last executing test programs: 21.883976857s ago: executing program 4 (id=1571): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xe0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x60, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x124}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 21.578802689s ago: executing program 4 (id=1574): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00", @ANYRES16=r3, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r4], 0x1c}}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 21.357142684s ago: executing program 4 (id=1576): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x27, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000005221dbdf250a00"/20], 0x14}}, 0x800) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x9, 0x1}}}, 0x24}}, 0x4000) 21.072394936s ago: executing program 4 (id=1577): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) clock_gettime(0x3, &(0x7f0000000380)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) clock_gettime(0x3, &(0x7f0000000380)) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) 20.943053384s ago: executing program 4 (id=1578): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="ee", 0x1}, {&(0x7f0000000300)="2f58e3e2ccf99895b492509310fa575f8e78ce2416784da177c785f5b6b0d6f2a26653e0bbf48f4fd14efa76fe883193c5045c0f8b88fa7510294fb20b9e6f65e7ed7c63597f97ee8b0f215fda21b53b43327e44065bf60fda83e023283ca300f3d239de0bf1a82b7b8186f4b8c45771a0e78ee951346ec5753beb37fbc59e71ea7fec21c1e887a42bd944c28903d752702b4965a9db137a291f138b40a28d486c8216e2edac3dc9fbe29bb9f6335481c8cf0aa29279348253c2a7af81c93fa93f931877e118c7d2f6d1ab19a2c5ae", 0xcf}, {&(0x7f0000000080)="df2a660e07c1a9585aab7a37c277f54bc9b17cd386678486e70638e94c982eafd4df2a98e8e55d92569dfae9909e0b14a5b7dd3b06ae45193ec08c000e222d48b7c0cb5f748730a9332da29d134a0e31544247d4fd894f444c158f43b004845b5bb3c74076b56732a7", 0x69}], 0x3}, 0x4044853) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xffffffffffffffd1}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14}, 0x94) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="22003300d00000000802110000010802110000005050505050500000040400000000000089bf3d4072716ed72962e112c5f2a64f5756e8ef2dd2aa7c1d031688319964d70e0d"], 0x40}}, 0x0) 20.837046891s ago: executing program 3 (id=1579): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e", 0xf3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666d", 0x23}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c", 0xbb}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 20.538947626s ago: executing program 4 (id=1581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, 0x0, 0x40400c0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r4, r3, 0x2f}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r4, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRES32], 0x2c}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000180)=0x2, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r8, {0x8, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r10, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}]}]}, 0x28}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00%'], 0x33fe0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r15 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r14, &(0x7f0000000380)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14, 0xfffe}, @ipv4=@gre={{0x6, 0x4, 0x3, 0x4, 0x253, 0x65, 0x0, 0x7c, 0x2f, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xf6, 0x2, [0x7, 0x7], "6606ac7a3f74483ece9ff7555b2a2e1b4e62aa72251caadc104bc0bc2eceaaba96464585aedacb16977335cf55e54e064e6db6ba85cd908d5c1a229b2b057e172edd7a60dbed4f295a129ff8d092f16bbd5ab482f84d125b7fba7fb75ff37334397d0382521883aa17ec935db9a9727d87ec45ffaeedafb744f4905cfba6fe1150f2deb2ea7decf650790540f1a6112001e0f5dd8af29333b5483224d1325785bf7d92b2e83f8d1e8e71ebff303cabfa02f78080857978710aa63ac157f252103462836a7928c47b929b8c8022463b42a8e6f957c16be8801b73c5202938cedee5f770d7c4fcf785e6b3027f6f904dcf6b6dedf5bc1d"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x7fff], "3ad572fd76f9e4e6029cd4dea76c1c0c40fad14d772f5da8a4d1cd6a17c6c81e2d4670e218a4a3be08"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "76cace1dc5ade8deb25332d088ef2cedbb35937c0c301bc9bde5485f78544d81b90a0adebf3177cc47b32e7c34397adbd89843f77b35699e9645327faf140e907eb7faa2f922882f1e702346a38fd9c7005acbe1b80c2f5baf8b291d6b7d269995ec514200ce424c014b66de5a96498a264b92798314c67fbd19f6529d89ee462d4f7aa0e4c8bd1f53677d3107fc3612b49edb4203e2b95795b55b2f545e58e4a729943e"}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0xe, 0x2, 0x0, 0x1, 0x7, 0x3}, 0x1, {0xf3}}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0x4, 0x3, 0x0, 0x1, 0x3, 0xdf}, 0x2, {0x2b, 0x3, 0x1, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "24a14ca14a40140e96e6d71c5afd757f48cb35e69b606bb96b1826953a057d6e0a0ae39c23dc1a0dca25ce458220"}}}}, 0x261) sendmsg$NFT_BATCH(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYRES16=r6], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 20.149933609s ago: executing program 0 (id=1582): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000180)={0xe, {{0xa, 0x4e23, 0x6, @mcast1, 0x9}}, {{0xa, 0x4e23, 0xffffffff, @local, 0xfff}}}, 0x108) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 20.018477925s ago: executing program 0 (id=1585): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x8, 0x0) 19.840871135s ago: executing program 3 (id=1587): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000100081", 0x7}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r5, &(0x7f0000000040), 0x2) sendmsg$sock(r3, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) 19.840502948s ago: executing program 1 (id=1588): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fc", 0x39}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="130000001a0069ae26bd7000000000001c"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="07db4866fe0af3b5cd6e41d7b364f5ca0500038e0000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) close(r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0xd75) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x61) 19.829464305s ago: executing program 0 (id=1589): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="768af60c12af27d3b0dd", 0xa}, {&(0x7f0000000180)="6aa46d2dcf83aa73785a93eb3f62db8164591cabe090b81376d09ddfbd1ffcaaa241ee8969907cdb98bed669465f9d1aba98b69f91c8b8a6bc1e9d49110eaa71a612ff5a3e264315e82e872a0b4910d9", 0x50}, {&(0x7f00000003c0)="5f8dd2b68727ed6521812861a09a24865d9a5e64d9812b7873c0588c62bbebd504fc1a4f588d3d27cd80b6d1c9447f315ca25bcbd3efe3db3d6d8d34d040fba64ac889b524d47ff126c00eb7440c9fedccb4fde0d35e8e6e654ef1a5104c2451b50c7f49d3e341bf5bbdfc97ca23c1b7ebcb4dc0ee8e01017d74a98dab74e2baf2", 0x81}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001900)="4af13274b0d44b5685c25336107254d5642cd9b75f59e09ae3a2166d6f32fef76dc6961578f4f37ea660112e7b955d39b65dfad0ea3c6b0d10e29f70bdfb6bfab442c994e0a2c0", 0x47}, {&(0x7f0000000ac0)="acb6d9cce9d3635e5d9ada772158ed22aa79f0fbb852c1a327b25355e615c0ce52d17c45cd48e14905cd1f2a9c48be2574bcbc504efd0d0aa87002494668712495351b18e4d1bddf03c9879f8cb9a91d6c266cc0de24eb8c1197350e2162e876a96f558d77d8d58fce8a1b4206a6b6381d4e33daa088171b14cdf79dca94792e98143cecd4d3d4707060a9af213aa5b996569d76a0f53f0fc7cfa1143c5acdf49c46afe7bdb322bcbbeb8504a0c736b20a332b", 0xb3}], 0x2, &(0x7f00000019c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)="6692dc184847677b76969663fe6d20c19375ac0c5934b9302938438a9334c95bb8fb17f7459e23b83bd79e980d388026fb088ece84c0304830138ef1fac1e9e5d98e02847ea7880498919f8e2f3dd0d0fe3052c7d5839f34772d8159d2e2baf80413dc114dffe4285c80808b7036830e073b56ae58f14d18750c1f3120e68731873d567fb277d3aba1b8b5bdc3c19c197823d945d5993638bfb4e6a3dcd12c13fb608873fdcf0c890d5123578a54f378366b959c6566b7ffa531a4ba94f001bcf2523d9753178734d6ac70519154e6f35d1dc5a1", 0xd4}, {&(0x7f0000000c80)="e496264884d8f9bf96e9441e40f30e63f904463eb1e8541affafbb825adbc1464f656c239bcd721d47b0e0", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001100)="62cc6a6d8d240858502132838ebec281d68db18d9107b5accf56ea36b336540414aadfd4ecc00619d97b2cda966ca746c66bc18293afca9fc5d16b394d2b0d5060e6ace82a8fcf2296cec066f81966e7f2831d5862e710", 0x57}], 0x1}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 19.55506626s ago: executing program 3 (id=1590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xc1c6eeb1d29c64e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x840) (fail_nth: 8) 19.523694059s ago: executing program 1 (id=1591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x16, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x1, 0x4, 0xa, 0x2, 0x50, 0x10}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc6}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @alu={0x7, 0x0, 0x4, 0x4, 0x2, 0x40, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x59, &(0x7f00000001c0)=""/89, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x6, 0x10, 0x8}, 0x10, 0x12bfa, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r0, r0, r0, r0], &(0x7f0000000700)=[{0x2, 0x1, 0x4, 0x7}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fb, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aaa02035b39b7e115ec3c05b8f2b28bc10846686ee1d44d0b0ed8f3b578a87317c2bbd55bb9489a3ea286d"], 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x7000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket(0x11, 0x800000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x10, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 19.008805561s ago: executing program 3 (id=1592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x1, 0x1, 0x3, 0x0, 0x400, 0x5, 0xff00}, 0x20) 18.750866784s ago: executing program 0 (id=1593): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2d, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100037000000000000000000000000bd9b7e6ddd2de3ba6c07ec7c53f04b8e08b2f9bc019e074083fcf834ebb0292ffb50fb945f4c07ccc9140dec5dc7760b2d5ac55d8d3eaa10da304e08c50b5eb099e48ba4d163edf5ef5f5474546cb05b9a520ef536f7898806bc27de32fe84c80f032567605764bcff887578503915", @ANYRES32=r3, @ANYBLOB="8304050000000000300012800b000100677265746170000020000280080005000200000008000100", @ANYRES32=r3, @ANYBLOB="0400120005000a0000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20000003}}}, 0x10) ioctl(r4, 0x1000, &(0x7f0000000140)="b7d541a9b8fb2d04ccd14dcf") sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f00000001c0)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x64010100}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@generic={0x82, 0x9, "46d2b5865926bc"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xe, 0x0, 0x2, [0x0, 0xc, 0x9, 0x4]}, @end, @cipso={0x86, 0x2c, 0x2, [{0x5, 0x11, "d08df08abf1315c24acac58f04eded"}, {0x2, 0x3, 't'}, {0x1, 0x6, "46b7072e"}, {0x2, 0xc, "ce9817bab02c3a35945f"}]}]}}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@generic={0x7, 0x2}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x26, 0x3, 0x6, [{@private=0xa010102, 0x9}, {@rand_addr=0x64010100, 0x100}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xa}, {@private=0xa010100, 0x10}]}, @lsrr={0x83, 0xb, 0x81, [@empty, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x7f, 0x3, 0xc, [{@empty, 0xfffff000}, {@remote, 0x2}, {@multicast2, 0x6}, {@private=0xa010101, 0x9}, {@broadcast, 0x1}]}, @rr={0x7, 0x27, 0x47, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local]}, @noop, @cipso={0x86, 0x4b, 0x1, [{0x1, 0xb, "732a4d791849d1f3d7"}, {0x6, 0x4, "d873"}, {0x0, 0xd, "daeebe695822512dc41c96"}, {0x2, 0x7, "f9f5040e77"}, {0x1, 0xc, "f7ac9aef925ce2f993e2"}, {0x1, 0x5, '3tc'}, {0x1, 0x2}, {0x0, 0xf, "dfd5daabb963eaf82996fba2bd"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}], 0x180}}], 0x1, 0x4880) 17.696289829s ago: executing program 1 (id=1595): ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)={0x7b, "6a3f034c8a59b0d319e01842ebf291513c2f7cdbcd9d64f6791ddcb7cc233bbd41c4fe069959a9a33d67eecf385addcb49adefc05944b44ac41a8d6d5ac256b3a87551e07c50498594638b56f4e69f8bb31e7c7783359e5b89df52ae9ed260cc4c0286763310628998a09c978abab28e54cf910291767c13ea1a615db9e3326d"}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00008b8000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 17.610923168s ago: executing program 3 (id=1596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) close(0x3) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='4\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB="079ab923ad5e88dec56922009de41c75e9682036c26005de4c155dc86855f282a283be6127c4f8b3d7c1da14e4ff5e0bd957041d2fec9212a83486fab3d8110f587b342ab8ef91c400dbc07b33d26619611888e96840de4b8f3b9cba9d6c2543eef99bfedba11604f1abec4d83e69bb887696087f5ecc3599d9b2bc86c074fe2fc937b911cb93b511ed37d431ae71ea94546445915fa6375de1488647262814c00104fc1070000000000000066bf7baa19c6dedcf3af1f994aff831e3c87a2034ff0323d9b73943781aabf42666c9d604603", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 17.610340737s ago: executing program 0 (id=1598): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e", 0xf3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666d", 0x23}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c", 0xbb}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 17.422077378s ago: executing program 1 (id=1599): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x8, 0x0) 17.292410703s ago: executing program 1 (id=1601): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fc", 0x39}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="130000001a0069ae26bd7000000000001c"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="07db4866fe0af3b5cd6e41d7b364f5ca0500038e0000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) close(r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0xd75) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x61) 17.029166112s ago: executing program 1 (id=1604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x4031, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff70, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x21, 0xffa6) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r3}, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000240)=r4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x300000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300090000000000000000000300000008000200ee90"], 0x1c}}, 0x24000044) 16.9549429s ago: executing program 3 (id=1605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x16, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x1, 0x4, 0xa, 0x2, 0x50, 0x10}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc6}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @alu={0x7, 0x0, 0x4, 0x4, 0x2, 0x40, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x59, &(0x7f00000001c0)=""/89, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x6, 0x10, 0x8}, 0x10, 0x12bfa, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r0, r0, r0, r0], &(0x7f0000000700)=[{0x2, 0x1, 0x4, 0x7}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fb, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aaa02035b39b7e115ec3c05b8f2b28bc10846686ee1d44d0b0ed8f3b578a87317c2bbd55bb9489a3ea286d"], 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x7000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket(0x11, 0x800000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x10, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 16.646688219s ago: executing program 0 (id=1607): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400"], 0x1c}], 0x1}, 0x0) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x3, 0x11, 0x9}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 16.54166024s ago: executing program 2 (id=1608): r0 = socket(0x22, 0x2, 0x1) close(r0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000000)={{r0}, "a69cc1b02e71915d0224c90e7e7899237762b1e7cc002d885f82158c53fe062faf75b0d6b99af053d218fb5560f6fbeeb4244b73e91f5a5a3d014ea125e86bbd8a5ce1aaa23a7d03e8363ee44fe4376f935b32a2c9f75245f95685d9fb04e9579c60d06b17e48b3b1465b3b080cc3fe320674215d85f24a15f64786d71e626b1ef6e03a8ec3acfe7fbede732009b84e0c0bd638aa4110924416fcec76c92d7eb25508dc853d51926c2e5474d772be7af4f8845b97d514b9fd971d368a8bc7f22f5a89c1803fd3a8cf8d66615c0fe6ed9b198d1a0fd7a8fb6825952941d99b9456e95beeee3a0da4df559537f40c9012b29f5210811394dda96f12c9b185584ec3c4ba0eab59149621bbea29e8f2eb790c83195d6d947fd02aeeec9c5c397fbf044046201e5ebd026f26f9a46796a671c2a0ce637ec3468934b5b30bac2d15071a98fa46f9b597a103661b45004e1b1e331d3a1eb00685017a08c709e3ba17160aebbfa6655e75362b6693a4bac832b21fc9dc0759c35aacaa0e60d103a830f551e67cece9c09253c8c70fd6a7d0f81f8af027fd0b1af85f7207724206cbf08e67b26556ba52e08e8e2336a4c1461342c40b537d1b17fe85b5d44e685ee81be653003cc88240f02ef6885829c48420b69539ea6d8dc8514031fea7abcd2f0cc5bb3461bd6d99c39d8b7e8cb3823713c60149a704839b97b953b186e76283e6ef5bf72740431da2c49b75f07991b813493cf2e7265441202f5c58b0d2427fc4e6d1f6627d69f00eb7e87bc7e520f1a0a51b4622f51b9dffcf9f933cce10905f12fccc34cf91decbe066e43035e1df564ab4e0891062977d6d20f8ab18d4aa7a7577ff284d05c92c5533c6a9aef17d5c5e8c25fa3c666826fb3e4ccf58d49b3b2da97ad73790f8d897ce39c3c6e073572c37969dab7edf663623dda122352e9cd0c5591ad210a2eb26e2e5f5c7305a32f9b42adc91f63f874023e680d6650fdb9d08d10214eb63cbbfcc110f567522d65decd7319a5e749b06254e1f2f4836ff3fbd757479212ac6d0ff0071c7a5857d08d1817d0bfe8e2c07b4786af38cafa5d61b1a163c41e52e03e7a8366e5a20fedbe7d052cf2557d7906ba8ac7b0559aa32a3b6b4676637f9ffacb2ba1cd2396d5ff05f00725512fb76dd8da509cecc86079e6735012f2942df1524db20caa0a311a25eecc5e336ac655f89ade1cb3a2e1a0f7eef2479872d9f191b22940bc01376f8914c95d175a957441052f5d8612c609ec246188b236a961227f136ef7b0cfdde77ee460ae7720d4d81357ff3f57a71b531ed9751068079ac4f22a160504ccfedff77cae895b4653fa9ffe98147603de573c141f07b75a2b6c79b4b9e97b1fb56d4d85bd8461075ce3cf212fea628283459c41b5ae0d853cd2524b70030567a3fd5627f84298a48e861427883a603d4bb36e8376eef0cba3afb2d2c49aff269d17e873144306ae3d826109546760751ec2498d5001586de28b3d260ff26104f6c8e14323fb7782bee545e873beeff1894521c6e0c18a076e55a412740d2829741356bc8acc6d29680ac0c4db4b19fff08d99f2fd395fb47db4ff33fa9de835b0ce6a54365a9a679e7d9ed6513d0a6e56d6b0eb695e02d91c30c0583e7891637a6c1b761a68ae30a295ee601c74e8e09ca13477014c6d7e8f18dc7174f4a403f524e52402ede63b1724758074bdac5b4cf163c7d8404faf82bd958e156dd95ec63dfa027ba1766a3ff76106fe6d9c56b763e1c7954b0ddeeaf81f3e28655c25fcec20532fac116fc317e5759e59d111bc34aa783227f506d3ede3882c2c6afb7ff97d8ee66e62f30a0cbc1923c253cfb3ad38372a51ff036f4e77c85b82cc3f4291dbef7499b2bbc1c37e32aa7fe65cdc4e0f7456cf688673c501c040ca8f7d09a016e1aec381064ff505dcdd6e6b8ada16771bdadcacaba4eb70a667ea38d77df5b98c487bb2666e077bb089954012711c14e0b7b6f99533ca1e6cf9e7130a7447ddd53d981570b1f7815c4407d80a4aeebd2e68ae95a082f048fb0b26a603068a6e92aa6c13c27729f6f82417d544fae4162dbd75c7d8ccc94db63c75f51ce561bac0df32d5c3f188ecf2152733e34beb9e83b4b24ad88cbe0bd0fdaf3c7a3d354742760c6ce2b6fd4f1e7e7f0c78791ac6966497b3ac33b641fb7ba226cff0b3b059028e6d480172ec7b9da32f4853bc0e9c959dc98e5f83c076029fe2093d0132f6bb8b585be63f6fa7b3be054f85ded2919d821fef8d130eee35afe6895a337508b6ef74f70d88ed8afba008db3177238ccf9f8e25b502c7ca77dc9508a1c38a8c5ee08aea2e05f5c50dc860569ac7830a8da1e895f2ac2e8ba2ea9937db525f38dc2f38b87a79b3922ae9d89c50950ebd96c8a084c65509f56a6d304d1ea0aa47fad6d8fdab42b52446252696909f7d6ccb0a209076775df1960c4c861365394d8758dd65556aa09ef347e44cf2954d241ee20cf2f3b1e12b6ba68bae506761b9ec63e2ed6e7b1f2745e690d91c72ad498fe38bfbfa926fc3122283029c5e3fc8834bd2cbd0a936b5b927fe73c1537b8999513df005960101e87601f5864dbf893e0b070886c189bfe39ff5996d1fc9c742c9694353067d980c0fe4023ca532023daff1e2067389ac4807c0a3be05aba72fabf647e4f0101ab6669c87d5ae0609fb32939831721beb8ccbac49b5dafab4dd5ee3fa38a6ce5148d907a2e875b6f8a3405ca95870ded90a88477685ebc7b60745b5ac7e7c39f35db966e13d6677bd8118cef079cc32e763d5f70b6495bc8424a7827de91ce91c0e7ffda48c4a2cc5e77e708f98f227e787d71fbda22845f10380ed103074d69a8606515993cf6b8abc3353bde9740e263244b1d59d0e95c968810464deb6762a4eebe996648a0458b6a2a50225f18a94dae8667ee7b28cfd3e4a239f941e5f732baf43e3d47c145abb6f142e79f28916291c5a4de025d1733b88e494c69191876e201933cfb5613fd4aeab1f41a224fb1819875d1c023c9799f15b2598486e044e6ed6b1566f5ead359df4f7bad16badbde6afef44e34a9ba7c4c1f21bf2e81e8a6ed5e94ae8d1b64036b9c939a84d810f4e298d81ba07537ac330eabd675f1488f112a1a9fbf37ea57b3cc2346b0735946594975960f3465c103e83f24196a9c3f8dd99ceef211b64ae91b083dee2f6e46ed5976b1054ba67cf13633cc67dc9d1210efa10026022203c396889e30601835ea3a2efa28d02525db71912f36978936391cf7647568fa0417fb0a793dabd4f74827a36e1f6d063d7321c7983e221a0276e7ae3200013551cb0780934bd53ba10fc357822a0323dc86108e05a1ef5bdb4cbabb442dfbdd71d765210e5b8d66efefa36a57cfef02360a9a6b1b066371e9b1c23bc5ccbc0e26cbc2bcfcffe282c4de19805d1f8f7fe738dfa8ebbd25424bfdc353d036c88a7afcc47b3a5b1ccbd7f08420914b0137fa9790ccfb7405991f3506633b3bd45036ca5375d4713a71b4994d1a755a3222a9bc220b24486bd9c30ed69465f6aef79efa86ff50e2c23756f429373c9a3ff7948a9ca56512f2ad0ec11be0d2208f8fac3796cd31b9f8852199794e5d7b86767d5e8b7e5c3d663bbea40e008665f0e1a214d30e645dacd4e8a6ff66532cb7a3622be69cc90b0e93d4c190fc462a7dd4ed466ca0ea06a69f8c0e511a229120494432de0ece0cf435a0c699005e3ad5c6690854a7dee8050396e8968ba490c473fdc825409871007c257945ec0aad5b593c962cf973c44411f851903d648590a0b060b514a2f422ad76f30b614192cb46613a106ed18d2fc717f0dbc5a0e76a8118b4393d8452c1fecd7b3d7f76b5485c22bc9baaff4b3597318516d696f4b56365e923e7fcc4c6215f2faeb400502d9bf1e937df21ef244a44b20314d91fb12b33ae2c461de2cb6914a598c7c4580e4353212e372a4d23f79fa799378147682bb2bae37d33330287a65ba4090d8555ee3a3981d23ecf96ac94f829a41fcadbb1e58a43f717def9dc62c233de5874d3029c8d34148ae87945812e4851f191c0fad6237a3918c6a3c8a06baf513024b3241cdacb6c4f3e252a1feae593292e5ffba1daa983ee76714b4ca3effb010d9ac88be8c29e8e444607c44d2ca40b77a388cc5e5dc527a5de5688efffc24d75caf26bb7f15860782fc3ad4a5a9d8b44b697cc81c81610b0d8fb03d2ac1ff39cc4ec688dd5379911c9b1ee60e5854f65c77e56bd17b6b162cd1f48f3c0dc9352f2dc3f389610d7df578b0f68bffbc38fd014c4d182138c573170480805d34b91aa2c18081966a13aaea36998d62a12d58008eaf3fe19ab3fd6332c961ac47355979ee61620b7fe7da4b710e36619533fb7ffaa6c44b62aaaa959bb6b9c8f9aceb26abc7c89a4e9ea0640d08bf97078886c678d2922a9277d958816ad0f1a7271116d227ce0abe3115bc55229ba0cccc6ab2082985917a9a579d3de2dfb7bf91a10020074e90dd19b5b59f23c0a3317b8b0fcf472859ba98cd81ad9553972ce895c90df390f37dbce355a54e9fa12636dbf0f2539c6cf6554adc09a464ab8c8511b1f901139970e25c46fe3aa5e50a0b810b2b48dde7da8999def2b245ce0329acef41483b68b8af574b560e921356233f3a33cf45d39050a8cde8e0ad9f19e9ec6415ee54053a0ac1e496113ddb6cab622c2e05145adb973297c2e97085cdf5b21a2b576aefd64e0c717c8336ca1c928c90d780a0e2d8cb4aef3e6cf97667980cba9e8d23b66954ee4ee0bbe8065af5be9f608e8c2a797a5431af66953cdc876dbcf98bb605ce65b75253fbfd49051ea9cd41815ea23dee598f220f622b78222b4d55a046a97e730520edc07c20b36c4dc059c547c00dccb77be1c261a52a7eacb5d8a2897007422d2694911a72b048f7422c4496217fe7f86e5c6043b3a371681cbe9e0a605fd8a8ecdbb7fd963e7285cbcfa4995181d8f610113c3955f5e3b70acab772c5cb1fe91523c57d86857d6238b526248de21595c0da550bb6eab2d266f6b2e4cbdb134ce2a18e8986546453682c3170b510479a7121c1d23c1538fa28b40c588decf732507ed042c57c2a6d9886fdd3d50502200100b99100ff4bbf508461e2ad60cd44fae6c96cb6ae649a5908b7af5b7bdc6bf3cf61191cc074987f20e124f63d23658bcb3cc936693587fb6c386c51b9ccc8e91cb4a7457f5f97982ea48dde89183acb9d5871f85f74a225f31aeca9532909a1d7a68975cd9f92f8882160955ead31c483a15a692eb04525886bcd1ce8e19bae916582c29ac25fca69fa4f555294a44d90f800107f0d247146443085fbb675e6ceba6ebd27e073a6d31e34776a368d9533d2df6bd181f38752f3102d5e99a196ab765caa6f1b476f2c451aa14ac66b3a0e7af731edc6a3c5b9921eda2125f055870539160c65164d6a3fcbe0986c8e98acc7a6dd479744257192f3331785d62503c39f45ef2819aee0c2668b855d4e760f93cce8233e86f31fc93573fe089a2dda946985a09bc9af475cbcea663cc101040c3d85c822a0c684353c008d6fba27753cc2962b1c50b352d627439fc63d456d527ec4d70cf06f19ce8665a9d308793897cfd9916b2e40b317d055fd4278ea5dbfade36b8b3ff387144bda10b3dfe02b19de37f09b6d3eb03e709b819f34eeaa8eaf87e1448fa14bc89d8d43ac24c65df3247933aa5b7a128dedaff901d763a64ada222a74a0cc6c1ade424422b16f58957809ea7e36cb29db631870"}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f00000013c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, 0x5, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) 16.370225684s ago: executing program 2 (id=1609): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x1, 0x5, 0x1}) sendmsg$rds(r1, &(0x7f0000003500)={&(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000003480)=[{&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f00000023c0)=""/140, 0x8c}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x5, 0x0, 0x0, 0x97fe1b95993c361d}, 0x20009000) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x17c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4b, 0x6, "eadb1195e51cedc57353744c6d0142faccee0b98b520b780aac9da00e064373f42c9baf1c9c7267fbed3c75b3854081ffa95651eb8c74c7d570bb2fc7ca19262eaefecdfcc63f5"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xca, 0x6, "2892ff343d81069bd92263643304409a854d9521799e253a7106a6a8a80b318f2f7f6326e63f47bdb354ef839ed4d6d619f5a0ab90d82fe5f0d4726ea6c5c483dacbcd48ee027f443dd789eb963d4ae800f0f52cf4d5088dbb884be3f10a19f65717c8d837e844019f235fdad012a4f6b63f5aacd7d8781d42f3f1ae308a8a40800827009c7cdb4ada24a3f3bfdae1751a6f9c720d0d08165b3b6671bb4b6a5f363f089662cf6151cfc567f4ce5ffc1bdbebb57e42bbce66fd07fb340c0ea2e67a3b4c21a179"}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x84}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x11}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x3a}]}}, @NFT_MSG_NEWCHAIN={0x138, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff0}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}]}, @NFTA_CHAIN_USERDATA={0x53, 