last executing test programs: 3.623023107s ago: executing program 1 (id=1311): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="4700000001003f", 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "b9e6662d9f73b415", "d2f196db51383e1043f3eb25891a47ddc63f2e30c0d7b182bd0db361cbaa0951", "7272c817", "ca82365b88dc8313"}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x40, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0x4040040) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0xc6e9f000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xba2e440be45f5a8f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @value=r2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='svcrdma_send_err\x00', r2, 0x0, 0x4033}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r2, 0xffffe000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4bfb41f1", @ANYRES16=r7, @ANYBLOB="0300"/17], 0x1c}}, 0x4000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) 2.196407566s ago: executing program 0 (id=1326): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="32e9e2ea96a40c15d21508205a6760df4accede349e80480934cd518721af6b4396a53fee791c327f124133cbdcab939e100afa75a27d70e0ecb151074d25fd5be4684bb42a87055fa3a2afaddc0df9e62b738d48530ec97b52257a6b643aee689a0630dc10b547dcf9f469f", @ANYRES64=0x0], 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x48, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc8d0}, 0x4000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x61d8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r4, r4, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r6}, 0x38) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a800000800", @ANYRES32=r8], 0x8c}, 0x1, 0xba01}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r6}, 0x38) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0xd}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x1000000000000041) 2.072509294s ago: executing program 1 (id=1329): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) 1.891371784s ago: executing program 1 (id=1332): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = socket(0x10, 0xa, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRES64=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000047c0)=r2, 0x4) write(r1, &(0x7f00000000c0)="240000005a001f021007f4f9002304000a04", 0x12) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f00000052c0)={'broute\x00', 0x0, 0x0, 0x0, [0x9573, 0x1, 0x3, 0x5, 0x54a, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(0x0, 0x0, 0x2) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x10, 0x4, 0x0, 0x9, 0x48, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1, {[@end, @timestamp_addr={0x44, 0xc, 0x2e, 0x1, 0x2, [{@multicast2, 0x7f}]}, @timestamp={0x44, 0xc, 0xe4, 0x0, 0x7, [0xff, 0x6]}, @noop, @lsrr={0x83, 0x7, 0xe6, [@dev={0xac, 0x14, 0x14, 0x3a}]}, @rr={0x7, 0xb, 0xc3, [@remote, @multicast1]}]}}, @address_request}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000180)=0x60, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) 1.539257489s ago: executing program 0 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="300000003e000701feffffff00000014017c0000040042800c00018006000600800a00000c00028008001480040015"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008840) 1.448190287s ago: executing program 4 (id=1337): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x40) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0xf, 0x6, 0xe, 0x20, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x8, 0x5, 0x2}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x60, r6, 0x300, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004804}, 0xc894) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000340)='nr0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bfa200000000000007020000f8fffffeb703000008000000b70400000000a200850000000300000095"], &(0x7f00000008c0)='syzkaller\x00', 0x2, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000500)) 1.316447984s ago: executing program 0 (id=1340): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x401) syz_genetlink_get_family_id$wireguard(0xfffffffffffffffc, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073017f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x5a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x24, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x40, 0x5}, @window={0x3, 0x3, 0x80}]}}}}}}}}, 0x0) 1.244574874s ago: executing program 4 (id=1341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000600)={0x1, 0x3, 0x1000, 0xc2, &(0x7f0000000500)="005aad753c6091353be11df28e3a6d7a5687562bca05a50f48163d22342d0838ebad92e5ec8fb4bf7eda4c22bad476ca8499d5480ede333c86fafdcb2842b12cc801e0f2669521436af4f5692f06880b67209662ee03238c9109f67c9c9e805859159ac12338afa4d8a4c3d02cdceeb11ef78c4e616e9b7064f9c7799ca40bc84fb01e3d1a773e34e9f774f6a1e76a7e6a0e07dbda69f2079c995e940a2fd2fa3b25a81741416929fe6beba8c9f8445a630d967c8791712cd57880f3ce39aab0d640", 0x5b, 0x0, &(0x7f0000000240)="3389a3c805d2e7bdbfa595936ef688a96648a330eba2c89b9d34010987092352aefa6bbdef3200d0ff851e818cb6e2951ae8a921e6d78bd599a75e07db1e2ebf82b5acec15ee3e25d77e59c532f17a127ac6a68c70d58f59447fff"}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x63}}, 0xd8}}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) (rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500180000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010"], 0x4c}}, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r4, &(0x7f0000000300), 0x0}, 0x20) 1.207456749s ago: executing program 0 (id=1342): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x80000, 0x806028) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYRES64=r0], 0x6c}}, 0x840) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x8a6a, 0xfca2}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0xff07, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], &(0x7f00000002c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x801}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0xf8, 0x9, 0xffff, 0x1800, 0xffffffffffffffff, 0xd, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a0000000800000004000000050000", @ANYRES32=r2, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) 1.126791378s ago: executing program 2 (id=1343): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80800) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x1000) accept$phonet_pipe(r3, 0x0, &(0x7f0000000140)) r4 = socket$inet6(0xa, 0x2, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000004c0)={@private2, r5}, 0x14) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xe}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x200}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_ext={0x1c, 0x20, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x1a, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000017c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x2, 0x4, 0x8, 0x400}, 0x10, 0x35e1, r6, 0x4, 0x0, &(0x7f0000001840)=[{0x2, 0x3, 0xf, 0x8}, {0x0, 0x5, 0x3, 0x5}, {0x2, 0x2, 0x9, 0x7}, {0x4, 0x1, 0xd, 0x3}], 0x10, 0x1}, 0x94) write(r4, &(0x7f0000001940)="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", 0x1000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x38, r7, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}}, 0x44010) close(r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x1c, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000002dc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002c00)={0x150, r7, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x128, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x51}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x1b, 0x36, 0x18, 0x60, 0x4, 0x1, 0x30, 0xc, 0x48, 0x4, 0x18, 0x24, 0x9, 0x3, 0x12, 0x4, 0x1b, 0xb, 0xc, 0x1, 0x50, 0x60, 0x18, 0x6, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xe, 0x0, 0x101, 0x100, 0x58c7, 0x5, 0x179e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe0, 0x1000, 0xfff7, 0x1, 0x7, 0x7, 0x9, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x64}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x74}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) syz_genetlink_get_family_id$devlink(&(0x7f0000002e00), r6) write$tun(r6, &(0x7f0000002e40)={@void, @void, @ipv6=@dccp_packet={0x0, 0x6, "ec23c1", 0x10c0, 0x21, 0xff, @empty, @empty, {[@routing={0x8, 0x4, 0x1, 0x2, 0x0, [@empty, @mcast1]}, @hopopts={0x32, 0x1, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0xd37}, @pad1]}, @fragment={0x2, 0x0, 0x8, 0x0, 0x0, 0x9, 0x67}, @srh={0x16, 0xc, 0x4, 0x6, 0x3, 0x10, 0x8001, [@mcast1, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0xc, 0x0, 0x0, 0xa, 0x5, "feea6a", 0x2, "45eb55"}, "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"}}}}, 0x10e8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003f80), r6) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000004340)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004300)={&(0x7f0000003fc0)={0x304, r11, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd10c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8d1a}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9fa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x55b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbfc8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @private1, 0x40}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100000}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe32}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4d, 0x3, "1327e6808dba1b4fbf7a6d201e005316e498cc177b89b1d51feba59e6b0b488403a34ee9f65d52cb5e400df9770cd459f519e03ddbdb0e6b0310656a6250fd6188dfdfde4844c9c004"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x68190}, 0x0) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000004380), &(0x7f00000043c0)=0x4) syz_genetlink_get_family_id$smc(&(0x7f0000004400), r1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000004440)=0x400, 0x4) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000044c0)={0x7, &(0x7f0000004480)=[{0x800, 0x7, 0x2, 0x7ff}, {0x9, 0x6, 0xa1, 0xa}, {0x7fff, 0x2, 0x7f, 0xfffffff8}, {0x6, 0x4, 0x0, 0x1}, {0x38, 0xfc, 0xc, 0xfffffffb}, {0x9, 0x5d, 0x9, 0xb5}, {0x2, 0x9, 0x7, 0x5}]}) 1.059892944s ago: executing program 4 (id=1345): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 906.88455ms ago: executing program 4 (id=1346): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x3}}, 0x10) 846.64677ms ago: executing program 2 (id=1347): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 702.925386ms ago: executing program 3 (id=1348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r1, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) bind$can_raw(r3, &(0x7f0000000080)={0x1d, 0x0, 0x16}, 0x10) (async) bind$can_raw(r3, &(0x7f0000000080)={0x1d, 0x0, 0x16}, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001fc0)=@filter={'filter\x00', 0x42, 0x4, 0x520, 0xffffffff, 0x0, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x488, 0x488, 0x488, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6b07000000000000005b4809088400ed0000006c0000040500"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @multicast2, 0x0, 0x0, 'bond_slave_1\x00', 'batadv_slave_1\x00', {0x836b636e4bafbd70}, {}, 0x62, 0x2, 0x6}, 0x287, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0xd, [{0x5, 0x7, 0x40, 0x1000}, {0x2, 0x6, 0x10, 0x1}, {0x9, 0x3, 0x81, 0x3}, {0x8, 0x41, 0x4, 0x1}, {0x6, 0x6, 0xe, 0x1}, {0x8001, 0x10, 0x1, 0x4}, {0xa2, 0x0, 0x7f, 0xa}, {0x7fff, 0x5, 0x5, 0x3}, {0x3ff, 0xe8, 0x2, 0x80}, {0x5, 0x9, 0x7}, {0x4, 0x40, 0x4}, {0xfffb, 0x1, 0xf3, 0x6}, {0x3, 0x8, 0x6, 0x2}, {0x3, 0x8, 0x3, 0x10000}, {0x31, 0x80, 0xd, 0x800}, {0xc, 0xff, 0x1c, 0x4}, {0x6, 0x0, 0xc, 0xf}, {0x7, 0xb5, 0x6, 0x80576}, {0x3, 0xc, 0x6, 0x9}, {0x2, 0x8, 0xf8, 0xfffffff2}, {0x7ff, 0xca, 0xc, 0x4e14}, {0x76, 0x7, 0xcb, 0x7}, {0x8, 0x1, 0x1c, 0xfff}, {0x1, 0x2, 0x2}, {0x0, 0x3, 0x80, 0x9}, {0x400, 0x0, 0x4, 0x8}, {0x1, 0x1, 0x1, 0xa}, {0xc7b8, 0x57, 0xfc, 0x6}, {0x7, 0x7, 0x3, 0x8}, {0x10, 0x7, 0xd, 0xfffffffe}, {0x8, 0xfc, 0x2, 0x6}, {0x3, 0x9, 0x6, 0x9}, {0x2, 0x8, 0x8}, {0x2f1c, 0xfd, 0x8}, {0x400, 0x0, 0x4, 0x7}, {0x7d, 0x8, 0x4, 0x1}, {0x4, 0x1a, 0x80, 0x7}, {0x1, 0x4, 0x8, 0xfffff000}, {0x1ff, 0x2, 0x9, 0xc}, {0xc30f, 0x1, 0x3, 0x3}, {0x4, 0x1, 0xbf}, {0x7, 0xc, 0x5, 0x3}, {0x2, 0x1, 0x5, 0x1}, {0xdf, 0x3, 0x4, 0xfa98}, {0x800, 0x3, 0x5, 0x6}, {0x200, 0x9, 0x81, 0x1}, {0x7, 0x0, 0x6d}, {0x3, 0x4, 0xea, 0xa0c4}, {0x40, 0x38, 0x3, 0x91e2}, {0x9, 0x91, 0xfd, 0xfffff001}, {0x2, 0x6, 0x10, 0xfffffff9}, {0x5, 0x1, 0x4, 0xd8b}, {0x6, 0x2, 0x9, 0x3}, {0x1, 0xe0, 0x5, 0x6}, {0x2, 0x8, 0x1, 0x6}, {0x5, 0xfb, 0x0, 0x9}, {0x100, 0xf8, 0xf5, 0xfd}, {0xff, 0xf1, 0x0, 0x1ff}, {0x5, 0x1, 0x9c, 0x8}, {0x1000, 0xe, 0x2, 0x3}, {0xa, 0x1, 0x2, 0x9}, {0x5e1, 0x8e, 0x7, 0x5}, {0x6, 0x8, 0xe, 0x6}, {0x9, 0x67, 0xfd, 0x8}], {0x2}}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x34, "9c4b4435910fbfcf24e0fae0e0bfd3b900"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001fc0)=@filter={'filter\x00', 0x42, 0x4, 0x520, 0xffffffff, 0x0, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x488, 0x488, 0x488, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6b07000000000000005b4809088400ed0000006c0000040500"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @multicast2, 0x0, 0x0, 'bond_slave_1\x00', 'batadv_slave_1\x00', {0x836b636e4bafbd70}, {}, 0x62, 0x2, 0x6}, 0x287, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0xd, [{0x5, 0x7, 0x40, 0x1000}, {0x2, 0x6, 0x10, 0x1}, {0x9, 0x3, 0x81, 0x3}, {0x8, 0x41, 0x4, 0x1}, {0x6, 0x6, 0xe, 0x1}, {0x8001, 0x10, 0x1, 0x4}, {0xa2, 0x0, 0x7f, 0xa}, {0x7fff, 0x5, 0x5, 0x3}, {0x3ff, 0xe8, 0x2, 0x80}, {0x5, 0x9, 0x7}, {0x4, 0x40, 0x4}, {0xfffb, 0x1, 0xf3, 0x6}, {0x3, 0x8, 0x6, 0x2}, {0x3, 0x8, 0x3, 0x10000}, {0x31, 0x80, 0xd, 0x800}, {0xc, 0xff, 0x1c, 0x4}, {0x6, 0x0, 0xc, 0xf}, {0x7, 0xb5, 0x6, 0x80576}, {0x3, 0xc, 0x6, 0x9}, {0x2, 0x8, 0xf8, 0xfffffff2}, {0x7ff, 0xca, 0xc, 0x4e14}, {0x76, 0x7, 0xcb, 0x7}, {0x8, 0x1, 0x1c, 0xfff}, {0x1, 0x2, 0x2}, {0x0, 0x3, 0x80, 0x9}, {0x400, 0x0, 0x4, 0x8}, {0x1, 0x1, 0x1, 0xa}, {0xc7b8, 0x57, 0xfc, 0x6}, {0x7, 0x7, 0x3, 0x8}, {0x10, 0x7, 0xd, 0xfffffffe}, {0x8, 0xfc, 0x2, 0x6}, {0x3, 0x9, 0x6, 0x9}, {0x2, 0x8, 0x8}, {0x2f1c, 0xfd, 0x8}, {0x400, 0x0, 0x4, 0x7}, {0x7d, 0x8, 0x4, 0x1}, {0x4, 0x1a, 0x80, 0x7}, {0x1, 0x4, 0x8, 0xfffff000}, {0x1ff, 0x2, 0x9, 0xc}, {0xc30f, 0x1, 0x3, 0x3}, {0x4, 0x1, 0xbf}, {0x7, 0xc, 0x5, 0x3}, {0x2, 0x1, 0x5, 0x1}, {0xdf, 0x3, 0x4, 0xfa98}, {0x800, 0x3, 0x5, 0x6}, {0x200, 0x9, 0x81, 0x1}, {0x7, 0x0, 0x6d}, {0x3, 0x4, 0xea, 0xa0c4}, {0x40, 0x38, 0x3, 0x91e2}, {0x9, 0x91, 0xfd, 0xfffff001}, {0x2, 0x6, 0x10, 0xfffffff9}, {0x5, 0x1, 0x4, 0xd8b}, {0x6, 0x2, 0x9, 0x3}, {0x1, 0xe0, 0x5, 0x6}, {0x2, 0x8, 0x1, 0x6}, {0x5, 0xfb, 0x0, 0x9}, {0x100, 0xf8, 0xf5, 0xfd}, {0xff, 0xf1, 0x0, 0x1ff}, {0x5, 0x1, 0x9c, 0x8}, {0x1000, 0xe, 0x2, 0x3}, {0xa, 0x1, 0x2, 0x9}, {0x5e1, 0x8e, 0x7, 0x5}, {0x6, 0x8, 0xe, 0x6}, {0x9, 0x67, 0xfd, 0x8}], {0x2}}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x34, "9c4b4435910fbfcf24e0fae0e0bfd3b900"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) 702.751731ms ago: executing program 2 (id=1349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc800) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, &(0x7f00000000c0)=0x1e) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, r2, 0x1, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 700.178031ms ago: executing program 4 (id=1350): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="300000003e000701feffffff00000015017c0000040042800c00018006000600800a00000c00028008001480040015"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008840) 636.071676ms ago: executing program 2 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x30}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x30}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003ec0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3}}, @TCA_FLOWER_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003ec0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3}}, @TCA_FLOWER_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 528.312262ms ago: executing program 3 (id=1352): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@random={0x1}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x30c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x45}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "0fb639b10e9eea9bdf69dedf50efd63079ee6339aa41eb1848e09d87f5fa"}}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "b844f16bb3ef449b3f1c68292b979648935ccad23d966bbec5fc1c6f10fe222306ebd5937619e76cde87a9460936c01c43557d9bbf0a5b9d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "522cd8a78133e546547e9541ee7fdc2462700dabbd2fff5ebc8820b9bf775ac2e91091"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff5325}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x918}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3bc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x39b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x171}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20049000) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0x9) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) 526.121942ms ago: executing program 4 (id=1353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)=ANY=[], 0x20}}, 0x0) read(r1, &(0x7f00000002c0)=""/34, 0x22) 458.463699ms ago: executing program 3 (id=1354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0xb, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x200}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004004}, 0x24000010) 431.850672ms ago: executing program 1 (id=1355): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0x4) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00$'], 0x50}}], 0x1, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x61d9, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)={0x10000000}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) 320.50569ms ago: executing program 2 (id=1356): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028005000100060000"], 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3f}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x9804) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) splice(r3, &(0x7f0000000380)=0xe, r3, &(0x7f00000003c0)=0x5, 0x8001, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0x4, 0xee47, 0x4, 0x101}}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000002) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8004) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000005d80)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "5723d3"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x400c0) recvmmsg(r6, &(0x7f0000005b40)=[{{&(0x7f0000000700)=@isdn, 0x80, &(0x7f0000000600)=[{&(0x7f0000000780)=""/156, 