last executing test programs: 3m8.893905924s ago: executing program 2 (id=814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m8.792687703s ago: executing program 2 (id=816): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m8.381811064s ago: executing program 2 (id=823): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="05"], 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308fd906b771ab5030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112", 0xb8) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x5, 0x4, 0x709, 0x2, 0xe1}) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x20004010) 3m8.21314167s ago: executing program 2 (id=829): unshare(0x20000400) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x800) listen(r0, 0x75) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) 3m8.010046787s ago: executing program 2 (id=833): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000380)="d9e6b9c9b4581e4718d41c6f88c764cc5f", 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="05002700009c000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a80140007"], 0x15c}}, 0x0) 3m7.629779715s ago: executing program 2 (id=837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) pselect6(0x0, 0x0, &(0x7f00000002c0)={0x380, 0x10000, 0x9, 0x7fff, 0x200, 0xc1, 0x22a12b40, 0x4}, &(0x7f0000000300)={0x5, 0x7, 0x9cfa, 0x8, 0x9, 0x7fffffff, 0x3, 0x81}, &(0x7f0000000340)={0x77359400}, &(0x7f00000000c0)={&(0x7f0000000380)={[0x7fffffff]}, 0x8}) 2m52.39116189s ago: executing program 32 (id=837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) pselect6(0x0, 0x0, &(0x7f00000002c0)={0x380, 0x10000, 0x9, 0x7fff, 0x200, 0xc1, 0x22a12b40, 0x4}, &(0x7f0000000300)={0x5, 0x7, 0x9cfa, 0x8, 0x9, 0x7fffffff, 0x3, 0x81}, &(0x7f0000000340)={0x77359400}, &(0x7f00000000c0)={&(0x7f0000000380)={[0x7fffffff]}, 0x8}) 2m28.120880718s ago: executing program 0 (id=1203): socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)="3a368c0164df28ca80568342b50dc7a456b26f611074e0289e5687fc5c74c9d5ec48e962bfad1ad69f5434579942ede976a7ffde1faf75a911a9c771070565f96275f2b82a03dca9967a74c46ffae6d28061f6609ac44f03769be69f03bd32d202a96783d0c5c265c3598a36fa70f5c6778f61fbb2344bcc2bd14ca6104fbaa9a2e5ad7d069e72683a41ec0227a83b5946676207b8a68e23a438c9568c405fbf", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r5, @ANYRES32=r4], 0x1c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r6, 0x2, 0x100000000000003) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1e000500040800001c0012800b00010067656e65766500000c000280a2410d844e2000001400030067656e65766531000000000000000000a0bc9c15ff492dec0914aa6d501784b40ca1fa31897435de6c65755972c71a6fd2fb93613a492d501fecc38fed326c43d6bf72a852ea2f8c5fcfc92a9e2b0009d6208b6e50b432156f750f21dd97f030c664a18c66aadc55ca356c1c7052689f1307e329cfefc4baa61f11a7ccc2f70a13165f06b479"], 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x2000810) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}]}, 0x0) (async, rerun: 32) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 32) accept4$bt_l2cap(r11, 0x0, 0x0, 0x800) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000400)={r10, 0x46, 0xae2, 0x8001, 0x400000, 0xbd4c855e}, 0x14) (async, rerun: 64) r13 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r13, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x10, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, 0x108) (async, rerun: 64) setsockopt$inet6_group_source_req(r13, 0x29, 0x2c, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r12, @in={{0x2, 0x4e20, @local}}, 0x7, 0x6}, 0x90) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r1) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000003e003d77c18965e7540c10a98b6a000701fe800c00018006000400118908e19942bc"], 0x30}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000) 2m27.810121953s ago: executing program 0 (id=1204): socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180020800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m27.649986584s ago: executing program 0 (id=1205): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$can_bcm(r0, 0x0, 0x4804) syz_genetlink_get_family_id$smc(0x0, r0) setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) (fail_nth: 10) 2m27.211081782s ago: executing program 0 (id=1209): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) 2m27.101297745s ago: executing program 0 (id=1212): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0xa7, 0x6, @remote}, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3020000000000008002800babc00005c0016805800018054000c801400"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 2m26.535267892s ago: executing program 0 (id=1216): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x20040600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, 0xffffffffffffffff, 0x2c, 0x0, 0x4}, 0x20) shutdown(r2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x3, 0x80000000, 0x0, @empty, @remote, 0x8000, 0x60, 0x44f3e823, 0x7}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x3}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f0000000000)=0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x148, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff0000ff, 0xffffff00, 'ipvlan0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0xff, 0x2, 0x48}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "5eac", 0x1}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x100, 0x5, [0x3b, 0x2e, 0x17, 0x16, 0x2, 0x20, 0x1f, 0x8, 0x5, 0x1a, 0x4, 0x2f, 0xe, 0x35, 0x3b, 0x12], 0x2, 0x7, 0x673}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0xb, 0x6], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x8}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 2m11.219988265s ago: executing program 33 (id=1216): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x20040600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, 0xffffffffffffffff, 0x2c, 0x0, 0x4}, 0x20) shutdown(r2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x3, 0x80000000, 0x0, @empty, @remote, 0x8000, 0x60, 0x44f3e823, 0x7}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x3}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f0000000000)=0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x148, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff0000ff, 0xffffff00, 'ipvlan0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0xff, 0x2, 0x48}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "5eac", 0x1}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x100, 0x5, [0x3b, 0x2e, 0x17, 0x16, 0x2, 0x20, 0x1f, 0x8, 0x5, 0x1a, 0x4, 0x2f, 0xe, 0x35, 0x3b, 0x12], 0x2, 0x7, 0x673}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0xb, 0x6], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x8}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 5.286300877s ago: executing program 5 (id=2403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x8004b707, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 4.810375227s ago: executing program 5 (id=2408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100001"], 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x1f, 0x1, 0xfffff000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x1, 0x0, @remote, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x18}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000020c0), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000002480)={0x0, 0x7}, 0x8) sendmsg$inet6(r2, &(0x7f0000003940)={&(0x7f00000024c0)={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c, &(0x7f0000003700)=[{&(0x7f0000002500)="847bb2", 0x3}], 0x1}, 0x4040) 4.553832709s ago: executing program 5 (id=2412): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x8000, 0xdc0, 0x7ff}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8863"], 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x70bd26, 0x0, {0x2, 0x0, 0x20, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_IIF={0x8, 0x3, r4}, @RTA_PREFSRC={0x8, 0x7, @local}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, 0x0, 0x0) (async) syz_emit_ethernet(0x3f, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, @local, {[], {0x4e20, 0xe22, 0x9, 0x0, @opaque="bc"}}}}}}, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "e87beadd7da41ba8", "f2426f350cefdbfd788ea982a47d1509", "6bdb0a68", "a4e094d6392585e1"}, 0x28) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8012, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', r7}, 0x18) 4.329865133s ago: executing program 5 (id=2418): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe8000000000000000000000000000bbfe80008dffffffffffffff00000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200119078"], 0x0) 3.974956334s ago: executing program 5 (id=2420): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8004, 0x10}, {0xfff1, 0xffe0}, {0x5, 0xffff}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x200000c4) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="cf2fe3d1b5ff3d28e8c56d04cee2b3dbdbd8cc7ece81aa113a86d8e40e353d1d607098efd5715e2d658e", 0x2a}, {&(0x7f0000000080)="e7d2ba0d9f636d379eb489f143fde071ee70f06531c3d7899a98987034102419ba0f84ede5b766bfc5bd98be33cf91a0ebeff2b43c677e58fb6cf561ffb54116d2ab4d0394c459c8d09de755960bbd91da3ccffcd1bad749f71602fd86fb645013dff1c6bb63", 0x66}, {&(0x7f0000000100)="6f1520b1a4da4dca3db55ab1f204c5371c424f0022f50e7b52d828ff421acc371b98e0a6df036abfed5efbec568badb1", 0x30}, {&(0x7f0000000380)="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", 0x1000}, {0x0}], 0x5, 0x4, 0xfff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r2) 3.293701459s ago: executing program 3 (id=2425): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0xffff, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xc43}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa0600}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12032}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf}]}}]}, 0x5c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000002000000000070074ca7c05ef6aaad16dbd0000000037b4ac46000000000000000500140000000000f1ae8015f2a16c1f7be98e6e0e20f42577ed8f2d245699d3959d4abdd11a1b1b7f8c50dee949a2b9b4a5223f813d7e3a09d37fd6a4aac9cd76816a4cb6ab4f25a3ca7da69c0313cd36e1568d97fc158c1160"], 0x30}}, 0x0) sendfile(r2, r8, 0x0, 0xffffffff000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0x2}]}, 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 3.239909457s ago: executing program 5 (id=2426): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5b000009000000032800"/20], 0x14}}, 0x40) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008004) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESHEX=r3, @ANYRES16=r1, @ANYRESDEC=r2, @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff7c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0xffffffffffffffe3, 0x0}}], 0x1, 0x4000840) listen(0xffffffffffffffff, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) unshare(0x64000600) 2.982335413s ago: executing program 4 (id=2429): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2.777780285s ago: executing program 4 (id=2431): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadb3161741", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00f1ff0f000104001f36ae43d715fa0d31ba8fa3", @ANYRES32=0x0, @ANYBLOB="00000000000000000500210008000000140003007465616d3000"/36], 0x3c}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00f1ff0f000104001f36ae43d715fa0d31ba8fa3", @ANYRES32=0x0, @ANYBLOB="00000000000000000500210008000000140003007465616d3000"/36], 0x3c}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/273, 0x111}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000f40)=""/234, 0xea}], 0x7}, 0x80000000}], 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0xfffffffffffffd5f, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0xfffffffffffffd5f, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) socket$kcm(0x11, 0x1, 0x300) socket(0x11, 0x800000003, 0x0) (async) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) 2.636598767s ago: executing program 1 (id=2433): r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2, 0x0, 0x4}, 0x18) socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b00010069703667726500003000028014000700200100000000000000ff00000000000014000600fc020000000000000000000000000000040012000800280070cf00"], 0x8c}}, 0x0) 2.545879227s ago: executing program 4 (id=2434): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0xffff, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xc43}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa0600}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12032}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf}]}}]}, 0x5c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x68, r4, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000002000000000070074ca7c05ef6aaad16dbd0000000037b4ac46000000000000000500140000000000f1ae8015f2a16c1f7be98e6e0e20f42577ed8f2d245699d3959d4abdd11a1b1b7f8c50dee949a2b9b4a5223f813d7e3a09d37fd6a4aac9cd76816a4cb6ab4f25a3ca7da69c0313cd36e1568d97fc158c1160"], 0x30}}, 0x0) sendfile(r2, r9, 0x0, 0xffffffff000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="9b61d82618e70919f336b4ac89b552140000008b620ef500180012800800749b677265000c0002800600020000fe0000"], 0x38}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0x2}]}, 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 2.152313046s ago: executing program 3 (id=2437): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x6e22, 0x9, @empty, 0xc29b}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000ac0)={@random="e7c86361b5c8", @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "bf", "fe976c", 0x1}}}}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)="5a31f9d4ec401ef4ab108f6314e2c86f152be76b3e155509ea054c1f112047dec8d82c59769cf958917a1e84e6", 0x2d, 0x48010, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.805549066s ago: executing program 3 (id=2438): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x10001, 0x12) sendfile(r1, r0, 0x0, 0xf03a0005) unshare(0x24040400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 1.685286871s ago: executing program 1 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100039040002005d23be6c6fa1330000", @ANYRES32=r1, @ANYBLOB="0000a1ffffff0000240012800b00010062726964676500001400028008001500000000000600270000000000"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x5, 0xf4, 0xe4, 0xab, 0x6, 0x40, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0xd, 0x3c}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) pipe(&(0x7f0000002740)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x10}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0xf, [{@multicast2, 0xfff}, {@rand_addr=0x64010101, 0x2}, {@local, 0x7ff}, {@broadcast, 0x9}]}, @ra={0x94, 0x4}]}}, "040086dd0000ffff"}}}}}, 0x0) 1.58273828s ago: executing program 3 (id=2440): unshare(0x22020400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) readv(r0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9, 0x8001, 0x1, 0x100, 0x100000000, 0xa0009, r2}) r3 = socket$caif_stream(0x25, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000000)="6e397ace314c9c0a24eb8a94e54f34313e5377b6524c313c79965cba588d03e4fd54976b6eb39eea7ce070770ce0cc31207f184feaf3f5f4ed64372805420fb6208d872484b18439c6a116211f29d0f6871809e266a68126e16ab188784e17b6d5caa3cae7b247917063c56770758306fe493c879e0196417e87bfd3389414a7acc34aca65beaebb129efac992fcd4e1bf631ac07de9c2379a62e4ed39d689d5982e4304bcab5d26e8e8b8bb4fc0061d29972ab2720982bced911f888173d6335c02f008da089892d56e6f1adc4349be7bfb5285464e13fcb5487ee9402809880ca5f1d47dd3bbc14a368f84d86d8c193e83fbf93b", 0x9979) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x1ff, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r1) 1.428743246s ago: executing program 4 (id=2441): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) 1.391033807s ago: executing program 6 (id=2442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x5) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000300)=0x101) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 1.185266226s ago: executing program 3 (id=2443): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18) unshare(0x10000000) r2 = accept4(r0, 0x0, &(0x7f0000000180), 0x80800) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x8020, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030328bd7000ffffffff0a000000"], 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa72f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000014) 1.181232586s ago: executing program 6 (id=2444): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) ioctl(r0, 0x6, &(0x7f0000000040)="3d20a0fa8eb9124c3af6e7a65e") shutdown(r0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) select(0x40, &(0x7f00000000c0)={0x8, 0x7, 0xfff, 0x200, 0x0, 0x63f, 0xffffffffffffff9b, 0x401}, &(0x7f0000000100)={0x12, 0x7, 0x0, 0xfb77, 0x2, 0x2, 0xfffffffffffffffa, 0x200}, &(0x7f0000000140)={0xb, 0x3b, 0x8, 0x0, 0x5, 0x8, 0x4, 0x100}, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x4, 0x4, 0x2, 0x7d, 0x4, 0x3, 0xb}, &(0x7f0000000200)={0x2, 0x9, 0x800100000, 0xb3d, 0x80000000, 0x95, 0x1, 0xfff}, &(0x7f0000000240)={0xc, 0x81, 0x4, 0x9, 0xa48, 0x790f, 0xfffffffffffffffe, 0x10000}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000340), &(0x7f0000000380)=0x10) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000440), 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x3, @mcast2, 0x2}, 0x1c) unshare(0xc000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000004c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x10400, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000540)={'veth0_to_team\x00'}) socket$packet(0x11, 0x3, 0x300) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000580)={'gretap0\x00', r4, 0x8000, 0x80, 0x1, 0x387d49f3, {{0x1c, 0x4, 0x1, 0x17, 0x70, 0x68, 0x0, 0x9, 0x29, 0x0, @loopback, @broadcast, {[@noop, @timestamp={0x44, 0x24, 0xdc, 0x0, 0x3, [0x557c, 0x10000, 0x8, 0x1, 0x3, 0x9, 0x0, 0x0]}, @generic={0x89, 0x12, "2007a0fd67b9a24e24b5d30ace6e44ed"}, @rr={0x7, 0xf, 0xf2, [@broadcast, @loopback, @local]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x10, "6071f0de842ae70d1bbe4a052f1b"}]}}}}}) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f0000000680)="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") socket$nl_audit(0x10, 0x3, 0x9) socket$kcm(0x29, 0x7, 0x0) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000007c0), r0) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r9, 0x20, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xeb}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socket$nl_route(0x10, 0x3, 0x0) select(0x40, &(0x7f00000008c0)={0x9, 0xc, 0x10000, 0x7fff, 0xf, 0x1ff, 0x5, 0x4}, &(0x7f0000000900)={0xc, 0xfff, 0x7, 0x8, 0x5, 0x6, 0x9, 0x5}, &(0x7f0000000940)={0x7, 0x1, 0x8, 0x0, 0x4, 0x85, 0xdf, 0x5}, &(0x7f0000000980)={0x77359400}) socket$inet_udp(0x2, 0x2, 0x0) 715.280967ms ago: executing program 6 (id=2445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x6e22, 0x9, @empty, 0xc29b}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 715.032984ms ago: executing program 1 (id=2446): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 699.610208ms ago: executing program 3 (id=2447): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0xffff, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xc43}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa0600}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12032}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf}]}}]}, 0x5c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000002000000000070074ca7c05ef6aaad16dbd0000000037b4ac46000000000000000500140000000000f1ae8015f2a16c1f7be98e6e0e20f42577ed8f2d245699d3959d4abdd11a1b1b7f8c50dee949a2b9b4a5223f813d7e3a09d37fd6a4aac9cd76816a4cb6ab4f25a3ca7da69c0313cd36e1568d97fc158c1160"], 