.652049][T13645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.652075][T13645] ? aa_sock_msg_perm+0xf1/0x1d0 [ 342.652102][T13645] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.652122][T13645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.652146][T13645] __sock_sendmsg+0x21c/0x270 [ 342.652170][T13645] ____sys_sendmsg+0x505/0x830 [ 342.652201][T13645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.652238][T13645] ? import_iovec+0x74/0xa0 [ 342.652259][T13645] ___sys_sendmsg+0x21f/0x2a0 [ 342.652287][T13645] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.652353][T13645] ? __fget_files+0x2a/0x420 [ 342.652377][T13645] ? __fget_files+0x3a0/0x420 [ 342.652414][T13645] __x64_sys_sendmsg+0x19b/0x260 [ 342.652442][T13645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.652479][T13645] ? __pfx_ksys_write+0x10/0x10 [ 342.652508][T13645] ? rcu_is_watching+0x15/0xb0 [ 342.652534][T13645] ? do_syscall_64+0xbe/0x3b0 [ 342.652560][T13645] do_syscall_64+0xfa/0x3b0 [ 342.652581][T13645] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.652602][T13645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.652621][T13645] ? clear_bhb_loop+0x60/0xb0 [ 342.652644][T13645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.652663][T13645] RIP: 0033:0x7f214318ebe9 [ 342.652679][T13645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.652696][T13645] RSP: 002b:00007f2143f5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.652716][T13645] RAX: ffffffffffffffda RBX: 00007f21433b5fa0 RCX: 00007f214318ebe9 [ 342.652728][T13645] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 342.652739][T13645] RBP: 00007f2143f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 342.652750][T13645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.652760][T13645] R13: 00007f21433b6038 R14: 00007f21433b5fa0 R15: 00007ffd93f1d288 [ 342.652790][T13645] [ 343.096773][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 343.106146][T13649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.503712][T13663] vlan0: entered promiscuous mode [ 343.617873][T13667] netlink: 'syz.2.2396': attribute type 17 has an invalid length. [ 343.856245][T13676] netlink: 'syz.3.2399': attribute type 4 has an invalid length. [ 343.924588][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2399'. [ 344.529262][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2406'. [ 344.627317][T13702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.078302][T13710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2411'. [ 345.098002][T13694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.421014][T13715] syzkaller0: entered promiscuous mode [ 345.430787][T13715] syzkaller0: entered allmulticast mode [ 345.938204][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2422'. [ 345.990833][T13735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2423'. [ 346.019403][T13735] TCP: TCP_TX_DELAY enabled [ 346.135646][T13741] vlan0: entered promiscuous mode [ 346.348134][T13752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2429'. [ 346.375882][T13753] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 346.611316][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2431'. [ 346.679154][T13766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.008311][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 348.228233][T13774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2435'. [ 348.505836][T13785] vlan3: entered promiscuous mode [ 348.607791][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2441'. [ 348.656751][T13790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2441'. [ 348.669263][T13794] veth3: entered promiscuous mode [ 348.774617][T13799] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 348.903431][T13804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2445'. [ 349.050014][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'. [ 349.256864][T13820] syzkaller0: entered promiscuous mode [ 349.279455][T13820] syzkaller0: entered allmulticast mode [ 349.544803][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 349.608533][T13841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.367906][T13851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2460'. [ 350.380184][T13851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2460'. [ 350.390763][T13851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2460'. [ 351.198504][T13855] gtp0: entered promiscuous mode [ 351.337745][T13853] syzkaller0: entered promiscuous mode [ 351.349100][T13853] syzkaller0: entered allmulticast mode [ 