0x9c}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f00000008c0)=""/183, 0xb7}], 0x4, &(0x7f0000005e40)=""/187, 0xbb}, 0x2}, {{&(0x7f0000000a40)=@ieee802154, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000bc0)=""/204, 0xcc}, {&(0x7f0000000ac0)=""/96, 0x60}, {&(0x7f0000000680)=""/50, 0x32}, {&(0x7f0000000b40)=""/27, 0x1b}, {&(0x7f0000000cc0)=""/118, 0x76}, {&(0x7f0000000d40)=""/220, 0xdc}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/237, 0xed}], 0x8, &(0x7f0000000fc0)=""/110, 0x6e}, 0x3}, {{&(0x7f0000001040)=@nl, 0x80, &(0x7f00000034c0)=[{&(0x7f00000010c0)=""/114, 0x72}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000001140)=""/47, 0x2f}, {&(0x7f0000001180)=""/61, 0x3d}, {&(0x7f00000011c0)=""/97, 0x61}, {&(0x7f0000003300)=""/235, 0xeb}, {&(0x7f0000003400)=""/162, 0xa2}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x9}, 0x7}, {{&(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005880)=[{&(0x7f0000003580)=""/33, 0x21}, {&(0x7f00000035c0)=""/108, 0x6c}, {&(0x7f0000003640)=""/110, 0x6e}, {&(0x7f0000005740)=""/133, 0x85}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f00000036c0)=""/63, 0x3f}], 0x6}, 0xc}, {{&(0x7f0000005900)=@ax25={{0x3, @default}, [@remote, @default, @bcast, @null, @rose, @netrom, @rose, @netrom]}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005980)=""/190, 0xbe}], 0x1, &(0x7f0000005a80)=""/165, 0xa5}, 0x24bf}], 0x5, 0x40, &(0x7f0000000540)) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)={@mcast1, @loopback}) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x40000, @private0}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x82, &(0x7f00000002c0)="1af3050000f20800", 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x17, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18400000ffffffff00170000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 318.866244ms ago: executing program 3 (id=1357): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0x10, 0x10001, 0x11}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000012c0)=[0xffffffffffffffff, r2, 0x1, 0x1], &(0x7f0000001300)=[{0x5, 0x1, 0x5, 0x9}], 0x10, 0xb3}, 0x94) (async) r5 = accept(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000080)=0x80) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xed, "8ce9f7bb941747acf20984f4e16023a11149ad8acd3dc578d3eabab4a9ffc539e8ad9d82dc92ec7e49c2e8adcd3337945cbe277c7a85a43270bdfab8c91b35e53f8704b566a6a40e035268175547cff1a5f34daf5d0aad936ae8732214c810432970fa79325512febc11c6949eb05e648191e65aee4c04701f601c7f730c18b0911b73953ce031a9177ec5c3a829e5656c6efc9f9ed8196fa94b4d52fe5e9e9dadf4810aadaa9ccc9b937fda1be440a15737cb077e265f6c55b60745009263cf5ca60ccb661385892edc1b84ad04b8f187da004da6216619904357a706ad2e33666b5f22ca25902cd68058b303"}, &(0x7f00000002c0)=0xf5) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000300)={r6, 0x5, 0x10}, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r7, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b347d4211a17c1d89ee99b6f73ac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@fwd={0x7}, @func_proto, @var={0x4, 0x0, 0x0, 0xe, 0x4}, @func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x0, 0x2e, 0x2e]}}, 0x0, 0x55}, 0x20) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r1, 0x2e, 0x1, 0xd12, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5c49209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378ad8f6afb0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3826ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r12}, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="150000000000b479295255b7d82245c43c08979d5322469018561471fe92920e658f3238b175e6670344bc366d30f4eecf693e1d1f016248fcc07b56e3bf06712d047de2fb33e41851ee738eafd72fbfff848a791cd00e0000e0f9d16061e0d27f2161cbfbe71bc0d329f1232f4f9a22524644e3bcc03e76ee0d1bb4cbddf1ae38c1efc831d133d4430b7627f7e38d6511a1b6eefcde79b69bed08ca52363d19ba7bd89a9ff24a6164095035155dfd00dc32cfc4dcedf399d59a9ebb1b8d6a92991b18425052ed80d4e03c8f8e1edb4de0c8346a43b41a03685534c91033c23da9b3d0d53853175f3a737211dca6ddc6a919e1b244e6cfd0b9302c6171175784d293e7b07f25ac1650615eeb909fb7f30b7837bc", @ANYRES32=r12, @ANYBLOB, @ANYRES64=r11], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001400)={@ifindex, r4, 0x2f, 0x2008, 0x0, @value, @void, @void, @void, r11}, 0x20) (async) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="07000000000000feff00bab50fbf370200000036fd05"], 0x44}, 0x1, 0x0, 0x0, 0x4048801}, 0x0) 223.917144ms ago: executing program 0 (id=1358): r0 = socket(0xa, 0x3, 0x3a) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 192.22434ms ago: executing program 3 (id=1359): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f0000000040)=0x6e) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="020000"], 0x10) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 140.715881ms ago: executing program 1 (id=1360): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 58.365952ms ago: executing program 1 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001240)=ANY=[@ANYBLOB="10020000120001002dbd7000ffdbdf25fc020000000000000000000000000000000004d514006c"], 0x210}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x68, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x8}, {0x8000}}}]}]}]}}]}, 0x68}}, 0x20040054) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r1, 0x9, 0x9, 0xfffffffffffffff9}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x5, 0x6, 0x2, 0x20, r5, 0xf, '\x00', r6, r5, 0x1, 0x5, 0x5, 0x4}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@jmp={0x5, 0x0, 0x2, 0x9, 0x8, 0x8, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000180)="a0cdd797c3fd78ff94786f133346", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket(0x2a, 0x3, 0x28) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000000200000008"], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r12, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r13, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r13, 0x80) accept4(r13, &(0x7f0000000780)=@x25, 0x0, 0x80000) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) 48.83521ms ago: executing program 2 (id=1362): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xbda6}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast1, @private}, &(0x7f00000004c0)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket(0x2a, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r6, 0x0, 0x0, 0x40000040, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) socket(0x10, 0x80002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1000, 0x0, 0x66, 0x8054, r0, 0x8, '\x00', r1, r2, 0x4, 0x1, 0x3, 0x5, @value=r8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r9, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f00000000c0)=""/25, &(0x7f0000000080)=0x17) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f000000e0c0)={0x0, 0x0, &(0x7f000000e080)={&(0x7f000000e000)=@ipv6_newaddrlabel={0x1c, 0x1e, 0x1}, 0x1c}}, 0x0) 11.410813ms ago: executing program 3 (id=1363): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="851000000400000095f7ffffff0000001800000000000000000000000000000085100000feffffff85100000fcffffff"], &(0x7f00000000c0)='GPL\x00'}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xe, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000bca328285d904ca6d5be1640f8c68de3dc7f03efb3671826042b8779c5304c03eee2d02ad915f5408ee880a9312ba0c516f5bd90ffffffff485a9bbbd73bed1f1058c5f58338c1e8b8b8d762c50c330a7b2bfe68504a98fc39ed7e5b9ec555bda6d312ab7981f23822c7f6f82e08b58340698c8d380f58ec7a59076b42bacad89397387ecc2fe0dd7c309a0f8f786dffd49ca8f933b1f400000000b3d6", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000bca328285d904ca6d5be1640f8c68de3dc7f03efb3671826042b8779c5304c03eee2d02ad915f5408ee880a9312ba0c516f5bd90ffffffff485a9bbbd73bed1f1058c5f58338c1e8b8b8d762c50c330a7b2bfe68504a98fc39ed7e5b9ec555bda6d312ab7981f23822c7f6f82e08b58340698c8d380f58ec7a59076b42bacad89397387ecc2fe0dd7c309a0f8f786dffd49ca8f933b1f400000000b3d6", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r5 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000640)=ANY=[@ANYBLOB='b 0:4\t'], 0xa) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x11}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000480), 0x0}}, @mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0}}], 0xb0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macvlan1\x00'}) socket(0x10, 0x6, 0x80000001) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000580)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @mcast2, 0x2000000, 0x0, 0x407d, 0xb00, 0x4, 0x8302d0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000ff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 0 (id=1364): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0x9, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0xfff, 0x101, 0xffff7fff, 0x5, 0xd60, 0x400, 0x4}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'gre0\x00'}}, 0x1e) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x34, r3, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x0) getsockname(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000180)=0x80) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000001c00010001000000"], 0x1c}}, 0x2004c800) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000020301080000000000df0000000000000900020000000002ec"], 0x20}}, 0x44800) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x1f, 0x84, 0x47}, 0x2c) close(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000200)={0x1}, 0x1) kernel console output (not intermixed with test programs): ffffffffda RBX: 00007f50d29b5fa0 RCX: 00007f50d278e929 [ 117.952398][ T7551] RDX: 0000000020008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 117.952408][ T7551] RBP: 00007f50d36e4090 R08: 0000000000000000 R09: 0000000000000000 [ 117.952418][ T7551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.952428][ T7551] R13: 0000000000000000 R14: 00007f50d29b5fa0 R15: 00007ffc687114e8 [ 117.952456][ T7551] [ 117.952635][ T7551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.967071][ T7549] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.124752][ T7559] netlink: 'syz.4.552': attribute type 10 has an invalid length. [ 118.197122][ T7558] __nla_validate_parse: 24 callbacks suppressed [ 118.197141][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 118.204034][ T7560] Cannot find add_set index 0 as target [ 118.242291][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 118.296747][ T7559] netlink: 2 bytes leftover after parsing attributes in process `syz.4.552'. [ 118.303840][ T7549] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 118.363202][ T7559] team0: entered promiscuous mode [ 118.410156][ T7559] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.437338][ T7559] batman_adv: batadv0: Interface activated: team0 [ 118.466786][ T7559] batman_adv: batadv0: Interface deactivated: team0 [ 118.474959][ T7559] batman_adv: batadv0: Removing interface: team0 [ 118.488614][ T7559] bridge0: port 1(team0) entered blocking state [ 118.506790][ T7559] bridge0: port 1(team0) entered disabled state [ 118.517377][ T7559] team0: entered allmulticast mode [ 118.534140][ T7553] bond0: entered promiscuous mode [ 118.539613][ T7553] bond_slave_0: entered promiscuous mode [ 118.545717][ T7553] bond_slave_1: entered promiscuous mode [ 118.553549][ T7553] batadv0: entered promiscuous mode [ 118.572282][ T7553] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 118.584199][ T7553] Cannot create hsr debugfs directory [ 118.591306][ T7553] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 118.600884][ T7553] bond0: left promiscuous mode [ 118.606264][ T7553] bond_slave_0: left promiscuous mode [ 118.611947][ T7553] bond_slave_1: left promiscuous mode [ 118.619048][ T7553] batadv0: left promiscuous mode [ 119.031398][ T7588] FAULT_INJECTION: forcing a failure. [ 119.031398][ T7588] name failslab, interval 1, probability 0, space 0, times 0 [ 119.049345][ T7588] CPU: 1 UID: 0 PID: 7588 Comm: syz.2.566 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 119.049370][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.049380][ T7588] Call Trace: [ 119.049387][ T7588] [ 119.049395][ T7588] dump_stack_lvl+0x189/0x250 [ 119.049423][ T7588] ? __pfx____ratelimit+0x10/0x10 [ 119.049442][ T7588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.049464][ T7588] ? __pfx__printk+0x10/0x10 [ 119.049485][ T7588] ? __pfx___might_resched+0x10/0x10 [ 119.049508][ T7588] ? fs_reclaim_acquire+0x7d/0x100 [ 119.049531][ T7588] should_fail_ex+0x414/0x560 [ 119.049556][ T7588] should_failslab+0xa8/0x100 [ 119.049575][ T7588] __kmalloc_noprof+0xcb/0x4f0 [ 119.049589][ T7588] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 119.049610][ T7588] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 119.049640][ T7588] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 119.049664][ T7588] genl_family_rcv_msg_doit+0xb8/0x300 [ 119.049687][ T7588] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 119.049706][ T7588] ? rcu_is_watching+0x15/0xb0 [ 119.049733][ T7588] ? apparmor_capable+0x137/0x1b0 [ 119.049751][ T7588] ? bpf_lsm_capable+0x9/0x20 [ 119.049766][ T7588] ? security_capable+0x7e/0x2e0 [ 119.049792][ T7588] genl_rcv_msg+0x60e/0x790 [ 119.049815][ T7588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.049828][ T7588] ? ref_tracker_free+0x63a/0x7d0 [ 119.049847][ T7588] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 119.049868][ T7588] ? __pfx_ref_tracker_free+0x10/0x10 [ 119.049900][ T7588] netlink_rcv_skb+0x208/0x470 [ 119.049930][ T7588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.049947][ T7588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.049985][ T7588] ? down_read+0x1ad/0x2e0 [ 119.050007][ T7588] genl_rcv+0x28/0x40 [ 119.050027][ T7588] netlink_unicast+0x75b/0x8d0 [ 119.050057][ T7588] netlink_sendmsg+0x805/0xb30 [ 119.050087][ T7588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.050110][ T7588] ? aa_sock_msg_perm+0x94/0x160 [ 119.050132][ T7588] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.050151][ T7588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.050171][ T7588] __sock_sendmsg+0x21c/0x270 [ 119.050193][ T7588] ____sys_sendmsg+0x505/0x830 [ 119.050222][ T7588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.050254][ T7588] ? import_iovec+0x74/0xa0 [ 119.050271][ T7588] ___sys_sendmsg+0x21f/0x2a0 [ 119.050295][ T7588] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.050355][ T7588] ? __fget_files+0x2a/0x420 [ 119.050372][ T7588] ? __fget_files+0x3a0/0x420 [ 119.050401][ T7588] __x64_sys_sendmsg+0x19b/0x260 [ 119.050425][ T7588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.050456][ T7588] ? __pfx_ksys_write+0x10/0x10 [ 119.050469][ T7588] ? rcu_is_watching+0x15/0xb0 [ 119.050496][ T7588] ? do_syscall_64+0xbe/0x3b0 [ 119.050517][ T7588] do_syscall_64+0xfa/0x3b0 [ 119.050532][ T7588] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.050548][ T7588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.050564][ T7588] ? clear_bhb_loop+0x60/0xb0 [ 119.050583][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.050597][ T7588] RIP: 0033:0x7fb2dc98e929 [ 119.050620][ T7588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.050633][ T7588] RSP: 002b:00007fb2dd7bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.050650][ T7588] RAX: ffffffffffffffda RBX: 00007fb2dcbb5fa0 RCX: 00007fb2dc98e929 [ 119.050662][ T7588] RDX: 0000000020008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 119.050673][ T7588] RBP: 00007fb2dd7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 119.050683][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.050693][ T7588] R13: 0000000000000000 R14: 00007fb2dcbb5fa0 R15: 00007ffc9e0e5768 [ 119.050727][ T7588] [ 119.519147][ T7596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.565325][ T7598] FAULT_INJECTION: forcing a failure. [ 119.565325][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 119.643445][ T7598] CPU: 0 UID: 0 PID: 7598 Comm: syz.2.570 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 119.643473][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.643483][ T7598] Call Trace: [ 119.643490][ T7598] [ 119.643498][ T7598] dump_stack_lvl+0x189/0x250 [ 119.643526][ T7598] ? __pfx____ratelimit+0x10/0x10 [ 119.643544][ T7598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.643565][ T7598] ? __pfx__printk+0x10/0x10 [ 119.643585][ T7598] ? __mutex_trylock_common+0x153/0x260 [ 119.643614][ T7598] should_fail_ex+0x414/0x560 [ 119.643636][ T7598] should_failslab+0xa8/0x100 [ 119.643655][ T7598] __kmalloc_cache_noprof+0x70/0x3d0 [ 119.643671][ T7598] ? __hw_addr_add_ex+0x1f4/0x770 [ 119.643699][ T7598] __hw_addr_add_ex+0x1f4/0x770 [ 119.643730][ T7598] dev_addr_init+0x14f/0x230 [ 119.643757][ T7598] ? __pfx_dev_addr_init+0x10/0x10 [ 119.643795][ T7598] alloc_netdev_mqs+0x2ae/0x1170 [ 119.643811][ T7598] ? __pfx_geneve_setup+0x10/0x10 [ 119.643837][ T7598] rtnl_create_link+0x31f/0xd10 [ 119.643861][ T7598] rtnl_newlink_create+0x25c/0xb00 [ 119.643898][ T7598] ? __pfx_aa_get_newest_label+0x10/0x10 [ 119.643924][ T7598] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 119.643944][ T7598] ? rtnl_newlink+0x8db/0x1c70 [ 119.643966][ T7598] ? __pfx___mutex_lock+0x10/0x10 [ 119.643996][ T7598] ? ns_capable+0x8a/0xf0 [ 119.644023][ T7598] rtnl_newlink+0x16d6/0x1c70 [ 119.644045][ T7598] ? netlink_sendmsg+0x805/0xb30 [ 119.644078][ T7598] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.644119][ T7598] ? kasan_quarantine_put+0xdd/0x220 [ 119.644140][ T7598] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.644164][ T7598] ? nlmon_xmit+0xb0/0x100 [ 119.644178][ T7598] ? kmem_cache_free+0x18f/0x400 [ 119.644200][ T7598] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.644222][ T7598] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.644238][ T7598] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.644259][ T7598] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 119.644285][ T7598] ? __dev_queue_xmit+0x27e/0x3a70 [ 119.644315][ T7598] ? __lock_acquire+0xab9/0xd20 [ 119.644363][ T7598] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.644382][ T7598] rtnetlink_rcv_msg+0x7cf/0xb70 [ 119.644405][ T7598] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 119.644423][ T7598] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.644441][ T7598] ? ref_tracker_free+0x63a/0x7d0 [ 119.644460][ T7598] ? __copy_skb_header+0xa7/0x550 [ 119.644485][ T7598] ? __pfx_ref_tracker_free+0x10/0x10 [ 119.644517][ T7598] netlink_rcv_skb+0x208/0x470 [ 119.644538][ T7598] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.644558][ T7598] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.644592][ T7598] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.644612][ T7598] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.644638][ T7598] netlink_unicast+0x75b/0x8d0 [ 119.644669][ T7598] netlink_sendmsg+0x805/0xb30 [ 119.644699][ T7598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.644721][ T7598] ? aa_sock_msg_perm+0x94/0x160 [ 119.644743][ T7598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.644763][ T7598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.644783][ T7598] __sock_sendmsg+0x21c/0x270 [ 119.644806][ T7598] ____sys_sendmsg+0x505/0x830 [ 119.644834][ T7598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.644866][ T7598] ? import_iovec+0x74/0xa0 [ 119.644886][ T7598] ___sys_sendmsg+0x21f/0x2a0 [ 119.644915][ T7598] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.644974][ T7598] ? __fget_files+0x2a/0x420 [ 119.644991][ T7598] ? __fget_files+0x3a0/0x420 [ 119.645018][ T7598] __x64_sys_sendmsg+0x19b/0x260 [ 119.645042][ T7598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.645075][ T7598] ? __pfx_ksys_write+0x10/0x10 [ 119.645089][ T7598] ? rcu_is_watching+0x15/0xb0 [ 119.645115][ T7598] ? do_syscall_64+0xbe/0x3b0 [ 119.645137][ T7598] do_syscall_64+0xfa/0x3b0 [ 119.645152][ T7598] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.645168][ T7598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.645184][ T7598] ? clear_bhb_loop+0x60/0xb0 [ 119.645203][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.645219][ T7598] RIP: 0033:0x7fb2dc98e929 [ 119.645234][ T7598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.645247][ T7598] RSP: 002b:00007fb2dd7bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.645266][ T7598] RAX: ffffffffffffffda RBX: 00007fb2dcbb5fa0 RCX: 00007fb2dc98e929 [ 119.645278][ T7598] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 119.645289][ T7598] RBP: 00007fb2dd7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 119.645299][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.645309][ T7598] R13: 0000000000000000 R14: 00007fb2dcbb5fa0 R15: 00007ffc9e0e5768 [ 119.645337][ T7598] [ 120.120551][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 120.316929][ T7605] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 120.388737][ T7608] FAULT_INJECTION: forcing a failure. [ 120.388737][ T7608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.451844][ T7608] CPU: 0 UID: 0 PID: 7608 Comm: syz.3.574 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 120.451870][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.451881][ T7608] Call Trace: [ 120.451888][ T7608] [ 120.451895][ T7608] dump_stack_lvl+0x189/0x250 [ 120.451922][ T7608] ? __pfx____ratelimit+0x10/0x10 [ 120.451938][ T7608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.451959][ T7608] ? __pfx__printk+0x10/0x10 [ 120.451977][ T7608] ? __might_fault+0xb0/0x130 [ 120.452003][ T7608] should_fail_ex+0x414/0x560 [ 120.452027][ T7608] _copy_from_iter+0x1db/0x16f0 [ 120.452052][ T7608] ? sock_alloc_send_pskb+0x875/0x990 [ 120.452076][ T7608] ? __pfx__copy_from_iter+0x10/0x10 [ 120.452106][ T7608] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 120.452124][ T7608] skb_copy_datagram_from_iter+0xf5/0x720 [ 120.452143][ T7608] ? dev_get_by_index+0x22/0x2e0 [ 120.452160][ T7608] ? skb_put+0x11b/0x210 [ 120.452185][ T7608] packet_sendmsg+0x3abb/0x53f0 [ 120.452218][ T7608] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 120.452253][ T7608] ? __pfx___might_resched+0x10/0x10 [ 120.452274][ T7608] ? __lock_acquire+0xab9/0xd20 [ 120.452309][ T7608] ? __pfx_packet_sendmsg+0x10/0x10 [ 120.452328][ T7608] ? aa_sk_perm+0x81e/0x950 [ 120.452353][ T7608] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 120.452381][ T7608] ? aa_sock_msg_perm+0x94/0x160 [ 120.452403][ T7608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.452421][ T7608] ? __pfx_packet_sendmsg+0x10/0x10 [ 120.452444][ T7608] __sock_sendmsg+0x21c/0x270 [ 120.452465][ T7608] __sys_sendto+0x3bd/0x520 [ 120.452488][ T7608] ? __pfx___sys_sendto+0x10/0x10 [ 120.452503][ T7608] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 120.452532][ T7608] ? __fget_files+0x3a0/0x420 [ 120.452560][ T7608] ? ksys_write+0x22a/0x250 [ 120.452577][ T7608] ? __pfx_ksys_write+0x10/0x10 [ 120.452590][ T7608] ? rcu_is_watching+0x15/0xb0 [ 120.452618][ T7608] __x64_sys_sendto+0xde/0x100 [ 120.452643][ T7608] do_syscall_64+0xfa/0x3b0 [ 120.452659][ T7608] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.452675][ T7608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.452691][ T7608] ? clear_bhb_loop+0x60/0xb0 [ 120.452711][ T7608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.452727][ T7608] RIP: 0033:0x7f2f3198e929 [ 120.452743][ T7608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.452757][ T7608] RSP: 002b:00007f2f32805038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 120.452782][ T7608] RAX: ffffffffffffffda RBX: 00007f2f31bb5fa0 RCX: 00007f2f3198e929 [ 120.452794][ T7608] RDX: 000000000000000e RSI: 0000200000000240 RDI: 0000000000000003 [ 120.452804][ T7608] RBP: 00007f2f32805090 R08: 0000200000000200 R09: 0000000000000014 [ 120.452814][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.452823][ T7608] R13: 0000000000000000 R14: 00007f2f31bb5fa0 R15: 00007ffcc4b41018 [ 120.452849][ T7608] [ 120.761016][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 120.841297][ T7619] FAULT_INJECTION: forcing a failure. [ 120.841297][ T7619] name failslab, interval 1, probability 0, space 0, times 0 [ 120.878715][ T7619] CPU: 1 UID: 0 PID: 7619 Comm: syz.4.577 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 120.878742][ T7619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.878752][ T7619] Call Trace: [ 120.878759][ T7619] [ 120.878766][ T7619] dump_stack_lvl+0x189/0x250 [ 120.878793][ T7619] ? __pfx____ratelimit+0x10/0x10 [ 120.878809][ T7619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.878832][ T7619] ? __pfx__printk+0x10/0x10 [ 120.878855][ T7619] ? __pfx___might_resched+0x10/0x10 [ 120.878882][ T7619] should_fail_ex+0x414/0x560 [ 120.878908][ T7619] should_failslab+0xa8/0x100 [ 120.878928][ T7619] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 120.878946][ T7619] ? __alloc_skb+0x112/0x2d0 [ 120.878970][ T7619] __alloc_skb+0x112/0x2d0 [ 120.878995][ T7619] netlink_sendmsg+0x5c6/0xb30 [ 120.879025][ T7619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.879048][ T7619] ? aa_sock_msg_perm+0x94/0x160 [ 120.879070][ T7619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.879090][ T7619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.879110][ T7619] __sock_sendmsg+0x21c/0x270 [ 120.879132][ T7619] ____sys_sendmsg+0x52d/0x830 [ 120.879160][ T7619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.879189][ T7619] ? import_iovec+0x74/0xa0 [ 120.879209][ T7619] ___sys_sendmsg+0x21f/0x2a0 [ 120.879232][ T7619] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.879288][ T7619] ? __fget_files+0x2a/0x420 [ 120.879305][ T7619] ? __fget_files+0x3a0/0x420 [ 120.879328][ T7619] __sys_sendmmsg+0x227/0x430 [ 120.879356][ T7619] ? __pfx___sys_sendmmsg+0x10/0x10 [ 120.879375][ T7619] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 120.879417][ T7619] ? ksys_write+0x22a/0x250 [ 120.879436][ T7619] ? __pfx_ksys_write+0x10/0x10 [ 120.879449][ T7619] ? rcu_is_watching+0x15/0xb0 [ 120.879480][ T7619] __x64_sys_sendmmsg+0xa0/0xc0 [ 120.879503][ T7619] do_syscall_64+0xfa/0x3b0 [ 120.879520][ T7619] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.879536][ T7619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.879554][ T7619] ? clear_bhb_loop+0x60/0xb0 [ 120.879573][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.879587][ T7619] RIP: 0033:0x7efd9058e929 [ 120.879601][ T7619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.879613][ T7619] RSP: 002b:00007efd91334038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.879631][ T7619] RAX: ffffffffffffffda RBX: 00007efd907b5fa0 RCX: 00007efd9058e929 [ 120.879641][ T7619] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 120.879652][ T7619] RBP: 00007efd91334090 R08: 0000000000000000 R09: 0000000000000000 [ 120.879662][ T7619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.879671][ T7619] R13: 0000000000000000 R14: 00007efd907b5fa0 R15: 00007ffcfa49f0c8 [ 120.879706][ T7619] [ 121.191018][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 121.200315][ T7621] netlink: 48 bytes leftover after parsing attributes in process `syz.3.578'. [ 121.210559][ T7624] FAULT_INJECTION: forcing a failure. [ 121.210559][ T7624] name failslab, interval 1, probability 0, space 0, times 0 [ 121.227473][ T7618] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.247338][ T7624] CPU: 0 UID: 0 PID: 7624 Comm: syz.0.580 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 121.247364][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.247374][ T7624] Call Trace: [ 121.247381][ T7624] [ 121.247389][ T7624] dump_stack_lvl+0x189/0x250 [ 121.247428][ T7624] ? __pfx____ratelimit+0x10/0x10 [ 121.247445][ T7624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.247468][ T7624] ? __pfx__printk+0x10/0x10 [ 121.247489][ T7624] ? __pfx___might_resched+0x10/0x10 [ 121.247512][ T7624] ? fs_reclaim_acquire+0x7d/0x100 [ 121.247535][ T7624] should_fail_ex+0x414/0x560 [ 121.247560][ T7624] should_failslab+0xa8/0x100 [ 121.247579][ T7624] kmem_cache_alloc_noprof+0x73/0x3c0 [ 121.247603][ T7624] ? ovs_flow_alloc+0x24/0x1f0 [ 121.247629][ T7624] ovs_flow_alloc+0x24/0x1f0 [ 121.247653][ T7624] ovs_flow_cmd_new+0x1ee/0xd80 [ 121.247668][ T7624] ? netlink_sendmsg+0x731/0xb30 [ 121.247688][ T7624] ? ___sys_sendmsg+0x21f/0x2a0 [ 121.247716][ T7624] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 121.247787][ T7624] ? __nla_parse+0x40/0x60 [ 121.247813][ T7624] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 121.247838][ T7624] genl_family_rcv_msg_doit+0x212/0x300 [ 121.247862][ T7624] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 121.247892][ T7624] ? bpf_lsm_capable+0x9/0x20 [ 121.247907][ T7624] ? security_capable+0x7e/0x2e0 [ 121.247934][ T7624] genl_rcv_msg+0x60e/0x790 [ 121.247955][ T7624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.247969][ T7624] ? ref_tracker_free+0x63a/0x7d0 [ 121.247989][ T7624] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 121.248007][ T7624] ? __pfx_ref_tracker_free+0x10/0x10 [ 121.248039][ T7624] netlink_rcv_skb+0x208/0x470 [ 121.248061][ T7624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.248079][ T7624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.248117][ T7624] ? down_read+0x1ad/0x2e0 [ 121.248139][ T7624] genl_rcv+0x28/0x40 [ 121.248160][ T7624] netlink_unicast+0x75b/0x8d0 [ 121.248190][ T7624] netlink_sendmsg+0x805/0xb30 [ 121.248221][ T7624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.248245][ T7624] ? aa_sock_msg_perm+0x94/0x160 [ 121.248268][ T7624] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.248287][ T7624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.248309][ T7624] __sock_sendmsg+0x21c/0x270 [ 121.248331][ T7624] ____sys_sendmsg+0x505/0x830 [ 121.248361][ T7624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.248414][ T7624] ? import_iovec+0x74/0xa0 [ 121.248434][ T7624] ___sys_sendmsg+0x21f/0x2a0 [ 121.248457][ T7624] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.248515][ T7624] ? __fget_files+0x2a/0x420 [ 121.248531][ T7624] ? __fget_files+0x3a0/0x420 [ 121.248558][ T7624] __x64_sys_sendmsg+0x19b/0x260 [ 121.248583][ T7624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.248614][ T7624] ? __pfx_ksys_write+0x10/0x10 [ 121.248627][ T7624] ? rcu_is_watching+0x15/0xb0 [ 121.248654][ T7624] ? do_syscall_64+0xbe/0x3b0 [ 121.248674][ T7624] do_syscall_64+0xfa/0x3b0 [ 121.248689][ T7624] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.248704][ T7624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.248721][ T7624] ? clear_bhb_loop+0x60/0xb0 [ 121.248741][ T7624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.248756][ T7624] RIP: 0033:0x7f45a2b8e929 [ 121.248772][ T7624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.248785][ T7624] RSP: 002b:00007f45a39b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.248803][ T7624] RAX: ffffffffffffffda RBX: 00007f45a2db5fa0 RCX: 00007f45a2b8e929 [ 121.248816][ T7624] RDX: 0000000020008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 121.248827][ T7624] RBP: 00007f45a39b7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.248838][ T7624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.248854][ T7624] R13: 0000000000000000 R14: 00007f45a2db5fa0 R15: 00007fffd3750548 [ 121.248884][ T7624] [ 121.824763][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'. [ 121.853921][ T7644] FAULT_INJECTION: forcing a failure. [ 121.853921][ T7644] name failslab, interval 1, probability 0, space 0, times 0 [ 121.870443][ T7644] CPU: 0 UID: 0 PID: 7644 Comm: syz.2.583 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 121.870471][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.870482][ T7644] Call Trace: [ 121.870489][ T7644] [ 121.870497][ T7644] dump_stack_lvl+0x189/0x250 [ 121.870526][ T7644] ? __pfx____ratelimit+0x10/0x10 [ 121.870544][ T7644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.870567][ T7644] ? __pfx__printk+0x10/0x10 [ 121.870593][ T7644] ? __pfx___might_resched+0x10/0x10 [ 121.870615][ T7644] ? fs_reclaim_acquire+0x7d/0x100 [ 121.870645][ T7644] should_fail_ex+0x414/0x560 [ 121.870671][ T7644] ? alloc_netdev_mqs+0xa46/0x1170 [ 121.870687][ T7644] should_failslab+0xa8/0x100 [ 121.870708][ T7644] __kvmalloc_node_noprof+0x161/0x5f0 [ 121.870726][ T7644] ? alloc_netdev_mqs+0xa46/0x1170 [ 121.870749][ T7644] alloc_netdev_mqs+0xa46/0x1170 [ 121.870774][ T7644] rtnl_create_link+0x31f/0xd10 [ 121.870798][ T7644] rtnl_newlink_create+0x25c/0xb00 [ 121.870828][ T7644] ? __pfx_aa_get_newest_label+0x10/0x10 [ 121.870853][ T7644] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 121.870872][ T7644] ? rtnl_newlink+0x8db/0x1c70 [ 121.870895][ T7644] ? __pfx___mutex_lock+0x10/0x10 [ 121.870924][ T7644] ? ns_capable+0x8a/0xf0 [ 121.870951][ T7644] rtnl_newlink+0x16d6/0x1c70 [ 121.870973][ T7644] ? netlink_sendmsg+0x805/0xb30 [ 121.871006][ T7644] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.871052][ T7644] ? kasan_quarantine_put+0xdd/0x220 [ 121.871075][ T7644] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.871099][ T7644] ? nlmon_xmit+0xb0/0x100 [ 121.871114][ T7644] ? kmem_cache_free+0x18f/0x400 [ 121.871139][ T7644] ? __local_bh_enable_ip+0x12d/0x1c0 [ 121.871162][ T7644] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.871180][ T7644] ? __local_bh_enable_ip+0x12d/0x1c0 [ 121.871202][ T7644] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 121.871228][ T7644] ? __dev_queue_xmit+0x27e/0x3a70 [ 121.871258][ T7644] ? __lock_acquire+0xab9/0xd20 [ 121.871306][ T7644] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.871325][ T7644] rtnetlink_rcv_msg+0x7cf/0xb70 [ 121.871349][ T7644] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 121.871368][ T7644] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.871385][ T7644] ? ref_tracker_free+0x63a/0x7d0 [ 121.871405][ T7644] ? __copy_skb_header+0xa7/0x550 [ 121.871430][ T7644] ? __pfx_ref_tracker_free+0x10/0x10 [ 121.871462][ T7644] netlink_rcv_skb+0x208/0x470 [ 121.871483][ T7644] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.871506][ T7644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.871541][ T7644] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.871561][ T7644] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.871586][ T7644] netlink_unicast+0x75b/0x8d0 [ 121.871618][ T7644] netlink_sendmsg+0x805/0xb30 [ 121.871654][ T7644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.871679][ T7644] ? aa_sock_msg_perm+0x94/0x160 [ 121.871701][ T7644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.871721][ T7644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.871743][ T7644] __sock_sendmsg+0x21c/0x270 [ 121.871767][ T7644] ____sys_sendmsg+0x505/0x830 [ 121.871796][ T7644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.871829][ T7644] ? import_iovec+0x74/0xa0 [ 121.871851][ T7644] ___sys_sendmsg+0x21f/0x2a0 [ 121.871877][ T7644] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.871940][ T7644] ? __fget_files+0x2a/0x420 [ 121.871958][ T7644] ? __fget_files+0x3a0/0x420 [ 121.871988][ T7644] __x64_sys_sendmsg+0x19b/0x260 [ 121.872013][ T7644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.872046][ T7644] ? __pfx_ksys_write+0x10/0x10 [ 121.872060][ T7644] ? rcu_is_watching+0x15/0xb0 [ 121.872089][ T7644] ? do_syscall_64+0xbe/0x3b0 [ 121.872111][ T7644] do_syscall_64+0xfa/0x3b0 [ 121.872127][ T7644] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.872144][ T7644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.872160][ T7644] ? clear_bhb_loop+0x60/0xb0 [ 121.872181][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.872197][ T7644] RIP: 0033:0x7fb2dc98e929 [ 121.872214][ T7644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.872227][ T7644] RSP: 002b:00007fb2dd7bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.872247][ T7644] RAX: ffffffffffffffda RBX: 00007fb2dcbb5fa0 RCX: 00007fb2dc98e929 [ 121.872259][ T7644] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 121.872270][ T7644] RBP: 00007fb2dd7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 121.872280][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.872291][ T7644] R13: 0000000000000000 R14: 00007fb2dcbb5fa0 R15: 00007ffc9e0e5768 [ 121.872321][ T7644] [ 122.617862][ T7655] batman_adv: batadv0: Interface deactivated: dummy0 [ 122.632353][ T7655] batman_adv: batadv0: Removing interface: dummy0 [ 122.653086][ T7655] bridge_slave_0: left allmulticast mode [ 122.658904][ T7655] bridge_slave_0: left promiscuous mode [ 122.665024][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.681112][ T7655] bridge_slave_1: left promiscuous mode [ 122.714026][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.753235][ T7655] bond0: (slave bond_slave_0): Releasing backup interface [ 122.778251][ T7655] bond0: (slave bond_slave_1): Releasing backup interface [ 122.818391][ T7655] team0: Port device team_slave_0 removed [ 122.871781][ T7655] team0: Port device team_slave_1 removed [ 122.878832][ T7655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.889247][ T7655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.910223][ T7655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.918358][ T7655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.952532][ T7655] vlan0: left allmulticast mode [ 122.971517][ T7655] dummy0: left allmulticast mode [ 122.991564][ T7655] vlan0: left promiscuous mode [ 123.013030][ T7655] dummy0: left promiscuous mode [ 123.038441][ T7655] bridge0: port 3(vlan0) entered disabled state [ 123.558219][ T7691] FAULT_INJECTION: forcing a failure. [ 123.558219][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 