0x30}}, 0x0) sendfile(r2, r8, 0x0, 0xffffffff000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0x2}]}, 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 664.065428ms ago: executing program 4 (id=2448): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, &(0x7f0000000040)="99f0eed855f118d728aa26704dab4668d91315bfd885ee566d30680f41648736a42877725f07a5ff9cb2a7889325f1db0e8e53592aaf620a5a81ed76668956dc0a12e68d01b45f6540cacebcfdd7e893cba8735a503758d950e22755ebd57e7f221784fb75222654e1de3a7ca57c902b306be0a06e234e27069ed38e096556cc48", 0x81, 0x4800, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000900)={'wg1\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000940)={@remote, @private, 0x0}, &(0x7f0000000980)=0xc) sendmsg$inet(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="f8d708231ff1c57645314c054e7f18bfb2a5ff4f7dac7d18780b2d43ba92aef24bebc2f5a5c39327cb6fe4f8ecad1f0156af50d5ce8e13c6c7401690e9a05034b73130757204", 0x46}, {&(0x7f00000001c0)="5997288a4f1433d0ac4b53a30230f34232b567f42631fd2cb54a9095345891e2ece95ce72bc5fe0cccf58da61fc87b3757c6447ba0ebd4392e76ad9b2ba647f5b46122303f2b8781e2ff82e9b6ba1e95514302e861cd718b4c86a617a5f3fa0e6c6ae8515023746af0cc94595ead6d7603fc681218484027c4f1ce143b7a454a72227c397109f0dbfffb6e37cb6df931177f6452f0346cd102871dce41d4e1f4202274fcefa39fb5793832439bb20a2961fb6c5c8269db0c98e6b1de3b5412bd9eb74ddc148b22693c5165", 0xcb}, {&(0x7f00000002c0)="8d4eff1d415de1eeac952e1e6b560d5e26d3a4bd06b226b990d33cf511fa45a0fbd458dd75aeb23b549da9f3f147ce4a9ab1fcad9c9b2be068acb915fee0bc34d7cf63043fee0e2d", 0x48}, {&(0x7f0000000340)="d7996ac4b606a0c459a959c9f1636c7aa06b35c7e06f15fb5a4a4239aec1a61d15dd830a0e8a5e298eb6947017df116122f310001dd9394207e14b216ed7108fd38c6824b70d64ca81c0848251bb4ae03d9f7d3f501a6a5b17b0512a6438334275bbeac68f167cb868839eb740c0b387cb96ceb0ed21cdde98145748ff5c4906af5e79914c5b7098a1d5405c031af9d2b6e7820f0ca39ef1f70a08c79717f905b1910b937dda60153679eb7e9aeed681ba0c06c01a8f8f631a48790d806bc2d75f9f8c479f1b1b5865740da517fc286fefea2226e8c49d0f82343b466a163f005ba4659ae33470e044d8c00e1942eaead8f0726c", 0xf4}, {&(0x7f0000000440)="eaa828d6e271d940b5dc35f0a63279081c6853be07cee0d8c1445446e7dd2f11ce07143b07bc3c4f2f70452ec8eeacdefaf346f7613a0571f7f2e36b96d0d5cb75ba7757e4a4ce1042d694f75dd3e832d06a91315f553f845be2768e9817fa401a3176e7b57f7e719471d3d3d5d0320753b8fedc1628710528d01cdab342c66e42fde3248a8b7aee293466c175f7e3d52f00c95383d0803f4988981434b0e2acb39b8a37", 0xa4}, {&(0x7f0000000500)="678078ce8c76091a0f08da485b2b3b0207c6990aefb900f4de5c7d489134bfc1b2c750cf4880056402b2e054b982fd5b6bbe46976af940d1339bbcb7654212e9ffaf8cbe2cf707dde4bf847e23dfe6209078329f4018a50d956c4ca15b2ae925dad09cb72cc77f33965b38853d6105da15911a1d3638338179265dc634adb3630ef62c9b61a50eb0d3ced4ba3bf5", 0x8e}, {&(0x7f00000005c0)="45416b8acec4c204bb6fa2f932b5d8ae64e939b2b63181d2791156a3374c51872641b7512c35a34c371059a05f9216345bf54c3a459fb8bf9ac38a3fd919ecf911ffa69ab445e62e619dfa378bd7cf8e1b055326e83ea1f0fcf991543c699ddb101d4567df4e3125dd114beac25ae00f12d5f1bccc4215ac", 0x78}, {&(0x7f0000000640)="0c88c9186fa420f60ddd90737527b92c72bf646f457d8184d17ecf7dac46e0", 0x1f}, {&(0x7f0000000680)="f473487d5e1e8036a1d2439ac7389cb9df47611b1cbf29b655b169d571fd14685c0cbbb6970ece389aa5cfdcc98c45bbf6df2641093e32bdf20523cce6381ff518c0a695dda27746560e97b0a3b192becdc7b27531a765d5544fd9df9b6a6c4ca9dcd2fee14fc14a6aabbf55021001a60cd88fd4e9a7056e0234a3499430b012749fc387555ba628aed56c7ba2e83914108c06645b315d83a63dbfb48ace606e3f6ad778af3b341774b086c7aeff92fb15681c69572d6f896024e022a8945b729049c680ff71eaf7be0916aa745075f90b7a", 0xd2}, {&(0x7f0000000780)="15a23bc780028f6e42ab4002df3bf2896489d4c7822fdea35cd58c073aade178f3cbde1097c72d2696429b306a9715995b3713453ec0a92a05a68b4ce39d7de41f947819770143631abc6d391e90eab331f3d9980164045fa80be2f7c48c34842384d752aaaea92524b881bdfea5c04cf9f733b2d062a015786cdfb7ca88f76425237cab58c178055d3390193886f80c9ba1a5a687ea969600ac7e35a98c5ebc0d46c9274f", 0xa5}], 0xa, &(0x7f00000009c0)=[@ip_retopts={{0x104, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x4c, 0x3, 0xd, [{@loopback, 0x7f}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1, 0x3}, {@private=0xa010102, 0x7}, {@remote, 0x8}]}, @ssrr={0x89, 0x2b, 0x64, [@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @empty, @local, @rand_addr=0x64010100, @broadcast, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x3c, 0xae, 0x3, 0x9, [{@local, 0x400}, {@loopback, 0xd}, {@private=0xa010101, 0x9}, {@broadcast, 0x1}, {@multicast2, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x6}]}, @rr={0x7, 0xb, 0x40, [@remote, @multicast1]}, @timestamp_addr={0x44, 0xc, 0xbb, 0x1, 0x7, [{@private=0xa010101, 0x7f}]}, @ssrr={0x89, 0x1b, 0xa5, [@local, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @broadcast, @rand_addr=0x64010101, @remote]}, @ssrr={0x89, 0x17, 0xf2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010102, @local, @multicast1]}, @lsrr={0x83, 0x3, 0x70}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @private=0xa010102}}}], 0x190}, 0x4044) ioctl$int_in(r0, 0x5452, &(0x7f0000000bc0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r5 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffff5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000d80)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}) r8 = socket$inet6(0xa, 0x80000, 0x2) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000dc0)={0x0, 0x7f}, 0x8) getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000e00)={@loopback}, &(0x7f0000000e40)=0x14) r9 = accept4(r1, &(0x7f0000000e80)=@nl, &(0x7f0000000f00)=0x80, 0x80000) sendmsg$nl_xfrm(r9, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=@migrate={0x7c, 0x21, 0x300, 0x70bd28, 0x25dfdbfb, {{@in=@private=0xa010101, @in=@multicast1, 0x4e24, 0xb03, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0x88, r2, 0xffffffffffffffff}, 0x6e6bb8}, [@user_kmaddress={0x2c, 0x13, {@in=@local, @in=@broadcast, 0x0, 0xa}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), r9) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000001500)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001100)={0x3a0, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x2e4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "e09fa3707ebd5abd3b61f67b375f0679432b0d834ef27c4d86995799a32b03dbda5444e828853b9df719d5d692d81c89759bf8fd4728b915ee5b110c60179f28041cf32bc013d8287d0b0cf85204a45ea0004fd92314c61a26ec5a9168e6999f048796b53f05a4fe31c691503cdbb24970a226d596d1139135d38dc971b1d5f035f237d6fed39bd37aa4fecbefb38155bafe336079e6d51c98a6be96991d53fbca31206e82320e186448e75ab4c05755878e1c502c14b874186e798ac3fd01db9d602fe33a2d1ab1d0958a4526d2951c218aac99ce649aab04feec2957a0335f2aa6cec90b075812e762f72f072d1917e524252825a1f1a6"}, @ETHTOOL_A_BITSET_VALUE={0x4b, 0x4, "ac76919c8ee8894ea0b8e593eec47bb1970c2b6ac25cc00b5701a8a5ee04c101d49c7977914e52cbf5859d2038da33fcf7748435c19b867c621160bb9ea26e9cb8b5ef4fabe488"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb6}, @ETHTOOL_A_BITSET_MASK={0xee, 0x5, "2e8552b63b638c00ccc0e860fd5e9e092e478a1573a2fef7c1556a54ecad018e45f7e38308f17abe52d1d88d313841c8a8b30dc76b42be5d74a5b7b7c864f9b729fee0648be163a60b723828b2781877aa9f4f9b0b3491e26d2fe0b2351991a8dd88de0cac4f1dab5b3775aaa9c1bb24393a384adf605f7e0428449b27d4f9a373d85928d52292f9b83658c1a20d09323032db24d6dfeb5a7f356b886019588f41cbaa892f69a59065b4900021c9b1c98436e3efcf93e33e949da904dd91cb850f198be5b57d7027402fb5a97407be90633ba9dee605d2236427dcdde2b58181816b661a349c4753fa8a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.:.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf0000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{#}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_OURS={0x80, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "09ad7aff9da9cf9c8a9e5a2ff2708a1e66e7ba3b1e1c72f6c581f94e51685957e03f703a0934c0ccf89fc0e92170fba442bd5d503f550dd5222a0f3fa7cb105d7256c45283acabc088da9352c81163a4746d116fb724369b96d0a82d13e64f2c1bbbe1bf5be82226664fb0bf9768af404e0c45a6ed0d2d8e"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x48800}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r9) r11 = accept4(r6, &(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001600)=0x80, 0x800) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r11, 0x8002f515, &(0x7f0000001640)) recvfrom(r5, &(0x7f0000001680)=""/64, 0x40, 0x101c0, &(0x7f00000016c0)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)) clock_gettime(0x0, &(0x7f0000003440)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000003340)=[{{&(0x7f0000001780)=@ax25={{}, [@netrom, @rose, @default, @remote, @netrom, @netrom, @default, @default]}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001800)=""/233, 0xe9}], 0x1}, 0x7fff}, {{&(0x7f0000001940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001c40)=[{&(0x7f00000019c0)=""/182, 0xb6}, {&(0x7f0000001a80)=""/167, 0xa7}, {&(0x7f0000001b40)=""/178, 0xb2}, {&(0x7f0000001c00)=""/59, 0x3b}], 0x4, &(0x7f0000001c80)=""/28, 0x1c}, 0x200}, {{&(0x7f0000001cc0)=@can, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d40)}, {&(0x7f0000001d80)=""/253, 0xfd}, {&(0x7f0000001e80)=""/142, 0x8e}], 0x3, &(0x7f0000001f80)=""/229, 0xe5}}, {{&(0x7f0000002080)=@xdp, 0x80, &(0x7f0000003200)=[{&(0x7f0000002100)=""/215, 0xd7}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, &(0x7f0000003240)=""/203, 0xcb}, 0xfffffffd}], 0x4, 0x2101, &(0x7f0000003480)={r12, r13+10000000}) 498.025692ms ago: executing program 1 (id=2449): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000380)="d9e6b9c9b4581e4718d41c6f88c764cc5f", 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a80140007"], 0x15c}}, 0x0) 497.894913ms ago: executing program 6 (id=2450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003f01000000000000001000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000ff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd4, &(0x7f0000000340)=""/212}, 0x94) 230.097117ms ago: executing program 4 (id=2451): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 216.93045ms ago: executing program 6 (id=2452): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4008040) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x8010, r0, 0x672e5000) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000a, 0x110, r4, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000030000010002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001", @ANYRES16=r0, @ANYRESHEX=r3], 0x58}}, 0x0) sendto$rxrpc(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x3b, 0x0, &(0x7f0000000080)) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@union={0x1, 0x1, 0x0, 0x5, 0x0, 0x7ff, [{0xf, 0x2, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x2, [{0x10, 0x1}, {0x0, 0x4}, {0xb, 0x2002}]}]}}, &(0x7f0000000f40)=""/4089, 0x56, 0xff9, 0x0, 0x107}, 0x28) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x4008014) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x86, &(0x7f0000002600)}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r9, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487a1216409507ef4a44e804db9321ed9a0d3b0d49aa2ac2a3f14") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x200048d0) 153.116737ms ago: executing program 1 (id=2453): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010007000000fbdbdf250a00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4048000) listen(r0, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r7, 0x101, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c014}, 0x48000) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008014) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r11) sendmsg$ETHTOOL_MSG_RINGS_SET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002db9700000000000100000001800018014000200776c616e31000000000000000000000008000700000000000800060040"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x49, 0x20, 0x1, 0x9, {{0x24, 0x4, 0x0, 0x8, 0x90, 0x68, 0x0, 0x8, 0x2f, 0x0, @loopback, @remote, {[@rr={0x7, 0xb, 0xcc, [@local, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp_addr={0x44, 0x14, 0x99, 0x1, 0x6, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x41}}]}, @timestamp_addr={0x44, 0x44, 0x31, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x7ff}, {@private=0xa010101, 0x3ff}, {@multicast2, 0x2}, {@loopback, 0x1}, {@private=0xa010101, 0x8}, {@loopback, 0xce9}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x2}]}, @generic={0x44, 0x7, "2baca8186f"}, @ssrr={0x89, 0xf, 0xae, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)={0x84, r12, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6dd5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffffb}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1000}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}]}, 0x84}}, 0x4800) sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100025bd7000fcdbdf25540000000a0006000802110006000000fce62a26f31d6665f994b1040c61cd1d73265eb623d5ca7e7f31e8519f32eed5124d12de4627d49775d61106202f91eebba2c27c0394654d2846e38649231afe02c535ef16090a19fd97e7b079293e9e0100000001000000fa1c6fd157a2e41abaf2b18e518355ed0e4695ce6852bf7797ab01009287a81060befa3e70"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) r14 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r14, &(0x7f0000000240)=""/272, 0x37, 0x62, 0x0, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000611008000000000063000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1f, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200333723b8328face2596db300000080000000f5efb900b11a2a15ec278e616ac75ea34999cef89d97c673fa9bc868c8fc970b1671e2d159b06bc2d7bb4f3c1eab7f9c697d955e2a3de56f48997a22e6f65ab768780fbeee2f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f00000007c0)={'gre0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}}) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYRES64=r15, @ANYRES32=r16, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r17, 0x1}, 0xc) 15.022382ms ago: executing program 1 (id=2454): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000020000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 6 (id=2455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000001818010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ? __pfx__printk+0x10/0x10 [ 244.243475][ T9959] ? __pfx___might_resched+0x10/0x10 [ 244.243499][ T9959] ? fs_reclaim_acquire+0x7d/0x100 [ 244.243525][ T9959] should_fail_ex+0x414/0x560 [ 244.243553][ T9959] should_failslab+0xa8/0x100 [ 244.243585][ T9959] kmem_cache_alloc_noprof+0x73/0x3c0 [ 244.243612][ T9959] ? security_inode_alloc+0x39/0x330 [ 244.243642][ T9959] security_inode_alloc+0x39/0x330 [ 244.243669][ T9959] inode_init_always_gfp+0x9ed/0xdc0 [ 244.243708][ T9959] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 244.243737][ T9959] alloc_inode+0x82/0x1b0 [ 244.243768][ T9959] new_inode+0x22/0x170 [ 244.243804][ T9959] __debugfs_create_file+0x14d/0x4f0 [ 244.243839][ T9959] debugfs_create_file_full+0x3f/0x60 [ 244.243871][ T9959] ref_tracker_dir_debugfs+0x14e/0x270 [ 244.243896][ T9959] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 244.243951][ T9959] ? rcu_is_watching+0x15/0xb0 [ 244.243975][ T9959] ? alloc_netdev_mqs+0xa3/0x1170 [ 244.244008][ T9959] ? __raw_spin_lock_init+0x45/0x100 [ 244.244040][ T9959] alloc_netdev_mqs+0x26f/0x1170 [ 244.244066][ T9959] ? __pfx_hsr_dev_setup+0x10/0x10 [ 244.244098][ T9959] rtnl_create_link+0x31f/0xd10 [ 244.244133][ T9959] rtnl_newlink_create+0x25c/0xb00 [ 244.244165][ T9959] ? __pfx_aa_get_newest_label+0x10/0x10 [ 244.244191][ T9959] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 244.244212][ T9959] ? rtnl_newlink+0x8db/0x1c70 [ 244.244246][ T9959] ? __pfx___mutex_lock+0x10/0x10 [ 244.244296][ T9959] ? ns_capable+0x8a/0xf0 [ 244.244326][ T9959] rtnl_newlink+0x16d6/0x1c70 [ 244.244379][ T9959] ? __pfx_rtnl_newlink+0x10/0x10 [ 244.244403][ T9959] ? is_bpf_text_address+0x26/0x2b0 [ 244.244428][ T9959] ? __lock_acquire+0xab9/0xd20 [ 244.244457][ T9959] ? __lock_acquire+0xab9/0xd20 [ 244.244491][ T9959] ? is_bpf_text_address+0x26/0x2b0 [ 244.244513][ T9959] ? is_bpf_text_address+0x292/0x2b0 [ 244.244530][ T9959] ? is_bpf_text_address+0x26/0x2b0 [ 244.244551][ T9959] ? kernel_text_address+0xa5/0xe0 [ 244.244578][ T9959] ? __lock_acquire+0xab9/0xd20 [ 244.244617][ T9959] ? __pfx_rtnl_newlink+0x10/0x10 [ 244.244641][ T9959] rtnetlink_rcv_msg+0x7cf/0xb70 [ 244.244671][ T9959] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 244.244695][ T9959] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.244735][ T9959] netlink_rcv_skb+0x208/0x470 [ 244.244763][ T9959] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.244789][ T9959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.244826][ T9959] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.244850][ T9959] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.244881][ T9959] netlink_unicast+0x759/0x8e0 [ 244.244913][ T9959] netlink_sendmsg+0x805/0xb30 [ 244.244938][ T9959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.244956][ T9959] ? aa_sock_msg_perm+0x94/0x160 [ 244.244974][ T9959] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.244991][ T9959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.245007][ T9959] __sock_sendmsg+0x21c/0x270 [ 244.245034][ T9959] ____sys_sendmsg+0x505/0x830 [ 244.245058][ T9959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.245086][ T9959] ? import_iovec+0x74/0xa0 [ 244.245112][ T9959] ___sys_sendmsg+0x21f/0x2a0 [ 244.245133][ T9959] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.245185][ T9959] ? __fget_files+0x2a/0x420 [ 244.245198][ T9959] ? __fget_files+0x3a0/0x420 [ 244.245222][ T9959] __x64_sys_sendmsg+0x19b/0x260 [ 244.245244][ T9959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.245272][ T9959] ? __pfx_ksys_write+0x10/0x10 [ 244.245292][ T9959] ? rcu_is_watching+0x15/0xb0 [ 244.245315][ T9959] ? do_syscall_64+0xbe/0x3b0 [ 244.245352][ T9959] do_syscall_64+0xfa/0x3b0 [ 244.245375][ T9959] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.245397][ T9959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.245414][ T9959] ? clear_bhb_loop+0x60/0xb0 [ 244.245434][ T9959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.245449][ T9959] RIP: 0033:0x7f91ab98e929 [ 244.245465][ T9959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.245479][ T9959] RSP: 002b:00007f91ac872038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.245497][ T9959] RAX: ffffffffffffffda RBX: 00007f91abbb5fa0 RCX: 00007f91ab98e929 [ 244.245509][ T9959] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 244.245520][ T9959] RBP: 00007f91ac872090 R08: 0000000000000000 R09: 0000000000000000 [ 244.245530][ T9959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.245540][ T9959] R13: 0000000000000000 R14: 00007f91abbb5fa0 R15: 00007fff8c1eb248 [ 244.245566][ T9959] [ 244.245680][ T9959] debugfs: out of free dentries, can not create file 'netdev@ffff88804c4e4610' [ 244.810556][ T9972] xt_CT: No such helper "syz0" [ 244.970671][ T9978] tipc: Enabled bearer , priority 0 [ 245.071252][ T9978] syzkaller0: entered promiscuous mode [ 245.080011][ T9978] syzkaller0: entered allmulticast mode [ 245.089659][ T9978] tipc: Resetting bearer [ 245.252083][ T9988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1281'. [ 245.292040][ T9977] tipc: Resetting bearer [ 245.313892][ T9990] FAULT_INJECTION: forcing a failure. [ 245.313892][ T9990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.353277][ T9990] CPU: 0 UID: 0 PID: 9990 Comm: syz.3.1283 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 245.353311][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.353324][ T9990] Call Trace: [ 245.353332][ T9990] [ 245.353341][ T9990] dump_stack_lvl+0x189/0x250 [ 245.353373][ T9990] ? __pfx____ratelimit+0x10/0x10 [ 245.353403][ T9990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.353429][ T9990] ? __pfx__printk+0x10/0x10 [ 245.353457][ T9990] ? __might_fault+0xb0/0x130 [ 245.353498][ T9990] should_fail_ex+0x414/0x560 [ 245.353534][ T9990] _copy_from_user+0x2d/0xb0 [ 245.353564][ T9990] ___sys_recvmsg+0x12e/0x510 [ 245.353596][ T9990] ? __pfx____sys_recvmsg+0x10/0x10 [ 245.353656][ T9990] ? __might_fault+0xb0/0x130 [ 245.353689][ T9990] do_recvmmsg+0x307/0x770 [ 245.353724][ T9990] ? __pfx_do_recvmmsg+0x10/0x10 [ 245.353763][ T9990] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 245.353814][ T9990] __x64_sys_recvmmsg+0x190/0x240 [ 245.353844][ T9990] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 245.353867][ T9990] ? rcu_is_watching+0x15/0xb0 [ 245.353898][ T9990] ? do_syscall_64+0xbe/0x3b0 [ 245.353933][ T9990] do_syscall_64+0xfa/0x3b0 [ 245.353961][ T9990] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.353989][ T9990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.354011][ T9990] ? clear_bhb_loop+0x60/0xb0 [ 245.354036][ T9990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.354056][ T9990] RIP: 0033:0x7f8faa38e929 [ 245.354075][ T9990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.354093][ T9990] RSP: 002b:00007f8faa1f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 245.354115][ T9990] RAX: ffffffffffffffda RBX: 00007f8faa5b5fa0 RCX: 00007f8faa38e929 [ 245.354129][ T9990] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 245.354143][ T9990] RBP: 00007f8faa1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 245.354156][ T9990] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 245.354169][ T9990] R13: 0000000000000000 R14: 00007f8faa5b5fa0 R15: 00007ffc970fb7a8 [ 245.354202][ T9990] [ 245.997259][ T9887] tipc: Node number set to 1155634051 [ 247.792114][ T9977] tipc: Disabling bearer [ 248.051509][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 248.069718][T10007] macsec1: entered allmulticast mode [ 248.075172][T10007] bond0: entered allmulticast mode [ 248.098476][T10007] bond0: left allmulticast mode [ 248.169678][T10013] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1290'. [ 248.676161][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1296'. [ 248.680712][T10036] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 250.313474][T10081] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1313'. [ 250.887596][T10093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1315'. [ 251.320238][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1318'. [ 251.621908][T10097] vlan2: entered promiscuous mode [ 251.656485][T10097] batadv0: entered promiscuous mode [ 252.052793][ T5872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.063548][ T5872] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.072886][ T5872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.092700][ T5872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.102012][ T5872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.235499][T10116] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1326'. [ 252.253198][T10116] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1326'. [ 252.394796][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 252.429805][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1328'. [ 252.437284][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 252.447898][T10123] netlink: 'syz.4.1328': attribute type 7 has an invalid length. [ 252.447920][T10123] netlink: 'syz.4.1328': attribute type 8 has an invalid length. [ 252.447935][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1328'. [ 252.487376][T10119] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 252.517382][T10119] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1327'. [ 252.571829][ T5167] block nbd6: Receive control failed (result -107) [ 252.995825][T10104] chnl_net:caif_netlink_parms(): no params data found [ 253.447773][T10140] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 253.660362][T10153] veth1_to_team: entered allmulticast mode [ 253.707713][T10153] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 253.795805][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.808156][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.815790][T10104] bridge_slave_0: entered allmulticast mode [ 253.837125][T10104] bridge_slave_0: entered promiscuous mode [ 253.861219][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.887279][T10104] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.894588][T10104] bridge_slave_1: entered allmulticast mode [ 253.903327][T10163] netlink: 'syz.4.1342': attribute type 6 has an invalid length. [ 253.939070][T10104] bridge_slave_1: entered promiscuous mode [ 254.071125][T10170] FAULT_INJECTION: forcing a failure. [ 254.071125][T10170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.088401][T10170] CPU: 1 UID: 0 PID: 10170 Comm: syz.5.1340 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 254.088434][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.088447][T10170] Call Trace: [ 254.088454][T10170] [ 254.088463][T10170] dump_stack_lvl+0x189/0x250 [ 254.088495][T10170] ? __pfx____ratelimit+0x10/0x10 [ 254.088525][T10170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.088549][T10170] ? __pfx__printk+0x10/0x10 [ 254.088577][T10170] ? __might_fault+0xb0/0x130 [ 254.088618][T10170] should_fail_ex+0x414/0x560 [ 254.088646][T10170] _copy_from_user+0x2d/0xb0 [ 254.088674][T10170] ___sys_recvmsg+0x12e/0x510 [ 254.088707][T10170] ? __pfx____sys_recvmsg+0x10/0x10 [ 254.088766][T10170] ? __might_fault+0xb0/0x130 [ 254.088798][T10170] do_recvmmsg+0x307/0x770 [ 254.088832][T10170] ? __pfx_do_recvmmsg+0x10/0x10 [ 254.088879][T10170] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 254.088930][T10170] __x64_sys_recvmmsg+0x190/0x240 [ 254.088959][T10170] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 254.088981][T10170] ? rcu_is_watching+0x15/0xb0 [ 254.089012][T10170] ? do_syscall_64+0xbe/0x3b0 [ 254.089046][T10170] do_syscall_64+0xfa/0x3b0 [ 254.089083][T10170] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.089115][T10170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.089136][T10170] ? clear_bhb_loop+0x60/0xb0 [ 254.089161][T10170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.089180][T10170] RIP: 0033:0x7f186c58e929 [ 254.089199][T10170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.089216][T10170] RSP: 002b:00007f186d3d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 254.089239][T10170] RAX: ffffffffffffffda RBX: 00007f186c7b5fa0 RCX: 00007f186c58e929 [ 254.089254][T10170] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 254.089268][T10170] RBP: 00007f186d3d3090 R08: 0000000000000000 R09: 0000000000000000 [ 254.089282][T10170] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 254.089294][T10170] R13: 0000000000000000 R14: 00007f186c7b5fa0 R15: 00007fff4a7f7788 [ 254.089326][T10170] [ 254.327138][ T5167] Bluetooth: hci6: command tx timeout [ 254.435133][T10173] tipc: Enabling of bearer rejected, failed to enable media [ 254.640691][T10104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.704054][T10104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.960346][T10104] team0: Port device team_slave_0 added [ 255.035103][T10190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.089436][T10104] team0: Port device team_slave_1 added [ 255.143813][T10190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.241875][T10190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.393604][T10104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.402035][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.438280][T10104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.452806][T10104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.460884][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.488441][T10104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.710997][T10104] hsr_slave_0: entered promiscuous mode [ 255.731502][T10104] hsr_slave_1: entered promiscuous mode [ 255.744515][T10104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.754848][T10104] Cannot create hsr debugfs directory [ 255.810233][T10209] netlink: 'syz.5.1352': attribute type 2 has an invalid length. [ 256.392180][ T5167] Bluetooth: hci6: command tx timeout [ 256.484942][T10218] __nla_validate_parse: 5 callbacks suppressed [ 256.484965][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 256.567447][T10218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1353'. [ 256.714785][T10223] raw_sendmsg: syz.4.1355 forgot to set AF_INET. Fix it! [ 257.172060][T10225] veth7: entered promiscuous mode [ 257.209924][T10225] veth7: entered allmulticast mode [ 257.215926][T10104] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 257.272201][T10104] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 257.296118][T10104] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 257.320260][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 257.330967][T10104] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 257.694286][T10104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.744070][T10104] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.790764][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.798003][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.860170][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.867476][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.310009][T10254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1363'. [ 258.477713][ T5167] Bluetooth: hci6: command tx timeout [ 258.811606][T10104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.568286][T10104] veth0_vlan: entered promiscuous mode [ 259.615231][T10104] veth1_vlan: entered promiscuous mode [ 259.715781][T10104] veth0_macvtap: entered promiscuous mode [ 259.751267][T10104] veth1_macvtap: entered promiscuous mode [ 259.764494][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1374'. [ 259.800664][T10104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.812180][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1374'. [ 259.839712][T10104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.863570][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1373'. [ 259.919588][T10290] xt_bpf: check failed: parse error [ 259.947477][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.956294][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.030497][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.053151][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.484277][T10306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1378'. [ 260.509382][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.525111][T10293] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 260.562737][T10293] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1375'. [ 260.566429][ T5167] Bluetooth: hci6: command tx timeout [ 260.600791][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.644510][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.654200][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.797467][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1375'. [ 260.941706][T10313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.008647][T10315] netlink: 'syz.5.1379': attribute type 27 has an invalid length. [ 261.573623][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1381'. [ 261.583994][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1381'. [ 261.607285][T10324] netlink: 'syz.6.1381': attribute type 1 has an invalid length. [ 261.614307][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.623709][T10324] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1381'. [ 261.731045][ T5167] block nbd7: Receive control failed (result -107) [ 262.084380][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 262.331621][T10346] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1390'. [ 262.373830][T10347] tipc: Enabling of bearer rejected, failed to enable media [ 262.505481][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 262.573617][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 262.653123][T10360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1391'. [ 263.235729][T10375] netlink: 'syz.5.1396': attribute type 16 has an invalid length. [ 263.237005][T10370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1394'. [ 263.246001][T10375] netlink: 'syz.5.1396': attribute type 3 has an invalid length. [ 263.261205][T10375] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.1396'. [ 263.613820][T10385] macsec1: entered allmulticast mode [ 263.620628][T10385] bond0: entered allmulticast mode [ 263.637904][T10385] bond0: left allmulticast mode [ 263.718834][T10358] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 264.042066][T10408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.544835][T10428] x_tables: duplicate underflow at hook 2 [ 266.066845][T10451] netlink: 'syz.5.1419': attribute type 1 has an invalid length. [ 266.417591][T10486] nbd8: detected capacity change from 0 to 127 [ 266.435364][T10489] netlink: 'syz.4.1431': attribute type 8 has an invalid length. [ 266.641336][T10494] __nla_validate_parse: 13 callbacks suppressed [ 266.641360][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 267.029679][ T5872] block nbd8: Receive control failed (result -32) [ 267.188437][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 267.315598][T10514] vlan2: entered promiscuous mode [ 267.395743][T10526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1441'. [ 267.717922][T10534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1448'. [ 267.908215][T10539] netlink: 'syz.1.1449': attribute type 30 has an invalid length. [ 267.945866][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'. [ 268.059559][T10543] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1451'. [ 268.307230][ T5872] Bluetooth: hci6: command 0x0405 tx timeout [ 268.609942][T10557] FAULT_INJECTION: forcing a failure. [ 268.609942][T10557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.667265][T10557] CPU: 1 UID: 0 PID: 10557 Comm: syz.1.1457 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 268.667298][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.667311][T10557] Call Trace: [ 268.667319][T10557] [ 268.667328][T10557] dump_stack_lvl+0x189/0x250 [ 268.667360][T10557] ? __pfx____ratelimit+0x10/0x10 [ 268.667390][T10557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.667415][T10557] ? __pfx__printk+0x10/0x10 [ 268.667444][T10557] ? __might_fault+0xb0/0x130 [ 268.667485][T10557] should_fail_ex+0x414/0x560 [ 268.667513][T10557] _copy_from_user+0x2d/0xb0 [ 268.667542][T10557] ___sys_recvmsg+0x12e/0x510 [ 268.667575][T10557] ? __pfx____sys_recvmsg+0x10/0x10 [ 268.667647][T10557] ? __might_fault+0xb0/0x130 [ 268.667679][T10557] do_recvmmsg+0x307/0x770 [ 268.667715][T10557] ? __pfx_do_recvmmsg+0x10/0x10 [ 268.667754][T10557] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 268.667805][T10557] __x64_sys_recvmmsg+0x190/0x240 [ 268.667835][T10557] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 268.667857][T10557] ? rcu_is_watching+0x15/0xb0 [ 268.667888][T10557] ? do_syscall_64+0xbe/0x3b0 [ 268.667923][T10557] do_syscall_64+0xfa/0x3b0 [ 268.667952][T10557] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.667980][T10557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.668001][T10557] ? clear_bhb_loop+0x60/0xb0 [ 268.668026][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.668047][T10557] RIP: 0033:0x7f91ab98e929 [ 268.668066][T10557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.668084][T10557] RSP: 002b:00007f91ac872038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 268.668106][T10557] RAX: ffffffffffffffda RBX: 00007f91abbb5fa0 RCX: 00007f91ab98e929 [ 268.668121][T10557] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 268.668136][T10557] RBP: 00007f91ac872090 R08: 0000000000000000 R09: 0000000000000000 [ 268.668149][T10557] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 268.668161][T10557] R13: 0000000000000000 R14: 00007f91abbb5fa0 R15: 00007fff8c1eb248 [ 268.668194][T10557] [ 268.775990][T10527] netlink: 'syz.3.1445': attribute type 1 has an invalid length. [ 269.037796][T10527] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1445'. [ 269.151265][T10572] vlan2: entered allmulticast mode [ 269.161034][T10572] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 269.182444][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1445'. [ 269.299197][T10574] FAULT_INJECTION: forcing a failure. [ 269.299197][T10574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.314924][T10574] CPU: 1 UID: 0 PID: 10574 Comm: syz.1.1461 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 269.314958][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.314975][T10574] Call Trace: [ 269.314984][T10574] [ 269.314993][T10574] dump_stack_lvl+0x189/0x250 [ 269.315024][T10574] ? __pfx____ratelimit+0x10/0x10 [ 269.315055][T10574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.315080][T10574] ? __pfx__printk+0x10/0x10 [ 269.315122][T10574] should_fail_ex+0x414/0x560 [ 269.315149][T10574] _copy_to_user+0x31/0xb0 [ 269.315179][T10574] simple_read_from_buffer+0xe1/0x170 [ 269.315216][T10574] proc_fail_nth_read+0x1df/0x250 [ 269.315241][T10574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.315266][T10574] ? rw_verify_area+0x258/0x650 [ 269.315292][T10574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.315315][T10574] vfs_read+0x1fd/0x980 [ 269.315348][T10574] ? __pfx___mutex_lock+0x10/0x10 [ 269.315380][T10574] ? __pfx_vfs_read+0x10/0x10 [ 269.315409][T10574] ? __fget_files+0x2a/0x420 [ 269.315434][T10574] ? __fget_files+0x3a0/0x420 [ 269.315451][T10574] ? __fget_files+0x2a/0x420 [ 269.315480][T10574] ksys_read+0x145/0x250 [ 269.315510][T10574] ? __pfx_ksys_read+0x10/0x10 [ 269.315543][T10574] ? rcu_is_watching+0x15/0xb0 [ 269.315574][T10574] ? do_syscall_64+0xbe/0x3b0 [ 269.315610][T10574] do_syscall_64+0xfa/0x3b0 [ 269.315638][T10574] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.315667][T10574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.315688][T10574] ? clear_bhb_loop+0x60/0xb0 [ 269.315713][T10574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.315732][T10574] RIP: 0033:0x7f91ab98d33c [ 269.315752][T10574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 269.315770][T10574] RSP: 002b:00007f91ac872030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.315792][T10574] RAX: ffffffffffffffda RBX: 00007f91abbb5fa0 RCX: 00007f91ab98d33c [ 269.315807][T10574] RDX: 000000000000000f RSI: 00007f91ac8720a0 RDI: 0000000000000008 [ 269.315820][T10574] RBP: 00007f91ac872090 R08: 0000000000000000 R09: 0000000000000000 [ 269.315833][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.315845][T10574] R13: 0000000000000000 R14: 00007f91abbb5fa0 R15: 00007fff8c1eb248 [ 269.315880][T10574] [ 269.719247][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1466'. [ 269.788427][ T9887] IPVS: starting estimator thread 0... [ 269.824895][T10591] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1467'. [ 269.912490][T10589] IPVS: using max 29 ests per chain, 69600 per kthread [ 270.050824][T10599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.195274][T10607] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 270.219259][T10604] netlink: 'syz.6.1472': attribute type 1 has an invalid length. [ 270.444746][T10604] bond1: entered promiscuous mode [ 270.485487][T10604] bond1: entered allmulticast mode [ 270.542351][T10611] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 271.518628][T10641] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 271.548120][T10641] ip6gretap1: left promiscuous mode [ 271.553850][T10641] bridge1: left