351.410147][T13860] netlink: 'syz.3.2465': attribute type 2 has an invalid length. [ 351.660804][T13874] netlink: 'syz.1.2470': attribute type 4 has an invalid length. [ 353.311976][T13887] __nla_validate_parse: 3 callbacks suppressed [ 353.311995][T13887] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2473'. [ 353.394155][T13892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2474'. [ 353.428840][T13892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2474'. [ 353.452555][T13892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2474'. [ 353.473301][T13892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2474'. [ 353.597572][T13897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.604878][T13897] IPv6: NLM_F_CREATE should be set when creating new route [ 353.964252][T13914] netlink: 'syz.2.2481': attribute type 13 has an invalid length. [ 353.986474][T13914] netlink: 'syz.2.2481': attribute type 17 has an invalid length. [ 354.156266][T13914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.247327][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 354.302493][T13917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.331075][T13921] syzkaller0: entered promiscuous mode [ 354.345580][T13921] syzkaller0: entered allmulticast mode [ 354.561220][T13935] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 354.569748][T13935] team0: Device macvtap1 is already an upper device of the team interface [ 354.913014][T13936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.939091][T13945] ip6gretap0: entered promiscuous mode [ 354.945346][T13945] vlan3: entered promiscuous mode [ 355.172498][T13948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.197870][T13948] netlink: 'syz.0.2492': attribute type 1 has an invalid length. [ 355.255218][T13949] netlink: 'syz.0.2492': attribute type 3 has an invalid length. [ 355.263176][T13949] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2492'. [ 355.602143][T13957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2495'. [ 355.617532][T13957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2495'. [ 355.636146][T13957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2495'. [ 357.903020][T13948] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 357.909382][T13949] vlan3: entered allmulticast mode [ 357.934093][T13979] batadv_slave_0: entered promiscuous mode [ 358.050863][T13981] batadv_slave_0: left promiscuous mode [ 358.446600][T13991] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 358.589978][T14007] __nla_validate_parse: 3 callbacks suppressed [ 358.589995][T14007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2508'. [ 358.673765][T14007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2508'. [ 358.683401][T14007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2508'. [ 358.692993][T14007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2508'. [ 359.264159][T14031] syzkaller0: entered promiscuous mode [ 359.275442][T14031] syzkaller0: entered allmulticast mode [ 359.565846][T14058] netlink: 'syz.3.2522': attribute type 4 has an invalid length. [ 361.212423][T14075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.219720][T14075] IPv6: NLM_F_CREATE should be set when creating new route [ 361.300733][T14079] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 361.313240][T14079] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2526'. [ 361.509690][T14093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2529'. [ 361.545719][T14093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2529'. [ 361.569893][T14093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2529'. [ 361.589561][T14093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2529'. [ 361.870939][T14105] syzkaller0: entered promiscuous mode [ 361.877160][T14105] syzkaller0: entered allmulticast mode [ 361.905050][T14110] syzkaller0: entered promiscuous mode [ 361.910583][T14110] syzkaller0: entered allmulticast mode [ 362.519248][T14118] netlink: 'syz.3.2539': attribute type 4 has an invalid length. [ 363.622064][T14125] netlink: 'syz.4.2543': attribute type 29 has an invalid length. [ 363.632772][T14125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2543'. [ 363.641809][T14124] vlan0: entered promiscuous mode [ 363.691607][T14125] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 363.856639][T14135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2549'. [ 363.890394][T14135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2549'. [ 363.922495][T14135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2549'. [ 