last executing test programs: 3m26.222367862s ago: executing program 2 (id=4160): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000440)=""/218, 0xda}], 0x4}, 0x80000000}], 0x4, 0x20, 0x0) 3m25.97706517s ago: executing program 2 (id=4165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @random="f0c71efe4a11"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x1, 0x0, {0x2, 0x40, 0x0, 0xb, 0x0, 0x1, 0x1, 0x2}, 0x300, 0x1, 0x9}}]}, 0x48}, 0x1, 0xf0ffffff}, 0x0) 3m25.747016633s ago: executing program 2 (id=4170): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0xac}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 3m25.405931979s ago: executing program 2 (id=4179): syz_emit_ethernet(0x9e, &(0x7f0000000280)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b}, @srh={0x0, 0x3, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x0, 0x20000000000000a1}, @dstopts]}}}}}}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x400000008000f28, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ba00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) unshare(0x6a040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000f00000008000100", @ANYRES32=r4, @ANYBLOB="1f"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x8, 0x3000000000002, 0x0, 0x24000081}, 0x20048800) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) bind$unix(r5, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x1, 0x7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x40, 0xa, 0x0, 0xeac, 0x3}}, {0x4}}]}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x54}}, 0x0) bind$unix(r5, &(0x7f0000003000)=@abs={0x1}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r12, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 3m22.311682817s ago: executing program 2 (id=4221): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000af00000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESHEX=r2], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040014) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESHEX=r2], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000004000000000a0060603b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000010400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) listen(r5, 0x5) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}, 0xfffffffa}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xfffe}, 0x8) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040", @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000009000000ffffffe600000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000005055a798b36794b3194a07c79f332048f00"/112], 0xb8}}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="4588b3971f2846938cebbd031f4d", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="4588b3971f2846938cebbd031f4d", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m22.0201018s ago: executing program 2 (id=4225): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='svc_unregister\x00', r1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3m6.899254288s ago: executing program 32 (id=4225): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='svc_unregister\x00', r1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m38.719649847s ago: executing program 5 (id=4863): r0 = socket$inet6(0xa, 0x4, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)={0x2b, 0x7, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x1, 0x4, [0x8000000000000001, 0x9, 0xf4, 0x3, 0xffffffff, 0x5]}}, @ra={0x5, 0x2, 0x35b}]}, 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x68) bind$inet6(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x840000000002, 0x3, 0xfa) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x34, 0x0, &(0x7f0000000140)=0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 2m37.326202455s ago: executing program 5 (id=4882): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="19a8216a07e3"}) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000002000000000000013a"], 0xfdef) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 2m33.339250525s ago: executing program 5 (id=4928): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000000ffffff97000007000000441c0512"], 0x30}, 0x40880) 2m33.20267808s ago: executing program 5 (id=4930): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa0000000000", @ANYRES8=r0, @ANYRESOCT], 0x38}}, 0x0) 2m33.086268338s ago: executing program 5 (id=4932): socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x30004000) socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100003040161000000000000ffff0000", @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2m32.68820656s ago: executing program 5 (id=4937): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x17, 0x1395, @l2={'eth', 0x3a, 'pim6reg1\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4048004}, 0x80) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_PHYS_PORT_ID={0x10, 0x22, "ab391d08df47f3244debf41e"}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (rerun: 32) 2m29.200466229s ago: executing program 1 (id=4975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) r1 = epoll_create1(0x0) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000180)="2327b6785ae651e5bfdbe26f44d76c02c8df4fa0b97b2dd3e9") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa0000019}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)={0x2012}) 2m28.949036659s ago: executing program 1 (id=4979): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x0) 2m28.617001156s ago: executing program 1 (id=4982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xb, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xc3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m28.48344645s ago: executing program 1 (id=4985): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2m28.105191798s ago: executing program 1 (id=4987): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x2c060000) unshare(0x24020400) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r3}, 0x18) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x4) 2m27.916653889s ago: executing program 1 (id=4991): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r4], 0x38}}, 0x10) 2m17.65422581s ago: executing program 33 (id=4937): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x17, 0x1395, @l2={'eth', 0x3a, 'pim6reg1\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4048004}, 0x80) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_PHYS_PORT_ID={0x10, 0x22, "ab391d08df47f3244debf41e"}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (rerun: 32) 2m12.849929562s ago: executing program 34 (id=4991): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r4], 0x38}}, 0x10) 6.039986869s ago: executing program 6 (id=6553): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc, 0x7, {0x0, 0xe4ff}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x8, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 5.863995364s ago: executing program 6 (id=6557): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}], {0x95, 0x0, 0x0, 0x3f00}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.693189015s ago: executing program 6 (id=6561): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0843b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.150017315s ago: executing program 6 (id=6564): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x3b}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5"], 0x7c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3f, 0x40008, 0x9, 0x8, {0x10, 0x0, 0x4, 0xfffe, 0x3, 0xffffffc8}, {0x6, 0x2, 0x9, 0x8, 0x87f4, 0x1}, 0x400, 0xfffffff7, 0x8}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ffa100000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1df4, @void, @value}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x2}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa05dd7cf5c0a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0xffffff2e, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) epoll_create1(0x80000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0xb4, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x9c, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x39, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x1, 0xffffffffffffffff, 0x0, 0x100}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0x5cab}]}, {0x47, 0x6, "a09a7f5ec151e5710cecc809bc4a04de697339a7e91d74107246c6537cca2f49ba53b208107fcec920d58de33399e2e97e849e0baed695fd9872436bf87bfae0cecf1e"}, {0xc}, {0xc}}}, @m_pedit={0x0, 0x10, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0x0, 0x4, {{{0x70, 0x40, 0x3, 0x5, 0x2}, 0x5, 0xdc, [{0x4, 0x0, 0x1, 0x8, 0xfffffffa}]}, [{0x0, 0x6, 0x4c29, 0x4, 0x3, 0x7}, {0x0, 0x14cc, 0x4, 0x89, 0x839, 0x5a2d26a9}, {0x16e5, 0xb14c, 0x7, 0x6, 0x8, 0x5}, {0xc, 0x2, 0x3ff, 0x9, 0xffff933c, 0x101}, {0x0, 0x6, 0x3, 0x10000000, 0x8, 0x5}, {0x2, 0x1, 0x967, 0x7, 0x200, 0x401}, {0x2, 0x80, 0x2, 0x794c, 0xa1, 0x54}, {0x80000001, 0xca, 0x6, 0x2, 0x0, 0x8}, {0x7fffffff, 0x7, 0x9, 0xa, 0x6}, {0xfffffff8, 0x6, 0x2, 0x4, 0x9, 0x2}, {0x4, 0x7fff, 0x10, 0x4, 0x6, 0xe}, {0x0, 0x2, 0xfffffffd, 0xffff8001, 0x1, 0x80000000}, {0x10000, 0x1d, 0x7, 0x7fffffff, 0x2d, 0x80}, {0x60000000, 0x7fff, 0x9, 0xfffffff7, 0x8, 0x3}, {0x8001, 0x294b, 0x9, 0x6, 0xfffffffb, 0x5}, {0x8, 0x100, 0x401, 0xcab4, 0xe, 0x7}, {0x4, 0xfff, 0x8001, 0x6d, 0xd3, 0x3}, {0x9, 0x8, 0x2, 0x81, 0x6, 0x16b3}, {0x9, 0xffffffff, 0x4, 0x10001, 0x9, 0xf9d5}, {0xfffff801, 0x5, 0x5, 0x92, 0xd, 0x4}, {0xffff, 0xa, 0x1000, 0x8, 0x28, 0x200}, {0x5, 0x9, 0x7, 0x1, 0x1, 0x8000}, {0x4000000, 0x8, 0x10, 0x1f23, 0x4, 0x3}, {0x0, 0xd96, 0x7, 0xfff, 0x9, 0x1000}, {0x1000, 0xe, 0x8, 0x8, 0x4, 0x9}, {0x7, 0x7, 0x9, 0x6, 0x6, 0x7}, {0x831, 0x6, 0x6, 0x80000001, 0x100, 0x1}, {0x4, 0x10, 0x6, 0x5, 0xff, 0x7}, {0x800000, 0x8429, 0xfffffff7, 0x0, 0x8, 0x7ff}, {0x6, 0xfff, 0x4, 0x3, 0xe, 0x7fffffff}, {0xfffffffb, 0x1, 0xa, 0xc, 0x21c, 0xda0}, {0x9, 0x7, 0x7efc, 0x9, 0xe3}, {0x8, 0x3, 0xefd, 0x62, 0x10, 0x5}, {0x1ff, 0x2, 0x5, 0xfffeffff, 0x400, 0x7}, {0x59, 0x8, 0x80000001, 0x1000, 0x2, 0x4}, {0x9, 0x3ff, 0x400, 0x8, 0x70, 0x9}, {0x200, 0x6, 0x400, 0x1, 0x2}, {0xe0b, 0x81, 0x7, 0x7, 0x400, 0x44a}, {0x5, 0x4, 0x10000, 0xffffffff, 0x6, 0x4}, {0x1, 0x8001, 0xa, 0x7, 0xfffffff7}, {0x3, 0xa0f, 0x0, 0x6, 0x401, 0x4}, {0x0, 0x7, 0xa, 0x8000, 0xffff7fff, 0x1}, {0x800, 0x2, 0x0, 0x80, 0xfffffffc, 0xdd}, {0x1, 0x7, 0x8, 0x8, 0x4, 0x4}, {0x1000, 0x2, 0x3, 0x7, 0x0, 0xfffffff9}, {0xf1, 0x1, 0x5, 0x0, 0x17f0, 0xca6}, {0x5, 0x4, 0x4, 0x9, 0x0, 0x8}, {0x44a6, 0x6, 0x0, 0x7, 0x9ea3, 0x1}, {0xf, 0xa, 0x4, 0x7fff, 0x6a9, 0x2}, {0x4, 0x5, 0x7, 0x5, 0x3, 0x5}, {0x4165, 0x3f7f, 0x10000, 0x0, 0x67b, 0x4}, {0x5, 0x0, 0x7f, 0x80000000, 0x6, 0xffffffff}, {0x9, 0x2, 0x0, 0x4, 0x8, 0x9}, {0x4, 0x8, 0x8866, 0x1, 0x81, 0x9}, {0x8, 0x8, 0x10000, 0xb9c, 0x7, 0x1}, {0xb850, 0x502, 0x5, 0x6, 0x1, 0xffffff9d}, {0x80000001, 0x4, 0x10, 0x4, 0x0, 0x100}, {0x10, 0x7, 0x0, 0xe, 0x1, 0x8}, {0xa5, 0x10, 0x7f, 0x3, 0xfffffff8, 0x401}, {0x92f, 0x7, 0x7f, 0x80000001, 0x5, 0x9}, {0x7, 0x4, 0x8, 0x9, 0x401, 0xfffff000}, {0x8, 0xd8d1, 0x1ff, 0xb1a, 0x0, 0x8}, {0x6, 0x4, 0x3, 0x4cf, 0x7, 0x8}, {0x80000000, 0x7fff, 0x3, 0x9, 0x1, 0x8000}, {0x2, 0x9, 0x1, 0x3, 0x2, 0x80000001}, {0x3, 0x4, 0x1ff, 0x2, 0x7f, 0x1}, {0x1, 0x6, 0x149, 0x7, 0x1, 0x9}, {0x3, 0xff, 0x8, 0x6, 0x81, 0x7}, {0x4, 0xd, 0x3, 0x8, 0x42, 0x40}, {0x30000, 0x3, 0x5, 0x7, 0x4, 0x67}, {0x0, 0x3a47, 0x3, 0x8, 0x2, 0x8}, {0x69f, 0x3ff, 0x7ddfb48f, 0x401, 0x101, 0x9}, {0x6, 0xa, 0x2, 0x3, 0xf, 0x4}, {0xff, 0x8, 0x81, 0x10, 0xfffffffe, 0x1dd}, {0x0, 0x101, 0x6f, 0x5, 0x2, 0x4}, {0x4, 0x7, 0x5, 0x8, 0x0, 0x10001}, {0x9, 0x1400000, 0x1000, 0x5cd7, 0x1, 0x401}, {0x0, 0x1, 0x7, 0x7fffffff, 0x26}, {0x1, 0x4, 0x7, 0x80000000, 0xfffffffc, 0x4}, {0x9, 0x951, 0x4, 0xffff, 0x4, 0x8}, {0x1, 0x7, 0x0, 0x3, 0x800, 0x1af}, {0xfffffff9, 0xf12b, 0x0, 0x200, 0x8, 0x916}, {0x8, 0x400, 0x6, 0x4, 0x2, 0xf278}, {0x3, 0x9, 0xe, 0x1, 0xb07, 0xffffffff}, {0xfffffffd, 0xfffffff1, 0x20000, 0xec, 0x3d74, 0xb2f5}, {0x1, 0xbde, 0x80000001, 0x74, 0x0, 0x9}, {0xff, 0x1, 0x8, 0x1, 0xa, 0x6}, {0x0, 0xf, 0x6, 0x3, 0x8c, 0x1}, {0x4, 0x89, 0x80000001, 0x6, 0xbd, 0x1d22}, {0xfffffffa, 0x3, 0x1, 0x8000, 0x1, 0x10}, {0x74, 0xa3ea, 0x711ac6c0, 0xb, 0x3, 0x5}, {0x0, 0x6, 0xbee8, 0xa6e, 0x5, 0xffff9518}, {0x0, 0x2, 0x0, 0xfffff000, 0x800, 0x80000001}, {0x3, 0x7, 0x8, 0x8, 0xffffffa7}, {0xb, 0x10001, 0x9, 0xd3a, 0x2, 0xd777}, {0xfffffff9, 0xaffa, 0x3ff, 0x7, 0x2, 0x6}, {0x6, 0x0, 0x1ff, 0x5, 0x5, 0x4}, {0x7, 0xa601, 0x8000, 0x4, 0x1, 0x6}, {0x5, 0x2, 0x6, 0x9, 0x1, 0x9}, {0x7fff, 0x1c00, 0x1, 0xc502, 0x0, 0x9}, {0x9, 0xb57a, 0x0, 0x2, 0x3, 0x6}, {0xfffffffc, 0x3, 0xd, 0x6, 0x0, 0xfffffff8}, {0x5, 0x6, 0x7, 0x8001, 0x6, 0x7}, {0xa, 0x80000000, 0x8000, 0x4, 0x8}, {0xecaf, 0x2, 0x0, 0x226, 0x73, 0x1}, {0x7, 0x7fff, 0x8, 0xe0b, 0x10001, 0x10}, {0x8f6c, 0x7, 0x8, 0x69, 0x0, 0x1}, {0x1, 0x4, 0x5ec, 0x1, 0x8, 0x3ff}, {0x0, 0x7fff, 0x5, 0x3, 0x401, 0x2e}, {0x2, 0x101, 0x8, 0x4, 0x6, 0x4}, {0x0, 0x1ee00, 0xe6, 0x2, 0x8001, 0x10000}, {0x3e39, 0x101, 0x0, 0x3, 0x1ac4, 0x1000}, {0x7, 0x7, 0x4, 0x3, 0x8001, 0x4}, {0x3, 0x0, 0x9, 0x81, 0xffff, 0xfe}, {0x5, 0x81, 0x3ff, 0x3b1, 0x6, 0x7}, {0x6, 0xaa17, 0x0, 0x4, 0xf, 0x51db}, {0x9, 0x37c, 0xff, 0x8001, 0x2, 0x2}, {0x7, 0x6, 0xb, 0xe84, 0x2, 0xfffffff7}, {0x2, 0x2, 0x5, 0x775, 0xc, 0x7fffffff}, {0x6, 0x2, 0x0, 0xe3, 0x4, 0x4}, {0xfffffffb, 0xc, 0x401, 0x0, 0x2, 0x523}, {0x3000, 0xf4a, 0x1000, 0x0, 0x72000000, 0xfffffffe}, {0x3ab4, 0x1, 0x9, 0x10, 0x3, 0x10000}, {0x3, 0xffff, 0x0, 0x10, 