promiscuous mode [ 271.563088][T10641] bridge3: left promiscuous mode [ 271.597164][T10641] bridge3: left allmulticast mode [ 271.862857][T10625] netlink: 'syz.4.1478': attribute type 1 has an invalid length. [ 271.887044][T10625] __nla_validate_parse: 4 callbacks suppressed [ 271.887066][T10625] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1478'. [ 272.170865][T10662] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1492'. [ 272.189183][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1491'. [ 272.223119][T10663] vlan2: entered promiscuous mode [ 272.233970][T10663] bridge0: entered promiscuous mode [ 272.303959][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 272.328239][T10665] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 272.346257][T10665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.746211][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 272.787442][T10678] ip6tnl1: entered promiscuous mode [ 272.872009][T10683] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1498'. [ 272.908574][T10686] tipc: Resetting bearer [ 273.141933][T10696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1499'. [ 273.337865][T10708] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1505'. [ 273.433614][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.441646][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.744028][T10710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1504'. [ 273.918255][T10734] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1503'. [ 274.060802][T10698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.085724][T10698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.337878][T10713] tipc: Enabled bearer , priority 0 [ 274.361592][T10716] syzkaller0: entered promiscuous mode [ 274.369260][T10716] syzkaller0: entered allmulticast mode [ 274.434736][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.477476][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.547297][T10716] tipc: Resetting bearer [ 274.599164][T10716] tipc: Disabling bearer [ 274.632219][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.677620][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.776256][T10743] syz_tun: entered promiscuous mode [ 274.783747][T10743] batadv_slave_1: entered promiscuous mode [ 274.797107][T10743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.804734][T10743] Cannot create hsr debugfs directory [ 274.815925][T10743] hsr0: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 274.835768][T10743] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.678128][T10751] netlink: 'syz.6.1511': attribute type 1 has an invalid length. [ 275.932496][T10787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.954407][T10786] vlan0: entered promiscuous mode [ 276.300306][T10792] vlan2: entered promiscuous mode [ 276.624081][T10813] tipc: Enabling of bearer rejected, already enabled [ 276.667637][T10810] xt_bpf: check failed: parse error [ 276.680456][T10815] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 276.968635][T10828] __nla_validate_parse: 12 callbacks suppressed [ 276.968657][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1542'. [ 276.988879][T10829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1543'. [ 277.067689][T10829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1543'. [ 277.099005][T10829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1543'. [ 277.475375][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 277.500834][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1548'. [ 277.557333][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1548'. [ 277.581055][T10852] xt_time: unknown flags 0x4 [ 277.963676][T10831] netlink: 'syz.5.1541': attribute type 1 has an invalid length. [ 278.003778][T10831] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1541'. [ 278.221839][T10844] infiniband syz!: set down [ 278.255945][T10844] infiniband syz!: added team_slave_0 [ 278.495092][T10844] RDS/IB: syz!: added [ 278.504272][T10844] smc: adding ib device syz! with port count 1 [ 278.511799][T10844] smc: ib device syz! port 1 has pnetid [ 278.689092][T10869] ip6tnl1: left promiscuous mode [ 278.741106][T10871] netlink: 'syz.5.1555': attribute type 39 has an invalid length. [ 278.885979][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1557'. [ 279.015242][T10887] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.513607][T10901] syzkaller0: entered promiscuous mode [ 279.519949][T10901] syzkaller0: entered allmulticast mode [ 279.793152][T10910] xt_CT: No such helper "snmp_trap" [ 281.165829][T10933] xt_recent: Unsupported userspace flags (00000048) [ 282.259643][T10919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.305903][T10937] vlan2: entered promiscuous mode [ 282.469378][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1578'. [ 282.601942][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1579'. [ 282.643810][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1579'. [ 283.250195][T10978] vlan2: entered allmulticast mode [ 283.302969][T10980] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1589'. [ 283.479830][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1592'. [ 283.502454][T10986] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1591'. [ 283.554294][T10989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1593'. [ 283.894858][T10999] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 284.265560][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 284.484392][T11007] team0 (unregistering): left promiscuous mode [ 284.512777][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1606'. [ 284.611606][T11025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1607'. [ 285.019428][T11039] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 286.602402][T11095] netlink: 'syz.4.1629': attribute type 10 has an invalid length. [ 286.672107][T11095] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 286.707809][T11095] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 287.511030][T11116] __nla_validate_parse: 7 callbacks suppressed [ 287.511054][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 288.164045][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'. [ 288.215407][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 288.230996][T11137] vlan2: entered promiscuous mode [ 288.387567][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1646'. [ 288.494519][T11138] netlink: 'syz.6.1632': attribute type 1 has an invalid length. [ 288.577273][T11138] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1632'. [ 288.622074][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1632'. [ 288.660721][T11156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1649'. [ 289.025070][T11167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.768700][T11193] netlink: 'syz.5.1663': attribute type 10 has an invalid length. [ 289.811133][T11193] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1663'. [ 289.965145][T11193] batman_adv: batadv0: Adding interface: virt_wifi0 [ 289.986192][T11193] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem. [ 290.067355][T11193] batman_adv: batadv0: Interface activated: virt_wifi0 [ 290.414032][T11201] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1666'. [ 290.617825][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'. [ 290.675640][T11210] vlan2: entered promiscuous mode [ 290.968135][T11221] FAULT_INJECTION: forcing a failure. [ 290.968135][T11221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.051245][T11221] CPU: 1 UID: 0 PID: 11221 Comm: syz.1.1672 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 291.051279][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.051293][T11221] Call Trace: [ 291.051301][T11221] [ 291.051311][T11221] dump_stack_lvl+0x189/0x250 [ 291.051343][T11221] ? __pfx____ratelimit+0x10/0x10 [ 291.051373][T11221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.051398][T11221] ? __pfx__printk+0x10/0x10 [ 291.051427][T11221] ? __might_fault+0xb0/0x130 [ 291.051469][T11221] should_fail_ex+0x414/0x560 [ 291.051496][T11221] _copy_from_user+0x2d/0xb0 [ 291.051526][T11221] ___sys_recvmsg+0x12e/0x510 [ 291.051558][T11221] ? __pfx____sys_recvmsg+0x10/0x10 [ 291.051618][T11221] ? __might_fault+0xb0/0x130 [ 291.051651][T11221] do_recvmmsg+0x307/0x770 [ 291.051684][T11221] ? __pfx_do_recvmmsg+0x10/0x10 [ 291.051721][T11221] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 291.051773][T11221] __x64_sys_recvmmsg+0x190/0x240 [ 291.051802][T11221] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 291.051825][T11221] ? rcu_is_watching+0x15/0xb0 [ 291.051856][T11221] ? do_syscall_64+0xbe/0x3b0 [ 291.051891][T11221] do_syscall_64+0xfa/0x3b0 [ 291.051919][T11221] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.051948][T11221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.051968][T11221] ? clear_bhb_loop+0x60/0xb0 [ 291.051995][T11221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.052015][T11221] RIP: 0033:0x7f91ab98e929 [ 291.052034][T11221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.052052][T11221] RSP: 002b:00007f91ac872038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 291.052073][T11221] RAX: ffffffffffffffda RBX: 00007f91abbb5fa0 RCX: 00007f91ab98e929 [ 291.052089][T11221] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 291.052103][T11221] RBP: 00007f91ac872090 R08: 0000000000000000 R09: 0000000000000000 [ 291.052116][T11221] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 291.052128][T11221] R13: 0000000000000000 R14: 00007f91abbb5fa0 R15: 00007fff8c1eb248 [ 291.052169][T11221] [ 291.593641][T11218] netlink: 'syz.4.1660': attribute type 1 has an invalid length. [ 292.283562][T11245] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 292.323568][T11245] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 292.928668][T11265] __nla_validate_parse: 6 callbacks suppressed [ 292.928692][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1687'. [ 292.977302][T11265] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 292.995057][T11265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.144830][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1689'. [ 293.215388][T11270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.840150][T11302] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1695'. [ 293.951602][T11303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1696'. [ 294.350484][T11291] tipc: Resetting bearer [ 294.658452][T11310] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 294.738634][T11312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1699'. [ 294.941663][T11320] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1697'. [ 295.419017][T11334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1703'. [ 295.550375][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 295.785097][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'. [ 295.807410][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'. [ 295.840360][T11345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.484486][T11363] xt_recent: Unsupported userspace flags (00000048) [ 296.951255][T11379] netlink: 'syz.1.1716': attribute type 10 has an invalid length. [ 296.964258][T11379] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 296.984387][T11379] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 297.417645][T11388] vlan2: entered promiscuous mode [ 297.444489][T11383] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 297.700955][T11399] bridge_slave_0: left allmulticast mode [ 297.708006][T11399] bridge_slave_0: left promiscuous mode [ 297.713889][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.858626][T11399] bridge_slave_1: left allmulticast mode [ 297.864348][T11399] bridge_slave_1: left promiscuous mode [ 297.920074][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.966162][T11406] netlink: 'syz.1.1725': attribute type 10 has an invalid length. [ 297.985995][T11406] __nla_validate_parse: 5 callbacks suppressed [ 297.986018][T11406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1725'. [ 298.053048][T11399] bond0: (slave bond_slave_0): Releasing backup interface [ 298.069308][T11408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1726'. [ 298.097946][T11399] bond_slave_0: left promiscuous mode [ 298.119649][T11399] bond0: (slave bond_slave_1): Releasing backup interface [ 298.129111][T11399] bond_slave_1: left promiscuous mode [ 298.138808][T11399] team0: Port device team_slave_0 removed [ 298.148812][T11399] team0: Port device team_slave_1 removed [ 298.155191][T11399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.164684][T11399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.174540][T11399] batman_adv: batadv0: Removing interface: virt_wifi0 [ 298.244161][T11404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.255308][T11404] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.272597][T11404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.319408][T11406] batman_adv: batadv0: Adding interface: virt_wifi0 [ 298.327303][T11406] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 298.368948][T11406] batman_adv: batadv0: Interface activated: virt_wifi0 [ 298.654510][T11418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1732'. [ 298.664362][T11417] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 298.735853][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1728'. [ 298.868897][T11423] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 298.879860][ T30] audit: type=1800 audit(1752775832.346:3): pid=11423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1728" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 298.967130][T11423] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 298.996997][T11423] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 299.154707][T11435] netlink: 'syz.5.1733': attribute type 8 has an invalid length. [ 299.238429][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1737'. [ 299.445605][T11449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1739'. [ 299.488476][T11452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1738'. [ 299.657857][T11459] FAULT_INJECTION: forcing a failure. [ 299.657857][T11459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.737644][T11459] CPU: 0 UID: 0 PID: 11459 Comm: syz.6.1743 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 299.737681][T11459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.737695][T11459] Call Trace: [ 299.737704][T11459] [ 299.737715][T11459] dump_stack_lvl+0x189/0x250 [ 299.737747][T11459] ? __pfx____ratelimit+0x10/0x10 [ 299.737780][T11459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.737808][T11459] ? __pfx__printk+0x10/0x10 [ 299.737839][T11459] ? __might_fault+0xb0/0x130 [ 299.737883][T11459] should_fail_ex+0x414/0x560 [ 299.737913][T11459] _copy_from_user+0x2d/0xb0 [ 299.737945][T11459] ___sys_recvmsg+0x12e/0x510 [ 299.737980][T11459] ? __pfx____sys_recvmsg+0x10/0x10 [ 299.738045][T11459] ? __might_fault+0xb0/0x130 [ 299.738080][T11459] do_recvmmsg+0x307/0x770 [ 299.738118][T11459] ? __pfx_do_recvmmsg+0x10/0x10 [ 299.738160][T11459] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 299.738214][T11459] __x64_sys_recvmmsg+0x190/0x240 [ 299.738246][T11459] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 299.738270][T11459] ? rcu_is_watching+0x15/0xb0 [ 299.738303][T11459] ? do_syscall_64+0xbe/0x3b0 [ 299.738351][T11459] do_syscall_64+0xfa/0x3b0 [ 299.738381][T11459] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.738412][T11459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.738434][T11459] ? clear_bhb_loop+0x60/0xb0 [ 299.738461][T11459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.738487][T11459] RIP: 0033:0x7f012dd8e929 [ 299.738507][T11459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.738526][T11459] RSP: 002b:00007f012ec88038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 299.738549][T11459] RAX: ffffffffffffffda RBX: 00007f012dfb5fa0 RCX: 00007f012dd8e929 [ 299.738566][T11459] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 299.738582][T11459] RBP: 00007f012ec88090 R08: 0000000000000000 R09: 0000000000000000 [ 299.738596][T11459] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 299.738609][T11459] R13: 0000000000000000 R14: 00007f012dfb5fa0 R15: 00007fff53836598 [ 299.738658][T11459] [ 300.195308][T11461] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1744'. [ 300.320051][T11463] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 300.328421][T11463] batman_adv: batadv0: Removing interface: virt_wifi0 [ 300.362807][T11463] bond0: (slave wlan1): Releasing backup interface [ 300.375458][T11463] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 300.663569][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 300.748575][T11473] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1751'. [ 300.889218][T11477] netlink: 'syz.3.1748': attribute type 1 has an invalid length. [ 300.960045][ T5167] block nbd9: Receive control failed (result -107) [ 301.155110][T11486] x_tables: duplicate underflow at hook 2 [ 301.173230][T11488] FAULT_INJECTION: forcing a failure. [ 301.173230][T11488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.203813][T11488] CPU: 0 UID: 0 PID: 11488 Comm: syz.1.1755 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 301.203851][T11488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.203865][T11488] Call Trace: [ 301.203875][T11488] [ 301.203885][T11488] dump_stack_lvl+0x189/0x250 [ 301.203921][T11488] ? __pfx____ratelimit+0x10/0x10 [ 301.203954][T11488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.203983][T11488] ? __pfx__printk+0x10/0x10 [ 301.204031][T11488] should_fail_ex+0x414/0x560 [ 301.204061][T11488] _copy_to_user+0x31/0xb0 [ 301.204096][T11488] simple_read_from_buffer+0xe1/0x170 [ 301.204137][T11488] proc_fail_nth_read+0x1df/0x250 [ 301.204165][T11488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.204193][T11488] ? rw_verify_area+0x258/0x650 [ 301.204221][T11488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.204257][T11488] vfs_read+0x1fd/0x980 [ 301.204295][T11488] ? __pfx___mutex_lock+0x10/0x10 [ 301.204330][T11488] ? __pfx_vfs_read+0x10/0x10 [ 301.204362][T11488] ? __fget_files+0x2a/0x420 [ 301.204389][T11488] ? __fget_files+0x3a0/0x420 [ 301.204408][T11488] ? __fget_files+0x2a/0x420 [ 301.204440][T11488] ksys_read+0x145/0x250 [ 301.204474][T11488] ? __pfx_ksys_read+0x10/0x10 [ 301.204501][T11488] ? rcu_is_watching+0x15/0xb0 [ 301.204536][T11488] ? do_syscall_64+0xbe/0x3b0 [ 301.204576][T11488] do_syscall_64+0xfa/0x3b0 [ 301.204608][T11488] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.204640][T11488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.204677][T11488] ? clear_bhb_loop+0x60/0xb0 [ 301.204706][T11488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.204728][T11488] RIP: 0033:0x7f91ab98d33c [ 301.204749][T11488] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 301.204770][T11488] RSP: 002b:00007f91ac872030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.204796][T11488] RAX: ffffffffffffffda RBX: 00007f91abbb5fa0 RCX: 00007f91ab98d33c [ 301.204813][T11488] RDX: 000000000000000f RSI: 00007f91ac8720a0 RDI: 0000000000000005 [ 301.204829][T11488] RBP: 00007f91ac872090 R08: 0000000000000000 R09: 0000000000000000 [ 301.204843][T11488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.204857][T11488] R13: 0000000000000000 R14: 00007f91abbb5fa0 R15: 00007fff8c1eb248 [ 301.204895][T11488] [ 301.880296][T11498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.388902][T11512] macsec1: entered allmulticast mode [ 302.428074][T11512] bond0: entered allmulticast mode [ 302.486119][T11512] bond_slave_0: entered allmulticast mode [ 