363.943514][T14135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2549'. [ 363.978278][T14138] netlink: 'syz.3.2548': attribute type 13 has an invalid length. [ 364.002467][T14138] netlink: 'syz.3.2548': attribute type 17 has an invalid length. [ 364.037919][T14144] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2551'. [ 364.152081][T14147] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2553'. [ 364.245919][T14138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.273201][T14138] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.297424][T14138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.330662][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 364.399836][T14163] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2558'. [ 364.507243][T14167] veth3: entered promiscuous mode [ 364.746832][T14178] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2562'. [ 365.022357][T14193] netlink: 'syz.3.2568': attribute type 13 has an invalid length. [ 365.030322][T14193] netlink: 'syz.3.2568': attribute type 17 has an invalid length. [ 365.058718][T14193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.227779][T14193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.532693][T14208] syzkaller0: entered promiscuous mode [ 365.538396][T14208] syzkaller0: entered allmulticast mode [ 365.584033][T14211] FAULT_INJECTION: forcing a failure. [ 365.584033][T14211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.597971][T14211] CPU: 0 UID: 0 PID: 14211 Comm: syz.0.2576 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 365.597997][T14211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.598011][T14211] Call Trace: [ 365.598017][T14211] [ 365.598025][T14211] dump_stack_lvl+0x189/0x250 [ 365.598052][T14211] ? __pfx____ratelimit+0x10/0x10 [ 365.598075][T14211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.598095][T14211] ? __pfx__printk+0x10/0x10 [ 365.598129][T14211] should_fail_ex+0x414/0x560 [ 365.598152][T14211] _copy_to_user+0x31/0xb0 [ 365.598171][T14211] simple_read_from_buffer+0xe1/0x170 [ 365.598201][T14211] proc_fail_nth_read+0x1b3/0x220 [ 365.598224][T14211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.598245][T14211] ? rw_verify_area+0x2a6/0x4d0 [ 365.598264][T14211] ? __lock_acquire+0xab9/0xd20 [ 365.598285][T14211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.598303][T14211] vfs_read+0x200/0x980 [ 365.598319][T14211] ? fdget_pos+0x247/0x320 [ 365.598338][T14211] ? __pfx___mutex_lock+0x10/0x10 [ 365.598359][T14211] ? __pfx_vfs_read+0x10/0x10 [ 365.598383][T14211] ? __fget_files+0x2a/0x420 [ 365.598412][T14211] ? __fget_files+0x3a0/0x420 [ 365.598434][T14211] ? __fget_files+0x2a/0x420 [ 365.598463][T14211] ksys_read+0x145/0x250 [ 365.598493][T14211] ? __pfx_ksys_read+0x10/0x10 [ 365.598512][T14211] ? rcu_is_watching+0x15/0xb0 [ 365.598531][T14211] ? trace_sys_enter+0x25/0x100 [ 365.598559][T14211] do_syscall_64+0xfa/0x3b0 [ 365.598580][T14211] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.598600][T14211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.598619][T14211] ? clear_bhb_loop+0x60/0xb0 [ 365.598639][T14211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.598663][T14211] RIP: 0033:0x7f5c6138d5fc [ 365.598680][T14211] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 365.598697][T14211] RSP: 002b:00007f5c62155030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 365.598716][T14211] RAX: ffffffffffffffda RBX: 00007f5c615b5fa0 RCX: 00007f5c6138d5fc [ 365.598730][T14211] RDX: 000000000000000f RSI: 00007f5c621550a0 RDI: 0000000000000005 [ 365.598741][T14211] RBP: 00007f5c62155090 R08: 0000000000000000 R09: 0000000000000000 [ 365.598752][T14211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.598760][T14211] R13: 00007f5c615b6038 R14: 00007f5c615b5fa0 R15: 00007ffc71e475b8 [ 365.598790][T14211] [ 365.917204][T14216] FAULT_INJECTION: forcing a failure. [ 365.917204][T14216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.930879][T14216] CPU: 1 UID: 0 PID: 14216 Comm: syz.2.2577 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 365.930906][T14216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.930916][T14216] Call Trace: [ 365.930923][T14216] [ 365.930931][T14216] dump_stack_lvl+0x189/0x250 [ 365.930959][T14216] ? __pfx____ratelimit+0x10/0x10 [ 365.930983][T14216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.931004][T14216] ? __pfx__printk+0x10/0x10 [ 365.931028][T14216] ? __might_fault+0xb0/0x130 [ 365.931063][T14216] should_fail_ex+0x414/0x560 [ 365.931089][T14216] _copy_from_user+0x2d/0xb0 [ 365.931109][T14216] core_sys_select+0x604/0xa20 [ 365.931146][T14216] ? __pfx_core_sys_select+0x10/0x10 [ 365.931204][T14216] ? __pfx_set_user_sigmask+0x10/0x10 [ 365.931234][T14216] __se_sys_pselect6+0x27a/0x300 [ 365.931262][T14216] ? __pfx___se_sys_pselect6+0x10/0x10 [ 365.931287][T14216] ? __pfx_ksys_write+0x10/0x10 [ 365.931306][T14216] ? rcu_is_watching+0x15/0xb0 [ 365.931330][T14216] ? __x64_sys_pselect6+0x21/0xf0 [ 365.931357][T14216] do_syscall_64+0xfa/0x3b0 [ 365.931377][T14216] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.931398][T14216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.931416][T14216] ? clear_bhb_loop+0x60/0xb0 [ 365.931436][T14216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.931453][T14216] RIP: 0033:0x7f984cf8ebe9 [ 365.931470][T14216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.931486][T14216] RSP: 002b:00007f984ddfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 365.931505][T14216] RAX: ffffffffffffffda RBX: 00007f984d1b5fa0 RCX: 00007f984cf8ebe9 [ 365.931517][T14216] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 365.931528][T14216] RBP: 00007f984ddfd090 R08: 0000000000000000 R09: 0000000000000000 [ 365.931539][T14216] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 365.931549][T14216] R13: 00007f984d1b6038 R14: 00007f984d1b5fa0 R15: 00007ffdc8270978 [ 365.931579][T14216] [ 366.560825][T14232] vlan0: entered promiscuous mode [ 366.753346][T14243] syzkaller0: entered promiscuous mode [ 366.762542][T14243] syzkaller0: entered allmulticast mode [ 366.977692][T14247] geneve2: entered promiscuous mode [ 366.983915][T14247] geneve2: entered allmulticast mode [ 367.490822][T14267] netem: incorrect gi model size [ 367.496558][T14267] netem: change failed [ 367.619771][T14270] netlink: 'syz.3.2596': attribute type 1 has an invalid length. [ 367.784985][T14274] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 367.819617][T14274] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 367.874730][T14274] bond4: (slave ip6gre1): making interface the new active one [ 367.883876][T14274] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 368.047647][T14280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.107590][T14290] netlink: 'syz.0.2602': attribute type 4 has an invalid length. [ 368.360307][T14295] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 368.668690][T14308] __nla_validate_parse: 11 callbacks suppressed [ 368.668711][T14308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2605'. [ 368.830288][T14316] netlink: 'syz.0.2610': attribute type 13 has an invalid length. [ 368.865791][T14316] netlink: 'syz.0.2610': attribute type 17 has an invalid length. [ 368.980220][T14316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.000641][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2610'. [ 369.006727][T14316] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.056936][T14316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.093341][T14320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.472888][T14332] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.481289][T14332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.488680][T14332] IPv6: NLM_F_CREATE should be set when creating new route [ 369.496185][T14332] IPv6: NLM_F_CREATE should be set when creating new route [ 369.632392][T14338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2615'. [ 369.661006][T14338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2615'. [ 369.674449][T14338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2615'. [ 369.684137][T14338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2615'. [ 369.711080][T14342] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2616'. [ 370.664763][T14371] vlan0: entered promiscuous mode [ 371.023905][T14386] netlink: 'syz.2.2624': attribute type 1 has an invalid length. [ 371.055756][T14386] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2624'. [ 371.118504][T14384] syzkaller0: entered promiscuous mode [ 371.152177][T14384] syzkaller0: entered allmulticast mode [ 371.167645][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'. [ 371.436826][T14394] hsr_slave_1 (unregistering): left promiscuous mode [ 371.534131][T14400] syzkaller0: entered promiscuous mode [ 371.539647][T14400] syzkaller0: entered allmulticast mode [ 371.723354][T14407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2632'. [ 372.140028][T14417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.931920][T14436] netlink: 'syz.4.2640': attribute type 3 has an invalid length. [ 373.560013][T14446] netlink: 'syz.2.2643': attribute type 13 has an