123.594923][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 123.604548][ T7691] CPU: 1 UID: 0 PID: 7691 Comm: syz.4.600 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 123.604574][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.604585][ T7691] Call Trace: [ 123.604592][ T7691] [ 123.604599][ T7691] dump_stack_lvl+0x189/0x250 [ 123.604628][ T7691] ? __pfx____ratelimit+0x10/0x10 [ 123.604646][ T7691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.604670][ T7691] ? __pfx__printk+0x10/0x10 [ 123.604691][ T7691] ? __pfx___might_resched+0x10/0x10 [ 123.604715][ T7691] ? fs_reclaim_acquire+0x7d/0x100 [ 123.604740][ T7691] should_fail_ex+0x414/0x560 [ 123.604767][ T7691] should_failslab+0xa8/0x100 [ 123.604786][ T7691] __kmalloc_cache_noprof+0x70/0x3d0 [ 123.604803][ T7691] ? alloc_netdev_mqs+0xb90/0x1170 [ 123.604819][ T7691] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 123.604844][ T7691] alloc_netdev_mqs+0xb90/0x1170 [ 123.604870][ T7691] rtnl_create_link+0x31f/0xd10 [ 123.604894][ T7691] rtnl_newlink_create+0x25c/0xb00 [ 123.604923][ T7691] ? __pfx_aa_get_newest_label+0x10/0x10 [ 123.604948][ T7691] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 123.604967][ T7691] ? rtnl_newlink+0x8db/0x1c70 [ 123.604990][ T7691] ? __pfx___mutex_lock+0x10/0x10 [ 123.605019][ T7691] ? ns_capable+0x8a/0xf0 [ 123.605046][ T7691] rtnl_newlink+0x16d6/0x1c70 [ 123.605083][ T7691] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.605102][ T7691] ? is_bpf_text_address+0x26/0x2b0 [ 123.605133][ T7691] ? __lock_acquire+0xab9/0xd20 [ 123.605166][ T7691] ? __lock_acquire+0xab9/0xd20 [ 123.605204][ T7691] ? is_bpf_text_address+0x26/0x2b0 [ 123.605230][ T7691] ? is_bpf_text_address+0x292/0x2b0 [ 123.605250][ T7691] ? is_bpf_text_address+0x26/0x2b0 [ 123.605276][ T7691] ? kernel_text_address+0xa5/0xe0 [ 123.605310][ T7691] ? __lock_acquire+0xab9/0xd20 [ 123.605357][ T7691] ? __pfx_rtnl_newlink+0x10/0x10 [ 123.605375][ T7691] rtnetlink_rcv_msg+0x7cf/0xb70 [ 123.605398][ T7691] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 123.605422][ T7691] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.605461][ T7691] netlink_rcv_skb+0x208/0x470 [ 123.605482][ T7691] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.605503][ T7691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.605538][ T7691] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.605557][ T7691] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.605582][ T7691] netlink_unicast+0x75b/0x8d0 [ 123.605614][ T7691] netlink_sendmsg+0x805/0xb30 [ 123.605644][ T7691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.605667][ T7691] ? aa_sock_msg_perm+0x94/0x160 [ 123.605689][ T7691] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 123.605708][ T7691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.605729][ T7691] __sock_sendmsg+0x21c/0x270 [ 123.605752][ T7691] ____sys_sendmsg+0x505/0x830 [ 123.605781][ T7691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.605814][ T7691] ? import_iovec+0x74/0xa0 [ 123.605835][ T7691] ___sys_sendmsg+0x21f/0x2a0 [ 123.605860][ T7691] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.605923][ T7691] ? __fget_files+0x2a/0x420 [ 123.605939][ T7691] ? __fget_files+0x3a0/0x420 [ 123.605967][ T7691] __x64_sys_sendmsg+0x19b/0x260 [ 123.605993][ T7691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.606025][ T7691] ? __pfx_ksys_write+0x10/0x10 [ 123.606038][ T7691] ? rcu_is_watching+0x15/0xb0 [ 123.606066][ T7691] ? do_syscall_64+0xbe/0x3b0 [ 123.606088][ T7691] do_syscall_64+0xfa/0x3b0 [ 123.606103][ T7691] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.606117][ T7691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.606133][ T7691] ? clear_bhb_loop+0x60/0xb0 [ 123.606153][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.606168][ T7691] RIP: 0033:0x7efd9058e929 [ 123.606184][ T7691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.606198][ T7691] RSP: 002b:00007efd91334038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.606217][ T7691] RAX: ffffffffffffffda RBX: 00007efd907b5fa0 RCX: 00007efd9058e929 [ 123.606230][ T7691] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 123.606240][ T7691] RBP: 00007efd91334090 R08: 0000000000000000 R09: 0000000000000000 [ 123.606250][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.606259][ T7691] R13: 0000000000000000 R14: 00007efd907b5fa0 R15: 00007ffcfa49f0c8 [ 123.606288][ T7691] [ 124.021990][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f657000: rx timeout, send abort [ 124.062252][ T7696] FAULT_INJECTION: forcing a failure. [ 124.062252][ T7696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.090576][ T7696] CPU: 0 UID: 0 PID: 7696 Comm: syz.2.603 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 124.090602][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.090612][ T7696] Call Trace: [ 124.090620][ T7696] [ 124.090627][ T7696] dump_stack_lvl+0x189/0x250 [ 124.090654][ T7696] ? __pfx____ratelimit+0x10/0x10 [ 124.090671][ T7696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.090692][ T7696] ? __pfx__printk+0x10/0x10 [ 124.090709][ T7696] ? __might_fault+0xb0/0x130 [ 124.090735][ T7696] should_fail_ex+0x414/0x560 [ 124.090760][ T7696] _copy_from_iter+0x1db/0x16f0 [ 124.090786][ T7696] ? rcu_is_watching+0x15/0xb0 [ 124.090810][ T7696] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 124.090827][ T7696] ? __pfx__copy_from_iter+0x10/0x10 [ 124.090849][ T7696] ? __build_skb_around+0x257/0x3e0 [ 124.090873][ T7696] ? netlink_sendmsg+0x642/0xb30 [ 124.090890][ T7696] ? skb_put+0x11b/0x210 [ 124.090913][ T7696] netlink_sendmsg+0x6b2/0xb30 [ 124.090940][ T7696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.090962][ T7696] ? aa_sock_msg_perm+0x94/0x160 [ 124.090983][ T7696] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 124.091002][ T7696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.091021][ T7696] __sock_sendmsg+0x21c/0x270 [ 124.091043][ T7696] ____sys_sendmsg+0x52d/0x830 [ 124.091070][ T7696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.091109][ T7696] ? import_iovec+0x74/0xa0 [ 124.091129][ T7696] ___sys_sendmsg+0x21f/0x2a0 [ 124.091153][ T7696] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.091209][ T7696] ? __fget_files+0x2a/0x420 [ 124.091225][ T7696] ? __fget_files+0x3a0/0x420 [ 124.091252][ T7696] __sys_sendmmsg+0x227/0x430 [ 124.091278][ T7696] ? __pfx___sys_sendmmsg+0x10/0x10 [ 124.091296][ T7696] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 124.091340][ T7696] ? ksys_write+0x22a/0x250 [ 124.091356][ T7696] ? __pfx_ksys_write+0x10/0x10 [ 124.091369][ T7696] ? rcu_is_watching+0x15/0xb0 [ 124.091397][ T7696] __x64_sys_sendmmsg+0xa0/0xc0 [ 124.091421][ T7696] do_syscall_64+0xfa/0x3b0 [ 124.091436][ T7696] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.091452][ T7696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.091468][ T7696] ? clear_bhb_loop+0x60/0xb0 [ 124.091487][ T7696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.091502][ T7696] RIP: 0033:0x7fb2dc98e929 [ 124.091518][ T7696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.091531][ T7696] RSP: 002b:00007fb2dd7bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.091549][ T7696] RAX: ffffffffffffffda RBX: 00007fb2dcbb5fa0 RCX: 00007fb2dc98e929 [ 124.091561][ T7696] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 124.091572][ T7696] RBP: 00007fb2dd7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 124.091582][ T7696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.091592][ T7696] R13: 0000000000000000 R14: 00007fb2dcbb5fa0 R15: 00007ffc9e0e5768 [ 124.091619][ T7696] [ 124.644531][ T7717] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 124.689057][ T7723] x_tables: duplicate underflow at hook 1 [ 124.695702][ T7723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.610'. [ 124.757785][ T7726] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 125.035822][ T7737] netlink: 372 bytes leftover after parsing attributes in process `syz.4.618'. [ 125.142667][ T7745] FAULT_INJECTION: forcing a failure. [ 125.142667][ T7745] name failslab, interval 1, probability 0, space 0, times 0 [ 125.167814][ T7745] CPU: 0 UID: 0 PID: 7745 Comm: syz.4.620 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 125.167842][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.167852][ T7745] Call Trace: [ 125.167860][ T7745] [ 125.167868][ T7745] dump_stack_lvl+0x189/0x250 [ 125.167896][ T7745] ? __pfx____ratelimit+0x10/0x10 [ 125.167914][ T7745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.167936][ T7745] ? __pfx__printk+0x10/0x10 [ 125.167960][ T7745] ? __pfx___might_resched+0x10/0x10 [ 125.167982][ T7745] ? fs_reclaim_acquire+0x7d/0x100 [ 125.168030][ T7745] should_fail_ex+0x414/0x560 [ 125.168056][ T7745] should_failslab+0xa8/0x100 [ 125.168076][ T7745] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 125.168093][ T7745] ? __alloc_skb+0x112/0x2d0 [ 125.168119][ T7745] __alloc_skb+0x112/0x2d0 [ 125.168144][ T7745] netlink_ack+0x146/0xa50 [ 125.168161][ T7745] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.168199][ T7745] netlink_rcv_skb+0x28c/0x470 [ 125.168220][ T7745] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.168241][ T7745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.168273][ T7745] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.168293][ T7745] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.168318][ T7745] netlink_unicast+0x75b/0x8d0 [ 125.168348][ T7745] netlink_sendmsg+0x805/0xb30 [ 125.168379][ T7745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.168402][ T7745] ? aa_sock_msg_perm+0x94/0x160 [ 125.168425][ T7745] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.168445][ T7745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.168467][ T7745] __sock_sendmsg+0x21c/0x270 [ 125.168489][ T7745] ____sys_sendmsg+0x52d/0x830 [ 125.168516][ T7745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.168547][ T7745] ? import_iovec+0x74/0xa0 [ 125.168567][ T7745] ___sys_sendmsg+0x21f/0x2a0 [ 125.168592][ T7745] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.168651][ T7745] ? __fget_files+0x2a/0x420 [ 125.168667][ T7745] ? __fget_files+0x3a0/0x420 [ 125.168696][ T7745] __sys_sendmmsg+0x227/0x430 [ 125.168724][ T7745] ? __pfx___sys_sendmmsg+0x10/0x10 [ 125.168743][ T7745] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 125.168787][ T7745] ? ksys_write+0x22a/0x250 [ 125.168806][ T7745] ? __pfx_ksys_write+0x10/0x10 [ 125.168819][ T7745] ? rcu_is_watching+0x15/0xb0 [ 125.168848][ T7745] __x64_sys_sendmmsg+0xa0/0xc0 [ 125.168873][ T7745] do_syscall_64+0xfa/0x3b0 [ 125.168889][ T7745] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.168905][ T7745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.168921][ T7745] ? clear_bhb_loop+0x60/0xb0 [ 125.168941][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.168958][ T7745] RIP: 0033:0x7efd9058e929 [ 125.168974][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.168988][ T7745] RSP: 002b:00007efd91334038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 125.169007][ T7745] RAX: ffffffffffffffda RBX: 00007efd907b5fa0 RCX: 00007efd9058e929 [ 125.169025][ T7745] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 125.169037][ T7745] RBP: 00007efd91334090 R08: 0000000000000000 R09: 0000000000000000 [ 125.169048][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.169059][ T7745] R13: 0000000000000000 R14: 00007efd907b5fa0 R15: 00007ffcfa49f0c8 [ 125.169087][ T7745] [ 125.518858][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 125.529420][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.623'. [ 125.690672][ T7762] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 125.710904][ T7762] : entered promiscuous mode [ 125.780829][ T7768] netlink: 3 bytes leftover after parsing attributes in process `syz.0.629'. [ 125.801981][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 125.813026][ T7770] netlink: 372 bytes leftover after parsing attributes in process `syz.2.630'. [ 125.832345][ T7768] netlink: 3 bytes leftover after parsing attributes in process `syz.0.629'. [ 125.851026][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 125.932123][ T7775] FAULT_INJECTION: forcing a failure. [ 125.932123][ T7775] name failslab, interval 1, probability 0, space 0, times 0 [ 125.956309][ T7775] CPU: 0 UID: 0 PID: 7775 Comm: syz.0.632 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 125.956337][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.956348][ T7775] Call Trace: [ 125.956355][ T7775] [ 125.956363][ T7775] dump_stack_lvl+0x189/0x250 [ 125.956392][ T7775] ? __pfx____ratelimit+0x10/0x10 [ 125.956410][ T7775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.956434][ T7775] ? __pfx__printk+0x10/0x10 [ 125.956455][ T7775] ? __pfx___might_resched+0x10/0x10 [ 125.956479][ T7775] ? fs_reclaim_acquire+0x7d/0x100 [ 125.956503][ T7775] should_fail_ex+0x414/0x560 [ 125.956530][ T7775] should_failslab+0xa8/0x100 [ 125.956550][ T7775] __kmalloc_cache_noprof+0x70/0x3d0 [ 125.956566][ T7775] ? alloc_netdev_mqs+0xbf1/0x1170 [ 125.956588][ T7775] alloc_netdev_mqs+0xbf1/0x1170 [ 125.956614][ T7775] rtnl_create_link+0x31f/0xd10 [ 125.956638][ T7775] rtnl_newlink_create+0x25c/0xb00 [ 125.956667][ T7775] ? __pfx_aa_get_newest_label+0x10/0x10 [ 125.956692][ T7775] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 125.956711][ T7775] ? rtnl_newlink+0x8db/0x1c70 [ 125.956734][ T7775] ? __pfx___mutex_lock+0x10/0x10 [ 125.956762][ T7775] ? ns_capable+0x8a/0xf0 [ 125.956790][ T7775] rtnl_newlink+0x16d6/0x1c70 [ 125.956827][ T7775] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.956847][ T7775] ? finish_task_switch+0x266/0x950 [ 125.956877][ T7775] ? rcu_is_watching+0x15/0xb0 [ 125.956901][ T7775] ? trace_sched_exit_tp+0x38/0x120 [ 125.956921][ T7775] ? __schedule+0x1713/0x4d00 [ 125.956954][ T7775] ? kasan_quarantine_put+0xdd/0x220 [ 125.956987][ T7775] ? kmem_cache_free+0x18f/0x400 [ 125.957003][ T7775] ? preempt_schedule_irq+0xb5/0x150 [ 125.957025][ T7775] ? __pfx___schedule+0x10/0x10 [ 125.957045][ T7775] ? __local_bh_enable_ip+0x12d/0x1c0 [ 125.957072][ T7775] ? __local_bh_enable_ip+0x12d/0x1c0 [ 125.957118][ T7775] ? __lock_acquire+0xab9/0xd20 [ 125.957168][ T7775] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.957186][ T7775] rtnetlink_rcv_msg+0x7cf/0xb70 [ 125.957210][ T7775] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 125.957229][ T7775] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.957247][ T7775] ? ref_tracker_free+0x63a/0x7d0 [ 125.957266][ T7775] ? __copy_skb_header+0xa7/0x550 [ 125.957291][ T7775] ? __pfx_ref_tracker_free+0x10/0x10 [ 125.957324][ T7775] netlink_rcv_skb+0x208/0x470 [ 125.957346][ T7775] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.957369][ T7775] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.957403][ T7775] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.957423][ T7775] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.957449][ T7775] netlink_unicast+0x75b/0x8d0 [ 125.957481][ T7775] netlink_sendmsg+0x805/0xb30 [ 125.957512][ T7775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.957536][ T7775] ? aa_sock_msg_perm+0x94/0x160 [ 125.957558][ T7775] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.957578][ T7775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.957600][ T7775] __sock_sendmsg+0x21c/0x270 [ 125.957623][ T7775] ____sys_sendmsg+0x505/0x830 [ 125.957652][ T7775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.957685][ T7775] ? import_iovec+0x74/0xa0 [ 125.957707][ T7775] ___sys_sendmsg+0x21f/0x2a0 [ 125.957733][ T7775] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.957796][ T7775] ? __fget_files+0x2a/0x420 [ 125.957813][ T7775] ? __fget_files+0x3a0/0x420 [ 125.957843][ T7775] __x64_sys_sendmsg+0x19b/0x260 [ 125.957870][ T7775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.957903][ T7775] ? __pfx_ksys_write+0x10/0x10 [ 125.957917][ T7775] ? rcu_is_watching+0x15/0xb0 [ 125.957951][ T7775] ? do_syscall_64+0xbe/0x3b0 [ 125.957973][ T7775] do_syscall_64+0xfa/0x3b0 [ 125.957990][ T7775] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.958006][ T7775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.958023][ T7775] ? clear_bhb_loop+0x60/0xb0 [ 125.958043][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.958060][ T7775] RIP: 0033:0x7f45a2b8e929 [ 125.958076][ T7775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.958091][ T7775] RSP: 002b:00007f45a39b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.958109][ T7775] RAX: ffffffffffffffda RBX: 00007f45a2db5fa0 RCX: 00007f45a2b8e929 [ 125.958122][ T7775] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 125.958133][ T7775] RBP: 00007f45a39b7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.958144][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.958154][ T7775] R13: 0000000000000000 R14: 00007f45a2db5fa0 R15: 00007fffd3750548 [ 125.958183][ T7775] [ 126.511784][ T7782] netlink: 'syz.2.633': attribute type 39 has an invalid length. [ 126.629556][ T7794] FAULT_INJECTION: forcing a failure. [ 126.629556][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 126.648199][ T7794] CPU: 0 UID: 0 PID: 7794 Comm: syz.4.640 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 126.648227][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.648237][ T7794] Call Trace: [ 126.648244][ T7794] [ 126.648251][ T7794] dump_stack_lvl+0x189/0x250 [ 126.648276][ T7794] ? __pfx____ratelimit+0x10/0x10 [ 126.648295][ T7794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.648317][ T7794] ? __pfx__printk+0x10/0x10 [ 126.648342][ T7794] ? __pfx___might_resched+0x10/0x10 [ 126.648364][ T7794] ? fs_reclaim_acquire+0x7d/0x100 [ 126.648389][ T7794] should_fail_ex+0x414/0x560 [ 126.648414][ T7794] should_failslab+0xa8/0x100 [ 126.648434][ T7794] __kmalloc_noprof+0xcb/0x4f0 [ 126.648449][ T7794] ? __kasan_kmalloc+0x93/0xb0 [ 126.648463][ T7794] ? ovs_nla_copy_actions+0x68/0x3d0 [ 126.648488][ T7794] ovs_nla_copy_actions+0x68/0x3d0 [ 126.648507][ T7794] ? __asan_memcpy+0x40/0x70 [ 126.648533][ T7794] ovs_flow_cmd_new+0x528/0xd80 [ 126.648561][ T7794] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 126.648639][ T7794] ? __nla_parse+0x40/0x60 [ 126.648665][ T7794] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 126.648691][ T7794] genl_family_rcv_msg_doit+0x212/0x300 [ 126.648715][ T7794] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 126.648745][ T7794] ? bpf_lsm_capable+0x9/0x20 [ 126.648760][ T7794] ? security_capable+0x7e/0x2e0 [ 126.648787][ T7794] genl_rcv_msg+0x60e/0x790 [ 126.648811][ T7794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.648826][ T7794] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 126.648858][ T7794] netlink_rcv_skb+0x208/0x470 [ 126.648880][ T7794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.648897][ T7794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.648935][ T7794] ? down_read+0x1ad/0x2e0 [ 126.648957][ T7794] genl_rcv+0x28/0x40 [ 126.648978][ T7794] netlink_unicast+0x75b/0x8d0 [ 126.649008][ T7794] netlink_sendmsg+0x805/0xb30 [ 126.649038][ T7794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.649062][ T7794] ? aa_sock_msg_perm+0x94/0x160 [ 126.649085][ T7794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.649104][ T7794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.649126][ T7794] __sock_sendmsg+0x21c/0x270 [ 126.649154][ T7794] ____sys_sendmsg+0x505/0x830 [ 126.649183][ T7794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.649215][ T7794] ? import_iovec+0x74/0xa0 [ 126.649237][ T7794] ___sys_sendmsg+0x21f/0x2a0 [ 126.649261][ T7794] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.649323][ T7794] ? __fget_files+0x2a/0x420 [ 126.649340][ T7794] ? __fget_files+0x3a0/0x420 [ 126.649369][ T7794] __x64_sys_sendmsg+0x19b/0x260 [ 126.649395][ T7794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.649427][ T7794] ? __pfx_ksys_write+0x10/0x10 [ 126.649441][ T7794] ? rcu_is_watching+0x15/0xb0 [ 126.649470][ T7794] ? do_syscall_64+0xbe/0x3b0 [ 126.649492][ T7794] do_syscall_64+0xfa/0x3b0 [ 126.649508][ T7794] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.649524][ T7794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.649541][ T7794] ? clear_bhb_loop+0x60/0xb0 [ 126.649562][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.649577][ T7794] RIP: 0033:0x7efd9058e929 [ 126.649594][ T7794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.649609][ T7794] RSP: 002b:00007efd91334038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.649627][ T7794] RAX: ffffffffffffffda RBX: 00007efd907b5fa0 RCX: 00007efd9058e929 [ 126.649639][ T7794] RDX: 0000000020008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 126.649651][ T7794] RBP: 00007efd91334090 R08: 0000000000000000 R09: 0000000000000000 [ 126.649661][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.649671][ T7794] R13: 0000000000000000 R14: 00007efd907b5fa0 R15: 00007ffcfa49f0c8 [ 126.649700][ T7794] [ 126.649710][ T7794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.830200][ T7795] can: request_module (can-proto-0) failed. [ 126.903793][ T7797] can: request_module (can-proto-0) failed. [ 127.090006][ T7809] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 127.180566][ T7817] FAULT_INJECTION: forcing a failure. [ 127.180566][ T7817] name failslab, interval 1, probability 0, space 0, times 0 [ 127.235579][ T7817] CPU: 0 UID: 0 PID: 7817 Comm: syz.1.647 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 127.235607][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.235617][ T7817] Call Trace: [ 127.235625][ T7817] [ 127.235632][ T7817] dump_stack_lvl+0x189/0x250 [ 127.235661][ T7817] ? __pfx____ratelimit+0x10/0x10 [ 127.235679][ T7817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.235702][ T7817] ? __pfx__printk+0x10/0x10 [ 127.235727][ T7817] ? __pfx___might_resched+0x10/0x10 [ 127.235749][ T7817] ? fs_reclaim_acquire+0x7d/0x100 [ 127.235773][ T7817] should_fail_ex+0x414/0x560 [ 127.235798][ T7817] ? alloc_netdev_mqs+0xc59/0x1170 [ 127.235814][ T7817] should_failslab+0xa8/0x100 [ 127.235833][ T7817] __kvmalloc_node_noprof+0x161/0x5f0 [ 127.235852][ T7817] ? alloc_netdev_mqs+0xc59/0x1170 [ 127.235867][ T7817] ? alloc_netdev_mqs+0xbf1/0x1170 [ 127.235889][ T7817] alloc_netdev_mqs+0xc59/0x1170 [ 127.235914][ T7817] rtnl_create_link+0x31f/0xd10 [ 127.235938][ T7817] rtnl_newlink_create+0x25c/0xb00 [ 127.235968][ T7817] ? __pfx_aa_get_newest_label+0x10/0x10 [ 127.235993][ T7817] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 127.236012][ T7817] ? rtnl_newlink+0x8db/0x1c70 [ 127.236035][ T7817] ? __pfx___mutex_lock+0x10/0x10 [ 127.236071][ T7817] ? ns_capable+0x8a/0xf0 [ 127.236099][ T7817] rtnl_newlink+0x16d6/0x1c70 [ 127.236121][ T7817] ? netlink_sendmsg+0x805/0xb30 [ 127.236154][ T7817] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.236200][ T7817] ? kasan_quarantine_put+0xdd/0x220 [ 127.236223][ T7817] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.236246][ T7817] ? nlmon_xmit+0xb0/0x100 [ 127.236261][ T7817] ? kmem_cache_free+0x18f/0x400 [ 127.236286][ T7817] ? __local_bh_enable_ip+0x12d/0x1c0 [ 127.236308][ T7817] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.236326][ T7817] ? __local_bh_enable_ip+0x12d/0x1c0 [ 127.236347][ T7817] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 127.236374][ T7817] ? __dev_queue_xmit+0x27e/0x3a70 [ 127.236403][ T7817] ? __lock_acquire+0xab9/0xd20 [ 127.236452][ T7817] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.236472][ T7817] rtnetlink_rcv_msg+0x7cf/0xb70 [ 127.236496][ T7817] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 127.236515][ T7817] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.236533][ T7817] ? ref_tracker_free+0x63a/0x7d0 [ 127.236553][ T7817] ? __copy_skb_header+0xa7/0x550 [ 127.236578][ T7817] ? __pfx_ref_tracker_free+0x10/0x10 [ 127.236610][ T7817] netlink_rcv_skb+0x208/0x470 [ 127.236632][ T7817] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.236653][ T7817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.236688][ T7817] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.236708][ T7817] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.236734][ T7817] netlink_unicast+0x75b/0x8d0 [ 127.236765][ T7817] netlink_sendmsg+0x805/0xb30 [ 127.236795][ T7817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.236817][ T7817] ? aa_sock_msg_perm+0x94/0x160 [ 127.236838][ T7817] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.236858][ T7817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.236880][ T7817] __sock_sendmsg+0x21c/0x270 [ 127.236903][ T7817] ____sys_sendmsg+0x505/0x830 [ 127.236931][ T7817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.236964][ T7817] ? import_iovec+0x74/0xa0 [ 127.236985][ T7817] ___sys_sendmsg+0x21f/0x2a0 [ 127.237011][ T7817] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.237078][ T7817] ? __fget_files+0x2a/0x420 [ 127.237096][ T7817] ? __fget_files+0x3a0/0x420 [ 127.237125][ T7817] __x64_sys_sendmsg+0x19b/0x260 [ 127.237151][ T7817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.237184][ T7817] ? __pfx_ksys_write+0x10/0x10 [ 127.237197][ T7817] ? rcu_is_watching+0x15/0xb0 [ 127.237226][ T7817] ? do_syscall_64+0xbe/0x3b0 [ 127.237247][ T7817] do_syscall_64+0xfa/0x3b0 [ 127.237263][ T7817] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.237280][ T7817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.237297][ T7817] ? clear_bhb_loop+0x60/0xb0 [ 127.237318][ T7817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.237334][ T7817] RIP: 0033:0x7f50d278e929 [ 127.237351][ T7817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.237365][ T7817] RSP: 002b:00007f50d36e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.237384][ T7817] RAX: ffffffffffffffda RBX: 00007f50d29b5fa0 RCX: 00007f50d278e929 [ 127.237396][ T7817] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 127.237407][ T7817] RBP: 00007f50d36e4090 R08: 0000000000000000 R09: 0000000000000000 [ 127.237417][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.237428][ T7817] R13: 0000000000000000 R14: 00007f50d29b5fa0 R15: 00007ffc687114e8 [ 127.237456][ T7817] [ 128.023395][ T7836] FAULT_INJECTION: forcing a failure. [ 128.023395][ T7836] name failslab, interval 1, probability 0, space 0, times 0 [ 128.052274][ T7836] CPU: 0 UID: 0 PID: 7836 Comm: syz.3.654 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 128.052300][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.052310][ T7836] Call Trace: [ 128.052317][ T7836] [ 128.052325][ T7836] dump_stack_lvl+0x189/0x250 [ 128.052352][ T7836] ? __pfx____ratelimit+0x10/0x10 [ 128.052368][ T7836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.052390][ T7836] ? __pfx__printk+0x10/0x10 [ 128.052412][ T7836] ? __pfx___might_resched+0x10/0x10 [ 128.052434][ T7836] ? fs_reclaim_acquire+0x7d/0x100 [ 128.052457][ T7836] should_fail_ex+0x414/0x560 [ 128.052482][ T7836] should_failslab+0xa8/0x100 [ 128.052501][ T7836] __kmalloc_noprof+0xcb/0x4f0 [ 128.052516][ T7836] ? __kasan_kmalloc+0x93/0xb0 [ 128.052529][ T7836] ? ovs_nla_copy_actions+0x68/0x3d0 [ 128.052553][ T7836] ovs_nla_copy_actions+0x68/0x3d0 [ 128.052572][ T7836] ? __asan_memcpy+0x40/0x70 [ 128.052598][ T7836] ovs_flow_cmd_new+0x528/0xd80 [ 128.052613][ T7836] ? netlink_sendmsg+0x731/0xb30 [ 128.052643][ T7836] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 128.052715][ T7836] ? __nla_parse+0x40/0x60 [ 128.052738][ T7836] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 128.052761][ T7836] genl_family_rcv_msg_doit+0x212/0x300 [ 128.052783][ T7836] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 128.052811][ T7836] ? bpf_lsm_capable+0x9/0x20 [ 128.052825][ T7836] ? security_capable+0x7e/0x2e0 [ 128.052850][ T7836] genl_rcv_msg+0x60e/0x790 [ 128.052873][ T7836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.052886][ T7836] ? ref_tracker_free+0x63a/0x7d0 [ 128.052906][ T7836] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 128.052924][ T7836] ? __pfx_ref_tracker_free+0x10/0x10 [ 128.052956][ T7836] netlink_rcv_skb+0x208/0x470 [ 128.052984][ T7836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.053002][ T7836] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.053039][ T7836] ? down_read+0x1ad/0x2e0 [ 128.053060][ T7836] genl_rcv+0x28/0x40 [ 128.053081][ T7836] netlink_unicast+0x75b/0x8d0 [ 128.053111][ T7836] netlink_sendmsg+0x805/0xb30 [ 128.053140][ T7836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.053164][ T7836] ? aa_sock_msg_perm+0x94/0x160 [ 128.053185][ T7836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.053204][ T7836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.053224][ T7836] __sock_sendmsg+0x21c/0x270 [ 128.053245][ T7836] ____sys_sendmsg+0x505/0x830 [ 128.053272][ T7836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.053302][ T7836] ? import_iovec+0x74/0xa0 [ 128.053321][ T7836] ___sys_sendmsg+0x21f/0x2a0 [ 128.053345][ T7836] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.053400][ T7836] ? __fget_files+0x2a/0x420 [ 128.053417][ T7836] ? __fget_files+0x3a0/0x420 [ 128.053445][ T7836] __x64_sys_sendmsg+0x19b/0x260 [ 128.053470][ T7836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.053499][ T7836] ? __pfx_ksys_write+0x10/0x10 [ 128.053511][ T7836] ? rcu_is_watching+0x15/0xb0 [ 128.053537][ T7836] ? do_syscall_64+0xbe/0x3b0 [ 128.053557][ T7836] do_syscall_64+0xfa/0x3b0 [ 128.053570][ T7836] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.053585][ T7836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.053600][ T7836] ? clear_bhb_loop+0x60/0xb0 [ 128.053623][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.053638][ T7836] RIP: 0033:0x7f2f3198e929 [ 128.053654][ T7836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.053668][ T7836] RSP: 002b:00007f2f32805038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.053687][ T7836] RAX: ffffffffffffffda RBX: 00007f2f31bb5fa0 RCX: 00007f2f3198e929 [ 128.053699][ T7836] RDX: 0000000020008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 128.053710][ T7836] RBP: 00007f2f32805090 R08: 0000000000000000 R09: 0000000000000000 [ 128.053721][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.053729][ T7836] R13: 0000000000000000 R14: 00007f2f31bb5fa0 R15: 00007ffcc4b41018 [ 128.053760][ T7836] [ 128.436583][ T7836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.716827][ T7856] nbd3: detected capacity change from 0 to 63 [ 128.731558][ T7856] block nbd3: NBD_DISCONNECT [ 128.755233][ T7856] block nbd3: Disconnected due to user request. [ 128.766638][ T7856] block nbd3: shutting down sockets [ 129.243472][ T7889] __nla_validate_parse: 5 callbacks suppressed [ 129.243490][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.671'. [ 129.262219][ T7889] openvswitch: netlink: Flow key attr not present in new flow. [ 129.594646][ T7908] netlink: 'syz.2.678': attribute type 1 has an invalid length. [ 129.766242][ T7920] netlink: 'syz.2.683': attribute type 1 has an invalid length. [ 129.899783][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 129.900349][ T7926] bond1: (slave geneve3): making interface the new active one [ 129.917673][ T7926] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 129.926409][ T7916] lo speed is unknown, defaulting to 1000 [ 129.926914][ T7928] FAULT_INJECTION: forcing a failure. [ 129.926914][ T7928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.948075][ T7930] macvlan0: entered allmulticast mode [ 129.957852][ T7928] CPU: 0 UID: 0 PID: 7928 Comm: syz.0.685 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 129.957878][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.957888][ T7928] Call Trace: [ 129.957895][ T7928] [ 129.957901][ T7928] dump_stack_lvl+0x189/0x250 [ 129.957926][ T7928] ? __pfx____ratelimit+0x10/0x10 [ 129.957940][ T7928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.957960][ T7928] ? __pfx__printk+0x10/0x10 [ 129.957976][ T7928] ? __might_fault+0xb0/0x130 [ 129.958000][ T7928] should_fail_ex+0x414/0x560 [ 129.958022][ T7928] _copy_from_user+0x2d/0xb0 [ 129.958037][ T7928] ___sys_sendmsg+0x158/0x2a0 [ 129.958061][ T7928] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.958125][ T7928] ? __might_fault+0xb0/0x130 [ 129.958144][ T7928] __sys_sendmmsg+0x227/0x430 [ 129.958172][ T7928] ? __pfx___sys_sendmmsg+0x10/0x10 [ 129.958192][ T7928] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 129.958234][ T7928] ? ksys_write+0x22a/0x250 [ 129.958252][ T7928] ? __pfx_ksys_write+0x10/0x10 [ 129.958265][ T7928] ? rcu_is_watching+0x15/0xb0 [ 129.958293][ T7928] __x64_sys_sendmmsg+0xa0/0xc0 [ 129.958317][ T7928] do_syscall_64+0xfa/0x3b0 [ 129.958334][ T7928] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.958349][ T7928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.958365][ T7928] ? clear_bhb_loop+0x60/0xb0 [ 129.958384][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.958399][ T7928] RIP: 0033:0x7f45a2b8e929 [ 129.958414][ T7928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.958427][ T7928] RSP: 002b:00007f45a39b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 129.958445][ T7928] RAX: ffffffffffffffda RBX: 00007f45a2db5fa0 RCX: 00007f45a2b8e929 [ 129.958457][ T7928] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 129.958468][ T7928] RBP: 00007f45a39b7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.958479][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.958489][ T7928] R13: 0000000000000000 R14: 00007f45a2db5fa0 R15: 00007fffd3750548 [ 129.958528][ T7928] [ 129.994380][ T7926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.683'. [ 129.997700][ T7930] netlink: 96 bytes leftover after parsing attributes in process `syz.3.686'. [ 130.183817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.228378][ T165] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.267691][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.683'. [ 130.308431][ T7934] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 130.310750][ T7925] lo speed is unknown, defaulting to 1000 [ 130.323399][ T165] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.351114][ T165] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.425751][ T165] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 130.907811][ T7964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.925409][ T7964] FAULT_INJECTION: forcing a failure. [ 130.925409][ T7964] name failslab, interval 1, probability 0, space 0, times 0 [ 130.949024][ T7964] CPU: 1 UID: 0 PID: 7964 Comm: syz.0.698 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 130.949050][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.949060][ T7964] Call Trace: [ 130.949067][ T7964] [ 130.949073][ T7964] dump_stack_lvl+0x189/0x250 [ 130.949100][ T7964] ? __pfx____ratelimit+0x10/0x10 [ 130.949117][ T7964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.949139][ T7964] ? __pfx__printk+0x10/0x10 [ 130.949171][ T7964] should_fail_ex+0x414/0x560 [ 130.949196][ T7964] should_failslab+0xa8/0x100 [ 130.949214][ T7964] kmem_cache_alloc_noprof+0x73/0x3c0 [ 130.949238][ T7964] ? skb_clone+0x212/0x3a0 [ 130.949257][ T7964] skb_clone+0x212/0x3a0 [ 130.949274][ T7964] __netlink_deliver_tap+0x404/0x850 [ 130.949306][ T7964] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.949327][ T7964] netlink_deliver_tap+0x19c/0x1b0 [ 130.949348][ T7964] netlink_sendskb+0x68/0x140 [ 130.949370][ T7964] netlink_rcv_skb+0x28c/0x470 [ 130.949389][ T7964] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.949404][ T7964] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.949438][ T7964] ? down_read+0x1ad/0x2e0 [ 130.949459][ T7964] genl_rcv+0x28/0x40 [ 130.949479][ T7964] netlink_unicast+0x75b/0x8d0 [ 130.949508][ T7964] netlink_sendmsg+0x805/0xb30 [ 130.949536][ T7964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.949560][ T7964] ? aa_sock_msg_perm+0x94/0x160 [ 130.949582][ T7964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 130.949600][ T7964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.949621][ T7964] __sock_sendmsg+0x21c/0x270 [ 130.949643][ T7964] ____sys_sendmsg+0x505/0x830 [ 130.949671][ T7964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.949701][ T7964] ? import_iovec+0x74/0xa0 [ 130.949730][ T7964] ___sys_sendmsg+0x21f/0x2a0 [ 130.949752][ T7964] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.949808][ T7964] ? __fget_files+0x2a/0x420 [ 130.949824][ T7964] ? __fget_files+0x3a0/0x420 [ 130.949852][ T7964] __x64_sys_sendmsg+0x19b/0x260 [ 130.949878][ T7964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.949909][ T7964] ? __pfx_ksys_write+0x10/0x10 [ 130.949922][ T7964] ? rcu_is_watching+0x15/0xb0 [ 130.949951][ T7964] ? do_syscall_64+0xbe/0x3b0 [ 130.949972][ T7964] do_syscall_64+0xfa/0x3b0 [ 130.949987][ T7964] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.950003][ T7964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.950018][ T7964] ? clear_bhb_loop+0x60/0xb0 [ 130.950038][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.950052][ T7964] RIP: 0033:0x7f45a2b8e929 [ 130.950066][ T7964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.950078][ T7964] RSP: 002b:00007f45a39b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.950096][ T7964] RAX: ffffffffffffffda RBX: 00007f45a2db5fa0 RCX: 00007f45a2b8e929 [ 130.950106][ T7964] RDX: 0000000020008840 RSI: 0000200000000000 RDI: 0000000000000003 [ 130.950117][ T7964] RBP: 00007f45a39b7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.950127][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.950137][ T7964] R13: 0000000000000000 R14: 00007f45a2db5fa0 R15: 00007fffd3750548 [ 130.950164][ T7964] [ 131.354851][ T7971] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 131.637962][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.705'. [ 131.729441][ T7981] netlink: 'syz.0.706': attribute type 10 has an invalid length. [ 131.776775][ T7981] team0: Port device wlan1 added [ 131.932453][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.710'. [ 131.942647][ T7989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.711'. [ 131.960882][ T7991] FAULT_INJECTION: forcing a failure. [ 131.960882][ T7991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.977709][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.711'. [ 131.982117][ T7988] netlink: 52 bytes leftover after parsing attributes in process `syz.4.710'. [ 131.991267][ T7991] CPU: 0 UID: 0 PID: 7991 Comm: syz.0.709 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 131.991292][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.991303][ T7991] Call Trace: [ 131.991312][ T7991] [ 131.991319][ T7991] dump_stack_lvl+0x189/0x250 [ 131.991348][ T7991] ? __pfx____ratelimit+0x10/0x10 [ 131.991367][ T7991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.991390][ T7991] ? __pfx__printk+0x10/0x10 [ 131.991420][ T7991] should_fail_ex+0x414/0x560 [ 131.991446][ T7991] _copy_to_user+0x31/0xb0 [ 131.991466][ T7991] simple_read_from_buffer+0xe1/0x170 [ 131.991488][ T7991] proc_fail_nth_read+0x1df/0x250 [ 131.991511][ T7991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.991533][ T7991] ? rw_verify_area+0x258/0x650 [ 131.991554][ T7991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.991580][ T7991] vfs_read+0x1fd/0x980 [ 131.991608][ T7991] ? __pfx___mutex_lock+0x10/0x10 [ 131.991626][ T7991] ? __pfx_vfs_read+0x10/0x10 [ 131.991649][ T7991] ? __fget_files+0x2a/0x420 [ 131.991671][ T7991] ? __fget_files+0x3a0/0x420 [ 131.991687][ T7991] ? __fget_files+0x2a/0x420 [ 131.991714][ T7991] ksys_read+0x145/0x250 [ 131.991732][ T7991] ? __pfx_ksys_read+0x10/0x10 [ 131.991751][ T7991] ? rcu_is_watching+0x15/0xb0 [ 131.991779][ T7991] ? do_syscall_64+0xbe/0x3b0 [ 131.991800][ T7991] do_syscall_64+0xfa/0x3b0 [ 131.991815][ T7991] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.991831][ T7991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.991847][ T7991] ? clear_bhb_loop+0x60/0xb0 [ 131.991866][ T7991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.991883][ T7991] RIP: 0033:0x7f45a2b8d33c [ 131.991898][ T7991] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 131.991912][ T7991] RSP: 002b:00007f45a39b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.991929][ T7991] RAX: ffffffffffffffda RBX: 00007f45a2db5fa0 RCX: 00007f45a2b8d33c [ 131.991941][ T7991] RDX: 000000000000000f RSI: 00007f45a39b70a0 RDI: 0000000000000004 [ 131.991951][ T7991] RBP: 00007f45a39b7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.991961][ T7991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.991971][ T7991] R13: 0000000000000000 R14: 00007f45a2db5fa0 R15: 00007fffd3750548 [ 131.991999][ T7991] [ 132.058840][ T7994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.273988][ T7994] FAULT_INJECTION: forcing a failure. [ 132.273988][ T7994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.332700][ T7994] CPU: 1 UID: 0 PID: 7994 Comm: syz.0.712 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 132.332727][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.332738][ T7994] Call Trace: [ 132.332745][ T7994] [ 132.332753][ T7994] dump_stack_lvl+0x189/0x250 [ 132.332781][ T7994] ? __pfx____ratelimit+0x10/0x10 [ 132.332799][ T7994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.332823][ T7994] ? __pfx__printk+0x10/0x10 [ 132.332855][ T7994] should_fail_ex+0x414/0x560 [ 132.332881][ T7994] _copy_to_user+0x31/0xb0 [ 132.332901][ T7994] simple_read_from_buffer+0xe1/0x170 [ 132.332925][ T7994] proc_fail_nth_read+0x1df/0x250 [ 132.332948][ T7994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.332971][ T7994] ? rw_verify_area+0x258/0x650 [ 132.332993][ T7994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.333014][ T7994] vfs_read+0x1fd/0x980 [ 132.333043][ T7994] ? __pfx___mutex_lock+0x10/0x10 [ 132.333062][ T7994] ? __pfx_vfs_read+0x10/0x10 [ 132.333087][ T7994] ? __fget_files+0x2a/0x420 [ 132.333110][ T7994] ? __fget_files+0x3a0/0x420 [ 132.333127][ T7994] ? __fget_files+0x2a/0x420 [ 132.333154][ T7994] ksys_read+0x145/0x250 [ 132.333174][ T7994] ? __pfx_ksys_read+0x10/0x10 [ 132.333193][ T7994] ? rcu_is_watching+0x15/0xb0 [ 132.333223][ T7994] ? do_syscall_64+0xbe/0x3b0 [ 132.333245][ T7994] do_syscall_64+0xfa/0x3b0 [ 132.333260][ T7994] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.333276][ T7994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.333293][ T7994] ? clear_bhb_loop+0x60/0xb0 [ 132.333314][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.333329][ T7994] RIP: 0033:0x7f45a2b8d33c [ 132.333345][ T7994] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.333360][ T7994] RSP: 002b:00007f45a39b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.333382][ T7994] RAX: ffffffffffffffda RBX: 00007f45a2db5fa0 RCX: 00007f45a2b8d33c [ 132.333395][ T7994] RDX: 000000000000000f RSI: 00007f45a39b70a0 RDI: 0000000000000004 [ 132.333406][ T7994] RBP: 00007f45a39b7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.333416][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.333427][ T7994] R13: 0000000000000000 R14: 00007f45a2db5fa0 R15: 00007fffd3750548 [ 132.333457][ T7994] [ 132.668816][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.690648][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.719360][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.750240][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.385816][ T8035] netlink: 'syz.1.725': attribute type 13 has an invalid length. [ 133.404050][ T8035] netlink: 'syz.1.725': attribute type 17 has an invalid length. [ 133.539260][ T8035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.562010][ T8055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.688341][ T8047] lo speed is unknown, defaulting to 1000 [ 133.716253][ T8065] netlink: 'syz.4.734': attribute type 10 has an invalid length. [ 133.727914][ T8035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.810951][ T8050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.352096][ T8099] __nla_validate_parse: 6 callbacks suppressed [ 134.352114][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 134.876900][ T8130] netlink: 'syz.3.754': attribute type 21 has an invalid length. [ 134.889217][ T8130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.754'. [ 134.930982][ T8129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.756'. [ 134.934389][ T8118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.080474][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 135.233849][ T8144] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 135.254491][ T8144] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.296659][ T8146] tipc: Started in network mode [ 135.314074][ T8146] tipc: Node identity 729c22c6e842, cluster identity 4711 [ 135.321439][ T8146] tipc: Enabled bearer , priority 0 [ 135.372935][ T8146] tipc: Resetting bearer [ 135.402513][ T8149] syz.1.765: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.443810][ T8149] CPU: 0 UID: 0 PID: 8149 Comm: syz.1.765 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 135.443838][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.443849][ T8149] Call Trace: [ 135.443857][ T8149] [ 135.443865][ T8149] dump_stack_lvl+0x189/0x250 [ 135.443899][ T8149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.443925][ T8149] ? __pfx__printk+0x10/0x10 [ 135.443945][ T8149] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 135.443964][ T8149] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 135.443994][ T8149] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 135.444017][ T8149] warn_alloc+0x214/0x310 [ 135.444037][ T8149] ? stack_depot_save_flags+0x40/0x900 [ 135.444064][ T8149] ? __pfx_warn_alloc+0x10/0x10 [ 135.444085][ T8149] ? kasan_save_track+0x4f/0x80 [ 135.444106][ T8149] ? xskq_create+0x56/0x170 [ 135.444120][ T8149] ? xsk_init_queue+0xb0/0x110 [ 135.444141][ T8149] ? xsk_setsockopt+0x43f/0x710 [ 135.444159][ T8149] ? do_sock_setsockopt+0x257/0x3e0 [ 135.444178][ T8149] ? __x64_sys_setsockopt+0x18b/0x220 [ 135.444199][ T8149] ? do_syscall_64+0xfa/0x3b0 [ 135.444215][ T8149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.444241][ T8149] __vmalloc_node_range_noprof+0x125/0x12f0 [ 135.444291][ T8149] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.444315][ T8149] ? __kasan_kmalloc+0x93/0xb0 [ 135.444336][ T8149] vmalloc_user_noprof+0xad/0xf0 [ 135.444355][ T8149] ? xskq_create+0xbf/0x170 [ 135.444370][ T8149] xskq_create+0xbf/0x170 [ 135.444391][ T8149] xsk_init_queue+0xb0/0x110 [ 135.444419][ T8149] xsk_setsockopt+0x43f/0x710 [ 135.444447][ T8149] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.444471][ T8149] ? __lock_acquire+0xab9/0xd20 [ 135.444504][ T8149] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 135.444524][ T8149] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.444550][ T8149] do_sock_setsockopt+0x257/0x3e0 [ 135.444574][ T8149] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 135.444602][ T8149] ? __fget_files+0x2a/0x420 [ 135.444630][ T8149] __x64_sys_setsockopt+0x18b/0x220 [ 135.444659][ T8149] do_syscall_64+0xfa/0x3b0 [ 135.444676][ T8149] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.444693][ T8149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.444710][ T8149] ? clear_bhb_loop+0x60/0xb0 [ 135.444731][ T8149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.444747][ T8149] RIP: 0033:0x7f50d278e929 [ 135.444764][ T8149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.444779][ T8149] RSP: 002b:00007f50d36e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.444799][ T8149] RAX: ffffffffffffffda RBX: 00007f50d29b5fa0 RCX: 00007f50d278e929 [ 135.444813][ T8149] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 135.444824][ T8149] RBP: 00007f50d2810b39 R08: 0000000000000004 R09: 0000000000000000 [ 135.444836][ T8149] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.444848][ T8149] R13: 0000000000000000 R14: 00007f50d29b5fa0 R15: 00007ffc687114e8 [ 135.444880][ T8149] [ 135.444887][ T8149] Mem-Info: [ 135.579041][ T8150] lo speed is unknown, defaulting to 1000 [ 135.589343][ T8149] active_anon:3617 inactive_anon:0 isolated_anon:0 [ 135.589343][ T8149] active_file:1494 inactive_file:39851 isolated_file:0 [ 135.589343][ T8149] unevictable:768 dirty:68 writeback:25 [ 135.589343][ T8149] slab_reclaimable:11216 slab_unreclaimable:122417 [ 135.589343][ T8149] mapped:29101 shmem:1361 pagetables:972 [ 135.589343][ T8149] sec_pagetables:0 bounce:0 [ 135.589343][ T8149] kernel_misc_reclaimable:0 [ 135.589343][ T8149] free:1297737 free_pcp:19518 free_cma:0 [ 135.646783][ T8160] FAULT_INJECTION: forcing a failure. [ 135.646783][ T8160] name failslab, interval 1, probability 0, space 0, times 0 [ 135.651854][ T8149] Node 0 active_anon:14468kB inactive_anon:0kB active_file:5976kB inactive_file:159208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116404kB dirty:268kB writeback:100kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11476kB pagetables:3836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.654445][ T8160] CPU: 1 UID: 0 PID: 8160 Comm: syz.4.769 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 135.654468][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.654479][ T8160] Call Trace: [ 135.654487][ T8160] [ 135.654495][ T8160] dump_stack_lvl+0x189/0x250 [ 135.654522][ T8160] ? __pfx____ratelimit+0x10/0x10 [ 135.654541][ T8160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.654563][ T8160] ? __pfx__printk+0x10/0x10 [ 135.654591][ T8160] should_fail_ex+0x414/0x560 [ 135.654617][ T8160] should_failslab+0xa8/0x100 [ 135.654636][ T8160] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 135.654653][ T8160] ? __alloc_skb+0x112/0x2d0 [ 135.654672][ T8160] ? __local_bh_enable_ip+0x12d/0x1c0 [ 135.654697][ T8160] __alloc_skb+0x112/0x2d0 [ 135.654721][ T8160] tipc_buf_acquire+0x2b/0xe0 [ 135.654738][ T8160] tipc_named_withdraw+0x1db/0x760 [ 135.654760][ T8160] tipc_nametbl_withdraw+0xcc/0x280 [ 135.654786][ T8160] tipc_sk_withdraw+0x2f6/0x630 [ 135.654816][ T8160] ? __pfx_tipc_sk_withdraw+0x10/0x10 [ 135.654839][ T8160] ? do_raw_spin_unlock+0x122/0x240 [ 135.654863][ T8160] tipc_sk_bind+0x234/0x300 [ 135.654883][ T8160] ? tipc_bind+0x6c/0x260 [ 135.654906][ T8160] __sys_bind+0x2c3/0x3e0 [ 135.654924][ T8160] ? __fget_files+0x3a0/0x420 [ 135.654942][ T8160] ? __pfx___sys_bind+0x10/0x10 [ 135.654973][ T8160] ? __pfx_ksys_write+0x10/0x10 [ 135.654986][ T8160] ? rcu_is_watching+0x15/0xb0 [ 135.655024][ T8160] __x64_sys_bind+0x7a/0x90 [ 135.655043][ T8160] do_syscall_64+0xfa/0x3b0 [ 135.655059][ T8160] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.655075][ T8160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.655091][ T8160] ? clear_bhb_loop+0x60/0xb0 [ 135.655111][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.655125][ T8160] RIP: 0033:0x7efd9058e929 [ 135.655140][ T8160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.655154][ T8160] RSP: 002b:00007efd91334038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 135.655172][ T8160] RAX: ffffffffffffffda RBX: 00007efd907b5fa0 RCX: 00007efd9058e929 [ 135.655184][ T8160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 135.655193][ T8160] RBP: 00007efd91334090 R08: 0000000000000000 R09: 0000000000000000 [ 135.655203][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.655213][ T8160] R13: 0000000000000000 R14: 00007efd907b5fa0 R15: 00007ffcfa49f0c8 [ 135.655240][ T8160] [ 135.655248][ T8160] tipc: Withdrawal distribution failure [ 135.660151][ T8149] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 136.183111][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 136.194139][ T8149] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.284013][ T8149] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 136.289828][ T8149] Node 0 DMA32 free:1274156kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14220kB inactive_anon:0kB active_file:5976kB inactive_file:157384kB unevictable:1536kB writepending:260kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:53108kB local_pcp:17032kB free_cma:0kB [ 136.374976][ T924] tipc: Node number set to 2598249158 [ 136.383686][ T8149] lowmem_reserve[]: 0 0 1 1 1 [ 136.399758][ T8149] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 136.434277][ T8149] lowmem_reserve[]: 0 0 0 0 0 [ 136.439996][ T8149] Node 1 Normal free:3905476kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18624kB local_pcp:5344kB free_cma:0kB [ 136.441413][ T8154] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 136.472634][ T8149] lowmem_reserve[]: 0 0 0 0 0 [ 136.486929][ T8149] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 136.501435][ T8149] Node 0 DMA32: 1143*4kB (U) 450*8kB (UME) 40*16kB (UM) 226*32kB (UE) 4*64kB (UM) 69*128kB (UME) 49*256kB (UME) 35*512kB (UME) 32*1024kB (UME) 9*2048kB (UM) 285*4096kB (M) = 1274156kB [ 136.521180][ T8149] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 136.534012][ T8149] Node 1 Normal: 175*4kB (UME) 37*8kB (UME) 36*16kB (UME) 103*32kB (UME) 23*64kB (UME) 8*128kB (UME) 7*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 950*4096kB (M) = 3905476kB [ 136.552815][ T8149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.563086][ T8149] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.574909][ T8149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.588756][ T8149] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.598687][ T8149] 43328 total pagecache pages [ 136.603545][ T8149] 0 pages in swap cache [ 136.608257][ T8149] Free swap = 124996kB [ 136.612580][ T8149] Total swap = 124996kB [ 136.617473][ T8149] 2097051 pages RAM [ 136.627279][ T8149] 0 pages HighMem/MovableOnly [ 136.631974][ T8149] 424693 pages reserved [ 136.637093][ T8149] 0 pages cma reserved [ 136.797747][ T8180] lo speed is unknown, defaulting to 1000 [ 137.111607][ T8195] FAULT_INJECTION: forcing a failure. [ 137.111607][ T8195] name failslab, interval 1, probability 0, space 0, times 0 [ 137.134231][ T8195] CPU: 0 UID: 0 PID: 8195 Comm: syz.2.782 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 137.134259][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.134270][ T8195] Call Trace: [ 137.134277][ T8195] [ 137.134285][ T8195] dump_stack_lvl+0x189/0x250 [ 137.134314][ T8195] ? __pfx____ratelimit+0x10/0x10 [ 137.134331][ T8195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.134355][ T8195] ? __pfx__printk+0x10/0x10 [ 137.134378][ T8195] ? __pfx___might_resched+0x10/0x10 [ 137.134401][ T8195] ? fs_reclaim_acquire+0x7d/0x100 [ 137.134423][ T8195] should_fail_ex+0x414/0x560 [ 137.134448][ T8195] should_failslab+0xa8/0x100 [ 137.134468][ T8195] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 137.134485][ T8195] ? __alloc_skb+0x112/0x2d0 [ 137.134509][ T8195] __alloc_skb+0x112/0x2d0 [ 137.134533][ T8195] netlink_ack+0x146/0xa50 [ 137.134550][ T8195] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.134568][ T8195] ? ref_tracker_free+0x63a/0x7d0 [ 137.134585][ T8195] ? __copy_skb_header+0xa7/0x550 [ 137.134609][ T8195] ? __pfx_ref_tracker_free+0x10/0x10 [ 137.134638][ T8195] netlink_rcv_skb+0x28c/0x470 [ 137.134658][ T8195] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.134680][ T8195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.134714][ T8195] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.134732][ T8195] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.134758][ T8195] netlink_unicast+0x75b/0x8d0 [ 137.134788][ T8195] netlink_sendmsg+0x805/0xb30 [ 137.134816][ T8195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.134840][ T8195] ? aa_sock_msg_perm+0x94/0x160 [ 137.134863][ T8195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.134883][ T8195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.134904][ T8195] __sock_sendmsg+0x21c/0x270 [ 137.134926][ T8195] ____sys_sendmsg+0x52d/0x830 [ 137.134955][ T8195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.134986][ T8195] ? import_iovec+0x74/0xa0 [ 137.135006][ T8195] ___sys_sendmsg+0x21f/0x2a0 [ 137.135031][ T8195] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.135106][ T8195] ? __might_fault+0xb0/0x130 [ 137.135127][ T8195] __sys_sendmmsg+0x227/0x430 [ 137.135155][ T8195] ? __pfx___sys_sendmmsg+0x10/0x10 [ 137.135175][ T8195] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 137.135216][ T8195] ? ksys_write+0x22a/0x250 [ 137.135234][ T8195] ? __pfx_ksys_write+0x10/0x10 [ 137.135247][ T8195] ? rcu_is_watching+0x15/0xb0 [ 137.135281][ T8195] __x64_sys_sendmmsg+0xa0/0xc0 [ 137.135305][ T8195] do_syscall_64+0xfa/0x3b0 [ 137.135322][ T8195] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.135338][ T8195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.135355][ T8195] ? clear_bhb_loop+0x60/0xb0 [ 137.135375][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.135391][ T8195] RIP: 0033:0x7fb2dc98e929 [ 137.135407][ T8195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.135422][ T8195] RSP: 002b:00007fb2dd7bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 137.135441][ T8195] RAX: ffffffffffffffda RBX: 00007fb2dcbb5fa0 RCX: 00007fb2dc98e929 [ 137.135454][ T8195] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 137.135466][ T8195] RBP: 00007fb2dd7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 137.135477][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.135487][ T8195] R13: 0000000000000000 R14: 00007fb2dcbb5fa0 R15: 00007ffc9e0e5768 [ 137.135515][ T8195] [ 137.570127][ T5153] Bluetooth: hci4: link tx timeout [ 137.579764][ T5153] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.823479][ T8216] netlink: 'syz.3.790': attribute type 30 has an invalid length. [ 137.953191][ T8218] netlink: 'syz.3.790': attribute type 30 has an invalid length. [ 138.302567][ T8231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.793'. [ 138.333009][ T8230] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 138.453471][ T8236] bond2: (slave veth7): Enslaving as an active interface with a down link [ 138.517586][ T8236] tipc: Enabling of bearer rejected, already enabled [ 138.627025][ T8249] FAULT_INJECTION: forcing a failure. [ 138.627025][ T8249] name failslab, interval 1, probability 0, space 0, times 0 [ 138.642660][ T8249] CPU: 0 UID: 0 PID: 8249 Comm: syz.2.798 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 138.642693][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.642704][ T8249] Call Trace: [ 138.642711][ T8249] [ 138.642718][ T8249] dump_stack_lvl+0x189/0x250 [ 138.642746][ T8249] ? __pfx____ratelimit+0x10/0x10 [ 138.642764][ T8249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.642787][ T8249] ? __pfx__printk+0x10/0x10 [ 138.642820][ T8249] should_fail_ex+0x414/0x560 [ 138.642846][ T8249] should_failslab+0xa8/0x100 [ 138.642866][ T8249] kmem_cache_alloc_noprof+0x73/0x3c0 [ 138.642889][ T8249] ? skb_clone+0x212/0x3a0 [ 138.642908][ T8249] skb_clone+0x212/0x3a0 [ 138.642926][ T8249] __netlink_deliver_tap+0x404/0x850 [ 138.642959][ T8249] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.642979][ T8249] netlink_deliver_tap+0x19c/0x1b0 [ 138.643000][ T8249] netlink_sendskb+0x68/0x140 [ 138.643021][ T8249] netlink_rcv_skb+0x28c/0x470 [ 138.643042][ T8249] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.643065][ T8249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.643096][ T8249] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.643113][ T8249] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.643136][ T8249] netlink_unicast+0x75b/0x8d0 [ 138.643165][ T8249] netlink_sendmsg+0x805/0xb30 [ 138.643196][ T8249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.643219][ T8249] ? aa_sock_msg_perm+0x94/0x160 [ 138.643241][ T8249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.643262][ T8249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.643283][ T8249] __sock_sendmsg+0x21c/0x270 [ 138.643305][ T8249] ____sys_sendmsg+0x52d/0x830 [ 138.643333][ T8249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.643364][ T8249] ? import_iovec+0x74/0xa0 [ 138.643386][ T8249] ___sys_sendmsg+0x21f/0x2a0 [ 138.643411][ T8249] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.643480][ T8249] ? __might_fault+0xb0/0x130 [ 138.643500][ T8249] __sys_sendmmsg+0x227/0x430 [ 138.643529][ T8249] ? __pfx___sys_sendmmsg+0x10/0x10 [ 138.643548][ T8249] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 138.643593][ T8249] ? ksys_write+0x22a/0x250 [ 138.643614][ T8249] ? __pfx_ksys_write+0x10/0x10 [ 138.643626][ T8249] ? rcu_is_watching+0x15/0xb0 [ 138.643656][ T8249] __x64_sys_sendmmsg+0xa0/0xc0 [ 138.643681][ T8249] do_syscall_64+0xfa/0x3b0 [ 138.643707][ T8249] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.643724][ T8249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.643741][ T8249] ? clear_bhb_loop+0x60/0xb0 [ 138.643762][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.643778][ T8249] RIP: 0033:0x7fb2dc98e929 [ 138.643794][ T8249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.643808][ T8249] RSP: 002b:00007fb2dd7bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 138.643827][ T8249] RAX: ffffffffffffffda RBX: 00007fb2dcbb5fa0 RCX: 00007fb2dc98e929 [ 138.643840][ T8249] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 138.643852][ T8249] RBP: 00007fb2dd7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 138.643863][ T8249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.643874][ T8249] R13: 0000000000000000 R14: 00007fb2dcbb5fa0 R15: 00007ffc9e0e5768 [ 138.643903][ T8249] [ 138.983157][ T8253] netlink: 56 bytes leftover after parsing attributes in process `syz.3.800'. [ 139.009828][ T8247] netlink: 372 bytes leftover after parsing attributes in process `syz.4.797'. [ 139.252245][ T8269] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 139.368300][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.806'. [ 139.371339][ T8274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.458465][ T8282] netlink: 64 bytes leftover after parsing attributes in process `syz.4.808'. [ 139.479419][ T8283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.624414][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 139.708595][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 139.731255][ T8299] netlink: 372 bytes leftover after parsing attributes in process `syz.0.813'. [ 139.911652][ T8309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.817'. [ 139.947737][ T8309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.817'. [ 140.100701][ T8322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.820'. [ 140.251075][ T8326] pim6reg1: entered promiscuous mode [ 140.252046][ T8319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.256646][ T8326] pim6reg1: entered allmulticast mode [ 140.263713][ T8319] IPv6: NLM_F_CREATE should be set when creating new route [ 140.345016][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 140.353355][ T8328] lo speed is unknown, defaulting to 1000 [ 140.505174][ T8336] netlink: 256 bytes leftover after parsing attributes in process `syz.2.824'. [ 140.676249][ T8342] netlink: 372 bytes leftover after parsing attributes in process `syz.3.826'. [ 140.802293][ T8321] syz.4.817 (8321) used greatest stack depth: 17992 bytes left [ 141.020336][ T8352] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 141.048281][ T8352] veth5: left promiscuous mode [ 141.278598][ T8368] FAULT_INJECTION: forcing a failure. [ 141.278598][ T8368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.295698][ T8368] CPU: 0 UID: 0 PID: 8368 Comm: syz.1.834 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 141.295722][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.295732][ T8368] Call Trace: [ 141.295738][ T8368] [ 141.295745][ T8368] dump_stack_lvl+0x189/0x250 [ 141.295771][ T8368] ? __pfx____ratelimit+0x10/0x10 [ 141.295787][ T8368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.295809][ T8368] ? __pfx__printk+0x10/0x10 [ 141.295837][ T8368] should_fail_ex+0x414/0x560 [ 141.295861][ T8368] _copy_to_user+0x31/0xb0 [ 141.295880][ T8368] simple_read_from_buffer+0xe1/0x170 [ 141.295901][ T8368] proc_fail_nth_read+0x1df/0x250 [ 141.295924][ T8368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.295944][ T8368] ? rw_verify_area+0x258/0x650 [ 141.295964][ T8368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.295982][ T8368] vfs_read+0x1fd/0x980 [ 141.296009][ T8368] ? __pfx___mutex_lock+0x10/0x10 [ 141.296027][ T8368] ? __pfx_vfs_read+0x10/0x10 [ 141.296048][ T8368] ? __fget_files+0x2a/0x420 [ 141.296068][ T8368] ? __fget_files+0x3a0/0x420 [ 141.296083][ T8368] ? __fget_files+0x2a/0x420 [ 141.296108][ T8368] ksys_read+0x145/0x250 [ 141.296126][ T8368] ? __pfx_ksys_read+0x10/0x10 [ 141.296144][ T8368] ? rcu_is_watching+0x15/0xb0 [ 141.296170][ T8368] ? do_syscall_64+0xbe/0x3b0 [ 141.296189][ T8368] do_syscall_64+0xfa/0x3b0 [ 141.296202][ T8368] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.296217][ T8368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.296233][ T8368] ? clear_bhb_loop+0x60/0xb0 [ 141.296251][ T8368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.296266][ T8368] RIP: 0033:0x7f50d278d33c [ 141.296282][ T8368] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.296295][ T8368] RSP: 002b:00007f50d36e4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.296314][ T8368] RAX: ffffffffffffffda RBX: 00007f50d29b5fa0 RCX: 00007f50d278d33c [ 141.296326][ T8368] RDX: 000000000000000f RSI: 00007f50d36e40a0 RDI: 0000000000000005 [ 141.296336][ T8368] RBP: 00007f50d36e4090 R08: 0000000000000000 R09: 0000000000000000 [ 141.296346][ T8368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.296356][ T8368] R13: 0000000000000000 R14: 00007f50d29b5fa0 R15: 00007ffc687114e8 [ 141.296391][ T8368] [ 141.551674][ T8372] netlink: 'syz.2.836': attribute type 1 has an invalid length. [ 141.837032][ T8383] tipc: Can't bind to reserved service type 1 [ 142.089738][ T8397] geneve1: mtu less than device minimum [ 142.110918][ T8398] netlink: 'syz.1.844': attribute type 10 has an invalid length. [ 142.151837][ T8396] lo speed is unknown, defaulting to 1000 [ 142.160014][ T8398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.113503][ T8427] lo speed is unknown, defaulting to 1000 [ 143.225737][ T8441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.713810][ T8464] FAULT_INJECTION: forcing a failure. [ 143.713810][ T8464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.774026][ T8464] CPU: 0 UID: 0 PID: 8464 Comm: syz.3.870 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 143.774053][ T8464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.774063][ T8464] Call Trace: [ 143.774070][ T8464] [ 143.774078][ T8464] dump_stack_lvl+0x189/0x250 [ 143.774105][ T8464] ? __pfx____ratelimit+0x10/0x10 [ 143.774121][ T8464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.774143][ T8464] ? __pfx__printk+0x10/0x10 [ 143.774161][ T8464] ? __might_fault+0xb0/0x130 [ 143.774187][ T8464] should_fail_ex+0x414/0x560 [ 143.774217][ T8464] _copy_from_user+0x2d/0xb0 [ 143.774234][ T8464] ___sys_sendmsg+0x158/0x2a0 [ 143.774258][ T8464] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.774313][ T8464] ? __fget_files+0x2a/0x420 [ 143.774330][ T8464] ? __fget_files+0x3a0/0x420 [ 143.774359][ T8464] __x64_sys_sendmsg+0x19b/0x260 [ 143.774392][ T8464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.774425][ T8464] ? __pfx_ksys_write+0x10/0x10 [ 143.774439][ T8464] ? rcu_is_watching+0x15/0xb0 [ 143.774467][ T8464] ? do_syscall_64+0xbe/0x3b0 [ 143.774488][ T8464] do_syscall_64+0xfa/0x3b0 [ 143.774504][ T8464] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.774521][ T8464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.774537][ T8464] ? clear_bhb_loop+0x60/0xb0 [ 143.774557][ T8464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.774573][ T8464] RIP: 0033:0x7f2f3198e929 [ 143.774588][ T8464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.774602][ T8464] RSP: 002b:00007f2f32805038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.774621][ T8464] RAX: ffffffffffffffda RBX: 00007f2f31bb5fa0 RCX: 00007f2f3198e929 [ 143.774633][ T8464] RDX: 00000000040000c0 RSI: 0000200000000040 RDI: 0000000000000003 [ 143.774644][ T8464] RBP: 00007f2f32805090 R08: 0000000000000000 R09: 0000000000000000 [ 143.774655][ T8464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.774665][ T8464] R13: 0000000000000000 R14: 00007f2f31bb5fa0 R15: 00007ffcc4b41018 [ 143.774693][ T8464] [ 144.226550][ T8470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.252245][ T8429] smc: removing ib device syz0 [ 144.532931][ T8483] netlink: 'syz.0.858': attribute type 12 has an invalid length. [ 144.606838][ T8466] veth1_to_bond: entered promiscuous mode [ 144.614283][ T8466] veth1_to_bond: entered allmulticast mode [ 144.897415][ T8501] __nla_validate_parse: 10 callbacks suppressed [ 144.897435][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 144.913804][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 145.382869][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 145.404853][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.487725][ T8513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.587020][ T8522] Cannot find del_set index 4 as target [ 145.798903][ T8524] netlink: 372 bytes leftover after parsing attributes in process `syz.2.887'. [ 146.256808][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.893'. [ 146.679305][ T8550] FAULT_INJECTION: forcing a failure. [ 146.679305][ T8550] name failslab, interval 1, probability 0, space 0, times 0 [ 146.700690][ T8550] CPU: 0 UID: 0 PID: 8550 Comm: syz.1.896 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 146.700717][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.700729][ T8550] Call Trace: [ 146.700736][ T8550] [ 146.700744][ T8550] dump_stack_lvl+0x189/0x250 [ 146.700773][ T8550] ? __pfx____ratelimit+0x10/0x10 [ 146.700791][ T8550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.700814][ T8550] ? __pfx__printk+0x10/0x10 [ 146.700846][ T8550] ? __pfx___might_resched+0x10/0x10 [ 146.700874][ T8550] should_fail_ex+0x414/0x560 [ 146.700900][ T8550] ? xp_create_and_assign_umem+0xa4/0xce0 [ 146.700916][ T8550] should_failslab+0xa8/0x100 [ 146.700936][ T8550] __kvmalloc_node_noprof+0x161/0x5f0 [ 146.700955][ T8550] ? xp_create_and_assign_umem+0xa4/0xce0 [ 146.700979][ T8550] xp_create_and_assign_umem+0xa4/0xce0 [ 146.701005][ T8550] ? dev_get_by_index+0x22/0x2e0 [ 146.701023][ T8550] ? dev_get_by_index+0x22/0x2e0 [ 146.701037][ T8550] ? dev_get_by_index+0x22/0x2e0 [ 146.701060][ T8550] xsk_bind+0x42d/0xf90 [ 146.701093][ T8550] __sys_bind+0x2c3/0x3e0 [ 146.701117][ T8550] ? __pfx___sys_bind+0x10/0x10 [ 146.701149][ T8550] ? __pfx_ksys_write+0x10/0x10 [ 146.701163][ T8550] ? rcu_is_watching+0x15/0xb0 [ 146.701194][ T8550] __x64_sys_bind+0x7a/0x90 [ 146.701215][ T8550] do_syscall_64+0xfa/0x3b0 [ 146.701231][ T8550] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.701248][ T8550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.701264][ T8550] ? clear_bhb_loop+0x60/0xb0 [ 146.701285][ T8550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.701301][ T8550] RIP: 0033:0x7f50d278e929 [ 146.701316][ T8550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.701330][ T8550] RSP: 002b:00007f50d36c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 146.701349][ T8550] RAX: ffffffffffffffda RBX: 00007f50d29b6080 RCX: 00007f50d278e929 [ 146.701361][ T8550] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 146.701372][ T8550] RBP: 00007f50d36c3090 R08: 0000000000000000 R09: 0000000000000000 [ 146.701383][ T8550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.701394][ T8550] R13: 0000000000000000 R14: 00007f50d29b6080 R15: 00007ffc687114e8 [ 146.701423][ T8550] [ 147.011215][ T8556] netlink: 372 bytes leftover after parsing attributes in process `syz.3.899'. [ 147.262366][ T8564] netlink: zone id is out of range [ 147.302638][ T8564] netlink: zone id is out of range [ 147.321843][ T8564] netlink: zone id is out of range [ 147.327664][ T8564] netlink: zone id is out of range [ 147.334526][ T8564] netlink: zone id is out of range [ 147.339747][ T8564] netlink: zone id is out of range [ 147.344996][ T8564] netlink: zone id is out of range [ 147.350178][ T8564] netlink: zone id is out of range [ 147.360003][ T8564] netlink: zone id is out of range [ 147.365972][ T8564] netlink: zone id is out of range [ 147.688203][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 191.144486][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 191.144951][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 191.150645][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 194.190376][ C1] net_ratelimit: 237 callbacks suppressed [ 194.190397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.190601][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.450985][ T8596] netlink: 372 bytes leftover after parsing attributes in process `syz.3.913'. [ 207.826883][ T8602] syzkaller0: entered promiscuous mode [ 207.844308][ T8602] syzkaller0: entered allmulticast mode [ 208.122472][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 209.456471][ T8632] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 209.685661][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 210.001236][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 210.029742][ T8682] lo: entered allmulticast mode [ 210.050142][ T8681] lo: left allmulticast mode [ 210.098170][ T8688] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 210.182638][ T8688] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 210.202856][ T8688] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 210.320164][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.950'. [ 210.349869][ T8703] pim6reg: entered allmulticast mode [ 210.379261][ T8703] pim6reg: left allmulticast mode [ 210.395403][ T8705] netlink: 212 bytes leftover after parsing attributes in process `syz.2.947'. [ 211.151853][ T5893] IPVS: starting estimator thread 0... [ 211.263976][ T8725] IPVS: using max 28 ests per chain, 67200 per kthread [ 211.592928][ T8746] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 212.150454][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 212.177062][ T8776] netlink: 16 bytes leftover after parsing attributes in process `syz.4.974'. [ 212.248009][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.268846][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.278066][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.365902][ T8783] netlink: 72 bytes leftover after parsing attributes in process `syz.3.975'. [ 212.393029][ T8783] tipc: Enabled bearer , priority 10 [ 212.417493][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.425674][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.528048][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 212.543972][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.592661][ T8788] pim6reg: entered allmulticast mode [ 212.617151][ T8788] pim6reg: left allmulticast mode [ 212.630718][ T8794] netlink: 240 bytes leftover after parsing attributes in process `syz.2.979'. [ 212.756045][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.977'. [ 212.862835][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.983'. [ 212.992002][ T8812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.985'. [ 213.142802][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 