302.567052][T11512] bond_slave_1: entered allmulticast mode [ 302.594732][T11512] bond0: left allmulticast mode [ 302.614230][T11512] bond_slave_0: left allmulticast mode [ 302.637034][T11512] bond_slave_1: left allmulticast mode [ 302.774559][T11521] veth1_to_team: left allmulticast mode [ 302.782909][T11521] 0·: left allmulticast mode [ 302.830371][T11521] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 302.862305][T11521] syzkaller0: left promiscuous mode [ 302.890238][T11528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.907745][T11521] syzkaller0: left allmulticast mode [ 303.097673][T11536] __nla_validate_parse: 9 callbacks suppressed [ 303.097706][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 303.140776][T11540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1772'. [ 303.161443][T11540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1772'. [ 303.344219][T11544] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1775'. [ 303.501580][T11551] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1777'. [ 303.672619][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 304.184869][T11564] netlink: 'syz.4.1774': attribute type 1 has an invalid length. [ 304.213625][T11564] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1774'. [ 304.339174][T11564] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1774'. [ 304.609980][T11552] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 304.749387][T11552] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 304.883131][T11590] openvswitch: netlink: Message has 4 unknown bytes. [ 305.265444][T11596] xt_recent: Unsupported userspace flags (00000048) [ 305.431114][T11603] FAULT_INJECTION: forcing a failure. [ 305.431114][T11603] name failslab, interval 1, probability 0, space 0, times 0 [ 305.460030][T11603] CPU: 0 UID: 0 PID: 11603 Comm: syz.6.1794 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 305.460062][T11603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.460076][T11603] Call Trace: [ 305.460095][T11603] [ 305.460105][T11603] dump_stack_lvl+0x189/0x250 [ 305.460137][T11603] ? __pfx____ratelimit+0x10/0x10 [ 305.460166][T11603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.460191][T11603] ? __pfx__printk+0x10/0x10 [ 305.460223][T11603] ? __pfx___might_resched+0x10/0x10 [ 305.460252][T11603] should_fail_ex+0x414/0x560 [ 305.460279][T11603] should_failslab+0xa8/0x100 [ 305.460311][T11603] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 305.460342][T11603] ? __get_vm_area_node+0x13f/0x300 [ 305.460375][T11603] __get_vm_area_node+0x13f/0x300 [ 305.460416][T11603] __vmalloc_node_range_noprof+0x301/0x12f0 [ 305.460446][T11603] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 305.460468][T11603] ? is_bpf_text_address+0x26/0x2b0 [ 305.460516][T11603] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 305.460545][T11603] ? __might_fault+0xb0/0x130 [ 305.460570][T11603] ? __pfx_aa_get_newest_label+0x10/0x10 [ 305.460589][T11603] ? _parse_integer_limit+0x1ae/0x1f0 [ 305.460616][T11603] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 305.460634][T11603] __vmalloc_noprof+0xb1/0xf0 [ 305.460663][T11603] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 305.460686][T11603] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 305.460711][T11603] bpf_prog_alloc+0x3c/0x1a0 [ 305.460733][T11603] bpf_prog_load+0x735/0x1930 [ 305.460765][T11603] ? __pfx_bpf_prog_load+0x10/0x10 [ 305.460814][T11603] ? bpf_lsm_bpf+0x9/0x20 [ 305.460837][T11603] ? security_bpf+0x7e/0x300 [ 305.460859][T11603] __sys_bpf+0x5f1/0x860 [ 305.460892][T11603] ? __pfx___sys_bpf+0x10/0x10 [ 305.460937][T11603] ? ksys_write+0x22a/0x250 [ 305.460966][T11603] ? __pfx_ksys_write+0x10/0x10 [ 305.460991][T11603] ? rcu_is_watching+0x15/0xb0 [ 305.461024][T11603] __x64_sys_bpf+0x7c/0x90 [ 305.461052][T11603] do_syscall_64+0xfa/0x3b0 [ 305.461078][T11603] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.461110][T11603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.461128][T11603] ? clear_bhb_loop+0x60/0xb0 [ 305.461149][T11603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.461169][T11603] RIP: 0033:0x7f012dd8e929 [ 305.461189][T11603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.461207][T11603] RSP: 002b:00007f012ec88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.461229][T11603] RAX: ffffffffffffffda RBX: 00007f012dfb5fa0 RCX: 00007f012dd8e929 [ 305.461244][T11603] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 305.461257][T11603] RBP: 00007f012ec88090 R08: 0000000000000000 R09: 0000000000000000 [ 305.461269][T11603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.461281][T11603] R13: 0000000000000000 R14: 00007f012dfb5fa0 R15: 00007fff53836598 [ 305.461310][T11603] [ 305.461568][T11603] syz.6.1794: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 305.464070][T11604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.496576][T11603] ,cpuset=/,mems_allowed=0-1 [ 305.845589][T11603] CPU: 0 UID: 0 PID: 11603 Comm: syz.6.1794 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 305.845627][T11603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.845642][T11603] Call Trace: [ 305.845651][T11603] [ 305.845661][T11603] dump_stack_lvl+0x189/0x250 [ 305.845692][T11603] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 305.845727][T11603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.845754][T11603] ? __pfx__printk+0x10/0x10 [ 305.845784][T11603] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 305.845813][T11603] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 305.845860][T11603] warn_alloc+0x214/0x310 [ 305.845890][T11603] ? __pfx_warn_alloc+0x10/0x10 [ 305.845912][T11603] ? __get_vm_area_node+0x13f/0x300 [ 305.845947][T11603] ? __get_vm_area_node+0x2b5/0x300 [ 305.845983][T11603] __vmalloc_node_range_noprof+0x326/0x12f0 [ 305.846023][T11603] ? is_bpf_text_address+0x26/0x2b0 [ 305.846074][T11603] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 305.846106][T11603] ? __might_fault+0xb0/0x130 [ 305.846135][T11603] ? __pfx_aa_get_newest_label+0x10/0x10 [ 305.846158][T11603] ? _parse_integer_limit+0x1ae/0x1f0 [ 305.846189][T11603] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 305.846209][T11603] __vmalloc_noprof+0xb1/0xf0 [ 305.846241][T11603] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 305.846267][T11603] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 305.846295][T11603] bpf_prog_alloc+0x3c/0x1a0 [ 305.846320][T11603] bpf_prog_load+0x735/0x1930 [ 305.846354][T11603] ? __pfx_bpf_prog_load+0x10/0x10 [ 305.846402][T11603] ? bpf_lsm_bpf+0x9/0x20 [ 305.846428][T11603] ? security_bpf+0x7e/0x300 [ 305.846452][T11603] __sys_bpf+0x5f1/0x860 [ 305.846488][T11603] ? __pfx___sys_bpf+0x10/0x10 [ 305.846537][T11603] ? ksys_write+0x22a/0x250 [ 305.846569][T11603] ? __pfx_ksys_write+0x10/0x10 [ 305.846595][T11603] ? rcu_is_watching+0x15/0xb0 [ 305.846630][T11603] __x64_sys_bpf+0x7c/0x90 [ 305.846685][T11603] do_syscall_64+0xfa/0x3b0 [ 305.846717][T11603] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.846748][T11603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.846769][T11603] ? clear_bhb_loop+0x60/0xb0 [ 305.846797][T11603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.846818][T11603] RIP: 0033:0x7f012dd8e929 [ 305.846849][T11603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.846869][T11603] RSP: 002b:00007f012ec88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.846894][T11603] RAX: ffffffffffffffda RBX: 00007f012dfb5fa0 RCX: 00007f012dd8e929 [ 305.846910][T11603] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 305.846925][T11603] RBP: 00007f012ec88090 R08: 0000000000000000 R09: 0000000000000000 [ 305.846939][T11603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.846952][T11603] R13: 0000000000000000 R14: 00007f012dfb5fa0 R15: 00007fff53836598 [ 305.846988][T11603] [ 306.197995][T11603] Mem-Info: [ 306.203236][T11603] active_anon:7846 inactive_anon:0 isolated_anon:0 [ 306.203236][T11603] active_file:1713 inactive_file:39913 isolated_file:0 [ 306.203236][T11603] unevictable:768 dirty:186 writeback:0 [ 306.203236][T11603] slab_reclaimable:12585 slab_unreclaimable:127062 [ 306.203236][T11603] mapped:42575 shmem:4232 pagetables:1193 [ 306.203236][T11603] sec_pagetables:0 bounce:0 [ 306.203236][T11603] kernel_misc_reclaimable:0 [ 306.203236][T11603] free:1271291 free_pcp:15064 free_cma:0 [ 306.273467][T11603] Node 0 active_anon:31384kB inactive_anon:0kB active_file:6852kB inactive_file:159452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:170300kB dirty:736kB writeback:0kB shmem:15392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13280kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 306.395502][T11603] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 306.501375][T11603] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.631360][T11603] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 306.648501][T11603] Node 0 DMA32 free:1185568kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19476kB inactive_anon:0kB active_file:6852kB inactive_file:157872kB unevictable:1536kB writepending:760kB present:3129332kB managed:2558376kB mlocked:0kB bounce:0kB free_pcp:40552kB local_pcp:19496kB free_cma:0kB [ 306.700730][T11603] lowmem_reserve[]: 0 0 1 1 1 [ 306.705532][T11603] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 306.747761][T11603] lowmem_reserve[]: 0 0 0 0 0 [ 306.755159][T11603] Node 1 Normal free:3900168kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17952kB local_pcp:9280kB free_cma:0kB [ 306.800919][T11626] 8021q: VLANs not supported on bond0 [ 306.813752][T11603] lowmem_reserve[]: 0 0 0 0 0 [ 306.819580][T11603] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 306.839451][T11603] Node 0 DMA32: 1224*4kB (UME) 456*8kB (UME) 272*16kB (UME) 368*32kB (UM) 699*64kB (UME) 120*128kB (UM) 34*256kB (UME) 5*512kB (M) 2*1024kB (UE) 1*2048kB (M) 265*4096kB (M) = 1185568kB [ 306.864383][T11603] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 306.888517][T11603] Node 1 Normal: 168*4kB (UME) 43*8kB (UME) 35*16kB (UME) 145*32kB (UME) 37*64kB (UME) 9*128kB (UME) 3*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3900168kB [ 306.913878][T11603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.924619][T11603] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.950657][T11603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.967347][T11603] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.994232][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1799'. [ 307.004374][T11620] tipc: Started in network mode [ 307.010488][T11620] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 307.012615][T11603] 42984 total pagecache pages [ 307.022825][T11620] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 307.035539][T11603] 0 pages in swap cache [ 307.042972][T11603] Free swap = 124996kB [ 307.051348][T11620] tipc: Enabled bearer , priority 10 [ 307.058674][T11603] Total swap = 124996kB [ 307.068828][T11603] 2097051 pages RAM [ 307.072700][T11603] 0 pages HighMem/MovableOnly [ 307.086007][T11603] 425415 pages reserved [ 307.099348][T11603] 0 pages cma reserved [ 307.154818][T11634] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1803'. [ 307.230499][T11640] 8021q: VLANs not supported on wlan1 [ 307.805064][T11678] bridge_slave_0: left allmulticast mode [ 307.815253][T11678] bridge_slave_0: left promiscuous mode [ 307.881804][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.930570][T11678] bridge_slave_1: left allmulticast mode [ 307.953849][T11678] bridge_slave_1: left promiscuous mode [ 307.990930][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.015902][T11678] bond0: (slave bond_slave_0): Releasing backup interface [ 308.040932][T11678] bond0: (slave bond_slave_1): Releasing backup interface [ 308.119966][T11678] team0: Port device team_slave_0 removed [ 308.166037][T11678] team0: Port device team_slave_1 removed [ 308.177331][ T9887] tipc: Node number set to 1 [ 308.188769][T11678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.233994][T11678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.317472][T11682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.330400][T11682] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.358094][T11682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.375195][T11684] __nla_validate_parse: 11 callbacks suppressed [ 308.375219][T11684] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1814'. [ 308.413219][T11684] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1814'. [ 308.702754][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1821'. [ 308.747567][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1821'. [ 308.785021][T11702] netlink: 'syz.6.1821': attribute type 1 has an invalid length. [ 308.825829][T11702] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1821'. [ 308.923027][ T5872] block nbd10: Receive control failed (result -107) [ 309.288294][T11731] trusted_key: syz.1.1831 sent an empty control message without MSG_MORE. [ 309.350077][T11732] syzkaller0: entered allmulticast mode [ 309.694350][T11744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1835'. [ 309.947964][T11749] bond0: (slave wlan1): Releasing backup interface [ 309.956085][T11749] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 309.968116][T11749] ip6tnl1: left promiscuous mode [ 309.978121][T11749] ip6tnl1: left allmulticast mode [ 309.983973][T11749] bridge0: left promiscuous mode [ 309.997860][T11749] veth5: left allmulticast mode [ 310.011151][T11749] veth7: left promiscuous mode [ 310.023999][T11749] veth7: left allmulticast mode [ 310.380445][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1843'. [ 310.400340][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1843'. [ 310.480046][T11765] netlink: 'syz.6.1843': attribute type 6 has an invalid length. [ 310.694213][T11774] netlink: 'syz.3.1844': attribute type 1 has an invalid length. [ 310.810343][T11778] netlink: 'syz.1.1846': attribute type 1 has an invalid length. [ 311.479388][T11774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.629823][T11780] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 311.744769][T11793] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1850'. [ 312.290542][T11809] bridge6: entered promiscuous mode [ 312.551379][T11815] netlink: 'syz.6.1862': attribute type 39 has an invalid length. [ 312.701823][T11826] FAULT_INJECTION: forcing a failure. [ 312.701823][T11826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.754961][T11826] CPU: 1 UID: 0 PID: 11826 Comm: syz.5.1864 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 312.754995][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.755008][T11826] Call Trace: [ 312.755016][T11826] [ 312.755025][T11826] dump_stack_lvl+0x189/0x250 [ 312.755055][T11826] ? __pfx____ratelimit+0x10/0x10 [ 312.755086][T11826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.755110][T11826] ? __pfx__printk+0x10/0x10 [ 312.755138][T11826] ? __might_fault+0xb0/0x130 [ 312.755178][T11826] should_fail_ex+0x414/0x560 [ 312.755206][T11826] _copy_from_user+0x2d/0xb0 [ 312.755235][T11826] ___sys_recvmsg+0x12e/0x510 [ 312.755264][T11826] ? __pfx____sys_recvmsg+0x10/0x10 [ 312.755322][T11826] ? __might_fault+0xb0/0x130 [ 312.755354][T11826] do_recvmmsg+0x307/0x770 [ 312.755401][T11826] ? __pfx_do_recvmmsg+0x10/0x10 [ 312.755438][T11826] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 312.755487][T11826] __x64_sys_recvmmsg+0x190/0x240 [ 312.755517][T11826] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 312.755539][T11826] ? rcu_is_watching+0x15/0xb0 [ 312.755569][T11826] ? do_syscall_64+0xbe/0x3b0 [ 312.755602][T11826] do_syscall_64+0xfa/0x3b0 [ 312.755628][T11826] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.755654][T11826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.755675][T11826] ? clear_bhb_loop+0x60/0xb0 [ 312.755700][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.755725][T11826] RIP: 0033:0x7f186c58e929 [ 312.755744][T11826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.755761][T11826] RSP: 002b:00007f186d3d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 312.755782][T11826] RAX: ffffffffffffffda RBX: 00007f186c7b5fa0 RCX: 00007f186c58e929 [ 312.755797][T11826] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 312.755811][T11826] RBP: 00007f186d3d3090 R08: 0000000000000000 R09: 0000000000000000 [ 312.755824][T11826] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 312.755835][T11826] R13: 0000000000000000 R14: 00007f186c7b5fa0 R15: 00007fff4a7f7788 [ 312.755864][T11826] [ 313.275714][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1866'. [ 313.447361][T11843] __nla_validate_parse: 2 callbacks suppressed [ 313.447382][T11843] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1870'. [ 313.481788][T11843] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1870'. [ 313.859544][T11843] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1870'. [ 313.871369][T11843] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1870'. [ 314.081561][T11871] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20003 [ 314.090034][T11870] Bluetooth: MGMT ver 1.23 [ 314.125014][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1880'. [ 314.335391][T11880] FAULT_INJECTION: forcing a failure. [ 314.335391][T11880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.393770][T11880] CPU: 0 UID: 0 PID: 11880 Comm: syz.4.1885 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 314.393803][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.393816][T11880] Call Trace: [ 314.393824][T11880] [ 314.393833][T11880] dump_stack_lvl+0x189/0x250 [ 314.393864][T11880] ? __pfx____ratelimit+0x10/0x10 [ 314.393894][T11880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.393918][T11880] ? __pfx__printk+0x10/0x10 [ 314.393945][T11880] ? __might_fault+0xb0/0x130 [ 314.393985][T11880] should_fail_ex+0x414/0x560 [ 314.394012][T11880] _copy_from_user+0x2d/0xb0 [ 314.394041][T11880] ___sys_recvmsg+0x12e/0x510 [ 314.394074][T11880] ? __pfx____sys_recvmsg+0x10/0x10 [ 314.394133][T11880] ? __might_fault+0xb0/0x130 [ 314.394166][T11880] do_recvmmsg+0x307/0x770 [ 314.394201][T11880] ? __pfx_do_recvmmsg+0x10/0x10 [ 314.394238][T11880] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.394296][T11880] __x64_sys_recvmmsg+0x190/0x240 [ 314.394323][T11880] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 314.394344][T11880] ? rcu_is_watching+0x15/0xb0 [ 314.394374][T11880] ? do_syscall_64+0xbe/0x3b0 [ 314.394407][T11880] do_syscall_64+0xfa/0x3b0 [ 314.394436][T11880] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.394464][T11880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.394484][T11880] ? clear_bhb_loop+0x60/0xb0 [ 314.394509][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.394529][T11880] RIP: 0033:0x7fb3f158e929 [ 314.394547][T11880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.394564][T11880] RSP: 002b:00007fb3f240d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 314.394586][T11880] RAX: ffffffffffffffda RBX: 00007fb3f17b5fa0 RCX: 00007fb3f158e929 [ 314.394601][T11880] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 314.394615][T11880] RBP: 00007fb3f240d090 R08: 0000000000000000 R09: 0000000000000000 [ 314.394627][T11880] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 314.394638][T11880] R13: 0000000000000000 R14: 00007fb3f17b5fa0 R15: 00007ffd106465d8 [ 314.394670][T11880] [ 315.227563][T11911] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1884'. [ 315.721127][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1897'. [ 316.115851][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1904'. [ 316.128248][T11941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.172433][T11939] vlan2: entered promiscuous mode [ 316.173972][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1906'. [ 316.239583][T11944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1905'. [ 316.915702][T11973] syz_tun: entered promiscuous mode [ 316.932241][T11973] syz_tun: entered allmulticast mode [ 317.039113][T11977] sctp: [Deprecated]: syz.6.1914 (pid 11977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.039113][T11977] Use struct sctp_sack_info instead [ 317.336870][T11987] netlink: 'syz.5.1916': attribute type 10 has an invalid length. [ 317.909683][T11987] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 317.937829][T11987] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 319.985325][T12023] __nla_validate_parse: 4 callbacks suppressed [ 319.985348][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'. [ 320.749829][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1932'. [ 320.947897][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1934'. [ 321.978173][T12052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1936'. [ 322.747904][T12061] netlink: 212296 bytes leftover after parsing attributes in process `syz.3.1940'. [ 323.032376][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.662599][T12071] syzkaller0: entered promiscuous mode [ 323.684492][T12071] syzkaller0: entered allmulticast mode [ 324.058839][T12082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1941'. [ 325.979818][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1945'. [ 326.748384][T12107] syz_tun: left promiscuous mode [ 326.764303][T12107] syz_tun: left allmulticast mode [ 326.843419][T12107] bond0: (slave wlan1): Releasing backup interface [ 326.880713][T12107] mac80211_hwsim hwsim39 wlan1: left promiscuous mode [ 326.918316][T12109] dvmrp0: entered allmulticast mode [ 327.081478][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1954'. [ 327.760479][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1958'. [ 327.772950][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1959'. [ 327.800996][T12134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.487073][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1966'. [ 328.579839][T12162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.652201][T12168] macvlan2: entered promiscuous mode [ 328.687310][T12168] macvlan2: entered allmulticast mode [ 328.699266][T12168] bond1: (slave macvlan2): Opening slave failed [ 328.961557][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1969'. [ 329.048913][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1971'. [ 329.253420][T12186] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1972'. [ 329.295340][T12186] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1972'. [ 329.315345][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'. [ 330.934142][T12214] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 330.967839][T12214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.045117][T12214] __nla_validate_parse: 3 callbacks suppressed [ 331.045137][T12214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'. [ 331.143905][T12217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1983'. [ 331.646225][T12232] netlink: 788 bytes leftover after parsing attributes in process `syz.5.1988'. [ 332.589449][T12260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1995'. [ 332.600978][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1996'. [ 332.811025][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1999'. [ 333.091247][T12273] can: request_module (can-proto-0) failed. [ 333.439340][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2009'. [ 333.785623][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2013'. [ 333.938679][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2015'. [ 334.205817][T12319] netlink: 4716 bytes leftover after parsing attributes in process `syz.6.2016'. [ 334.219011][T12318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.249044][T12342] vlan2: entered promiscuous mode [ 335.347804][ T5167] Bluetooth: hci5: command 0x0406 tx timeout [ 336.153773][T12356] __nla_validate_parse: 6 callbacks suppressed [ 336.153792][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2029'. [ 336.162126][T12358] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2026'. [ 336.317742][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'. [ 336.435380][T12369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2030'. [ 336.637500][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2034'. [ 336.649395][T12371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.813059][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2036'. [ 336.840673][T12376] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2036'. [ 336.907084][T12378] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 337.165738][T12382] 8021q: VLANs not supported on wlan1 [ 337.481878][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2045'. [ 337.863775][T12406] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2048'. [ 337.876143][T12407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2046'. [ 337.979348][T12400] bond2 (unregistering): Released all slaves [ 339.254099][T12423] netlink: 'syz.4.2052': attribute type 1 has an invalid length. [ 339.363554][ T5872] block nbd11: Receive control failed (result -107) [ 339.558028][T12426] netlink: 'syz.6.2054': attribute type 8 has an invalid length. [ 340.265981][T12452] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 341.539024][T12487] __nla_validate_parse: 11 callbacks suppressed [ 341.539051][T12487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2075'. [ 341.861250][T12498] FAULT_INJECTION: forcing a failure. [ 341.861250][T12498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.916024][T12498] CPU: 0 UID: 0 PID: 12498 Comm: syz.4.2080 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 341.916058][T12498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.916071][T12498] Call Trace: [ 341.916079][T12498] [ 341.916089][T12498] dump_stack_lvl+0x189/0x250 [ 341.916120][T12498] ? __pfx____ratelimit+0x10/0x10 [ 341.916150][T12498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.916175][T12498] ? __pfx__printk+0x10/0x10 [ 341.916203][T12498] ? __might_fault+0xb0/0x130 [ 341.916245][T12498] should_fail_ex+0x414/0x560 [ 341.916273][T12498] _copy_from_user+0x2d/0xb0 [ 341.916306][T12498] ___sys_recvmsg+0x12e/0x510 [ 341.916337][T12498] ? __pfx____sys_recvmsg+0x10/0x10 [ 341.916397][T12498] ? __might_fault+0xb0/0x130 [ 341.916429][T12498] do_recvmmsg+0x307/0x770 [ 341.916471][T12498] ? __pfx_do_recvmmsg+0x10/0x10 [ 341.916510][T12498] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 341.916561][T12498] __x64_sys_recvmmsg+0x190/0x240 [ 341.916589][T12498] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 341.916612][T12498] ? rcu_is_watching+0x15/0xb0 [ 341.916642][T12498] ? do_syscall_64+0xbe/0x3b0 [ 341.916677][T12498] do_syscall_64+0xfa/0x3b0 [ 341.916705][T12498] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.916734][T12498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.916754][T12498] ? clear_bhb_loop+0x60/0xb0 [ 341.916779][T12498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.916799][T12498] RIP: 0033:0x7fb3f158e929 [ 341.916817][T12498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.916836][T12498] RSP: 002b:00007fb3f240d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 341.916858][T12498] RAX: ffffffffffffffda RBX: 00007fb3f17b5fa0 RCX: 00007fb3f158e929 [ 341.916874][T12498] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 341.916888][T12498] RBP: 00007fb3f240d090 R08: 0000000000000000 R09: 0000000000000000 [ 341.916901][T12498] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 341.916914][T12498] R13: 0000000000000000 R14: 00007fb3f17b5fa0 R15: 00007ffd106465d8 [ 341.916944][T12498] [ 342.395996][T12508] xt_recent: Unsupported userspace flags (00000048) [ 343.195871][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2090'. [ 343.223604][T12533] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 343.250207][T12529] macsec1: entered allmulticast mode [ 343.255570][T12529] bond0: entered allmulticast mode [ 343.276117][T12529] bond0: left allmulticast mode [ 343.294494][T12535] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2091'. [ 343.599960][T12542] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2094'. [ 343.658273][T12544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2095'. [ 343.693578][T12544] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2095'. [ 343.727397][T12544] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2095'. [ 345.469740][T12572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2104'. [ 345.535065][T12575] 8021q: VLANs not supported on bond0 [ 345.632437][T12582] FAULT_INJECTION: forcing a failure. [ 345.632437][T12582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.663423][T12582] CPU: 0 UID: 0 PID: 12582 Comm: syz.4.2107 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 345.663455][T12582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.663469][T12582] Call Trace: [ 345.663477][T12582] [ 345.663487][T12582] dump_stack_lvl+0x189/0x250 [ 345.663518][T12582] ? __pfx____ratelimit+0x10/0x10 [ 345.663549][T12582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.663574][T12582] ? __pfx__printk+0x10/0x10 [ 345.663616][T12582] should_fail_ex+0x414/0x560 [ 345.663644][T12582] _copy_to_user+0x31/0xb0 [ 345.663675][T12582] simple_read_from_buffer+0xe1/0x170 [ 345.663711][T12582] proc_fail_nth_read+0x1df/0x250 [ 345.663736][T12582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.663781][T12582] ? rw_verify_area+0x258/0x650 [ 345.663808][T12582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.663831][T12582] vfs_read+0x1fd/0x980 [ 345.663864][T12582] ? __pfx___mutex_lock+0x10/0x10 [ 345.663895][T12582] ? __pfx_vfs_read+0x10/0x10 [ 345.663923][T12582] ? __fget_files+0x2a/0x420 [ 345.663947][T12582] ? __fget_files+0x3a0/0x420 [ 345.663964][T12582] ? __fget_files+0x2a/0x420 [ 345.663998][T12582] ksys_read+0x145/0x250 [ 345.664029][T12582] ? __pfx_ksys_read+0x10/0x10 [ 345.664062][T12582] ? do_syscall_64+0xbe/0x3b0 [ 345.664098][T12582] do_syscall_64+0xfa/0x3b0 [ 345.664126][T12582] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.664154][T12582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.664175][T12582] ? clear_bhb_loop+0x60/0xb0 [ 345.664205][T12582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.664225][T12582] RIP: 0033:0x7fb3f158d33c [ 345.664244][T12582] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 345.664268][T12582] RSP: 002b:00007fb3f240d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 345.664290][T12582] RAX: ffffffffffffffda RBX: 00007fb3f17b5fa0 RCX: 00007fb3f158d33c [ 345.664305][T12582] RDX: 000000000000000f RSI: 00007fb3f240d0a0 RDI: 0000000000000005 [ 345.664318][T12582] RBP: 00007fb3f240d090 R08: 0000000000000000 R09: 0000000000000000 [ 345.664331][T12582] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.664345][T12582] R13: 0000000000000000 R14: 00007fb3f17b5fa0 R15: 00007ffd106465d8 [ 345.664379][T12582] [ 346.104051][T12593] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2111'. [ 346.232793][T12601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2112'. [ 346.430635][T12606] FAULT_INJECTION: forcing a failure. [ 346.430635][T12606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.452101][T12606] CPU: 0 UID: 0 PID: 12606 Comm: syz.5.2113 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 346.452135][T12606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.452148][T12606] Call Trace: [ 346.452157][T12606] [ 346.452165][T12606] dump_stack_lvl+0x189/0x250 [ 346.452196][T12606] ? __pfx____ratelimit+0x10/0x10 [ 346.452226][T12606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.452252][T12606] ? __pfx__printk+0x10/0x10 [ 346.452280][T12606] ? __might_fault+0xb0/0x130 [ 346.452321][T12606] should_fail_ex+0x414/0x560 [ 346.452348][T12606] _copy_from_iter+0x1db/0x16f0 [ 346.452379][T12606] ? rcu_is_watching+0x15/0xb0 [ 346.452405][T12606] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 346.452438][T12606] ? __pfx__copy_from_iter+0x10/0x10 [ 346.452465][T12606] ? __build_skb_around+0x257/0x3e0 [ 346.452491][T12606] ? netlink_sendmsg+0x642/0xb30 [ 346.452509][T12606] ? skb_put+0x11b/0x210 [ 346.452534][T12606] netlink_sendmsg+0x6b2/0xb30 [ 346.452564][T12606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.452587][T12606] ? aa_sock_msg_perm+0x94/0x160 [ 346.452611][T12606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.452633][T12606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.452653][T12606] __sock_sendmsg+0x21c/0x270 [ 346.452686][T12606] ____sys_sendmsg+0x52d/0x830 [ 346.452716][T12606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.452750][T12606] ? import_iovec+0x74/0xa0 [ 346.452782][T12606] ___sys_sendmsg+0x21f/0x2a0 [ 346.452808][T12606] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.452877][T12606] ? __fget_files+0x2a/0x420 [ 346.452895][T12606] ? __fget_files+0x3a0/0x420 [ 346.452931][T12606] __sys_sendmmsg+0x227/0x430 [ 346.452962][T12606] ? __pfx___sys_sendmmsg+0x10/0x10 [ 346.452983][T12606] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 346.453043][T12606] ? ksys_write+0x22a/0x250 [ 346.453073][T12606] ? __pfx_ksys_write+0x10/0x10 [ 346.453097][T12606] ? rcu_is_watching+0x15/0xb0 [ 346.453129][T12606] __x64_sys_sendmmsg+0xa0/0xc0 [ 346.453155][T12606] do_syscall_64+0xfa/0x3b0 [ 346.453187][T12606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.453207][T12606] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 346.453228][T12606] ? clear_bhb_loop+0x60/0xb0 [ 346.453253][T12606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.453273][T12606] RIP: 0033:0x7f186c58e929 [ 346.453292][T12606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.453311][T12606] RSP: 002b:00007f186d3d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 346.453333][T12606] RAX: ffffffffffffffda RBX: 00007f186c7b5fa0 RCX: 00007f186c58e929 [ 346.453348][T12606] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000005 [ 346.453362][T12606] RBP: 00007f186d3d3090 R08: 0000000000000000 R09: 0000000000000000 [ 346.453375][T12606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.453388][T12606] R13: 0000000000000000 R14: 00007f186c7b5fa0 R15: 00007fff4a7f7788 [ 346.453421][T12606] [ 347.568127][T12637] FAULT_INJECTION: forcing a failure. [ 347.568127][T12637] name failslab, interval 1, probability 0, space 0, times 0 [ 347.611473][T12637] CPU: 0 UID: 0 PID: 12637 Comm: syz.6.2125 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 347.611504][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.611516][T12637] Call Trace: [ 347.611524][T12637] [ 347.611533][T12637] dump_stack_lvl+0x189/0x250 [ 347.611563][T12637] ? __pfx____ratelimit+0x10/0x10 [ 347.611592][T12637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.611617][T12637] ? __pfx__printk+0x10/0x10 [ 347.611651][T12637] ? __pfx___might_resched+0x10/0x10 [ 347.611681][T12637] should_fail_ex+0x414/0x560 [ 347.611708][T12637] should_failslab+0xa8/0x100 [ 347.611741][T12637] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 347.611792][T12637] ? __alloc_skb+0x112/0x2d0 [ 347.611818][T12637] __alloc_skb+0x112/0x2d0 [ 347.611844][T12637] netlink_sendmsg+0x5c6/0xb30 [ 347.611875][T12637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.611899][T12637] ? aa_sock_msg_perm+0x94/0x160 [ 347.611923][T12637] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.611950][T12637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.611971][T12637] __sock_sendmsg+0x21c/0x270 [ 347.612004][T12637] sock_write_iter+0x258/0x330 [ 347.612034][T12637] ? __pfx_sock_write_iter+0x10/0x10 [ 347.612074][T12637] ? __pfx_aa_file_perm+0x10/0x10 [ 347.612105][T12637] do_iter_readv_writev+0x56e/0x7f0 [ 347.612139][T12637] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 347.612173][T12637] ? bpf_lsm_file_permission+0x9/0x20 [ 347.612196][T12637] ? security_file_permission+0x75/0x290 [ 347.612228][T12637] ? rw_verify_area+0x258/0x650 [ 347.612258][T12637] vfs_writev+0x31a/0x960 [ 347.612282][T12637] ? __lock_acquire+0xab9/0xd20 [ 347.612305][T12637] ? __pfx_vfs_writev+0x10/0x10 [ 347.612341][T12637] ? __fget_files+0x2a/0x420 [ 347.612364][T12637] ? __fget_files+0x3a0/0x420 [ 347.612380][T12637] ? __fget_files+0x2a/0x420 [ 347.612407][T12637] do_writev+0x14d/0x2d0 [ 347.612430][T12637] ? __pfx_do_writev+0x10/0x10 [ 347.612447][T12637] ? rcu_is_watching+0x15/0xb0 [ 347.612477][T12637] ? do_syscall_64+0xbe/0x3b0 [ 347.612512][T12637] do_syscall_64+0xfa/0x3b0 [ 347.612540][T12637] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.612569][T12637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.612589][T12637] ? clear_bhb_loop+0x60/0xb0 [ 347.612614][T12637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.612634][T12637] RIP: 0033:0x7f012dd8e929 [ 347.612653][T12637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.612671][T12637] RSP: 002b:00007f012ec88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 347.612693][T12637] RAX: ffffffffffffffda RBX: 00007f012dfb5fa0 RCX: 00007f012dd8e929 [ 347.612708][T12637] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 347.612722][T12637] RBP: 00007f012ec88090 R08: 0000000000000000 R09: 0000000000000000 [ 347.612735][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.612746][T12637] R13: 0000000000000000 R14: 00007f012dfb5fa0 R15: 00007fff53836598 [ 347.612795][T12637] [ 347.923081][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 348.053708][T12648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2129'. [ 348.322391][T12664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2130'. [ 348.617540][T12675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2135'. [ 349.615846][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2146'. [ 350.092666][T12711] xt_recent: Unsupported userspace flags (00000048) [ 350.502938][T12715] netlink: 'syz.6.2138': attribute type 1 has an invalid length. [ 350.576992][T12715] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.2138'. [ 350.699910][T12735] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2158'. [ 350.800562][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2138'. [ 350.835888][T12743] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2160'. [ 351.041604][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 351.054931][T12752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.954674][T12772] netlink: 'syz.3.2171': attribute type 32 has an invalid length. [ 351.963317][T12772] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 353.044874][T12796] __nla_validate_parse: 3 callbacks suppressed [ 353.044896][T12796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2179'. [ 353.137134][T12807] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2180'. [ 353.150201][T12807] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2180'. [ 353.165067][T12807] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2180'. [ 354.564873][T12832] netlink: 4208 bytes leftover after parsing attributes in process `syz.6.2189'. [ 355.002618][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2195'. [ 355.012627][T12843] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 355.021194][T12843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.098058][T12846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2193'. [ 355.210603][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 355.567167][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2200'. [ 356.522449][T12886] xt_recent: Unsupported userspace flags (00000048) [ 356.592361][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2209'. [ 