0xc, "f7c8145c1b265769916c2038a9885559bbf9874e2893f8621b90a02bebcbd1af7578124b11cb2f1cc7ae54eb7a9903b199f6b89f02275b33ea64741f27934a8f4158849f0cf91f2c62c3fa1435ae34"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x70695399}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6caa2340}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x17c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_EXPRESSIONS={0x50, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9d}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0xe0, 0x12, 0x0, 0x1, [{0xbc, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xac, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x5c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "27140426435702d8"}, @NFTA_DATA_VALUE={0x49, 0x1, "29f5cca927e08fd826af77c23481e89c69411ca2ac1203fd81c744ca40e6205a18b2f2b4f1239dae181decd1846d3973728eb1d8960460ad0798ff459bc37703e7eb4692c8"}]}, @NFTA_BITWISE_XOR={0x2c, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}, @NFT_MSG_DELOBJ={0x100, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x87, 0x8, "de72e662ad76b9c863d68603c0b478691fb55e92748323a97e723313dfd5d6b9d015234d2f76e2b0f47de047432b9229cedf4e79ea8fb4d301dd604436f7a14455066650c35f13831e12c62862265c8124239f20a3eaf35da97b79e2c4d73e60b3829bc48ebd8c92007f6e316b6163d49888fd9ce6e34fde880f36a61b3cf9c7ad3e0b"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x19, 0x8, "50938fbc593f68e3bcc82d67ef0eebcc4aa3ac66ca"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x8c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x4e2ee70416a39dbe, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x78, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x29, 0x1, 'system_u:object_r:usbtty_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x13, 0x1, '/usr/sbin/ntpd\x00'}, @NFTA_SECMARK_CTX={0x32, 0x1, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}]}}, @NFT_MSG_DELSETELEM={0x187c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1868, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1854, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "4e0741c77fea063bca62f4ce409a076ebc85b57bca384a64ac123492e4084819aeef85be03fbfe47ce57674692dbd1f579822c6eb71e908eda27e8552e66b71caefaedfb41a6a298"}, @NFTA_DATA_VALUE={0x74, 0x1, "1c6202bf5a2b0d1645f0a40dffce9c8d85a1fa56cad1784a2546114b8b918f042ae131d9c565d08f7d08082f4138efe6e28b7703b687cc299611fb398a840f4b311dcf80b81fa5b2e3b91f3a7b8ef2084b48a2dbb3e2e1fc2e34c37a88b2507f09ee8906024a0b17fee81d763400ee53"}]}, @NFTA_SET_ELEM_KEY_END={0x2e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "b6334f0938b6581a34fed9da13f98224c96916df3b5d24adf1ff2eba9c3aaf283b9430860b01146fcf2bb5f1be9286c3616dc7cef29353279c1fbf789ca2b9f2f0a6db6e2e669d04afab664a0da539838ae3b35a1989dfe9acb3a56f6d4322275fbc08f9f1979ba5655876f59fb352361e5a08b68e52949cbef19b1745d5ae998a3b2542e84a9e76f7600aeb71b4fe3bfb5ac3baa0577c0bdabf7a6a41f02278ad05da573798e46f53dfc1ff565c3d16586d27f73468146cc1a4240869d28935c1d2a2829580e9e9db5a639081f443ccaa5c25f9c6a9095e5491449fab517023f4e1e7af7dc4eddcd6277d29b69bb3e2431d54"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9, 0x1, "910b4fbc07"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x101, 0x1, "1cc117f13032480f5629724a7ac7172ebd1359c4525b2239da0bad64e588935ed9efeb37812dce8facc6d98de85a312c0e7ae4c70126f67110ce506f9f1cd52fb07c5254cda64c800d41f6e50568b5199d7d3f5947d3dc733c5753df1237bc02c8ba3efaef522536bd3276261498afab72658b384f05451e4ca3fc41612c458f08a2685cbf5b717b36a229feed53660c1c0d97bc727b4d0ce430ff0a2c1aff853a9c518838618a1e0be73a083b0397ba653aeaafd795ebe57bd7dab0317bc92ddcfab36c4d971e2e101a3d79f3893bbe2c598edd36b9f1d4837cc96bbbc8ef99744e6c094cf48e6289a0f5ef2799820c11d2cdc4317e1f07aa2544af89"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x4291}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x25}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "f1915de01151c2c6262575d93126ab892a4eefe0bdbe00a0d67ed27b5414d77937cfcd7701ebc9408d59597760a1dcae5c7de565beae782d0b3540de6e316658174ad016031ec557694a54bacd9930daeb0165fcc75ef2d51d79574f9b3f63ce9edeea846954ad462ac98a18fecf36"}, @NFTA_DATA_VALUE={0x39, 0x1, "a446e24333601f0d7864a3b1f6db36ab067a87691a5a8a7835340fd8c70e9dbd337d25b0772808a378e250340dfe8097797a7e7735"}]}, @NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "d1281ed306120e54badcbd791b96a95c308913528064f090efe67660f87eb83130a77fff589888ed8bcb65a2a81ce5fe226042e35ffa3fb2002a0b5138d6eed9a0e1178835fe4257343203a93b1fac88ff0c03100a7267033aec6498f07eb0471d6ed05ee397f1263e0adc89357b0ae042f99cf25eb734057320beb3400ad10ebc50032a3d31ef62461db3890daf602eeb8a73e17883d8fc9c418196913d5951c24b1fe546810eaca21daca356bd2dec61d3404226c54bdefdc9"}]}, @NFTA_SET_ELEM_KEY_END={0x14c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf2, 0x1, "fb0938057a5bf2e0ce1c7178ae446a3ed0a6191915e9a429757dcbb026bfa83d1584ae59e02f9da3887e0488b47156644331f218465919d30cfa4f0186edf89f92c053832eb72a34cdcbf79ffc72941291cdd6a2a7f8668806a0072282b23daab08acf7654630b359f847843875a55acd9d7903213747e99ac37868dae5dbdf4fc6b275920d21922c27a087e8f20287093460e455cdefb37c2218520ff389a5a4ee14038a3ffdce86c96ba49de6c2113f4b081348cd3e536779aa268e75fa7deec81a1de4f33800a6aff3fc0b94db2664f46d5c3f4177108501f6490943926ed0a428ebd0b3312f3724fab148871"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "703d82"}]}, @NFTA_SET_ELEM_KEY_END={0x1114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "7db57c4f728248827c1a44b0010c2593ba31676cbcc51a07104d7c4b319c63263a7fe801eb02d6f991e11e510e3351b9ff4bded027af04f75ba19ec662c8ddc5ba9be13c4c992e7b011c76bc02aacbbfa21d9f81cceaa16c56f943a020d84182b0a9a67a08c69d5391b4d91e7193a44498550d7c7a21a32391a3b96d19e4e654dc4d46f13f33b57c759d17bce58af3087649a78e80752b41dd6215c4c0d4e1300b5dc8a2c7c83de387387478555d8732fd8218db190108be71cf913be7b0edd68b0ba4853b8bd722ee308db0b037a0f8b1"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1e90}}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000850000000500000095400000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x1, 0x5, 0x1}) (async) sendmsg$rds(r1, &(0x7f0000003500)={&(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000003480)=[{&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f00000023c0)=""/140, 0x8c}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x5, 0x0, 0x0, 0x97fe1b95993c361d}, 0x20009000) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) (async) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x17c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4b, 0x6, "eadb1195e51cedc57353744c6d0142faccee0b98b520b780aac9da00e064373f42c9baf1c9c7267fbed3c75b3854081ffa95651eb8c74c7d570bb2fc7ca19262eaefecdfcc63f5"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xca, 0x6, "2892ff343d81069bd92263643304409a854d9521799e253a7106a6a8a80b318f2f7f6326e63f47bdb354ef839ed4d6d619f5a0ab90d82fe5f0d4726ea6c5c483dacbcd48ee027f443dd789eb963d4ae800f0f52cf4d5088dbb884be3f10a19f65717c8d837e844019f235fdad012a4f6b63f5aacd7d8781d42f3f1ae308a8a40800827009c7cdb4ada24a3f3bfdae1751a6f9c720d0d08165b3b6671bb4b6a5f363f089662cf6151cfc567f4ce5ffc1bdbebb57e42bbce66fd07fb340c0ea2e67a3b4c21a179"}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x84}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x11}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x3a}]}}, @NFT_MSG_NEWCHAIN={0x138, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff0}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}]}, @NFTA_CHAIN_USERDATA={0x53, 0xc, "f7c8145c1b265769916c2038a9885559bbf9874e2893f8621b90a02bebcbd1af7578124b11cb2f1cc7ae54eb7a9903b199f6b89f02275b33ea64741f27934a8f4158849f0cf91f2c62c3fa1435ae34"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x70695399}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6caa2340}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x17c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_EXPRESSIONS={0x50, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9d}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0xe0, 0x12, 0x0, 0x1, [{0xbc, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xac, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x5c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "27140426435702d8"}, @NFTA_DATA_VALUE={0x49, 0x1, "29f5cca927e08fd826af77c23481e89c69411ca2ac1203fd81c744ca40e6205a18b2f2b4f1239dae181decd1846d3973728eb1d8960460ad0798ff459bc37703e7eb4692c8"}]}, @NFTA_BITWISE_XOR={0x2c, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}, @NFT_MSG_DELOBJ={0x100, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x87, 0x8, "de72e662ad76b9c863d68603c0b478691fb55e92748323a97e723313dfd5d6b9d015234d2f76e2b0f47de047432b9229cedf4e79ea8fb4d301dd604436f7a14455066650c35f13831e12c62862265c8124239f20a3eaf35da97b79e2c4d73e60b3829bc48ebd8c92007f6e316b6163d49888fd9ce6e34fde880f36a61b3cf9c7ad3e0b"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x19, 0x8, "50938fbc593f68e3bcc82d67ef0eebcc4aa3ac66ca"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x8c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x4e2ee70416a39dbe, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x78, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x29, 0x1, 'system_u:object_r:usbtty_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x13, 0x1, '/usr/sbin/ntpd\x00'}, @NFTA_SECMARK_CTX={0x32, 0x1, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}]}}, @NFT_MSG_DELSETELEM={0x187c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1868, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1854, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "4e0741c77fea063bca62f4ce409a076ebc85b57bca384a64ac123492e4084819aeef85be03fbfe47ce57674692dbd1f579822c6eb71e908eda27e8552e66b71caefaedfb41a6a298"}, @NFTA_DATA_VALUE={0x74, 0x1, "1c6202bf5a2b0d1645f0a40dffce9c8d85a1fa56cad1784a2546114b8b918f042ae131d9c565d08f7d08082f4138efe6e28b7703b687cc299611fb398a840f4b311dcf80b81fa5b2e3b91f3a7b8ef2084b48a2dbb3e2e1fc2e34c37a88b2507f09ee8906024a0b17fee81d763400ee53"}]}, @NFTA_SET_ELEM_KEY_END={0x2e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "b6334f0938b6581a34fed9da13f98224c96916df3b5d24adf1ff2eba9c3aaf283b9430860b01146fcf2bb5f1be9286c3616dc7cef29353279c1fbf789ca2b9f2f0a6db6e2e669d04afab664a0da539838ae3b35a1989dfe9acb3a56f6d4322275fbc08f9f1979ba5655876f59fb352361e5a08b68e52949cbef19b1745d5ae998a3b2542e84a9e76f7600aeb71b4fe3bfb5ac3baa0577c0bdabf7a6a41f02278ad05da573798e46f53dfc1ff565c3d16586d27f73468146cc1a4240869d28935c1d2a2829580e9e9db5a639081f443ccaa5c25f9c6a9095e5491449fab517023f4e1e7af7dc4eddcd6277d29b69bb3e2431d54"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9, 0x1, "910b4fbc07"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x4291}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x25}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "f1915de01151c2c6262575d93126ab892a4eefe0bdbe00a0d67ed27b5414d77937cfcd7701ebc9408d59597760a1dcae5c7de565beae782d0b3540de6e316658174ad016031ec557694a54bacd9930daeb0165fcc75ef2d51d79574f9b3f63ce9edeea846954ad462ac98a18fecf36"}, @NFTA_DATA_VALUE={0x39, 0x1, "a446e24333601f0d7864a3b1f6db36ab067a87691a5a8a7835340fd8c70e9dbd337d25b0772808a378e250340dfe8097797a7e7735"}]}, @NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "d1281ed306120e54badcbd791b96a95c308913528064f090efe67660f87eb83130a77fff589888ed8bcb65a2a81ce5fe226042e35ffa3fb2002a0b5138d6eed9a0e1178835fe4257343203a93b1fac88ff0c03100a7267033aec6498f07eb0471d6ed05ee397f1263e0adc89357b0ae042f99cf25eb734057320beb3400ad10ebc50032a3d31ef62461db3890daf602eeb8a73e17883d8fc9c418196913d5951c24b1fe546810eaca21daca356bd2dec61d3404226c54bdefdc9"}]}, @NFTA_SET_ELEM_KEY_END={0x14c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf2, 0x1, "fb0938057a5bf2e0ce1c7178ae446a3ed0a6191915e9a429757dcbb026bfa83d1584ae59e02f9da3887e0488b47156644331f218465919d30cfa4f0186edf89f92c053832eb72a34cdcbf79ffc72941291cdd6a2a7f8668806a0072282b23daab08acf7654630b359f847843875a55acd9d7903213747e99ac37868dae5dbdf4fc6b275920d21922c27a087e8f20287093460e455cdefb37c2218520ff389a5a4ee14038a3ffdce86c96ba49de6c2113f4b081348cd3e536779aa268e75fa7deec81a1de4f33800a6aff3fc0b94db2664f46d5c3f4177108501f6490943926ed0a428ebd0b3312f3724fab148871"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "703d82"}]}, @NFTA_SET_ELEM_KEY_END={0x1114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "7db57c4f728248827c1a44b0010c2593ba31676cbcc51a07104d7c4b319c63263a7fe801eb02d6f991e11e510e3351b9ff4bded027af04f75ba19ec662c8ddc5ba9be13c4c992e7b011c76bc02aacbbfa21d9f81cceaa16c56f943a020d84182b0a9a67a08c69d5391b4d91e7193a44498550d7c7a21a32391a3b96d19e4e654dc4d46f13f33b57c759d17bce58af3087649a78e80752b41dd6215c4c0d4e1300b5dc8a2c7c83de387387478555d8732fd8218db190108be71cf913be7b0edd68b0ba4853b8bd722ee308db0b037a0f8b1"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1e90}}, 0x20004000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000850000000500000095400000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) socket$packet(0x11, 0x3, 0x300) (async) 16.312283713s ago: executing program 2 (id=1610): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="8d00230c1100"}) 16.180520352s ago: executing program 2 (id=1611): pipe(0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8, 0x0) 16.032858113s ago: executing program 2 (id=1612): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="768af60c12af27d3b0dd", 0xa}, {&(0x7f0000000180)="6aa46d2dcf83aa73785a93eb3f62db8164591cabe090b81376d09ddfbd1ffcaaa241ee8969907cdb98bed669465f9d1aba98b69f91c8b8a6bc1e9d49110eaa71a612ff5a3e264315e82e872a0b4910d9", 0x50}, {&(0x7f00000003c0)="5f8dd2b68727ed6521812861a09a24865d9a5e64d9812b7873c0588c62bbebd504fc1a4f588d3d27cd80b6d1c9447f315ca25bcbd3efe3db3d6d8d34d040fba64ac889b524d47ff126c00eb7440c9fedccb4fde0d35e8e6e654ef1a5104c2451b50c7f49d3e341bf5bbdfc97ca23c1b7ebcb4dc0ee8e01017d74a98dab74e2baf2", 0x81}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001900)="4af13274b0d44b5685c25336107254d5642cd9b75f59e09ae3a2166d6f32fef76dc6961578f4f37ea660112e7b955d39b65dfad0ea3c6b0d10e29f70bdfb6bfab442c994e0a2c0176bd42a3d101ff9e8070eb23c8fdfe1c695e855542861e91d93bba691dd981875fad0", 0x6a}, {&(0x7f0000000ac0)="acb6d9cce9d3635e5d9ada772158ed22aa79f0fbb852c1a327b25355e615c0ce52d17c45cd48e14905cd1f2a9c48be2574bcbc504efd0d0aa87002494668712495351b18e4d1bddf03c9879f8cb9a91d6c266cc0de24eb8c1197350e2162e876a96f558d77d8d58fce8a1b4206a6b6381d4e33daa088171b14cdf79dca94792e98143cecd4d3d4707060a9af213aa5b996569d76a0f53f0fc7cfa1143c5acdf49c46afe7bdb322bcbbeb8504a0c736b20a332b", 0xb3}], 0x2, &(0x7f00000019c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)="6692dc184847677b76969663fe6d20c19375ac0c5934b9302938438a9334c95bb8fb17f7459e23b83bd79e980d388026fb088ece84c0304830138ef1fac1e9e5d98e02847ea7880498919f8e2f3dd0d0fe3052c7d5839f34772d8159d2e2baf80413dc114dffe4285c80808b7036830e073b56ae58f14d18750c1f3120e68731873d567fb277d3aba1b8b5bdc3c19c197823d945d5993638bfb4e6a3dcd12c13fb608873fdcf0c890d5123578a54f378366b959c6566b7ffa531a4ba94f001bcf2523d9753178734d6ac70519154e6f35d1dc5a1", 0xd4}, {&(0x7f0000000c80)="e496264884d8f9bf96e9441e40f30e63f904463eb1e8541affafbb825adbc1464f656c239bcd721d47b0e0", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001100)="62cc6a6d8d240858502132838ebec281d68db18d9107b5accf56ea36b336540414aadfd4ecc00619d97b2cda966ca746c66bc18293afca9fc5d16b394d2b0d5060e6ace82a8fcf2296cec066f81966e7f2831d5862e710", 0x57}], 0x1}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 15.139305168s ago: executing program 2 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000ffdbdf250c00000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) (fail_nth: 7) 1.992857444s ago: executing program 32 (id=1604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x4031, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff70, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x21, 0xffa6) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r3}, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000240)=r4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x300000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300090000000000000000000300000008000200ee90"], 0x1c}}, 0x24000044) 1.501687854s ago: executing program 33 (id=1607): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400"], 0x1c}], 0x1}, 0x0) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x3, 0x11, 0x9}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.462783357s ago: executing program 34 (id=1605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x16, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x1, 0x4, 0xa, 0x2, 0x50, 0x10}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc6}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @alu={0x7, 0x0, 0x4, 0x4, 0x2, 0x40, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x59, &(0x7f00000001c0)=""/89, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x6, 0x10, 0x8}, 0x10, 0x12bfa, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r0, r0, r0, r0], &(0x7f0000000700)=[{0x2, 0x1, 0x4, 0x7}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000009541da2c91afb8105037b10ea9ed72808cd875b1e66f054ae75f3d315470acafa64e8bebd2eb3ffa950b24f34cda47bf6c4de871efe4ed3fc90a00000000000000bbdff0c4277393140dcbaefb284ec76f8e1ad5d1fe6816b8ff2a2ea717896253473f9fad006dec72d2e60a19f80f1952f08acefffd437ae345ba96b0886d660769f27cd3c23820af4baa9db187032520c0cbb481c3edfd53a25afd2b44a3424395d48876cdb7f6dd490f5bde39d46af11d0c3b21e5319e541c55c43ff70c404fc6b7fd9676d7afc415"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fb, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aaa02035b39b7e115ec3c05b8f2b28bc10846686ee1d44d0b0ed8f3b578a87317c2bbd55bb9489a3ea286d"], 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x7000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket(0x11, 0x800000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x10, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 0s ago: executing program 35 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000ffdbdf250c00000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) (fail_nth: 7) kernel console output (not intermixed with test programs): RCX: 00007fda3618e929 [ 211.385678][ T9036] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 211.385691][ T9036] RBP: 00007fda37018090 R08: 0000000000000000 R09: 0000000000000000 [ 211.385702][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.385715][ T9036] R13: 0000000000000000 R14: 00007fda363b5fa0 R15: 00007ffc05cadc78 [ 211.385748][ T9036] [ 212.571532][ T9064] __nla_validate_parse: 3 callbacks suppressed [ 212.571554][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 212.686135][ T9064] set match dimension is over the limit! [ 212.889769][ T9075] FAULT_INJECTION: forcing a failure. [ 212.889769][ T9075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.928341][ T9075] CPU: 0 UID: 0 PID: 9075 Comm: syz.4.949 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 212.928371][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.928384][ T9075] Call Trace: [ 212.928392][ T9075] [ 212.928401][ T9075] dump_stack_lvl+0x189/0x250 [ 212.928436][ T9075] ? __pfx____ratelimit+0x10/0x10 [ 212.928459][ T9075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.928489][ T9075] ? __pfx__printk+0x10/0x10 [ 212.928512][ T9075] ? fs_reclaim_acquire+0x7d/0x100 [ 212.928545][ T9075] should_fail_ex+0x414/0x560 [ 212.928582][ T9075] prepare_alloc_pages+0x213/0x610 [ 212.928615][ T9075] __alloc_frozen_pages_noprof+0x123/0x370 [ 212.928657][ T9075] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 212.928685][ T9075] ? __lock_acquire+0xab9/0xd20 [ 212.928727][ T9075] alloc_pages_mpol+0x232/0x4a0 [ 212.928755][ T9075] alloc_pages_noprof+0xa9/0x190 [ 212.928779][ T9075] pte_alloc_one+0x21/0x170 [ 212.928810][ T9075] __pte_alloc+0x25/0x1a0 [ 212.928839][ T9075] __handle_mm_fault+0x4b8a/0x5620 [ 212.928891][ T9075] ? __pfx___handle_mm_fault+0x10/0x10 [ 212.928942][ T9075] ? find_vma+0xe7/0x160 [ 212.928959][ T9075] ? __pfx_find_vma+0x10/0x10 [ 212.928983][ T9075] handle_mm_fault+0x40a/0x8e0 [ 212.929024][ T9075] do_user_addr_fault+0x764/0x1390 [ 212.929067][ T9075] exc_page_fault+0x76/0xf0 [ 212.929088][ T9075] ? __might_fault+0xb0/0x130 [ 212.929118][ T9075] asm_exc_page_fault+0x26/0x30 [ 212.929137][ T9075] RIP: 0010:__put_user_4+0xd/0x20 [ 212.929158][ T9075] Code: 66 89 01 31 c9 0f 01 ca e9 40 3b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 17 3b 03 00 90 90 90 90 90 90 90 90 90 90 [ 212.929176][ T9075] RSP: 0018:ffffc9000b89f860 EFLAGS: 00050202 [ 212.929195][ T9075] RAX: 000000000000000c RBX: 0000000000000000 RCX: 0000200000000e80 [ 212.929209][ T9075] RDX: 0000000000000000 RSI: ffffffff8db72d7a RDI: ffffffff8be28d40 [ 212.929223][ T9075] RBP: 000000000000000c R08: 0000000000000000 R09: ffffffff820c4680 [ 212.929234][ T9075] R10: dffffc0000000000 R11: fffffbfff1f4267f R12: ffff88807983c0e8 [ 212.929248][ T9075] R13: dffffc0000000000 R14: ffff8880259036b0 R15: ffff88807983c100 [ 212.929270][ T9075] ? __might_fault+0xb0/0x130 [ 212.929309][ T9075] packet_ioctl+0x2ff/0x350 [ 212.929340][ T9075] sock_do_ioctl+0xd9/0x300 [ 212.929364][ T9075] ? __pfx_sock_do_ioctl+0x10/0x10 [ 212.929394][ T9075] ? kasan_save_track+0x4f/0x80 [ 212.929420][ T9075] ? kasan_save_track+0x3e/0x80 [ 212.929445][ T9075] ? kasan_save_free_info+0x46/0x50 [ 212.929466][ T9075] ? __kasan_slab_free+0x62/0x70 [ 212.929497][ T9075] sock_ioctl+0x576/0x790 [ 212.929520][ T9075] ? __pfx_sock_ioctl+0x10/0x10 [ 212.929556][ T9075] ? __pfx_sock_ioctl+0x10/0x10 [ 212.929574][ T9075] do_vfs_ioctl+0x1259/0x1990 [ 212.929607][ T9075] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 212.929650][ T9075] ? kasan_quarantine_put+0xdd/0x220 [ 212.929690][ T9075] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 212.929714][ T9075] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 212.929737][ T9075] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 212.929755][ T9075] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 212.929779][ T9075] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.929821][ T9075] ? __lock_acquire+0xab9/0xd20 [ 212.929871][ T9075] ? __fget_files+0x2a/0x420 [ 212.929894][ T9075] ? __fget_files+0x2a/0x420 [ 212.929914][ T9075] ? __fget_files+0x3a0/0x420 [ 212.929932][ T9075] ? __fget_files+0x2a/0x420 [ 212.929956][ T9075] ? bpf_lsm_file_ioctl+0x9/0x20 [ 212.929987][ T9075] __se_sys_ioctl+0x82/0x170 [ 212.930018][ T9075] do_syscall_64+0xfa/0x3b0 [ 212.930039][ T9075] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.930059][ T9075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.930079][ T9075] ? clear_bhb_loop+0x60/0xb0 [ 212.930103][ T9075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.930120][ T9075] RIP: 0033:0x7f6d8cb8e929 [ 212.930137][ T9075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.930153][ T9075] RSP: 002b:00007f6d8da59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.930172][ T9075] RAX: ffffffffffffffda RBX: 00007f6d8cdb5fa0 RCX: 00007f6d8cb8e929 [ 212.930186][ T9075] RDX: 0000200000000e80 RSI: 000000000000541b RDI: 0000000000000003 [ 212.930198][ T9075] RBP: 00007f6d8da59090 R08: 0000000000000000 R09: 0000000000000000 [ 212.930210][ T9075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.930221][ T9075] R13: 0000000000000000 R14: 00007f6d8cdb5fa0 R15: 00007ffe992ff398 [ 212.930254][ T9075] [ 213.570036][ T9078] IPVS: stopping master sync thread 9081 ... [ 214.383906][ T9098] FAULT_INJECTION: forcing a failure. [ 214.383906][ T9098] name failslab, interval 1, probability 0, space 0, times 0 [ 214.415546][ T9098] CPU: 0 UID: 0 PID: 9098 Comm: syz.2.957 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 214.415577][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.415589][ T9098] Call Trace: [ 214.415597][ T9098] [ 214.415606][ T9098] dump_stack_lvl+0x189/0x250 [ 214.415642][ T9098] ? __pfx____ratelimit+0x10/0x10 [ 214.415666][ T9098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.415717][ T9098] ? __pfx__printk+0x10/0x10 [ 214.415744][ T9098] ? __pfx___might_resched+0x10/0x10 [ 214.415773][ T9098] ? fs_reclaim_acquire+0x7d/0x100 [ 214.415802][ T9098] should_fail_ex+0x414/0x560 [ 214.415832][ T9098] should_failslab+0xa8/0x100 [ 214.415857][ T9098] __kmalloc_cache_noprof+0x70/0x3d0 [ 214.415875][ T9098] ? rtnl_newlink+0xed/0x1c70 [ 214.415897][ T9098] ? __lock_acquire+0xab9/0xd20 [ 214.415928][ T9098] rtnl_newlink+0xed/0x1c70 [ 214.415988][ T9098] ? __pfx_rtnl_newlink+0x10/0x10 [ 214.416009][ T9098] ? is_bpf_text_address+0x26/0x2b0 [ 214.416046][ T9098] ? __lock_acquire+0xab9/0xd20 [ 214.416085][ T9098] ? __lock_acquire+0xab9/0xd20 [ 214.416135][ T9098] ? is_bpf_text_address+0x26/0x2b0 [ 214.416169][ T9098] ? is_bpf_text_address+0x292/0x2b0 [ 214.416194][ T9098] ? is_bpf_text_address+0x26/0x2b0 [ 214.416224][ T9098] ? kernel_text_address+0xa5/0xe0 [ 214.416264][ T9098] ? __lock_acquire+0xab9/0xd20 [ 214.416318][ T9098] ? __pfx_rtnl_newlink+0x10/0x10 [ 214.416341][ T9098] rtnetlink_rcv_msg+0x7cc/0xb70 [ 214.416368][ T9098] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 214.416390][ T9098] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.416433][ T9098] netlink_rcv_skb+0x208/0x470 [ 214.416458][ T9098] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.416482][ T9098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.416521][ T9098] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.416543][ T9098] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.416572][ T9098] netlink_unicast+0x75b/0x8d0 [ 214.416606][ T9098] netlink_sendmsg+0x805/0xb30 [ 214.416642][ T9098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.416670][ T9098] ? aa_sock_msg_perm+0x94/0x160 [ 214.416697][ T9098] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.416721][ T9098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.416746][ T9098] __sock_sendmsg+0x219/0x270 [ 214.416771][ T9098] ____sys_sendmsg+0x505/0x830 [ 214.416805][ T9098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.416843][ T9098] ? import_iovec+0x74/0xa0 [ 214.416866][ T9098] ___sys_sendmsg+0x21f/0x2a0 [ 214.416897][ T9098] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.416973][ T9098] ? __fget_files+0x2a/0x420 [ 214.416994][ T9098] ? __fget_files+0x3a0/0x420 [ 214.417028][ T9098] __x64_sys_sendmsg+0x19b/0x260 [ 214.417058][ T9098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.417098][ T9098] ? __pfx_ksys_write+0x10/0x10 [ 214.417125][ T9098] ? rcu_is_watching+0x15/0xb0 [ 214.417156][ T9098] ? do_syscall_64+0xbe/0x3b0 [ 214.417183][ T9098] do_syscall_64+0xfa/0x3b0 [ 214.417205][ T9098] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.417227][ T9098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.417247][ T9098] ? clear_bhb_loop+0x60/0xb0 [ 214.417272][ T9098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.417291][ T9098] RIP: 0033:0x7fc37898e929 [ 214.417311][ T9098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.417328][ T9098] RSP: 002b:00007fc37988c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.417351][ T9098] RAX: ffffffffffffffda RBX: 00007fc378bb5fa0 RCX: 00007fc37898e929 [ 214.417365][ T9098] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d [ 214.417378][ T9098] RBP: 00007fc37988c090 R08: 0000000000000000 R09: 0000000000000000 [ 214.417390][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.417401][ T9098] R13: 0000000000000000 R14: 00007fc378bb5fa0 R15: 00007fffe998d5d8 [ 214.417432][ T9098] [ 214.904778][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.960'. [ 214.925745][ T9104] set match dimension is over the limit! [ 215.335618][ T9123] FAULT_INJECTION: forcing a failure. [ 215.335618][ T9123] name failslab, interval 1, probability 0, space 0, times 0 [ 215.348771][ T9123] CPU: 1 UID: 0 PID: 9123 Comm: syz.1.966 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 215.348800][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.348812][ T9123] Call Trace: [ 215.348819][ T9123] [ 215.348827][ T9123] dump_stack_lvl+0x189/0x250 [ 215.348873][ T9123] ? __pfx____ratelimit+0x10/0x10 [ 215.348898][ T9123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.348928][ T9123] ? __pfx__printk+0x10/0x10 [ 215.348951][ T9123] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 215.348972][ T9123] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.349003][ T9123] should_fail_ex+0x414/0x560 [ 215.349034][ T9123] should_failslab+0xa8/0x100 [ 215.349059][ T9123] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 215.349091][ T9123] ? __alloc_skb+0x112/0x2d0 [ 215.349113][ T9123] ? __pfx_rt6_nlmsg_size+0x10/0x10 [ 215.349146][ T9123] __alloc_skb+0x112/0x2d0 [ 215.349171][ T9123] ? inet6_rt_notify+0xab/0x430 [ 215.349199][ T9123] inet6_rt_notify+0x165/0x430 [ 215.349236][ T9123] fib6_add_rt2node+0x1876/0x33a0 [ 215.349272][ T9123] ? fib6_add_rt2node+0xbd1/0x33a0 [ 215.349314][ T9123] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 215.349341][ T9123] ? fib6_add_1+0xe75/0x1460 [ 215.349381][ T9123] fib6_add+0x8da/0x18a0 [ 215.349417][ T9123] ? do_raw_spin_lock+0x121/0x290 [ 215.349438][ T9123] ? __pfx_fib6_add+0x10/0x10 [ 215.349469][ T9123] ? ip6_route_add+0xc9/0x1b0 [ 215.349496][ T9123] ip6_route_add+0xde/0x1b0 [ 215.349524][ T9123] ipv6_route_ioctl+0x35c/0x480 [ 215.349555][ T9123] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 215.349619][ T9123] inet6_ioctl+0x219/0x280 [ 215.349641][ T9123] ? __pfx_inet6_ioctl+0x10/0x10 [ 215.349660][ T9123] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 215.349691][ T9123] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.349727][ T9123] sock_do_ioctl+0xd9/0x300 [ 215.349752][ T9123] ? __pfx_sock_do_ioctl+0x10/0x10 [ 215.349770][ T9123] ? __lock_acquire+0xab9/0xd20 [ 215.349817][ T9123] sock_ioctl+0x576/0x790 [ 215.349848][ T9123] ? __pfx_sock_ioctl+0x10/0x10 [ 215.349869][ T9123] ? __fget_files+0x2a/0x420 [ 215.349889][ T9123] ? __fget_files+0x3a0/0x420 [ 215.349908][ T9123] ? __fget_files+0x2a/0x420 [ 215.349933][ T9123] ? bpf_lsm_file_ioctl+0x9/0x20 [ 215.349961][ T9123] ? __pfx_sock_ioctl+0x10/0x10 [ 215.349981][ T9123] __se_sys_ioctl+0xfc/0x170 [ 215.350013][ T9123] do_syscall_64+0xfa/0x3b0 [ 215.350035][ T9123] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.350057][ T9123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.350077][ T9123] ? clear_bhb_loop+0x60/0xb0 [ 215.350103][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.350122][ T9123] RIP: 0033:0x7fa05e38e929 [ 215.350141][ T9123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.350160][ T9123] RSP: 002b:00007fa05f1e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.350183][ T9123] RAX: ffffffffffffffda RBX: 00007fa05e5b6080 RCX: 00007fa05e38e929 [ 215.350198][ T9123] RDX: 0000200000000540 RSI: 000000000000890b RDI: 0000000000000006 [ 215.350211][ T9123] RBP: 00007fa05f1e9090 R08: 0000000000000000 R09: 0000000000000000 [ 215.350223][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.350235][ T9123] R13: 0000000000000000 R14: 00007fa05e5b6080 R15: 00007ffe80e8d118 [ 215.350267][ T9123] [ 215.915471][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 216.153239][ T9130] team0 (unregistering): Port device 0! removed [ 216.561474][ T9149] netlink: 'syz.1.970': attribute type 1 has an invalid length. [ 216.625893][ T9149] bond0: entered promiscuous mode [ 216.637238][ T9149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.721587][ T9152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.731617][ T9152] bond0: (slave bond2): making interface the new active one [ 216.740878][ T9152] bond2: entered promiscuous mode [ 216.747001][ T9152] bond0: (slave bond2): Enslaving as an active interface with an up link [ 217.059604][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 217.115503][ T9164] set match dimension is over the limit! [ 217.133166][ T9171] netlink: 134820 bytes leftover after parsing attributes in process `syz.3.977'. [ 217.364020][ T9179] netlink: 40 bytes leftover after parsing attributes in process `syz.4.979'. [ 217.526086][ T9181] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 217.567975][ T9181] netlink: 128 bytes leftover after parsing attributes in process `syz.4.979'. [ 217.614358][ T9181] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 217.672689][ T9181] netlink: 76 bytes leftover after parsing attributes in process `syz.4.979'. [ 217.995800][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.983'. [ 218.475008][ T9210] bond0: entered promiscuous mode [ 218.502491][ T9210] bond_slave_0: entered promiscuous mode [ 218.533356][ T9210] bond_slave_1: entered promiscuous mode [ 218.552570][ T9210] batadv_slave_0: entered promiscuous mode [ 218.590228][ T9210] hsr1: entered promiscuous mode [ 218.830739][ T9220] nbd1: detected capacity change from 0 to 63 [ 218.845802][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 218.855044][ T9222] block nbd1: NBD_DISCONNECT [ 218.855213][ T9222] block nbd1: Disconnected due to user request. [ 218.855288][ T9222] block nbd1: shutting down sockets [ 218.885165][ T9220] nbd: nbd1 already in use [ 219.517759][ T9248] FAULT_INJECTION: forcing a failure. [ 219.517759][ T9248] name failslab, interval 1, probability 0, space 0, times 0 [ 219.547497][ T9248] CPU: 1 UID: 0 PID: 9248 Comm: syz.3.1003 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 219.547528][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.547540][ T9248] Call Trace: [ 219.547548][ T9248] [ 219.547558][ T9248] dump_stack_lvl+0x189/0x250 [ 219.547593][ T9248] ? __pfx____ratelimit+0x10/0x10 [ 219.547714][ T9248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.547746][ T9248] ? __pfx__printk+0x10/0x10 [ 219.547775][ T9248] ? __pfx___might_resched+0x10/0x10 [ 219.547803][ T9248] ? fs_reclaim_acquire+0x7d/0x100 [ 219.547832][ T9248] should_fail_ex+0x414/0x560 [ 219.547861][ T9248] should_failslab+0xa8/0x100 [ 219.547884][ T9248] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 219.547915][ T9248] ? __alloc_skb+0x112/0x2d0 [ 219.547945][ T9248] __alloc_skb+0x112/0x2d0 [ 219.547974][ T9248] netlink_ack+0x146/0xa50 [ 219.547995][ T9248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.548020][ T9248] ? ref_tracker_free+0x63a/0x7d0 [ 219.548043][ T9248] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 219.548077][ T9248] ? __pfx_nl80211_post_doit+0x10/0x10 [ 219.548105][ T9248] ? __pfx_ref_tracker_free+0x10/0x10 [ 219.548143][ T9248] netlink_rcv_skb+0x28c/0x470 [ 219.548168][ T9248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.548198][ T9248] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.548242][ T9248] ? down_read+0x1ad/0x2e0 [ 219.548272][ T9248] genl_rcv+0x28/0x40 [ 219.548299][ T9248] netlink_unicast+0x75b/0x8d0 [ 219.548333][ T9248] netlink_sendmsg+0x805/0xb30 [ 219.548370][ T9248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.548398][ T9248] ? aa_sock_msg_perm+0x94/0x160 [ 219.548424][ T9248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.548449][ T9248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.548475][ T9248] __sock_sendmsg+0x219/0x270 [ 219.548500][ T9248] ____sys_sendmsg+0x505/0x830 [ 219.548537][ T9248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.548574][ T9248] ? import_iovec+0x74/0xa0 [ 219.548597][ T9248] ___sys_sendmsg+0x21f/0x2a0 [ 219.548627][ T9248] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.548710][ T9248] ? __fget_files+0x2a/0x420 [ 219.548732][ T9248] ? __fget_files+0x3a0/0x420 [ 219.548765][ T9248] __x64_sys_sendmsg+0x19b/0x260 [ 219.548796][ T9248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.548837][ T9248] ? __pfx_ksys_write+0x10/0x10 [ 219.548862][ T9248] ? rcu_is_watching+0x15/0xb0 [ 219.548895][ T9248] ? do_syscall_64+0xbe/0x3b0 [ 219.548922][ T9248] do_syscall_64+0xfa/0x3b0 [ 219.548943][ T9248] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.548964][ T9248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.548985][ T9248] ? clear_bhb_loop+0x60/0xb0 [ 219.549010][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.549030][ T9248] RIP: 0033:0x7fda3618e929 [ 219.549064][ T9248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.549082][ T9248] RSP: 002b:00007fda37018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.549105][ T9248] RAX: ffffffffffffffda RBX: 00007fda363b5fa0 RCX: 00007fda3618e929 [ 219.549120][ T9248] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 219.549133][ T9248] RBP: 00007fda37018090 R08: 0000000000000000 R09: 0000000000000000 [ 219.549145][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.549157][ T9248] R13: 0000000000000000 R14: 00007fda363b5fa0 R15: 00007ffc05cadc78 [ 219.549192][ T9248] [ 219.625155][ T9253] FAULT_INJECTION: forcing a failure. [ 219.625155][ T9253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.861663][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 219.875505][ T9253] CPU: 0 UID: 0 PID: 9253 Comm: syz.1.1006 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 219.875533][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.875543][ T9253] Call Trace: [ 219.875550][ T9253] [ 219.875558][ T9253] dump_stack_lvl+0x189/0x250 [ 219.875591][ T9253] ? __pfx____ratelimit+0x10/0x10 [ 219.875613][ T9253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.875640][ T9253] ? __pfx__printk+0x10/0x10 [ 219.875660][ T9253] ? __might_fault+0xb0/0x130 [ 219.875700][ T9253] should_fail_ex+0x414/0x560 [ 219.875729][ T9253] _copy_to_iter+0x575/0x16f0 [ 219.875766][ T9253] ? __pfx__copy_to_iter+0x10/0x10 [ 219.875789][ T9253] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 219.875822][ T9253] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 219.875856][ T9253] __skb_datagram_iter+0xf8/0x990 [ 219.875884][ T9253] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 219.875929][ T9253] skb_copy_datagram_iter+0xc5/0x230 [ 219.875960][ T9253] netlink_recvmsg+0x2ab/0xa30 [ 219.875992][ T9253] ? __pfx_netlink_recvmsg+0x10/0x10 [ 219.876019][ T9253] ? aa_sock_msg_perm+0x94/0x160 [ 219.876042][ T9253] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 219.876063][ T9253] ? security_socket_recvmsg+0x7e/0x2e0 [ 219.876089][ T9253] ? __pfx_netlink_recvmsg+0x10/0x10 [ 219.876111][ T9253] sock_recvmsg+0x229/0x270 [ 219.876135][ T9253] ____sys_recvmsg+0x1c9/0x460 [ 219.876170][ T9253] ? __pfx_____sys_recvmsg+0x10/0x10 [ 219.876212][ T9253] ? import_iovec+0x74/0xa0 [ 219.876232][ T9253] ___sys_recvmsg+0x1b5/0x510 [ 219.876264][ T9253] ? __pfx____sys_recvmsg+0x10/0x10 [ 219.876315][ T9253] ? __fget_files+0x3a0/0x420 [ 219.876346][ T9253] do_recvmmsg+0x307/0x770 [ 219.876380][ T9253] ? __pfx_do_recvmmsg+0x10/0x10 [ 219.876420][ T9253] ? _copy_from_user+0x94/0xb0 [ 219.876453][ T9253] __x64_sys_recvmmsg+0x1af/0x240 [ 219.876483][ T9253] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 219.876512][ T9253] ? rcu_is_watching+0x15/0xb0 [ 219.876544][ T9253] ? do_syscall_64+0xbe/0x3b0 [ 219.876569][ T9253] do_syscall_64+0xfa/0x3b0 [ 219.876588][ T9253] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.876608][ T9253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.876625][ T9253] ? clear_bhb_loop+0x60/0xb0 [ 219.876648][ T9253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.876665][ T9253] RIP: 0033:0x7fa05e38e929 [ 219.876682][ T9253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.876697][ T9253] RSP: 002b:00007fa05f20a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 219.876717][ T9253] RAX: ffffffffffffffda RBX: 00007fa05e5b5fa0 RCX: 00007fa05e38e929 [ 219.876730][ T9253] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 219.876743][ T9253] RBP: 00007fa05f20a090 R08: 0000200000003700 R09: 0000000000000000 [ 219.876755][ T9253] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 219.876766][ T9253] R13: 0000000000000000 R14: 00007fa05e5b5fa0 R15: 00007ffe80e8d118 [ 219.876796][ T9253] [ 220.262866][ T9263] 8021q: VLANs not supported on caif0 [ 220.285983][ T9265] 8021q: VLANs not supported on nlmon0 [ 220.541577][ T9277] netlink: 'syz.3.1011': attribute type 1 has an invalid length. [ 220.550272][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 220.561992][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 220.709830][ T9283] netlink: 'syz.2.1015': attribute type 1 has an invalid length. [ 220.845327][ T9288] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 220.856748][ T9288] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1013'. [ 220.891442][ T9288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1013'. [ 221.048359][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'. [ 221.117089][ T9300] 8021q: VLANs not supported on caif0 [ 221.709898][ T30] audit: type=1804 audit(1751033543.879:3): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1029" name="/newroot/200/cgroup.controllers" dev="tmpfs" ino=1031 res=1 errno=0 [ 221.838667][ T30] audit: type=1800 audit(1751033543.889:4): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1029" name="cgroup.controllers" dev="tmpfs" ino=1031 res=0 errno=0 [ 222.294719][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1035'. [ 222.419910][ T9342] 8021q: VLANs not supported on caif0 [ 222.516114][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 222.516150][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 222.530530][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 223.076193][ T9370] netlink: 'syz.2.1045': attribute type 1 has an invalid length. [ 223.110474][ T9370] __nla_validate_parse: 1 callbacks suppressed [ 223.110495][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 223.196928][ T9380] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1048'. [ 223.601509][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'. [ 223.644016][ T9396] 8021q: VLANs not supported on caif0 [ 223.697458][ T9399] 8021q: VLANs not supported on caif0 [ 224.120460][ T9413] netlink: 'syz.3.1060': attribute type 2 has an invalid length. [ 224.208311][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'. [ 224.230732][ T9418] FAULT_INJECTION: forcing a failure. [ 224.230732][ T9418] name failslab, interval 1, probability 0, space 0, times 0 [ 224.276127][ T9418] CPU: 0 UID: 0 PID: 9418 Comm: syz.1.1062 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 224.276165][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.276178][ T9418] Call Trace: [ 224.276186][ T9418] [ 224.276196][ T9418] dump_stack_lvl+0x189/0x250 [ 224.276232][ T9418] ? __pfx____ratelimit+0x10/0x10 [ 224.276256][ T9418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.276286][ T9418] ? __pfx__printk+0x10/0x10 [ 224.276317][ T9418] ? __pfx___might_resched+0x10/0x10 [ 224.276344][ T9418] ? fs_reclaim_acquire+0x7d/0x100 [ 224.276374][ T9418] should_fail_ex+0x414/0x560 [ 224.276405][ T9418] should_failslab+0xa8/0x100 [ 224.276428][ T9418] __kmalloc_cache_noprof+0x70/0x3d0 [ 224.276448][ T9418] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 224.276476][ T9418] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 224.276507][ T9418] mptcp_sendmsg_fastopen+0x17d/0x580 [ 224.276543][ T9418] mptcp_sendmsg+0x176c/0x1970 [ 224.276567][ T9418] ? __pfx___might_resched+0x10/0x10 [ 224.276596][ T9418] ? __lock_acquire+0xab9/0xd20 [ 224.276649][ T9418] ? aa_sk_perm+0x81e/0x950 [ 224.276676][ T9418] ? __lock_acquire+0xab9/0xd20 [ 224.276701][ T9418] ? __pfx_aa_sk_perm+0x10/0x10 [ 224.276722][ T9418] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 224.276747][ T9418] ? sock_rps_record_flow+0x19/0x410 [ 224.276772][ T9418] ? inet_sendmsg+0x2f4/0x370 [ 224.276798][ T9418] __sock_sendmsg+0x19c/0x270 [ 224.276825][ T9418] ____sys_sendmsg+0x52d/0x830 [ 224.276861][ T9418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.276900][ T9418] ? import_iovec+0x74/0xa0 [ 224.276924][ T9418] ___sys_sendmsg+0x21f/0x2a0 [ 224.276956][ T9418] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.277031][ T9418] ? __fget_files+0x2a/0x420 [ 224.277052][ T9418] ? __fget_files+0x3a0/0x420 [ 224.277087][ T9418] __sys_sendmmsg+0x227/0x430 [ 224.277122][ T9418] ? __pfx___sys_sendmmsg+0x10/0x10 [ 224.277146][ T9418] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 224.277205][ T9418] ? ksys_write+0x22a/0x250 [ 224.277237][ T9418] ? __pfx_ksys_write+0x10/0x10 [ 224.277264][ T9418] ? rcu_is_watching+0x15/0xb0 [ 224.277302][ T9418] __x64_sys_sendmmsg+0xa0/0xc0 [ 224.277332][ T9418] do_syscall_64+0xfa/0x3b0 [ 224.277355][ T9418] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.277377][ T9418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.277396][ T9418] ? clear_bhb_loop+0x60/0xb0 [ 224.277421][ T9418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.277440][ T9418] RIP: 0033:0x7fa05e38e929 [ 224.277459][ T9418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.277477][ T9418] RSP: 002b:00007fa05f20a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 224.277499][ T9418] RAX: ffffffffffffffda RBX: 00007fa05e5b5fa0 RCX: 00007fa05e38e929 [ 224.277514][ T9418] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000009 [ 224.277528][ T9418] RBP: 00007fa05f20a090 R08: 0000000000000000 R09: 0000000000000000 [ 224.277540][ T9418] R10: 000000002c000011 R11: 0000000000000246 R12: 0000000000000001 [ 224.277553][ T9418] R13: 0000000000000000 R14: 00007fa05e5b5fa0 R15: 00007ffe80e8d118 [ 224.277588][ T9418] [ 224.612356][ T9422] tipc: Cannot configure node identity twice [ 224.733536][ T9425] 8021q: VLANs not supported on caif0 [ 225.091100][ T9437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1072'. [ 225.379988][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 225.411921][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 225.434432][ T9454] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1076'. [ 225.447135][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 225.889646][ T9466] 8021q: VLANs not supported on caif0 [ 226.204093][ T9484] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1086'. [ 226.311873][ T9486] FAULT_INJECTION: forcing a failure. [ 226.311873][ T9486] name failslab, interval 1, probability 0, space 0, times 0 [ 226.325703][ T9486] CPU: 1 UID: 0 PID: 9486 Comm: syz.4.1088 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 226.325733][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.325744][ T9486] Call Trace: [ 226.325753][ T9486] [ 226.325762][ T9486] dump_stack_lvl+0x189/0x250 [ 226.325797][ T9486] ? __pfx____ratelimit+0x10/0x10 [ 226.325819][ T9486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.325847][ T9486] ? __pfx__printk+0x10/0x10 [ 226.325869][ T9486] ? __pfx___might_resched+0x10/0x10 [ 226.325898][ T9486] ? fs_reclaim_acquire+0x7d/0x100 [ 226.325928][ T9486] should_fail_ex+0x414/0x560 [ 226.325959][ T9486] should_failslab+0xa8/0x100 [ 226.325982][ T9486] __kmalloc_noprof+0xcb/0x4f0 [ 226.326000][ T9486] ? tomoyo_encode+0x28b/0x550 [ 226.326031][ T9486] tomoyo_encode+0x28b/0x550 [ 226.326064][ T9486] tomoyo_realpath_from_path+0x58d/0x5d0 [ 226.326094][ T9486] ? tomoyo_domain+0xd9/0x130 [ 226.326128][ T9486] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 226.326151][ T9486] tomoyo_path_number_perm+0x1e8/0x5a0 [ 226.326178][ T9486] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 226.326222][ T9486] ? __lock_acquire+0xab9/0xd20 [ 226.326273][ T9486] ? __fget_files+0x2a/0x420 [ 226.326299][ T9486] ? __fget_files+0x2a/0x420 [ 226.326318][ T9486] ? __fget_files+0x3a0/0x420 [ 226.326338][ T9486] ? __fget_files+0x2a/0x420 [ 226.326364][ T9486] security_file_ioctl+0xcb/0x2d0 [ 226.326388][ T9486] __se_sys_ioctl+0x47/0x170 [ 226.326418][ T9486] do_syscall_64+0xfa/0x3b0 [ 226.326440][ T9486] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.326462][ T9486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.326481][ T9486] ? clear_bhb_loop+0x60/0xb0 [ 226.326504][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.326524][ T9486] RIP: 0033:0x7f6d8cb8e929 [ 226.326543][ T9486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.326560][ T9486] RSP: 002b:00007f6d8da59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.326583][ T9486] RAX: ffffffffffffffda RBX: 00007f6d8cdb5fa0 RCX: 00007f6d8cb8e929 [ 226.326608][ T9486] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 226.326621][ T9486] RBP: 00007f6d8da59090 R08: 0000000000000000 R09: 0000000000000000 [ 226.326634][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.326646][ T9486] R13: 0000000000000000 R14: 00007f6d8cdb5fa0 R15: 00007ffe992ff398 [ 226.326681][ T9486] [ 226.326705][ T9486] ERROR: Out of memory at tomoyo_realpath_from_path. [ 228.154383][ T9470] bpq0: left promiscuous mode [ 228.160419][ T9470] bpq0: left allmulticast mode [ 228.184438][ T9490] bridge0: port 3(vxlan0) entered blocking state [ 228.192270][ T9490] bridge0: port 3(vxlan0) entered disabled state [ 228.215792][ T9490] vxlan0: entered allmulticast mode [ 228.264066][ T9490] vxlan0: entered promiscuous mode [ 228.474020][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'. [ 228.511091][ T9505] Cannot find set identified by id 0 to match [ 228.580248][ T9507] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1098'. [ 228.699294][ T9514] FAULT_INJECTION: forcing a failure. [ 228.699294][ T9514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.727199][ T9514] CPU: 1 UID: 0 PID: 9514 Comm: syz.0.1101 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 228.727229][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.727242][ T9514] Call Trace: [ 228.727250][ T9514] [ 228.727259][ T9514] dump_stack_lvl+0x189/0x250 [ 228.727295][ T9514] ? __pfx____ratelimit+0x10/0x10 [ 228.727318][ T9514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.727347][ T9514] ? __pfx__printk+0x10/0x10 [ 228.727384][ T9514] should_fail_ex+0x414/0x560 [ 228.727414][ T9514] _copy_to_user+0x31/0xb0 [ 228.727437][ T9514] bpf_test_finish+0x1ab/0x700 [ 228.727472][ T9514] ? __pfx_bpf_test_finish+0x10/0x10 [ 228.727502][ T9514] ? slab_build_skb+0x273/0x3e0 [ 228.727541][ T9514] bpf_prog_test_run_skb+0xed5/0x1560 [ 228.727583][ T9514] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 228.727607][ T9514] bpf_prog_test_run+0x2c4/0x340 [ 228.727637][ T9514] __sys_bpf+0x4a4/0x860 [ 228.727665][ T9514] ? __pfx___sys_bpf+0x10/0x10 [ 228.727705][ T9514] ? ksys_write+0x22a/0x250 [ 228.727737][ T9514] ? __pfx_ksys_write+0x10/0x10 [ 228.727761][ T9514] ? rcu_is_watching+0x15/0xb0 [ 228.727799][ T9514] __x64_sys_bpf+0x7c/0x90 [ 228.727823][ T9514] do_syscall_64+0xfa/0x3b0 [ 228.727844][ T9514] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.727866][ T9514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.727885][ T9514] ? clear_bhb_loop+0x60/0xb0 [ 228.727909][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.727928][ T9514] RIP: 0033:0x7facba98e929 [ 228.727947][ T9514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.727964][ T9514] RSP: 002b:00007facbb85f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.727987][ T9514] RAX: ffffffffffffffda RBX: 00007facbabb5fa0 RCX: 00007facba98e929 [ 228.728002][ T9514] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 228.728016][ T9514] RBP: 00007facbb85f090 R08: 0000000000000000 R09: 0000000000000000 [ 228.728028][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.728041][ T9514] R13: 0000000000000000 R14: 00007facbabb5fa0 R15: 00007ffdca7c7748 [ 228.728074][ T9514] [ 229.225980][ T9531] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 229.447398][ T9544] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 229.466359][ T9544] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1109'. [ 229.650398][ T9552] FAULT_INJECTION: forcing a failure. [ 229.650398][ T9552] name failslab, interval 1, probability 0, space 0, times 0 [ 229.663788][ T9552] CPU: 1 UID: 0 PID: 9552 Comm: syz.2.1112 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 229.663847][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.663860][ T9552] Call Trace: [ 229.663868][ T9552] [ 229.663878][ T9552] dump_stack_lvl+0x189/0x250 [ 229.663915][ T9552] ? __pfx____ratelimit+0x10/0x10 [ 229.663948][ T9552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.663979][ T9552] ? __pfx__printk+0x10/0x10 [ 229.664009][ T9552] ? __pfx___might_resched+0x10/0x10 [ 229.664045][ T9552] should_fail_ex+0x414/0x560 [ 229.664077][ T9552] should_failslab+0xa8/0x100 [ 229.664102][ T9552] __kmalloc_cache_noprof+0x70/0x3d0 [ 229.664122][ T9552] ? device_add+0xbe/0xb50 [ 229.664155][ T9552] device_add+0xbe/0xb50 [ 229.664174][ T9552] ? device_initialize+0x24b/0x440 [ 229.664198][ T9552] wakeup_source_sysfs_add+0x1af/0x280 [ 229.664228][ T9552] wakeup_source_register+0x18a/0x380 [ 229.664254][ T9552] ep_insert+0xef6/0x1a00 [ 229.664306][ T9552] ? __pfx_ep_insert+0x10/0x10 [ 229.664373][ T9552] ? __pfx___mutex_lock+0x10/0x10 [ 229.664405][ T9552] ? rcu_is_watching+0x15/0xb0 [ 229.664446][ T9552] ? bpf_lsm_capable+0x9/0x20 [ 229.664476][ T9552] do_epoll_ctl+0x7f4/0xe90 [ 229.664518][ T9552] __x64_sys_epoll_ctl+0x163/0x1a0 [ 229.664553][ T9552] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 229.664582][ T9552] ? rcu_is_watching+0x15/0xb0 [ 229.664624][ T9552] ? do_syscall_64+0xbe/0x3b0 [ 229.664653][ T9552] do_syscall_64+0xfa/0x3b0 [ 229.664677][ T9552] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.664699][ T9552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.664720][ T9552] ? clear_bhb_loop+0x60/0xb0 [ 229.664746][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.664765][ T9552] RIP: 0033:0x7fc37898e929 [ 229.664786][ T9552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.664804][ T9552] RSP: 002b:00007fc37988c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 229.664836][ T9552] RAX: ffffffffffffffda RBX: 00007fc378bb5fa0 RCX: 00007fc37898e929 [ 229.664851][ T9552] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 229.664864][ T9552] RBP: 00007fc37988c090 R08: 0000000000000000 R09: 0000000000000000 [ 229.664877][ T9552] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 229.664890][ T9552] R13: 0000000000000000 R14: 00007fc378bb5fa0 R15: 00007fffe998d5d8 [ 229.664924][ T9552] [ 230.156538][ T9557] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1113'. [ 230.938269][ T9580] geneve1: left allmulticast mode [ 230.978072][ T9580] geneve1: left promiscuous mode [ 231.031464][ T7201] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.066395][ T7201] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.106453][ T7201] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.137070][ T7201] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.403320][ T9600] FAULT_INJECTION: forcing a failure. [ 231.403320][ T9600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.417788][ T9600] CPU: 1 UID: 0 PID: 9600 Comm: syz.4.1132 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 231.417819][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.417831][ T9600] Call Trace: [ 231.417840][ T9600] [ 231.417848][ T9600] dump_stack_lvl+0x189/0x250 [ 231.417883][ T9600] ? __pfx____ratelimit+0x10/0x10 [ 231.417906][ T9600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.417935][ T9600] ? __pfx__printk+0x10/0x10 [ 231.417962][ T9600] ? __might_fault+0xb0/0x130 [ 231.418003][ T9600] should_fail_ex+0x414/0x560 [ 231.418032][ T9600] _copy_from_user+0x2d/0xb0 [ 231.418053][ T9600] wext_handle_ioctl+0xba/0x1c0 [ 231.418082][ T9600] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 231.418104][ T9600] ? __lock_acquire+0xab9/0xd20 [ 231.418149][ T9600] sock_ioctl+0x15f/0x790 [ 231.418173][ T9600] ? __pfx_sock_ioctl+0x10/0x10 [ 231.418193][ T9600] ? __fget_files+0x2a/0x420 [ 231.418214][ T9600] ? __fget_files+0x3a0/0x420 [ 231.418233][ T9600] ? __fget_files+0x2a/0x420 [ 231.418258][ T9600] ? bpf_lsm_file_ioctl+0x9/0x20 [ 231.418286][ T9600] ? __pfx_sock_ioctl+0x10/0x10 [ 231.418305][ T9600] __se_sys_ioctl+0xfc/0x170 [ 231.418338][ T9600] do_syscall_64+0xfa/0x3b0 [ 231.418363][ T9600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.418383][ T9600] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.418402][ T9600] ? clear_bhb_loop+0x60/0xb0 [ 231.418427][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.418446][ T9600] RIP: 0033:0x7f6d8cb8e929 [ 231.418466][ T9600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.418484][ T9600] RSP: 002b:00007f6d8da59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.418507][ T9600] RAX: ffffffffffffffda RBX: 00007f6d8cdb5fa0 RCX: 00007f6d8cb8e929 [ 231.418523][ T9600] RDX: 0000200000000040 RSI: 0000000000008b22 RDI: 0000000000000003 [ 231.418545][ T9600] RBP: 00007f6d8da59090 R08: 0000000000000000 R09: 0000000000000000 [ 231.418557][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.418568][ T9600] R13: 0000000000000000 R14: 00007f6d8cdb5fa0 R15: 00007ffe992ff398 [ 231.418601][ T9600] [ 231.840820][ T9605] xt_bpf: check failed: parse error [ 232.794342][ T9637] IPv6: Can't replace route, no match found [ 232.853153][ T9632] FAULT_INJECTION: forcing a failure. [ 232.853153][ T9632] name failslab, interval 1, probability 0, space 0, times 0 [ 232.886570][ T9632] CPU: 0 UID: 0 PID: 9632 Comm: syz.2.1141 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 232.886603][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.886614][ T9632] Call Trace: [ 232.886623][ T9632] [ 232.886632][ T9632] dump_stack_lvl+0x189/0x250 [ 232.886668][ T9632] ? __pfx____ratelimit+0x10/0x10 [ 232.886692][ T9632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.886722][ T9632] ? __pfx__printk+0x10/0x10 [ 232.886747][ T9632] ? __pfx___might_resched+0x10/0x10 [ 232.886807][ T9632] ? fs_reclaim_acquire+0x7d/0x100 [ 232.886837][ T9632] should_fail_ex+0x414/0x560 [ 232.886868][ T9632] should_failslab+0xa8/0x100 [ 232.886892][ T9632] __kmalloc_noprof+0xcb/0x4f0 [ 232.886910][ T9632] ? fib6_info_alloc+0x30/0xf0 [ 232.886938][ T9632] fib6_info_alloc+0x30/0xf0 [ 232.886962][ T9632] ip6_route_info_create+0x142/0x860 [ 232.886996][ T9632] ip6_route_add+0x49/0x1b0 [ 232.887025][ T9632] inet6_addr_add+0x6b2/0xc00 [ 232.887059][ T9632] ? __pfx_inet6_addr_add+0x10/0x10 [ 232.887119][ T9632] addrconf_add_ifaddr+0x27d/0x400 [ 232.887151][ T9632] ? __pfx_addrconf_add_ifaddr+0x10/0x10 [ 232.887185][ T9632] inet6_ioctl+0x13d/0x280 [ 232.887207][ T9632] ? __pfx_inet6_ioctl+0x10/0x10 [ 232.887225][ T9632] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 232.887249][ T9632] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 232.887269][ T9632] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 232.887293][ T9632] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 232.887329][ T9632] sock_do_ioctl+0xd9/0x300 [ 232.887355][ T9632] ? __pfx_sock_do_ioctl+0x10/0x10 [ 232.887372][ T9632] ? __lock_acquire+0xab9/0xd20 [ 232.887419][ T9632] sock_ioctl+0x576/0x790 [ 232.887442][ T9632] ? __pfx_sock_ioctl+0x10/0x10 [ 232.887462][ T9632] ? __fget_files+0x2a/0x420 [ 232.887483][ T9632] ? __fget_files+0x3a0/0x420 [ 232.887502][ T9632] ? __fget_files+0x2a/0x420 [ 232.887527][ T9632] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.887560][ T9632] ? __pfx_sock_ioctl+0x10/0x10 [ 232.887580][ T9632] __se_sys_ioctl+0xfc/0x170 [ 232.887611][ T9632] do_syscall_64+0xfa/0x3b0 [ 232.887634][ T9632] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.887657][ T9632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.887676][ T9632] ? clear_bhb_loop+0x60/0xb0 [ 232.887702][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.887721][ T9632] RIP: 0033:0x7fc37898e929 [ 232.887739][ T9632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.887757][ T9632] RSP: 002b:00007fc37988c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.887789][ T9632] RAX: ffffffffffffffda RBX: 00007fc378bb5fa0 RCX: 00007fc37898e929 [ 232.887805][ T9632] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000005 [ 232.887818][ T9632] RBP: 00007fc37988c090 R08: 0000000000000000 R09: 0000000000000000 [ 232.887830][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.887842][ T9632] R13: 0000000000000000 R14: 00007fc378bb5fa0 R15: 00007fffe998d5d8 [ 232.887876][ T9632] [ 233.502032][ T9644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1147'. [ 233.557015][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 233.617227][ T9650] FAULT_INJECTION: forcing a failure. [ 233.617227][ T9650] name failslab, interval 1, probability 0, space 0, times 0 [ 233.660370][ T9650] CPU: 0 UID: 0 PID: 9650 Comm: syz.0.1148 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 233.660401][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.660413][ T9650] Call Trace: [ 233.660421][ T9650] [ 233.660430][ T9650] dump_stack_lvl+0x189/0x250 [ 233.660464][ T9650] ? __pfx____ratelimit+0x10/0x10 [ 233.660487][ T9650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.660516][ T9650] ? __pfx__printk+0x10/0x10 [ 233.660543][ T9650] ? __pfx___might_resched+0x10/0x10 [ 233.660577][ T9650] should_fail_ex+0x414/0x560 [ 233.660604][ T9650] should_failslab+0xa8/0x100 [ 233.660623][ T9650] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 233.660648][ T9650] ? __alloc_skb+0x112/0x2d0 [ 233.660672][ T9650] __alloc_skb+0x112/0x2d0 [ 233.660696][ T9650] netlink_dump+0x22b/0xe20 [ 233.660726][ T9650] ? __pfx_netlink_dump+0x10/0x10 [ 233.660758][ T9650] ? kmem_cache_free+0x18f/0x400 [ 233.660777][ T9650] netlink_recvmsg+0x676/0xa30 [ 233.660814][ T9650] ? __pfx_netlink_recvmsg+0x10/0x10 [ 233.660837][ T9650] ? __lock_acquire+0xab9/0xd20 [ 233.660856][ T9650] ? aa_sock_msg_perm+0x94/0x160 [ 233.660877][ T9650] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 233.660898][ T9650] ? __pfx_netlink_recvmsg+0x10/0x10 [ 233.660918][ T9650] sock_recvmsg_nosec+0x186/0x1c0 [ 233.660940][ T9650] ____sys_recvmsg+0x3aa/0x460 [ 233.660971][ T9650] ? __pfx_____sys_recvmsg+0x10/0x10 [ 233.661008][ T9650] ? import_iovec+0x74/0xa0 [ 233.661026][ T9650] ___sys_recvmsg+0x1b5/0x510 [ 233.661054][ T9650] ? __pfx____sys_recvmsg+0x10/0x10 [ 233.661106][ T9650] ? __might_fault+0xb0/0x130 [ 233.661134][ T9650] do_recvmmsg+0x307/0x770 [ 233.661165][ T9650] ? __pfx_do_recvmmsg+0x10/0x10 [ 233.661199][ T9650] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.661235][ T9650] __x64_sys_recvmmsg+0x190/0x240 [ 233.661261][ T9650] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 233.661283][ T9650] ? rcu_is_watching+0x15/0xb0 [ 233.661311][ T9650] ? do_syscall_64+0xbe/0x3b0 [ 233.661333][ T9650] do_syscall_64+0xfa/0x3b0 [ 233.661350][ T9650] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.661366][ T9650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.661381][ T9650] ? clear_bhb_loop+0x60/0xb0 [ 233.661400][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.661415][ T9650] RIP: 0033:0x7facba98e929 [ 233.661429][ T9650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.661443][ T9650] RSP: 002b:00007facbb85f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 233.661462][ T9650] RAX: ffffffffffffffda RBX: 00007facbabb5fa0 RCX: 00007facba98e929 [ 233.661473][ T9650] RDX: 0000000000000004 RSI: 0000200000000c00 RDI: 0000000000000003 [ 233.661483][ T9650] RBP: 00007facbb85f090 R08: 0000000000000000 R09: 0000000000000000 [ 233.661493][ T9650] R10: 0000000000010100 R11: 0000000000000246 R12: 0000000000000001 [ 233.661502][ T9650] R13: 0000000000000000 R14: 00007facbabb5fa0 R15: 00007ffdca7c7748 [ 233.661528][ T9650] [ 233.712860][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 233.944950][ T9659] 8021q: VLANs not supported on caif0 [ 234.505812][ T9672] veth4: entered allmulticast mode [ 234.572992][ T9672] veth5: entered promiscuous mode [ 234.604908][ T9676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.612588][ T9676] IPv6: NLM_F_CREATE should be set when creating new route [ 234.619885][ T9676] IPv6: NLM_F_CREATE should be set when creating new route [ 234.805173][ T9680] syzkaller1: entered promiscuous mode [ 234.838852][ T9680] syzkaller1: entered allmulticast mode [ 234.881038][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1161'. [ 234.919176][ T9686] netlink: 'syz.3.1163': attribute type 2 has an invalid length. [ 235.362283][ T9701] FAULT_INJECTION: forcing a failure. [ 235.362283][ T9701] name failslab, interval 1, probability 0, space 0, times 0 [ 235.430136][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1171'. [ 235.440904][ T9701] CPU: 1 UID: 0 PID: 9701 Comm: syz.4.1170 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 235.440934][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.440946][ T9701] Call Trace: [ 235.440955][ T9701] [ 235.440963][ T9701] dump_stack_lvl+0x189/0x250 [ 235.441000][ T9701] ? __pfx____ratelimit+0x10/0x10 [ 235.441023][ T9701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.441053][ T9701] ? __pfx__printk+0x10/0x10 [ 235.441080][ T9701] ? __local_bh_enable_ip+0x12d/0x1c0 [ 235.441109][ T9701] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.441137][ T9701] should_fail_ex+0x414/0x560 [ 235.441168][ T9701] should_failslab+0xa8/0x100 [ 235.441190][ T9701] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 235.441222][ T9701] ? __alloc_skb+0x112/0x2d0 [ 235.441251][ T9701] __alloc_skb+0x112/0x2d0 [ 235.441278][ T9701] xfrm_alloc_userspi+0x81f/0xca0 [ 235.441305][ T9701] ? __pfx_aa_get_newest_label+0x10/0x10 [ 235.441341][ T9701] ? apparmor_capable+0x137/0x1b0 [ 235.441368][ T9701] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 235.441397][ T9701] ? __nla_parse+0x40/0x60 [ 235.441429][ T9701] xfrm_user_rcv_msg+0x7a0/0xab0 [ 235.441462][ T9701] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 235.441524][ T9701] ? __mutex_trylock_common+0x153/0x260 [ 235.441558][ T9701] ? __pfx___mutex_trylock_common+0x10/0x10 [ 235.441583][ T9701] ? rcu_is_watching+0x15/0xb0 [ 235.441613][ T9701] ? trace_contention_end+0x39/0x120 [ 235.441641][ T9701] netlink_rcv_skb+0x208/0x470 [ 235.441666][ T9701] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 235.441692][ T9701] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.441736][ T9701] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.441760][ T9701] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.441786][ T9701] xfrm_netlink_rcv+0x79/0x90 [ 235.441811][ T9701] netlink_unicast+0x75b/0x8d0 [ 235.441846][ T9701] netlink_sendmsg+0x805/0xb30 [ 235.441882][ T9701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.441911][ T9701] ? aa_sock_msg_perm+0x94/0x160 [ 235.441937][ T9701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.441962][ T9701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.441987][ T9701] __sock_sendmsg+0x219/0x270 [ 235.442014][ T9701] ____sys_sendmsg+0x505/0x830 [ 235.442050][ T9701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.442090][ T9701] ? import_iovec+0x74/0xa0 [ 235.442114][ T9701] ___sys_sendmsg+0x21f/0x2a0 [ 235.442145][ T9701] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.442218][ T9701] ? __fget_files+0x2a/0x420 [ 235.442239][ T9701] ? __fget_files+0x3a0/0x420 [ 235.442274][ T9701] __x64_sys_sendmsg+0x19b/0x260 [ 235.442304][ T9701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.442345][ T9701] ? __pfx_ksys_write+0x10/0x10 [ 235.442371][ T9701] ? rcu_is_watching+0x15/0xb0 [ 235.442407][ T9701] ? do_syscall_64+0xbe/0x3b0 [ 235.442434][ T9701] do_syscall_64+0xfa/0x3b0 [ 235.442456][ T9701] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.442477][ T9701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.442496][ T9701] ? clear_bhb_loop+0x60/0xb0 [ 235.442522][ T9701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.442541][ T9701] RIP: 0033:0x7f6d8cb8e929 [ 235.442572][ T9701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.442589][ T9701] RSP: 002b:00007f6d8da59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.442612][ T9701] RAX: ffffffffffffffda RBX: 00007f6d8cdb5fa0 RCX: 00007f6d8cb8e929 [ 235.442627][ T9701] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 235.442639][ T9701] RBP: 00007f6d8da59090 R08: 0000000000000000 R09: 0000000000000000 [ 235.442652][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.442663][ T9701] R13: 0000000000000000 R14: 00007f6d8cdb5fa0 R15: 00007ffe992ff398 [ 235.442696][ T9701] [ 236.078450][ T9713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1178'. [ 236.573942][ T9734] FAULT_INJECTION: forcing a failure. [ 236.573942][ T9734] name failslab, interval 1, probability 0, space 0, times 0 [ 236.630983][ T9734] CPU: 1 UID: 0 PID: 9734 Comm: syz.3.1183 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 236.631014][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.631026][ T9734] Call Trace: [ 236.631034][ T9734] [ 236.631044][ T9734] dump_stack_lvl+0x189/0x250 [ 236.631080][ T9734] ? __pfx____ratelimit+0x10/0x10 [ 236.631104][ T9734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.631134][ T9734] ? __pfx__printk+0x10/0x10 [ 236.631164][ T9734] ? __pfx___might_resched+0x10/0x10 [ 236.631199][ T9734] should_fail_ex+0x414/0x560 [ 236.631230][ T9734] should_failslab+0xa8/0x100 [ 236.631254][ T9734] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 236.631286][ T9734] ? __alloc_skb+0x112/0x2d0 [ 236.631318][ T9734] __alloc_skb+0x112/0x2d0 [ 236.631349][ T9734] netlink_dump+0x22b/0xe20 [ 236.631388][ T9734] ? __pfx_netlink_dump+0x10/0x10 [ 236.631428][ T9734] ? genl_start+0x499/0x6c0 [ 236.631467][ T9734] __netlink_dump_start+0x5cb/0x7e0 [ 236.631501][ T9734] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 236.631536][ T9734] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 236.631564][ T9734] ? genl_get_cmd+0x7d9/0x910 [ 236.631607][ T9734] ? __pfx_genl_start+0x10/0x10 [ 236.631633][ T9734] ? __pfx_genl_dumpit+0x10/0x10 [ 236.631659][ T9734] ? __pfx_genl_done+0x10/0x10 [ 236.631704][ T9734] genl_rcv_msg+0x5da/0x790 [ 236.631741][ T9734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.631766][ T9734] ? ref_tracker_free+0x63a/0x7d0 [ 236.631790][ T9734] ? __pfx_macsec_dump_txsc+0x10/0x10 [ 236.631817][ T9734] ? __pfx_ref_tracker_free+0x10/0x10 [ 236.631855][ T9734] netlink_rcv_skb+0x208/0x470 [ 236.631881][ T9734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.631912][ T9734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.631958][ T9734] ? down_read+0x1ad/0x2e0 [ 236.631987][ T9734] genl_rcv+0x28/0x40 [ 236.632014][ T9734] netlink_unicast+0x75b/0x8d0 [ 236.632050][ T9734] netlink_sendmsg+0x805/0xb30 [ 236.632087][ T9734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.632115][ T9734] ? aa_sock_msg_perm+0x94/0x160 [ 236.632142][ T9734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.632167][ T9734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.632192][ T9734] __sock_sendmsg+0x219/0x270 [ 236.632219][ T9734] ____sys_sendmsg+0x505/0x830 [ 236.632256][ T9734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.632295][ T9734] ? import_iovec+0x74/0xa0 [ 236.632320][ T9734] ___sys_sendmsg+0x21f/0x2a0 [ 236.632351][ T9734] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.632425][ T9734] ? __fget_files+0x2a/0x420 [ 236.632445][ T9734] ? __fget_files+0x3a0/0x420 [ 236.632480][ T9734] __x64_sys_sendmsg+0x19b/0x260 [ 236.632511][ T9734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.632552][ T9734] ? __pfx_ksys_write+0x10/0x10 [ 236.632586][ T9734] ? rcu_is_watching+0x15/0xb0 [ 236.632621][ T9734] ? do_syscall_64+0xbe/0x3b0 [ 236.632650][ T9734] do_syscall_64+0xfa/0x3b0 [ 236.632670][ T9734] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.632691][ T9734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.632711][ T9734] ? clear_bhb_loop+0x60/0xb0 [ 236.632736][ T9734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.632754][ T9734] RIP: 0033:0x7fda3618e929 [ 236.632773][ T9734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.632791][ T9734] RSP: 002b:00007fda37018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.632814][ T9734] RAX: ffffffffffffffda RBX: 00007fda363b5fa0 RCX: 00007fda3618e929 [ 236.632828][ T9734] RDX: 00000000000480c0 RSI: 0000200000000040 RDI: 0000000000000003 [ 236.632841][ T9734] RBP: 00007fda37018090 R08: 0000000000000000 R09: 0000000000000000 [ 236.632854][ T9734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.632866][ T9734] R13: 0000000000000000 R14: 00007fda363b5fa0 R15: 00007ffc05cadc78 [ 236.632901][ T9734] [ 236.635915][ T9739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1183'. [ 237.223531][ T9751] FAULT_INJECTION: forcing a failure. [ 237.223531][ T9751] name failslab, interval 1, probability 0, space 0, times 0 [ 237.248835][ T9751] CPU: 1 UID: 0 PID: 9751 Comm: syz.3.1188 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 237.248868][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.248880][ T9751] Call Trace: [ 237.248888][ T9751] [ 237.248897][ T9751] dump_stack_lvl+0x189/0x250 [ 237.248933][ T9751] ? __pfx____ratelimit+0x10/0x10 [ 237.248957][ T9751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.248988][ T9751] ? __pfx__printk+0x10/0x10 [ 237.249017][ T9751] ? __pfx___might_resched+0x10/0x10 [ 237.249045][ T9751] ? fs_reclaim_acquire+0x7d/0x100 [ 237.249073][ T9751] should_fail_ex+0x414/0x560 [ 237.249100][ T9751] ? alloc_netdev_mqs+0xa3/0x1170 [ 237.249116][ T9751] should_failslab+0xa8/0x100 [ 237.249138][ T9751] __kvmalloc_node_noprof+0x161/0x5f0 [ 237.249159][ T9751] ? alloc_netdev_mqs+0xa3/0x1170 [ 237.249174][ T9751] ? snprintf+0xda/0x120 [ 237.249206][ T9751] alloc_netdev_mqs+0xa3/0x1170 [ 237.249222][ T9751] ? __pfx_macvlan_setup+0x10/0x10 [ 237.249245][ T9751] ? __mutex_trylock_common+0x153/0x260 [ 237.249270][ T9751] rtnl_create_link+0x31f/0xd10 [ 237.249296][ T9751] rtnl_newlink_create+0x25c/0xb00 [ 237.249330][ T9751] ? __pfx_aa_get_newest_label+0x10/0x10 [ 237.249358][ T9751] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 237.249381][ T9751] ? rtnl_newlink+0x8db/0x1c70 [ 237.249407][ T9751] ? __pfx___mutex_lock+0x10/0x10 [ 237.249441][ T9751] ? ns_capable+0x8a/0xf0 [ 237.249473][ T9751] rtnl_newlink+0x16d6/0x1c70 [ 237.249498][ T9751] ? netlink_sendmsg+0x805/0xb30 [ 237.249535][ T9751] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.249593][ T9751] ? kasan_quarantine_put+0xdd/0x220 [ 237.249620][ T9751] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.249648][ T9751] ? nlmon_xmit+0xb0/0x100 [ 237.249663][ T9751] ? kmem_cache_free+0x18f/0x400 [ 237.249690][ T9751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 237.249717][ T9751] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.249739][ T9751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 237.249766][ T9751] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 237.249798][ T9751] ? __dev_queue_xmit+0x27e/0x3a70 [ 237.249846][ T9751] ? __lock_acquire+0xab9/0xd20 [ 237.249901][ T9751] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.249923][ T9751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 237.249949][ T9751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 237.249970][ T9751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.249990][ T9751] ? ref_tracker_free+0x63a/0x7d0 [ 237.250012][ T9751] ? __copy_skb_header+0xa7/0x550 [ 237.250041][ T9751] ? __pfx_ref_tracker_free+0x10/0x10 [ 237.250064][ T9751] ? __skb_clone+0x63/0x7a0 [ 237.250100][ T9751] netlink_rcv_skb+0x208/0x470 [ 237.250123][ T9751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.250148][ T9751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.250186][ T9751] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.250207][ T9751] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.250236][ T9751] netlink_unicast+0x75b/0x8d0 [ 237.250270][ T9751] netlink_sendmsg+0x805/0xb30 [ 237.250304][ T9751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.250331][ T9751] ? aa_sock_msg_perm+0x94/0x160 [ 237.250356][ T9751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.250379][ T9751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.250402][ T9751] __sock_sendmsg+0x219/0x270 [ 237.250427][ T9751] ____sys_sendmsg+0x505/0x830 [ 237.250460][ T9751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.250498][ T9751] ? import_iovec+0x74/0xa0 [ 237.250520][ T9751] ___sys_sendmsg+0x21f/0x2a0 [ 237.250550][ T9751] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.250627][ T9751] ? __fget_files+0x2a/0x420 [ 237.250645][ T9751] ? __fget_files+0x3a0/0x420 [ 237.250678][ T9751] __x64_sys_sendmsg+0x19b/0x260 [ 237.250706][ T9751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.250744][ T9751] ? __pfx_ksys_write+0x10/0x10 [ 237.250770][ T9751] ? rcu_is_watching+0x15/0xb0 [ 237.250804][ T9751] ? do_syscall_64+0xbe/0x3b0 [ 237.250832][ T9751] do_syscall_64+0xfa/0x3b0 [ 237.250852][ T9751] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.250870][ T9751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.250889][ T9751] ? clear_bhb_loop+0x60/0xb0 [ 237.250912][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.250930][ T9751] RIP: 0033:0x7fda3618e929 [ 237.250949][ T9751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.250967][ T9751] RSP: 002b:00007fda37018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.250990][ T9751] RAX: ffffffffffffffda RBX: 00007fda363b5fa0 RCX: 00007fda3618e929 [ 237.251005][ T9751] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 237.251019][ T9751] RBP: 00007fda37018090 R08: 0000000000000000 R09: 0000000000000000 [ 237.251031][ T9751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.251043][ T9751] R13: 0000000000000000 R14: 00007fda363b5fa0 R15: 00007ffc05cadc78 [ 237.251077][ T9751] [ 237.898175][ T9758] IPVS: Error connecting to the multicast addr [ 238.417774][ T9778] netlink: 'syz.1.1198': attribute type 2 has an invalid length. [ 238.591087][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1200'. [ 238.674015][ T9780] pim6reg1: entered allmulticast mode [ 238.807110][ T9788] pim6reg1: entered allmulticast mode [ 239.288265][ T9801] FAULT_INJECTION: forcing a failure. [ 239.288265][ T9801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.320856][ T9801] CPU: 1 UID: 0 PID: 9801 Comm: syz.2.1208 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 239.320886][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.320897][ T9801] Call Trace: [ 239.320904][ T9801] [ 239.320913][ T9801] dump_stack_lvl+0x189/0x250 [ 239.320948][ T9801] ? __pfx____ratelimit+0x10/0x10 [ 239.320971][ T9801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.320999][ T9801] ? __pfx__printk+0x10/0x10 [ 239.321021][ T9801] ? __might_fault+0xb0/0x130 [ 239.321062][ T9801] should_fail_ex+0x414/0x560 [ 239.321092][ T9801] _copy_from_user+0x2d/0xb0 [ 239.321110][ T9801] kstrtouint_from_user+0xc4/0x170 [ 239.321139][ T9801] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 239.321182][ T9801] proc_fail_nth_write+0x88/0x240 [ 239.321206][ T9801] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 239.321234][ T9801] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 239.321259][ T9801] vfs_write+0x27b/0xa90 [ 239.321298][ T9801] ? __pfx_vfs_write+0x10/0x10 [ 239.321329][ T9801] ? __fget_files+0x2a/0x420 [ 239.321355][ T9801] ? __fget_files+0x3a0/0x420 [ 239.321375][ T9801] ? __fget_files+0x2a/0x420 [ 239.321406][ T9801] ksys_write+0x145/0x250 [ 239.321439][ T9801] ? __pfx_ksys_write+0x10/0x10 [ 239.321465][ T9801] ? rcu_is_watching+0x15/0xb0 [ 239.321508][ T9801] ? do_syscall_64+0xbe/0x3b0 [ 239.321537][ T9801] do_syscall_64+0xfa/0x3b0 [ 239.321558][ T9801] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.321581][ T9801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.321600][ T9801] ? clear_bhb_loop+0x60/0xb0 [ 239.321625][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.321644][ T9801] RIP: 0033:0x7fc37898d3df [ 239.321662][ T9801] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 239.321679][ T9801] RSP: 002b:00007fc37988c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 239.321702][ T9801] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc37898d3df [ 239.321716][ T9801] RDX: 0000000000000001 RSI: 00007fc37988c0a0 RDI: 0000000000000004 [ 239.321728][ T9801] RBP: 00007fc37988c090 R08: 0000000000000000 R09: 0000000000000000 [ 239.321739][ T9801] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 239.321751][ T9801] R13: 0000000000000000 R14: 00007fc378bb5fa0 R15: 00007fffe998d5d8 [ 239.321784][ T9801] [ 239.842203][ T9816] netlink: 'syz.0.1215': attribute type 72 has an invalid length. [ 240.447807][ T9830] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1220'. [ 240.754730][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 240.778953][ T9845] netlink: 'syz.3.1228': attribute type 72 has an invalid length. [ 241.035874][ T9854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1230'. [ 241.562373][ T9868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1235'. [ 241.889554][ T9879] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1240'. [ 241.985211][ T9882] bridge_slave_0: left allmulticast mode [ 241.993657][ T9882] bridge_slave_0: left promiscuous mode [ 242.003351][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.029297][ T9882] bridge_slave_1: left allmulticast mode [ 242.072506][ T9882] bridge_slave_1: left promiscuous mode [ 242.092389][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.164680][ T9882] bond0: (slave bond_slave_0): Releasing backup interface [ 242.232733][ T9882] bond_slave_0: left promiscuous mode [ 242.328132][ T9882] bond0: (slave bond_slave_1): Releasing backup interface [ 242.409066][ T9882] bond_slave_1: left promiscuous mode [ 242.464715][ T9882] team0: Port device team_slave_0 removed [ 242.485795][ T9882] team0: Port device team_slave_1 removed [ 242.496851][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.509522][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.530512][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.538286][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.587441][ T9882] bond1: (slave bond2): Releasing backup interface [ 242.636762][ T9882] vxlan0: left allmulticast mode [ 242.650081][ T9882] vxlan0: left promiscuous mode [ 242.673262][ T9882] bridge0: port 3(vxlan0) entered disabled state [ 242.888254][ T9914] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1252'. [ 243.139072][ T9919] set match dimension is over the limit! [ 243.174055][ T9921] netlink: 'syz.3.1254': attribute type 3 has an invalid length. [ 243.335871][ T9926] 8021q: VLANs not supported on caif0 [ 243.559877][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 243.598735][ T9934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1260'. [ 243.633754][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 243.719744][ T9936] vlan3: entered promiscuous mode [ 243.727507][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1261'. [ 243.846247][ T9947] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1265'. [ 244.028450][ T9950] set match dimension is over the limit! [ 244.234732][ T9961] FAULT_INJECTION: forcing a failure. [ 244.234732][ T9961] name failslab, interval 1, probability 0, space 0, times 0 [ 244.281603][ T9961] CPU: 1 UID: 0 PID: 9961 Comm: syz.0.1270 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 244.281635][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.281647][ T9961] Call Trace: [ 244.281655][ T9961] [ 244.281664][ T9961] dump_stack_lvl+0x189/0x250 [ 244.281701][ T9961] ? __pfx____ratelimit+0x10/0x10 [ 244.281724][ T9961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.281754][ T9961] ? __pfx__printk+0x10/0x10 [ 244.281783][ T9961] ? __pfx___might_resched+0x10/0x10 [ 244.281812][ T9961] ? fs_reclaim_acquire+0x7d/0x100 [ 244.281841][ T9961] should_fail_ex+0x414/0x560 [ 244.281872][ T9961] should_failslab+0xa8/0x100 [ 244.281895][ T9961] __kmalloc_node_noprof+0xd1/0x4e0 [ 244.281914][ T9961] ? qdisc_alloc+0x97/0xaa0 [ 244.281943][ T9961] qdisc_alloc+0x97/0xaa0 [ 244.281970][ T9961] ? rcu_is_watching+0x15/0xb0 [ 244.282003][ T9961] qdisc_create_dflt+0x8e/0x4e0 [ 244.282032][ T9961] taprio_init+0x3e5/0xbd0 [ 244.282071][ T9961] ? __pfx_taprio_init+0x10/0x10 [ 244.282099][ T9961] ? lockdep_rtnl_is_held+0x26/0x40 [ 244.282126][ T9961] ? qdisc_lookup+0x36d/0x6d0 [ 244.282153][ T9961] ? __pfx_taprio_init+0x10/0x10 [ 244.282177][ T9961] qdisc_create+0x7a9/0xea0 [ 244.282208][ T9961] tc_modify_qdisc+0x1426/0x2010 [ 244.282245][ T9961] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 244.282303][ T9961] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 244.282321][ T9961] rtnetlink_rcv_msg+0x77c/0xb70 [ 244.282349][ T9961] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 244.282372][ T9961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.282391][ T9961] ? ref_tracker_free+0x63a/0x7d0 [ 244.282414][ T9961] ? __copy_skb_header+0xa7/0x550 [ 244.282443][ T9961] ? __pfx_ref_tracker_free+0x10/0x10 [ 244.282468][ T9961] ? __skb_clone+0x63/0x7a0 [ 244.282505][ T9961] netlink_rcv_skb+0x208/0x470 [ 244.282540][ T9961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.282566][ T9961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.282606][ T9961] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.282629][ T9961] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.282660][ T9961] netlink_unicast+0x75b/0x8d0 [ 244.282695][ T9961] netlink_sendmsg+0x805/0xb30 [ 244.282731][ T9961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.282760][ T9961] ? aa_sock_msg_perm+0x94/0x160 [ 244.282787][ T9961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.282810][ T9961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.282836][ T9961] __sock_sendmsg+0x219/0x270 [ 244.282863][ T9961] ____sys_sendmsg+0x505/0x830 [ 244.282898][ T9961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.282937][ T9961] ? import_iovec+0x74/0xa0 [ 244.282960][ T9961] ___sys_sendmsg+0x21f/0x2a0 [ 244.282990][ T9961] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.283063][ T9961] ? __fget_files+0x2a/0x420 [ 244.283084][ T9961] ? __fget_files+0x3a0/0x420 [ 244.283119][ T9961] __x64_sys_sendmsg+0x19b/0x260 [ 244.283150][ T9961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.283188][ T9961] ? __pfx_ksys_write+0x10/0x10 [ 244.283213][ T9961] ? rcu_is_watching+0x15/0xb0 [ 244.283246][ T9961] ? do_syscall_64+0xbe/0x3b0 [ 244.283273][ T9961] do_syscall_64+0xfa/0x3b0 [ 244.283295][ T9961] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.283318][ T9961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.283338][ T9961] ? clear_bhb_loop+0x60/0xb0 [ 244.283363][ T9961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.283382][ T9961] RIP: 0033:0x7facba98e929 [ 244.283402][ T9961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.283419][ T9961] RSP: 002b:00007facbb85f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.283443][ T9961] RAX: ffffffffffffffda RBX: 00007facbabb5fa0 RCX: 00007facba98e929 [ 244.283458][ T9961] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 244.283470][ T9961] RBP: 00007facbb85f090 R08: 0000000000000000 R09: 0000000000000000 [ 244.283483][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.283494][ T9961] R13: 0000000000000000 R14: 00007facbabb5fa0 R15: 00007ffdca7c7748 [ 244.283536][ T9961] [ 244.295126][ T9965] netlink: 'syz.3.1272': attribute type 1 has an invalid length. [ 244.865650][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1276'. [ 244.933349][ T9980] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20001 [ 245.482448][ T9999] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 245.577780][ T9999] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 245.863712][T10010] nbd: nbd1 already in use [ 246.587260][T10037] FAULT_INJECTION: forcing a failure. [ 246.587260][T10037] name failslab, interval 1, probability 0, space 0, times 0 [ 246.618350][T10036] syzkaller1: entered promiscuous mode [ 246.624289][T10036] syzkaller1: entered allmulticast mode [ 246.633672][T10037] CPU: 0 UID: 0 PID: 10037 Comm: syz.0.1304 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 246.633706][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.633718][T10037] Call Trace: [ 246.633726][T10037] [ 246.633734][T10037] dump_stack_lvl+0x189/0x250 [ 246.633772][T10037] ? __pfx____ratelimit+0x10/0x10 [ 246.633796][T10037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.633826][T10037] ? __pfx__printk+0x10/0x10 [ 246.633854][T10037] ? __pfx___might_resched+0x10/0x10 [ 246.633889][T10037] should_fail_ex+0x414/0x560 [ 246.633920][T10037] should_failslab+0xa8/0x100 [ 246.633943][T10037] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 246.633975][T10037] ? __alloc_skb+0x112/0x2d0 [ 246.634005][T10037] __alloc_skb+0x112/0x2d0 [ 246.634035][T10037] netlink_sendmsg+0x5c6/0xb30 [ 246.634071][T10037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.634099][T10037] ? aa_sock_msg_perm+0x94/0x160 [ 246.634126][T10037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.634158][T10037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.634184][T10037] __sock_sendmsg+0x219/0x270 [ 246.634210][T10037] ____sys_sendmsg+0x505/0x830 [ 246.634245][T10037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.634284][T10037] ? import_iovec+0x74/0xa0 [ 246.634307][T10037] ___sys_sendmsg+0x21f/0x2a0 [ 246.634344][T10037] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.634415][T10037] ? __fget_files+0x2a/0x420 [ 246.634435][T10037] ? __fget_files+0x3a0/0x420 [ 246.634469][T10037] __x64_sys_sendmsg+0x19b/0x260 [ 246.634508][T10037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.634547][T10037] ? __pfx_ksys_write+0x10/0x10 [ 246.634584][T10037] ? do_syscall_64+0xbe/0x3b0 [ 246.634612][T10037] do_syscall_64+0xfa/0x3b0 [ 246.634634][T10037] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.634655][T10037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.634675][T10037] ? clear_bhb_loop+0x60/0xb0 [ 246.634700][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.634719][T10037] RIP: 0033:0x7facba98e929 [ 246.634739][T10037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.634756][T10037] RSP: 002b:00007facbb85f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.634779][T10037] RAX: ffffffffffffffda RBX: 00007facbabb5fa0 RCX: 00007facba98e929 [ 246.634794][T10037] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 246.634807][T10037] RBP: 00007facbb85f090 R08: 0000000000000000 R09: 0000000000000000 [ 246.634819][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.634830][T10037] R13: 0000000000000000 R14: 00007facbabb5fa0 R15: 00007ffdca7c7748 [ 246.634864][T10037] [ 247.046912][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1306'. [ 247.109760][T10043] vlan3: entered promiscuous mode [ 247.127881][T10043] batadv0: entered promiscuous mode [ 247.343188][T10048] syzkaller0: entered promiscuous mode [ 247.374655][T10048] syzkaller0: entered allmulticast mode [ 247.982420][T10066] netlink: 'syz.0.1314': attribute type 1 has an invalid length. [ 247.990588][T10066] netlink: 'syz.0.1314': attribute type 1 has an invalid length. [ 249.440512][T10078] syzkaller1: entered promiscuous mode [ 249.461616][T10078] syzkaller1: entered allmulticast mode [ 249.831551][T10098] tipc: Cannot configure node identity twice [ 249.860020][T10098] tipc: Cannot configure node identity twice [ 250.679671][T10120] netlink: 'syz.3.1334': attribute type 12 has an invalid length. [ 250.975873][T10129] syzkaller1: entered promiscuous mode [ 251.011164][T10129] syzkaller1: entered allmulticast mode [ 251.330728][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 251.353912][T10138] geneve3: entered promiscuous mode [ 251.359405][T10138] geneve3: entered allmulticast mode [ 251.366948][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 55914 - 0 [ 251.385330][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 55914 - 0 [ 251.395097][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 55914 - 0 [ 251.404842][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 55914 - 0 [ 251.738512][T10147] netlink: 'syz.4.1342': attribute type 29 has an invalid length. [ 252.097491][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1348'. [ 252.156538][T10164] syzkaller1: entered promiscuous mode [ 252.162445][T10164] syzkaller1: entered allmulticast mode [ 252.187151][T10166] netlink: 'syz.4.1350': attribute type 1 has an invalid length. [ 252.274448][T10167] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 252.326951][T10166] bond3: entered promiscuous mode [ 252.345126][T10166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.847913][T10190] netlink: 'syz.3.1359': attribute type 1 has an invalid length. [ 252.995759][T10190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.066475][T10196] bond4: (slave gretap1): making interface the new active one [ 253.081419][T10200] set match dimension is over the limit! [ 253.098998][T10196] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 253.124633][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1362'. [ 253.135069][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1362'. [ 253.262265][T10205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1364'. [ 253.274014][T10205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1364'. [ 254.348930][ T5836] Bluetooth: hci0: command tx timeout [ 256.159874][T10214] veth3: entered promiscuous mode [ 256.165144][T10214] veth3: entered allmulticast mode [ 256.172449][T10214] team0: Device veth3 is up. Set it down before adding it as a team port [ 256.289507][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.438514][T10233] netlink: ct family unspecified [ 256.444380][T10233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.502235][T10237] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1373'. [ 256.747129][T10249] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1377'. [ 256.835849][T10256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1378'. [ 257.284553][T10266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.523295][T10275] FAULT_INJECTION: forcing a failure. [ 257.523295][T10275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.572882][T10275] CPU: 0 UID: 0 PID: 10275 Comm: syz.1.1385 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 257.572914][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.572926][T10275] Call Trace: [ 257.572934][T10275] [ 257.572942][T10275] dump_stack_lvl+0x189/0x250 [ 257.572978][T10275] ? __pfx____ratelimit+0x10/0x10 [ 257.573001][T10275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.573029][T10275] ? __pfx__printk+0x10/0x10 [ 257.573066][T10275] should_fail_ex+0x414/0x560 [ 257.573097][T10275] _copy_to_user+0x31/0xb0 [ 257.573119][T10275] simple_read_from_buffer+0xe1/0x170 [ 257.573146][T10275] proc_fail_nth_read+0x1df/0x250 [ 257.573173][T10275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.573200][T10275] ? rw_verify_area+0x258/0x650 [ 257.573227][T10275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.573251][T10275] vfs_read+0x1fd/0x980 [ 257.573286][T10275] ? __pfx___mutex_lock+0x10/0x10 [ 257.573310][T10275] ? __pfx_vfs_read+0x10/0x10 [ 257.573341][T10275] ? __fget_files+0x2a/0x420 [ 257.573368][T10275] ? __fget_files+0x3a0/0x420 [ 257.573388][T10275] ? __fget_files+0x2a/0x420 [ 257.573443][T10275] ksys_read+0x145/0x250 [ 257.573477][T10275] ? __pfx_ksys_read+0x10/0x10 [ 257.573505][T10275] ? rcu_is_watching+0x15/0xb0 [ 257.573536][T10275] ? trace_sys_enter+0x25/0x120 [ 257.573569][T10275] do_syscall_64+0xfa/0x3b0 [ 257.573591][T10275] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.573613][T10275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.573632][T10275] ? clear_bhb_loop+0x60/0xb0 [ 257.573656][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.573675][T10275] RIP: 0033:0x7fa05e38d33c [ 257.573694][T10275] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.573710][T10275] RSP: 002b:00007fa05f20a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.573731][T10275] RAX: ffffffffffffffda RBX: 00007fa05e5b5fa0 RCX: 00007fa05e38d33c [ 257.573746][T10275] RDX: 000000000000000f RSI: 00007fa05f20a0a0 RDI: 0000000000000005 [ 257.573758][T10275] RBP: 00007fa05f20a090 R08: 0000000000000000 R09: 0000000000000000 [ 257.573770][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.573781][T10275] R13: 0000000000000000 R14: 00007fa05e5b5fa0 R15: 00007ffe80e8d118 [ 257.573814][T10275] [ 257.632154][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 257.678181][T10277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.917162][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 257.945426][T10281] netlink: 'syz.0.1387': attribute type 33 has an invalid length. [ 257.991825][T10281] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1387'. [ 258.102805][T10291] 8021q: VLANs not supported on nlmon0 [ 258.379829][T10302] set match dimension is over the limit! [ 258.856253][T10310] netlink: 'syz.0.1396': attribute type 13 has an invalid length. [ 259.740561][T10310] veth1_vlan: left allmulticast mode [ 259.933327][ T7204] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.948113][T10321] FAULT_INJECTION: forcing a failure. [ 259.948113][T10321] name failslab, interval 1, probability 0, space 0, times 0 [ 259.953392][ T7204] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.989155][T10321] CPU: 0 UID: 0 PID: 10321 Comm: syz.3.1400 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 259.989187][T10321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.989199][T10321] Call Trace: [ 259.989207][T10321] [ 259.989216][T10321] dump_stack_lvl+0x189/0x250 [ 259.989253][T10321] ? __pfx____ratelimit+0x10/0x10 [ 259.989277][T10321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.989308][T10321] ? __pfx__printk+0x10/0x10 [ 259.989337][T10321] ? __pfx___might_resched+0x10/0x10 [ 259.989374][T10321] should_fail_ex+0x414/0x560 [ 259.989405][T10321] should_failslab+0xa8/0x100 [ 259.989440][T10321] __kmalloc_cache_noprof+0x70/0x3d0 [ 259.989459][T10321] ? cfg80211_sinfo_alloc_tid_stats+0x77/0x100 [ 259.989487][T10321] cfg80211_sinfo_alloc_tid_stats+0x77/0x100 [ 259.989511][T10321] sta_set_sinfo+0x1d6a/0x6990 [ 259.989561][T10321] ? __sta_info_destroy_part2+0x2e9/0x450 [ 259.989587][T10321] ? __kasan_kmalloc+0x93/0xb0 [ 259.989607][T10321] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 259.989624][T10321] ? __sta_info_destroy_part2+0x2e9/0x450 [ 259.989652][T10321] __sta_info_destroy_part2+0x306/0x450 [ 259.989680][T10321] __sta_info_flush+0x5e4/0x710 [ 259.989702][T10321] ? __pfx___nla_validate_parse+0x10/0x10 [ 259.989737][T10321] ? __pfx___sta_info_flush+0x10/0x10 [ 259.989757][T10321] ? netdev_run_todo+0xe1d/0xea0 [ 259.989791][T10321] ? __pfx___mutex_lock+0x10/0x10 [ 259.989820][T10321] ieee80211_del_station+0x84/0xb0 [ 259.989843][T10321] nl80211_del_station+0x58a/0x800 [ 259.989873][T10321] ? __pfx_nl80211_del_station+0x10/0x10 [ 259.989896][T10321] ? nl80211_pre_doit+0x4f1/0x930 [ 259.989933][T10321] genl_family_rcv_msg_doit+0x212/0x300 [ 259.989973][T10321] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 259.990018][T10321] ? bpf_lsm_capable+0x9/0x20 [ 259.990036][T10321] ? security_capable+0x7e/0x2e0 [ 259.990068][T10321] genl_rcv_msg+0x60e/0x790 [ 259.990106][T10321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.990131][T10321] ? ref_tracker_free+0x63a/0x7d0 [ 259.990154][T10321] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 259.990179][T10321] ? __pfx_nl80211_del_station+0x10/0x10 [ 259.990197][T10321] ? __pfx_nl80211_post_doit+0x10/0x10 [ 259.990227][T10321] ? __pfx_ref_tracker_free+0x10/0x10 [ 259.990266][T10321] netlink_rcv_skb+0x208/0x470 [ 259.990291][T10321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.990322][T10321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.990368][T10321] ? down_read+0x1ad/0x2e0 [ 259.990421][T10321] genl_rcv+0x28/0x40 [ 259.990447][T10321] netlink_unicast+0x75b/0x8d0 [ 259.990483][T10321] netlink_sendmsg+0x805/0xb30 [ 259.990520][T10321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.990549][T10321] ? aa_sock_msg_perm+0x94/0x160 [ 259.990576][T10321] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.990601][T10321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.990626][T10321] __sock_sendmsg+0x219/0x270 [ 259.990653][T10321] ____sys_sendmsg+0x505/0x830 [ 259.990687][T10321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.990727][T10321] ? import_iovec+0x74/0xa0 [ 259.990751][T10321] ___sys_sendmsg+0x21f/0x2a0 [ 259.990783][T10321] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.990855][T10321] ? __fget_files+0x2a/0x420 [ 259.990876][T10321] ? __fget_files+0x3a0/0x420 [ 259.990910][T10321] __x64_sys_sendmsg+0x19b/0x260 [ 259.990943][T10321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.990983][T10321] ? __pfx_ksys_write+0x10/0x10 [ 259.991010][T10321] ? rcu_is_watching+0x15/0xb0 [ 259.991046][T10321] ? do_syscall_64+0xbe/0x3b0 [ 259.991076][T10321] do_syscall_64+0xfa/0x3b0 [ 259.991097][T10321] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.991119][T10321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.991138][T10321] ? clear_bhb_loop+0x60/0xb0 [ 259.991163][T10321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.991182][T10321] RIP: 0033:0x7fda3618e929 [ 259.991201][T10321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.991220][T10321] RSP: 