invalid length. [ 373.579999][T14446] netlink: 'syz.2.2643': attribute type 17 has an invalid length. [ 373.659489][T14446] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.725479][T14446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.344624][T14463] __nla_validate_parse: 1 callbacks suppressed [ 374.344644][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'. [ 374.489374][T14464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2649'. [ 374.499048][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2649'. [ 374.562306][T14462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2646'. [ 374.965020][T14481] netlink: 'syz.1.2652': attribute type 13 has an invalid length. [ 375.001112][T14483] netlink: 'syz.0.2654': attribute type 13 has an invalid length. [ 375.021338][T14481] netlink: 'syz.1.2652': attribute type 17 has an invalid length. [ 375.024886][T14483] netlink: 'syz.0.2654': attribute type 17 has an invalid length. [ 375.083626][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2653'. [ 375.125630][T14483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.170019][T14492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.180434][T14481] gretap0: left promiscuous mode [ 375.272214][T14481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.287745][T14481] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.301923][T14481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.649134][T14479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.834189][T14473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.844880][T14510] bond4: (slave ip6gre1): Releasing backup interface [ 376.196521][T14513] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2660'. [ 376.534892][T14530] syz.2.2666 uses old SIOCAX25GETINFO [ 376.642307][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'. [ 376.831865][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 376.958540][T14551] netlink: 'syz.2.2673': attribute type 4 has an invalid length. [ 377.200701][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2674'. [ 377.309842][T14567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.419296][T14564] vlan0: entered promiscuous mode [ 377.640784][T14580] netlink: 'syz.2.2682': attribute type 13 has an invalid length. [ 377.668845][T14580] netlink: 'syz.2.2682': attribute type 17 has an invalid length. [ 377.689409][T14580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.872090][T14583] netlink: 'syz.3.2684': attribute type 1 has an invalid length. [ 378.014104][T14575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.076466][T14584] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 378.108893][T14596] veth3: entered promiscuous mode [ 378.116388][T14596] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 378.603141][T14616] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2693'. [ 378.628131][T14613] syzkaller0: entered promiscuous mode [ 378.656558][T14613] syzkaller0: entered allmulticast mode [ 379.101152][T14633] tipc: Enabling of bearer rejected, failed to enable media [ 379.265871][T14643] netlink: 'syz.0.2705': attribute type 4 has an invalid length. [ 379.436575][T14654] __nla_validate_parse: 4 callbacks suppressed [ 379.444263][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2703'. [ 379.489468][T14654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.703890][T14666] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2711'. [ 379.713383][T14666] unsupported nla_type 65024 [ 379.830405][T14666] bond5: (slave ip6gretap1): Releasing backup interface [ 379.867379][T14666] bond5: (slave ip6gretap1): the permanent HWaddr of slave - 1e:20:8c:19:11:bd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 379.937731][T14666] bond5: (slave veth3): Releasing backup interface [ 379.974150][T14677] netlink: 'syz.3.2711': attribute type 10 has an invalid length. [ 380.052101][T14677] bond0: (slave wlan1): Opening slave failed [ 380.754373][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'. [ 380.834670][T14699] netlink: 'syz.4.2723': attribute type 1 has an invalid length. [ 380.989561][T14703] netem: change failed [ 381.082719][T14709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.124295][T14709] netlink: 'syz.3.2727': attribute type 1 has an invalid length. [ 381.208559][T14713] netlink: 'syz.3.2727': attribute type 3 has an invalid length. [ 381.289026][T14713] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2727'. [ 381.337506][T14709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 381.416696][T14717] vlan0: entered allmulticast mode [ 381.490351][T14717] bond6: (slave vlan0): Opening slave failed [ 382.034626][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2732'. [ 382.043861][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2733'. [ 382.137015][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'. [ 382.151576][T14737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.266040][T14732] ip6gre1: entered allmulticast mode [ 382.468624][T14748] netlink: 'syz.2.2739': attribute type 13 has an invalid length. [ 382.496141][T14748] netlink: 'syz.2.2739': attribute type 17 has an invalid length. [ 382.516122][T14748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.541987][T14751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2740'. [ 382.555303][T14751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2740'. [ 382.559007][T14752] netlink: 'syz.0.2737': attribute type 13 has an invalid length. [ 382.564496][T14751] netlink: 'syz.1.2740': attribute type 4 has an invalid length. [ 382.604546][T14752] netlink: 'syz.0.2737': attribute type 17 has an invalid length. [ 382.642095][T14752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.745158][T14760] netlink: 'syz.2.2743': attribute type 4 has an invalid length. [ 382.907869][T14744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.093288][T14772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2746'. [ 383.350114][T14777] netem: change failed [ 383.534563][T14783] vlan3: entered promiscuous mode [ 383.690134][T14792] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 384.278808][T14818] netlink: 'syz.2.2761': attribute type 13 has an invalid length. [ 384.286779][T14818] netlink: 'syz.2.2761': attribute type 17 has an invalid length. [ 384.448318][T14826] __nla_validate_parse: 1 callbacks suppressed [ 384.448336][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2761'. [ 384.577883][T14830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.719892][T14818] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.744105][T14818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.839387][T14828] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2764'. [ 385.239453][T14844] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2769'. [ 385.323566][T14845] netlink: 'syz.3.2768': attribute type 1 has an invalid length. [ 385.356004][T14845] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2768'. [ 385.723546][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2773'. [ 385.761806][ C1] ================================================================== [ 385.770005][ C1] BUG: KFENCE: use-after-free write in __xfrm_state_delete+0x696/0xca0 [ 385.770005][ C1] [ 385.780442][ C1] Use-after-free write at 0xffff88823bfe8030 (in kfence-#243): [ 385.788078][ C1] __xfrm_state_delete+0x696/0xca0 [ 385.793277][ C1] xfrm_timer_handler+0x18f/0xa00 [ 385.798380][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 385.803562][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 385.808661][ C1] handle_softirqs+0x283/0x870 [ 385.813466][ C1] __irq_exit_rcu+0xca/0x1f0 [ 385.818042][ C1] irq_exit_rcu+0x9/0x30 [ 385.822270][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 385.827998][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 385.833986][ C1] [ 385.836392][ C1] kfence-#243: 0xffff88823bfe8fe0-0xffff88823bfe8ff7, size=24, cache=kmalloc-32 [ 385.836392][ C1] [ 385.847845][ C1] allocated by task 14585 on cpu 0 at 378.032640s (7.815203s ago): [ 385.855768][ C1] kmem_cache_free+0x166/0x400 [ 385.860530][ C1] task_work_run+0x1d4/0x260 [ 385.865109][ C1] exit_to_user_mode_loop+0xec/0x110 [ 385.870490][ C1] do_syscall_64+0x2bd/0x3b0 [ 385.875071][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.880951][ C1] [ 385.883261][ C1] freed by task 5867 on cpu 0 at 378.062508s (7.820752s ago): [ 385.890720][ C1] slab_free_after_rcu_debug+0x60/0x2a0 [ 385.896336][ C1] rcu_core+0xca8/0x1770 [ 385.900566][ C1] handle_softirqs+0x283/0x870 [ 385.905346][ C1] __irq_exit_rcu+0xca/0x1f0 [ 385.909921][ C1] irq_exit_rcu+0x9/0x30 [ 385.914231][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 385.919941][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 385.925901][ C1] lock_release+0x2b5/0x3e0 [ 385.930392][ C1] unwind_next_frame+0x19a9/0x2390 [ 385.935504][ C1] arch_stack_walk+0x11c/0x150 [ 385.940253][ C1] stack_trace_save+0x9c/0xe0 [ 385.945001][ C1] kasan_save_track+0x3e/0x80 [ 385.949666][ C1] __kasan_slab_alloc+0x6c/0x80 [ 385.954591][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 385.960252][ C1] anon_vma_fork+0x1f1/0x500 [ 385.964859][ C1] dup_mmap+0x9eb/0x1ac0 [ 385.969289][ C1] copy_mm+0x13c/0x4b0 [ 385.973400][ C1] copy_process+0x1706/0x3c00 [ 385.978365][ C1] kernel_clone+0x21e/0x840 [ 385.982876][ C1] __x64_sys_clone+0x18b/0x1e0 [ 385.987645][ C1] do_syscall_64+0xfa/0x3b0 [ 385.992200][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.998174][ C1] [ 386.000524][ C1] CPU: 1 UID: 0 PID: 14839 Comm: syz.3.2768 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 386.012320][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.022383][ C1] RIP: 0010:__xfrm_state_delete+0x696/0xca0 [ 386.028321][ C1] Code: 74 34 e8 dd 3c a0 f7 48 83 c3 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 4a a8 03 f8 <4c> 89 3b eb 0c e8 b0 3c a0 f7 eb 34 e8 a9 3c a0 f7 48 b8 00 00 00 [ 386.048101][ C1] RSP: 0000:ffffc900052479f0 EFLAGS: 00010246 [ 386.054164][ C1] RAX: 1ffff110477fd006 RBX: ffff88823bfe8030 RCX: dffffc0000000000 [ 386.062122][ C1] RDX: 0000000000000100 RSI: 0000000004000000 RDI: ffff88805763aaa8 [ 386.070076][ C1] RBP: 1ffff1100aec7556 R08: 0000000000000003 R09: 0000000000000004 [ 386.078119][ C1] R10: dffffc0000000000 R11: fffff52000a48f2c R12: ffff88805763aab0 [ 386.086086][ C1] R13: ffff888030d9c880 R14: ffff88805763aa80 R15: ffff8880277d8018 [ 386.094129][ C1] FS: 000055557def2500(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 386.103231][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.109800][ C1] CR2: ffff88823bfe8030 CR3: 00000000787de000 CR4: 00000000003526f0 [ 386.117768][ C1] Call Trace: [ 386.121121][ C1] [ 386.124051][ C1] xfrm_timer_handler+0x18f/0xa00 [ 386.129168][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 386.134814][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 386.140708][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.145897][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 386.151866][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.158182][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 386.163819][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 386.169406][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 386.174755][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 386.180504][ C1] ? read_tsc+0x9/0x20 [ 386.184673][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 386.190474][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 386.195579][ C1] handle_softirqs+0x283/0x870 [ 386.200328][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 386.205079][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 386.210390][ C1] __irq_exit_rcu+0xca/0x1f0 [ 386.214968][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 386.220327][ C1] irq_exit_rcu+0x9/0x30 [ 386.224575][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 386.230207][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.236187][ C1] RIP: 0033:0x7fbbea44d9e7 [ 386.240591][ C1] Code: 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 22 46 35 00 89 f0 4c 8d 05 19 26 35 00 <89> c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 [ 386.260327][ C1] RSP: 002b:00007ffe528c88f8 EFLAGS: 00000246 [ 386.266418][ C1] RAX: 000000008223ac95 RBX: 00007fbbeb2e5720 RCX: 0000000000076beb [ 386.274379][ C1] RDX: ffffffff8223a083 RSI: ffffffff8223ac95 RDI: 0000000000000016 [ 386.282430][ C1] RBP: ffffffff8223ac95 R08: 00007fbbea7a0000 R09: 00007fbbea7a2000 [ 386.290411][ C1] R10: 000000008223ac99 R11: 0000000000000016 R12: 0000000000000016 [ 386.298469][ C1] R13: 0000000000000000 R14: ffffffff8223a083 R15: 0000000000076beb [ 386.306535][ C1] ? should_fail_alloc_page+0x13/0x100 [ 386.311998][ C1] ? isolate_movable_ops_page+0xb15/0x1330 [ 386.317804][ C1] ? should_fail_alloc_page+0x13/0x100 [ 386.323346][ C1] ? isolate_movable_ops_page+0xb15/0x1330 [ 386.329327][ C1] [ 386.332331][ C1] ================================================================== [ 386.340475][ C1] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 386.348371][ C1] CPU: 1 UID: 0 PID: 14839 Comm: syz.3.2768 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 386.360101][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.370247][ C1] Call Trace: [ 386.373522][ C1] [ 386.376442][ C1] dump_stack_lvl+0x99/0x250 [ 386.381030][ C1] ? __asan_memcpy+0x40/0x70 [ 386.385624][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.390942][ C1] ? __pfx__printk+0x10/0x10 [ 386.395564][ C1] vpanic+0x281/0x750 [ 386.399647][ C1] ? __pfx_vpanic+0x10/0x10 [ 386.404208][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 386.409530][ C1] panic+0xb9/0xc0 [ 386.413263][ C1] ? __pfx_panic+0x10/0x10 [ 386.417686][ C1] ? __pfx__printk+0x10/0x10 [ 386.422285][ C1] check_panic_on_warn+0x89/0xb0 [ 386.427219][ C1] kfence_report_error+0x748/0xa40 [ 386.432337][ C1] ? __pfx_kfence_report_error+0x10/0x10 [ 386.438242][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 386.443703][ C1] ? xfrm_timer_handler+0x18f/0xa00 [ 386.448931][ C1] ? __hrtimer_run_queues+0x52c/0xc60 [ 386.454325][ C1] ? hrtimer_run_softirq+0x187/0x2b0 [ 386.459629][ C1] ? handle_softirqs+0x283/0x870 [ 386.464573][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 386.469405][ C1] ? irq_exit_rcu+0x9/0x30 [ 386.473845][ C1] ? sysvec_apic_timer_interrupt+0x57/0xc0 [ 386.479756][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.485944][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 386.491330][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 386.497279][ C1] ? search_bpf_extables+0x26/0x3f0 [ 386.502488][ C1] kfence_handle_page_fault+0x358/0x4d0 [ 386.508042][ C1] page_fault_oops+0x19f/0xa10 [ 386.512800][ C1] ? __pfx_fixup_exception+0x10/0x10 [ 386.518092][ C1] ? __pfx_page_fault_oops+0x10/0x10 [ 386.523388][ C1] ? is_prefetch+0x403/0x640 [ 386.527977][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 386.533306][ C1] ? __pfx_is_prefetch+0x10/0x10 [ 386.538254][ C1] ? sched_clock_cpu+0x74/0x430 [ 386.543234][ C1] __bad_area_nosemaphore+0x11a/0x780 [ 386.548623][ C1] ? __lock_acquire+0xab9/0xd20 [ 386.553590][ C1] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 386.559501][ C1] ? do_kern_addr_fault+0x30/0x80 [ 386.564550][ C1] exc_page_fault+0xc3/0xf0 [ 386.569104][ C1] asm_exc_page_fault+0x26/0x30 [ 386.573953][ C1] RIP: 0010:__xfrm_state_delete+0x696/0xca0 [ 386.579844][ C1] Code: 74 34 e8 dd 3c a0 f7 48 83 c3 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 4a a8 03 f8 <4c> 89 3b eb 0c e8 b0 3c a0 f7 eb 34 e8 a9 3c a0 f7 48 b8 00 00 00 [ 386.599704][ C1] RSP: 0000:ffffc900052479f0 EFLAGS: 00010246 [ 386.605764][ C1] RAX: 1ffff110477fd006 RBX: ffff88823bfe8030 RCX: dffffc0000000000 [ 386.613735][ C1] RDX: 0000000000000100 RSI: 0000000004000000 RDI: ffff88805763aaa8 [ 386.621786][ C1] RBP: 1ffff1100aec7556 R08: 0000000000000003 R09: 0000000000000004 [ 386.629760][ C1] R10: dffffc0000000000 R11: fffff52000a48f2c R12: ffff88805763aab0 [ 386.637723][ C1] R13: ffff888030d9c880 R14: ffff88805763aa80 R15: ffff8880277d8018 [ 386.645728][ C1] xfrm_timer_handler+0x18f/0xa00 [ 386.650795][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 386.656398][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 386.662379][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.667604][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 386.673790][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.680154][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 386.685926][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 386.691571][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 386.696904][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 386.702626][ C1] ? read_tsc+0x9/0x20 [ 386.706701][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 386.712515][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 386.717622][ C1] handle_softirqs+0x283/0x870 [ 386.722380][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 386.727142][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 386.732432][ C1] __irq_exit_rcu+0xca/0x1f0 [ 386.737011][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 386.742297][ C1] irq_exit_rcu+0x9/0x30 [ 386.746550][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 386.752205][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.758539][ C1] RIP: 0033:0x7fbbea44d9e7 [ 386.762959][ C1] Code: 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 22 46 35 00 89 f0 4c 8d 05 19 26 35 00 <89> c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 [ 386.782839][ C1] RSP: 002b:00007ffe528c88f8 EFLAGS: 00000246 [ 386.789000][ C1] RAX: 000000008223ac95 RBX: 00007fbbeb2e5720 RCX: 0000000000076beb [ 386.797432][ C1] RDX: ffffffff8223a083 RSI: ffffffff8223ac95 RDI: 0000000000000016 [ 386.805405][ C1] RBP: ffffffff8223ac95 R08: 00007fbbea7a0000 R09: 00007fbbea7a2000 [ 386.813411][ C1] R10: 000000008223ac99 R11: 0000000000000016 R12: 0000000000000016 [ 386.821372][ C1] R13: 0000000000000000 R14: ffffffff8223a083 R15: 0000000000076beb [ 386.829340][ C1] ? should_fail_alloc_page+0x13/0x100 [ 386.834806][ C1] ? isolate_movable_ops_page+0xb15/0x1330 [ 386.840638][ C1] ? should_fail_alloc_page+0x13/0x100 [ 386.846124][ C1] ? isolate_movable_ops_page+0xb15/0x1330 [ 386.852060][ C1] [ 386.855480][ C1] Kernel Offset: disabled [ 386.860311][ C1] Rebooting in 86400 seconds..