357.795444][T12910] vlan2: entered promiscuous mode [ 358.233972][T12917] ieee802154 phy1 wpan1: encryption failed: -90 [ 358.379707][T12912] bond0 (unregistering): Released all slaves [ 358.973624][T12930] __nla_validate_parse: 3 callbacks suppressed [ 358.973646][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2225'. [ 359.012885][T12930] openvswitch: netlink: Flow key attr not present in new flow. [ 359.192722][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2228'. [ 359.336041][T12942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2227'. [ 359.390245][T12944] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2229'. [ 359.458106][T12946] FAULT_INJECTION: forcing a failure. [ 359.458106][T12946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.516073][T12948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2231'. [ 359.530930][T12948] netlink: 'syz.1.2231': attribute type 7 has an invalid length. [ 359.541437][T12948] netlink: 'syz.1.2231': attribute type 8 has an invalid length. [ 359.554138][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 359.636060][T12946] CPU: 1 UID: 0 PID: 12946 Comm: syz.5.2230 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 359.636092][T12946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.636104][T12946] Call Trace: [ 359.636113][T12946] [ 359.636122][T12946] dump_stack_lvl+0x189/0x250 [ 359.636162][T12946] ? __pfx____ratelimit+0x10/0x10 [ 359.636192][T12946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.636217][T12946] ? __pfx__printk+0x10/0x10 [ 359.636243][T12946] ? __might_fault+0xb0/0x130 [ 359.636287][T12946] should_fail_ex+0x414/0x560 [ 359.636313][T12946] _copy_from_iter+0x1db/0x16f0 [ 359.636344][T12946] ? rcu_is_watching+0x15/0xb0 [ 359.636371][T12946] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 359.636414][T12946] ? __pfx__copy_from_iter+0x10/0x10 [ 359.636441][T12946] ? __build_skb_around+0x257/0x3e0 [ 359.636467][T12946] ? netlink_sendmsg+0x642/0xb30 [ 359.636486][T12946] ? skb_put+0x11b/0x210 [ 359.636512][T12946] netlink_sendmsg+0x6b2/0xb30 [ 359.636543][T12946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.636568][T12946] ? aa_sock_msg_perm+0x94/0x160 [ 359.636592][T12946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.636615][T12946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.636637][T12946] __sock_sendmsg+0x21c/0x270 [ 359.636671][T12946] sock_write_iter+0x258/0x330 [ 359.636703][T12946] ? __pfx_sock_write_iter+0x10/0x10 [ 359.636745][T12946] ? __pfx_aa_file_perm+0x10/0x10 [ 359.636784][T12946] do_iter_readv_writev+0x56e/0x7f0 [ 359.636818][T12946] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 359.636854][T12946] ? bpf_lsm_file_permission+0x9/0x20 [ 359.636878][T12946] ? security_file_permission+0x75/0x290 [ 359.636908][T12946] ? rw_verify_area+0x258/0x650 [ 359.636939][T12946] vfs_writev+0x31a/0x960 [ 359.636966][T12946] ? __lock_acquire+0xab9/0xd20 [ 359.636990][T12946] ? __pfx_vfs_writev+0x10/0x10 [ 359.637027][T12946] ? __fget_files+0x2a/0x420 [ 359.637051][T12946] ? __fget_files+0x3a0/0x420 [ 359.637069][T12946] ? __fget_files+0x2a/0x420 [ 359.637096][T12946] do_writev+0x14d/0x2d0 [ 359.637119][T12946] ? __pfx_do_writev+0x10/0x10 [ 359.637144][T12946] ? rcu_is_watching+0x15/0xb0 [ 359.637175][T12946] ? do_syscall_64+0xbe/0x3b0 [ 359.637210][T12946] do_syscall_64+0xfa/0x3b0 [ 359.637239][T12946] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.637268][T12946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.637290][T12946] ? clear_bhb_loop+0x60/0xb0 [ 359.637315][T12946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.637336][T12946] RIP: 0033:0x7f186c58e929 [ 359.637355][T12946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.637374][T12946] RSP: 002b:00007f186d3d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 359.637397][T12946] RAX: ffffffffffffffda RBX: 00007f186c7b5fa0 RCX: 00007f186c58e929 [ 359.637413][T12946] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 359.637427][T12946] RBP: 00007f186d3d3090 R08: 0000000000000000 R09: 0000000000000000 [ 359.637440][T12946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.637452][T12946] R13: 0000000000000000 R14: 00007f186c7b5fa0 R15: 00007fff4a7f7788 [ 359.637486][T12946] [ 359.967216][T12950] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2232'. [ 360.623269][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 360.671259][T12973] macsec1: entered allmulticast mode [ 360.679001][T12973] bond0: entered allmulticast mode [ 360.715369][T12973] bond0: left allmulticast mode [ 360.872999][T12986] tipc: Enabling of bearer rejected, already enabled [ 360.884943][T12986] syzkaller0: entered promiscuous mode [ 360.891779][T12986] syzkaller0: entered allmulticast mode [ 360.902233][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2244'. [ 361.082609][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2246'. [ 361.202248][T13004] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 362.638367][T13028] FAULT_INJECTION: forcing a failure. [ 362.638367][T13028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.697534][T13028] CPU: 1 UID: 0 PID: 13028 Comm: syz.3.2255 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 362.697567][T13028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.697585][T13028] Call Trace: [ 362.697593][T13028] [ 362.697602][T13028] dump_stack_lvl+0x189/0x250 [ 362.697634][T13028] ? __pfx____ratelimit+0x10/0x10 [ 362.697664][T13028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.697689][T13028] ? __pfx__printk+0x10/0x10 [ 362.697725][T13028] ? __might_fault+0xb0/0x130 [ 362.697766][T13028] should_fail_ex+0x414/0x560 [ 362.697793][T13028] _copy_from_user+0x2d/0xb0 [ 362.697823][T13028] ___sys_recvmsg+0x12e/0x510 [ 362.697855][T13028] ? __pfx____sys_recvmsg+0x10/0x10 [ 362.697915][T13028] ? __might_fault+0xb0/0x130 [ 362.697948][T13028] do_recvmmsg+0x307/0x770 [ 362.697984][T13028] ? __pfx_do_recvmmsg+0x10/0x10 [ 362.698023][T13028] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.698074][T13028] __x64_sys_recvmmsg+0x190/0x240 [ 362.698104][T13028] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 362.698127][T13028] ? rcu_is_watching+0x15/0xb0 [ 362.698157][T13028] ? do_syscall_64+0xbe/0x3b0 [ 362.698192][T13028] do_syscall_64+0xfa/0x3b0 [ 362.698221][T13028] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.698249][T13028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.698270][T13028] ? clear_bhb_loop+0x60/0xb0 [ 362.698296][T13028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.698321][T13028] RIP: 0033:0x7f8faa38e929 [ 362.698340][T13028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.698358][T13028] RSP: 002b:00007f8faa1f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 362.698381][T13028] RAX: ffffffffffffffda RBX: 00007f8faa5b5fa0 RCX: 00007f8faa38e929 [ 362.698397][T13028] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 362.698411][T13028] RBP: 00007f8faa1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 362.698424][T13028] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 362.698437][T13028] R13: 0000000000000000 R14: 00007f8faa5b5fa0 R15: 00007ffc970fb7a8 [ 362.698471][T13028] [ 363.111710][T13040] vlan2: entered promiscuous mode [ 364.143169][T13078] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 364.331483][T13084] __nla_validate_parse: 7 callbacks suppressed [ 364.331507][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2274'. [ 364.357535][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2274'. [ 364.396656][T13084] netlink: 'syz.4.2274': attribute type 1 has an invalid length. [ 364.447227][T13084] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2274'. [ 364.530358][ T5872] block nbd12: Receive control failed (result -107) [ 364.581748][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2276'. [ 364.670950][T13096] xt_connbytes: Forcing CT accounting to be enabled [ 364.678822][T13096] x_tables: ip_tables: ah match: only valid for protocol 51 [ 364.990379][T13109] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.2282'. [ 365.124872][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2286'. [ 365.372474][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2291'. [ 365.377497][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2292'. [ 365.392161][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2289'. [ 365.417226][T13123] openvswitch: netlink: Unknown nsh attribute 0 [ 365.430603][T13124] macsec1: entered allmulticast mode [ 365.435861][T13123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.440320][T13124] bond0: entered allmulticast mode [ 365.470584][T13124] bond0: left allmulticast mode [ 365.545150][T13133] tipc: Enabling of bearer rejected, failed to enable media [ 365.748483][T13146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2293'. [ 366.145227][T13161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.408451][T13173] xt_recent: Unsupported userspace flags (00000048) [ 366.450492][T13176] netlink: 'syz.1.2303': attribute type 4 has an invalid length. [ 366.644614][T13185] netlink: 'syz.5.2307': attribute type 4 has an invalid length. [ 367.120293][T13202] FAULT_INJECTION: forcing a failure. [ 367.120293][T13202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.173346][T13202] CPU: 1 UID: 0 PID: 13202 Comm: syz.5.2311 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 367.173378][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.173392][T13202] Call Trace: [ 367.173400][T13202] [ 367.173409][T13202] dump_stack_lvl+0x189/0x250 [ 367.173441][T13202] ? __pfx____ratelimit+0x10/0x10 [ 367.173471][T13202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.173496][T13202] ? __pfx__printk+0x10/0x10 [ 367.173524][T13202] ? __might_fault+0xb0/0x130 [ 367.173565][T13202] should_fail_ex+0x414/0x560 [ 367.173592][T13202] _copy_from_user+0x2d/0xb0 [ 367.173622][T13202] ___sys_recvmsg+0x12e/0x510 [ 367.173653][T13202] ? __pfx____sys_recvmsg+0x10/0x10 [ 367.173714][T13202] ? __might_fault+0xb0/0x130 [ 367.173746][T13202] do_recvmmsg+0x307/0x770 [ 367.173782][T13202] ? __pfx_do_recvmmsg+0x10/0x10 [ 367.173821][T13202] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 367.173872][T13202] __x64_sys_recvmmsg+0x190/0x240 [ 367.173901][T13202] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 367.173924][T13202] ? rcu_is_watching+0x15/0xb0 [ 367.173955][T13202] ? do_syscall_64+0xbe/0x3b0 [ 367.173989][T13202] do_syscall_64+0xfa/0x3b0 [ 367.174018][T13202] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.174046][T13202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.174067][T13202] ? clear_bhb_loop+0x60/0xb0 [ 367.174092][T13202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.174112][T13202] RIP: 0033:0x7f186c58e929 [ 367.174131][T13202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.174149][T13202] RSP: 002b:00007f186d3d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 367.174171][T13202] RAX: ffffffffffffffda RBX: 00007f186c7b5fa0 RCX: 00007f186c58e929 [ 367.174187][T13202] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 367.174201][T13202] RBP: 00007f186d3d3090 R08: 0000000000000000 R09: 0000000000000000 [ 367.174215][T13202] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 367.174227][T13202] R13: 0000000000000000 R14: 00007f186c7b5fa0 R15: 00007fff4a7f7788 [ 367.174260][T13202] [ 367.692375][T13218] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 367.707558][T13218] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 367.755137][T13226] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 368.140953][T13237] vlan2: entered promiscuous mode [ 368.443763][T13255] 8021q: VLANs not supported on wlan1 [ 368.632253][T13263] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 368.687769][T13266] FAULT_INJECTION: forcing a failure. [ 368.687769][T13266] name failslab, interval 1, probability 0, space 0, times 0 [ 368.723326][T13266] CPU: 1 UID: 0 PID: 13266 Comm: syz.1.2329 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 368.723360][T13266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.723373][T13266] Call Trace: [ 368.723382][T13266] [ 368.723391][T13266] dump_stack_lvl+0x189/0x250 [ 368.723422][T13266] ? __pfx____ratelimit+0x10/0x10 [ 368.723452][T13266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.723477][T13266] ? __pfx__printk+0x10/0x10 [ 368.723512][T13266] ? __pfx___might_resched+0x10/0x10 [ 368.723542][T13266] should_fail_ex+0x414/0x560 [ 368.723568][T13266] should_failslab+0xa8/0x100 [ 368.723601][T13266] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 368.723632][T13266] ? __get_vm_area_node+0x13f/0x300 [ 368.723665][T13266] __get_vm_area_node+0x13f/0x300 [ 368.723699][T13266] __vmalloc_node_range_noprof+0x301/0x12f0 [ 368.723731][T13266] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 368.723754][T13266] ? is_bpf_text_address+0x26/0x2b0 [ 368.723803][T13266] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 368.723832][T13266] ? __might_fault+0xb0/0x130 [ 368.723859][T13266] ? __pfx_aa_get_newest_label+0x10/0x10 [ 368.723881][T13266] ? _parse_integer_limit+0x1ae/0x1f0 [ 368.723909][T13266] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 368.723928][T13266] __vmalloc_noprof+0xb1/0xf0 [ 368.723959][T13266] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 368.723983][T13266] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 368.724010][T13266] bpf_prog_alloc+0x3c/0x1a0 [ 368.724034][T13266] bpf_prog_load+0x735/0x1930 [ 368.724069][T13266] ? __pfx_bpf_prog_load+0x10/0x10 [ 368.724113][T13266] ? bpf_lsm_bpf+0x9/0x20 [ 368.724137][T13266] ? security_bpf+0x7e/0x300 [ 368.724160][T13266] __sys_bpf+0x5f1/0x860 [ 368.724193][T13266] ? __pfx___sys_bpf+0x10/0x10 [ 368.724246][T13266] ? ksys_write+0x22a/0x250 [ 368.724276][T13266] ? __pfx_ksys_write+0x10/0x10 [ 368.724300][T13266] ? rcu_is_watching+0x15/0xb0 [ 368.724333][T13266] __x64_sys_bpf+0x7c/0x90 [ 368.724363][T13266] do_syscall_64+0xfa/0x3b0 [ 368.724392][T13266] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.724420][T13266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.724441][T13266] ? clear_bhb_loop+0x60/0xb0 [ 368.724466][T13266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.724487][T13266] RIP: 0033:0x7f91ab98e929 [ 368.724506][T13266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.724524][T13266] RSP: 002b:00007f91ac872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.724547][T13266] RAX: ffffffffffffffda RBX: 00007f91abbb5fa0 RCX: 00007f91ab98e929 [ 368.724562][T13266] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 368.724576][T13266] RBP: 00007f91ac872090 R08: 0000000000000000 R09: 0000000000000000 [ 368.724589][T13266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.724601][T13266] R13: 0000000000000000 R14: 00007f91abbb5fa0 R15: 00007fff8c1eb248 [ 368.724634][T13266] [ 368.724645][T13266] syz.1.2329: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 369.118238][T13266] CPU: 1 UID: 0 PID: 13266 Comm: syz.1.2329 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 369.118271][T13266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.118282][T13266] Call Trace: [ 369.118290][T13266] [ 369.118298][T13266] dump_stack_lvl+0x189/0x250 [ 369.118327][T13274] pim6reg: entered allmulticast mode [ 369.118330][T13266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.118357][T13266] ? __pfx__printk+0x10/0x10 [ 369.118384][T13266] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 369.118407][T13266] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 369.118448][T13266] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 369.118484][T13266] warn_alloc+0x214/0x310 [ 369.118513][T13266] ? __pfx_warn_alloc+0x10/0x10 [ 369.118536][T13266] ? __get_vm_area_node+0x13f/0x300 [ 369.118575][T13266] ? __get_vm_area_node+0x2b5/0x300 [ 369.118616][T13266] __vmalloc_node_range_noprof+0x326/0x12f0 [ 369.118654][T13266] ? is_bpf_text_address+0x26/0x2b0 [ 369.118707][T13266] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 369.118740][T13266] ? __might_fault+0xb0/0x130 [ 369.118769][T13266] ? __pfx_aa_get_newest_label+0x10/0x10 [ 369.118792][T13266] ? _parse_integer_limit+0x1ae/0x1f0 [ 369.118823][T13266] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 369.118843][T13266] __vmalloc_noprof+0xb1/0xf0 [ 369.118877][T13266] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 369.118903][T13266] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 369.118932][T13266] bpf_prog_alloc+0x3c/0x1a0 [ 369.118958][T13266] bpf_prog_load+0x735/0x1930 [ 369.118995][T13266] ? __pfx_bpf_prog_load+0x10/0x10 [ 369.119045][T13266] ? bpf_lsm_bpf+0x9/0x20 [ 369.119070][T13266] ? security_bpf+0x7e/0x300 [ 369.119094][T13266] __sys_bpf+0x5f1/0x860 [ 369.119131][T13266] ? __pfx___sys_bpf+0x10/0x10 [ 369.119179][T13266] ? ksys_write+0x22a/0x250 [ 369.119212][T13266] ? __pfx_ksys_write+0x10/0x10 [ 369.119239][T13266] ? rcu_is_watching+0x15/0xb0 [ 369.119279][T13266] __x64_sys_bpf+0x7c/0x90 [ 369.119313][T13266] do_syscall_64+0xfa/0x3b0 [ 369.119344][T13266] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.119375][T13266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.119399][T13266] ? clear_bhb_loop+0x60/0xb0 [ 369.119433][T13266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.119456][T13266] RIP: 0033:0x7f91ab98e929 [ 369.119476][T13266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.119496][T13266] RSP: 002b:00007f91ac872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.119523][T13266] RAX: ffffffffffffffda RBX: 00007f91abbb5fa0 RCX: 00007f91ab98e929 [ 369.119540][T13266] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 369.119554][T13266] RBP: 00007f91ac872090 R08: 0000000000000000 R09: 0000000000000000 [ 369.119569][T13266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.119582][T13266] R13: 0000000000000000 R14: 00007f91abbb5fa0 R15: 00007fff8c1eb248 [ 369.119617][T13266] [ 369.121959][T13266] Mem-Info: [ 369.475113][T13266] active_anon:4989 inactive_anon:0 isolated_anon:0 [ 369.475113][T13266] active_file:1730 inactive_file:39937 isolated_file:0 [ 369.475113][T13266] unevictable:768 dirty:148 writeback:0 [ 369.475113][T13266] slab_reclaimable:12508 slab_unreclaimable:131097 [ 369.475113][T13266] mapped:39692 shmem:1363 pagetables:1237 [ 369.475113][T13266] sec_pagetables:0 bounce:0 [ 369.475113][T13266] kernel_misc_reclaimable:0 [ 369.475113][T13266] free:1270658 free_pcp:14130 free_cma:0 [ 369.518876][T13285] __nla_validate_parse: 3 callbacks suppressed [ 369.518902][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2335'. [ 369.605123][T13266] Node 0 active_anon:20048kB inactive_anon:0kB active_file:6920kB inactive_file:159548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158908kB dirty:592kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13760kB pagetables:4736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 369.707069][T13266] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 369.733687][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2338'. [ 369.802735][T13266] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.880522][T13266] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 369.918667][T13266] Node 0 DMA32 free:1166388kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19872kB inactive_anon:0kB active_file:6920kB inactive_file:157968kB unevictable:1536kB writepending:608kB present:3129332kB managed:2558376kB mlocked:0kB bounce:0kB free_pcp:38656kB local_pcp:17708kB free_cma:0kB [ 370.016373][T13266] lowmem_reserve[]: 0 0 1 1 1 [ 370.031406][T13266] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 370.144526][T13266] lowmem_reserve[]: 0 0 0 0 0 [ 370.164797][T13266] Node 1 Normal free:3901300kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16804kB