002b:00007fda37018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.991243][T10321] RAX: ffffffffffffffda RBX: 00007fda363b5fa0 RCX: 00007fda3618e929 [ 259.991258][T10321] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 259.991271][T10321] RBP: 00007fda37018090 R08: 0000000000000000 R09: 0000000000000000 [ 259.991283][T10321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.991296][T10321] R13: 0000000000000000 R14: 00007fda363b5fa0 R15: 00007ffc05cadc78 [ 259.991330][T10321] [ 260.458799][ T7204] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.479237][ T7204] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.898461][T10338] netlink: 'syz.4.1408': attribute type 7 has an invalid length. [ 261.496099][T10370] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.519694][T10370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.508237][T10402] netlink: 'syz.0.1429': attribute type 13 has an invalid length. [ 262.781471][T10417] wg1 speed is unknown, defaulting to 1000 [ 262.787597][T10417] wg1 speed is unknown, defaulting to 1000 [ 262.796885][T10417] wg1 speed is unknown, defaulting to 1000 [ 262.810667][T10417] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 262.826786][T10417] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 262.907025][T10417] wg1 speed is unknown, defaulting to 1000 [ 262.966650][T10417] wg1 speed is unknown, defaulting to 1000 [ 262.977293][T10417] wg1 speed is unknown, defaulting to 1000 [ 263.002568][T10417] wg1 speed is unknown, defaulting to 1000 [ 263.020486][T10417] wg1 speed is unknown, defaulting to 1000 [ 263.507608][T10427] FAULT_INJECTION: forcing a failure. [ 263.507608][T10427] name failslab, interval 1, probability 0, space 0, times 0 [ 263.525818][T10427] CPU: 1 UID: 0 PID: 10427 Comm: syz.2.1439 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 263.525850][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.525862][T10427] Call Trace: [ 263.525871][T10427] [ 263.525880][T10427] dump_stack_lvl+0x189/0x250 [ 263.525916][T10427] ? __pfx____ratelimit+0x10/0x10 [ 263.525940][T10427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.525970][T10427] ? __pfx__printk+0x10/0x10 [ 263.525999][T10427] ? __pfx___might_resched+0x10/0x10 [ 263.526036][T10427] should_fail_ex+0x414/0x560 [ 263.526068][T10427] should_failslab+0xa8/0x100 [ 263.526091][T10427] __kmalloc_cache_noprof+0x70/0x3d0 [ 263.526111][T10427] ? sctp_association_new+0x89/0x25f0 [ 263.526143][T10427] sctp_association_new+0x89/0x25f0 [ 263.526174][T10427] ? sctp_has_association+0x1cd/0x1f0 [ 263.526201][T10427] ? sctp_has_association+0x2f/0x1f0 [ 263.526230][T10427] ? __ipv6_addr_type+0x247/0x2f0 [ 263.526255][T10427] sctp_connect_new_asoc+0x2c5/0x690 [ 263.526286][T10427] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 263.526314][T10427] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 263.526340][T10427] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 263.526363][T10427] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 263.526388][T10427] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 263.526425][T10427] ? security_sctp_bind_connect+0x7e/0x2e0 [ 263.526449][T10427] sctp_sendmsg+0x155c/0x2810 [ 263.526487][T10427] ? __pfx_sctp_sendmsg+0x10/0x10 [ 263.526516][T10427] ? aa_sk_perm+0x81e/0x950 [ 263.526545][T10427] ? __pfx_aa_sk_perm+0x10/0x10 [ 263.526571][T10427] ? sock_rps_record_flow+0x19/0x410 [ 263.526593][T10427] ? inet_sendmsg+0x2f4/0x370 [ 263.526610][T10427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.526637][T10427] __sock_sendmsg+0x19c/0x270 [ 263.526664][T10427] __sys_sendto+0x3bd/0x520 [ 263.526693][T10427] ? __pfx___sys_sendto+0x10/0x10 [ 263.526714][T10427] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 263.526758][T10427] ? __fget_files+0x3a0/0x420 [ 263.526792][T10427] ? ksys_write+0x22a/0x250 [ 263.526823][T10427] ? __pfx_ksys_write+0x10/0x10 [ 263.526849][T10427] ? rcu_is_watching+0x15/0xb0 [ 263.526881][T10427] __x64_sys_sendto+0xde/0x100 [ 263.526912][T10427] do_syscall_64+0xfa/0x3b0 [ 263.526933][T10427] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.526953][T10427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.526972][T10427] ? clear_bhb_loop+0x60/0xb0 [ 263.526996][T10427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.527015][T10427] RIP: 0033:0x7fc37898e929 [ 263.527033][T10427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.527050][T10427] RSP: 002b:00007fc37988c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 263.527072][T10427] RAX: ffffffffffffffda RBX: 00007fc378bb5fa0 RCX: 00007fc37898e929 [ 263.527087][T10427] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 263.527100][T10427] RBP: 00007fc37988c090 R08: 0000200000000100 R09: 000000000000001c [ 263.527113][T10427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.527125][T10427] R13: 0000000000000000 R14: 00007fc378bb5fa0 R15: 00007fffe998d5d8 [ 263.527160][T10427] [ 263.937937][T10430] netlink: 'syz.4.1441': attribute type 72 has an invalid length. [ 264.367047][T10446] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 264.395665][T10447] netlink: 'syz.0.1446': attribute type 13 has an invalid length. [ 264.823626][T10459] syzkaller1: entered promiscuous mode [ 264.858983][T10459] syzkaller1: entered allmulticast mode [ 265.131009][T10464] netlink: 'syz.4.1452': attribute type 72 has an invalid length. [ 265.217326][T10466] macsec1: entered allmulticast mode [ 265.291681][T10466] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 265.362301][T10466] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 265.480407][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 265.527473][T10481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1459'. [ 265.687592][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 265.752588][T10489] wg1 speed is unknown, defaulting to 1000 [ 265.769235][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 265.801060][T10491] netlink: 'syz.0.1462': attribute type 18 has an invalid length. [ 266.047133][T10501] netlink: 'syz.4.1466': attribute type 72 has an invalid length. [ 266.422115][T10506] syzkaller1: entered promiscuous mode [ 266.443429][T10506] syzkaller1: entered allmulticast mode [ 266.545821][T10518] netlink: 'syz.2.1470': attribute type 1 has an invalid length. [ 266.743824][T10518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.872126][T10519] bond2: (slave ip6gretap1): making interface the new active one [ 266.950026][T10519] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 267.282638][T10539] netlink: 'syz.2.1477': attribute type 2 has an invalid length. [ 267.306175][T10538] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1479'. [ 267.732888][T10541] wg1 speed is unknown, defaulting to 1000 [ 268.077478][T10551] syzkaller1: entered promiscuous mode [ 268.086897][T10551] syzkaller1: entered allmulticast mode [ 268.315148][T10559] FAULT_INJECTION: forcing a failure. [ 268.315148][T10559] name failslab, interval 1, probability 0, space 0, times 0 [ 268.333415][T10559] CPU: 1 UID: 0 PID: 10559 Comm: syz.3.1485 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 268.333446][T10559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.333458][T10559] Call Trace: [ 268.333467][T10559] [ 268.333476][T10559] dump_stack_lvl+0x189/0x250 [ 268.333513][T10559] ? __pfx____ratelimit+0x10/0x10 [ 268.333538][T10559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.333569][T10559] ? __pfx__printk+0x10/0x10 [ 268.333595][T10559] ? __pfx___might_resched+0x10/0x10 [ 268.333626][T10559] ? fs_reclaim_acquire+0x7d/0x100 [ 268.333656][T10559] should_fail_ex+0x414/0x560 [ 268.333688][T10559] should_failslab+0xa8/0x100 [ 268.333712][T10559] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 268.333733][T10559] ? page_pool_create_percpu+0x76/0xbe0 [ 268.333770][T10559] page_pool_create_percpu+0x76/0xbe0 [ 268.333812][T10559] __veth_napi_enable_range+0x16c/0x6f0 [ 268.333855][T10559] ? __pfx___veth_napi_enable_range+0x10/0x10 [ 268.333908][T10559] ? netif_napi_set_irq_locked+0x20b/0x720 [ 268.333938][T10559] veth_napi_enable_range+0xff/0x200 [ 268.333977][T10559] veth_set_features+0x1c8/0x2a0 [ 268.334009][T10559] __netdev_update_features+0xa43/0x1be0 [ 268.334060][T10559] ? __pfx___netdev_update_features+0x10/0x10 [ 268.334091][T10559] ? __lock_acquire+0xab9/0xd20 [ 268.334133][T10559] ? __might_fault+0xb0/0x130 [ 268.334199][T10559] ethtool_set_one_feature+0x2b4/0x300 [ 268.334221][T10559] ? __pfx_ethtool_set_one_feature+0x10/0x10 [ 268.334242][T10559] ? bpf_lsm_capable+0x9/0x20 [ 268.334261][T10559] ? security_capable+0x7e/0x2e0 [ 268.334295][T10559] dev_ethtool+0x108d/0x19b0 [ 268.334339][T10559] ? __pfx_dev_ethtool+0x10/0x10 [ 268.334399][T10559] ? dev_load+0x21/0x1f0 [ 268.334425][T10559] dev_ioctl+0x392/0x1150 [ 268.334454][T10559] sock_do_ioctl+0x22c/0x300 [ 268.334480][T10559] ? __pfx_sock_do_ioctl+0x10/0x10 [ 268.334498][T10559] ? __lock_acquire+0xab9/0xd20 [ 268.334546][T10559] sock_ioctl+0x576/0x790 [ 268.334569][T10559] ? __pfx_sock_ioctl+0x10/0x10 [ 268.334590][T10559] ? __fget_files+0x2a/0x420 [ 268.334612][T10559] ? __fget_files+0x3a0/0x420 [ 268.334632][T10559] ? __fget_files+0x2a/0x420 [ 268.334656][T10559] ? bpf_lsm_file_ioctl+0x9/0x20 [ 268.334683][T10559] ? __pfx_sock_ioctl+0x10/0x10 [ 268.334703][T10559] __se_sys_ioctl+0xfc/0x170 [ 268.334735][T10559] do_syscall_64+0xfa/0x3b0 [ 268.334758][T10559] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.334780][T10559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.334800][T10559] ? clear_bhb_loop+0x60/0xb0 [ 268.334826][T10559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.334846][T10559] RIP: 0033:0x7fda3618e929 [ 268.334865][T10559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.334884][T10559] RSP: 002b:00007fda37018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.334908][T10559] RAX: ffffffffffffffda RBX: 00007fda363b5fa0 RCX: 00007fda3618e929 [ 268.334923][T10559] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 268.334936][T10559] RBP: 00007fda37018090 R08: 0000000000000000 R09: 0000000000000000 [ 268.334949][T10559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.334962][T10559] R13: 0000000000000000 R14: 00007fda363b5fa0 R15: 00007ffc05cadc78 [ 268.334997][T10559] [ 268.335353][T10559] veth0_to_team: set_features() failed (-12); wanted 0x0000612e4fdd49e9, left 0x0000612e4fdd09e9 [ 268.591638][T10561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1486'. [ 268.784325][T10561] vlan2: entered promiscuous mode [ 268.978967][T10567] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1489'. [ 269.102691][T10571] netlink: 'syz.1.1490': attribute type 2 has an invalid length. [ 269.429538][T10590] netlink: 'syz.3.1498': attribute type 2 has an invalid length. [ 269.659154][T10596] netlink: 'syz.0.1500': attribute type 13 has an invalid length. [ 269.707762][T10579] syzkaller1: entered promiscuous mode [ 269.713771][T10579] syzkaller1: entered allmulticast mode [ 269.725364][T10590] netlink: 'syz.3.1498': attribute type 7 has an invalid length. [ 269.943971][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'. [ 269.997282][T10603] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1503'. [ 270.241627][T10611] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1506'. [ 270.253707][T10611] FAULT_INJECTION: forcing a failure. [ 270.253707][T10611] name failslab, interval 1, probability 0, space 0, times 0 [ 270.300024][T10611] CPU: 1 UID: 0 PID: 10611 Comm: syz.3.1506 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 270.300056][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.300068][T10611] Call Trace: [ 270.300077][T10611] [ 270.300085][T10611] dump_stack_lvl+0x189/0x250 [ 270.300122][T10611] ? __pfx____ratelimit+0x10/0x10 [ 270.300145][T10611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.300175][T10611] ? __pfx__printk+0x10/0x10 [ 270.300204][T10611] ? __pfx___might_resched+0x10/0x10 [ 270.300234][T10611] ? fs_reclaim_acquire+0x7d/0x100 [ 270.300264][T10611] should_fail_ex+0x414/0x560 [ 270.300294][T10611] should_failslab+0xa8/0x100 [ 270.300317][T10611] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 270.300349][T10611] ? __alloc_skb+0x112/0x2d0 [ 270.300381][T10611] __alloc_skb+0x112/0x2d0 [ 270.300412][T10611] netlink_ack+0x146/0xa50 [ 270.300433][T10611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.300458][T10611] ? ref_tracker_free+0x63a/0x7d0 [ 270.300481][T10611] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 270.300509][T10611] ? __pfx_nl80211_post_doit+0x10/0x10 [ 270.300539][T10611] ? __pfx_ref_tracker_free+0x10/0x10 [ 270.300585][T10611] netlink_rcv_skb+0x28c/0x470 [ 270.300610][T10611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.300641][T10611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.300685][T10611] ? down_read+0x1ad/0x2e0 [ 270.300714][T10611] genl_rcv+0x28/0x40 [ 270.300740][T10611] netlink_unicast+0x75b/0x8d0 [ 270.300775][T10611] netlink_sendmsg+0x805/0xb30 [ 270.300811][T10611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.300840][T10611] ? aa_sock_msg_perm+0x94/0x160 [ 270.300867][T10611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.300891][T10611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.300916][T10611] __sock_sendmsg+0x219/0x270 [ 270.300942][T10611] ____sys_sendmsg+0x505/0x830 [ 270.300976][T10611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.301017][T10611] ? import_iovec+0x74/0xa0 [ 270.301047][T10611] ___sys_sendmsg+0x21f/0x2a0 [ 270.301078][T10611] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.301151][T10611] ? __fget_files+0x2a/0x420 [ 270.301172][T10611] ? __fget_files+0x3a0/0x420 [ 270.301206][T10611] __x64_sys_sendmsg+0x19b/0x260 [ 270.301238][T10611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.301277][T10611] ? __pfx_ksys_write+0x10/0x10 [ 270.301303][T10611] ? rcu_is_watching+0x15/0xb0 [ 270.301339][T10611] ? do_syscall_64+0xbe/0x3b0 [ 270.301367][T10611] do_syscall_64+0xfa/0x3b0 [ 270.301388][T10611] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.301409][T10611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.301428][T10611] ? clear_bhb_loop+0x60/0xb0 [ 270.301453][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.301471][T10611] RIP: 0033:0x7fda3618e929 [ 270.301489][T10611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.301507][T10611] RSP: 002b:00007fda37018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.301530][T10611] RAX: ffffffffffffffda RBX: 00007fda363b5fa0 RCX: 00007fda3618e929 [ 270.301545][T10611] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 270.301565][T10611] RBP: 00007fda37018090 R08: 0000000000000000 R09: 0000000000000000 [ 270.301577][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.301589][T10611] R13: 0000000000000000 R14: 00007fda363b5fa0 R15: 00007ffc05cadc78 [ 270.301623][T10611] [ 270.676275][T10613] syzkaller1: entered promiscuous mode [ 270.709545][T10613] syzkaller1: entered allmulticast mode [ 270.751369][T10615] netlink: 'syz.4.1507': attribute type 2 has an invalid length. [ 270.827261][T10617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1510'. [ 271.136389][T10630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1512'. [ 271.192201][T10631] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 271.205641][T10630] wg1 speed is unknown, defaulting to 1000 [ 271.219065][T10631] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1514'. [ 271.272325][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'. [ 272.232533][T10646] wg1 speed is unknown, defaulting to 1000 [ 272.252918][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 272.554070][T10657] netlink: 'syz.3.1521': attribute type 2 has an invalid length. [ 272.807915][T10659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1522'. [ 273.017515][T10659] vlan3: entered promiscuous mode [ 273.064910][T10651] wg1 speed is unknown, defaulting to 1000 [ 273.697430][T10681] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1528'. [ 273.777027][T10648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1518'. [ 273.829241][T10673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1518'. [ 274.015136][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'. [ 274.377276][T10696] netlink: 'syz.3.1533': attribute type 2 has an invalid length. [ 274.656568][T10698] wg1 speed is unknown, defaulting to 1000 [ 274.770458][T10706] wg1 speed is unknown, defaulting to 1000 [ 275.000236][T10708] wg1 speed is unknown, defaulting to 1000 [ 275.983885][T10742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.278370][T10743] syzkaller1: entered promiscuous mode [ 276.296824][T10743] syzkaller1: entered allmulticast mode [ 276.570120][T10757] __nla_validate_parse: 3 callbacks suppressed [ 276.570140][T10757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1554'. [ 276.759169][T10761] xt_CT: No such helper "snmp" [ 276.888950][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 276.918324][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1558'. [ 276.946901][T10768] vlan2: entered promiscuous mode [ 276.955854][T10768] batadv0: entered promiscuous mode [ 277.008910][T10769] vlan3: entered promiscuous mode [ 277.193752][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 277.298289][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 277.451469][T10781] netlink: 'syz.2.1564': attribute type 3 has an invalid length. [ 277.454425][T10782] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 277.470730][T10781] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1564'. [ 277.511104][T10783] bridge_slave_1: left allmulticast mode [ 277.516912][T10783] bridge_slave_1: left promiscuous mode [ 277.525255][T10783] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.536152][T10783] bridge_slave_0: left allmulticast mode [ 277.546068][T10783] bridge_slave_0: left promiscuous mode [ 277.554784][T10783] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.851181][T10795] syzkaller1: entered promiscuous mode [ 277.857328][T10795] syzkaller1: entered allmulticast mode [ 277.883244][T10799] netlink: 'syz.1.1566': attribute type 2 has an invalid length. [ 278.003035][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1568'. [ 278.041486][T10803] pim6reg: entered allmulticast mode [ 278.067402][T10803] pim6reg: left allmulticast mode [ 278.264343][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1570'. [ 278.306049][T10814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1569'. [ 278.406439][T10811] wg1 speed is unknown, defaulting to 1000 [ 279.373871][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'. [ 279.521462][T10841] vlan2: entered promiscuous mode [ 279.850559][ T7196] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.863902][ T7196] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 55914 - 0 [ 280.009657][ T7196] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.041654][ T7196] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55914 - 0 [ 280.253366][ T7196] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.299405][ T7196] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55914 - 0 [ 280.518269][T10863] FAULT_INJECTION: forcing a failure. [ 280.518269][T10863] name failslab, interval 1, probability 0, space 0, times 0 [ 280.541008][T10863] CPU: 0 UID: 0 PID: 10863 Comm: syz.3.1590 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 280.541040][T10863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.541053][T10863] Call Trace: [ 280.541062][T10863] [ 280.541071][T10863] dump_stack_lvl+0x189/0x250 [ 280.541107][T10863] ? __pfx____ratelimit+0x10/0x10 [ 280.541130][T10863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.541160][T10863] ? __pfx__printk+0x10/0x10 [ 280.541190][T10863] ? __pfx___might_resched+0x10/0x10 [ 280.541219][T10863] ? fs_reclaim_acquire+0x7d/0x100 [ 280.541248][T10863] should_fail_ex+0x414/0x560 [ 280.541280][T10863] should_failslab+0xa8/0x100 [ 280.541393][T10863] __kmalloc_noprof+0xcb/0x4f0 [ 280.541418][T10863] ? nf_tables_newrule+0x1506/0x2890 [ 280.541444][T10863] ? nla_strcmp+0x106/0x140 [ 280.541476][T10863] nf_tables_newrule+0x1506/0x2890 [ 280.541524][T10863] ? __pfx_nf_tables_newrule+0x10/0x10 [ 280.541554][T10863] ? nfnl_pernet+0x23/0x240 [ 280.541596][T10863] ? __nla_parse+0x40/0x60 [ 280.541629][T10863] nfnetlink_rcv+0x1132/0x2520 [ 280.541699][T10863] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 280.541752][T10863] ? ref_tracker_free+0x63a/0x7d0 [ 280.541817][T10863] ? __netlink_deliver_tap+0x807/0x850 [ 280.541856][T10863] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.541880][T10863] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.541911][T10863] netlink_unicast+0x75b/0x8d0 [ 280.541949][T10863] netlink_sendmsg+0x805/0xb30 [ 280.541992][T10863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.542021][T10863] ? aa_sock_msg_perm+0x94/0x160 [ 280.542049][T10863] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.542074][T10863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.542101][T10863] __sock_sendmsg+0x219/0x270 [ 280.542128][T10863] ____sys_sendmsg+0x505/0x830 [ 280.542164][T10863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.542206][T10863] ? import_iovec+0x74/0xa0 [ 280.542232][T10863] ___sys_sendmsg+0x21f/0x2a0 [ 280.542263][T10863] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.542347][T10863] ? __fget_files+0x2a/0x420 [ 280.542369][T10863] ? __fget_files+0x3a0/0x420 [ 280.542404][T10863] __x64_sys_sendmsg+0x19b/0x260 [ 280.542436][T10863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.542477][T10863] ? __pfx_ksys_write+0x10/0x10 [ 280.542506][T10863] ? rcu_is_watching+0x15/0xb0 [ 280.542544][T10863] ? do_syscall_64+0xbe/0x3b0 [ 280.542574][T10863] do_syscall_64+0xfa/0x3b0 [ 280.542595][T10863] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.542617][T10863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.542637][T10863] ? clear_bhb_loop+0x60/0xb0 [ 280.542664][T10863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.542683][T10863] RIP: 0033:0x7fda3618e929 [ 280.542704][T10863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.542722][T10863] RSP: 002b:00007fda37018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.542744][T10863] RAX: ffffffffffffffda RBX: 00007fda363b5fa0 RCX: 00007fda3618e929 [ 280.542759][T10863] RDX: 0000000000000840 RSI: 0000200000000000 RDI: 0000000000000003 [ 280.542772][T10863] RBP: 00007fda37018090 R08: 0000000000000000 R09: 0000000000000000 [ 280.542785][T10863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.542797][T10863] R13: 0000000000000000 R14: 00007fda363b5fa0 R15: 00007ffc05cadc78 [ 280.542833][T10863] [ 280.941453][ T7196] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.953017][ T7196] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 55914 - 0 [ 281.007906][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.022731][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.034855][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.048641][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.057994][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.092853][T10866] netlink: 'syz.1.1591': attribute type 13 has an invalid length. [ 281.743334][T10866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.791138][T10866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.250157][ T6922] wg1 speed is unknown, defaulting to 1000 [ 282.268744][ T1112] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.277417][ T1112] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.289515][ T6922] syz0: Port: 1 Link DOWN [ 282.339888][ T1112] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.348397][ T1112] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.448732][ T1112] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.457691][ T1112] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.506500][T10864] wg1 speed is unknown, defaulting to 1000 [ 282.528114][T10886] __nla_validate_parse: 2 callbacks suppressed [ 282.528137][T10886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1597'. [ 282.529374][ T1112] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.544853][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1597'. [ 282.571837][ T1112] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.574658][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'. [ 282.647060][T10887] bridge_slave_1: left allmulticast mode [ 282.655702][T10887] bridge_slave_1: left promiscuous mode [ 282.691561][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.725848][T10887] bridge_slave_0: left allmulticast mode [ 282.733921][T10887] bridge_slave_0: left promiscuous mode [ 282.741021][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.159336][ T5150] Bluetooth: hci2: command tx timeout [ 283.230144][T10902] netlink: 'syz.3.1605': attribute type 13 has an invalid length. [ 283.420762][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 284.153004][ T7196] bond0 (unregistering): left promiscuous mode [ 284.161396][ T7196] bond0 (unregistering): Released all slaves [ 284.176912][ T7196] bond1 (unregistering): Released all slaves [ 284.292850][ T7196] bond2 (unregistering): Released all slaves [ 284.408396][ T7196] bond3 (unregistering): Released all slaves [ 284.425331][ T7196] bond4 (unregistering): Released all slaves [ 284.947625][T10931] FAULT_INJECTION: forcing a failure. [ 284.947625][T10931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.964356][T10931] CPU: 0 UID: 0 PID: 10931 Comm: syz.2.1613 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 284.964377][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.964385][T10931] Call Trace: [ 284.964392][T10931] [ 284.964401][T10931] dump_stack_lvl+0x189/0x250 [ 284.964437][T10931] ? __pfx____ratelimit+0x10/0x10 [ 284.964461][T10931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.964490][T10931] ? __pfx__printk+0x10/0x10 [ 284.964525][T10931] should_fail_ex+0x414/0x560 [ 284.964547][T10931] _copy_to_user+0x31/0xb0 [ 284.964561][T10931] simple_read_from_buffer+0xe1/0x170 [ 284.964577][T10931] proc_fail_nth_read+0x1df/0x250 [ 284.964593][T10931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.964608][T10931] ? rw_verify_area+0x258/0x650 [ 284.964628][T10931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.964642][T10931] vfs_read+0x1fd/0x980 [ 284.964676][T10931] ? __pfx___mutex_lock+0x10/0x10 [ 284.964700][T10931] ? __pfx_vfs_read+0x10/0x10 [ 284.964731][T10931] ? __fget_files+0x2a/0x420 [ 284.964756][T10931] ? __fget_files+0x3a0/0x420 [ 284.964774][T10931] ? __fget_files+0x2a/0x420 [ 284.964798][T10931] ksys_read+0x145/0x250 [ 284.964817][T10931] ? __pfx_ksys_read+0x10/0x10 [ 284.964833][T10931] ? rcu_is_watching+0x15/0xb0 [ 284.964854][T10931] ? do_syscall_64+0xbe/0x3b0 [ 284.964870][T10931] do_syscall_64+0xfa/0x3b0 [ 284.964883][T10931] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.964896][T10931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.964913][T10931] ? clear_bhb_loop+0x60/0xb0 [ 284.964937][T10931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.964956][T10931] RIP: 0033:0x7fc37898d33c [ 284.964976][T10931] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 284.964992][T10931] RSP: 002b:00007fc37986b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.965013][T10931] RAX: ffffffffffffffda RBX: 00007fc378bb6080 RCX: 00007fc37898d33c [ 284.965026][T10931] RDX: 000000000000000f RSI: 00007fc37986b0a0 RDI: 0000000000000006 [ 284.965038][T10931] RBP: 00007fc37986b090 R08: 0000000000000000 R09: 0000000000000000 [ 284.965047][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.965054][T10931] R13: 0000000000000000 R14: 00007fc378bb6080 R15: 00007fffe998d5d8 [ 284.965092][T10931] [ 285.229124][ T5150] Bluetooth: hci2: command tx timeout [ 287.309121][ T5150] Bluetooth: hci2: command tx timeout [ 289.389105][ T5150] Bluetooth: hci2: command tx timeout [ 298.287910][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.298444][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.307247][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.316569][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.324601][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.936412][ T5150] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.947049][ T5150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.956575][ T5150] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.966274][ T5150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.975854][ T5150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.032343][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.042130][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.051276][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.062192][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.070347][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.349009][ T5150] Bluetooth: hci5: command tx timeout [ 300.366981][ T5836] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 300.376628][ T5836] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 300.388068][ T5836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 300.399014][ T5836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 300.408508][ T5836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 300.988792][ T5150] Bluetooth: hci6: command tx timeout [ 301.149901][ T5150] Bluetooth: hci7: command tx timeout [ 302.428924][ T5150] Bluetooth: hci8: command tx timeout [ 302.428929][ T5836] Bluetooth: hci5: command tx timeout [ 303.069087][ T5150] Bluetooth: hci6: command tx timeout [ 303.228839][ T5150] Bluetooth: hci7: command tx timeout [ 304.508742][ T5150] Bluetooth: hci8: command tx timeout [ 304.518791][ T5150] Bluetooth: hci5: command tx timeout [ 305.148749][ T5150] Bluetooth: hci6: command tx timeout [ 305.308757][ T5150] Bluetooth: hci7: command tx timeout [ 306.588802][ T5150] Bluetooth: hci5: command tx timeout [ 306.588831][ T5836] Bluetooth: hci8: command tx timeout [ 307.238814][ T5836] Bluetooth: hci6: command tx timeout [ 307.388797][ T5836] Bluetooth: hci7: command tx timeout [ 308.668658][ T5836] Bluetooth: hci8: command tx timeout [ 317.713081][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 340.410013][ T5150] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 340.421816][ T5150] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 340.430902][ T5150] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 340.441661][ T5150] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 340.450312][ T5150] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 342.508893][ T5836] Bluetooth: hci9: command tx timeout [ 344.591681][ T5836] Bluetooth: hci9: command tx timeout [ 346.669376][ T5836] Bluetooth: hci9: command tx timeout [ 348.748803][ T5836] Bluetooth: hci9: command tx timeout [ 358.442352][ T5150] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 358.453865][ T5150] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 358.462767][ T5150] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 358.472218][ T5150] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 358.480789][ T5150] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 359.112681][ T5150] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 359.123435][ T5150] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 359.133934][ T5150] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 359.144014][ T5150] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 359.152160][ T5150] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 359.205521][ T5150] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 359.215466][ T5150] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 359.224987][ T5150] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 359.235470][ T5150] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 359.245054][ T5150] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 360.441117][ T5150] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 360.450536][ T5150] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 360.461615][ T5150] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 360.472102][ T5150] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 360.481771][ T5150] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 360.508801][ T5836] Bluetooth: hci10: command tx timeout [ 361.228928][ T5836] Bluetooth: hci11: command tx timeout [ 361.318828][ T5836] Bluetooth: hci12: command tx timeout [ 362.509482][ T5836] Bluetooth: hci13: command tx timeout [ 362.588661][ T5836] Bluetooth: hci10: command tx timeout [ 363.308860][ T5836] Bluetooth: hci11: command tx timeout [ 363.398847][ T5836] Bluetooth: hci12: command tx timeout [ 364.588828][ T5836] Bluetooth: hci13: command tx timeout [ 364.668958][ T5836] Bluetooth: hci10: command tx timeout [ 365.388891][ T5836] Bluetooth: hci11: command tx timeout [ 365.468698][ T5836] Bluetooth: hci12: command tx timeout [ 366.678815][ T5836] Bluetooth: hci13: command tx timeout [ 366.758681][ T5836] Bluetooth: hci10: command tx timeout [ 367.468843][ T5836] Bluetooth: hci11: command tx timeout [ 367.558878][ T5836] Bluetooth: hci12: command tx timeout [ 368.748964][ T5836] Bluetooth: hci13: command tx timeout [ 379.152840][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.468802][ T5150] Bluetooth: hci4: command 0x0405 tx timeout [ 400.538130][ T5150] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 400.551101][ T5150] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 400.560605][ T5150] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 400.571863][ T5150] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 400.581437][ T5150] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 402.668853][ T5836] Bluetooth: hci14: command tx timeout [ 404.751804][ T5836] Bluetooth: hci14: command tx timeout [ 406.828723][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 406.828730][ T51] Bluetooth: hci14: command tx timeout [ 408.908721][ T5150] Bluetooth: hci14: command tx timeout [ 418.494034][ T5836] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 418.504127][ T5836] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 418.513714][ T5836] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 418.524699][ T5836] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 418.533236][ T5836] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 419.069829][ T5150] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 419.082301][ T5150] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 419.091430][ T5150] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 419.111779][ T5150] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 419.121794][ T5150] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 419.222251][ T5150] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 419.232350][ T5150] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 419.241758][ T5150] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 419.252596][ T5150] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 419.262053][ T5150] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 420.498278][ T5842] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 420.507803][ T5842] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 420.517368][ T5842] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 420.525910][ T5842] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 420.535234][ T5842] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 420.589073][ T5150] Bluetooth: hci15: command tx timeout [ 421.148850][ T5150] Bluetooth: hci16: command tx timeout [ 421.308756][ T5150] Bluetooth: hci17: command tx timeout [ 422.188682][ T5150] Bluetooth: hci7: command 0x0406 tx timeout [ 422.200401][ T5150] Bluetooth: hci6: command 0x0406 tx timeout [ 422.202385][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 422.588909][ T5843] Bluetooth: hci18: command tx timeout [ 422.668804][ T5843] Bluetooth: hci15: command tx timeout [ 423.228811][ T5843] Bluetooth: hci16: command tx timeout [ 423.388832][ T5843] Bluetooth: hci17: command tx timeout [ 424.668629][ T5843] Bluetooth: hci18: command tx timeout [ 424.758821][ T5843] Bluetooth: hci15: command tx timeout [ 425.308629][ T51] Bluetooth: hci16: command tx timeout [ 425.468720][ T51] Bluetooth: hci17: command tx timeout [ 426.748780][ T51] Bluetooth: hci18: command tx timeout [ 426.828679][ T51] Bluetooth: hci15: command tx timeout [ 427.308696][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 427.388746][ T5843] Bluetooth: hci16: command tx timeout [ 427.549918][ T5843] Bluetooth: hci17: command tx timeout [ 428.828681][ T5843] Bluetooth: hci18: command tx timeout [ 438.038857][ T31] INFO: task kworker/u8:6:1159 blocked for more than 143 seconds. [ 438.046904][ T31] Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 [ 438.054905][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.063807][ T31] task:kworker/u8:6 state:D stack:20808 pid:1159 tgid:1159 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 438.076663][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 438.082786][ T31] Call Trace: [ 438.086086][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 438.089099][ T31] __schedule+0x16f5/0x4d00 [ 438.094105][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.099777][ T31] ? schedule+0x165/0x360 [ 438.104373][ T31] ? __pfx___schedule+0x10/0x10 [ 438.110507][ T31] ? schedule+0x91/0x360 [ 438.114810][ T31] schedule+0x165/0x360 [ 438.119484][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.125081][ T31] __mutex_lock+0x724/0xe80 [ 438.158685][ T31] ? __mutex_lock+0x51b/0xe80 [ 438.163510][ T31] ? addrconf_dad_work+0x112/0x14b0 [ 438.197340][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.216307][ T31] ? do_raw_spin_lock+0x121/0x290 [ 438.225036][ T31] ? look_up_lock_class+0x74/0x170 [ 438.230602][ T31] addrconf_dad_work+0x112/0x14b0 [ 438.236157][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.243623][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 438.249590][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.255471][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.263194][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.269143][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.275445][ T31] process_scheduled_works+0xae1/0x17b0 [ 438.281410][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 438.287587][ T31] worker_thread+0x8a0/0xda0 [ 438.292315][ T31] kthread+0x70e/0x8a0 [ 438.296438][ T31] ? __pfx_worker_thread+0x10/0x10 [ 438.301667][ T31] ? __pfx_kthread+0x10/0x10 [ 438.306303][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.311678][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.316902][ T31] ? __pfx_kthread+0x10/0x10 [ 438.321652][ T31] ret_from_fork+0x3fc/0x770 [ 438.326290][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 438.331600][ T31] ? __switch_to_asm+0x39/0x70 [ 438.336391][ T31] ? __switch_to_asm+0x33/0x70 [ 438.341258][ T31] ? __pfx_kthread+0x10/0x10 [ 438.345968][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.351195][ T31] [ 438.354612][ T31] INFO: task dhcpcd:5494 blocked for more than 143 seconds. [ 438.362219][ T31] Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 [ 438.375386][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.384747][ T31] task:dhcpcd state:D stack:24584 pid:5494 tgid:5494 ppid:1 task_flags:0x400140 flags:0x00004002 [ 438.396865][ T31] Call Trace: [ 438.400238][ T31] [ 438.403210][ T31] __schedule+0x16f5/0x4d00 [ 438.407745][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.412724][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.417617][ T31] ? schedule+0x165/0x360 [ 438.422121][ T31] ? __pfx___schedule+0x10/0x10 [ 438.427379][ T31] ? schedule+0x91/0x360 [ 438.432323][ T31] schedule+0x165/0x360 [ 438.436527][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.442115][ T31] __mutex_lock+0x724/0xe80 [ 438.446738][ T31] ? unwind_get_return_address+0x4d/0x90 [ 438.452469][ T31] ? __mutex_lock+0x51b/0xe80 [ 438.457168][ T31] ? genl_rcv_msg+0x10d/0x790 [ 438.462264][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.467317][ T31] ? stack_trace_save+0x9c/0xe0 [ 438.472322][ T31] ? radix_tree_lookup+0x240/0x290 [ 438.477748][ T31] genl_rcv_msg+0x10d/0x790 [ 438.482354][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.487231][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.492503][ T31] netlink_rcv_skb+0x208/0x470 [ 438.497306][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.502534][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.507870][ T31] ? down_read+0x1ad/0x2e0 [ 438.512604][ T31] genl_rcv+0x28/0x40 [ 438.516623][ T31] netlink_unicast+0x75b/0x8d0 [ 438.521446][ T31] netlink_sendmsg+0x805/0xb30 [ 438.526268][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.533924][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.539988][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 438.544946][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.553144][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.559040][ T31] __sock_sendmsg+0x219/0x270 [ 438.563765][ T31] ____sys_sendmsg+0x505/0x830 [ 438.571028][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.576336][ T31] ? import_iovec+0x74/0xa0 [ 438.581547][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 438.586276][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.591743][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 438.596836][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.602416][ T31] ? __secure_computing+0xe2/0x2a0 [ 438.607595][ T31] do_syscall_64+0xfa/0x3b0 [ 438.612497][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.618787][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 438.625085][ T31] ? clear_bhb_loop+0x60/0xb0 [ 438.629848][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.635771][ T31] RIP: 0033:0x7f3b2ba36407 [ 438.640367][ T31] RSP: 002b:00007ffd69fa8580 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 438.649413][ T31] RAX: ffffffffffffffda RBX: 00007f3b2b9ac740 RCX: 00007f3b2ba36407 [ 438.657732][ T31] RDX: 0000000000000000 RSI: 00007ffd69fa8600 RDI: 000000000000000e [ 438.666207][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.674822][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562f83bffe10 [ 438.683351][ T31] R13: 000000000000000e R14: 00007ffd69fbcac0 R15: 0000562f87d56d40 [ 438.691869][ T31] [ 438.695042][ T31] INFO: task kworker/u8:10:7196 blocked for more than 144 seconds. [ 438.703682][ T31] Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 [ 438.711857][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.721009][ T31] task:kworker/u8:10 state:D stack:22136 pid:7196 tgid:7196 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 438.733497][ T31] Workqueue: netns cleanup_net [ 438.738709][ T31] Call Trace: [ 438.742119][ T31] [ 438.745133][ T31] __schedule+0x16f5/0x4d00 [ 438.750126][ T31] ? __kasan_slab_free+0x62/0x70 [ 438.755144][ T31] ? tipc_detach_loopback+0x6b/0xd0 [ 438.760791][ T31] ? tipc_exit_net+0x35/0x140 [ 438.765505][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.770433][ T31] ? schedule+0x165/0x360 [ 438.775034][ T31] ? __pfx___schedule+0x10/0x10 [ 438.780112][ T31] ? schedule+0x91/0x360 [ 438.784687][ T31] schedule+0x165/0x360 [ 438.788939][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.794682][ T31] __mutex_lock+0x724/0xe80 [ 438.799382][ T31] ? __mutex_lock+0x51b/0xe80 [ 438.804092][ T31] ? tipc_net_stop+0xb6/0x140 [ 438.808882][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.814060][ T31] ? net_generic+0x1e/0x240 [ 438.818745][ T31] ? net_generic+0x1e/0x240 [ 438.823279][ T31] ? net_generic+0x1e/0x240 [ 438.827828][ T31] ? net_generic+0x1e/0x240 [ 438.832567][ T31] tipc_net_stop+0xb6/0x140 [ 438.837223][ T31] tipc_exit_net+0x3d/0x140 [ 438.844361][ T31] ops_undo_list+0x497/0x990 [ 438.849048][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 438.854219][ T31] cleanup_net+0x4c5/0x800 [ 438.861694][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 438.866654][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.872146][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.877963][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.883951][ T31] process_scheduled_works+0xae1/0x17b0 [ 438.890088][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 438.896158][ T31] worker_thread+0x8a0/0xda0 [ 438.900928][ T31] kthread+0x70e/0x8a0 [ 438.905135][ T31] ? __pfx_worker_thread+0x10/0x10 [ 438.910423][ T31] ? __pfx_kthread+0x10/0x10 [ 438.915077][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.920426][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.925662][ T31] ? __pfx_kthread+0x10/0x10 [ 438.930502][ T31] ret_from_fork+0x3fc/0x770 [ 438.935153][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 438.940421][ T31] ? __switch_to_asm+0x39/0x70 [ 438.945320][ T31] ? __switch_to_asm+0x33/0x70 [ 438.950216][ T31] ? __pfx_kthread+0x10/0x10 [ 438.954853][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.962152][ T31] [ 438.965213][ T31] INFO: task kworker/u8:12:7201 blocked for more than 144 seconds. [ 438.973198][ T31] Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 [ 438.982178][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.991613][ T31] task:kworker/u8:12 state:D stack:23624 pid:7201 tgid:7201 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 439.003925][ T31] Workqueue: events_unbound linkwatch_event [ 439.009986][ T31] Call Trace: [ 439.013296][ T31] [ 439.016260][ T31] __schedule+0x16f5/0x4d00 [ 439.021022][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.026001][ T31] ? schedule+0x165/0x360 [ 439.030434][ T31] ? __pfx___schedule+0x10/0x10 [ 439.035388][ T31] ? schedule+0x91/0x360 [ 439.039743][ T31] schedule+0x165/0x360 [ 439.044023][ T31] schedule_preempt_disabled+0x13/0x30 [ 439.049669][ T31] __mutex_lock+0x724/0xe80 [ 439.054244][ T31] ? __mutex_lock+0x51b/0xe80 [ 439.059265][ T31] ? linkwatch_event+0xe/0x60 [ 439.063980][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 439.069120][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.074440][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 439.080283][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 439.086055][ T31] linkwatch_event+0xe/0x60 [ 439.092029][ T31] process_scheduled_works+0xae1/0x17b0 [ 439.097691][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 439.106488][ T31] worker_thread+0x8a0/0xda0 [ 439.111223][ T31] kthread+0x70e/0x8a0 [ 439.115321][ T31] ? __pfx_worker_thread+0x10/0x10 [ 439.122980][ T31] ? __pfx_kthread+0x10/0x10 [ 439.127648][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.133114][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.138346][ T31] ? __pfx_kthread+0x10/0x10 [ 439.143178][ T31] ret_from_fork+0x3fc/0x770 [ 439.147800][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 439.153246][ T31] ? __switch_to_asm+0x39/0x70 [ 439.158043][ T31] ? __switch_to_asm+0x33/0x70 [ 439.163009][ T31] ? __pfx_kthread+0x10/0x10 [ 439.167636][ T31] ret_from_fork_asm+0x1a/0x30 [ 439.172535][ T31] [ 439.175628][ T31] INFO: task syz-executor:10864 blocked for more than 144 seconds. [ 439.186181][ T31] Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 [ 439.195157][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.205373][ T31] task:syz-executor state:D stack:22504 pid:10864 tgid:10864 ppid:1 task_flags:0x400140 flags:0x00004004 [ 439.217760][ T31] Call Trace: [ 439.221425][ T31] [ 439.224669][ T31] __schedule+0x16f5/0x4d00 [ 439.229360][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.234280][ T31] ? schedule+0x165/0x360 [ 439.239074][ T31] ? __pfx___schedule+0x10/0x10 [ 439.244038][ T31] ? schedule+0x91/0x360 [ 439.248340][ T31] schedule+0x165/0x360 [ 439.252738][ T31] schedule_preempt_disabled+0x13/0x30 [ 439.258232][ T31] __mutex_lock+0x724/0xe80 [ 439.262864][ T31] ? __mutex_lock+0x51b/0xe80 [ 439.267891][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 439.272771][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 439.277833][ T31] ? ns_capable+0x8a/0xf0 [ 439.282520][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 439.288521][ T31] rtnl_newlink+0x8db/0x1c70 [ 439.293189][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 439.298614][ T31] ? rcu_is_watching+0x15/0xb0 [ 439.303871][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.309025][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.313976][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 439.319342][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 439.324674][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 439.330076][ T31] ? kernel_text_address+0xa5/0xe0 [ 439.335211][ T31] ? __kernel_text_address+0xd/0x40 [ 439.340856][ T31] ? unwind_get_return_address+0x4d/0x90 [ 439.346559][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.351645][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 439.356797][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 439.364613][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 439.369991][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 439.376125][ T31] netlink_rcv_skb+0x208/0x470 [ 439.383642][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 439.389333][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.394763][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.400840][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.406085][ T31] netlink_unicast+0x75b/0x8d0 [ 439.411152][ T31] netlink_sendmsg+0x805/0xb30 [ 439.416056][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.421580][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 439.426592][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 439.432075][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.437507][ T31] __sock_sendmsg+0x219/0x270 [ 439.442379][ T31] __sys_sendto+0x3bd/0x520 [ 439.446942][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 439.452074][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 439.458198][ T31] ? rcu_is_watching+0x15/0xb0 [ 439.463095][ T31] __x64_sys_sendto+0xde/0x100 [ 439.467909][ T31] do_syscall_64+0xfa/0x3b0 [ 439.472892][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.478147][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.484336][ T31] ? clear_bhb_loop+0x60/0xb0 [ 439.491639][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.497575][ T31] RIP: 0033:0x7f9cb37907bc [ 439.502773][ T31] RSP: 002b:00007ffc0aeebf60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 439.511637][ T31] RAX: ffffffffffffffda RBX: 00007f9cb44e4620 RCX: 00007f9cb37907bc [ 439.519753][ T31] RDX: 000000000000003c RSI: 00007f9cb44e4670 RDI: 0000000000000003 [ 439.527756][ T31] RBP: 0000000000000000 R08: 00007ffc0aeebfb4 R09: 000000000000000c [ 439.535832][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 439.544665][ T31] R13: 0000000000000000 R14: 00007f9cb44e4670 R15: 0000000000000000 [ 439.555281][ T31] [ 439.558359][ T31] INFO: task syz.1.1604:10904 blocked for more than 144 seconds. [ 439.566263][ T31] Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 [ 439.574357][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.583088][ T31] task:syz.1.1604 state:D stack:25192 pid:10904 tgid:10900 ppid:5845 task_flags:0x400140 flags:0x00004004 [ 439.595519][ T31] Call Trace: [ 439.599006][ T31] [ 439.602242][ T31] __schedule+0x16f5/0x4d00 [ 439.606803][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.611826][ T31] ? schedule+0x165/0x360 [ 439.616194][ T31] ? __pfx___schedule+0x10/0x10 [ 439.621202][ T31] ? schedule+0x91/0x360 [ 439.625738][ T31] schedule+0x165/0x360 [ 439.630021][ T31] schedule_preempt_disabled+0x13/0x30 [ 439.635516][ T31] __mutex_lock+0x724/0xe80 [ 439.640227][ T31] ? __mutex_lock+0x51b/0xe80 [ 439.644979][ T31] ? xsk_bind+0x156/0xf90 [ 439.649550][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 439.654809][ T31] ? __might_fault+0xb0/0x130 [ 439.659792][ T31] ? __pfx_aa_sk_perm+0x10/0x10 [ 439.664859][ T31] xsk_bind+0x156/0xf90 [ 439.669731][ T31] ? bpf_lsm_socket_bind+0x9/0x20 [ 439.674808][ T31] __sys_bind+0x2c6/0x3e0 [ 439.679276][ T31] ? __pfx___sys_bind+0x10/0x10 [ 439.684193][ T31] ? rcu_is_watching+0x15/0xb0 [ 439.689186][ T31] __x64_sys_bind+0x7a/0x90 [ 439.693741][ T31] do_syscall_64+0xfa/0x3b0 [ 439.698396][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.704020][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.710225][ T31] ? clear_bhb_loop+0x60/0xb0 [ 439.715053][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.721048][ T31] RIP: 0033:0x7fa05e38e929 [ 439.725663][ T31] RSP: 002b:00007fa05f20a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 439.736490][ T31] RAX: ffffffffffffffda RBX: 00007fa05e5b5fa0 RCX: 00007fa05e38e929 [ 439.744588][ T31] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000009 [ 439.755111][ T31] RBP: 00007fa05e410b39 R08: 0000000000000000 R09: 0000000000000000 [ 439.764031][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.774632][ T31] R13: 0000000000000000 R14: 00007fa05e5b5fa0 R15: 00007ffe80e8d118 [ 439.782706][ T31] [ 439.785930][ T31] INFO: task syz.0.1607:10910 blocked for more than 145 seconds. [ 439.796260][ T31] Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 [ 439.804063][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.813546][ T31] task:syz.0.1607 state:D stack:24488 pid:10910 tgid:10909 ppid:5832 task_flags:0x400140 flags:0x00004004 [ 439.825969][ T31] Call Trace: [ 439.829323][ T31] [ 439.832285][ T31] __schedule+0x16f5/0x4d00 [ 439.836800][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.841720][ T31] ? schedule+0x165/0x360 [ 439.846172][ T31] ? __pfx___schedule+0x10/0x10 [ 439.851140][ T31] ? schedule+0x91/0x360 [ 439.855417][ T31] schedule+0x165/0x360 [ 439.860391][ T31] schedule_preempt_disabled+0x13/0x30 [ 439.865897][ T31] __mutex_lock+0x724/0xe80 [ 439.870548][ T31] ? __mutex_lock+0x51b/0xe80 [ 439.875284][ T31] ? ieee80211_register_hw+0x2ec4/0x4120 [ 439.881266][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 439.886467][ T31] ieee80211_register_hw+0x2ec4/0x4120 [ 439.892076][ T31] ? ieee80211_register_hw+0x14c1/0x4120 [ 439.897764][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 439.903730][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 439.910673][ T31] ? __hrtimer_setup+0x187/0x210 [ 439.915673][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 439.921589][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 439.927374][ T31] ? __pfx__printk+0x10/0x10 [ 439.932053][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 439.938323][ T31] ? __nla_validate_parse+0x251c/0x2d40 [ 439.943957][ T31] ? __sock_sendmsg+0x219/0x270 [ 439.948988][ T31] ? ____sys_sendmsg+0x505/0x830 [ 439.954145][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 439.959486][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 439.964948][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 439.970406][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 439.976377][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 439.982066][ T31] ? __nla_parse+0x40/0x60 [ 439.986643][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 439.993521][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 440.000014][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 440.006473][ T31] ? bpf_lsm_capable+0x9/0x20 [ 440.011692][ T31] ? security_capable+0x7e/0x2e0 [ 440.016871][ T31] genl_rcv_msg+0x60e/0x790 [ 440.021600][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.026776][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 440.032495][ T31] netlink_rcv_skb+0x208/0x470 [ 440.037381][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.042563][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.048183][ T31] ? down_read+0x1ad/0x2e0 [ 440.053254][ T31] genl_rcv+0x28/0x40 [ 440.057469][ T31] netlink_unicast+0x75b/0x8d0 [ 440.062450][ T31] netlink_sendmsg+0x805/0xb30 [ 440.067271][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.072726][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 440.077708][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.083179][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.088563][ T31] __sock_sendmsg+0x219/0x270 [ 440.093367][ T31] ____sys_sendmsg+0x505/0x830 [ 440.098268][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.103765][ T31] ? import_iovec+0x74/0xa0 [ 440.108704][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 440.115310][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.121053][ T31] ? __fget_files+0x2a/0x420 [ 440.125687][ T31] ? __fget_files+0x3a0/0x420 [ 440.130620][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 440.135712][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.143088][ T31] ? rcu_is_watching+0x15/0xb0 [ 440.148119][ T31] ? do_syscall_64+0xbe/0x3b0 [ 440.154215][ T31] do_syscall_64+0xfa/0x3b0 [ 440.161609][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.166879][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.174101][ T31] ? clear_bhb_loop+0x60/0xb0 [ 440.181090][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.187342][ T31] RIP: 0033:0x7facba98e929 [ 440.192378][ T31] RSP: 002b:00007facbb85f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.200988][ T31] RAX: ffffffffffffffda RBX: 00007facbabb5fa0 RCX: 00007facba98e929 [ 440.209127][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 440.217425][ T31] RBP: 00007facbaa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 440.225580][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.233614][ T31] R13: 0000000000000000 R14: 00007facbabb5fa0 R15: 00007ffdca7c7748 [ 440.241820][ T31] [ 440.245071][ T31] INFO: task syz.0.1607:10912 blocked for more than 145 seconds. [ 440.253678][ T31] Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 [ 440.263225][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.272941][ T31] task:syz.0.1607 state:D stack:25992 pid:10912 tgid:10909 ppid:5832 task_flags:0x400140 flags:0x00004004 [ 440.286946][ T31] Call Trace: [ 440.291057][ T31] [ 440.294016][ T31] __schedule+0x16f5/0x4d00 [ 440.301005][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.305915][ T31] ? schedule+0x165/0x360 [ 440.311200][ T31] ? __pfx___schedule+0x10/0x10 [ 440.316297][ T31] ? schedule+0x91/0x360 [ 440.323557][ T31] schedule+0x165/0x360 [ 440.327798][ T31] schedule_preempt_disabled+0x13/0x30 [ 440.334123][ T31] __mutex_lock+0x724/0xe80 [ 440.340961][ T31] ? __mutex_lock+0x51b/0xe80 [ 440.345847][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 440.351615][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 440.356758][ T31] ? ns_capable+0x8a/0xf0 [ 440.361576][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 440.367732][ T31] rtnl_newlink+0x8db/0x1c70 [ 440.373301][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 440.378425][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 440.385715][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.391483][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.396387][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 440.403550][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 440.409638][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 440.415048][ T31] ? kernel_text_address+0xa5/0xe0 [ 440.422665][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.427637][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 440.434124][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 440.439263][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 440.444460][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 440.450235][ T31] netlink_rcv_skb+0x208/0x470 [ 440.455135][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 440.460994][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.466355][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.471961][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.477290][ T31] netlink_unicast+0x75b/0x8d0 [ 440.482223][ T31] netlink_sendmsg+0x805/0xb30 [ 440.487127][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.492539][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 440.497511][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.502892][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.508287][ T31] __sock_sendmsg+0x219/0x270 [ 440.513337][ T31] ____sys_sendmsg+0x505/0x830 [ 440.518140][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.524291][ T31] ? import_iovec+0x74/0xa0 [ 440.529614][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 440.534317][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.542205][ T31] ? __fget_files+0x2a/0x420 [ 440.547051][ T31] ? __fget_files+0x3a0/0x420 [ 440.552573][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 440.557714][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.565289][ T31] ? rcu_is_watching+0x15/0xb0 [ 440.570996][ T31] ? do_syscall_64+0xbe/0x3b0 [ 440.575714][ T31] do_syscall_64+0xfa/0x3b0 [ 440.582217][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.587546][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.596249][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.602894][ T31] ? clear_bhb_loop+0x60/0xb0 [ 440.607629][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.616711][ T31] RIP: 0033:0x7facba98e929 [ 440.621272][ T31] RSP: 002b:00007facbb83e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.630385][ T31] RAX: ffffffffffffffda RBX: 00007facbabb6080 RCX: 00007facba98e929 [ 440.638634][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 440.646647][ T31] RBP: 00007facbaa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 440.654770][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.663196][ T31] R13: 0000000000000000 R14: 00007facbabb6080 R15: 00007ffdca7c7748 [ 440.671543][ T31] [ 440.674721][ T31] INFO: task syz.2.1613:10930 blocked for more than 146 seconds. [ 440.682667][ T31] Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 [ 440.690434][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.699538][ T31] task:syz.2.1613 state:D stack:28744 pid:10930 tgid:10929 ppid:5849 task_flags:0x400040 flags:0x00004004 [ 440.711606][ T31] Call Trace: [ 440.714925][ T31] [ 440.717893][ T31] __schedule+0x16f5/0x4d00 [ 440.722515][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.727427][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.732874][ T31] ? schedule+0x165/0x360 [ 440.737258][ T31] ? __pfx___schedule+0x10/0x10 [ 440.742464][ T31] ? schedule+0x91/0x360 [ 440.746747][ T31] schedule+0x165/0x360 [ 440.751324][ T31] schedule_preempt_disabled+0x13/0x30 [ 440.756902][ T31] __mutex_lock+0x724/0xe80 [ 440.761576][ T31] ? unwind_get_return_address+0x4d/0x90 [ 440.767415][ T31] ? __mutex_lock+0x51b/0xe80 [ 440.772397][ T31] ? genl_rcv_msg+0x10d/0x790 [ 440.777129][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 440.782406][ T31] ? stack_trace_save+0x9c/0xe0 [ 440.787509][ T31] ? radix_tree_lookup+0x240/0x290 [ 440.792915][ T31] genl_rcv_msg+0x10d/0x790 [ 440.797909][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.802950][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.808031][ T31] netlink_rcv_skb+0x208/0x470 [ 440.812875][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.818050][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.823497][ T31] ? down_read+0x1ad/0x2e0 [ 440.827969][ T31] genl_rcv+0x28/0x40 [ 440.832377][ T31] netlink_unicast+0x75b/0x8d0 [ 440.837305][ T31] netlink_sendmsg+0x805/0xb30 [ 440.842484][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.847890][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 440.853072][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.858626][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.864342][ T31] __sock_sendmsg+0x219/0x270 [ 440.869763][ T31] __sys_sendto+0x3bd/0x520 [ 440.874352][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 440.879765][ T31] ? count_memcg_event_mm+0x21/0x260 [ 440.885320][ T31] ? exc_page_fault+0x76/0xf0 [ 440.890549][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 440.896142][ T31] __x64_sys_sendto+0xde/0x100 [ 440.901287][ T31] do_syscall_64+0xfa/0x3b0 [ 440.905930][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.911703][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.917791][ T31] ? clear_bhb_loop+0x60/0xb0 [ 440.922850][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.928870][ T31] RIP: 0033:0x7fc3789907bc [ 440.933908][ T31] RSP: 002b:00007fc37988aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 440.942553][ T31] RAX: ffffffffffffffda RBX: 00007fc37988afc0 RCX: 00007fc3789907bc [ 440.950636][ T31] RDX: 0000000000000020 RSI: 00007fc37988b010 RDI: 0000000000000004 [ 440.958942][ T31] RBP: 0000000000000000 R08: 00007fc37988af14 R09: 000000000000000c [ 440.966979][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 440.975162][ T31] R13: 00007fc37988af68 R14: 00007fc37988b010 R15: 0000000000000000 [ 440.983210][ T31] [ 440.986290][ T31] [ 440.986290][ T31] Showing all locks held in the system: [ 440.994108][ T31] 1 lock held by khungtaskd/31: [ 440.999236][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 441.009513][ T31] 2 locks held by kworker/u8:5/1112: [ 441.014834][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 441.025257][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 441.037335][ T31] 3 locks held by kworker/u8:6/1159: [ 441.042826][ T31] #0: ffff88814ccc5148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.054600][ T31] #1: ffffc90003eefbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.067991][ T31] #2: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 441.078082][ T31] 2 locks held by dhcpcd/5494: [ 441.083161][ T31] #0: ffffffff8f577570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 441.091582][ T31] #1: ffffffff8f577388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 441.100897][ T31] 2 locks held by getty/5591: [ 441.105607][ T31] #0: ffff88814ceae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 441.115564][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 441.126208][ T31] 3 locks held by kworker/1:8/6899: [ 441.131518][ T31] #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.144450][ T31] #1: ffffc9001a62fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.156119][ T31] #2: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00 [ 441.165997][ T31] 4 locks held by kworker/u8:10/7196: [ 441.171507][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.182564][ T31] #1: ffffc9000414fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.193851][ T31] #2: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 441.203260][ T31] #3: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_stop+0xb6/0x140 [ 441.212449][ T31] 3 locks held by kworker/u8:12/7201: [ 441.217833][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.230178][ T31] #1: ffffc9000b1f7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.242077][ T31] #2: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 441.251179][ T31] 2 locks held by syz-executor/10864: [ 441.256754][ T31] #0: ffffffff8fa31a58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 441.266472][ T31] #1: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 441.275668][ T31] 2 locks held by syz.3.1605/10902: [ 441.280948][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 441.290123][ T31] #1: ffff888029b28d20 (&dev_instance_lock_key#14){+.+.}-{4:4}, at: napi_disable+0x4e/0x80 [ 441.300387][ T31] 1 lock held by syz.1.1604/10904: [ 441.305537][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x156/0xf90 [ 441.314550][ T31] 3 locks held by syz.0.1607/10910: [ 441.319850][ T31] #0: ffffffff8f577570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 441.328105][ T31] #1: ffffffff8f577388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 441.337211][ T31] #2: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x2ec4/0x4120 [ 441.347925][ T31] 2 locks held by syz.0.1607/10912: [ 441.353435][ T31] #0: ffffffff8fa17fb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 441.363190][ T31] #1: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 441.372338][ T31] 2 locks held by syz.2.1613/10930: [ 441.377563][ T31] #0: ffffffff8f577570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 441.386030][ T31] #1: ffffffff8f577388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 441.395136][ T31] 1 lock held by syz-executor/10933: [ 441.400498][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.410267][ T31] 1 lock held by syz-executor/10938: [ 441.415838][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.425416][ T31] 1 lock held by syz-executor/10940: [ 441.430784][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.440995][ T31] 1 lock held by syz-executor/10943: [ 441.446800][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.456395][ T31] 1 lock held by syz-executor/10946: [ 441.461829][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.471568][ T31] 1 lock held by syz-executor/10950: [ 441.476958][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.486540][ T31] 1 lock held by syz-executor/10955: [ 441.491880][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.501548][ T31] 1 lock held by syz-executor/10957: [ 441.506840][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.516792][ T31] 1 lock held by syz-executor/10960: [ 441.522149][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.531699][ T31] 1 lock held by syz-executor/10965: [ 441.537118][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.547584][ T31] 1 lock held by syz-executor/10970: [ 441.553146][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.562958][ T31] 1 lock held by syz-executor/10975: [ 441.568324][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.577983][ T31] 1 lock held by syz-executor/10978: [ 441.583333][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.593266][ T31] 1 lock held by syz-executor/10981: [ 441.598668][ T31] #0: ffffffff8f512808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 441.608244][ T31] [ 441.610668][ T31] ============================================= [ 441.610668][ T31] [ 441.619239][ T31] NMI backtrace for cpu 0 [ 441.619259][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 441.619283][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 441.619295][ T31] Call Trace: [ 441.619303][ T31] [ 441.619312][ T31] dump_stack_lvl+0x189/0x250 [ 441.619345][ T31] ? __wake_up_klogd+0xd9/0x110 [ 441.619372][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.619400][ T31] ? __pfx__printk+0x10/0x10 [ 441.619437][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 441.619470][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 441.619496][ T31] ? _printk+0xcf/0x120 [ 441.619523][ T31] ? __pfx__printk+0x10/0x10 [ 441.619547][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 441.619576][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 441.619608][ T31] watchdog+0xfee/0x1030 [ 441.619637][ T31] ? watchdog+0x1de/0x1030 [ 441.619680][ T31] kthread+0x70e/0x8a0 [ 441.619707][ T31] ? __pfx_watchdog+0x10/0x10 [ 441.619731][ T31] ? __pfx_kthread+0x10/0x10 [ 441.619755][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.619775][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.619794][ T31] ? __pfx_kthread+0x10/0x10 [ 441.619817][ T31] ret_from_fork+0x3fc/0x770 [ 441.619848][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 441.619882][ T31] ? __switch_to_asm+0x39/0x70 [ 441.619901][ T31] ? __switch_to_asm+0x33/0x70 [ 441.619919][ T31] ? __pfx_kthread+0x10/0x10 [ 441.619942][ T31] ret_from_fork_asm+0x1a/0x30 [ 441.619979][ T31] [ 441.619987][ T31] Sending NMI from CPU 0 to CPUs 1: [ 441.779221][ C1] NMI backtrace for cpu 1 [ 441.779241][ C1] CPU: 1 UID: 0 PID: 7204 Comm: kworker/u8:13 Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 441.779260][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 441.779271][ C1] Workqueue: bat_events batadv_nc_worker [ 441.779293][ C1] RIP: 0010:kasan_check_range+0x30/0x2c0 [ 441.779312][ C1] Code: 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d 04 37 49 39 f8 0f 82 82 02 00 00 49 b9 00 00 00 00 00 80 ff ff 11 cc cc cc f3 0f 1e fa 49 b9 00 00 00 00 00 00 00 ff f3 0f 1e [ 441.779325][ C1] RSP: 0018:ffffc9000b10f888 EFLAGS: 00000202 [ 441.779339][ C1] RAX: 00000000ffffff01 RBX: ffff88807cf8da80 RCX: ffffffff819ec6e2 [ 441.779351][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807cf8da80 [ 441.779362][ C1] RBP: ffffc9000b10f978 R08: ffff88807cf8da84 R09: ffff800000000000 [ 441.779373][ C1] R10: dffffc0000000000 R11: fffffbfff1f4267f R12: ffff88807cf8da90 [ 441.779384][ C1] R13: ffff88807cf8da88 R14: 1ffff1100f9f1b52 R15: 1ffff1100f9f1b51 [ 441.779396][ C1] FS: 0000000000000000(0000) GS:ffff888125d48000(0000) knlGS:0000000000000000 [ 441.779408][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.779420][ C1] CR2: 00005586cbcb6000 CR3: 0000000077c0a000 CR4: 00000000003526f0 [ 441.779435][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.779445][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.779455][ C1] Call Trace: [ 441.779462][ C1] [ 441.779472][ C1] do_raw_spin_lock+0x112/0x290 [ 441.779490][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 441.779507][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 441.779526][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 441.779541][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 441.779559][ C1] batadv_nc_purge_paths+0xe7/0x3b0 [ 441.779581][ C1] batadv_nc_worker+0x328/0x610 [ 441.779605][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 441.779628][ C1] process_scheduled_works+0xae1/0x17b0 [ 441.779662][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 441.779691][ C1] worker_thread+0x8a0/0xda0 [ 441.779725][ C1] kthread+0x70e/0x8a0 [ 441.779743][ C1] ? __pfx_worker_thread+0x10/0x10 [ 441.779764][ C1] ? __pfx_kthread+0x10/0x10 [ 441.779782][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.779797][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.779812][ C1] ? __pfx_kthread+0x10/0x10 [ 441.779829][ C1] ret_from_fork+0x3fc/0x770 [ 441.779851][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 441.779874][ C1] ? __switch_to_asm+0x39/0x70 [ 441.779890][ C1] ? __switch_to_asm+0x33/0x70 [ 441.779904][ C1] ? __pfx_kthread+0x10/0x10 [ 441.779922][ C1] ret_from_fork_asm+0x1a/0x30 [ 441.779946][ C1] [ 441.780241][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 442.059902][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00867-g8efa26fcbf8a #0 PREEMPT(full) [ 442.071807][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.081883][ T31] Call Trace: [ 442.085188][ T31] [ 442.088151][ T31] dump_stack_lvl+0x99/0x250 [ 442.092780][ T31] ? __asan_memcpy+0x40/0x70 [ 442.097561][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.103130][ T31] ? __pfx__printk+0x10/0x10 [ 442.107836][ T31] panic+0x2db/0x790 [ 442.111891][ T31] ? __pfx_panic+0x10/0x10 [ 442.116386][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 442.122255][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 442.127670][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 442.133871][ T31] watchdog+0x102d/0x1030 [ 442.138228][ T31] ? watchdog+0x1de/0x1030 [ 442.142665][ T31] kthread+0x70e/0x8a0 [ 442.146773][ T31] ? __pfx_watchdog+0x10/0x10 [ 442.151460][ T31] ? __pfx_kthread+0x10/0x10 [ 442.156145][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.161363][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.167091][ T31] ? __pfx_kthread+0x10/0x10 [ 442.171688][ T31] ret_from_fork+0x3fc/0x770 [ 442.176290][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 442.181453][ T31] ? __switch_to_asm+0x39/0x70 [ 442.186256][ T31] ? __switch_to_asm+0x33/0x70 [ 442.191019][ T31] ? __pfx_kthread+0x10/0x10 [ 442.195615][ T31] ret_from_fork_asm+0x1a/0x30 [ 442.200402][ T31] [ 442.203574][ T31] Kernel Offset: disabled [ 442.207893][ T31] Rebooting in 86400 seconds..