0x1, 0x9}, {0x72, 0x4, 0x0, 0x16, 0x3, 0xb1d1}, {0x10001, 0x0, 0x5, 0x1ff, 0x3, 0x9}, {0x5, 0x1, 0x1, 0x7, 0x516, 0x5d}, {0x0, 0x4, 0x2, 0x81, 0x200, 0x1}], [{0x4}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x1941e446c2f4acd8}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x0, 0x6, "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"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x2}}}}, @m_csum={0x0, 0x2, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x8000, 0x401, 0x7, 0x0, 0x57}, 0x20}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x5, 0xff800000, 0x20000000, 0x1, 0x6}, 0x75}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x7f, 0x81, 0x0, 0x3ff, 0x6756}, 0x73}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x18731035, 0x8000, 0x0, 0x8, 0x4}, 0x52}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x505c, 0x6, 0x7, 0x7, 0x2}, 0x67}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x329e3eb5, 0x799b, 0x20000000, 0x7, 0x7fffffff}, 0x56}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xde5, 0x9, 0x5, 0x9, 0x2}, 0x2f}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x7f, 0x7ff, 0x10000002, 0x2, 0x5}, 0x75}}]}, {0x0, 0x6, "88fc97081398c42d2adc810708989cb071deda79283b85c1d3babff5c56878b97779bb9e52e75b91b439a7ef8e9c1e0e68b03f221def2ca9e8d7faf3861a4975d961af050b3c95e3e9d12679285cd2fd"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}, @m_ife={0x0, 0x10, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0x0, 0x3, @multicast}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_TCINDEX={0x0, 0x5, @val=0x9}, @IFE_META_PRIO={0x0, 0x3, @val=0xffff8ee6}, @IFE_META_TCINDEX={0x0, 0x5, @val=0xffff}, @IFE_META_SKBMARK, @IFE_META_TCINDEX={0x0, 0x5, @void}]}]}, {0x0, 0x6, "064f59f7229e34e4f1ddcc48423fef8708a3844cded642f126d8fd8b4249fd613a3087d6f8f285edcd4953432f17413b67d0ba23bba196fa5e2d522a59d7d72de05f58e12fb79c911f68c9b3aed672cb5759de2d30bd070656dd1cd4b45d764880fb4aff9f5ca2d0d4d89bfb86bc1a232b7fc93336a614f96190a48f8a1999"}, {}, {0x0, 0x8, {0x3, 0x2}}}}, @m_csum={0x0, 0x2, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0x0, 0x7, 0x4, 0x4}, 0x31}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x9, 0xfffffffe, 0x4, 0x1}, 0x1e}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x7ff, 0x23c, 0x7, 0x9, 0x2}, 0x74}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x3, 0x80, 0x4, 0x4e, 0x12}, 0x9}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x60, 0x1, 0xf366eae28755f53c, 0x80000001, 0xffff}, 0x39}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x4, 0x101, 0x5, 0x8, 0x4}, 0x34}}]}, {0x0, 0x6, "bbf15ea9f7b43a34be6d210433a88cee057492e9ef663eadf1d8b823bb01fe198bf0cc0a1e11a181d0934a90175d6d0b3b"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x2}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x440c0}, 0x20000000) recvmsg$can_j1939(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/226, 0xe2}], 0x3}, 0x20) 3.978457394s ago: executing program 0 (id=6574): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0843b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.961211383s ago: executing program 6 (id=6575): syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x0, [{@remote}, {@multicast2}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011d80)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x9, 0xfff1}, {0xfff3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={r3}, &(0x7f0000000180)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x8, 0x16, 0xff}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4808}, 0x0) r5 = socket$kcm(0x10, 0x5, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000000000000000000000810000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100000400000000000000", 0xffffff7e}, {&(0x7f0000000140)="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"}], 0x10000000000002b1, 0x0, 0x0, 0x1f00c00e}, 0x64048855) shutdown(r5, 0x0) 1.867266247s ago: executing program 0 (id=6578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000340)='GPL\x00', 0x7fffffff, 0xee, &(0x7f0000000c00)=""/238, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x5, 0x3, 0x80, 0x46a4}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d40)=[r0, r1, r1, r0], 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)={0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000700), r6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x23) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a80)={r3, &(0x7f00000009c0)="de1a03913d451049561de27e50e75d2f9940559a8e4424f3879ce5b282d3d56fba6dddc12aa5dc226fa44e7a85078d42977ec9a4", &(0x7f0000000a00)=""/92, 0x4}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r7) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040054) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52) ioctl$FIGETBSZ(r10, 0x2, &(0x7f00000002c0)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r11, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r12, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc814}, 0x1) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r13, 0x400454cd, 0x337) 1.637706712s ago: executing program 4 (id=6582): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000051c001a800800028004000500080000003e"], 0x44}}, 0x0) 1.495888248s ago: executing program 0 (id=6583): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0xfffffffffffffdea, 0x6, 0xda32}]}, {0x4}, {0xc, 0x7, {0x2000}}, {0xc}}}]}, {0x0, 0x1, [@m_skbmod={0x2b, 0xc, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC, @TCA_SKBMOD_DMAC={0x0, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x1a3, 0x1, 0x20000000, 0x1, 0x6}, 0x3}}]}, {0x0, 0x6, "777597b08fb115004a8bdcf44249a44af4b4039cc3609d873b420f5e144bd6b2da489c2a0ad3ce9e477ee02a29c623360bcc427b0fffb1e5a52b49423722c756fc0d225056cbe51be98a090cad65a42f927eef4be1422520cb890c17afda29358a1b5710ae13fffd888783ea33cfdfed1effe71cacb62801ea9ae9fb75a034dc35b028a5e71557c5f3f5a56cb88e8cc9b42c88711e71c30ab22c50b5c5ccd6386b25486725b11447c78bfa26188bb0b6d5688d481888"}, {}, {0x0, 0x8, {0x2, 0x1}}}}, @m_csum={0x0, 0x1a, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x3, 0xffff, 0x8, 0x1000, 0x1}, 0x43}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x0, 0x9, 0x2, 0x3}, 0x61}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x5b, 0x7, 0x0, 0x100, 0xc85}, 0x7d}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0xd, 0x6, 0xf753, 0x400}, 0x10}}]}, {0x0, 0x6, "b4dc9198ccbddb422cddd54abb12"}, {}, {0x0, 0x8, {0x2, 0x2}}}}, @m_simple={0x0, 0x2, 0x0, 0x0, {{}, {}, {0x0, 0x6, "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"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x1}}}}, @m_ct={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x0, 0xa, @multicast1}, @TCA_CT_NAT_PORT_MAX={0x0, 0xe, 0x4e20}, @TCA_CT_NAT_IPV6_MIN={0x0, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_LABELS_MASK={0x0, 0x8, "41e636344bf4f012bd1d87bd2d8ce435"}, @TCA_CT_MARK_MASK={0x0, 0x6, 0x5}, @TCA_CT_NAT_IPV6_MAX={0x0, 0xc, @mcast2}, @TCA_CT_MARK_MASK={0x0, 0x6, 0x700}, @TCA_CT_NAT_PORT_MIN={0x0, 0xd, 0x4e21}]}, {0x0, 0x6, "02670ccf657f7c472d8687c11b6c6abc223271c2fe8df93c0b9a925dd78651e607e41520070c76998db3d83a17e352850e34dfa45c183cb34e8e4d38ec3005193a4b1a64d27f584f265acec8def0847962a8"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x3}}}}, @m_ctinfo={0x0, 0x20, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x0, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x0, 0x5, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x1000}, @TCA_CTINFO_ACT={0x0, 0x3, {0x9, 0x10000, 0x10000000, 0x800, 0x100}}, @TCA_CTINFO_ZONE={0x0, 0x4, 0x3}, @TCA_CTINFO_ZONE={0x0, 0x4, 0x2c31}, @TCA_CTINFO_ACT={0x0, 0x3, {0x57, 0x7, 0x4, 0x8000, 0x81}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0x3}, @TCA_CTINFO_ACT={0x0, 0x3, {0xa774, 0xe00000, 0x4, 0x0, 0xd41f}}]}, {0x0, 0x6, "ef399469db45b3ad30a1caa4995351625d4b6e3f30cbdd7b2b514cccf2067495dd634c09edf95f714b4e50c43e106c8ea28e3012edb0d279ee8d85ac2561dcd2ec4e0aa6171001e9d5335feaf08623710f72677ce031bbbb1b5d22bd201a336881e6bc9546fc0460bafc4e690e02b9ee224834e32c984f494f5298f5b17fe9e0a00a572adbd4ec13e5bb3d5f3d96d81dbd2d3393efe26474c33929ded6c9b613337ca5db73e4220326a26a8df38a67"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x4}}}}]}]}, 0x70}}, 0x0) 1.423430245s ago: executing program 0 (id=6585): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x7}}, 0x2, 0x200, 0x4, 0x100, 0x2}, &(0x7f00000000c0)=0x98) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e900000000000000030006000000000002000000000000000000000000000000020001000000000000000316ff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 1.420903917s ago: executing program 4 (id=6586): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a000d0e26bd7000fcdbde25000000000000000008000a0008000000"], 0x20}}, 0x0) 1.391330414s ago: executing program 3 (id=6587): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.243715463s ago: executing program 7 (id=6589): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1a0000010}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x2010}) 1.175961018s ago: executing program 4 (id=6590): socket(0x2a, 0x2, 0xffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000080000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.169709862s ago: executing program 0 (id=6591): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, ').)\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, '.-}\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40010) 1.058814668s ago: executing program 7 (id=6592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xff80, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 907.061549ms ago: executing program 0 (id=6593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @private0, 0x80000}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000340)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 'sed\x00', 0x10, 0x5, 0x36}, 0x2c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f0000001fd8)=ANY=[@ANYRESOCT=r5], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="030b28bd7000ffdb040003"], 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x4000}, 0x20040880) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r10, 0x1}, 0x14}}, 0x0) 806.209744ms ago: executing program 7 (id=6594): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000fffd00000007000000441c0512"], 0x30}, 0x40880) 804.203007ms ago: executing program 3 (id=6595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8, 0x88000000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 719.668907ms ago: executing program 4 (id=6596): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x128, 0x0, 0x148, 0x128, 0x148, 0x1f8, 0x240, 0x240, 0x1f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x8, 0x0}, 0xffffff00, 0xff, 'netpci0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x88, 0x2, 0x56}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x6, 0xffffffff, 0x1}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x2, 0x4, 0x8000000, 0x1], 0x0, 0x6}, {0x2, [0x2, 0x6, 0x6, 0x6, 0x2, 0x4], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x0, 0x4, 0x7, 0xba245f2feebcbbd5], 0x1, 0x1}, {0x2, [0x1, 0x7, 0x4, 0x3, 0x4, 0x2], 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 644.015547ms ago: executing program 6 (id=6597): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 552.768379ms ago: executing program 7 (id=6598): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0xf, 0x0, 0xc312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000069000010000000004000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffeeffb702000008000000b703000000400000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="8f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)="e1", 0x1}], 0x1}}], 0x2, 0x4000005) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x1, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x1d, &(0x7f0000000100)={0xa, 0x4e22, 0x42, @empty, 0xfffffffa}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) (fail_nth: 3) 472.842354ms ago: executing program 3 (id=6599): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x220000, 0x800, 0x3, 0x3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20000811) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000280)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r5, 0x0) syz_extract_tcp_res(&(0x7f0000000380), 0x0, 0x10000) syz_emit_ethernet(0x1ed, &(0x7f0000000400)={@remote, @local, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "658dfa", 0x1b7, 0x3a, 0xff, @remote, @remote, {[@fragment={0x2c, 0x0, 0x3, 0x0, 0x0, 0x8, 0x68}, @fragment={0x1d, 0x0, 0x8, 0x0, 0x0, 0x10, 0x66}, @routing={0x5c, 0x2, 0x2, 0xc, 0x0, [@local]}, @fragment={0x84, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x68}, @hopopts={0x0, 0x3, '\x00', [@ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x200}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x4, [0xe6d]}}]}, @dstopts={0x3a, 0x23, '\x00', [@jumbo, @jumbo={0xc2, 0x4, 0x200}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x7c, "64576a067bf5202b57c073c90cb93cd18f025e29fd5e08c3bca7a7518b88df3050949f73f59df4dd7c5ec19c769233763669f3899466ef2db9cb4933073ef506844487b4a13c3edb6daad9671c311b0f7f410d76faa4f0da4999c7ed9e93e699e75db471a60bd1f91d71d83c2c33fd91e9502a5fd8942f126bbf53e6"}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0x67, [0x2, 0x4752, 0xe74, 0x6, 0xf96, 0x94f6]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x5d, 0x4, [0x4, 0x5]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x8c, 