local_pcp:8740kB free_cma:0kB [ 370.238318][T13266] lowmem_reserve[]: 0 0 0 0 0 [ 370.253101][T13266] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 370.267884][T13311] block nbd3: NBD_DISCONNECT [ 370.294308][T13311] block nbd3: Send disconnect failed -107 [ 370.297092][T13266] Node 0 DMA32: 1412*4kB (UME) 733*8kB (UME) 607*16kB (UM) 218*32kB (UM) 490*64kB (UME) 116*128kB (UM) 28*256kB (UM) 10*512kB (UME) 4*1024kB (M) 9*2048kB (UM) 258*4096kB (M) = 1165992kB [ 370.335550][T13311] block nbd3: shutting down sockets [ 370.399781][T13266] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 370.447328][T13266] Node 1 Normal: 167*4kB (UME) 45*8kB (UME) 37*16kB (UME) 159*32kB (UME) 43*64kB (UME) 11*128kB (UME) 3*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3901300kB [ 370.471733][T13320] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2346'. [ 370.512314][T13266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.522058][T13320] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2346'. [ 370.522232][T13320] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2346'. [ 370.591036][T13325] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2349'. [ 370.600888][T13266] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 370.621387][T13266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.666763][T13266] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 370.697272][T13266] 43027 total pagecache pages [ 370.702131][T13266] 0 pages in swap cache [ 370.709368][T13266] Free swap = 124996kB [ 370.713853][T13266] Total swap = 124996kB [ 370.718726][T13266] 2097051 pages RAM [ 370.723222][T13266] 0 pages HighMem/MovableOnly [ 370.748608][T13266] 425415 pages reserved [ 370.755194][T13266] 0 pages cma reserved [ 370.919054][T13337] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2352'. [ 371.154844][T13352] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2353'. [ 371.216894][T13354] tipc: Enabling of bearer rejected, already enabled [ 371.251711][T13354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2358'. [ 371.338327][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2359'. [ 371.600857][T13363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.140861][T13375] x_tables: duplicate underflow at hook 2 [ 372.176186][T13380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.873190][T13401] FAULT_INJECTION: forcing a failure. [ 372.873190][T13401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.905705][T13395] syzkaller0: entered promiscuous mode [ 372.912059][T13395] syzkaller0: entered allmulticast mode [ 372.924502][T13401] CPU: 1 UID: 0 PID: 13401 Comm: syz.1.2371 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 372.924535][T13401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 372.924548][T13401] Call Trace: [ 372.924556][T13401] [ 372.924565][T13401] dump_stack_lvl+0x189/0x250 [ 372.924596][T13401] ? __pfx____ratelimit+0x10/0x10 [ 372.924627][T13401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.924652][T13401] ? __pfx__printk+0x10/0x10 [ 372.924680][T13401] ? __might_fault+0xb0/0x130 [ 372.924721][T13401] should_fail_ex+0x414/0x560 [ 372.924749][T13401] _copy_from_user+0x2d/0xb0 [ 372.924778][T13401] ___sys_recvmsg+0x12e/0x510 [ 372.924809][T13401] ? __pfx____sys_recvmsg+0x10/0x10 [ 372.924868][T13401] ? __might_fault+0xb0/0x130 [ 372.924906][T13401] do_recvmmsg+0x307/0x770 [ 372.924941][T13401] ? __pfx_do_recvmmsg+0x10/0x10 [ 372.924979][T13401] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 372.925031][T13401] __x64_sys_recvmmsg+0x190/0x240 [ 372.925060][T13401] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 372.925083][T13401] ? rcu_is_watching+0x15/0xb0 [ 372.925113][T13401] ? do_syscall_64+0xbe/0x3b0 [ 372.925149][T13401] do_syscall_64+0xfa/0x3b0 [ 372.925185][T13401] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.925213][T13401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.925234][T13401] ? clear_bhb_loop+0x60/0xb0 [ 372.925259][T13401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.925279][T13401] RIP: 0033:0x7f91ab98e929 [ 372.925297][T13401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.925316][T13401] RSP: 002b:00007f91ac872038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 372.925338][T13401] RAX: ffffffffffffffda RBX: 00007f91abbb5fa0 RCX: 00007f91ab98e929 [ 372.925353][T13401] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 372.925368][T13401] RBP: 00007f91ac872090 R08: 0000000000000000 R09: 0000000000000000 [ 372.925380][T13401] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 372.925393][T13401] R13: 0000000000000000 R14: 00007f91abbb5fa0 R15: 00007fff8c1eb248 [ 372.925426][T13401] [ 375.242228][T13429] __nla_validate_parse: 7 callbacks suppressed [ 375.242249][T13429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2376'. [ 375.381523][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2378'. [ 375.425717][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2378'. [ 375.562926][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'. [ 375.573948][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2380'. [ 375.584263][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2380'. [ 376.138545][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2387'. [ 376.251088][T13473] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.2390'. [ 376.307415][ T5167] Bluetooth: hci6: command 0x0405 tx timeout [ 376.724522][T13483] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2396'. [ 376.754859][T13483] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2396'. [ 377.134954][T13498] netlink: 'syz.3.2401': attribute type 1 has an invalid length. [ 377.139833][T13499] pimreg: entered allmulticast mode [ 377.303402][T13505] tipc: Enabling of bearer rejected, failed to enable media [ 377.391045][T13512] block nbd5: NBD_DISCONNECT [ 377.403204][T13512] block nbd5: Send disconnect failed -107 [ 377.412528][T13512] block nbd5: shutting down sockets [ 377.513214][T13519] block nbd4: NBD_DISCONNECT [ 377.544994][T13519] block nbd4: Send disconnect failed -107 [ 377.572753][T13519] block nbd4: shutting down sockets [ 378.109989][T13543] tipc: Resetting bearer [ 381.095432][T13622] __nla_validate_parse: 9 callbacks suppressed [ 381.095452][T13622] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2442'. [ 381.255514][T13625] netlink: 'syz.3.2443': attribute type 10 has an invalid length. [ 381.905430][T13645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2447'. [ 381.933429][T13647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2449'. [ 381.958650][T13647] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2449'. [ 381.993729][T13647] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2449'. [ 382.464890][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2454'. [ 382.617182][ T31] INFO: task syz.0.1216:9762 blocked for more than 143 seconds. [ 382.625055][ T31] Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 [ 382.644532][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.674399][ T31] task:syz.0.1216 state:D stack:25352 pid:9762 tgid:9761 ppid:5850 task_flags:0x400140 flags:0x00004004 [ 382.697014][ T31] Call Trace: [ 382.700446][ T31] [ 382.705783][ T31] __schedule+0x16f5/0x4d00 [ 382.724124][ T31] ? __lock_acquire+0xab9/0xd20 [ 382.741929][ T31] ? schedule+0x165/0x360 [ 382.752885][ T31] ? __pfx___schedule+0x10/0x10 [ 382.768327][ T31] ? schedule+0x91/0x360 [ 382.780632][ T31] schedule+0x165/0x360 [ 382.790632][ T31] schedule_preempt_disabled+0x13/0x30 [ 382.811221][ T31] __mutex_lock+0x724/0xe80 [ 382.826022][ T31] ? __mutex_lock+0x51b/0xe80 [ 382.841676][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 382.862301][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 382.872371][ T31] ? __nlmsg_put+0xef/0x1b0 [ 382.889407][ T31] ? genlmsg_put+0x137/0x2e0 [ 382.900750][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 382.911476][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 382.925017][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 382.935014][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 382.950861][ T31] ? kernel_text_address+0xa5/0xe0 [ 382.959642][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 382.967685][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 382.977275][ T31] genl_rcv_msg+0x60e/0x790 [ 382.984178][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.993340][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 383.003942][ T31] netlink_rcv_skb+0x208/0x470 [ 383.012920][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.021835][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.032663][ T31] ? down_read+0x1ad/0x2e0 [ 383.044432][ T31] genl_rcv+0x28/0x40 [ 383.053215][ T31] netlink_unicast+0x759/0x8e0 [ 383.063801][ T31] netlink_sendmsg+0x805/0xb30 [ 383.070974][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.080859][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 383.085866][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.093416][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.103318][ T31] __sock_sendmsg+0x21c/0x270 [ 383.110698][ T31] ____sys_sendmsg+0x505/0x830 [ 383.115538][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.125441][ T31] ? import_iovec+0x74/0xa0 [ 383.132812][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 383.141999][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.149519][ T31] ? futex_wake+0x458/0x500 [ 383.154124][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 383.163185][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 383.171197][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.179809][ T31] ? rcu_is_watching+0x15/0xb0 [ 383.184659][ T31] ? do_syscall_64+0xbe/0x3b0 [ 383.193097][ T31] do_syscall_64+0xfa/0x3b0 [ 383.200648][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.205921][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.215752][ T31] ? clear_bhb_loop+0x60/0xb0 [ 383.223611][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.233517][ T31] RIP: 0033:0x7fb9fcf8e929 [ 383.241937][ T31] RSP: 002b:00007fb9fdeb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.253687][ T31] RAX: ffffffffffffffda RBX: 00007fb9fd1b5fa0 RCX: 00007fb9fcf8e929 [ 383.264145][ T31] RDX: 0000000000040000 RSI: 0000200000000540 RDI: 0000000000000003 [ 383.286087][ T31] RBP: 00007fb9fd010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 383.294831][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.306945][ T31] R13: 0000000000000000 R14: 00007fb9fd1b5fa0 R15: 00007ffd7df40438 [ 383.315003][ T31] [ 383.324397][ T31] [ 383.324397][ T31] Showing all locks held in the system: [ 383.333973][ T31] 1 lock held by khungtaskd/31: [ 383.345302][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 383.362720][ T31] 2 locks held by getty/5606: [ 383.368173][ T31] #0: ffff8880354e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 383.383966][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 383.394929][ T31] 3 locks held by kworker/1:7/6992: [ 383.406125][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 383.423265][ T31] #1: ffffc9001b447bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 383.435213][ T31] #2: ffffffff8e144b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 383.451825][ T31] 2 locks held by syz.2.837/8546: [ 383.457899][ T31] #0: ffffffff8f5839b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 383.466169][ T31] #1: ffffffff8e41b8c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 383.478513][ T31] 2 locks held by syz.0.1216/9762: [ 383.483668][ T31] #0: ffffffff8f5839b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 383.498586][ T31] #1: ffffffff8e41b8c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 383.513206][ T31] 3 locks held by kworker/u8:11/11641: [ 383.521238][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 383.539764][ T31] #1: ffffc900041f7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 383.553928][ T31] #2: ffffffff8f51e988 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 383.568999][ T31] 2 locks held by syz.5.2426/13606: [ 383.574257][ T31] #0: ffff88806c128208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 383.587023][ T31] #1: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 383.603813][ T31] 2 locks held by syz.3.2447/13637: [ 383.609875][ T31] #0: ffffffff8f51e988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 383.625895][ T31] #1: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 383.643130][ T31] 3 locks held by syz.3.2447/13651: [ 383.649145][ T31] 2 locks held by syz.4.2451/13659: [ 383.654487][ T31] #0: ffff88805925b208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 383.667035][ T31] #1: ffff88804dab4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x798/0xce0 [ 383.683183][ T31] 2 locks held by syz.1.2454/13662: [ 383.689286][ T31] #0: ffffffff8fa42070 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 383.705232][ T31] #1: ffffffff8f51e988 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 383.739473][ T31] [ 383.748264][ T31] ============================================= [ 383.748264][ T31] [ 383.773272][T13662] vlan2: entered promiscuous mode [ 383.776712][ T31] NMI backtrace for cpu 1 [ 383.776742][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 383.776771][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.776785][ T31] Call Trace: [ 383.776799][ T31] [ 383.776809][ T31] dump_stack_lvl+0x189/0x250 [ 383.776844][ T31] ? __wake_up_klogd+0xd9/0x110 [ 383.776882][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.776909][ T31] ? __pfx__printk+0x10/0x10 [ 383.776957][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 383.776988][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 383.777013][ T31] ? _printk+0xcf/0x120 [ 383.777050][ T31] ? __pfx__printk+0x10/0x10 [ 383.777082][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 383.777109][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 383.777141][ T31] watchdog+0xfee/0x1030 [ 383.777165][ T31] ? watchdog+0x1de/0x1030 [ 383.777197][ T31] kthread+0x70e/0x8a0 [ 383.777234][ T31] ? __pfx_watchdog+0x10/0x10 [ 383.777253][ T31] ? __pfx_kthread+0x10/0x10 [ 383.777288][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 383.777318][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.777347][ T31] ? __pfx_kthread+0x10/0x10 [ 383.777381][ T31] ret_from_fork+0x3fc/0x770 [ 383.777418][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 383.777449][ T31] ? __switch_to_asm+0x39/0x70 [ 383.777477][ T31] ? __switch_to_asm+0x33/0x70 [ 383.777505][ T31] ? __pfx_kthread+0x10/0x10 [ 383.777539][ T31] ret_from_fork_asm+0x1a/0x30 [ 383.777587][ T31] [ 383.777596][ T31] Sending NMI from CPU 1 to CPUs 0: [ 383.947851][ C0] NMI backtrace for cpu 0 [ 383.947870][ C0] CPU: 0 UID: 0 PID: 13659 Comm: syz.4.2451 Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 383.947892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.947903][ C0] RIP: 0010:debug_check_no_obj_freed+0x230/0x470 [ 383.947938][ C0] Code: 08 4c 89 ff e8 71 b7 5b fd 49 8b 07 48 89 44 24 18 4d 8d 67 18 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 e7 e8 46 b7 5b fd 49 8b 2c 24 48 3b 6c 24 50 0f 92 c0 [ 383.947953][ C0] RSP: 0018:ffffc90003fb7640 EFLAGS: 00000046 [ 383.947969][ C0] RAX: 1ffff1100348b4c0 RBX: 0000000000000001 RCX: dffffc0000000000 [ 383.947982][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90003fb7520 [ 383.947994][ C0] RBP: ffff888144a94210 R08: 0000000000000003 R09: 0000000000000004 [ 383.948005][ C0] R10: dffffc0000000000 R11: fffff520007f6ea4 R12: ffff88801a45a600 [ 383.948019][ C0] R13: ffff88807dd9c000 R14: 1ffff1100348b4bd R15: ffff88801a45a5e8 [ 383.948033][ C0] FS: 00007fb3f23ec6c0(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000 [ 383.948048][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.948060][ C0] CR2: 0000200001000000 CR3: 0000000055bf2000 CR4: 00000000003526f0 [ 383.948076][ C0] Call Trace: [ 383.948083][ C0] [ 383.948094][ C0] ? __page_table_check_zero+0xba/0x530 [ 383.948125][ C0] __free_frozen_pages+0x509/0xe70 [ 383.948157][ C0] vfree+0x25a/0x400 [ 383.948183][ C0] packet_set_ring+0x1886/0x2380 [ 383.948223][ C0] ? __pfx_packet_set_ring+0x10/0x10 [ 383.948243][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 383.948264][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.948288][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 383.948307][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 383.948333][ C0] packet_release+0x7e6/0xce0 [ 383.948353][ C0] ? __pfx_packet_release+0x10/0x10 [ 383.948369][ C0] ? down_write+0x162/0x1f0 [ 383.948389][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 383.948416][ C0] sock_close+0xc3/0x240 [ 383.948440][ C0] ? __pfx_sock_close+0x10/0x10 [ 383.948462][ C0] __fput+0x449/0xa70 [ 383.948487][ C0] task_work_run+0x1d1/0x260 [ 383.948514][ C0] ? __pfx_task_work_run+0x10/0x10 [ 383.948547][ C0] get_signal+0x11ed/0x1340 [ 383.948571][ C0] ? kick_process+0xeb/0x160 [ 383.948599][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 383.948626][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 383.948654][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 383.948689][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 383.948709][ C0] exit_to_user_mode_loop+0x75/0x110 [ 383.948727][ C0] do_syscall_64+0x2bd/0x3b0 [ 383.948752][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.948775][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.948793][ C0] ? clear_bhb_loop+0x60/0xb0 [ 383.948813][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.948830][ C0] RIP: 0033:0x7fb3f158e929 [ 383.948844][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.948858][ C0] RSP: 002b:00007fb3f23ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 383.948876][ C0] RAX: ffffffffffffffea RBX: 00007fb3f17b6080 RCX: 00007fb3f158e929 [ 383.948889][ C0] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 383.948899][ C0] RBP: 00007fb3f1610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 383.948911][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.948921][ C0] R13: 0000000000000001 R14: 00007fb3f17b6080 R15: 00007ffd106465d8 [ 383.948943][ C0] [ 384.364523][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 384.371443][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-01485-g8a2a6bb01664 #0 PREEMPT(full) [ 384.383282][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.393381][ T31] Call Trace: [ 384.396693][ T31] [ 384.399647][ T31] dump_stack_lvl+0x99/0x250 [ 384.404290][ T31] ? __asan_memcpy+0x40/0x70 [ 384.408920][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.414244][ T31] ? __pfx__printk+0x10/0x10 [ 384.418901][ T31] panic+0x2db/0x790 [ 384.422846][ T31] ? __pfx_panic+0x10/0x10 [ 384.427297][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 384.433237][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 384.438657][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 384.444853][ T31] watchdog+0x102d/0x1030 [ 384.449295][ T31] ? watchdog+0x1de/0x1030 [ 384.453755][ T31] kthread+0x70e/0x8a0 [ 384.457865][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.462568][ T31] ? __pfx_kthread+0x10/0x10 [ 384.467194][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.472433][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.477667][ T31] ? __pfx_kthread+0x10/0x10 [ 384.482306][ T31] ret_from_fork+0x3fc/0x770 [ 384.486937][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 384.492088][ T31] ? __switch_to_asm+0x39/0x70 [ 384.496891][ T31] ? __switch_to_asm+0x33/0x70 [ 384.501704][ T31] ? __pfx_kthread+0x10/0x10 [ 384.506353][ T31] ret_from_fork_asm+0x1a/0x30 [ 384.511174][ T31] [ 384.515354][ T31] Kernel Offset: disabled [ 384.519696][ T31] Rebooting in 86400 seconds..