last executing test programs: 2.895384965s ago: executing program 4 (id=962): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)={0x18c, 0x10, 0x509, 0x0, 0x0, "", [@nested={0xb9, 0x9c, 0x0, 0x1, [@nested={0x8, 0x13a, 0x0, 0x1, [@nested={0x4, 0x7d}]}, @typed={0x8, 0xe9, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @generic="46e16f7519cabb74e75f5284a7644ee2669cf260d7ee8a72b1d2136dd2cf8f62ab5e0a5db5c620d94653ffcf494387a7cace4f6db5809d7bfd444c39f08538cf4ab4867900a34e58819453bee4b96fc4da12184791474d35fe57ec181883bcd4803ca788a4adfedaaf47763633fea932df1a5ecc8e402f4288d8b2085e457fcdfcac92fab90e27f24d8a1494fb4e35fe93ff248cd58762e1ca3a5ba1c5"]}, @generic="b7b86d126d136b69478a408c8a3294c0ebf12eb1653e0d0ce38a7973dbf1402bbd1ead61ed55bb641efcc2b6acfe736059f4a4c569c1615b4cbeb079c76fb51ea210b0c65fb642d65472f7e83c0b95c09a5d5b117d1d4fb22e7edf06d7d2a08895ecab5f99e105c5f99b4a057929e21baa5217459a3cc534049033c023a0cc90f3ed876af56bfc32d8fa72e6b8d8c31b88a255ad43853ac796750fc27cf67e738f4aa69974a655d7b30d992d5d0aa6e2c4cc40eabdc6751c3b404610a2597a23"]}, 0x18c}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x218cd23f074670af, 0x0, 0x0, {0xd, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10010002}, 0x40010) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r7}, 0x10) (async) r8 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r8, 0x116, 0x80, &(0x7f0000000000)="6e397ace314c9c0a24eb8a94e54f34313e5377b6524c313c79965cba588d03e4fd54976b6eb39eea7ce070770ce0cc31207f184feaf3f5f4ed64372805420fb6208d872484b18439c6a116211f29d0f6871809e266a68126e16ab188784e17b6d5caa3cae7b247917063c56770758306fe493c879e0196417e87bfd3389414a7acc34aca65beaebb129efac992fcd4e1bf631ac07de9c2379a62e4ed39d689d5982e4304bcab5d26e8e8b8bb4fc0061d29972ab2720982bced911f888173d6335c02f008da089892d56e6f1adc4349be7bfb5285464e13fcb5487ee9402809880ca5f1d47dd3bbc14a368f84d86d8c193e83fbf93b", 0x9979) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r10, 0x1}, 0x14}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) 2.661324803s ago: executing program 4 (id=965): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x6c}}, 0x8001) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x4, @local}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44010}, 0x80) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x20}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x4) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@broadcast, @remote, 0x0}, &(0x7f0000000480)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000021c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002180)={&(0x7f0000000580)=@delchain={0x1bd4, 0x65, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x9, 0xe}, {0x2, 0x2}, {0xffe0, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_RATE={0x6, 0x5, {0x32, 0xfd}}, @filter_kind_options=@f_cgroup={{0xb}, {0x16ac, 0x2, [@TCA_CGROUP_ACT={0x1278, 0x1, [@m_simple={0x1048, 0x1f, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x0, 0x0, 0x3fffc000}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xf0, 0x1a, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x57b, 0x1, 0x4, 0xff, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x26, 0x7, 0x20000000, 0x8, 0x5}, 0x1, r6}}]}, {0x83, 0x6, "13db2d398fa347b232eede2a293f898bf24edd0b647e6b8b0c9f0bae997c83031524589bde4d249c78c3217eb591f6ddafdad7fb1b3c6cf9ad901bd3cb32366298d6746debba0e41dd5b830ad65424a99c927fb15b32d33264d63a2b7c428c95b63e4dc483af9cc6074b53f4030d5fcc7830eb0f3108e46c9b5074f57e0bff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x13c, 0xf, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xfe, 0x3, 0xfff, 0x7}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xff65}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="246c707b57cf"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0xb1, 0x6, "d292177276a747528ae03a677e980560872fc8a800375e24970f54164300c56f70b1d8d9137dc4ec91ff57eba92a24ca2d2040b8e7ff0594d5bb861a3726ab3187c26d166d70f8e92d79b2cd66280da801b945878b084b53157ebc20dcb049f15ac9875a79256fa1815b2b4fe70758799c295d5d7c7b618306ce1e83e50e21f7c5c98f05479a30534aad0f64b1b6f3ec8b41986ba51d0bb23e406331cd89b0265bdc108a28df894f790d61a804"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_CGROUP_ACT={0x430, 0x1, [@m_mirred={0x108, 0xe, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6, 0x3, 0xd, 0xfffffffb}, 0x4, r7}}]}, {0xbc, 0x6, "44a35834bd099244138f3c324405f7594b63bac409e159d5303e4941fc6ef276a34c4608aa6544606535bd79104a21d1ee63753919bd7c00a590ac16dd9d236a566ff08d41dd9f914240cf09a35f559461db9a2feb4623b2398edb34ffd1cb673570c5e32aa18ebc6246a1625c0eb6a3cc0385ae83498f2df980814180e53029cda879468bb626d0970ff3d40dfb995ae86ebc145dd59d823d7784a10032ab10ad56eb1cf822403e0ae51551674f0c42b33a42367a6cb9ad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x1a0, 0x6, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x10, 0x3, 0x1, 0x1a4}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x4, 0x10000000, 0x0, 0x3}, @private=0x6, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xee0, 0x6, 0x2, 0x4, 0x5}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xd4, 0x0, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, @TCA_IFE_METALST={0x4}]}, {0x73, 0x6, "f6d3274a369d1bcc5465809404460eefcc6408d805c652cf625ea961643d2cba37ffc59ff8813b25a7e8bbc2a60399632d75edc6c76a1b849288fa014b1a0ddf45d401df5c7bbaf48c64d67ec2b078d4282de837ed87a71dda22d6942c34e80ce78505ab97fa0cdd4f497dac390f3e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xb0, 0x3, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2159, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1c0d, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x15e9, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1721, 0x5}}]}, {0x53, 0x6, "776f72dd979f268f09d8c0ba8b8f139317a6f5477f11b253a2a3f16fa9b6362988a01103ff114d7bc2b71e5160cb1c2ed5566ba4491cb4c4c8ce2f41a6abaef38b199e91e8b4d2a225f232350078eb"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4d4, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x7}, @TCA_FLOW_POLICE={0x4c8, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x3, 0x3, 0x8000, 0x2, 0x2a, 0x1, 0x9, 0x10, 0x9, 0xc8, 0x100, 0x353095d, 0x7b, 0x9, 0x5, 0x6, 0x10000, 0xd, 0x1, 0x5, 0x5, 0xa, 0x4, 0x6, 0x87, 0x8, 0x3, 0xe699, 0x5, 0x9, 0x313, 0x6, 0x529, 0x3, 0x3, 0xc, 0x10000, 0x7d, 0x78, 0x7fff, 0x0, 0x7fffffff, 0x6, 0x4, 0x8, 0x63, 0x869, 0xe, 0x4, 0x800, 0x87b5, 0xa, 0x7f, 0x8, 0x6, 0x8, 0x401, 0x5efdbdcb, 0x0, 0xe, 0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffffe, 0x1, 0x5, 0x6, 0x9, 0x9, 0x1000, 0xe7, 0x26, 0x9, 0x1, 0x8, 0x7, 0x7fff, 0x6, 0x8, 0x546d, 0x80000000, 0x3ff, 0x1, 0x401, 0x6, 0x7, 0x0, 0x6, 0xff, 0x1000, 0x4, 0xfffffffe, 0x1, 0xbcc431d, 0x7fff, 0xc, 0x3, 0xc7, 0x9, 0x4, 0xf, 0x4, 0x7, 0x8, 0x3, 0x3, 0x8000, 0x269, 0x10000, 0x6, 0x9, 0xd, 0x10001, 0x7, 0xfffffffc, 0x1, 0x7ff, 0xf, 0x9c6b354, 0xa, 0x6, 0x3, 0x6, 0x401, 0xfffffff9, 0x7, 0x3, 0x9, 0x6, 0x9, 0xd9, 0x8, 0x400, 0x3, 0x2, 0x400, 0x3, 0x7ff, 0xfffffffc, 0x1000, 0x0, 0xadb, 0xe74, 0x8, 0x2, 0x0, 0x8001, 0x8, 0x800, 0x3, 0xff, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x7, 0x3, 0x0, 0x4, 0x6, 0x6, 0xffff, 0xfffff800, 0xfffffffe, 0x8, 0x4, 0x3, 0x5, 0x8, 0x9ed3, 0xc, 0xd, 0x0, 0x8, 0x47000000, 0x4603, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x7, 0xfff, 0x3, 0x80, 0x7, 0x100, 0x8, 0x5, 0x80000000, 0x1000, 0x6, 0x8ade, 0x9, 0xf, 0x5, 0xa, 0x2a9, 0x0, 0x2, 0xfffffffa, 0x40, 0xfffffffe, 0xa, 0x4, 0x8, 0x6, 0x4, 0x65e, 0x5, 0x800, 0x0, 0x80000001, 0xfffffc01, 0x534, 0x6, 0x0, 0x0, 0x5, 0x1, 0x4, 0x0, 0x1, 0x7, 0x514b, 0x1, 0x2, 0x25, 0x8000, 0x8, 0x43b, 0x3, 0x1, 0xdb, 0x291e, 0x8, 0xfffff04e, 0x0, 0x5, 0x9, 0x1, 0x0, 0x9, 0x3, 0xb5cd, 0x6, 0x9dc21dc7, 0x2, 0x0, 0x7, 0x1, 0x2011]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6f7a, 0x6, 0xf306, 0x2, 0x3, {0x9, 0x0, 0xff, 0x101, 0x8001, 0xd6a}, {0x0, 0x0, 0x0, 0x2, 0xc, 0x9}, 0x40, 0x8, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0xfffffffa, 0x2, 0xfff, {0x1d, 0x1, 0xfff9, 0x76, 0x7fff, 0x22e}, {0x4, 0x1, 0x5, 0x9, 0x1, 0x7}, 0x53a8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xda}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x1bd4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002200)={r1}) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000002240)={0x0, r2, 0x5, 0x0, 0x3ff, 0xb018}) (async) pipe(&(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000003480)={0x1, 0xc, &(0x7f00000022c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @alu={0x7, 0x0, 0x1, 0xb, 0x9, 0xc, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x1, 0x9, 0x8, 0x10, 0xffffffffffffffff}, @exit, @alu={0x4, 0x0, 0xb, 0x7, 0x7, 0x8, 0x4}]}, &(0x7f0000002340)='GPL\x00', 0x29, 0x1000, &(0x7f0000002380)=""/4096, 0x40f00, 0x0, '\x00', r6, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000003380)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000033c0)={0x1, 0x6, 0xfffffffb, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000003400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1], &(0x7f0000003440)=[{0x4, 0x4, 0xe, 0x3}], 0x10, 0x4}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000035c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000003580)='\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003540)={@fallback=r1, r9, 0x30, 0x33, r11, @void, @void, @void, @value=r12}, 0x20) ioctl$int_in(r8, 0x5452, &(0x7f0000003600)=0xf92) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000003640), r2) (async) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000003680), &(0x7f00000036c0)=0x4) (async) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000003700)={0x1d, r7}, 0x10) (async) ioctl$sock_netdev_private(r2, 0x89fa, &(0x7f0000003740)="5a68deea98e39199e30b56b59869768f1e1f9ad95555c449fa7fbf0af3776a1fc3437685d57110f15166227e88e2e46b") getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000003780)={0x0, @in6={{0xa, 0x4e23, 0xfffffffc, @private0, 0x3b}}}, &(0x7f0000003840)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000003880)={r14, @in6={{0xa, 0x4e21, 0xfffffffc, @remote}}, 0x4, 0x7, 0x6, 0x3, 0x1a, 0x4, 0xc}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000003940)={r14, 0x9a, "29cbaba4061b0f1783a6f1b3ea422f078be32cce1b2237ab6357cb8c5161384a110086db458255b69c6df57b13961219fb5683c2477256f0d6c10ddb207a17b22466975caec5dccb0f01de0d548ed68cb28104dffc94fbbe2b69bd4da532d3245deaadba21ebe041a5bbdb6b4be625db862d91afbfa69224ac1fa9d351c4871a715c9cfed767056fd53df3e3b2e525d9c30fdf074e3f6230d88e"}, &(0x7f0000003a00)=0xa2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000003a40)={r15, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000003b00)=0x84) (async) socket$nl_route(0x10, 0x3, 0x0) 2.360389693s ago: executing program 3 (id=967): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000000a06050000000000000000020073797a3000005877e62ed3d96b0c000004000700000000000000"], 0x2c}}, 0x0) 2.179751778s ago: executing program 4 (id=970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00061800007f00000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010007000000fcdbdf250200000008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x20000084) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x60, r7, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0x60}}, 0x44040) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc003}, 0x80) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x0, @broadcast}}) 2.177827945s ago: executing program 2 (id=971): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd48", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14) 2.065388703s ago: executing program 0 (id=973): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000817000001"], 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) (async) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000500)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) (async, rerun: 64) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r6, 0x0) (rerun: 64) r7 = socket(0xa, 0x2, 0x0) getpeername$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0xc000, 0xd8c, 0x4, 0x0, r6, 0xcbfffffe, '\x00', r8, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0xa}, 0x50) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 64) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r11, &(0x7f00000000c0), 0x9) (async) r12 = socket(0x25, 0x4, 0x8) connect$bt_sco(r12, &(0x7f0000000340)={0x1f, @none}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r13, 0x29, 0xf, 0xb, 0x1, 0x10, @private0, @mcast2, 0x10, 0x7, 0x5b, 0x4}}) getsockname$netrom(r7, &(0x7f0000000840)={{0x3, @null}, [@remote, @default, @rose, @netrom, @remote, @default, @netrom, @null]}, &(0x7f00000008c0)=0x48) (async) sendfile(r11, r10, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="1800000000020000000000904004000018150081251e201bd3301d705d31887da940d813e9f685c1daa44eb26410c833e495cf4a74831aa75d684fd8539ddf28f35fc77776527ac8f6595465f9551485cfd81b02ebca08c4b1cf601b48ac61bd367f4728ea81e6accfc3d46ed217068f40bc691b", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x5b8c, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @xdp, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x4, 0x101, 0x8000}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000540)=[{0x0, 0x3, 0x4, 0x6}, {0x4, 0x1, 0xc, 0xb}, {0x1, 0x2, 0xf, 0xa}, {0x1, 0x3, 0xd}, {0x3, 0x4, 0x7}, {0x0, 0x1, 0x1, 0x1}], 0x10, 0x7b3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r14, @ANYRES32=r0, @ANYBLOB="000400"/20, @ANYRES32=r1, @ANYRES32, @ANYRESHEX=r7], 0x50) 2.029314291s ago: executing program 2 (id=974): syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc}, {0x10, 0x1}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010004bd7000fcdbdf250a00000008000100", @ANYRES32=0x0, @ANYBLOB="dd5d59be1b83cb3aa3da65f9350c00000000fe59b3eeb28945cc1efa0ca6ddee326912beb1efa77bea5e490c510c0fb502050b3cdcc4ab8774c33f129610cfdc64517c315c17e4a2dde547f7a330464893802f6c302fb77c9d43274b3449430a67ffd16808046d89"], 0x1c}}, 0x800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000001f00"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f80000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008000c0018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="d8000000180081054e81f783db4cb904e6361ad784c9fa24e8fc55a10a0015000600140800600e1208000f00fff00401a80008000800104004000000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc44121d9d322fe7c008775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3940fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d150000000000000000", 0xd8}], 0x1}, 0x4000000) 1.892672196s ago: executing program 4 (id=975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfce) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x5c, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "96557917d5d82cebae935e436de1ace2fe62c079b6aa318773832c34"}}]}]}, 0x5c}}, 0x4004) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f0000001c00)={0x3f0, r10, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x62}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6a5}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb50a}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "c6962999b0403659e3bc689be20e11688cbdb285438aa878a9cf48a6ae64e10e11422716628d8a1a78c212c3160f0058f4eda9a04e7395b582aed8865a496098ac299557ad335c5bcb0bcd93d461c4e394fb74021f32a8b02d7b41998558dced4547a4f51c828566c299310bf7072174b1eefa136b9d4f1bcac1ca5dffe6b108b2db81e046ba7b245e07f5d9ab9d25926cfcb9fce809ad1ce3f4d55814103284ab33f58e7fbbb7efaea35ca43e"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe00000}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9ec0}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x649282ab}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffe00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7cc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x285}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x532}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0xc801}, 0x800) (async) r11 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r11, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001740)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffff7, '\x00', r7, r13, 0x5, 0x4, 0x5}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r12, &(0x7f0000000080), 0x0}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000f8fb89409eb8006a21a4d14eeedb5cdb546a87d91e75947c1a912e9e1d2b9ff942c70d35245737406e45", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.823605351s ago: executing program 0 (id=976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @empty, 0x7}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000480)={0x1000, 0x5, 0xe, 0x7f}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x7, 0x1, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x8b19, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r6, 0x2, {0x1, 0xf2}, 0xfe}, 0x18) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.803408088s ago: executing program 2 (id=977): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0200000000000025050000000000000095000fa7127e0f000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000000)=""/149, 0x0, 0xc4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffee3, 0x10, 0x0, 0x1e}, 0x2d) 1.732409258s ago: executing program 3 (id=978): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x6080}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x1ff}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x1}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x5}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 1.702064061s ago: executing program 4 (id=979): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) (async) unshare(0x22020600) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) (async) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r6, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 1.567635775s ago: executing program 3 (id=980): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r4, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1b00000000000300000005000000180001801400020073797a5f74756e00000080000000000008000500102700000c0003800400010004000380"], 0x40}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x18, 0x17, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0xb, 0xf, 0x0, 0x80, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @ldst={0x0, 0x2, 0x4, 0x1, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x0, 0xb, 0x3, 0x3, 0x4, 0xffffffffffffffff}], &(0x7f0000000200)='GPL\x00', 0x2, 0x1000, &(0x7f0000000540)=""/4096, 0x41100, 0x91, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x1, 0x7, 0xb534}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1], &(0x7f0000001540)=[{0x5, 0x5, 0xd, 0xc}, {0x2, 0x2, 0x6, 0x3}, {0x4, 0x2, 0xe, 0x7}, {0x5, 0x3, 0xf, 0x1}, {0x2, 0x1, 0x7, 0xc}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f00000001c0)='ext4_unlink_exit\x00', r6, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0xac) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/237, 0xed}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x120) 1.451459452s ago: executing program 4 (id=981): socket(0x21, 0x3, 0xa) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="23000000010006", 0x7) r1 = socket$inet6(0xa, 