0x5, [0xca07, 0x3, 0x7]}}]}], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @loopback, [{0x19, 0x4, "7e337c90e218dc5c556f89dcad924517a113434ef0712b01a16ee69460dfc22661f1341a71"}]}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aa89ac965f294a0e74b8db53aaaaaaaa00000000000008004500003c000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac02fffe9078ffff1312f1e69335b885568c32500dff1c725f820402"], 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000004080108000000080000000000000009"], 0x14}, 0x1, 0x0, 0x0, 0x24048811}, 0x80) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000200)={0x0, 0x0}) 411.760019ms ago: executing program 4 (id=6600): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 317.146994ms ago: executing program 7 (id=6601): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[@ANYBLOB="0219040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa000000000022", @ANYRES8=r0, @ANYRESOCT], 0x38}}, 0x0) 218.206544ms ago: executing program 3 (id=6602): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1a0000010}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x2010}) 216.789634ms ago: executing program 4 (id=6603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x1, 0x3, &(0x7f0000000440)=""/224, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003580)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000a00)={'sit0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x3a, 0x40009, 0x0, 0x400, 0x2, 0x0, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x45, [0xfff, 0x2]}}) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="2e00000010008188040f80f85fcb76f5f586b9483f0000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 90.312899ms ago: executing program 7 (id=6604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$netlink(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000007001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x80) 89.841372ms ago: executing program 3 (id=6605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0xd00}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x7c}}, 0x40880) 0s ago: executing program 3 (id=6606): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): 0 bytes leftover after parsing attributes in process `syz.7.5659'. [ 536.041451][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5659'. [ 536.253898][T21586] lo speed is unknown, defaulting to 1000 [ 536.324453][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 536.336475][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 536.344918][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 536.364060][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 536.372308][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 536.380376][T13864] syz_tun (unregistering): left promiscuous mode [ 536.501819][ T6997] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.569791][ T6997] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.591684][T21588] lo speed is unknown, defaulting to 1000 [ 536.643437][T21552] lo speed is unknown, defaulting to 1000 [ 536.782515][ T6997] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.801335][T21596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5674'. [ 536.811799][T21598] FAULT_INJECTION: forcing a failure. [ 536.811799][T21598] name failslab, interval 1, probability 0, space 0, times 0 [ 536.874671][T21598] CPU: 0 UID: 0 PID: 21598 Comm: syz.7.5665 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 536.874698][T21598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.874710][T21598] Call Trace: [ 536.874717][T21598] [ 536.874726][T21598] dump_stack_lvl+0x189/0x250 [ 536.874755][T21598] ? __pfx____ratelimit+0x10/0x10 [ 536.874780][T21598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.874805][T21598] ? __pfx__printk+0x10/0x10 [ 536.874830][T21598] ? __pfx___might_resched+0x10/0x10 [ 536.874861][T21598] should_fail_ex+0x414/0x560 [ 536.874888][T21598] should_failslab+0xa8/0x100 [ 536.874908][T21598] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 536.874924][T21598] ? __alloc_skb+0x112/0x2d0 [ 536.874942][T21598] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 536.874962][T21598] __alloc_skb+0x112/0x2d0 [ 536.874983][T21598] pfkey_sendmsg+0x1dd/0x1090 [ 536.875003][T21598] ? __pfx___might_resched+0x10/0x10 [ 536.875023][T21598] ? __lock_acquire+0xab9/0xd20 [ 536.875051][T21598] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 536.875074][T21598] ? aa_sk_perm+0x81e/0x950 [ 536.875094][T21598] ? is_bpf_text_address+0x26/0x2b0 [ 536.875119][T21598] ? __pfx_aa_sk_perm+0x10/0x10 [ 536.875137][T21598] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 536.875166][T21598] ? aa_sock_msg_perm+0x94/0x160 [ 536.875189][T21598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.875209][T21598] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 536.875229][T21598] __sock_sendmsg+0x219/0x270 [ 536.875251][T21598] ____sys_sendmsg+0x505/0x830 [ 536.875280][T21598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.875312][T21598] ? import_iovec+0x74/0xa0 [ 536.875335][T21598] ___sys_sendmsg+0x21f/0x2a0 [ 536.875361][T21598] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.875422][T21598] ? __fget_files+0x2a/0x420 [ 536.875441][T21598] ? __fget_files+0x3a0/0x420 [ 536.875478][T21598] __x64_sys_sendmsg+0x19b/0x260 [ 536.875505][T21598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.875539][T21598] ? __pfx_ksys_write+0x10/0x10 [ 536.875554][T21598] ? rcu_is_watching+0x15/0xb0 [ 536.875584][T21598] ? do_syscall_64+0xbe/0x3b0 [ 536.875606][T21598] do_syscall_64+0xfa/0x3b0 [ 536.875622][T21598] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.875647][T21598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.875665][T21598] ? clear_bhb_loop+0x60/0xb0 [ 536.875687][T21598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.875704][T21598] RIP: 0033:0x7fb29938e929 [ 536.875722][T21598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.875738][T21598] RSP: 002b:00007fb29a2b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.875759][T21598] RAX: ffffffffffffffda RBX: 00007fb2995b5fa0 RCX: 00007fb29938e929 [ 536.875772][T21598] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 536.875785][T21598] RBP: 00007fb29a2b0090 R08: 0000000000000000 R09: 0000000000000000 [ 536.875797][T21598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.875807][T21598] R13: 0000000000000000 R14: 00007fb2995b5fa0 R15: 00007fffc2796908 [ 536.875836][T21598] [ 537.279186][ T6997] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.445019][T21595] lo speed is unknown, defaulting to 1000 [ 537.879451][T21604] lo speed is unknown, defaulting to 1000 [ 538.139462][T21588] chnl_net:caif_netlink_parms(): no params data found [ 538.227959][ T6997] ip6gretap0 (unregistering): left promiscuous mode [ 538.231859][T21623] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5673'. [ 538.321927][ T6997] bond7 (unregistering): (slave ip6gretap2): Releasing active interface [ 538.331136][ T6997] ip6gretap2 (unregistering): left promiscuous mode [ 538.337755][ T6997] ip6gretap2 (unregistering): left allmulticast mode [ 538.426640][ T6997] erspan0 (unregistering): left promiscuous mode [ 538.448671][ T6997] gretap0 (unregistering): left promiscuous mode [ 538.482393][ T5158] Bluetooth: hci5: command tx timeout [ 538.580605][ T6997] geneve0 (unregistering): left promiscuous mode [ 538.592646][ T6997] team0: Port device geneve0 removed [ 538.881501][ T6997] bond0 (unregistering): Released all slaves [ 539.051039][ T6997] bond1 (unregistering): Released all slaves [ 539.203038][ T6997] bond2 (unregistering): Released all slaves [ 539.359009][ T6997] bond3 (unregistering): Released all slaves [ 539.502498][ T6997] bond4 (unregistering): Released all slaves [ 539.646743][ T6997] bond5 (unregistering): Released all slaves [ 539.799675][ T6997] bond6 (unregistering): (slave veth17): Releasing backup interface [ 539.810632][ T6997] bond6 (unregistering): Released all slaves [ 539.828212][ T6997] bond7 (unregistering): Released all slaves [ 539.975071][T21622] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.982844][T21622] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.123710][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.142156][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.285115][T21622] hsr0: left allmulticast mode [ 540.290463][T21622] hsr_slave_0: left allmulticast mode [ 540.295859][T21622] hsr_slave_1: left allmulticast mode [ 540.307400][T21622] macvlan2: left promiscuous mode [ 540.313165][T21622] macvlan2: left allmulticast mode [ 540.385256][ T2992] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.405071][ T2992] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.516653][ T2992] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.535869][ T2992] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.560108][ T5158] Bluetooth: hci5: command tx timeout [ 540.676864][T21629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.688191][T21629] bond0: (slave bond1): Enslaving as an active interface with an up link [ 540.813019][T21639] FAULT_INJECTION: forcing a failure. [ 540.813019][T21639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.849024][T21639] CPU: 0 UID: 0 PID: 21639 Comm: syz.7.5679 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 540.849051][T21639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 540.849063][T21639] Call Trace: [ 540.849071][T21639] [ 540.849080][T21639] dump_stack_lvl+0x189/0x250 [ 540.849110][T21639] ? __pfx____ratelimit+0x10/0x10 [ 540.849136][T21639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.849162][T21639] ? __pfx__printk+0x10/0x10 [ 540.849195][T21639] should_fail_ex+0x414/0x560 [ 540.849223][T21639] _copy_to_user+0x31/0xb0 [ 540.849244][T21639] simple_read_from_buffer+0xe1/0x170 [ 540.849269][T21639] proc_fail_nth_read+0x1df/0x250 [ 540.849294][T21639] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.849319][T21639] ? rw_verify_area+0x258/0x650 [ 540.849343][T21639] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.849366][T21639] vfs_read+0x200/0x980 [ 540.849396][T21639] ? __pfx___mutex_lock+0x10/0x10 [ 540.849415][T21639] ? __pfx_vfs_read+0x10/0x10 [ 540.849441][T21639] ? __fget_files+0x2a/0x420 [ 540.849464][T21639] ? __fget_files+0x3a0/0x420 [ 540.849480][T21639] ? __fget_files+0x2a/0x420 [ 540.849507][T21639] ksys_read+0x145/0x250 [ 540.849534][T21639] ? __pfx_ksys_read+0x10/0x10 [ 540.849556][T21639] ? rcu_is_watching+0x15/0xb0 [ 540.849587][T21639] ? do_syscall_64+0xbe/0x3b0 [ 540.849609][T21639] do_syscall_64+0xfa/0x3b0 [ 540.849625][T21639] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.849649][T21639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.849668][T21639] ? clear_bhb_loop+0x60/0xb0 [ 540.849696][T21639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.849715][T21639] RIP: 0033:0x7fb29938d33c [ 540.849732][T21639] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 540.849748][T21639] RSP: 002b:00007fb29a2b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.849768][T21639] RAX: ffffffffffffffda RBX: 00007fb2995b5fa0 RCX: 00007fb29938d33c [ 540.849782][T21639] RDX: 000000000000000f RSI: 00007fb29a2b00a0 RDI: 0000000000000004 [ 540.849794][T21639] RBP: 00007fb29a2b0090 R08: 0000000000000000 R09: 0000000000000000 [ 540.849806][T21639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.849817][T21639] R13: 0000000000000000 R14: 00007fb2995b5fa0 R15: 00007fffc2796908 [ 540.849849][T21639] [ 540.851678][T21588] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.100551][T21588] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.107846][T21588] bridge_slave_0: entered allmulticast mode [ 541.116593][T21588] bridge_slave_0: entered promiscuous mode [ 541.130555][T21588] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.137903][T21588] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.168081][T21588] bridge_slave_1: entered allmulticast mode [ 541.176690][T21588] bridge_slave_1: entered promiscuous mode [ 541.327006][T21588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.353725][T21588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.535297][T21588] team0: Port device team_slave_0 added [ 541.575283][T21588] team0: Port device team_slave_1 added [ 541.592526][ T6997] : left promiscuous mode [ 541.621070][T21663] netlink: 'syz.6.5690': attribute type 1 has an invalid length. [ 541.663635][T21663] netlink: 184 bytes leftover after parsing attributes in process `syz.6.5690'. [ 541.681321][T21663] netlink: 'syz.6.5690': attribute type 1 has an invalid length. [ 541.725720][T21588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.750593][T21588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.812161][T21588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.830612][ T6997] : left promiscuous mode [ 541.893773][T21588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.917041][T21588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.995581][T21588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.024298][ T6997] tipc: Left network mode [ 542.039087][T21680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5697'. [ 542.172544][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5699'. [ 542.262651][T21588] hsr_slave_0: entered promiscuous mode [ 542.269517][T21588] hsr_slave_1: entered promiscuous mode [ 542.285275][T21588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.307443][T21588] Cannot create