213.152965][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 213.226255][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.129869][ T8874] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1003'. [ 214.182070][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 214.214230][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 214.500434][ T8878] team0 (unregistering): Port device team_slave_0 removed [ 214.537376][ T8878] team0 (unregistering): Port device team_slave_1 removed [ 214.579313][ T8897] netlink: 'syz.4.1009': attribute type 29 has an invalid length. [ 214.590396][ T8899] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 214.605468][ T8899] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 214.670185][ T8897] netlink: 'syz.4.1009': attribute type 29 has an invalid length. [ 214.781649][ T8906] vlan0: entered promiscuous mode [ 215.222707][ T8929] ip6t_srh: unknown srh match flags 5294 [ 215.402854][ T8938] pim6reg: entered allmulticast mode [ 215.449028][ T8940] pim6reg: left allmulticast mode [ 215.851924][ T8957] syzkaller1: entered promiscuous mode [ 215.898573][ T8957] syzkaller1: entered allmulticast mode [ 216.009126][ T8965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.184285][ T8976] netlink: 'syz.3.1035': attribute type 13 has an invalid length. [ 216.216380][ T8985] netlink: 'syz.4.1036': attribute type 12 has an invalid length. [ 216.263806][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.278383][ T8976] gretap0: refused to change device tx_queue_len [ 216.285801][ T8979] xt_CT: No such helper "snmp" [ 216.296378][ T8976] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.448356][ T8995] vxcan4: entered promiscuous mode [ 216.859412][ T9024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.192877][ T9029] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 217.913940][ T9065] __nla_validate_parse: 19 callbacks suppressed [ 217.913959][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1052'. [ 218.340769][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1055'. [ 218.686509][ T9094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.711615][ T9091] pim6reg: entered allmulticast mode [ 218.734028][ T9097] IPVS: length: 193 != 8 [ 218.854992][ T9104] netlink: 'syz.2.1063': attribute type 15 has an invalid length. [ 218.891505][ T9109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1065'. [ 218.906783][ T9104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1063'. [ 218.958808][ T9114] tipc: Publication distribution failure [ 219.015614][ T2155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.025592][ T2155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.126723][ T9120] bond1: (slave geneve3): Releasing active interface [ 219.154545][ T9055] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 219.163307][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1070'. [ 219.179130][ T9055] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 219.209967][ T9055] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 219.230061][ T9055] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 219.449286][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 219.466720][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 219.479507][ T9137] hsr_slave_0: left promiscuous mode [ 219.496392][ T9137] hsr_slave_1: left promiscuous mode [ 219.569659][ T9143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1077'. [ 219.593081][ T9145] : entered promiscuous mode [ 219.714585][ T2155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.723048][ T2155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.738293][ T9147] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1080'. [ 219.843337][ T9156] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 220.238070][ T9188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1093'. [ 220.496853][ T9213] ipvlan2: entered promiscuous mode [ 220.625852][ T9224] netlink: 'syz.2.1102': attribute type 1 has an invalid length. [ 220.650826][ T9223] netlink: 'syz.2.1102': attribute type 1 has an invalid length. [ 220.700846][ T9223] bond2: entered promiscuous mode [ 220.707272][ T9223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.731358][ T9221] bond2: (slave bridge1): making interface the new active one [ 220.739035][ T9221] bridge1: entered promiscuous mode [ 220.746453][ T9221] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 221.070581][ T5893] IPVS: starting estimator thread 0... [ 221.166315][ T9251] IPVS: using max 30 ests per chain, 72000 per kthread [ 221.372147][ T9269] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 221.382799][ T9269] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 221.670269][ T9282] xt_CT: No such helper "snmp" [ 221.917189][ T9295] Bluetooth: MGMT ver 1.23 [ 222.291551][ T9304] syzkaller1: entered promiscuous mode [ 222.311884][ T9304] syzkaller1: entered allmulticast mode [ 222.348536][ T9308] netlink: 'syz.3.1123': attribute type 11 has an invalid length. [ 222.865208][ T9330] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 223.160860][ T9349] __nla_validate_parse: 7 callbacks suppressed [ 223.160879][ T9349] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1136'. [ 223.297797][ T9355] netlink: 'syz.0.1138': attribute type 3 has an invalid length. [ 223.449883][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 223.699956][ T9372] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1144'. [ 223.715836][ T9372] ip6gretap0: entered promiscuous mode [ 223.722533][ T9372] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1144'. [ 223.836517][ T9375] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 223.865238][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 223.881999][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 224.082157][ T9390] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 224.263999][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.311785][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1152'. [ 224.730858][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 224.779504][ T9420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1158'. [ 224.825764][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1158'. [ 225.602753][ T9466] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 226.193424][ T9498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.527966][ T9513] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 226.795240][ T9534] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 226.983687][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 227.465119][ T9569] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 227.466112][ T9570] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 227.477392][ T9569] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 227.635471][ T9575] bond_slave_0: entered promiscuous mode [ 227.641349][ T9575] bond_slave_1: entered promiscuous mode [ 227.648636][ T9575] macsec1: entered promiscuous mode [ 227.655584][ T9575] bond0: entered promiscuous mode [ 227.664738][ T9575] bond0: left promiscuous mode [ 227.670148][ T9575] bond_slave_0: left promiscuous mode [ 227.675645][ T9575] bond_slave_1: left promiscuous mode [ 228.308738][ T9610] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.309378][ T9612] __nla_validate_parse: 14 callbacks suppressed [ 228.309393][ T9612] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1212'. [ 228.529399][ T9624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1213'. [ 228.698895][ T9596] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1208'. [ 228.731450][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 228.744667][ T13] wlan1: Trigger new scan to find an IBSS to join [ 228.772655][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 228.793262][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 228.811109][ T9641] netlink: 372 bytes leftover after parsing attributes in process `syz.3.1221'. [ 229.001026][ T9649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1224'. [ 229.020893][ T9649] openvswitch: netlink: Flow actions attr not present in new flow. [ 229.280002][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1226'. [ 229.564999][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 229.611769][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 229.627560][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 229.635702][ T5893] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 229.766501][ T9658] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 229.780729][ T9658] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 229.878813][ T9687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.928770][ T9658] batadv_slave_0: entered promiscuous mode [ 229.954728][ T9657] batadv_slave_0: left promiscuous mode [ 230.185855][ T924] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 230.198467][ T9700] openvswitch: netlink: Missing key (keys=40, expected=80) [ 230.283825][ T924] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 230.449643][ T9711] netlink: 'syz.3.1242': attribute type 12 has an invalid length. [ 230.911956][ T9694] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 231.230727][ T9744] pim6reg1: entered promiscuous mode [ 231.245061][ T9744] pim6reg1: entered allmulticast mode [ 231.353017][ T9762] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 231.436347][ T9766] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20001 [ 231.795368][ T9067] wlan1: Trigger new scan to find an IBSS to join [ 231.868936][ T9788] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 232.317277][ T9821] netlink: 'syz.2.1277': attribute type 2 has an invalid length. [ 232.364739][ T9821] þ: entered promiscuous mode [ 232.432648][ T9831] netlink: 'syz.4.1280': attribute type 8 has an invalid length. [ 232.535279][ T9831] block nbd0: server does not support multiple connections per device. [ 232.555081][ T9831] block nbd0: shutting down sockets [ 232.693432][ T9854] Cannot find add_set index 0 as target [ 232.701500][ T9854] xt_policy: neither incoming nor outgoing policy selected [ 232.769264][ T9063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.019860][ T9874] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 233.332616][ T9898] __nla_validate_parse: 27 callbacks suppressed [ 233.332634][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 233.497146][ T9911] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1299'. [ 233.526975][ T9911] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1299'. [ 233.741633][ T9919] pimreg: entered allmulticast mode [ 233.764633][ T9921] ipvlan2: entered promiscuous mode [ 233.788579][ T9921] ipvlan2: entered allmulticast mode [ 233.803848][ T9921] dummy0: entered allmulticast mode [ 233.863831][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 234.040391][ T9934] netlink: 'syz.3.1303': attribute type 4 has an invalid length. [ 234.212217][ T9940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1303'. [ 234.316246][ T9934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.349351][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 235.306856][ T5846] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 235.641992][ T9984] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 236.017372][T10004] veth0: entered promiscuous mode [ 236.131619][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1329'. [ 236.175136][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1331'. [ 236.195812][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1327'. [ 236.294567][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'. [ 236.477791][T10023] macvlan2: entered promiscuous mode [ 236.483422][T10023] macvlan2: entered allmulticast mode [ 236.690525][T10032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.936504][T10043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1341'. [ 237.025275][T10048] bridge0: entered promiscuous mode [ 237.030520][T10048] bridge0: entered allmulticast mode [ 237.075089][T10019] lo speed is unknown, defaulting to 1000 [ 237.081147][T10019] lo speed is unknown, defaulting to 1000 [ 237.088627][T10048] netlink: 'syz.0.1342': attribute type 10 has an invalid length. [ 237.109738][T10048] bridge0: port 3(team0) entered blocking state [ 237.132293][T10048] bridge0: port 3(team0) entered disabled state [ 237.140000][T10048] team0: entered allmulticast mode [ 237.161511][T10048] team_slave_0: entered allmulticast mode [ 237.190499][T10048] team_slave_1: entered allmulticast mode [ 237.218710][T10048] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 237.265583][T10048] team0: entered promiscuous mode [ 237.271395][T10048] team_slave_0: entered promiscuous mode [ 237.277669][T10048] team_slave_1: entered promiscuous mode [ 237.283930][T10048] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 237.295230][T10048] bridge0: port 3(team0) entered blocking state [ 237.301602][T10048] bridge0: port 3(team0) entered forwarding state [ 237.317301][T10019] lo speed is unknown, defaulting to 1000 [ 237.337293][T10019] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 237.370999][T10019] lo speed is unknown, defaulting to 1000 [ 237.409098][T10019] lo speed is unknown, defaulting to 1000 [ 237.435395][T10019] lo speed is unknown, defaulting to 1000 [ 237.442880][T10019] lo speed is unknown, defaulting to 1000 [ 237.457275][T10019] lo speed is unknown, defaulting to 1000 [ 237.467010][T10019] lo speed is unknown, defaulting to 1000 [ 237.492432][T10076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.819328][T10097] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.004686][T10107] pim6reg: entered allmulticast mode [ 238.012746][T10107] pim6reg: left allmulticast mode [ 238.169696][ T8324] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 238.181703][ T8324] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 238.190188][ T8324] CPU: 0 UID: 0 PID: 8324 Comm: kbnepd bnep0 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 238.202335][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.212382][ T8324] RIP: 0010:klist_del+0x49/0x110 [ 238.217312][ T8324] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 f9 23 c7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 db 23 c7 f6 4d 8b 7e 58 4c 89 f7 e8 8f 51 [ 238.236905][ T8324] RSP: 0018:ffffc9000501f708 EFLAGS: 00010202 [ 238.242972][ T8324] RAX: 000000000000000b RBX: ffff88802878dc60 RCX: ffff888026971e00 [ 238.250925][ T8324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 238.258877][ T8324] RBP: ffffc9000501f830 R08: ffff8880503084b3 R09: 1ffff1100a061096 [ 238.266835][ T8324] R10: dffffc0000000000 R11: ffffed100a061097 R12: dffffc0000000000 [ 238.274792][ T8324] R13: 1ffff110050f1b8c R14: 0000000000000000 R15: ffff888076886750 [ 238.282751][ T8324] FS: 0000000000000000(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 238.291664][ T8324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.298231][ T8324] CR2: 0000200000001780 CR3: 000000007819c000 CR4: 00000000003526f0 [ 238.306187][ T8324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.314139][ T8324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.322090][ T8324] Call Trace: [ 238.325355][ T8324] [ 238.328279][ T8324] device_del+0x280/0x8e0 [ 238.332605][ T8324] ? _raw_spin_unlock_irq+0x2e/0x50 [ 238.337798][ T8324] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 238.343856][ T8324] ? __pfx_device_del+0x10/0x10 [ 238.348701][ T8324] ? netdev_unregister_kobject+0x344/0x450 [ 238.354503][ T8324] unregister_netdevice_many_notify+0x1d52/0x2320 [ 238.360908][ T8324] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 238.367655][ T8324] ? rcu_is_watching+0x15/0xb0 [ 238.372405][ T8324] ? trace_contention_end+0x39/0x120 [ 238.377671][ T8324] ? __mutex_lock+0x330/0xe80 [ 238.382330][ T8324] ? __lock_acquire+0xab9/0xd20 [ 238.387162][ T8324] ? __lock_acquire+0xab9/0xd20 [ 238.391997][ T8324] unregister_netdevice_queue+0x33c/0x380 [ 238.397697][ T8324] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 238.403930][ T8324] ? rtnl_net_dev_lock+0x36/0x2f0 [ 238.408946][ T8324] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 238.414042][ T8324] unregister_netdev+0x1f/0x60 [ 238.418793][ T8324] bnep_session+0x294d/0x2b40 [ 238.423455][ T8324] ? trace_sched_exit_tp+0x38/0x120 [ 238.428648][ T8324] ? __lock_acquire+0xab9/0xd20 [ 238.433501][ T8324] ? __pfx_bnep_session+0x10/0x10 [ 238.438520][ T8324] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 238.444403][ T8324] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.450735][ T8324] ? __pfx_woken_wake_function+0x10/0x10 [ 238.456370][ T8324] ? __kthread_parkme+0x7b/0x200 [ 238.461297][ T8324] ? __kthread_parkme+0x1a1/0x200 [ 238.466304][ T8324] kthread+0x70e/0x8a0 [ 238.470364][ T8324] ? __pfx_bnep_session+0x10/0x10 [ 238.475377][ T8324] ? __pfx_kthread+0x10/0x10 [ 238.479952][ T8324] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.485138][ T8324] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.490313][ T8324] ? __pfx_kthread+0x10/0x10 [ 238.494883][ T8324] ret_from_fork+0x3f9/0x770 [ 238.499463][ T8324] ? __pfx_ret_from_fork+0x10/0x10 [ 238.504560][ T8324] ? __switch_to_asm+0x39/0x70 [ 238.509304][ T8324] ? __switch_to_asm+0x33/0x70 [ 238.514045][ T8324] ? __pfx_kthread+0x10/0x10 [ 238.518629][ T8324] ret_from_fork_asm+0x1a/0x30 [ 238.523389][ T8324] [ 238.526391][ T8324] Modules linked in: [ 238.531171][ T8324] ---[ end trace 0000000000000000 ]--- [ 238.539058][ T8324] RIP: 0010:klist_del+0x49/0x110 [ 238.544075][ T8324] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 f9 23 c7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 db 23 c7 f6 4d 8b 7e 58 4c 89 f7 e8 8f 51 [ 238.563890][ T8324] RSP: 0018:ffffc9000501f708 EFLAGS: 00010202 [ 238.565646][T10119] x_tables: duplicate underflow at hook 4 [ 238.572974][ T8324] RAX: 000000000000000b RBX: ffff88802878dc60 RCX: ffff888026971e00 [ 238.593722][ T8324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 238.601727][ T8324] RBP: ffffc9000501f830 R08: ffff8880503084b3 R09: 1ffff1100a061096 [ 238.610326][ T8324] R10: dffffc0000000000 R11: ffffed100a061097 R12: dffffc0000000000 [ 238.623968][ T8324] R13: 1ffff110050f1b8c R14: 0000000000000000 R15: ffff888076886750 [ 238.631966][ T8324] FS: 0000000000000000(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 238.640987][ T8324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.642473][T10123] __nla_validate_parse: 3 callbacks suppressed [ 238.642487][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 238.647695][ T8324] CR2: 00007fdf87b77300 CR3: 0000000055762000 CR4: 00000000003526f0 [ 238.647722][ T8324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.647733][ T8324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.647747][ T8324] Kernel panic - not syncing: Fatal exception [ 238.647986][ T8324] Kernel Offset: disabled