0x4, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0xce24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000600)=0xdfc, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r10, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x2c}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.432553465s ago: executing program 2 (id=982): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) (async) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfff7ffff, 0x10000, @value=r3}, 0x28) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x63, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1078}}, 0x11) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) (async) unshare(0x62040200) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f0000000100)={'caif0\x00'}) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r11, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) shutdown(r11, 0x2) (rerun: 32) 1.282535228s ago: executing program 0 (id=983): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 1.043717873s ago: executing program 0 (id=985): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100e32020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1c}, 0x94) 1.020215295s ago: executing program 2 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000e80b00000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300190000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "abf9869fa421bfa6", "8244b91b46a0665ace626b8e883cb71a00000000000000060faf1b750766b4e9", "9e30df10", "5b1987a69a0cb1c9"}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0xc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x642}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) accept(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc0009", 0x1f}], 0x1}, 0x48002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000006800010003001000e7ffff7f00000000000000000c0002000100000015000000140009"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x60000) recvmsg(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000080)=""/23, 0x17}], 0x2}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4f, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000007000390230bd7000fbdbdf2507000000", @ANYRES32=r7, @ANYBLOB="0c00018008"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 982.359824ms ago: executing program 0 (id=987): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x300, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x4, 0x10}, {0xffe0, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}}, 0x0) socket(0x26, 0x5, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 821.946044ms ago: executing program 1 (id=988): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000180)={0xfffffffd, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @remote}}}, 0x108) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x8000, 0x6, 0x2}, &(0x7f0000000280)=0x10) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) 753.761147ms ago: executing program 1 (id=989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffb}, {0x0, 0x5, 0x0, 0x400000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x30, 0xa0}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 735.783372ms ago: executing program 0 (id=990): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x1, 0x14, 0x0, 0x9}, 0xe) shutdown(r1, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @bcast}, [@null, @remote, @bcast, @default, @default, @default, @null, @rose]}, &(0x7f0000000200)=0x48, 0x80c00) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000380)={r2}, &(0x7f00000004c0)=0x8) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca7193"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x10000000368}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r10, 0x0, 0x6}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) 608.209345ms ago: executing program 1 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0xfff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x3, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100040001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmmsg(r3, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x673}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x40010142, 0x0) connect$rds(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[], 0x24}}, 0x24024050) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5) r7 = socket$netlink(0x10, 0x3, 0xf) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r5) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000003c0)={0x0, @remote, @local}, &(0x7f0000000400)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', r9, 0x87, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x3, 0x80, 0x64, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@cipso={0x86, 0x32, 0x2, [{0x6, 0x10, "f2f17b06311b4fdbb26ff0fe3eb7"}, {0x1, 0x11, "2d856bc5454619869222daf0ba8084"}, {0x6, 0xb, "07113717f5197f7791"}]}, @generic={0x7, 0x5, "c45e92"}, @end, @cipso={0x86, 0x31, 0x3, [{0x7, 0xc, "adc2b69eca2712d87bc5"}, {0x6, 0xd, "109dacef82c8ea7b80e289"}, {0x6, 0x12, "6207114e05cbe4e36fa4b1c081345a34"}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r8, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4008012) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40044080}, 0x4040880) socket$inet_sctp(0x2, 0xde63e3799341b14e, 0x84) 601.380287ms ago: executing program 3 (id=992): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20044010) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x78}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 488.425305ms ago: executing program 1 (id=993): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000540)=0x2, 0x4) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r3, 0x9}, 0x8) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={0x54, r1, 0xfe12482fe0801d65, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x400006}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) 359.968397ms ago: executing program 3 (id=994): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000005d0000005d000000020000009e45d13617ee707f00000000000000000100000007001c000204000004000000020000000000000005000000020000000000001205000000060000000200000f010000000200000037dd00000200000001"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0x10000}, 0x28) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x14008004) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x18) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000005d0000005d000000020000009e45d13617ee707f00000000000000000100000007001c000204000004000000020000000000000005000000020000000000001205000000060000000200000f010000000200000037dd00000200000001"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0x10000}, 0x28) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x14008004) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) (async) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x18) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 222.193565ms ago: executing program 1 (id=995): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0901000100000055090100000000409500000000000000bf91100000000000b70200000000000085000000950000fdb60000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) 148.247615ms ago: executing program 3 (id=996): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x4000010, 0xffffffffffffffff, 0xf9e8e000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000000102250000000000000000000a0000026400018006000340000000002c0001"], 0x78}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r3], 0x27) unshare(0x22020600) connect$bt_rfcomm(r2, &(0x7f000000d400)={0x1f, @none, 0xad}, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) 40.150901ms ago: executing program 2 (id=997): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782520000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1c}, 0x94) 0s ago: executing program 1 (id=998): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 846] veth0_macvtap: entered promiscuous mode [ 77.932360][ T5846] veth1_macvtap: entered promiscuous mode [ 77.957823][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.978610][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.991066][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.004305][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.018877][ T5853] veth0_macvtap: entered promiscuous mode [ 78.044290][ T5853] veth1_macvtap: entered promiscuous mode [ 78.050298][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.066863][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.100189][ T2967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.120535][ T2967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.136012][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.187052][ T2967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.201168][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.205900][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.216621][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.232016][ T5851] veth0_vlan: entered promiscuous mode [ 78.243345][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.282570][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.343811][ T5964] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.362644][ T5964] tc_dump_action: action bad kind [ 78.374410][ T5851] veth1_vlan: entered promiscuous mode [ 78.455510][ T2967] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.477769][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.488326][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.515987][ T2967] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.529719][ T2967] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.563573][ T2967] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.581255][ T5851] veth0_macvtap: entered promiscuous mode [ 78.630502][ T5851] veth1_macvtap: entered promiscuous mode [ 78.651663][ T4610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.676889][ T4610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.733331][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.786815][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.813504][ T5972] IPv6: Can't replace route, no match found [ 79.063484][ T2967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.137162][ T2967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.245997][ T4610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.301226][ T4610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.353583][ T4610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.380966][ T5979] Zero length message leads to an empty skb [ 79.402415][ T4610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.516966][ T5981] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 79.533148][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.570162][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.632467][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.644274][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.764969][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.796696][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.867746][ T5860] Bluetooth: hci2: command tx timeout [ 79.873733][ T51] Bluetooth: hci0: command tx timeout [ 79.945129][ T5860] Bluetooth: hci4: command tx timeout [ 79.951180][ T51] Bluetooth: hci3: command tx timeout [ 79.954731][ T5863] Bluetooth: hci1: command tx timeout [ 80.119268][ T5986] warning: `syz.0.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.147344][ T5989] Bluetooth: MGMT ver 1.23 [ 80.174314][ T5989] IPVS: Unknown mcast interface: pimreg0 [ 80.184221][ T5991] netlink: 'syz.4.5': attribute type 39 has an invalid length. [ 80.218145][ T5989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.970077][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 80.996293][ T6008] netlink: 'syz.4.12': attribute type 22 has an invalid length. [ 81.004624][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 81.008206][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 81.097225][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 81.114001][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.126209][ T6008] netlink: 'syz.4.12': attribute type 22 has an invalid length. [ 81.147992][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 81.151078][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.193290][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.213954][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.390036][ T6022] netlink: 'syz.1.17': attribute type 12 has an invalid length. [ 81.425312][ T6022] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.17'. [ 81.592438][ T6031] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 81.776040][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 81.935600][ T6035] veth3: entered promiscuous mode [ 81.977288][ T6046] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 81.983996][ T6046] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 82.080420][ T6037] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 82.105486][ T6037] team0: Device ipvlan2 is already an upper device of the team interface [ 82.531553][ T6056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 82.658967][ T6059] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 82.684763][ T6059] netlink: 'syz.3.24': attribute type 2 has an invalid length. [ 83.070656][ T6064] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.141639][ T6073] Cannot find set identified by id 0 to match [ 83.202372][ T6073] dummy0: entered promiscuous mode [ 83.230743][ T6073] bridge0: port 3(macvlan2) entered blocking state [ 83.252388][ T6078] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.274890][ T6073] bridge0: port 3(macvlan2) entered disabled state [ 83.281730][ T6073] macvlan2: entered allmulticast mode [ 83.305545][ T6073] dummy0: entered allmulticast mode [ 83.311527][ T6078] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 83.325757][ T6073] macvlan2: entered promiscuous mode [ 83.337036][ T6073] bridge0: port 3(macvlan2) entered blocking state [ 83.343855][ T6073] bridge0: port 3(macvlan2) entered forwarding state [ 83.429063][ T6085] __nla_validate_parse: 5 callbacks suppressed [ 83.429076][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 83.499070][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 83.525001][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 83.579606][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 83.869539][ T6106] netlink: 56 bytes leftover after parsing attributes in process `syz.4.39'. [ 84.042004][ T6115] IPVS: Unknown mcast interface: pimreg0 [ 84.070088][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.40'. [ 84.481005][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.489755][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.644482][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.661137][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.843840][ T6128] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 84.860838][ T61] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.891728][ T61] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.926861][ T6144] syzkaller0: entered promiscuous mode [ 84.932372][ T6144] syzkaller0: entered allmulticast mode [ 84.939833][ T61] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.949854][ T61] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.012487][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.49'. [ 85.389122][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.58'. [ 85.403066][ T6167] IPVS: Unknown mcast interface: pimreg0 [ 85.414789][ T6167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.57'. [ 85.431560][ T6171] atomic_op ffff888059217198 conn xmit_atomic 0000000000000000 [ 85.457725][ T6171] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 85.498725][ T6165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.586744][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 85.658751][ T6165] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.738041][ T6165] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.796619][ T6188] Bluetooth: MGMT ver 1.23 [ 85.833801][ T6192] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.944039][ T6195] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.223194][ T6195] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.431521][ T6195] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.491780][ T6222] FAULT_INJECTION: forcing a failure. [ 86.491780][ T6222] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.513597][ T6222] CPU: 0 UID: 0 PID: 6222 Comm: syz.1.70 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 86.513624][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.513642][ T6222] Call Trace: [ 86.513650][ T6222] [ 86.513658][ T6222] dump_stack_lvl+0x189/0x250 [ 86.513689][ T6222] ? __pfx____ratelimit+0x10/0x10 [ 86.513705][ T6222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.513721][ T6222] ? __pfx__printk+0x10/0x10 [ 86.513738][ T6222] ? __might_fault+0xb0/0x130 [ 86.513766][ T6222] should_fail_ex+0x414/0x560 [ 86.513784][ T6222] _copy_from_user+0x2d/0xb0 [ 86.513804][ T6222] __sys_connect+0x123/0x440 [ 86.513819][ T6222] ? __fget_files+0x3a0/0x420 [ 86.513832][ T6222] ? __pfx___sys_connect+0x10/0x10 [ 86.513856][ T6222] ? __pfx_ksys_write+0x10/0x10 [ 86.513871][ T6222] ? rcu_is_watching+0x15/0xb0 [ 86.513894][ T6222] __x64_sys_connect+0x7a/0x90 [ 86.513909][ T6222] do_syscall_64+0xfa/0x3b0 [ 86.513924][ T6222] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.513938][ T6222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.513951][ T6222] ? clear_bhb_loop+0x60/0xb0 [ 86.513967][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.513980][ T6222] RIP: 0033:0x7f16ab18e9a9 [ 86.513998][ T6222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.514009][ T6222] RSP: 002b:00007f16abf75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 86.514025][ T6222] RAX: ffffffffffffffda RBX: 00007f16ab3b5fa0 RCX: 00007f16ab18e9a9 [ 86.514034][ T6222] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000007 [ 86.514043][ T6222] RBP: 00007f16abf75090 R08: 0000000000000000 R09: 0000000000000000 [ 86.514051][ T6222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.514059][ T6222] R13: 0000000000000000 R14: 00007f16ab3b5fa0 R15: 00007fff5a150408 [ 86.514087][ T6222] [ 86.781032][ T3094] cfg80211: failed to load regulatory.db [ 86.831827][ T6195] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.164498][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.264150][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.333513][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.370386][ T6244] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 87.460412][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.473656][ T6246] syzkaller1: entered promiscuous mode [ 87.492059][ T6246] syzkaller1: entered allmulticast mode [ 87.514149][ T6248] IPVS: Unknown mcast interface: pimreg0 [ 87.671215][ T6250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.752354][ T6250] siw: device registration error -23 [ 88.126885][ T6282] veth0_to_team: entered allmulticast mode [ 88.485073][ T6293] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 88.492643][ T6293] netlink: 'syz.2.89': attribute type 4 has an invalid length. [ 88.509056][ T6293] __nla_validate_parse: 5 callbacks suppressed [ 88.509072][ T6293] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.89'. [ 88.787468][ T6306] IPVS: Unknown mcast interface: pimreg0 [ 88.805808][ T6306] netlink: 40 bytes leftover after parsing attributes in process `syz.2.93'. [ 88.962177][ T6314] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 88.968883][ T6317] netlink: 'syz.1.97': attribute type 21 has an invalid length. [ 88.985116][ T6317] netlink: 128 bytes leftover after parsing attributes in process `syz.1.97'. [ 89.026376][ T6317] netlink: 'syz.1.97': attribute type 4 has an invalid length. [ 89.035052][ T6317] netlink: 3 bytes leftover after parsing attributes in process `syz.1.97'. [ 89.216566][ T6319] netlink: 256 bytes leftover after parsing attributes in process `syz.4.98'. [ 89.293266][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.101'. [ 90.318533][ T6365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.110'. [ 90.319875][ T6367] netlink: 248 bytes leftover after parsing attributes in process `syz.3.111'. [ 90.562673][ T6372] IPVS: Unknown mcast interface: pimreg0 [ 90.595708][ T6376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.112'. [ 90.643999][ T6371] rdma_rxe: rxe_newlink: failed to add wg0 [ 90.691653][ T6371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.911766][ T6393] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 91.157440][ T6405] IPv6: sit1: Disabled Multicast RS [ 91.197417][ T6413] netlink: 'syz.4.126': attribute type 3 has an invalid length. [ 91.211925][ T6413] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 91.219968][ T6413] netlink: 192 bytes leftover after parsing attributes in process `syz.4.126'. [ 91.234524][ T6413] NCSI netlink: No device for ifindex 0 [ 91.256010][ T6413] netlink: 'syz.4.126': attribute type 3 has an invalid length. [ 91.266130][ T6413] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 91.277404][ T6413] NCSI netlink: No device for ifindex 0 [ 91.588614][ T6440] IPVS: Unknown mcast interface: pimreg0 [ 91.594384][ T6438] netlink: 'syz.4.134': attribute type 1 has an invalid length. [ 92.052426][ T30] audit: type=1800 audit(1753502990.696:2): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.142" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=212 res=0 errno=0 [ 92.065535][ T6467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.990574][ T6504] IPVS: Unknown mcast interface: pimreg0 [ 93.182115][ T6509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.240807][ T6516] bridge_slave_0: left allmulticast mode [ 93.253011][ T6516] bridge_slave_0: left promiscuous mode [ 93.259435][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.272763][ T6516] bridge_slave_1: left allmulticast mode [ 93.280772][ T6516] bridge_slave_1: left promiscuous mode [ 93.286714][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.307223][ T6516] bond0: (slave bond_slave_0): Releasing backup interface [ 93.328455][ T6516] bond0: (slave bond_slave_1): Releasing backup interface [ 93.352310][ T6516] team0: Port device team_slave_0 removed [ 93.369267][ T6516] team0: Port device team_slave_1 removed [ 93.376675][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.384143][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.401034][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.408979][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.438899][ T6516] macvlan2: left allmulticast mode [ 93.444407][ T6516] dummy0: left allmulticast mode [ 93.450084][ T6516] macvlan2: left promiscuous mode [ 93.460311][ T6516] bridge0: port 3(macvlan2) entered disabled state [ 93.506217][ T6518] bond1: (slave veth5): Enslaving as an active interface with a down link [ 93.546685][ T6516] syz.0.154 (6516) used greatest stack depth: 19832 bytes left [ 93.561605][ T6521] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 93.575181][ T6521] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 93.686135][ T6525] tipc: Started in network mode [ 93.688200][ T5859] IPVS: starting estimator thread 0... [ 93.695364][ T6525] tipc: Node identity 0691fa465a84, cluster identity 4711 [ 93.700079][ T6536] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 93.707754][ T6525] tipc: Enabled bearer , priority 0 [ 93.745347][ T6529] D: renamed from syzkaller0 [ 93.753691][ T6529] tipc: Disabling bearer [ 93.795148][ T6542] IPVS: using max 28 ests per chain, 67200 per kthread [ 94.279610][ T6567] IPVS: Unknown mcast interface: pimreg0 [ 94.303681][ T6567] __nla_validate_parse: 8 callbacks suppressed [ 94.303698][ T6567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.169'. [ 94.637625][ T6589] syzkaller1: entered promiscuous mode [ 94.658923][ T6589] syzkaller1: entered allmulticast mode [ 94.701959][ T6589] ipvlan2: entered promiscuous mode [ 94.721499][ T6589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 94.739543][ T6593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.178'. [ 94.760473][ T6591] ipvlan3: entered promiscuous mode [ 94.775995][ T6591] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 94.962274][ T6602] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 95.221907][ T6608] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 95.353663][ T6608] bridge_slave_0: left allmulticast mode [ 95.376054][ T6608] bridge_slave_0: left promiscuous mode [ 95.382491][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.430797][ T6608] bridge_slave_1: left allmulticast mode [ 95.444101][ T6624] validate_nla: 1 callbacks suppressed [ 95.444117][ T6624] netlink: 'syz.4.184': attribute type 10 has an invalid length. [ 95.456555][ T6608] bridge_slave_1: left promiscuous mode [ 95.485067][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.521930][ T6608] bond0: (slave bond_slave_0): Releasing backup interface [ 95.540022][ T6637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.189'. [ 95.565674][ T6608] bond0: (slave bond_slave_1): Releasing backup interface [ 95.606993][ T6608] team0: Port device team_slave_0 removed [ 95.629387][ T6608] team0: Port device team_slave_1 removed [ 95.645773][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.667103][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.688845][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.698323][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.723075][ T6623] IPVS: Unknown mcast interface: pimreg0 [ 95.766217][ T6624] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 95.804476][ T6624] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.936510][ T6652] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 95.951692][ T6652] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 95.980490][ T6652] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 96.233166][ T6660] netlink: 232 bytes leftover after parsing attributes in process `syz.2.197'. [ 96.274337][ T6660] netlink: 488 bytes leftover after parsing attributes in process `syz.2.197'. [ 96.400660][ T6674] netlink: 212364 bytes leftover after parsing attributes in process `syz.4.202'. [ 96.421654][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 96.442181][ T6674] openvswitch: netlink: Message has 5 unknown bytes. [ 96.451513][ T6679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.201'. [ 96.486228][ T6681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.201'. [ 96.498631][ T6678] vlan2: entered promiscuous mode [ 96.509876][ T6678] team0: entered promiscuous mode [ 96.516793][ T6678] team_slave_0: entered promiscuous mode [ 96.535069][ T6678] team_slave_1: entered promiscuous mode [ 96.568436][ T6674] @ÿ: renamed from bond_slave_0 [ 96.750929][ T6691] netlink: 'syz.4.204': attribute type 10 has an invalid length. [ 96.777499][ T6695] trusted_key: syz.0.207 sent an empty control message without MSG_MORE. [ 96.786603][ T6691] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.204'. [ 96.946202][ T6702] tipc: Started in network mode [ 96.966464][ T6702] tipc: Node identity 1a0032e2543f, cluster identity 4711 [ 96.973773][ T6702] tipc: Enabled bearer , priority 0 [ 96.998043][ T6711] syzkaller0: entered promiscuous mode [ 97.015437][ T6711] syzkaller0: entered allmulticast mode [ 97.118567][ T6702] tipc: Resetting bearer [ 97.546892][ T6701] tipc: Resetting bearer [ 97.591647][ T6701] tipc: Disabling bearer [ 97.660999][ T6742] syzkaller1: entered promiscuous mode [ 97.684833][ T6742] syzkaller1: entered allmulticast mode [ 97.941878][ T6761] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 97.969137][ T6758] bridge_slave_1: left allmulticast mode [ 97.984790][ T6758] bridge_slave_1: left promiscuous mode [ 97.990618][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.011777][ T6758] bridge_slave_0: left allmulticast mode [ 98.071138][ T6758] bridge_slave_0: left promiscuous mode [ 98.105106][ T6758] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.615924][ T6762] syzkaller0: entered promiscuous mode [ 98.621533][ T6762] syzkaller0: entered allmulticast mode [ 99.496507][ T6812] __nla_validate_parse: 7 callbacks suppressed [ 99.496526][ T6812] netlink: 44 bytes leftover after parsing attributes in process `syz.4.237'. [ 99.648196][ T6816] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.239'. [ 100.207656][ T6844] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 100.225233][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.248'. [ 100.271796][ T6849] netlink: 248 bytes leftover after parsing attributes in process `syz.4.250'. [ 100.432221][ T6858] x_tables: duplicate underflow at hook 1 [ 100.930167][ T6873] netlink: 'syz.4.258': attribute type 21 has an invalid length. [ 100.959130][ T6874] bridge1: entered promiscuous mode [ 100.964574][ T6874] bridge1: entered allmulticast mode [ 100.979137][ T6873] netlink: 'syz.4.258': attribute type 2 has an invalid length. [ 100.988607][ T6874] team0: Port device bridge1 added [ 101.034022][ T6873] þ: entered promiscuous mode [ 101.267242][ T6888] openvswitch: netlink: Flow key attr not present in new flow. [ 101.422819][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.264'. [ 101.601536][ T6914] FAULT_INJECTION: forcing a failure. [ 101.601536][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.640433][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.2.269 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 101.640461][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.640471][ T6914] Call Trace: [ 101.640479][ T6914] [ 101.640487][ T6914] dump_stack_lvl+0x189/0x250 [ 101.640513][ T6914] ? __pfx____ratelimit+0x10/0x10 [ 101.640533][ T6914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.640553][ T6914] ? __pfx__printk+0x10/0x10 [ 101.640575][ T6914] ? __might_fault+0xb0/0x130 [ 101.640610][ T6914] should_fail_ex+0x414/0x560 [ 101.640633][ T6914] _copy_from_iter+0x1db/0x16f0 [ 101.640667][ T6914] ? rcu_is_watching+0x15/0xb0 [ 101.640689][ T6914] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 101.640713][ T6914] ? __pfx__copy_from_iter+0x10/0x10 [ 101.640736][ T6914] ? __build_skb_around+0x257/0x3e0 [ 101.640757][ T6914] ? netlink_sendmsg+0x642/0xb30 [ 101.640774][ T6914] ? skb_put+0x11b/0x210 [ 101.640796][ T6914] netlink_sendmsg+0x6b2/0xb30 [ 101.640822][ T6914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.640844][ T6914] ? aa_sock_msg_perm+0x94/0x160 [ 101.640865][ T6914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 101.640883][ T6914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.640901][ T6914] __sock_sendmsg+0x21c/0x270 [ 101.640929][ T6914] ____sys_sendmsg+0x505/0x830 [ 101.640956][ T6914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.640987][ T6914] ? import_iovec+0x74/0xa0 [ 101.641012][ T6914] ___sys_sendmsg+0x21f/0x2a0 [ 101.641035][ T6914] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.641093][ T6914] ? __fget_files+0x2a/0x420 [ 101.641108][ T6914] ? __fget_files+0x3a0/0x420 [ 101.641134][ T6914] __x64_sys_sendmsg+0x19b/0x260 [ 101.641157][ T6914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 101.641188][ T6914] ? __pfx_ksys_write+0x10/0x10 [ 101.641215][ T6914] ? do_syscall_64+0xbe/0x3b0 [ 101.641237][ T6914] do_syscall_64+0xfa/0x3b0 [ 101.641254][ T6914] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.641270][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.641287][ T6914] ? clear_bhb_loop+0x60/0xb0 [ 101.641307][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.641322][ T6914] RIP: 0033:0x7fdd3098e9a9 [ 101.641338][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.641352][ T6914] RSP: 002b:00007fdd3188a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.641371][ T6914] RAX: ffffffffffffffda RBX: 00007fdd30bb5fa0 RCX: 00007fdd3098e9a9 [ 101.641383][ T6914] RDX: 000000000000c094 RSI: 0000200000000200 RDI: 0000000000000003 [ 101.641395][ T6914] RBP: 00007fdd3188a090 R08: 0000000000000000 R09: 0000000000000000 [ 101.641404][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.641414][ T6914] R13: 0000000000000000 R14: 00007fdd30bb5fa0 R15: 00007ffd5b99e8c8 [ 101.641442][ T6914] [ 102.043136][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 102.052932][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 102.099176][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 102.212703][ T6935] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.278'. [ 102.227958][ T6935] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 102.554535][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 102.600390][ T6952] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 102.627108][ T6961] netlink: 'syz.2.281': attribute type 12 has an invalid length. [ 102.793078][ T30] audit: type=1800 audit(1753503001.436:3): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.279" name="memory.events" dev="tmpfs" ino=332 res=0 errno=0 [ 103.070220][ T6973] netlink: 'syz.1.288': attribute type 5 has an invalid length. [ 103.382506][ T6995] hsr0: entered promiscuous mode [ 103.400889][ T6995] macvlan2: entered allmulticast mode [ 103.406833][ T6995] hsr0: entered allmulticast mode [ 103.418906][ T6995] hsr_slave_0: entered allmulticast mode [ 103.428061][ T6995] hsr_slave_1: entered allmulticast mode [ 103.440188][ T6995] hsr0: left allmulticast mode [ 103.445189][ T6995] hsr_slave_0: left allmulticast mode [ 103.450694][ T6995] hsr_slave_1: left allmulticast mode [ 103.498994][ T6994] IPVS: Unknown mcast interface: pimreg0 [ 103.630109][ T7005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.730434][ T7005] bond0: (slave wlan1): Releasing backup interface [ 103.998688][ T7027] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 104.417909][ T7052] netlink: 'syz.2.309': attribute type 7 has an invalid length. [ 104.434223][ T7052] netlink: 'syz.2.309': attribute type 3 has an invalid length. [ 104.561838][ T7060] xt_hashlimit: size too large, truncated to 1048576 [ 104.650297][ T7064] IPVS: Unknown mcast interface: pimreg0 [ 104.742584][ T7073] __nla_validate_parse: 5 callbacks suppressed [ 104.742602][ T7073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'. [ 105.696239][ T7108] netlink: 'syz.1.325': attribute type 3 has an invalid length. [ 105.726623][ T7114] veth0: entered promiscuous mode [ 105.752814][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 105.910656][ T7110] syz.0.326 (7110) used greatest stack depth: 17864 bytes left [ 106.293163][ T7139] IPVS: Unknown mcast interface: pimreg0 [ 106.333079][ T7139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.333'. [ 106.968329][ T7164] netlink: 96 bytes leftover after parsing attributes in process `syz.1.340'. [ 107.015239][ T7164] 8021q: VLANs not supported on ip6gre0 [ 107.336302][ T7175] Cannot find add_set index 0 as target [ 107.383180][ T7178] Cannot find add_set index 0 as target [ 107.548407][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 107.660351][ T7189] syz.1.347: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 107.691405][ T7189] CPU: 0 UID: 0 PID: 7189 Comm: syz.1.347 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 107.691432][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.691443][ T7189] Call Trace: [ 107.691450][ T7189] [ 107.691458][ T7189] dump_stack_lvl+0x189/0x250 [ 107.691487][ T7189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.691508][ T7189] ? __pfx__printk+0x10/0x10 [ 107.691531][ T7189] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 107.691552][ T7189] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 107.691576][ T7189] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 107.691601][ T7189] warn_alloc+0x214/0x310 [ 107.691625][ T7189] ? __pfx_warn_alloc+0x10/0x10 [ 107.691652][ T7189] ? __get_vm_area_node+0x28f/0x300 [ 107.691676][ T7189] ? xskq_create+0xbf/0x170 [ 107.691697][ T7189] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 107.691748][ T7189] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.691779][ T7189] ? __kasan_kmalloc+0x93/0xb0 [ 107.691806][ T7189] vmalloc_user_noprof+0xad/0xf0 [ 107.691829][ T7189] ? xskq_create+0xbf/0x170 [ 107.691848][ T7189] xskq_create+0xbf/0x170 [ 107.691869][ T7189] xsk_init_queue+0xb0/0x110 [ 107.691890][ T7189] xsk_setsockopt+0x57b/0x8d0 [ 107.691910][ T7189] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.691927][ T7189] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.691948][ T7189] ? __fget_files+0x2a/0x420 [ 107.691963][ T7189] ? aa_sock_opt_perm+0x74/0x110 [ 107.691984][ T7189] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 107.692001][ T7189] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.692020][ T7189] do_sock_setsockopt+0x179/0x1b0 [ 107.692048][ T7189] __x64_sys_setsockopt+0x13f/0x1b0 [ 107.692073][ T7189] do_syscall_64+0xfa/0x3b0 [ 107.692092][ T7189] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.692110][ T7189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.692127][ T7189] ? clear_bhb_loop+0x60/0xb0 [ 107.692148][ T7189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.692164][ T7189] RIP: 0033:0x7f16ab18e9a9 [ 107.692181][ T7189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.692195][ T7189] RSP: 002b:00007f16abf75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.692214][ T7189] RAX: ffffffffffffffda RBX: 00007f16ab3b5fa0 RCX: 00007f16ab18e9a9 [ 107.692226][ T7189] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 107.692236][ T7189] RBP: 00007f16ab210d69 R08: 0000000000000004 R09: 0000000000000000 [ 107.692247][ T7189] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 107.692258][ T7189] R13: 0000000000000000 R14: 00007f16ab3b5fa0 R15: 00007fff5a150408 [ 107.692288][ T7189] [ 107.692310][ T7189] Mem-Info: [ 108.000945][ T7189] active_anon:7224 inactive_anon:0 isolated_anon:0 [ 108.000945][ T7189] active_file:1516 inactive_file:39840 isolated_file:0 [ 108.000945][ T7189] unevictable:768 dirty:70 writeback:0 [ 108.000945][ T7189] slab_reclaimable:11084 slab_unreclaimable:97436 [ 108.000945][ T7189] mapped:32075 shmem:4231 pagetables:1106 [ 108.000945][ T7189] sec_pagetables:0 bounce:0 [ 108.000945][ T7189] kernel_misc_reclaimable:0 [ 108.000945][ T7189] free:1323335 free_pcp:17631 free_cma:0 [ 108.074269][ T7189] Node 0 active_anon:28796kB inactive_anon:0kB active_file:6064kB inactive_file:159156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128300kB dirty:280kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11520kB pagetables:4192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.132470][ T7189] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.132586][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 108.169500][ T7189] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.256624][ T7189] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 108.262868][ T7189] Node 0 DMA32 free:1381748kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28852kB inactive_anon:0kB active_file:6064kB inactive_file:157564kB unevictable:1536kB writepending:280kB present:3129332kB managed:2558296kB mlocked:0kB bounce:0kB free_pcp:50012kB local_pcp:28672kB free_cma:0kB [ 108.305209][ T7189] lowmem_reserve[]: 0 0 1 1 1 [ 108.310275][ T7189] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 108.325578][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 108.344993][ T7208] netlink: 452 bytes leftover after parsing attributes in process `syz.2.353'. [ 108.360916][ T7213] netlink: 'syz.0.356': attribute type 30 has an invalid length. [ 108.384763][ T7189] lowmem_reserve[]: 0 0 0 0 0 [ 108.389649][ T7189] Node 1 Normal free:3897784kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19680kB local_pcp:7776kB free_cma:0kB [ 108.461536][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 108.471044][ T2986] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.492672][ T7213] netlink: 'syz.0.356': attribute type 30 has an invalid length. [ 108.500838][ T2986] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.508739][ T7189] lowmem_reserve[]: 0 0 0 0 0 [ 108.517609][ T7189] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.530456][ T7211] Cannot find add_set index 0 as target [ 108.549556][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.576423][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.594964][ T7189] Node 0 DMA32: 619*4kB (UME) 169*8kB (UM) 76*16kB (UM) 71*32kB (UM) 20*64kB (UME) 33*128kB (UME) 19*256kB (UM) 16*512kB (UME) 8*1024kB (UME) 4*2048kB (UME) 327*4096kB (M) = 1381652kB [ 108.620620][ T7189] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 108.666346][ T7189] Node 1 Normal: 182*4kB (UE) 40*8kB (UME) 46*16kB (UME) 50*32kB (UME) 20*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3897784kB [ 108.746213][ T7189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.784732][ T7189] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.794357][ T7219] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 108.858661][ T7189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.896713][ T7189] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 108.917024][ T7221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'. [ 108.931114][ T7189] 45591 total pagecache pages [ 108.944760][ T7189] 0 pages in swap cache [ 108.953404][ T7189] Free swap = 124996kB [ 108.982116][ T7189] Total swap = 124996kB [ 108.997220][ T7189] 2097051 pages RAM [ 109.010117][ T7189] 0 pages HighMem/MovableOnly [ 109.027526][ T7189] 425435 pages reserved [ 109.039288][ T7189] 0 pages cma reserved [ 109.829326][ T7256] __nla_validate_parse: 2 callbacks suppressed [ 109.829343][ T7256] netlink: 84 bytes leftover after parsing attributes in process `syz.0.369'. [ 109.941164][ T7247] team0: Port device team_slave_0 removed [ 109.988019][ T7253] wireguard0: entered promiscuous mode [ 109.993680][ T7253] wireguard0: entered allmulticast mode [ 110.042041][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 110.051352][ T7264] netlink: 3 bytes leftover after parsing attributes in process `syz.3.371'. [ 110.464333][ T7279] Illegal XDP return value 4294967262 on prog (id 136) dev N/A, expect packet loss! [ 110.472550][ T7273] syzkaller0: entered promiscuous mode [ 110.492468][ T7273] syzkaller0: entered allmulticast mode [ 110.533544][ T7279] netlink: 36 bytes leftover after parsing attributes in process `syz.0.378'. [ 111.382682][ T7293] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 111.402702][ T7293] netlink: 244 bytes leftover after parsing attributes in process `syz.1.380'. [ 111.446273][ T7293] netlink: 'syz.1.380': attribute type 21 has an invalid length. [ 112.547493][ T7324] netlink: 'syz.3.389': attribute type 10 has an invalid length. [ 112.930967][ T7293] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 113.020865][ T7300] pim6reg: entered allmulticast mode [ 113.027255][ T7302] pim6reg: left allmulticast mode [ 113.121194][ T7324] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.175072][ T7328] tap0: tun_chr_ioctl cmd 1074025677 [ 113.188865][ T7328] tap0: linktype set to 825 [ 113.337081][ T7344] netlink: 'syz.4.393': attribute type 3 has an invalid length. [ 113.419690][ T7344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.393'. [ 114.299405][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 114.373690][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 114.429645][ T7361] delete_channel: no stack [ 114.549422][ T7373] netlink: 'syz.1.401': attribute type 2 has an invalid length. [ 114.586304][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 114.601199][ T7376] bridge2: entered promiscuous mode [ 114.606741][ T7376] bridge2: entered allmulticast mode [ 114.615666][ T7376] team0: Port device bridge2 added [ 114.657728][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 114.730031][ T7376] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 114.790542][ T7376] team1: entered promiscuous mode [ 114.800038][ T7376] team1: entered allmulticast mode [ 114.902224][ T7393] __nla_validate_parse: 1 callbacks suppressed [ 114.902243][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 115.019599][ T7401] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 115.219440][ T7409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.493526][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 115.819589][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.415'. [ 115.988168][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 116.139539][ T7460] syzkaller1: entered promiscuous mode [ 116.158001][ T7460] syzkaller1: entered allmulticast mode [ 116.466998][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.430'. [ 116.786999][ T7494] pimreg: entered allmulticast mode [ 116.792936][ T7496] FAULT_INJECTION: forcing a failure. [ 116.792936][ T7496] name failslab, interval 1, probability 0, space 0, times 0 [ 116.844994][ T7496] CPU: 1 UID: 0 PID: 7496 Comm: syz.2.433 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 116.845020][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.845031][ T7496] Call Trace: [ 116.845039][ T7496] [ 116.845047][ T7496] dump_stack_lvl+0x189/0x250 [ 116.845074][ T7496] ? __pfx____ratelimit+0x10/0x10 [ 116.845094][ T7496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.845114][ T7496] ? __pfx__printk+0x10/0x10 [ 116.845139][ T7496] ? __pfx___might_resched+0x10/0x10 [ 116.845159][ T7496] ? fs_reclaim_acquire+0x7d/0x100 [ 116.845181][ T7496] should_fail_ex+0x414/0x560 [ 116.845216][ T7496] should_failslab+0xa8/0x100 [ 116.845243][ T7496] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 116.845266][ T7496] ? __request_module+0x2d1/0x5e0 [ 116.845290][ T7496] kstrdup+0x42/0x100 [ 116.845309][ T7496] __request_module+0x2d1/0x5e0 [ 116.845328][ T7496] ? __rtnl_unlock+0xc8/0xf0 [ 116.845352][ T7496] ? __pfx___request_module+0x10/0x10 [ 116.845374][ T7496] ? __pfx_netdev_run_todo+0x10/0x10 [ 116.845417][ T7496] load_metalist+0x20d/0x4f0 [ 116.845443][ T7496] tcf_ife_init+0x3e3/0xd60 [ 116.845472][ T7496] ? __pfx_tcf_ife_init+0x10/0x10 [ 116.845509][ T7496] ? nla_memcpy+0x5b/0xc0 [ 116.845539][ T7496] tcf_action_init_1+0x463/0x6d0 [ 116.845570][ T7496] ? __pfx_tcf_action_init_1+0x10/0x10 [ 116.845591][ T7496] ? _raw_read_unlock+0x28/0x50 [ 116.845609][ T7496] ? tc_action_load_ops+0x214/0x4e0 [ 116.845654][ T7496] ? __nla_parse+0x40/0x60 [ 116.845676][ T7496] tcf_action_init+0x2cf/0xab0 [ 116.845710][ T7496] ? __pfx_tcf_action_init+0x10/0x10 [ 116.845763][ T7496] ? __pfx___nla_validate_parse+0x10/0x10 [ 116.845823][ T7496] tc_ctl_action+0x430/0xbd0 [ 116.845856][ T7496] ? __pfx_tc_ctl_action+0x10/0x10 [ 116.845877][ T7496] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 116.845902][ T7496] ? rcu_is_watching+0x15/0xb0 [ 116.845966][ T7496] ? __pfx_tc_ctl_action+0x10/0x10 [ 116.845988][ T7496] rtnetlink_rcv_msg+0x779/0xb70 [ 116.846005][ T7496] ? __lock_acquire+0xab9/0xd20 [ 116.846025][ T7496] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 116.846041][ T7496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.846075][ T7496] netlink_rcv_skb+0x205/0x470 [ 116.846091][ T7496] ? __lock_acquire+0xab9/0xd20 [ 116.846108][ T7496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.846128][ T7496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.846159][ T7496] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.846184][ T7496] netlink_unicast+0x82f/0x9e0 [ 116.846225][ T7496] ? __pfx_netlink_unicast+0x10/0x10 [ 116.846251][ T7496] ? netlink_sendmsg+0x642/0xb30 [ 116.846267][ T7496] ? skb_put+0x11b/0x210 [ 116.846290][ T7496] netlink_sendmsg+0x805/0xb30 [ 116.846318][ T7496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.846339][ T7496] ? aa_sock_msg_perm+0x94/0x160 [ 116.846359][ T7496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.846375][ T7496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.846394][ T7496] __sock_sendmsg+0x21c/0x270 [ 116.846423][ T7496] ____sys_sendmsg+0x505/0x830 [ 116.846450][ T7496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.846481][ T7496] ? import_iovec+0x74/0xa0 [ 116.846509][ T7496] ___sys_sendmsg+0x21f/0x2a0 [ 116.846533][ T7496] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.846593][ T7496] ? __fget_files+0x2a/0x420 [ 116.846608][ T7496] ? __fget_files+0x3a0/0x420 [ 116.846635][ T7496] __x64_sys_sendmsg+0x19b/0x260 [ 116.846659][ T7496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.846691][ T7496] ? __pfx_ksys_write+0x10/0x10 [ 116.846710][ T7496] ? rcu_is_watching+0x15/0xb0 [ 116.846735][ T7496] ? do_syscall_64+0xbe/0x3b0 [ 116.846759][ T7496] do_syscall_64+0xfa/0x3b0 [ 116.846777][ T7496] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.846795][ T7496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.846811][ T7496] ? clear_bhb_loop+0x60/0xb0 [ 116.846831][ T7496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.846847][ T7496] RIP: 0033:0x7fdd3098e9a9 [ 116.846862][ T7496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.846875][ T7496] RSP: 002b:00007fdd3188a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.846894][ T7496] RAX: ffffffffffffffda RBX: 00007fdd30bb5fa0 RCX: 00007fdd3098e9a9 [ 116.846907][ T7496] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 116.846918][ T7496] RBP: 00007fdd3188a090 R08: 0000000000000000 R09: 0000000000000000 [ 116.846929][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.846939][ T7496] R13: 0000000000000000 R14: 00007fdd30bb5fa0 R15: 00007ffd5b99e8c8 [ 116.846969][ T7496] [ 116.882315][ T7504] siw: device registration error -23 [ 116.997806][ T7501] pimreg: left allmulticast mode [ 117.745511][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'. [ 117.746109][ T7539] FAULT_INJECTION: forcing a failure. [ 117.746109][ T7539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.771017][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'. [ 117.804913][ T7539] CPU: 1 UID: 0 PID: 7539 Comm: syz.1.446 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 117.804939][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.804953][ T7539] Call Trace: [ 117.804960][ T7539] [ 117.804968][ T7539] dump_stack_lvl+0x189/0x250 [ 117.805002][ T7539] ? __pfx____ratelimit+0x10/0x10 [ 117.805022][ T7539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.805042][ T7539] ? __pfx__printk+0x10/0x10 [ 117.805075][ T7539] ? __might_fault+0xb0/0x130 [ 117.805106][ T7539] should_fail_ex+0x414/0x560 [ 117.805128][ T7539] _copy_from_iter+0x1db/0x16f0 [ 117.805154][ T7539] ? rcu_is_watching+0x15/0xb0 [ 117.805174][ T7539] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 117.805196][ T7539] ? __pfx__copy_from_iter+0x10/0x10 [ 117.805217][ T7539] ? __build_skb_around+0x257/0x3e0 [ 117.805239][ T7539] ? netlink_sendmsg+0x642/0xb30 [ 117.805257][ T7539] ? skb_put+0x11b/0x210 [ 117.805280][ T7539] netlink_sendmsg+0x6b2/0xb30 [ 117.805308][ T7539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.805329][ T7539] ? aa_sock_msg_perm+0x94/0x160 [ 117.805350][ T7539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.805367][ T7539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.805386][ T7539] __sock_sendmsg+0x21c/0x270 [ 117.805413][ T7539] ____sys_sendmsg+0x505/0x830 [ 117.805440][ T7539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.805471][ T7539] ? import_iovec+0x74/0xa0 [ 117.805497][ T7539] ___sys_sendmsg+0x21f/0x2a0 [ 117.805521][ T7539] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.805579][ T7539] ? __fget_files+0x2a/0x420 [ 117.805594][ T7539] ? __fget_files+0x3a0/0x420 [ 117.805621][ T7539] __x64_sys_sendmsg+0x19b/0x260 [ 117.805644][ T7539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.805675][ T7539] ? __pfx_ksys_write+0x10/0x10 [ 117.805695][ T7539] ? rcu_is_watching+0x15/0xb0 [ 117.805719][ T7539] ? do_syscall_64+0xbe/0x3b0 [ 117.805743][ T7539] do_syscall_64+0xfa/0x3b0 [ 117.805761][ T7539] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.805778][ T7539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.805795][ T7539] ? clear_bhb_loop+0x60/0xb0 [ 117.805816][ T7539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.805833][ T7539] RIP: 0033:0x7f16ab18e9a9 [ 117.805858][ T7539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.805871][ T7539] RSP: 002b:00007f16abf75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.805897][ T7539] RAX: ffffffffffffffda RBX: 00007f16ab3b5fa0 RCX: 00007f16ab18e9a9 [ 117.805910][ T7539] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 117.805921][ T7539] RBP: 00007f16abf75090 R08: 0000000000000000 R09: 0000000000000000 [ 117.805932][ T7539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.805942][ T7539] R13: 0000000000000000 R14: 00007f16ab3b5fa0 R15: 00007fff5a150408 [ 117.805971][ T7539] [ 118.137269][ T7550] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 118.209296][ T7553] netlink: 'syz.1.450': attribute type 13 has an invalid length. [ 118.220706][ T7553] netlink: 'syz.1.450': attribute type 17 has an invalid length. [ 118.287194][ T7557] netlink: 224 bytes leftover after parsing attributes in process `syz.2.452'. [ 118.361007][ T7562] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 118.403495][ T7553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.489048][ T7562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.555701][ T7569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.454'. [ 118.567340][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 118.630935][ T7572] x_tables: duplicate underflow at hook 2 [ 118.956317][ T4610] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.017738][ T4610] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.058257][ T4610] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.078112][ T4610] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.228915][ T7609] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 119.242337][ T7612] FAULT_INJECTION: forcing a failure. [ 119.242337][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 119.290083][ T7609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.307098][ T7612] CPU: 0 UID: 0 PID: 7612 Comm: syz.1.469 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 119.307124][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.307134][ T7612] Call Trace: [ 119.307141][ T7612] [ 119.307148][ T7612] dump_stack_lvl+0x189/0x250 [ 119.307174][ T7612] ? __pfx____ratelimit+0x10/0x10 [ 119.307194][ T7612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.307222][ T7612] ? __pfx__printk+0x10/0x10 [ 119.307249][ T7612] ? __pfx___might_resched+0x10/0x10 [ 119.307272][ T7612] should_fail_ex+0x414/0x560 [ 119.307296][ T7612] should_failslab+0xa8/0x100 [ 119.307322][ T7612] __kmalloc_cache_noprof+0x70/0x3d0 [ 119.307343][ T7612] ? call_usermodehelper_setup+0x8e/0x270 [ 119.307360][ T7612] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 119.307384][ T7612] call_usermodehelper_setup+0x8e/0x270 [ 119.307401][ T7612] ? __pfx_free_modprobe_argv+0x10/0x10 [ 119.307422][ T7612] __request_module+0x39f/0x5e0 [ 119.307440][ T7612] ? __rtnl_unlock+0xc8/0xf0 [ 119.307463][ T7612] ? __pfx___request_module+0x10/0x10 [ 119.307487][ T7612] ? __pfx_netdev_run_todo+0x10/0x10 [ 119.307522][ T7612] load_metalist+0x20d/0x4f0 [ 119.307548][ T7612] tcf_ife_init+0x3e3/0xd60 [ 119.307577][ T7612] ? __pfx_tcf_ife_init+0x10/0x10 [ 119.307611][ T7612] ? nla_memcpy+0x5b/0xc0 [ 119.307639][ T7612] tcf_action_init_1+0x463/0x6d0 [ 119.307669][ T7612] ? __pfx_tcf_action_init_1+0x10/0x10 [ 119.307689][ T7612] ? _raw_read_unlock+0x28/0x50 [ 119.307705][ T7612] ? tc_action_load_ops+0x214/0x4e0 [ 119.307740][ T7612] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.307763][ T7612] ? __nla_parse+0x40/0x60 [ 119.307785][ T7612] tcf_action_init+0x2cf/0xab0 [ 119.307819][ T7612] ? __pfx_tcf_action_init+0x10/0x10 [ 119.307871][ T7612] ? __pfx___nla_validate_parse+0x10/0x10 [ 119.307925][ T7612] tc_ctl_action+0x430/0xbd0 [ 119.307956][ T7612] ? __pfx_tc_ctl_action+0x10/0x10 [ 119.307985][ T7612] ? rcu_is_watching+0x15/0xb0 [ 119.308048][ T7612] ? __pfx_tc_ctl_action+0x10/0x10 [ 119.308071][ T7612] rtnetlink_rcv_msg+0x779/0xb70 [ 119.308094][ T7612] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 119.308110][ T7612] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.308125][ T7612] ? ref_tracker_free+0x63a/0x7d0 [ 119.308144][ T7612] ? __asan_memcpy+0x40/0x70 [ 119.308163][ T7612] ? __pfx_ref_tracker_free+0x10/0x10 [ 119.308192][ T7612] netlink_rcv_skb+0x205/0x470 [ 119.308220][ T7612] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.308240][ T7612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.308268][ T7612] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.308293][ T7612] netlink_unicast+0x82f/0x9e0 [ 119.308326][ T7612] ? __pfx_netlink_unicast+0x10/0x10 [ 119.308352][ T7612] ? netlink_sendmsg+0x642/0xb30 [ 119.308367][ T7612] ? skb_put+0x11b/0x210 [ 119.308390][ T7612] netlink_sendmsg+0x805/0xb30 [ 119.308416][ T7612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.308437][ T7612] ? aa_sock_msg_perm+0x94/0x160 [ 119.308456][ T7612] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.308472][ T7612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.308492][ T7612] __sock_sendmsg+0x21c/0x270 [ 119.308519][ T7612] ____sys_sendmsg+0x505/0x830 [ 119.308545][ T7612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.308574][ T7612] ? import_iovec+0x74/0xa0 [ 119.308600][ T7612] ___sys_sendmsg+0x21f/0x2a0 [ 119.308622][ T7612] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.308675][ T7612] ? __fget_files+0x2a/0x420 [ 119.308691][ T7612] ? __fget_files+0x3a0/0x420 [ 119.308715][ T7612] __x64_sys_sendmsg+0x19b/0x260 [ 119.308739][ T7612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.308770][ T7612] ? __pfx_ksys_write+0x10/0x10 [ 119.308790][ T7612] ? rcu_is_watching+0x15/0xb0 [ 119.308813][ T7612] ? do_syscall_64+0xbe/0x3b0 [ 119.308837][ T7612] do_syscall_64+0xfa/0x3b0 [ 119.308854][ T7612] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.308872][ T7612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.308888][ T7612] ? clear_bhb_loop+0x60/0xb0 [ 119.308909][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.308925][ T7612] RIP: 0033:0x7f16ab18e9a9 [ 119.308942][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.308956][ T7612] RSP: 002b:00007f16abf75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.308975][ T7612] RAX: ffffffffffffffda RBX: 00007f16ab3b5fa0 RCX: 00007f16ab18e9a9 [ 119.308988][ T7612] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 119.308999][ T7612] RBP: 00007f16abf75090 R08: 0000000000000000 R09: 0000000000000000 [ 119.309009][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.309019][ T7612] R13: 0000000000000000 R14: 00007f16ab3b5fa0 R15: 00007fff5a150408 [ 119.309048][ T7612] [ 119.792772][ T7609] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 119.834870][ T7622] netlink: 'syz.3.470': attribute type 10 has an invalid length. [ 119.877623][ T7622] macvlan0: entered promiscuous mode [ 119.896900][ T7622] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 119.981506][ T7630] __nla_validate_parse: 3 callbacks suppressed [ 119.981524][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 120.020345][ T7630] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.473'. [ 120.261526][ T7639] IPv6: Can't replace route, no match found [ 120.543030][ T7643] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 120.728930][ T7643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.916683][ T7671] FAULT_INJECTION: forcing a failure. [ 120.916683][ T7671] name failslab, interval 1, probability 0, space 0, times 0 [ 120.948986][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: syz.1.481 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 120.949014][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.949025][ T7671] Call Trace: [ 120.949032][ T7671] [ 120.949040][ T7671] dump_stack_lvl+0x189/0x250 [ 120.949066][ T7671] ? __pfx____ratelimit+0x10/0x10 [ 120.949086][ T7671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.949106][ T7671] ? __pfx__printk+0x10/0x10 [ 120.949134][ T7671] ? __pfx___might_resched+0x10/0x10 [ 120.949159][ T7671] should_fail_ex+0x414/0x560 [ 120.949183][ T7671] should_failslab+0xa8/0x100 [ 120.949209][ T7671] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 120.949233][ T7671] ? __alloc_skb+0x112/0x2d0 [ 120.949256][ T7671] __alloc_skb+0x112/0x2d0 [ 120.949279][ T7671] pfkey_sendmsg+0xca5/0x1090 [ 120.949316][ T7671] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 120.949360][ T7671] ? aa_sock_msg_perm+0x94/0x160 [ 120.949382][ T7671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.949400][ T7671] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 120.949418][ T7671] __sock_sendmsg+0x21c/0x270 [ 120.949447][ T7671] ____sys_sendmsg+0x505/0x830 [ 120.949474][ T7671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.949505][ T7671] ? import_iovec+0x74/0xa0 [ 120.949532][ T7671] ___sys_sendmsg+0x21f/0x2a0 [ 120.949555][ T7671] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.949614][ T7671] ? __fget_files+0x2a/0x420 [ 120.949630][ T7671] ? __fget_files+0x3a0/0x420 [ 120.949656][ T7671] __x64_sys_sendmsg+0x19b/0x260 [ 120.949680][ T7671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.949712][ T7671] ? __pfx_ksys_write+0x10/0x10 [ 120.949732][ T7671] ? rcu_is_watching+0x15/0xb0 [ 120.949763][ T7671] ? do_syscall_64+0xbe/0x3b0 [ 120.949787][ T7671] do_syscall_64+0xfa/0x3b0 [ 120.949805][ T7671] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.949823][ T7671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.949840][ T7671] ? clear_bhb_loop+0x60/0xb0 [ 120.949862][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.949878][ T7671] RIP: 0033:0x7f16ab18e9a9 [ 120.949894][ T7671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.949908][ T7671] RSP: 002b:00007f16abf75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.949928][ T7671] RAX: ffffffffffffffda RBX: 00007f16ab3b5fa0 RCX: 00007f16ab18e9a9 [ 120.949941][ T7671] RDX: 00000000040408c0 RSI: 0000200000000440 RDI: 0000000000000003 [ 120.949952][ T7671] RBP: 00007f16abf75090 R08: 0000000000000000 R09: 0000000000000000 [ 120.949963][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.949974][ T7671] R13: 0000000000000000 R14: 00007f16ab3b5fa0 R15: 00007fff5a150408 [ 120.950003][ T7671] [ 121.730034][ T7701] FAULT_INJECTION: forcing a failure. [ 121.730034][ T7701] name failslab, interval 1, probability 0, space 0, times 0 [ 121.794375][ T7701] CPU: 1 UID: 0 PID: 7701 Comm: syz.2.490 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 121.794402][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.794411][ T7701] Call Trace: [ 121.794419][ T7701] [ 121.794426][ T7701] dump_stack_lvl+0x189/0x250 [ 121.794452][ T7701] ? __pfx____ratelimit+0x10/0x10 [ 121.794472][ T7701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.794493][ T7701] ? __pfx__printk+0x10/0x10 [ 121.794522][ T7701] ? __pfx___might_resched+0x10/0x10 [ 121.794541][ T7701] ? fs_reclaim_acquire+0x7d/0x100 [ 121.794564][ T7701] should_fail_ex+0x414/0x560 [ 121.794588][ T7701] should_failslab+0xa8/0x100 [ 121.794615][ T7701] __kmalloc_cache_noprof+0x70/0x3d0 [ 121.794637][ T7701] ? __request_module+0x2b5/0x5e0 [ 121.794661][ T7701] __request_module+0x2b5/0x5e0 [ 121.794695][ T7701] ? __pfx___request_module+0x10/0x10 [ 121.794711][ T7701] ? __up_read+0x280/0x680 [ 121.794735][ T7701] ? __pfx___up_read+0x10/0x10 [ 121.794776][ T7701] crypto_alg_mod_lookup+0xa5/0x5f0 [ 121.794805][ T7701] crypto_alloc_tfm_node+0x13e/0x3f0 [ 121.794837][ T7701] esp_init_state+0x5b6/0x1140 [ 121.794857][ T7701] ? __sock_sendmsg+0x21c/0x270 [ 121.794879][ T7701] ? ____sys_sendmsg+0x505/0x830 [ 121.794911][ T7701] ? __pfx_esp_init_state+0x10/0x10 [ 121.794954][ T7701] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 121.794987][ T7701] ? __xfrm_init_state+0x7ef/0x13f0 [ 121.795011][ T7701] __xfrm_init_state+0xa73/0x13f0 [ 121.795028][ T7701] ? __xfrm_init_state+0x7ef/0x13f0 [ 121.795053][ T7701] xfrm_add_sa+0x2f5b/0x4070 [ 121.795083][ T7701] ? __pfx_xfrm_add_sa+0x10/0x10 [ 121.795099][ T7701] ? apparmor_capable+0x137/0x1b0 [ 121.795126][ T7701] ? __nla_parse+0x40/0x60 [ 121.795152][ T7701] xfrm_user_rcv_msg+0x7a3/0xab0 [ 121.795178][ T7701] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 121.795233][ T7701] ? __mutex_trylock_common+0x153/0x260 [ 121.795257][ T7701] ? __pfx___mutex_trylock_common+0x10/0x10 [ 121.795283][ T7701] ? rcu_is_watching+0x15/0xb0 [ 121.795303][ T7701] ? trace_contention_end+0x39/0x120 [ 121.795331][ T7701] netlink_rcv_skb+0x205/0x470 [ 121.795352][ T7701] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 121.795373][ T7701] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.795408][ T7701] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.795425][ T7701] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.795446][ T7701] xfrm_netlink_rcv+0x79/0x90 [ 121.795465][ T7701] netlink_unicast+0x82f/0x9e0 [ 121.795499][ T7701] ? __pfx_netlink_unicast+0x10/0x10 [ 121.795525][ T7701] ? netlink_sendmsg+0x642/0xb30 [ 121.795542][ T7701] ? skb_put+0x11b/0x210 [ 121.795565][ T7701] netlink_sendmsg+0x805/0xb30 [ 121.795595][ T7701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.795617][ T7701] ? aa_sock_msg_perm+0x94/0x160 [ 121.795637][ T7701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.795655][ T7701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.795675][ T7701] __sock_sendmsg+0x21c/0x270 [ 121.795712][ T7701] ____sys_sendmsg+0x505/0x830 [ 121.795740][ T7701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.795771][ T7701] ? import_iovec+0x74/0xa0 [ 121.795798][ T7701] ___sys_sendmsg+0x21f/0x2a0 [ 121.795822][ T7701] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.795883][ T7701] ? __fget_files+0x2a/0x420 [ 121.795897][ T7701] ? __fget_files+0x3a0/0x420 [ 121.795925][ T7701] __x64_sys_sendmsg+0x19b/0x260 [ 121.795949][ T7701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.795981][ T7701] ? __pfx_ksys_write+0x10/0x10 [ 121.796001][ T7701] ? rcu_is_watching+0x15/0xb0 [ 121.796026][ T7701] ? do_syscall_64+0xbe/0x3b0 [ 121.796049][ T7701] do_syscall_64+0xfa/0x3b0 [ 121.796067][ T7701] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.796085][ T7701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.796102][ T7701] ? clear_bhb_loop+0x60/0xb0 [ 121.796123][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.796140][ T7701] RIP: 0033:0x7fdd3098e9a9 [ 121.796156][ T7701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.796170][ T7701] RSP: 002b:00007fdd3188a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.796190][ T7701] RAX: ffffffffffffffda RBX: 00007fdd30bb5fa0 RCX: 00007fdd3098e9a9 [ 121.796203][ T7701] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 121.796214][ T7701] RBP: 00007fdd3188a090 R08: 0000000000000000 R09: 0000000000000000 [ 121.796224][ T7701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.796235][ T7701] R13: 0000000000000000 R14: 00007fdd30bb5fa0 R15: 00007ffd5b99e8c8 [ 121.796265][ T7701] [ 121.831844][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 122.349243][ T7724] netlink: 32 bytes leftover after parsing attributes in process `syz.0.494'. [ 122.446352][ T7720] vlan2: entered allmulticast mode [ 122.512317][ T7720] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 123.000327][ T7755] IPVS: Unknown mcast interface: pimreg0 [ 123.020109][ T7755] netlink: 40 bytes leftover after parsing attributes in process `syz.3.504'. [ 123.465727][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 123.486984][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 123.533078][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 123.556827][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 123.719061][ T7787] FAULT_INJECTION: forcing a failure. [ 123.719061][ T7787] name failslab, interval 1, probability 0, space 0, times 0 [ 123.915171][ T7787] CPU: 1 UID: 0 PID: 7787 Comm: syz.4.510 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 123.915198][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.915208][ T7787] Call Trace: [ 123.915215][ T7787] [ 123.915222][ T7787] dump_stack_lvl+0x189/0x250 [ 123.915247][ T7787] ? __pfx____ratelimit+0x10/0x10 [ 123.915266][ T7787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.915285][ T7787] ? __pfx__printk+0x10/0x10 [ 123.915312][ T7787] ? __pfx___might_resched+0x10/0x10 [ 123.915337][ T7787] should_fail_ex+0x414/0x560 [ 123.915360][ T7787] should_failslab+0xa8/0x100 [ 123.915386][ T7787] kmem_cache_alloc_noprof+0x73/0x3c0 [ 123.915408][ T7787] ? skb_clone+0x212/0x3a0 [ 123.915434][ T7787] skb_clone+0x212/0x3a0 [ 123.915454][ T7787] ? pfkey_broadcast_one+0x7d/0x360 [ 123.915475][ T7787] pfkey_broadcast_one+0x9b/0x360 [ 123.915490][ T7787] ? pfkey_broadcast+0x39c/0x3e0 [ 123.915509][ T7787] pfkey_broadcast+0x3a9/0x3e0 [ 123.915525][ T7787] ? pfkey_broadcast+0x48/0x3e0 [ 123.915543][ T7787] pfkey_sendmsg+0xdd8/0x1090 [ 123.915578][ T7787] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 123.915630][ T7787] ? aa_sock_msg_perm+0x94/0x160 [ 123.915651][ T7787] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 123.915668][ T7787] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 123.915685][ T7787] __sock_sendmsg+0x21c/0x270 [ 123.915713][ T7787] ____sys_sendmsg+0x505/0x830 [ 123.915739][ T7787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.915769][ T7787] ? import_iovec+0x74/0xa0 [ 123.915795][ T7787] ___sys_sendmsg+0x21f/0x2a0 [ 123.915818][ T7787] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.915876][ T7787] ? __fget_files+0x2a/0x420 [ 123.915890][ T7787] ? __fget_files+0x3a0/0x420 [ 123.915917][ T7787] __x64_sys_sendmsg+0x19b/0x260 [ 123.915941][ T7787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.915970][ T7787] ? __pfx_ksys_write+0x10/0x10 [ 123.915989][ T7787] ? rcu_is_watching+0x15/0xb0 [ 123.916014][ T7787] ? do_syscall_64+0xbe/0x3b0 [ 123.916038][ T7787] do_syscall_64+0xfa/0x3b0 [ 123.916055][ T7787] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.916073][ T7787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.916089][ T7787] ? clear_bhb_loop+0x60/0xb0 [ 123.916111][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.916127][ T7787] RIP: 0033:0x7f291cf8e9a9 [ 123.916143][ T7787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.916157][ T7787] RSP: 002b:00007f291de56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.916176][ T7787] RAX: ffffffffffffffda RBX: 00007f291d1b5fa0 RCX: 00007f291cf8e9a9 [ 123.916189][ T7787] RDX: 00000000040408c0 RSI: 0000200000000440 RDI: 0000000000000003 [ 123.916200][ T7787] RBP: 00007f291de56090 R08: 0000000000000000 R09: 0000000000000000 [ 123.916211][ T7787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.916221][ T7787] R13: 0000000000000000 R14: 00007f291d1b5fa0 R15: 00007fff9ad321f8 [ 123.916249][ T7787] [ 124.217504][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 124.831558][ T7823] openvswitch: netlink: Flow actions attr not present in new flow. [ 125.068436][ T7832] IPVS: Unknown mcast interface: pimreg0 [ 125.079161][ T7810] syz.4.516: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 125.098186][ T7838] FAULT_INJECTION: forcing a failure. [ 125.098186][ T7838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.099245][ T7835] __nla_validate_parse: 1 callbacks suppressed [ 125.099258][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 125.112100][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.1.523 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 125.112124][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.112134][ T7838] Call Trace: [ 125.112141][ T7838] [ 125.112149][ T7838] dump_stack_lvl+0x189/0x250 [ 125.112174][ T7838] ? __pfx____ratelimit+0x10/0x10 [ 125.112194][ T7838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.112213][ T7838] ? __pfx__printk+0x10/0x10 [ 125.112247][ T7838] should_fail_ex+0x414/0x560 [ 125.112271][ T7838] _copy_to_user+0x31/0xb0 [ 125.112296][ T7838] simple_read_from_buffer+0xe1/0x170 [ 125.112325][ T7838] proc_fail_nth_read+0x1df/0x250 [ 125.112346][ T7838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.112366][ T7838] ? rw_verify_area+0x258/0x650 [ 125.112386][ T7838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.112404][ T7838] vfs_read+0x200/0x980 [ 125.112430][ T7838] ? __pfx___mutex_lock+0x10/0x10 [ 125.112450][ T7838] ? __pfx_vfs_read+0x10/0x10 [ 125.112472][ T7838] ? __fget_files+0x2a/0x420 [ 125.112492][ T7838] ? __fget_files+0x3a0/0x420 [ 125.112505][ T7838] ? __fget_files+0x2a/0x420 [ 125.112529][ T7838] ksys_read+0x145/0x250 [ 125.112553][ T7838] ? __pfx_ksys_read+0x10/0x10 [ 125.112571][ T7838] ? rcu_is_watching+0x15/0xb0 [ 125.112597][ T7838] ? do_syscall_64+0xbe/0x3b0 [ 125.112621][ T7838] do_syscall_64+0xfa/0x3b0 [ 125.112638][ T7838] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.112663][ T7838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.112680][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 125.112701][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.112716][ T7838] RIP: 0033:0x7f16ab18d3bc [ 125.112732][ T7838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.112746][ T7838] RSP: 002b:00007f16abf75030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.112764][ T7838] RAX: ffffffffffffffda RBX: 00007f16ab3b5fa0 RCX: 00007f16ab18d3bc [ 125.112776][ T7838] RDX: 000000000000000f RSI: 00007f16abf750a0 RDI: 0000000000000004 [ 125.112787][ T7838] RBP: 00007f16abf75090 R08: 0000000000000000 R09: 0000000000000000 [ 125.112797][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.112806][ T7838] R13: 0000000000000000 R14: 00007f16ab3b5fa0 R15: 00007fff5a150408 [ 125.112835][ T7838] [ 125.113215][ T7810] CPU: 0 UID: 0 PID: 7810 Comm: syz.4.516 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 125.113236][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.113245][ T7810] Call Trace: [ 125.113252][ T7810] [ 125.113258][ T7810] dump_stack_lvl+0x189/0x250 [ 125.113282][ T7810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.113302][ T7810] ? __pfx__printk+0x10/0x10 [ 125.113323][ T7810] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 125.113345][ T7810] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 125.113368][ T7810] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 125.113392][ T7810] warn_alloc+0x214/0x310 [ 125.113413][ T7810] ? __pfx_warn_alloc+0x10/0x10 [ 125.113438][ T7810] ? __get_vm_area_node+0x28f/0x300 [ 125.113462][ T7810] ? __do_replace+0xb4/0xaa0 [ 125.113486][ T7810] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 125.113509][ T7810] ? stack_depot_save_flags+0x40/0x900 [ 125.113548][ T7810] ? translate_table+0x1b4d/0x1f90 [ 125.113572][ T7810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 125.113602][ T7810] ? __do_replace+0xb4/0xaa0 [ 125.113623][ T7810] vzalloc_noprof+0xb2/0xf0 [ 125.113653][ T7810] ? __do_replace+0xb4/0xaa0 [ 125.113675][ T7810] __do_replace+0xb4/0xaa0 [ 125.113699][ T7810] ? __pfx_translate_table+0x10/0x10 [ 125.113726][ T7810] ? __pfx___do_replace+0x10/0x10 [ 125.113756][ T7810] ? _copy_from_user+0x94/0xb0 [ 125.113783][ T7810] do_arpt_set_ctl+0xa2a/0xf10 [ 125.113808][ T7810] ? __mutex_trylock_common+0x153/0x260 [ 125.113832][ T7810] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 125.113857][ T7810] ? rcu_is_watching+0x15/0xb0 [ 125.113892][ T7810] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 125.113915][ T7810] ? __pfx___mutex_lock+0x10/0x10 [ 125.113934][ T7810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.113951][ T7810] ? aa_sk_perm+0x81e/0x950 [ 125.113973][ T7810] ? __pfx_aa_sk_perm+0x10/0x10 [ 125.113996][ T7810] nf_setsockopt+0x26f/0x290 [ 125.114019][ T7810] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 125.114038][ T7810] do_sock_setsockopt+0x179/0x1b0 [ 125.114062][ T7810] __x64_sys_setsockopt+0x13f/0x1b0 [ 125.114087][ T7810] do_syscall_64+0xfa/0x3b0 [ 125.114105][ T7810] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.114122][ T7810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.114138][ T7810] ? clear_bhb_loop+0x60/0xb0 [ 125.114158][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.114173][ T7810] RIP: 0033:0x7f291cf8e9a9 [ 125.114188][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.114201][ T7810] RSP: 002b:00007f291de56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.114218][ T7810] RAX: ffffffffffffffda RBX: 00007f291d1b5fa0 RCX: 00007f291cf8e9a9 [ 125.114231][ T7810] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000007 [ 125.114240][ T7810] RBP: 00007f291d010d69 R08: 0000000000000068 R09: 0000000000000000 [ 125.114251][ T7810] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 125.114261][ T7810] R13: 0000000000000000 R14: 00007f291d1b5fa0 R15: 00007fff9ad321f8 [ 125.114289][ T7810] [ 125.114295][ T7810] Mem-Info: [ 125.124649][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 125.128911][ T7810] active_anon:3595 inactive_anon:0 isolated_anon:0 [ 125.128911][ T7810] active_file:1612 inactive_file:39848 isolated_file:0 [ 125.128911][ T7810] unevictable:768 dirty:359 writeback:0 [ 125.128911][ T7810] slab_reclaimable:11060 slab_unreclaimable:111254 [ 125.128911][ T7810] mapped:31155 shmem:1362 pagetables:963 [ 125.128911][ T7810] sec_pagetables:0 bounce:0 [ 125.128911][ T7810] kernel_misc_reclaimable:0 [ 125.128911][ T7810] free:1297073 free_pcp:24651 free_cma:0 [ 125.202811][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.522'. [ 125.204763][ T7810] Node 0 active_anon:14380kB inactive_anon:0kB active_file:6448kB inactive_file:159188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124620kB dirty:1432kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11460kB pagetables:3720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 125.603345][ T7847] IPv6: Can't replace route, no match found [ 125.698769][ T7810] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 125.831517][ T7810] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.861131][ T7810] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 125.872892][ T7810] Node 0 DMA32 free:1274832kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14508kB inactive_anon:0kB active_file:6448kB inactive_file:157596kB unevictable:1536kB writepending:1436kB present:3129332kB managed:2558296kB mlocked:0kB bounce:0kB free_pcp:67188kB local_pcp:48388kB free_cma:0kB [ 125.927879][ T7849] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 125.933972][ T7810] lowmem_reserve[]: 0 0 1 1 1 [ 125.943859][ T7810] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 125.979189][ T7810] lowmem_reserve[]: 0 0 0 0 0 [ 125.984563][ T7810] Node 1 Normal free:3898040kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19456kB local_pcp:7552kB free_cma:0kB [ 126.020064][ T7850] syz_tun: entered allmulticast mode [ 126.034038][ T7849] dvmrp8: entered allmulticast mode [ 126.053371][ T7810] lowmem_reserve[]: 0 0 0 0 0 [ 126.058809][ T7810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 126.077713][ T7810] Node 0 DMA32: 409*4kB (M) 382*8kB (ME) 197*16kB (ME) 134*32kB (ME) 63*64kB (M) 34*128kB (UM) 11*256kB (ME) 10*512kB (UME) 4*1024kB (ME) 4*2048kB (UME) 300*4096kB (M) = 1269540kB [ 126.105699][ T7810] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 126.121883][ T7810] Node 1 Normal: 182*4kB (UE) 40*8kB (UME) 46*16kB (UME) 56*32kB (UME) 21*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3898040kB [ 126.146235][ T7810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.161766][ T7810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.213514][ T7810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.237913][ T7810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.247994][ T7810] 42819 total pagecache pages [ 126.252693][ T7810] 0 pages in swap cache [ 126.257455][ T7810] Free swap = 124996kB [ 126.261906][ T7810] Total swap = 124996kB [ 126.306012][ T7810] 2097051 pages RAM [ 126.309861][ T7810] 0 pages HighMem/MovableOnly [ 126.325574][ T7810] 425435 pages reserved [ 126.342113][ T7810] 0 pages cma reserved [ 126.370258][ T7853] syz_tun: left allmulticast mode [ 126.398691][ T7860] netlink: 'syz.2.528': attribute type 4 has an invalid length. [ 126.412101][ T7860] netlink: 'syz.2.528': attribute type 4 has an invalid length. [ 126.429756][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 126.841214][ T7874] netlink: 256 bytes leftover after parsing attributes in process `syz.4.531'. [ 126.902980][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.531'. [ 127.238817][ T7889] nbd: must specify a device to reconfigure [ 127.869004][ T3533] wlan1: Trigger new scan to find an IBSS to join [ 128.154578][ T7950] @ÿ: renamed from veth0_vlan (while UP) [ 128.222473][ T7956] netlink: 32 bytes leftover after parsing attributes in process `syz.4.545'. [ 128.541627][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 128.553077][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 128.564365][ T7965] netlink: 'syz.4.548': attribute type 5 has an invalid length. [ 128.825794][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 128.847478][ T7972] tipc: Trying to set illegal importance in message [ 128.866922][ T7970] Bluetooth: MGMT ver 1.23 [ 129.073347][ T7986] netlink: 'syz.4.555': attribute type 12 has an invalid length. [ 129.138581][ T7988] netlink: 'syz.1.557': attribute type 13 has an invalid length. [ 129.151842][ T7988] netlink: 'syz.1.557': attribute type 17 has an invalid length. [ 129.176161][ T7988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.397969][ T7999] batman_adv: batadv0: Adding interface: dummy0 [ 129.415048][ T7999] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.489720][ T7999] batman_adv: batadv0: Interface activated: dummy0 [ 129.525608][ T8006] batadv0: mtu less than device minimum [ 129.533321][ T8006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.545497][ T8006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.557466][ T8006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.569448][ T8006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.581296][ T8006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.593233][ T8006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.605222][ T8006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.929878][ T8004] bridge2: left promiscuous mode [ 129.937796][ T8004] team1: left promiscuous mode [ 129.962870][ T8014] tipc: Started in network mode [ 129.968870][ T8014] tipc: Node identity e24d2d819fad, cluster identity 4711 [ 129.983162][ T8014] tipc: Enabled bearer , priority 0 [ 130.013907][ T8019] syzkaller0: entered promiscuous mode [ 130.025654][ T8019] syzkaller0: entered allmulticast mode [ 130.043030][ T8014] tipc: Resetting bearer [ 130.331340][ T8051] netlink: 'syz.3.569': attribute type 12 has an invalid length. [ 130.347463][ T8011] tipc: Resetting bearer [ 130.350509][ T8051] __nla_validate_parse: 3 callbacks suppressed [ 130.350526][ T8051] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.569'. [ 130.420441][ T8011] tipc: Disabling bearer [ 130.557872][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 130.660867][ T8067] netlink: 44 bytes leftover after parsing attributes in process `syz.0.574'. [ 130.695383][ T8067] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 130.772674][ T8060] hsr_slave_1 (unregistering): left promiscuous mode [ 130.939267][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 130.955061][ T8081] IPVS: Unknown mcast interface: pimreg0 [ 130.996146][ T8082] xt_TCPMSS: Only works on TCP SYN packets [ 131.018849][ T8090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.580'. [ 131.148849][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 131.449286][ T8115] sock: sock_timestamping_bind_phc: sock not bind to device [ 131.655433][ T8128] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 131.676293][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 131.688253][ T8128] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 131.802990][ T5848] IPVS: starting estimator thread 0... [ 131.803024][ T8128] net_ratelimit: 12 callbacks suppressed [ 131.803038][ T8128] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 131.826893][ T8131] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 131.906983][ T8143] netlink: 'syz.1.598': attribute type 1 has an invalid length. [ 131.950902][ T8138] IPVS: using max 30 ests per chain, 72000 per kthread [ 132.006931][ T8143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.052328][ T8147] delete_channel: no stack [ 132.107705][ T8143] veth5: entered promiscuous mode [ 132.118431][ T8143] bond1: (slave veth5): Enslaving as an active interface with a down link [ 132.149699][ T8157] netlink: 52 bytes leftover after parsing attributes in process `syz.3.603'. [ 132.161207][ T8157] netlink: 52 bytes leftover after parsing attributes in process `syz.3.603'. [ 132.174216][ T8157] netlink: 52 bytes leftover after parsing attributes in process `syz.3.603'. [ 132.217737][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.226304][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.326648][ T8155] batman_adv: batadv0: Interface deactivated: dummy0 [ 132.498570][ T8155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.529687][ T8155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.750035][ T5863] Bluetooth: hci0: command tx timeout [ 132.778673][ T8175] veth6: entered promiscuous mode [ 132.783753][ T8175] veth6: entered allmulticast mode [ 132.815511][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.830512][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.833214][ T8176] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 132.858088][ T8176] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 132.868272][ T8176] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 132.870757][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.917032][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.937892][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.119740][ T8188] IPVS: Unknown mcast interface: pimreg0 [ 133.256711][ T8196] IPv6: Can't replace route, no match found [ 133.946324][ T8217] netlink: 'syz.0.617': attribute type 29 has an invalid length. [ 134.307598][ T8225] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 134.326854][ T8225] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 134.338887][ T8225] team0: Failed to send options change via netlink (err -105) [ 134.347002][ T8225] team0: Port device batadv1 added [ 134.487458][ T8228] FAULT_INJECTION: forcing a failure. [ 134.487458][ T8228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.502970][ T8228] CPU: 1 UID: 0 PID: 8228 Comm: syz.2.623 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 134.502996][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.503006][ T8228] Call Trace: [ 134.503014][ T8228] [ 134.503022][ T8228] dump_stack_lvl+0x189/0x250 [ 134.503047][ T8228] ? __pfx____ratelimit+0x10/0x10 [ 134.503067][ T8228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.503087][ T8228] ? __pfx__printk+0x10/0x10 [ 134.503124][ T8228] should_fail_ex+0x414/0x560 [ 134.503148][ T8228] _copy_to_user+0x31/0xb0 [ 134.503174][ T8228] simple_read_from_buffer+0xe1/0x170 [ 134.503203][ T8228] proc_fail_nth_read+0x1df/0x250 [ 134.503224][ T8228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.503245][ T8228] ? rw_verify_area+0x258/0x650 [ 134.503266][ T8228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.503285][ T8228] vfs_read+0x200/0x980 [ 134.503313][ T8228] ? __pfx___mutex_lock+0x10/0x10 [ 134.503333][ T8228] ? __pfx_vfs_read+0x10/0x10 [ 134.503357][ T8228] ? __fget_files+0x2a/0x420 [ 134.503378][ T8228] ? __fget_files+0x3a0/0x420 [ 134.503392][ T8228] ? __fget_files+0x2a/0x420 [ 134.503417][ T8228] ksys_read+0x145/0x250 [ 134.503442][ T8228] ? __pfx_ksys_read+0x10/0x10 [ 134.503460][ T8228] ? rcu_is_watching+0x15/0xb0 [ 134.503486][ T8228] ? do_syscall_64+0xbe/0x3b0 [ 134.503510][ T8228] do_syscall_64+0xfa/0x3b0 [ 134.503531][ T8228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.503546][ T8228] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.503563][ T8228] ? clear_bhb_loop+0x60/0xb0 [ 134.503585][ T8228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.503601][ T8228] RIP: 0033:0x7fdd3098d3bc [ 134.503617][ T8228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 134.503631][ T8228] RSP: 002b:00007fdd3188a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.503650][ T8228] RAX: ffffffffffffffda RBX: 00007fdd30bb5fa0 RCX: 00007fdd3098d3bc [ 134.503662][ T8228] RDX: 000000000000000f RSI: 00007fdd3188a0a0 RDI: 0000000000000005 [ 134.503673][ T8228] RBP: 00007fdd3188a090 R08: 0000000000000000 R09: 0000000000000000 [ 134.503683][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.503693][ T8228] R13: 0000000000000000 R14: 00007fdd30bb5fa0 R15: 00007ffd5b99e8c8 [ 134.503730][ T8228] [ 135.061531][ T8248] nbd: socks must be embedded in a SOCK_ITEM attr [ 135.451158][ T8271] xt_CT: No such helper "pptp" [ 135.512725][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 135.575870][ T8271] team0: Port device batadv2 added [ 135.945751][ T8297] netlink: 'syz.1.640': attribute type 1 has an invalid length. [ 136.051135][ T8305] __nla_validate_parse: 20 callbacks suppressed [ 136.051153][ T8305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'. [ 136.279497][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 136.453486][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 136.469474][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 136.480503][ T8324] netlink: 'syz.0.647': attribute type 18 has an invalid length. [ 136.600579][ T8332] netlink: 44 bytes leftover after parsing attributes in process `syz.0.649'. [ 136.848510][ T8344] netlink: 36 bytes leftover after parsing attributes in process `syz.4.654'. [ 137.177884][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 137.187347][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 137.197788][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 137.207070][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 137.760648][ T8394] sctp: [Deprecated]: syz.0.670 (pid 8394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.760648][ T8394] Use struct sctp_sack_info instead [ 137.834135][ T8396] IPVS: Unknown mcast interface: pimreg0 [ 138.120710][ T8409] raw_sendmsg: syz.4.675 forgot to set AF_INET. Fix it! [ 138.245966][ T8415] netlink: 'syz.0.677': attribute type 4 has an invalid length. [ 138.294338][ T8415] netlink: 'syz.0.677': attribute type 4 has an invalid length. [ 138.450767][ T8429] tipc: Started in network mode [ 138.457839][ T8429] tipc: Node identity 080211000001, cluster identity 4711 [ 138.467652][ T8429] tipc: Enabled bearer , priority 0 [ 139.445655][ T8466] gretap1: entered promiscuous mode [ 139.450914][ T8466] gretap1: entered allmulticast mode [ 139.594426][ T8474] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 139.612338][ T8474] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 139.620337][ T5864] tipc: Node number set to 134418688 [ 141.198183][ T8535] macsec1: entered promiscuous mode [ 141.273602][ T8538] netlink: 'syz.2.702': attribute type 2 has an invalid length. [ 141.475705][ T8547] __nla_validate_parse: 5 callbacks suppressed [ 141.475724][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 141.752161][ T8554] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 141.931906][ T8559] netlink: 'syz.4.709': attribute type 39 has an invalid length. [ 142.215989][ T8562] netlink: 'syz.0.711': attribute type 1 has an invalid length. [ 142.303069][ T8562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.317977][ T8563] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 142.380207][ T8569] bond1: (slave geneve3): making interface the new active one [ 142.409465][ T8569] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 142.470013][ T8562] bond1: entered promiscuous mode [ 142.505691][ T8562] geneve3: entered promiscuous mode [ 142.515520][ T8575] tipc: Enabled bearer , priority 0 [ 142.563754][ T8571] syzkaller0: entered promiscuous mode [ 142.576916][ T8571] syzkaller0: entered allmulticast mode [ 142.588506][ T8568] netlink: 'syz.4.713': attribute type 1 has an invalid length. [ 142.617603][ T8568] netlink: 228 bytes leftover after parsing attributes in process `syz.4.713'. [ 142.673548][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 142.675813][ T8585] SET target dimension over the limit! [ 142.700352][ T8563] tipc: Resetting bearer [ 142.744032][ T8588] netlink: 76 bytes leftover after parsing attributes in process `syz.0.716'. [ 142.816393][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 142.825727][ T8588] netlink: 15 bytes leftover after parsing attributes in process `syz.0.716'. [ 142.987483][ T8560] tipc: Resetting bearer [ 143.033811][ T8560] tipc: Disabling bearer [ 143.109480][ T8605] netlink: 'syz.4.719': attribute type 29 has an invalid length. [ 143.152552][ T8606] netlink: 132 bytes leftover after parsing attributes in process `syz.1.721'. [ 143.162316][ T8605] netlink: 'syz.4.719': attribute type 29 has an invalid length. [ 143.426505][ T8620] netlink: 36 bytes leftover after parsing attributes in process `syz.0.724'. [ 143.658387][ T8634] SET target dimension over the limit! [ 143.675438][ T8633] validate_nla: 25 callbacks suppressed [ 143.675457][ T8633] netlink: 'syz.0.727': attribute type 3 has an invalid length. [ 143.876741][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 144.006954][ T8649] IPVS: Unknown mcast interface: pimreg0 [ 144.027362][ T8649] netlink: 40 bytes leftover after parsing attributes in process `syz.4.732'. [ 144.397799][ T8668] bridge0: mtu less than device minimum [ 144.496952][ T8674] !: renamed from dummy0 (while UP) [ 144.554312][ T8680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.659431][ T8685] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 144.924554][ T8700] netlink: 'syz.3.745': attribute type 33 has an invalid length. [ 144.952431][ T8700] netlink: 'syz.3.745': attribute type 10 has an invalid length. [ 144.992437][ T8700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.023575][ T8700] team0: Port device bond0 added [ 145.734510][ T8732] IPVS: Error connecting to the multicast addr [ 145.904605][ T8739] IPVS: Unknown mcast interface: pimreg0 [ 145.991106][ T8738] tipc: Enabled bearer , priority 0 [ 146.094325][ T8738] syzkaller0: entered promiscuous mode [ 146.134803][ T8738] syzkaller0: entered allmulticast mode [ 146.140958][ T8738] tipc: Resetting bearer [ 146.650281][ T8775] IPv6: Can't replace route, no match found [ 146.821725][ T49] tipc: Resetting bearer [ 146.832412][ T8738] tipc: Resetting bearer [ 147.061568][ T8785] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 147.125573][ T10] tipc: Node number set to 2111843713 [ 148.027181][ T8812] __nla_validate_parse: 8 callbacks suppressed [ 148.027199][ T8812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.770'. [ 149.193207][ T8738] tipc: Disabling bearer [ 149.211766][ T8809] IPVS: Unknown mcast interface: pimreg0 [ 149.478200][ T8831] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 149.746719][ T8844] IPv6: Can't replace route, no match found [ 150.028631][ T8847] syzkaller1: entered promiscuous mode [ 150.034409][ T8847] syzkaller1: entered allmulticast mode [ 150.637895][ T8863] IPVS: Unknown mcast interface: pimreg0 [ 150.646974][ T8863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.786'. [ 151.564289][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 151.923139][ T8932] netlink: 'syz.4.805': attribute type 2 has an invalid length. [ 152.170812][ T8946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.808'. [ 152.518277][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 152.554858][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 152.557567][ T8955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.809'. [ 153.111544][ T8987] FAULT_INJECTION: forcing a failure. [ 153.111544][ T8987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.125374][ T8987] CPU: 1 UID: 0 PID: 8987 Comm: syz.2.818 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 153.125400][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.125410][ T8987] Call Trace: [ 153.125418][ T8987] [ 153.125425][ T8987] dump_stack_lvl+0x189/0x250 [ 153.125452][ T8987] ? __pfx____ratelimit+0x10/0x10 [ 153.125472][ T8987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.125492][ T8987] ? __pfx__printk+0x10/0x10 [ 153.125514][ T8987] ? __might_fault+0xb0/0x130 [ 153.125549][ T8987] should_fail_ex+0x414/0x560 [ 153.125572][ T8987] _copy_from_user+0x2d/0xb0 [ 153.125596][ T8987] ___sys_sendmsg+0x158/0x2a0 [ 153.125621][ T8987] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.125681][ T8987] ? __fget_files+0x2a/0x420 [ 153.125696][ T8987] ? __fget_files+0x3a0/0x420 [ 153.125722][ T8987] __x64_sys_sendmsg+0x19b/0x260 [ 153.125746][ T8987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.125777][ T8987] ? __pfx_ksys_write+0x10/0x10 [ 153.125796][ T8987] ? rcu_is_watching+0x15/0xb0 [ 153.125821][ T8987] ? do_syscall_64+0xbe/0x3b0 [ 153.125844][ T8987] do_syscall_64+0xfa/0x3b0 [ 153.125862][ T8987] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.125879][ T8987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.125896][ T8987] ? clear_bhb_loop+0x60/0xb0 [ 153.125917][ T8987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.125933][ T8987] RIP: 0033:0x7fdd3098e9a9 [ 153.125949][ T8987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.125962][ T8987] RSP: 002b:00007fdd3188a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.125988][ T8987] RAX: ffffffffffffffda RBX: 00007fdd30bb5fa0 RCX: 00007fdd3098e9a9 [ 153.126001][ T8987] RDX: 000000000000c094 RSI: 0000200000000200 RDI: 0000000000000003 [ 153.126012][ T8987] RBP: 00007fdd3188a090 R08: 0000000000000000 R09: 0000000000000000 [ 153.126023][ T8987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.126033][ T8987] R13: 0000000000000000 R14: 00007fdd30bb5fa0 R15: 00007ffd5b99e8c8 [ 153.126063][ T8987] [ 153.583417][ T9004] netlink: 52 bytes leftover after parsing attributes in process `syz.3.820'. [ 154.032526][ T9021] netlink: 428 bytes leftover after parsing attributes in process `syz.3.828'. [ 154.037266][ T9031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.826'. [ 154.119890][ T9031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.826'. [ 154.219080][ T9038] FAULT_INJECTION: forcing a failure. [ 154.219080][ T9038] name failslab, interval 1, probability 0, space 0, times 0 [ 154.258559][ T9018] netlink: 'syz.4.826': attribute type 23 has an invalid length. [ 154.266095][ T9038] CPU: 1 UID: 0 PID: 9038 Comm: syz.3.831 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 154.266121][ T9038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.266132][ T9038] Call Trace: [ 154.266139][ T9038] [ 154.266147][ T9038] dump_stack_lvl+0x189/0x250 [ 154.266174][ T9038] ? __pfx____ratelimit+0x10/0x10 [ 154.266193][ T9038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.266213][ T9038] ? __pfx__printk+0x10/0x10 [ 154.266250][ T9038] ? __pfx___might_resched+0x10/0x10 [ 154.266274][ T9038] should_fail_ex+0x414/0x560 [ 154.266304][ T9038] should_failslab+0xa8/0x100 [ 154.266329][ T9038] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 154.266350][ T9038] ? __alloc_skb+0x112/0x2d0 [ 154.266371][ T9038] __alloc_skb+0x112/0x2d0 [ 154.266400][ T9038] netlink_sendmsg+0x5c6/0xb30 [ 154.266429][ T9038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.266456][ T9038] ? aa_sock_msg_perm+0x94/0x160 [ 154.266477][ T9038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.266495][ T9038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.266515][ T9038] __sock_sendmsg+0x21c/0x270 [ 154.266543][ T9038] ____sys_sendmsg+0x505/0x830 [ 154.266571][ T9038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.266603][ T9038] ? import_iovec+0x74/0xa0 [ 154.266630][ T9038] ___sys_sendmsg+0x21f/0x2a0 [ 154.266654][ T9038] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.266713][ T9038] ? __fget_files+0x2a/0x420 [ 154.266727][ T9038] ? __fget_files+0x3a0/0x420 [ 154.266755][ T9038] __x64_sys_sendmsg+0x19b/0x260 [ 154.266779][ T9038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.266816][ T9038] ? __pfx_ksys_write+0x10/0x10 [ 154.266842][ T9038] ? rcu_is_watching+0x15/0xb0 [ 154.266868][ T9038] ? do_syscall_64+0xbe/0x3b0 [ 154.266891][ T9038] do_syscall_64+0xfa/0x3b0 [ 154.266907][ T9038] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.266923][ T9038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.266946][ T9038] ? clear_bhb_loop+0x60/0xb0 [ 154.266967][ T9038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.266988][ T9038] RIP: 0033:0x7f8e1418e9a9 [ 154.267003][ T9038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.267017][ T9038] RSP: 002b:00007f8e11ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.267036][ T9038] RAX: ffffffffffffffda RBX: 00007f8e143b5fa0 RCX: 00007f8e1418e9a9 [ 154.267048][ T9038] RDX: 000000000000c094 RSI: 0000200000000200 RDI: 0000000000000003 [ 154.267060][ T9038] RBP: 00007f8e11ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.267070][ T9038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.267082][ T9038] R13: 0000000000000000 R14: 00007f8e143b5fa0 R15: 00007ffe7aac9a58 [ 154.267111][ T9038] [ 154.789324][ T9056] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.837'. [ 155.160180][ T10] IPVS: starting estimator thread 0... [ 155.255661][ T9080] IPVS: using max 29 ests per chain, 69600 per kthread [ 155.258998][ T9084] IPVS: Unknown mcast interface: pimreg0 [ 155.336112][ T9084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.845'. [ 155.352966][ T9088] IPVS: Unknown mcast interface: pimreg0 [ 155.443930][ T9095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.846'. [ 155.742760][ T9105] x_tables: duplicate underflow at hook 1 [ 156.366323][ T9128] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.855'. [ 156.578959][ T9141] IPVS: Unknown mcast interface: pimreg0 [ 156.588006][ T9141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.860'. [ 156.603177][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'. [ 156.613136][ T9143] openvswitch: netlink: Flow actions attr not present in new flow. [ 156.839366][ T9149] xt_hashlimit: size too large, truncated to 1048576 [ 157.375846][ T9174] nbd: device at index 64 is going down [ 157.472862][ T9186] x_tables: duplicate underflow at hook 1 [ 157.732387][ T9205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.767843][ T9205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.809853][ T9205] batman_adv: batadv0: Removing interface: dummy0 [ 158.369461][ T9246] tipc: Enabled bearer , priority 0 [ 158.391069][ T9246] tipc: Resetting bearer [ 158.503056][ T9241] tipc: Disabling bearer [ 158.533620][ T9260] FAULT_INJECTION: forcing a failure. [ 158.533620][ T9260] name failslab, interval 1, probability 0, space 0, times 0 [ 158.547292][ T9260] CPU: 0 UID: 0 PID: 9260 Comm: syz.0.895 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 158.547319][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.547330][ T9260] Call Trace: [ 158.547337][ T9260] [ 158.547345][ T9260] dump_stack_lvl+0x189/0x250 [ 158.547376][ T9260] ? __pfx____ratelimit+0x10/0x10 [ 158.547396][ T9260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.547417][ T9260] ? __pfx__printk+0x10/0x10 [ 158.547445][ T9260] ? __pfx___might_resched+0x10/0x10 [ 158.547474][ T9260] should_fail_ex+0x414/0x560 [ 158.547497][ T9260] should_failslab+0xa8/0x100 [ 158.547523][ T9260] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 158.547547][ T9260] ? __alloc_skb+0x112/0x2d0 [ 158.547564][ T9260] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 158.547590][ T9260] __alloc_skb+0x112/0x2d0 [ 158.547612][ T9260] nldev_stat_set_doit+0x3c6/0x8c0 [ 158.547644][ T9260] ? __pfx_nldev_stat_set_doit+0x10/0x10 [ 158.547759][ T9260] ? rcu_is_watching+0x15/0xb0 [ 158.547782][ T9260] ? apparmor_capable+0x137/0x1b0 [ 158.547807][ T9260] ? bpf_lsm_capable+0x9/0x20 [ 158.547828][ T9260] ? security_capable+0x7e/0x2e0 [ 158.547850][ T9260] ? __pfx_nldev_stat_set_doit+0x10/0x10 [ 158.547873][ T9260] rdma_nl_rcv+0x6ae/0x980 [ 158.547907][ T9260] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 158.547927][ T9260] ? __lock_acquire+0xab9/0xd20 [ 158.547967][ T9260] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.547996][ T9260] netlink_unicast+0x82f/0x9e0 [ 158.548030][ T9260] ? __pfx_netlink_unicast+0x10/0x10 [ 158.548058][ T9260] ? netlink_sendmsg+0x642/0xb30 [ 158.548074][ T9260] ? skb_put+0x11b/0x210 [ 158.548097][ T9260] netlink_sendmsg+0x805/0xb30 [ 158.548126][ T9260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.548149][ T9260] ? aa_sock_msg_perm+0x94/0x160 [ 158.548170][ T9260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.548194][ T9260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.548214][ T9260] __sock_sendmsg+0x21c/0x270 [ 158.548242][ T9260] ____sys_sendmsg+0x505/0x830 [ 158.548269][ T9260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.548300][ T9260] ? import_iovec+0x74/0xa0 [ 158.548327][ T9260] ___sys_sendmsg+0x21f/0x2a0 [ 158.548351][ T9260] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.548411][ T9260] ? __fget_files+0x2a/0x420 [ 158.548426][ T9260] ? __fget_files+0x3a0/0x420 [ 158.548454][ T9260] __x64_sys_sendmsg+0x19b/0x260 [ 158.548477][ T9260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.548510][ T9260] ? __pfx_ksys_write+0x10/0x10 [ 158.548529][ T9260] ? rcu_is_watching+0x15/0xb0 [ 158.548554][ T9260] ? do_syscall_64+0xbe/0x3b0 [ 158.548578][ T9260] do_syscall_64+0xfa/0x3b0 [ 158.548596][ T9260] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.548613][ T9260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.548631][ T9260] ? clear_bhb_loop+0x60/0xb0 [ 158.548652][ T9260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.548669][ T9260] RIP: 0033:0x7f5c3678e9a9 [ 158.548685][ T9260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.548700][ T9260] RSP: 002b:00007f5c376e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.548720][ T9260] RAX: ffffffffffffffda RBX: 00007f5c369b5fa0 RCX: 00007f5c3678e9a9 [ 158.548733][ T9260] RDX: 000000000000c094 RSI: 0000200000000200 RDI: 0000000000000003 [ 158.548745][ T9260] RBP: 00007f5c376e1090 R08: 0000000000000000 R09: 0000000000000000 [ 158.548756][ T9260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.548765][ T9260] R13: 0000000000000000 R14: 00007f5c369b5fa0 R15: 00007ffc22e248f8 [ 158.548794][ T9260] [ 158.929405][ T9264] __nla_validate_parse: 13 callbacks suppressed [ 158.929430][ T9264] netlink: 68 bytes leftover after parsing attributes in process `syz.2.897'. [ 159.288405][ T9275] bridge0: port 1(macsec0) entered blocking state [ 159.295889][ T9275] bridge0: port 1(macsec0) entered disabled state [ 159.302607][ T9275] macsec0: entered allmulticast mode [ 159.308747][ T9275] veth1_macvtap: entered allmulticast mode [ 159.317165][ T9275] macsec0: entered promiscuous mode [ 159.324816][ T9275] bridge0: port 1(macsec0) entered blocking state [ 159.332273][ T9275] bridge0: port 1(macsec0) entered forwarding state [ 159.692111][ T9306] lo: entered allmulticast mode [ 159.713474][ T9306] tunl0: entered allmulticast mode [ 159.732189][ T9306] gre0: entered allmulticast mode [ 159.747031][ T9306] gretap0: entered allmulticast mode [ 159.768032][ T9306] erspan0: entered allmulticast mode [ 159.782466][ T9306] ip_vti0: entered allmulticast mode [ 159.801680][ T9306] ip6_vti0: entered allmulticast mode [ 159.828800][ T9306] sit0: entered allmulticast mode [ 159.847826][ T9306] ip6tnl0: entered allmulticast mode [ 159.868409][ T9306] ip6gre0: entered allmulticast mode [ 159.884602][ T9306] syz_tun: entered allmulticast mode [ 159.907883][ T9306] ip6gretap0: entered allmulticast mode [ 159.918952][ T9306] bridge0: entered allmulticast mode [ 159.930065][ T9306] vcan0: entered allmulticast mode [ 159.937169][ T9306] bond0: entered allmulticast mode [ 159.942389][ T9306] bond_slave_0: entered allmulticast mode [ 159.949303][ T9306] bond_slave_1: entered allmulticast mode [ 159.960055][ T9306] batadv0: entered allmulticast mode [ 159.967453][ T9306] team0: entered allmulticast mode [ 159.972810][ T9306] team_slave_0: entered allmulticast mode [ 159.984158][ T9306] team_slave_1: entered allmulticast mode [ 159.992818][ T9306] dummy0: entered allmulticast mode [ 160.001488][ T9306] nlmon0: entered allmulticast mode [ 160.007603][ T9306] caif0: entered allmulticast mode [ 160.012914][ T9316] netlink: 40 bytes leftover after parsing attributes in process `syz.3.911'. [ 160.032749][ T9306] vxcan0: entered allmulticast mode [ 160.049157][ T9306] vxcan1: entered allmulticast mode [ 160.067831][ T9306] veth0: entered allmulticast mode [ 160.083482][ T9306] veth1: entered allmulticast mode [ 160.095482][ T9306] wg0: entered allmulticast mode [ 160.100645][ T9306] wg1: entered allmulticast mode [ 160.113337][ T9306] wg2: entered allmulticast mode [ 160.129289][ T9306] veth0_to_bridge: entered allmulticast mode [ 160.145524][ T9306] veth1_to_bridge: entered allmulticast mode [ 160.152023][ T9306] veth0_to_bond: entered allmulticast mode [ 160.158423][ T9306] veth1_to_bond: entered allmulticast mode [ 160.171385][ T9306] veth0_to_team: entered allmulticast mode [ 160.233504][ T9306] veth1_to_team: entered allmulticast mode [ 160.272896][ T9306] veth0_to_batadv: entered allmulticast mode [ 160.279454][ T9306] batadv_slave_0: entered allmulticast mode [ 160.285682][ T9306] veth1_to_batadv: entered allmulticast mode [ 160.292176][ T9306] batadv_slave_1: entered allmulticast mode [ 160.301241][ T9306] xfrm0: entered allmulticast mode [ 160.307508][ T9306] veth0_to_hsr: entered allmulticast mode [ 160.313494][ T9306] hsr_slave_0: entered allmulticast mode [ 160.323379][ T9306] veth1_to_hsr: entered allmulticast mode [ 160.330334][ T9306] hsr_slave_1: entered allmulticast mode [ 160.339990][ T9306] hsr0: entered allmulticast mode [ 160.345500][ T9306] veth1_virt_wifi: entered allmulticast mode [ 160.351739][ T9306] veth0_virt_wifi: entered allmulticast mode [ 160.358431][ T9306] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 160.366109][ T9306] veth1_vlan: entered allmulticast mode [ 160.372016][ T9306] veth0_vlan: entered allmulticast mode [ 160.377904][ T9306] vlan0: entered allmulticast mode [ 160.383377][ T9306] vlan1: entered allmulticast mode [ 160.388932][ T9306] macvlan0: entered allmulticast mode [ 160.394950][ T9306] macvlan1: entered allmulticast mode [ 160.400653][ T9306] ipvlan0: entered allmulticast mode [ 160.406435][ T9306] ipvlan1: entered allmulticast mode [ 160.412098][ T9306] veth1_macvtap: entered allmulticast mode [ 160.418415][ T9306] veth0_macvtap: entered allmulticast mode [ 160.424567][ T9306] macvtap0: entered allmulticast mode [ 160.430534][ T9306] macsec0: entered allmulticast mode [ 160.436475][ T9306] geneve0: entered allmulticast mode [ 160.446160][ T9306] geneve1: entered allmulticast mode [ 160.451789][ T9306] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 160.459291][ T9306] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 160.466811][ T9306] vxcan2: entered allmulticast mode [ 160.472356][ T9306] vxcan3: entered allmulticast mode [ 160.480879][ T9306] sit1: entered allmulticast mode [ 160.493519][ T9306] vti0: entered allmulticast mode [ 160.508584][ T9306] bond1: entered allmulticast mode [ 160.519990][ T9306] gre1: entered allmulticast mode [ 160.529084][ T9306] vlan2: entered allmulticast mode [ 160.534430][ T9306] veth2: entered allmulticast mode [ 160.541028][ T9306] veth3: entered allmulticast mode [ 160.546905][ T9306] ip6erspan0: entered allmulticast mode [ 160.552662][ T9306] netdevsim netdevsim2 eth0: entered allmulticast mode [ 160.559969][ T9306] netdevsim netdevsim2 eth1: entered allmulticast mode [ 160.567700][ T9306] netdevsim netdevsim2 eth2: entered allmulticast mode [ 160.574810][ T9306] netdevsim netdevsim2 eth3: entered allmulticast mode [ 160.591194][ T9313] IPVS: Unknown mcast interface: pimreg0 [ 160.626837][ T9326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.648140][ T9326] batadv_slave_0: entered allmulticast mode [ 160.737982][ T9330] IPVS: Unknown mcast interface: pimreg0 [ 160.748286][ T9330] netlink: 40 bytes leftover after parsing attributes in process `syz.2.913'. [ 160.841842][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'. [ 160.908435][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'. [ 161.038322][ T9347] FAULT_INJECTION: forcing a failure. [ 161.038322][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 161.049326][ T9340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.063521][ T9347] CPU: 0 UID: 0 PID: 9347 Comm: syz.3.919 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 161.063549][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.063560][ T9347] Call Trace: [ 161.063568][ T9347] [ 161.063576][ T9347] dump_stack_lvl+0x189/0x250 [ 161.063603][ T9347] ? __pfx____ratelimit+0x10/0x10 [ 161.063622][ T9347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.063642][ T9347] ? __pfx__printk+0x10/0x10 [ 161.063671][ T9347] ? __pfx___might_resched+0x10/0x10 [ 161.063691][ T9347] ? fs_reclaim_acquire+0x7d/0x100 [ 161.063712][ T9347] should_fail_ex+0x414/0x560 [ 161.063737][ T9347] should_failslab+0xa8/0x100 [ 161.063763][ T9347] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 161.063786][ T9347] ? __alloc_skb+0x112/0x2d0 [ 161.063809][ T9347] __alloc_skb+0x112/0x2d0 [ 161.063833][ T9347] netlink_ack+0x146/0xa50 [ 161.063849][ T9347] ? __up_read+0x280/0x680 [ 161.063873][ T9347] ? __pfx___up_read+0x10/0x10 [ 161.063906][ T9347] rdma_nl_rcv+0x3c8/0x980 [ 161.063940][ T9347] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 161.063959][ T9347] ? __lock_acquire+0xab9/0xd20 [ 161.063996][ T9347] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.064023][ T9347] netlink_unicast+0x82f/0x9e0 [ 161.064057][ T9347] ? __pfx_netlink_unicast+0x10/0x10 [ 161.064083][ T9347] ? netlink_sendmsg+0x642/0xb30 [ 161.064099][ T9347] ? skb_put+0x11b/0x210 [ 161.064123][ T9347] netlink_sendmsg+0x805/0xb30 [ 161.064151][ T9347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.064173][ T9347] ? aa_sock_msg_perm+0x94/0x160 [ 161.064193][ T9347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.064210][ T9347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.064234][ T9347] __sock_sendmsg+0x21c/0x270 [ 161.064263][ T9347] ____sys_sendmsg+0x505/0x830 [ 161.064291][ T9347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.064320][ T9347] ? import_iovec+0x74/0xa0 [ 161.064345][ T9347] ___sys_sendmsg+0x21f/0x2a0 [ 161.064367][ T9347] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.064422][ T9347] ? __fget_files+0x2a/0x420 [ 161.064435][ T9347] ? __fget_files+0x3a0/0x420 [ 161.064461][ T9347] __x64_sys_sendmsg+0x19b/0x260 [ 161.064485][ T9347] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.064516][ T9347] ? __pfx_ksys_write+0x10/0x10 [ 161.064535][ T9347] ? rcu_is_watching+0x15/0xb0 [ 161.064559][ T9347] ? do_syscall_64+0xbe/0x3b0 [ 161.064583][ T9347] do_syscall_64+0xfa/0x3b0 [ 161.064601][ T9347] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.064618][ T9347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.064634][ T9347] ? clear_bhb_loop+0x60/0xb0 [ 161.064656][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.064676][ T9347] RIP: 0033:0x7f8e1418e9a9 [ 161.064691][ T9347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.064704][ T9347] RSP: 002b:00007f8e11ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.064722][ T9347] RAX: ffffffffffffffda RBX: 00007f8e143b5fa0 RCX: 00007f8e1418e9a9 [ 161.064734][ T9347] RDX: 000000000000c094 RSI: 0000200000000200 RDI: 0000000000000003 [ 161.064745][ T9347] RBP: 