hsr debugfs directory [ 542.435399][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5706'. [ 542.577161][T21703] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5709'. [ 542.591488][T21704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 542.598787][T21704] IPv6: NLM_F_CREATE should be set when creating new route [ 542.641833][ T5158] Bluetooth: hci5: command tx timeout [ 542.771330][T21706] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5711'. [ 542.787405][T21706] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5711'. [ 542.873334][T21706] erspan0: entered promiscuous mode [ 542.891805][T21706] gretap0: entered promiscuous mode [ 542.908186][T21706] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 542.920557][T21706] Cannot create hsr debugfs directory [ 542.927114][T21706] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 542.939457][T21706] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 543.080393][ T6997] hsr_slave_0: left promiscuous mode [ 543.106961][ T6997] hsr_slave_1: left promiscuous mode [ 543.158636][T21721] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5717'. [ 543.168256][ T6997] hsr0: left allmulticast mode [ 543.177473][ T6997] hsr0: left promiscuous mode [ 544.720179][ T5158] Bluetooth: hci5: command tx timeout [ 545.244707][T21736] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5722'. [ 545.267875][T21738] netlink: 'syz.7.5723': attribute type 38 has an invalid length. [ 545.442991][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5727'. [ 546.173053][T21588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 546.235938][T21588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 546.319791][T21588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 546.329093][ T55] block nbd1: Possible stuck request ffff888025597000: control (read@0,1024B). Runtime 360 seconds [ 546.342931][ T55] block nbd1: Possible stuck request ffff8880255971c0: control (read@1024,1024B). Runtime 360 seconds [ 546.355483][ T55] block nbd1: Possible stuck request ffff888025597380: control (read@2048,1024B). Runtime 360 seconds [ 546.367311][ T55] block nbd1: Possible stuck request ffff888025597540: control (read@3072,1024B). Runtime 360 seconds [ 546.395312][T21774] 8021q: VLANs not supported on nlmon0 [ 546.403342][T21588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 546.882382][ T6997] IPVS: stop unused estimator thread 0... [ 547.089467][T21588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.454424][T21588] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.495170][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.502392][ T6988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.572978][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.580204][ T7002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.759310][T21825] bridge0: port 1(syz_tun) entered blocking state [ 547.766751][T21825] bridge0: port 1(syz_tun) entered disabled state [ 547.795062][T21825] syz_tun: entered allmulticast mode [ 547.825370][T21825] syz_tun: entered promiscuous mode [ 547.861446][T21825] bridge0: port 1(syz_tun) entered blocking state [ 547.868055][T21825] bridge0: port 1(syz_tun) entered forwarding state [ 548.450971][T21588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.593236][T21588] veth0_vlan: entered promiscuous mode [ 548.648339][T21588] veth1_vlan: entered promiscuous mode [ 548.681739][T21865] __nla_validate_parse: 4 callbacks suppressed [ 548.681760][T21865] netlink: 348 bytes leftover after parsing attributes in process `syz.6.5775'. [ 548.772264][T21588] veth0_macvtap: entered promiscuous mode [ 548.823760][T21588] veth1_macvtap: entered promiscuous mode [ 548.861214][T21873] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5780'. [ 548.896316][T21588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.937432][T21588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.000976][ T6997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.022008][ T6999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.041993][ T6999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.068775][ T6999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.343302][ T6999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.355793][ T6999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.483494][ T6999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.516426][ T6999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.888595][T21913] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 550.149584][T21914] syzkaller1: entered promiscuous mode [ 550.167764][T21914] syzkaller1: entered allmulticast mode [ 550.351137][T21927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5803'. [ 550.423009][T21927] macvtap1: entered promiscuous mode [ 550.428692][T21927] macvtap1: entered allmulticast mode [ 550.449016][T21927] dummy0: entered allmulticast mode [ 550.454559][T21929] xt_hashlimit: size too large, truncated to 1048576 [ 550.811155][ T6997] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.050495][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 551.064453][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 551.084430][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 551.097382][ T6997] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.120762][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 551.140566][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 551.311965][ T6997] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.337645][T21955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5816'. [ 551.446000][ T6997] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.872995][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5825'. [ 551.890140][T21976] geneve2: entered promiscuous mode [ 551.982048][ T2992] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.000170][ T2992] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.009072][ T2992] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.104179][ T6998] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.184304][T21946] chnl_net:caif_netlink_parms(): no params data found [ 552.307550][ T6997] dummy0: left allmulticast mode [ 552.322495][ T6997] bridge0: port 1(dummy0) entered disabled state [ 552.630343][T22004] syz.6.5837 uses old SIOCAX25GETINFO [ 552.938583][ T6997] erspan0 (unregistering): left promiscuous mode [ 552.967220][ T6997] gretap0 (unregistering): left promiscuous mode [ 553.201055][ T5158] Bluetooth: hci2: command tx timeout [ 553.316135][ T6997] bond0 (unregistering): Released all slaves [ 553.331632][ T6997] bond1 (unregistering): Released all slaves [ 553.349061][ T6997] bond2 (unregistering): Released all slaves [ 553.537209][ T6997] bond3 (unregistering): Released all slaves [ 553.706388][ T6997] bond4 (unregistering): Released all slaves [ 553.853753][ T6997] bond5 (unregistering): (slave veth5): Releasing backup interface [ 553.864641][ T6997] bond5 (unregistering): Released all slaves [ 554.124216][T21946] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.150787][T21946] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.165802][T21946] bridge_slave_0: entered allmulticast mode [ 554.184213][T21946] bridge_slave_0: entered promiscuous mode [ 554.213447][ T6997] : left promiscuous mode [ 554.259318][T21946] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.277914][T21946] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.298366][T21946] bridge_slave_1: entered allmulticast mode [ 554.329192][T21946] bridge_slave_1: entered promiscuous mode [ 554.410275][ T6997] tipc: Left network mode [ 554.435529][T22031] netlink: 'syz.7.5848': attribute type 1 has an invalid length. [ 554.447121][T22031] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5848'. [ 554.528681][T21946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.538324][T22033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5847'. [ 554.558613][T21946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.006070][T21946] team0: Port device team_slave_0 added [ 555.125630][T21946] team0: Port device team_slave_1 added [ 555.280615][ T5158] Bluetooth: hci2: command tx timeout [ 555.413511][T21946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.448481][T21946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.498183][T21946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.600972][T21946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.608070][T21946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.645207][T21946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.836297][T22079] netlink: 'syz.6.5871': attribute type 1 has an invalid length. [ 555.873419][T22079] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5871'. [ 556.092230][ T6997] hsr_slave_0: left promiscuous mode [ 556.104578][ T6997] hsr_slave_1: left promiscuous mode [ 556.155340][T22091] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 556.176257][ T6997] veth1_macvtap: left promiscuous mode [ 556.210295][ T6997] veth0_macvtap: left promiscuous mode [ 556.217293][ T6997] veth1_vlan: left promiscuous mode [ 556.220508][T22093] netlink: 2112 bytes leftover after parsing attributes in process `syz.6.5876'. [ 557.370245][ T5158] Bluetooth: hci2: command tx timeout [ 557.942930][T22122] netlink: 'syz.7.5888': attribute type 4 has an invalid length. [ 557.968354][T22122] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5888'. [ 558.022576][T21946] hsr_slave_0: entered promiscuous mode [ 558.039506][T21946] hsr_slave_1: entered promiscuous mode [ 558.051038][T21946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.071321][T21946] Cannot create hsr debugfs directory [ 558.123808][T22122] : renamed from bond0 [ 559.440639][ T5158] Bluetooth: hci2: command tx timeout [ 559.620559][T22187] netlink: zone id is out of range [ 559.631315][T22187] netlink: zone id is out of range [ 559.636744][T22187] netlink: del zone limit has 4 unknown bytes [ 559.814156][T22195] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5924'. [ 559.844061][T22193] syzkaller0: entered allmulticast mode [ 559.893460][T22193] syzkaller0 (unregistering): left allmulticast mode [ 559.999248][T21946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 560.078379][T21946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 560.157030][T21946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 560.224117][T21946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 560.845223][T21946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.892655][T22237] geneve2: entered promiscuous mode [ 560.943839][T21946] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.005128][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.012371][ T6997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.176727][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.184005][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.293448][T22251] netlink: 'syz.0.5949': attribute type 4 has an invalid length. [ 561.327648][T22251] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5949'. [ 561.401290][T22251] : renamed from bond0 (while UP) [ 561.634402][T22253] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5950'. [ 561.965853][T22275] netlink: 'syz.4.5956': attribute type 12 has an invalid length. [ 561.995894][T22275] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.5956'. [ 562.152693][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5961'. [ 562.313573][T21946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.506023][T22289] netlink: 'syz.7.5965': attribute type 32 has an invalid length. [ 562.558848][T21946] veth0_vlan: entered promiscuous mode [ 562.660625][T22296] syzkaller0: entered allmulticast mode [ 562.829386][T21946] veth1_vlan: entered promiscuous mode [ 562.845528][T22297] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5966'. [ 562.884372][T22290] syzkaller0: left allmulticast mode [ 562.933414][T22300] netlink: 'syz.6.5969': attribute type 6 has an invalid length. [ 562.990005][T21946] veth0_macvtap: entered promiscuous mode [ 563.013321][T21946] veth1_macvtap: entered promiscuous mode [ 563.101825][T21946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.152424][T21946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.165345][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5973'. [ 563.187971][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5973'. [ 563.205402][T22311] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5971'. [ 563.217575][ T6998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.229058][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5973'. [ 563.252561][ T6998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.324294][ T3026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.334916][ T3026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.370519][T22315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.437190][T22317] bond0: (slave veth3): Enslaving as an active interface with an up link [ 563.554189][T22323] netlink: 'syz.6.5976': attribute type 12 has an invalid length. [ 563.867555][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.885730][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.032473][ T7002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.072770][T22334] batadv0: entered promiscuous mode [ 564.078140][T22334] macsec1: entered promiscuous mode [ 564.080651][ T7002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.114285][T22334] batadv0: left promiscuous mode [ 564.165327][T22341] geneve2: entered promiscuous mode [ 564.183509][ T6998] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.242076][ T6998] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.251823][ T6998] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.271300][ T6998] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.693968][T22349] bond5 (unregistering): Released all slaves [ 565.045691][T22373] geneve2: entered promiscuous mode [ 565.058609][T22377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.258548][T22384] x_tables: duplicate underflow at hook 2 [ 565.315792][T22386] netlink: 'syz.3.5998': attribute type 10 has an invalid length. [ 565.977536][T22399] __nla_validate_parse: 3 callbacks suppressed [ 565.977582][T22399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6004'. [ 566.086958][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.136900][T22405] netlink: 830 bytes leftover after parsing attributes in process `syz.6.6004'. [ 566.151887][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6004'. [ 566.195317][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 566.212915][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 566.223083][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.240798][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 566.271424][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 566.289831][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 566.409353][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.564296][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.930816][T22423] team_slave_0: entered promiscuous mode [ 566.936635][T22423] team_slave_1: entered promiscuous mode [ 566.979610][T22423] vlan2: entered promiscuous mode [ 566.997725][T22423] team0: entered promiscuous mode [ 567.178483][T22434] bridge_slave_0: left allmulticast mode [ 567.207674][T22438] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6017'. [ 567.226796][T22434] bridge_slave_0: left promiscuous mode [ 567.233758][T22434] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.340214][T22434] bridge_slave_1: left allmulticast mode [ 567.346214][T22434] bridge_slave_1: left promiscuous mode [ 567.355203][T22446] x_tables: duplicate underflow at hook 1 [ 567.355205][T22434] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.391209][T22434] : (slave bond_slave_0): Releasing backup interface [ 567.417375][T22434] : (slave bond_slave_1): Releasing backup interface [ 567.446827][T22434] team0: Port device team_slave_0 removed [ 567.461428][T22434] team0: Port device team_slave_1 removed [ 567.468055][T22434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.484802][T22434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.502026][T22434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.509633][T22434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.700441][ T36] ip6gretap0 (unregistering): left promiscuous mode [ 568.056018][ T36] bridge0 (unregistering): left allmulticast mode [ 568.366850][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 568.376094][ T36] mac80211_hwsim hwsim18 wlan1: left promiscuous mode [ 568.385863][ T36] bond0 (unregistering): Released all slaves [ 568.400171][ T5158] Bluetooth: hci0: command tx timeout [ 568.541271][ T36] bond1 (unregistering): Released all slaves [ 568.709200][ T36] bond2 (unregistering): Released all slaves [ 568.843222][ T36] bond3 (unregistering): Released all slaves [ 568.992949][ T36] bond4 (unregistering): Released all slaves [ 569.114435][T22456] vlan2: entered promiscuous mode [ 569.139458][T22456] dummy0: entered promiscuous mode [ 569.215378][ T36] : left promiscuous mode [ 569.319509][T22463] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6023'. [ 569.392481][ T36] : left promiscuous mode [ 569.426286][T22404] chnl_net:caif_netlink_parms(): no params data found [ 569.426868][T22467] netlink: 248 bytes leftover after parsing attributes in process `syz.6.6023'. [ 569.919052][T22478] FAULT_INJECTION: forcing a failure. [ 569.919052][T22478] name failslab, interval 1, probability 0, space 0, times 0 [ 569.978146][T22478] CPU: 1 UID: 0 PID: 22478 Comm: syz.6.6028 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 569.978173][T22478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 569.978185][T22478] Call Trace: [ 569.978193][T22478] [ 569.978202][T22478] dump_stack_lvl+0x189/0x250 [ 569.978233][T22478] ? __pfx____ratelimit+0x10/0x10 [ 569.978259][T22478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.978285][T22478] ? __pfx__printk+0x10/0x10 [ 569.978316][T22478] ? __pfx___might_resched+0x10/0x10 [ 569.978346][T22478] should_fail_ex+0x414/0x560 [ 569.978373][T22478] should_failslab+0xa8/0x100 [ 569.978395][T22478] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 569.978414][T22478] ? __alloc_skb+0x112/0x2d0 [ 569.978433][T22478] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 569.978458][T22478] __alloc_skb+0x112/0x2d0 [ 569.978483][T22478] pfkey_sendmsg+0x1dd/0x1090 [ 569.978510][T22478] ? __pfx___might_resched+0x10/0x10 [ 569.978533][T22478] ? __lock_acquire+0xab9/0xd20 [ 569.978562][T22478] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 569.978588][T22478] ? aa_sk_perm+0x81e/0x950 [ 569.978608][T22478] ? is_bpf_text_address+0x26/0x2b0 [ 569.978635][T22478] ? __pfx_aa_sk_perm+0x10/0x10 [ 569.978653][T22478] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 569.978683][T22478] ? aa_sock_msg_perm+0x94/0x160 [ 569.978706][T22478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.978728][T22478] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 569.978749][T22478] __sock_sendmsg+0x219/0x270 [ 569.978771][T22478] ____sys_sendmsg+0x505/0x830 [ 569.978802][T22478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.978835][T22478] ? import_iovec+0x74/0xa0 [ 569.978857][T22478] ___sys_sendmsg+0x21f/0x2a0 [ 569.978883][T22478] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.978943][T22478] ? __fget_files+0x2a/0x420 [ 569.978962][T22478] ? __fget_files+0x3a0/0x420 [ 569.978991][T22478] __x64_sys_sendmsg+0x19b/0x260 [ 569.979017][T22478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.979049][T22478] ? __pfx_ksys_write+0x10/0x10 [ 569.979064][T22478] ? rcu_is_watching+0x15/0xb0 [ 569.979094][T22478] ? do_syscall_64+0xbe/0x3b0 [ 569.979115][T22478] do_syscall_64+0xfa/0x3b0 [ 569.979135][T22478] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.979160][T22478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.979178][T22478] ? clear_bhb_loop+0x60/0xb0 [ 569.979200][T22478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.979217][T22478] RIP: 0033:0x7f722918e929 [ 569.979233][T22478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.979248][T22478] RSP: 002b:00007f722a080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.979267][T22478] RAX: ffffffffffffffda RBX: 00007f72293b5fa0 RCX: 00007f722918e929 [ 569.979280][T22478] RDX: 0000000000000040 RSI: 00002000005f5000 RDI: 0000000000000003 [ 569.979298][T22478] RBP: 00007f722a080090 R08: 0000000000000000 R09: 0000000000000000 [ 569.979310][T22478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.979320][T22478] R13: 0000000000000000 R14: 00007f72293b5fa0 R15: 00007ffd3143bf78 [ 569.979349][T22478] [ 570.428113][T22481] : entered promiscuous mode [ 570.483355][ T5158] Bluetooth: hci0: command tx timeout [ 570.508071][T22404] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.516090][T22404] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.523729][T22404] bridge_slave_0: entered allmulticast mode [ 570.532014][T22404] bridge_slave_0: entered promiscuous mode [ 570.540666][T22404] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.547860][T22404] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.557873][T22404] bridge_slave_1: entered allmulticast mode [ 570.566371][T22404] bridge_slave_1: entered promiscuous mode [ 570.568580][T22488] netlink: 'syz.6.6030': attribute type 10 has an invalid length. [ 570.639818][T22488] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6030'. [ 570.754442][T22488] bridge0: port 2(dummy0) entered blocking state [ 570.782331][T22488] bridge0: port 2(dummy0) entered disabled state [ 570.815378][T22488] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 570.871092][T22404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.924294][T22404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.037367][ T36] hsr_slave_0: left promiscuous mode [ 571.066363][ T36] hsr_slave_1: left promiscuous mode [ 571.188574][T22493] FAULT_INJECTION: forcing a failure. [ 571.188574][T22493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.244443][T22493] CPU: 0 UID: 0 PID: 22493 Comm: syz.7.6032 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 571.244473][T22493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.244484][T22493] Call Trace: [ 571.244492][T22493] [ 571.244502][T22493] dump_stack_lvl+0x189/0x250 [ 571.244532][T22493] ? __pfx____ratelimit+0x10/0x10 [ 571.244557][T22493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.244582][T22493] ? __pfx__printk+0x10/0x10 [ 571.244616][T22493] should_fail_ex+0x414/0x560 [ 571.244643][T22493] _copy_to_user+0x31/0xb0 [ 571.244665][T22493] simple_read_from_buffer+0xe1/0x170 [ 571.244691][T22493] proc_fail_nth_read+0x1df/0x250 [ 571.244716][T22493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.244739][T22493] ? rw_verify_area+0x258/0x650 [ 571.244762][T22493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.244785][T22493] vfs_read+0x200/0x980 [ 571.244815][T22493] ? __pfx___mutex_lock+0x10/0x10 [ 571.244835][T22493] ? __pfx_vfs_read+0x10/0x10 [ 571.244861][T22493] ? __fget_files+0x2a/0x420 [ 571.244885][T22493] ? __fget_files+0x3a0/0x420 [ 571.244903][T22493] ? __fget_files+0x2a/0x420 [ 571.244940][T22493] ksys_read+0x145/0x250 [ 571.244969][T22493] ? __pfx_ksys_read+0x10/0x10 [ 571.244999][T22493] ? do_syscall_64+0xbe/0x3b0 [ 571.245019][T22493] do_syscall_64+0xfa/0x3b0 [ 571.245035][T22493] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.245060][T22493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.245078][T22493] ? clear_bhb_loop+0x60/0xb0 [ 571.245100][T22493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.245117][T22493] RIP: 0033:0x7fb29938d33c [ 571.245135][T22493] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 571.245150][T22493] RSP: 002b:00007fb29a2b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 571.245169][T22493] RAX: ffffffffffffffda RBX: 00007fb2995b5fa0 RCX: 00007fb29938d33c [ 571.245182][T22493] RDX: 000000000000000f RSI: 00007fb29a2b00a0 RDI: 0000000000000005 [ 571.245194][T22493] RBP: 00007fb29a2b0090 R08: 0000000000000000 R09: 0000000000000000 [ 571.245205][T22493] R10: 0000000000002101 R11: 0000000000000246 R12: 0000000000000001 [ 571.245217][T22493] R13: 0000000000000000 R14: 00007fb2995b5fa0 R15: 00007fffc2796908 [ 571.245247][T22493] [ 571.821049][T22513] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6041'. [ 571.830320][T22513] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6041'. [ 572.560532][ T5158] Bluetooth: hci0: command tx timeout [ 573.231060][T22404] team0: Port device team_slave_0 added [ 573.336257][T22404] team0: Port device team_slave_1 added [ 573.594276][T22534] FAULT_INJECTION: forcing a failure. [ 573.594276][T22534] name failslab, interval 1, probability 0, space 0, times 0 [ 573.620129][T22534] CPU: 1 UID: 0 PID: 22534 Comm: syz.3.6048 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 573.620156][T22534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.620167][T22534] Call Trace: [ 573.620175][T22534] [ 573.620184][T22534] dump_stack_lvl+0x189/0x250 [ 573.620215][T22534] ? __pfx____ratelimit+0x10/0x10 [ 573.620241][T22534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.620267][T22534] ? __pfx__printk+0x10/0x10 [ 573.620292][T22534] ? __pfx___might_resched+0x10/0x10 [ 573.620315][T22534] ? fs_reclaim_acquire+0x7d/0x100 [ 573.620339][T22534] should_fail_ex+0x414/0x560 [ 573.620366][T22534] should_failslab+0xa8/0x100 [ 573.620385][T22534] __kmalloc_cache_noprof+0x70/0x3d0 [ 573.620407][T22534] ? garp_init_applicant+0x191/0x450 [ 573.620429][T22534] garp_init_applicant+0x191/0x450 [ 573.620450][T22534] register_vlan_dev+0x225/0x800 [ 573.620480][T22534] vlan_newlink+0x4b2/0x610 [ 573.620506][T22534] ? __pfx_vlan_newlink+0x10/0x10 [ 573.620533][T22534] rtnl_newlink_create+0x310/0xb00 [ 573.620561][T22534] ? __mutex_lock+0x51b/0xe80 [ 573.620584][T22534] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 573.620605][T22534] ? rtnl_newlink+0x8db/0x1c70 [ 573.620626][T22534] ? __pfx___mutex_lock+0x10/0x10 [ 573.620659][T22534] ? ns_capable+0x8a/0xf0 [ 573.620687][T22534] rtnl_newlink+0x16d6/0x1c70 [ 573.620708][T22534] ? netlink_sendmsg+0x805/0xb30 [ 573.620741][T22534] ? __pfx_rtnl_newlink+0x10/0x10 [ 573.620783][T22534] ? kasan_quarantine_put+0xdd/0x220 [ 573.620807][T22534] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.620839][T22534] ? nlmon_xmit+0xb0/0x100 [ 573.620853][T22534] ? kmem_cache_free+0x18f/0x400 [ 573.620879][T22534] ? __local_bh_enable_ip+0x12d/0x1c0 [ 573.620903][T22534] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.620927][T22534] ? __local_bh_enable_ip+0x12d/0x1c0 [ 573.620950][T22534] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 573.620977][T22534] ? __dev_queue_xmit+0x27e/0x3a70 [ 573.621016][T22534] ? __lock_acquire+0xab9/0xd20 [ 573.621064][T22534] ? __pfx_rtnl_newlink+0x10/0x10 [ 