00007f8e11ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.064756][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.064766][ T9347] R13: 0000000000000000 R14: 00007f8e143b5fa0 R15: 00007ffe7aac9a58 [ 161.064792][ T9347] [ 161.075639][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 161.378770][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 161.636137][ T9373] netlink: 5 bytes leftover after parsing attributes in process `syz.0.925'. [ 161.678751][ T9379] netlink: 'syz.1.926': attribute type 12 has an invalid length. [ 161.700477][ T9379] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.926'. [ 161.832439][ T9392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.928'. [ 162.334122][ T9370] netlink: 'syz.4.924': attribute type 10 has an invalid length. [ 162.373132][ T9370] team0: Cannot enslave team device to itself [ 163.289164][ T9445] batadv0: entered promiscuous mode [ 163.295832][ T9445] vlan2: entered promiscuous mode [ 163.872708][ T9468] tipc: Enabled bearer , priority 0 [ 163.898481][ T9464] syzkaller0: entered promiscuous mode [ 163.910114][ T9464] syzkaller0: entered allmulticast mode [ 164.123030][ T9479] netlink: 'syz.2.949': attribute type 12 has an invalid length. [ 164.130933][ T9479] __nla_validate_parse: 2 callbacks suppressed [ 164.130950][ T9479] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.949'. [ 164.207042][ T9475] tipc: Resetting bearer [ 164.420360][ T9463] tipc: Resetting bearer [ 164.453379][ T9463] tipc: Disabling bearer [ 164.736560][ T9501] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 165.569804][ T9538] 8021q: VLANs not supported on wg1 [ 165.762324][ T9546] netlink: 172 bytes leftover after parsing attributes in process `syz.4.962'. [ 165.945728][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 165.979238][ T9553] ipvlan2: entered promiscuous mode [ 166.005891][ T9553] bridge0: port 3(ipvlan2) entered blocking state [ 166.024155][ T9553] bridge0: port 3(ipvlan2) entered disabled state [ 166.057967][ T9553] ipvlan2: entered allmulticast mode [ 166.089382][ T9553] ipvlan2: left allmulticast mode [ 166.365069][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.967'. [ 166.464496][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 166.997629][ T9603] xt_CT: No such helper "snmp" [ 167.003131][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 167.093174][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.980'. [ 167.175316][ T61] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 167.191708][ T61] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 167.211521][ T61] bond0: (slave wlan1): link status definitely down, disabling slave [ 167.242291][ T61] bond0: (slave macvlan0): link status definitely down, disabling slave [ 167.281178][ T61] bond0: now running without any active interface! [ 167.377320][ T9616] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.391393][ T9616] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.402688][ T9616] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 167.539632][ T9616] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.574920][ T9616] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.589538][ T9616] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 167.642175][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 167.655732][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'. [ 167.666017][ T9632] netlink: 'syz.0.987': attribute type 5 has an invalid length. [ 167.704104][ T9616] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.721326][ T9616] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.739100][ T9616] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 167.759797][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 167.836739][ T9616] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.851823][ T9616] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.863050][ T9616] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.098783][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.132826][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.159965][ T49] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.182787][ T9650] sctp: [Deprecated]: syz.1.993 (pid 9650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.182787][ T9650] Use struct sctp_sack_info instead [ 168.217817][ T2937] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.233010][ T2937] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.259924][ T9654] netlink: 'syz.3.994': attribute type 1 has an invalid length. [ 168.274053][ T2937] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.316474][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.334800][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.349834][ T49] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.411392][ T9616] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.441676][ T9616] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 168.459731][ T9616] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 168.604218][ T49] ================================================================== [ 168.612323][ T49] BUG: KASAN: slab-use-after-free in __mutex_lock+0x144/0xe80 [ 168.619792][ T49] Read of size 8 at addr ffff88803225ceb0 by task kworker/u8:3/49 [ 168.627601][ T49] [ 168.629931][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 168.629956][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.629969][ T49] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 168.629994][ T49] Call Trace: [ 168.630001][ T49] [ 168.630009][ T49] dump_stack_lvl+0x189/0x250 [ 168.630031][ T49] ? __kasan_check_byte+0x12/0x40 [ 168.630055][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.630075][ T49] ? lock_release+0x4b/0x3e0 [ 168.630096][ T49] ? __virt_addr_valid+0x4a5/0x5c0 [ 168.630119][ T49] print_report+0xca/0x230 [ 168.630134][ T49] ? __mutex_lock+0x144/0xe80 [ 168.630152][ T49] kasan_report+0x118/0x150 [ 168.630174][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 168.630193][ T49] ? __mutex_lock+0x144/0xe80 [ 168.630215][ T49] __mutex_lock+0x144/0xe80 [ 168.630234][ T49] ? __lock_acquire+0xab9/0xd20 [ 168.630249][ T49] ? __mutex_lock+0x51b/0xe80 [ 168.630271][ T49] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 168.630290][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 168.630312][ T49] ? __lock_acquire+0xab9/0xd20 [ 168.630334][ T49] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 168.630355][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 168.630374][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 168.630394][ T49] process_scheduled_works+0xae1/0x17b0 [ 168.630427][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 168.630455][ T49] worker_thread+0x8a0/0xda0 [ 168.630487][ T49] kthread+0x70e/0x8a0 [ 168.630517][ T49] ? __pfx_worker_thread+0x10/0x10 [ 168.630536][ T49] ? __pfx_kthread+0x10/0x10 [ 168.630558][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 168.630575][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.630592][ T49] ? __pfx_kthread+0x10/0x10 [ 168.630614][ T49] ret_from_fork+0x3fc/0x770 [ 168.630633][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 168.630654][ T49] ? __switch_to_asm+0x39/0x70 [ 168.630674][ T49] ? __switch_to_asm+0x33/0x70 [ 168.630695][ T49] ? __pfx_kthread+0x10/0x10 [ 168.630717][ T49] ret_from_fork_asm+0x1a/0x30 [ 168.630746][ T49] [ 168.630752][ T49] [ 168.840334][ T49] Allocated by task 9616: [ 168.844644][ T49] kasan_save_track+0x3e/0x80 [ 168.849312][ T49] __kasan_kmalloc+0x93/0xb0 [ 168.853887][ T49] __kmalloc_noprof+0x27a/0x4f0 [ 168.858724][ T49] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 168.864863][ T49] notifier_call_chain+0x1b3/0x3e0 [ 168.869958][ T49] register_netdevice+0x1608/0x1ae0 [ 168.875141][ T49] nsim_create+0xae8/0xf10 [ 168.879630][ T49] __nsim_dev_port_add+0x6b6/0xb10 [ 168.884721][ T49] nsim_dev_port_add_all+0x37/0xf0 [ 168.889814][ T49] nsim_dev_reload_up+0x451/0x780 [ 168.894822][ T49] devlink_reload+0x4ec/0x8d0 [ 168.899489][ T49] devlink_nl_reload_doit+0xb35/0xd50 [ 168.904849][ T49] genl_family_rcv_msg_doit+0x212/0x300 [ 168.910406][ T49] genl_rcv_msg+0x60e/0x790 [ 168.914899][ T49] netlink_rcv_skb+0x205/0x470 [ 168.919641][ T49] genl_rcv+0x28/0x40 [ 168.923605][ T49] netlink_unicast+0x82f/0x9e0 [ 168.928352][ T49] netlink_sendmsg+0x805/0xb30 [ 168.933106][ T49] __sock_sendmsg+0x21c/0x270 [ 168.937767][ T49] ____sys_sendmsg+0x505/0x830 [ 168.942513][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 168.947170][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 168.952088][ T49] do_syscall_64+0xfa/0x3b0 [ 168.956577][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.962451][ T49] [ 168.964844][ T49] Freed by task 9616: [ 168.968802][ T49] kasan_save_track+0x3e/0x80 [ 168.973464][ T49] kasan_save_free_info+0x46/0x50 [ 168.978478][ T49] __kasan_slab_free+0x62/0x70 [ 168.983225][ T49] kfree+0x18e/0x440 [ 168.987103][ T49] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 168.993324][ T49] notifier_call_chain+0x1b3/0x3e0 [ 168.998421][ T49] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 169.004832][ T49] unregister_netdevice_queue+0x33c/0x380 [ 169.010554][ T49] nsim_destroy+0x1dd/0x670 [ 169.015045][ T49] __nsim_dev_port_del+0x14d/0x1b0 [ 169.020137][ T49] nsim_dev_port_add_all+0xae/0xf0 [ 169.025228][ T49] nsim_dev_reload_up+0x451/0x780 [ 169.030235][ T49] devlink_reload+0x4ec/0x8d0 [ 169.034897][ T49] devlink_nl_reload_doit+0xb35/0xd50 [ 169.040256][ T49] genl_family_rcv_msg_doit+0x212/0x300 [ 169.045787][ T49] genl_rcv_msg+0x60e/0x790 [ 169.050277][ T49] netlink_rcv_skb+0x205/0x470 [ 169.055026][ T49] genl_rcv+0x28/0x40 [ 169.059002][ T49] netlink_unicast+0x82f/0x9e0 [ 169.063751][ T49] netlink_sendmsg+0x805/0xb30 [ 169.068497][ T49] __sock_sendmsg+0x21c/0x270 [ 169.073161][ T49] ____sys_sendmsg+0x505/0x830 [ 169.077907][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 169.082568][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 169.087488][ T49] do_syscall_64+0xfa/0x3b0 [ 169.091977][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.097853][ T49] [ 169.100163][ T49] Last potentially related work creation: [ 169.105860][ T49] kasan_save_stack+0x3e/0x60 [ 169.110556][ T49] kasan_record_aux_stack+0xbd/0xd0 [ 169.115736][ T49] insert_work+0x3d/0x330 [ 169.120049][ T49] __queue_work+0xbd9/0xfe0 [ 169.124561][ T49] queue_work_on+0x181/0x270 [ 169.129143][ T49] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 169.134776][ T49] udp_tunnel_push_rx_port+0x180/0x200 [ 169.140241][ T49] geneve_offload_rx_ports+0xd7/0x160 [ 169.145600][ T49] geneve_netdevice_event+0x6a/0x80 [ 169.150782][ T49] notifier_call_chain+0x1b3/0x3e0 [ 169.155877][ T49] call_netdevice_notifiers+0x88/0xc0 [ 169.161234][ T49] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 169.167455][ T49] notifier_call_chain+0x1b3/0x3e0 [ 169.172554][ T49] register_netdevice+0x1608/0x1ae0 [ 169.177737][ T49] nsim_create+0xae8/0xf10 [ 169.182138][ T49] __nsim_dev_port_add+0x6b6/0xb10 [ 169.187231][ T49] nsim_dev_port_add_all+0x37/0xf0 [ 169.192324][ T49] nsim_dev_reload_up+0x451/0x780 [ 169.197363][ T49] devlink_reload+0x4ec/0x8d0 [ 169.202033][ T49] devlink_nl_reload_doit+0xb35/0xd50 [ 169.207393][ T49] genl_family_rcv_msg_doit+0x212/0x300 [ 169.212923][ T49] genl_rcv_msg+0x60e/0x790 [ 169.217409][ T49] netlink_rcv_skb+0x205/0x470 [ 169.222149][ T49] genl_rcv+0x28/0x40 [ 169.226113][ T49] netlink_unicast+0x82f/0x9e0 [ 169.230860][ T49] netlink_sendmsg+0x805/0xb30 [ 169.235603][ T49] __sock_sendmsg+0x21c/0x270 [ 169.240287][ T49] ____sys_sendmsg+0x505/0x830 [ 169.245033][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 169.249689][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 169.254608][ T49] do_syscall_64+0xfa/0x3b0 [ 169.259100][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.264979][ T49] [ 169.267373][ T49] Second to last potentially related work creation: [ 169.273932][ T49] kasan_save_stack+0x3e/0x60 [ 169.278594][ T49] kasan_record_aux_stack+0xbd/0xd0 [ 169.283772][ T49] insert_work+0x3d/0x330 [ 169.288081][ T49] __queue_work+0xcfc/0xfe0 [ 169.292566][ T49] queue_work_on+0x181/0x270 [ 169.297136][ T49] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 169.302760][ T49] udp_tunnel_push_rx_port+0x180/0x200 [ 169.308208][ T49] vxlan_offload_rx_ports+0x139/0x200 [ 169.313568][ T49] vxlan_netdevice_event+0x111/0x470 [ 169.318834][ T49] notifier_call_chain+0x1b3/0x3e0 [ 169.323938][ T49] call_netdevice_notifiers+0x88/0xc0 [ 169.329395][ T49] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 169.335634][ T49] notifier_call_chain+0x1b3/0x3e0 [ 169.340735][ T49] register_netdevice+0x1608/0x1ae0 [ 169.345920][ T49] nsim_create+0xae8/0xf10 [ 169.350332][ T49] __nsim_dev_port_add+0x6b6/0xb10 [ 169.355425][ T49] nsim_dev_port_add_all+0x37/0xf0 [ 169.360522][ T49] nsim_dev_reload_up+0x451/0x780 [ 169.365528][ T49] devlink_reload+0x4ec/0x8d0 [ 169.370190][ T49] devlink_nl_reload_doit+0xb35/0xd50 [ 169.375546][ T49] genl_family_rcv_msg_doit+0x212/0x300 [ 169.381074][ T49] genl_rcv_msg+0x60e/0x790 [ 169.385559][ T49] netlink_rcv_skb+0x205/0x470 [ 169.390311][ T49] genl_rcv+0x28/0x40 [ 169.394277][ T49] netlink_unicast+0x82f/0x9e0 [ 169.399025][ T49] netlink_sendmsg+0x805/0xb30 [ 169.403771][ T49] __sock_sendmsg+0x21c/0x270 [ 169.408441][ T49] ____sys_sendmsg+0x505/0x830 [ 169.413193][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 169.417857][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 169.422778][ T49] do_syscall_64+0xfa/0x3b0 [ 169.427263][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.433136][ T49] [ 169.435438][ T49] The buggy address belongs to the object at ffff88803225ce00 [ 169.435438][ T49] which belongs to the cache kmalloc-256 of size 256 [ 169.449476][ T49] The buggy address is located 176 bytes inside of [ 169.449476][ T49] freed 256-byte region [ffff88803225ce00, ffff88803225cf00) [ 169.463256][ T49] [ 169.465564][ T49] The buggy address belongs to the physical page: [ 169.471965][ T49] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3225c [ 169.480707][ T49] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 169.489186][ T49] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 169.496707][ T49] page_type: f5(slab) [ 169.500669][ T49] raw: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 169.509237][ T49] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 169.517808][ T49] head: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 169.526543][ T49] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 169.535198][ T49] head: 00fff00000000001 ffffea0000c89701 00000000ffffffff 00000000ffffffff [ 169.543846][ T49] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 169.552494][ T49] page dumped because: kasan: bad access detected [ 169.558895][ T49] page_owner tracks the page as allocated [ 169.564589][ T49] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5846, tgid 5846 (syz-executor), ts 76024418498, free_ts 75975546085 [ 169.585927][ T49] post_alloc_hook+0x240/0x2a0 [ 169.590686][ T49] get_page_from_freelist+0x21e4/0x22c0 [ 169.596210][ T49] __alloc_frozen_pages_noprof+0x181/0x370 [ 169.601997][ T49] alloc_pages_mpol+0x232/0x4a0 [ 169.606834][ T49] allocate_slab+0x8a/0x3b0 [ 169.611324][ T49] ___slab_alloc+0xbfc/0x1480 [ 169.615986][ T49] __kmalloc_noprof+0x305/0x4f0 [ 169.620822][ T49] fib_create_info+0x1728/0x3210 [ 169.625738][ T49] fib_table_insert+0xc6/0x1b50 [ 169.630571][ T49] fib_magic+0x2c4/0x390 [ 169.634795][ T49] fib_add_ifaddr+0x38d/0x5f0 [ 169.639459][ T49] fib_netdev_event+0x382/0x490 [ 169.644295][ T49] notifier_call_chain+0x1b3/0x3e0 [ 169.649387][ T49] __dev_notify_flags+0x18d/0x2e0 [ 169.654396][ T49] netif_change_flags+0xe8/0x1a0 [ 169.659318][ T49] do_setlink+0xc55/0x41c0 [ 169.663717][ T49] page last free pid 23 tgid 23 stack trace: [ 169.669671][ T49] __free_frozen_pages+0xc71/0xe70 [ 169.674769][ T49] rcu_core+0xca5/0x1710 [ 169.678992][ T49] handle_softirqs+0x286/0x870 [ 169.683735][ T49] run_ksoftirqd+0x9b/0x100 [ 169.688218][ T49] smpboot_thread_fn+0x53f/0xa60 [ 169.693137][ T49] kthread+0x70e/0x8a0 [ 169.697194][ T49] ret_from_fork+0x3fc/0x770 [ 169.701763][ T49] ret_from_fork_asm+0x1a/0x30 [ 169.706522][ T49] [ 169.708826][ T49] Memory state around the buggy address: [ 169.714437][ T49] ffff88803225cd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 169.722478][ T49] ffff88803225ce00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.730518][ T49] >ffff88803225ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.738555][ T49] ^ [ 169.744162][ T49] ffff88803225cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 169.752201][ T49] ffff88803225cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 169.760240][ T49] ================================================================== [ 169.815475][ T49] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.822709][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 169.834688][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.844737][ T49] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 169.852021][ T49] Call Trace: [ 169.855281][ T49] [ 169.858197][ T49] dump_stack_lvl+0x99/0x250 [ 169.862774][ T49] ? __asan_memcpy+0x40/0x70 [ 169.867347][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.872532][ T49] ? __pfx__printk+0x10/0x10 [ 169.877110][ T49] panic+0x2db/0x790 [ 169.880988][ T49] ? __pfx_panic+0x10/0x10 [ 169.885386][ T49] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 169.891264][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 169.897567][ T49] ? print_memory_metadata+0x314/0x400 [ 169.903008][ T49] ? __mutex_lock+0x144/0xe80 [ 169.907667][ T49] check_panic_on_warn+0x89/0xb0 [ 169.912597][ T49] ? __mutex_lock+0x144/0xe80 [ 169.917264][ T49] end_report+0x78/0x160 [ 169.921495][ T49] kasan_report+0x129/0x150 [ 169.925985][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 169.931858][ T49] ? __mutex_lock+0x144/0xe80 [ 169.936518][ T49] __mutex_lock+0x144/0xe80 [ 169.941002][ T49] ? __lock_acquire+0xab9/0xd20 [ 169.945831][ T49] ? __mutex_lock+0x51b/0xe80 [ 169.950499][ T49] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 169.956721][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 169.961730][ T49] ? __lock_acquire+0xab9/0xd20 [ 169.966566][ T49] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 169.972619][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 169.978321][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 169.984021][ T49] process_scheduled_works+0xae1/0x17b0 [ 169.989556][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 169.995523][ T49] worker_thread+0x8a0/0xda0 [ 170.000107][ T49] kthread+0x70e/0x8a0 [ 170.004164][ T49] ? __pfx_worker_thread+0x10/0x10 [ 170.009257][ T49] ? __pfx_kthread+0x10/0x10 [ 170.013833][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 170.019010][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.024189][ T49] ? __pfx_kthread+0x10/0x10 [ 170.028765][ T49] ret_from_fork+0x3fc/0x770 [ 170.033341][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 170.038436][ T49] ? __switch_to_asm+0x39/0x70 [ 170.043184][ T49] ? __switch_to_asm+0x33/0x70 [ 170.047929][ T49] ? __pfx_kthread+0x10/0x10 [ 170.052506][ T49] ret_from_fork_asm+0x1a/0x30 [ 170.057262][ T49] [ 170.060536][ T49] Kernel Offset: disabled [ 170.064840][ T49] Rebooting in 86400 seconds..