573.621083][T22534] rtnetlink_rcv_msg+0x7cf/0xb70 [ 573.621105][T22534] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 573.621123][T22534] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.621139][T22534] ? ref_tracker_free+0x63a/0x7d0 [ 573.621158][T22534] ? __copy_skb_header+0xa7/0x550 [ 573.621183][T22534] ? __pfx_ref_tracker_free+0x10/0x10 [ 573.621203][T22534] ? __skb_clone+0x63/0x7a0 [ 573.621231][T22534] netlink_rcv_skb+0x205/0x470 [ 573.621252][T22534] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.621290][T22534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.621322][T22534] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.621342][T22534] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.621368][T22534] netlink_unicast+0x758/0x8d0 [ 573.621398][T22534] netlink_sendmsg+0x805/0xb30 [ 573.621428][T22534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.621453][T22534] ? aa_sock_msg_perm+0x94/0x160 [ 573.621477][T22534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.621499][T22534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.621520][T22534] __sock_sendmsg+0x219/0x270 [ 573.621541][T22534] ____sys_sendmsg+0x505/0x830 [ 573.621570][T22534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.621601][T22534] ? import_iovec+0x74/0xa0 [ 573.621623][T22534] ___sys_sendmsg+0x21f/0x2a0 [ 573.621658][T22534] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.621711][T22534] ? __fget_files+0x2a/0x420 [ 573.621728][T22534] ? __fget_files+0x3a0/0x420 [ 573.621754][T22534] __x64_sys_sendmsg+0x19b/0x260 [ 573.621778][T22534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 573.621812][T22534] ? __pfx_ksys_write+0x10/0x10 [ 573.621825][T22534] ? rcu_is_watching+0x15/0xb0 [ 573.621854][T22534] ? do_syscall_64+0xbe/0x3b0 [ 573.621876][T22534] do_syscall_64+0xfa/0x3b0 [ 573.621893][T22534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.621909][T22534] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.621927][T22534] ? clear_bhb_loop+0x60/0xb0 [ 573.621946][T22534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.621961][T22534] RIP: 0033:0x7fe01c58e929 [ 573.621975][T22534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.621987][T22534] RSP: 002b:00007fe01d419038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.622004][T22534] RAX: ffffffffffffffda RBX: 00007fe01c7b5fa0 RCX: 00007fe01c58e929 [ 573.622015][T22534] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 573.622025][T22534] RBP: 00007fe01d419090 R08: 0000000000000000 R09: 0000000000000000 [ 573.622034][T22534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 573.622043][T22534] R13: 0000000000000000 R14: 00007fe01c7b5fa0 R15: 00007fff0630b568 [ 573.622067][T22534] [ 574.193733][T22404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.202530][T22404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.304254][T22404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.318168][T22404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.326338][T22404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.355263][T22404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.522183][T22404] hsr_slave_0: entered promiscuous mode [ 574.556838][T22553] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6056'. [ 574.566085][T22404] hsr_slave_1: entered promiscuous mode [ 574.566793][T22404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.581672][T22404] Cannot create hsr debugfs directory [ 574.608898][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6056'. [ 574.623358][T22553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6056'. [ 574.641091][ T5158] Bluetooth: hci0: command tx timeout [ 574.724790][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6056'. [ 574.799346][T22559] netlink: 'syz.7.6059': attribute type 10 has an invalid length. [ 574.899408][T22549] ipvlan2: entered promiscuous mode [ 574.902174][T22563] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6061'. [ 575.049154][ T36] IPVS: stop unused estimator thread 0... [ 576.017003][T22604] netlink: 'syz.6.6082': attribute type 4 has an invalid length. [ 576.048837][T22604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6082'. [ 576.063949][T22603] tun0: tun_chr_ioctl cmd 2147767520 [ 576.284906][T22404] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 576.315809][T22404] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 576.375846][T22404] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 576.410291][ T55] block nbd1: Possible stuck request ffff888025597000: control (read@0,1024B). Runtime 390 seconds [ 576.421105][ T55] block nbd1: Possible stuck request ffff8880255971c0: control (read@1024,1024B). Runtime 390 seconds [ 576.424811][T22404] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 576.438835][ T55] block nbd1: Possible stuck request ffff888025597380: control (read@2048,1024B). Runtime 390 seconds [ 576.450587][ T55] block nbd1: Possible stuck request ffff888025597540: control (read@3072,1024B). Runtime 390 seconds [ 576.571498][T22622] bridge_slave_0: left allmulticast mode [ 576.583821][T22622] bridge_slave_0: left promiscuous mode [ 576.589773][T22622] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.648482][T22622] bridge_slave_1: left allmulticast mode [ 576.662290][T22622] bridge_slave_1: left promiscuous mode [ 576.668451][T22622] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.703011][T22622] : (slave bond_slave_0): Releasing backup interface [ 576.714145][T22622] : (slave bond_slave_1): Releasing backup interface [ 576.735712][T22622] team0: Port device team_slave_0 removed [ 576.749466][T22622] team0: Port device team_slave_1 removed [ 576.755934][T22622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.764698][T22622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.775123][T22622] team0: Port device geneve0 removed [ 576.782614][T22622] : (slave netdevsim0): Releasing backup interface [ 576.799321][T22622] : (slave bond1): Releasing backup interface [ 576.812773][T22622] bond0: (slave veth3): Releasing backup interface [ 576.834564][T22625] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 577.039110][T22640] ip6gretap0: entered promiscuous mode [ 577.068252][T22640] macsec1: entered promiscuous mode [ 577.087957][T22640] ip6gretap0: left promiscuous mode [ 577.222340][T22650] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6097'. [ 577.247481][T22404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.437124][T22404] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.479332][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.486598][ T6998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.537020][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.544367][ T7002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.833842][T22673] netlink: 'syz.3.6108': attribute type 11 has an invalid length. [ 577.862363][T22673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6108'. [ 578.070756][T22682] tun0: tun_chr_ioctl cmd 2147767520 [ 578.150588][T22685] sctp: [Deprecated]: syz.7.6113 (pid 22685) Use of int in maxseg socket option. [ 578.150588][T22685] Use struct sctp_assoc_value instead [ 578.272666][T22404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.305208][T22691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6115'. [ 578.314411][T22691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6115'. [ 578.371256][T22691] ip6gretap0: entered promiscuous mode [ 578.402183][T22691] syz_tun: entered promiscuous mode [ 578.410896][T22691] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 578.420121][T22691] Cannot create hsr debugfs directory [ 578.533718][T22699] syz_tun: left allmulticast mode [ 578.547386][T22699] syz_tun: left promiscuous mode [ 578.558656][T22699] bridge0: port 1(syz_tun) entered disabled state [ 578.656726][T22706] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6121'. [ 578.767854][T22706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.851215][T22708] bond2: (slave veth5): Enslaving as an active interface with an up link [ 578.938673][T22718] batadv0: entered promiscuous mode [ 578.946735][T22718] macsec1: entered promiscuous mode [ 578.965595][T22718] batadv0: left promiscuous mode [ 579.102739][T22724] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 579.326996][T22404] veth0_vlan: entered promiscuous mode [ 579.535994][T22404] veth1_vlan: entered promiscuous mode [ 579.739086][T22404] veth0_macvtap: entered promiscuous mode [ 579.824540][T22404] veth1_macvtap: entered promiscuous mode [ 579.873887][T22404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.957247][T22404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.030969][ T3026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.062562][T22759] FAULT_INJECTION: forcing a failure. [ 580.062562][T22759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.082775][ T3026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.126110][ T3026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.135084][T22759] CPU: 1 UID: 0 PID: 22759 Comm: syz.7.6137 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 580.135112][T22759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.135123][T22759] Call Trace: [ 580.135132][T22759] [ 580.135142][T22759] dump_stack_lvl+0x189/0x250 [ 580.135173][T22759] ? __pfx____ratelimit+0x10/0x10 [ 580.135200][T22759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.135225][T22759] ? __pfx__printk+0x10/0x10 [ 580.135258][T22759] should_fail_ex+0x414/0x560 [ 580.135286][T22759] _copy_to_user+0x31/0xb0 [ 580.135307][T22759] simple_read_from_buffer+0xe1/0x170 [ 580.135333][T22759] proc_fail_nth_read+0x1df/0x250 [ 580.135357][T22759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.135382][T22759] ? rw_verify_area+0x258/0x650 [ 580.135407][T22759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.135430][T22759] vfs_read+0x200/0x980 [ 580.135461][T22759] ? __pfx___mutex_lock+0x10/0x10 [ 580.135480][T22759] ? __pfx_vfs_read+0x10/0x10 [ 580.135507][T22759] ? __fget_files+0x2a/0x420 [ 580.135531][T22759] ? __fget_files+0x3a0/0x420 [ 580.135550][T22759] ? __fget_files+0x2a/0x420 [ 580.135578][T22759] ksys_read+0x145/0x250 [ 580.135606][T22759] ? __pfx_ksys_read+0x10/0x10 [ 580.135628][T22759] ? rcu_is_watching+0x15/0xb0 [ 580.135660][T22759] ? do_syscall_64+0xbe/0x3b0 [ 580.135683][T22759] do_syscall_64+0xfa/0x3b0 [ 580.135699][T22759] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.135724][T22759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.135743][T22759] ? clear_bhb_loop+0x60/0xb0 [ 580.135765][T22759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.135783][T22759] RIP: 0033:0x7fb29938d33c [ 580.135800][T22759] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 580.135816][T22759] RSP: 002b:00007fb29a26e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 580.135836][T22759] RAX: ffffffffffffffda RBX: 00007fb2995b6160 RCX: 00007fb29938d33c [ 580.135857][T22759] RDX: 000000000000000f RSI: 00007fb29a26e0a0 RDI: 0000000000000004 [ 580.135869][T22759] RBP: 00007fb29a26e090 R08: 0000000000000000 R09: 0000000000000000 [ 580.135880][T22759] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 580.135892][T22759] R13: 0000000000000000 R14: 00007fb2995b6160 R15: 00007fffc2796908 [ 580.135922][T22759] [ 580.410150][ T3026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.527360][T22761] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 580.535540][ T9246] IPVS: starting estimator thread 0... [ 580.650477][T22766] IPVS: using max 33 ests per chain, 79200 per kthread [ 580.753461][ T6997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.771717][ T6997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.877774][T22781] netlink: 'syz.3.6147': attribute type 1 has an invalid length. [ 580.905613][ T7002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.916919][ T7002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.920247][T22781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6147'. [ 581.224405][T22790] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5996'. [ 581.260387][T22797] netlink: 248 bytes leftover after parsing attributes in process `syz.6.6151'. [ 581.972859][T22818] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6161'. [ 581.982354][T22822] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 582.225995][T22832] FAULT_INJECTION: forcing a failure. [ 582.225995][T22832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.239297][T22832] CPU: 1 UID: 0 PID: 22832 Comm: syz.0.6162 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 582.239324][T22832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 582.239336][T22832] Call Trace: [ 582.239344][T22832] [ 582.239353][T22832] dump_stack_lvl+0x189/0x250 [ 582.239384][T22832] ? __pfx____ratelimit+0x10/0x10 [ 582.239421][T22832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.239447][T22832] ? __pfx__printk+0x10/0x10 [ 582.239467][T22832] ? __might_fault+0xb0/0x130 [ 582.239496][T22832] should_fail_ex+0x414/0x560 [ 582.239525][T22832] _copy_from_user+0x2d/0xb0 [ 582.239554][T22832] ___sys_sendmsg+0x158/0x2a0 [ 582.239581][T22832] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.239643][T22832] ? __fget_files+0x2a/0x420 [ 582.239662][T22832] ? __fget_files+0x3a0/0x420 [ 582.239692][T22832] __x64_sys_sendmsg+0x19b/0x260 [ 582.239719][T22832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.239752][T22832] ? __pfx_ksys_write+0x10/0x10 [ 582.239768][T22832] ? rcu_is_watching+0x15/0xb0 [ 582.239798][T22832] ? do_syscall_64+0xbe/0x3b0 [ 582.239819][T22832] do_syscall_64+0xfa/0x3b0 [ 582.239836][T22832] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.239864][T22832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.239881][T22832] ? clear_bhb_loop+0x60/0xb0 [ 582.239901][T22832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.239918][T22832] RIP: 0033:0x7ff379f8e929 [ 582.239934][T22832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.239948][T22832] RSP: 002b:00007ff37aede038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.239966][T22832] RAX: ffffffffffffffda RBX: 00007ff37a1b5fa0 RCX: 00007ff379f8e929 [ 582.239979][T22832] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 582.239990][T22832] RBP: 00007ff37aede090 R08: 0000000000000000 R09: 0000000000000000 [ 582.240001][T22832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.240010][T22832] R13: 0000000000000000 R14: 00007ff37a1b5fa0 R15: 00007ffd1395d4f8 [ 582.240037][T22832] [ 582.459707][T22830] netlink: 830 bytes leftover after parsing attributes in process `syz.7.6163'. [ 582.478142][T22840] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6166'. [ 583.110361][T22878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6179'. [ 583.136186][ T6930] IPVS: starting estimator thread 0... [ 583.194427][T22877] netlink: 830 bytes leftover after parsing attributes in process `syz.6.6178'. [ 583.240038][T22880] IPVS: using max 28 ests per chain, 67200 per kthread [ 583.457067][T22891] syzkaller0: entered promiscuous mode [ 583.473630][T22891] syzkaller0: entered allmulticast mode [ 583.736941][T22900] ip6gretap0: entered promiscuous mode [ 583.770196][T22900] macsec1: entered promiscuous mode [ 583.827197][T22900] ip6gretap0: left promiscuous mode [ 583.842183][T22909] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6189'. [ 583.928763][T22909] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 584.525934][T22929] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6196'. [ 584.532329][T22933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6198'. [ 584.813455][T22944] netlink: 'syz.6.6202': attribute type 32 has an invalid length. [ 584.965894][T22950] netlink: 'syz.6.6204': attribute type 10 has an invalid length. [ 585.344435][T22956] bond2: (slave veth5): Releasing backup interface [ 585.682553][T22979] netlink: 'syz.0.6217': attribute type 4 has an invalid length. [ 585.843023][T22990] netlink: 'syz.4.6220': attribute type 15 has an invalid length. [ 585.901913][T22990] netlink: 'syz.4.6220': attribute type 4 has an invalid length. [ 586.027004][T22988] vlan2: entered promiscuous mode [ 586.038462][T22988] team0: entered promiscuous mode [ 586.047933][T23001] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6224'. [ 586.100220][T22999] batadv0: entered promiscuous mode [ 586.141298][T22999] macsec1: entered promiscuous mode [ 586.163661][T22999] batadv0: left promiscuous mode [ 586.355053][T23010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6227'. [ 586.454832][T23013] : entered promiscuous mode [ 586.700477][T23027] netlink: 'syz.0.6235': attribute type 9 has an invalid length. [ 586.737194][T23027] netlink: 'syz.0.6235': attribute type 6 has an invalid length. [ 586.753483][T23031] netlink: 'syz.3.6237': attribute type 1 has an invalid length. [ 587.185542][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6243'. [ 587.424428][T23062] batadv0: entered promiscuous mode [ 587.442168][T23062] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 587.475503][T23062] batadv0: left promiscuous mode [ 587.585567][T23071] geneve2: entered promiscuous mode [ 587.904774][T23087] FAULT_INJECTION: forcing a failure. [ 587.904774][T23087] name failslab, interval 1, probability 0, space 0, times 0 [ 587.922577][T23086] syz_tun: entered allmulticast mode [ 587.926714][T23087] CPU: 0 UID: 0 PID: 23087 Comm: syz.6.6256 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 587.926743][T23087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.926754][T23087] Call Trace: [ 587.926763][T23087] [ 587.926771][T23087] dump_stack_lvl+0x189/0x250 [ 587.926802][T23087] ? __pfx____ratelimit+0x10/0x10 [ 587.926830][T23087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.926854][T23087] ? __pfx__printk+0x10/0x10 [ 587.926877][T23087] ? __pfx___might_resched+0x10/0x10 [ 587.926907][T23087] should_fail_ex+0x414/0x560 [ 587.926933][T23087] should_failslab+0xa8/0x100 [ 587.926955][T23087] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 587.926973][T23087] ? __alloc_skb+0x112/0x2d0 [ 587.926999][T23087] __alloc_skb+0x112/0x2d0 [ 587.927024][T23087] netlink_sendmsg+0x5c6/0xb30 [ 587.927053][T23087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.927077][T23087] ? aa_sock_msg_perm+0x94/0x160 [ 587.927101][T23087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 587.927123][T23087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.927144][T23087] __sock_sendmsg+0x219/0x270 [ 587.927174][T23087] ____sys_sendmsg+0x505/0x830 [ 587.927203][T23087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 587.927235][T23087] ? import_iovec+0x74/0xa0 [ 587.927256][T23087] ___sys_sendmsg+0x21f/0x2a0 [ 587.927282][T23087] ? __pfx____sys_sendmsg+0x10/0x10 [ 587.927339][T23087] ? __fget_files+0x2a/0x420 [ 587.927356][T23087] ? __fget_files+0x3a0/0x420 [ 587.927385][T23087] __x64_sys_sendmsg+0x19b/0x260 [ 587.927412][T23087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 587.927444][T23087] ? __pfx_ksys_write+0x10/0x10 [ 587.927466][T23087] ? do_syscall_64+0xbe/0x3b0 [ 587.927487][T23087] do_syscall_64+0xfa/0x3b0 [ 587.927503][T23087] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.927527][T23087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.927545][T23087] ? clear_bhb_loop+0x60/0xb0 [ 587.927565][T23087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.927583][T23087] RIP: 0033:0x7f722918e929 [ 587.927600][T23087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.927615][T23087] RSP: 002b:00007f722a05f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.927634][T23087] RAX: ffffffffffffffda RBX: 00007f72293b6080 RCX: 00007f722918e929 [ 587.927648][T23087] RDX: 000000000000c010 RSI: 00002000000002c0 RDI: 0000000000000011 [ 587.927660][T23087] RBP: 00007f722a05f090 R08: 0000000000000000 R09: 0000000000000000 [ 587.927671][T23087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.927681][T23087] R13: 0000000000000000 R14: 00007f72293b6080 R15: 00007ffd3143bf78 [ 587.927708][T23087] [ 588.216008][T23085] syz_tun: left allmulticast mode [ 588.227770][T23092] __nla_validate_parse: 2 callbacks suppressed [ 588.227791][T23092] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6259'. [ 588.548873][T23108] FAULT_INJECTION: forcing a failure. [ 588.548873][T23108] name failslab, interval 1, probability 0, space 0, times 0 [ 588.576652][T23108] CPU: 1 UID: 0 PID: 23108 Comm: syz.0.6267 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 588.576680][T23108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 588.576691][T23108] Call Trace: [ 588.576698][T23108] [ 588.576708][T23108] dump_stack_lvl+0x189/0x250 [ 588.576739][T23108] ? __pfx____ratelimit+0x10/0x10 [ 588.576765][T23108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.576791][T23108] ? __pfx__printk+0x10/0x10 [ 588.576817][T23108] ? __pfx___might_resched+0x10/0x10 [ 588.576839][T23108] ? fs_reclaim_acquire+0x7d/0x100 [ 588.576865][T23108] should_fail_ex+0x414/0x560 [ 588.576893][T23108] should_failslab+0xa8/0x100 [ 588.576915][T23108] __kmalloc_cache_noprof+0x70/0x3d0 [ 588.576933][T23108] ? mrp_init_applicant+0x13a/0x4f0 [ 588.576957][T23108] mrp_init_applicant+0x13a/0x4f0 [ 588.576979][T23108] register_vlan_dev+0x240/0x800 [ 588.577011][T23108] vlan_newlink+0x4b2/0x610 [ 588.577037][T23108] ? __pfx_vlan_newlink+0x10/0x10 [ 588.577064][T23108] rtnl_newlink_create+0x310/0xb00 [ 588.577102][T23108] ? __pfx_aa_get_newest_label+0x10/0x10 [ 588.577129][T23108] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 588.577150][T23108] ? rtnl_newlink+0x8db/0x1c70 [ 588.577173][T23108] ? __pfx___mutex_lock+0x10/0x10 [ 588.577202][T23108] ? ns_capable+0x8a/0xf0 [ 588.577230][T23108] rtnl_newlink+0x16d6/0x1c70 [ 588.577253][T23108] ? netlink_sendmsg+0x805/0xb30 [ 588.577286][T23108] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.577330][T23108] ? kasan_quarantine_put+0xdd/0x220 [ 588.577354][T23108] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.577386][T23108] ? nlmon_xmit+0xb0/0x100 [ 588.577401][T23108] ? kmem_cache_free+0x18f/0x400 [ 588.577426][T23108] ? __local_bh_enable_ip+0x12d/0x1c0 [ 588.577451][T23108] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.577477][T23108] ? __local_bh_enable_ip+0x12d/0x1c0 [ 588.577501][T23108] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 588.577529][T23108] ? __dev_queue_xmit+0x27e/0x3a70 [ 588.577567][T23108] ? __lock_acquire+0xab9/0xd20 [ 588.577617][T23108] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.577636][T23108] rtnetlink_rcv_msg+0x7cf/0xb70 [ 588.577663][T23108] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 588.577701][T23108] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.577719][T23108] ? ref_tracker_free+0x63a/0x7d0 [ 588.577741][T23108] ? __copy_skb_header+0xa7/0x550 [ 588.577764][T23108] ? __pfx_ref_tracker_free+0x10/0x10 [ 588.577785][T23108] ? __skb_clone+0x63/0x7a0 [ 588.577813][T23108] netlink_rcv_skb+0x205/0x470 [ 588.577834][T23108] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.577852][T23108] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.577883][T23108] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.577904][T23108] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.577929][T23108] netlink_unicast+0x758/0x8d0 [ 588.577957][T23108] netlink_sendmsg+0x805/0xb30 [ 588.577983][T23108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.578003][T23108] ? aa_sock_msg_perm+0x94/0x160 [ 588.578024][T23108] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 588.578042][T23108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.578061][T23108] __sock_sendmsg+0x219/0x270 [ 588.578090][T23108] ____sys_sendmsg+0x505/0x830 [ 588.578118][T23108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.578148][T23108] ? import_iovec+0x74/0xa0 [ 588.578169][T23108] ___sys_sendmsg+0x21f/0x2a0 [ 588.578194][T23108] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.578246][T23108] ? __fget_files+0x2a/0x420 [ 588.578264][T23108] ? __fget_files+0x3a0/0x420 [ 588.578289][T23108] __x64_sys_sendmsg+0x19b/0x260 [ 588.578315][T23108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.578346][T23108] ? __pfx_ksys_write+0x10/0x10 [ 588.578360][T23108] ? rcu_is_watching+0x15/0xb0 [ 588.578390][T23108] ? do_syscall_64+0xbe/0x3b0 [ 588.578410][T23108] do_syscall_64+0xfa/0x3b0 [ 588.578427][T23108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.578442][T23108] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.578459][T23108] ? clear_bhb_loop+0x60/0xb0 [ 588.578478][T23108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.578494][T23108] RIP: 0033:0x7ff379f8e929 [ 588.578512][T23108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.578527][T23108] RSP: 002b:00007ff37aede038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.578546][T23108] RAX: ffffffffffffffda RBX: 00007ff37a1b5fa0 RCX: 00007ff379f8e929 [ 588.578560][T23108] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 588.578572][T23108] RBP: 00007ff37aede090 R08: 0000000000000000 R09: 0000000000000000 [ 588.578583][T23108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.578594][T23108] R13: 0000000000000000 R14: 00007ff37a1b5fa0 R15: 00007ffd1395d4f8 [ 588.578624][T23108] [ 589.498161][T23114] netlink: 'syz.4.6272': attribute type 10 has an invalid length. [ 589.540490][T23116] x_tables: ip_tables: connmark.1 match: invalid size 16 (kernel) != (user) 56 [ 589.851663][T23137] FAULT_INJECTION: forcing a failure. [ 589.851663][T23137] name failslab, interval 1, probability 0, space 0, times 0 [ 589.920393][T23137] CPU: 1 UID: 0 PID: 23137 Comm: syz.0.6280 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 589.920420][T23137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 589.920432][T23137] Call Trace: [ 589.920439][T23137] [ 589.920448][T23137] dump_stack_lvl+0x189/0x250 [ 589.920478][T23137] ? __pfx____ratelimit+0x10/0x10 [ 589.920503][T23137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.920527][T23137] ? __pfx__printk+0x10/0x10 [ 589.920547][T23137] ? __pfx___might_resched+0x10/0x10 [ 589.920569][T23137] ? fs_reclaim_acquire+0x7d/0x100 [ 589.920604][T23137] should_fail_ex+0x414/0x560 [ 589.920632][T23137] should_failslab+0xa8/0x100 [ 589.920653][T23137] __kmalloc_noprof+0xcb/0x4f0 [ 589.920670][T23137] ? tomoyo_encode+0x28b/0x550 [ 589.920697][T23137] tomoyo_encode+0x28b/0x550 [ 589.920727][T23137] tomoyo_realpath_from_path+0x58d/0x5d0 [ 589.920753][T23137] ? tomoyo_domain+0xd9/0x130 [ 589.920782][T23137] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 589.920801][T23137] tomoyo_path_number_perm+0x1e8/0x5a0 [ 589.920825][T23137] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 589.920862][T23137] ? __lock_acquire+0xab9/0xd20 [ 589.920907][T23137] ? __fget_files+0x2a/0x420 [ 589.920929][T23137] ? __fget_files+0x2a/0x420 [ 589.920945][T23137] ? __fget_files+0x3a0/0x420 [ 589.920962][T23137] ? __fget_files+0x2a/0x420 [ 589.920984][T23137] security_file_ioctl+0xcb/0x2d0 [ 589.921007][T23137] __se_sys_ioctl+0x47/0x170 [ 589.921034][T23137] do_syscall_64+0xfa/0x3b0 [ 589.921050][T23137] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.921073][T23137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.921090][T23137] ? clear_bhb_loop+0x60/0xb0 [ 589.921124][T23137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.921141][T23137] RIP: 0033:0x7ff379f8e929 [ 589.921157][T23137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.921172][T23137] RSP: 002b:00007ff37aede038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.921192][T23137] RAX: ffffffffffffffda RBX: 00007ff37a1b5fa0 RCX: 00007ff379f8e929 [ 589.921204][T23137] RDX: 0000200000000200 RSI: 00000000800448d2 RDI: 0000000000000007 [ 589.921216][T23137] RBP: 00007ff37aede090 R08: 0000000000000000 R09: 0000000000000000 [ 589.921227][T23137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.921237][T23137] R13: 0000000000000000 R14: 00007ff37a1b5fa0 R15: 00007ffd1395d4f8 [ 589.921265][T23137] [ 589.921286][T23137] ERROR: Out of memory at tomoyo_realpath_from_path. [ 590.247573][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 590.291947][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 590.299042][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 590.502103][T23166] FAULT_INJECTION: forcing a failure. [ 590.502103][T23166] name failslab, interval 1, probability 0, space 0, times 0 [ 590.603047][T23169] netlink: 'syz.6.6287': attribute type 10 has an invalid length. [ 590.611658][T23169] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6287'. [ 590.620699][T23166] CPU: 1 UID: 0 PID: 23166 Comm: syz.0.6286 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 590.620726][T23166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 590.620737][T23166] Call Trace: [ 590.620745][T23166] [ 590.620753][T23166] dump_stack_lvl+0x189/0x250 [ 590.620782][T23166] ? __pfx____ratelimit+0x10/0x10 [ 590.620808][T23166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.620832][T23166] ? __pfx__printk+0x10/0x10 [ 590.620856][T23166] ? __pfx___might_resched+0x10/0x10 [ 590.620880][T23166] ? fs_reclaim_acquire+0x7d/0x100 [ 590.620905][T23166] should_fail_ex+0x414/0x560 [ 590.620932][T23166] should_failslab+0xa8/0x100 [ 590.620953][T23166] kmem_cache_alloc_noprof+0x73/0x3c0 [ 590.620978][T23166] ? skb_clone+0x212/0x3a0 [ 590.621008][T23166] skb_clone+0x212/0x3a0 [ 590.621034][T23166] pfkey_sendmsg+0x44b/0x1090 [ 590.621063][T23166] ? __lock_acquire+0xab9/0xd20 [ 590.621092][T23166] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 590.621138][T23166] ? aa_sock_msg_perm+0x94/0x160 [ 590.621161][T23166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.621183][T23166] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 590.621203][T23166] __sock_sendmsg+0x219/0x270 [ 590.621225][T23166] ____sys_sendmsg+0x505/0x830 [ 590.621254][T23166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.621287][T23166] ? import_iovec+0x74/0xa0 [ 590.621309][T23166] ___sys_sendmsg+0x21f/0x2a0 [ 590.621335][T23166] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.621395][T23166] ? __fget_files+0x2a/0x420 [ 590.621414][T23166] ? __fget_files+0x3a0/0x420 [ 590.621444][T23166] __x64_sys_sendmsg+0x19b/0x260 [ 590.621470][T23166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.621504][T23166] ? __pfx_ksys_write+0x10/0x10 [ 590.621519][T23166] ? rcu_is_watching+0x15/0xb0 [ 590.621549][T23166] ? do_syscall_64+0xbe/0x3b0 [ 590.621571][T23166] do_syscall_64+0xfa/0x3b0 [ 590.621585][T23166] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.621617][T23166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.621636][T23166] ? clear_bhb_loop+0x60/0xb0 [ 590.621656][T23166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.621672][T23166] RIP: 0033:0x7ff379f8e929 [ 590.621689][T23166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.621708][T23166] RSP: 002b:00007ff37aede038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.621728][T23166] RAX: ffffffffffffffda RBX: 00007ff37a1b5fa0 RCX: 00007ff379f8e929 [ 590.621742][T23166] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 590.621754][T23166] RBP: 00007ff37aede090 R08: 0000000000000000 R09: 0000000000000000 [ 590.621765][T23166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.621776][T23166] R13: 0000000000000000 R14: 00007ff37a1b5fa0 R15: 00007ffd1395d4f8 [ 590.621801][T23166] [ 590.829933][T23171] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 590.940170][T23169] bridge0: port 1(dummy0) entered blocking state [ 590.967551][T23169] bridge0: port 1(dummy0) entered disabled state [ 590.978962][T23151] infiniband syz2: set active [ 590.985192][T23151] infiniband syz2: added vxcan1 [ 591.028340][T23169] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 591.069417][T23176] netlink: 270 bytes leftover after parsing attributes in process `syz.7.6289'. [ 591.111976][T23176] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6289'. [ 591.163136][T23151] RDS/IB: syz2: added [ 591.168139][T23151] smc: adding ib device syz2 with port count 1 [ 591.178875][T23151] smc: ib device syz2 port 1 has pnetid [ 591.181470][T23177] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6289'. [ 591.219494][T23177] netlink: 308 bytes leftover after parsing attributes in process `syz.7.6289'. [ 591.258588][T23181] ip6gretap0: entered promiscuous mode [ 591.267362][T23181] macsec1: entered promiscuous mode [ 591.277489][T23181] ip6gretap0: left promiscuous mode [ 591.311280][ T6930] vxcan1 speed is unknown, defaulting to 1000 [ 591.505978][T23186] netlink: 'syz.0.6294': attribute type 32 has an invalid length. [ 591.514301][ T3587] vxcan1 speed is unknown, defaulting to 1000 [ 591.524103][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 591.765816][T23196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6298'. [ 591.782989][T23197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6297'. [ 591.812743][T23197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6297'. [ 592.022764][T23204] FAULT_INJECTION: forcing a failure. [ 592.022764][T23204] name failslab, interval 1, probability 0, space 0, times 0 [ 592.052332][T23204] CPU: 1 UID: 0 PID: 23204 Comm: syz.7.6302 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 592.052360][T23204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 592.052371][T23204] Call Trace: [ 592.052389][T23204] [ 592.052401][T23204] dump_stack_lvl+0x189/0x250 [ 592.052431][T23204] ? __pfx____ratelimit+0x10/0x10 [ 592.052456][T23204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.052481][T23204] ? __pfx__printk+0x10/0x10 [ 592.052504][T23204] ? __pfx___might_resched+0x10/0x10 [ 592.052528][T23204] ? fs_reclaim_acquire+0x7d/0x100 [ 592.052553][T23204] should_fail_ex+0x414/0x560 [ 592.052578][T23204] should_failslab+0xa8/0x100 [ 592.052599][T23204] __kmalloc_cache_noprof+0x70/0x3d0 [ 592.052617][T23204] ? rtnl_newlink+0xed/0x1c70 [ 592.052634][T23204] ? __lock_acquire+0xab9/0xd20 [ 592.052661][T23204] rtnl_newlink+0xed/0x1c70 [ 592.052692][T23204] ? __pfx_rtnl_newlink+0x10/0x10 [ 592.052711][T23204] ? is_bpf_text_address+0x26/0x2b0 [ 592.052744][T23204] ? __lock_acquire+0xab9/0xd20 [ 592.052778][T23204] ? __lock_acquire+0xab9/0xd20 [ 592.052820][T23204] ? is_bpf_text_address+0x26/0x2b0 [ 592.052850][T23204] ? is_bpf_text_address+0x292/0x2b0 [ 592.052873][T23204] ? is_bpf_text_address+0x26/0x2b0 [ 592.052900][T23204] ? kernel_text_address+0xa5/0xe0 [ 592.052935][T23204] ? __lock_acquire+0xab9/0xd20 [ 592.052982][T23204] ? __pfx_rtnl_newlink+0x10/0x10 [ 592.053002][T23204] rtnetlink_rcv_msg+0x7cf/0xb70 [ 592.053025][T23204] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 592.053045][T23204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 592.053082][T23204] netlink_rcv_skb+0x205/0x470 [ 592.053104][T23204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 592.053127][T23204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 592.053161][T23204] ? netlink_deliver_tap+0x2e/0x1b0 [ 592.053181][T23204] ? netlink_deliver_tap+0x2e/0x1b0 [ 592.053213][T23204] netlink_unicast+0x758/0x8d0 [ 592.053243][T23204] netlink_sendmsg+0x805/0xb30 [ 592.053273][T23204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.053301][T23204] ? aa_sock_msg_perm+0x94/0x160 [ 592.053325][T23204] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 592.053347][T23204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.053369][T23204] __sock_sendmsg+0x219/0x270 [ 592.053398][T23204] ____sys_sendmsg+0x505/0x830 [ 592.053426][T23204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.053457][T23204] ? import_iovec+0x74/0xa0 [ 592.053477][T23204] ___sys_sendmsg+0x21f/0x2a0 [ 592.053501][T23204] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.053557][T23204] ? __fget_files+0x2a/0x420 [ 592.053575][T23204] ? __fget_files+0x3a0/0x420 [ 592.053599][T23204] __x64_sys_sendmsg+0x19b/0x260 [ 592.053623][T23204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.053654][T23204] ? __pfx_ksys_write+0x10/0x10 [ 592.053668][T23204] ? rcu_is_watching+0x15/0xb0 [ 592.053699][T23204] ? do_syscall_64+0xbe/0x3b0 [ 592.053720][T23204] do_syscall_64+0xfa/0x3b0 [ 592.053736][T23204] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.053765][T23204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.053782][T23204] ? clear_bhb_loop+0x60/0xb0 [ 592.053802][T23204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.053820][T23204] RIP: 0033:0x7fb29938e929 [ 592.053836][T23204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.053851][T23204] RSP: 002b:00007fb29a2b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.053870][T23204] RAX: ffffffffffffffda RBX: 00007fb2995b5fa0 RCX: 00007fb29938e929 [ 592.053884][T23204] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 592.053896][T23204] RBP: 00007fb29a2b0090 R08: 0000000000000000 R09: 0000000000000000 [ 592.053907][T23204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.053918][T23204] R13: 0000000000000000 R14: 00007fb2995b5fa0 R15: 00007fffc2796908 [ 592.053947][T23204] [ 592.783995][T23230] delete_channel: no stack [ 592.909811][T23231] Bluetooth: MGMT ver 1.23 [ 593.117745][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 593.326516][T23249] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6315'. [ 593.477860][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6316'. [ 593.503367][T23252] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6316'. [ 593.615190][T23230] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 593.755282][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 594.147355][T23277] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6327'. [ 594.292947][T23280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.324980][T23280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.335570][T23280] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 594.357383][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 594.374930][T23281] macsec0: entered promiscuous mode [ 594.389610][T23281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6329'. [ 594.476302][T23281] macsec0 (unregistering): left promiscuous mode [ 594.850836][T23295] netlink: 'syz.0.6335': attribute type 10 has an invalid length. [ 594.881336][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 595.049378][T23302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.091318][T23302] team0: Port device bond0 added [ 595.101425][T23305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6339'. [ 595.409350][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 595.453514][T23311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6342'. [ 595.481639][T23313] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6343'. [ 595.491715][T23311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6342'. [ 595.680402][ T5158] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 595.688745][T23268] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 596.207541][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 596.245615][T23323] tipc: Started in network mode [ 596.275184][T23323] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 596.285117][T23323] tipc: Enabling of bearer rejected, failed to enable media [ 596.391927][T23326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6348'. [ 596.745455][T23331] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 596.857748][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 597.182783][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 597.510104][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 597.880289][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 598.219066][T23151] vxcan1 speed is unknown, defaulting to 1000 [ 598.471832][T23311] vxcan1 speed is unknown, defaulting to 1000 [ 598.793402][T23317] lo speed is unknown, defaulting to 1000 [ 598.799373][T23317] lo speed is unknown, defaulting to 1000 [ 598.970975][T23317] lo speed is unknown, defaulting to 1000 [ 599.092263][T23317] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 599.330359][T23317] lo speed is unknown, defaulting to 1000 [ 599.332283][T23343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6353'. [ 599.459366][T23317] lo speed is unknown, defaulting to 1000 [ 599.485786][T23317] lo speed is unknown, defaulting to 1000 [ 599.502210][T23317] lo speed is unknown, defaulting to 1000 [ 599.532445][T23317] lo speed is unknown, defaulting to 1000 [ 599.554594][T23317] lo speed is unknown, defaulting to 1000 [ 599.572573][T23317] lo speed is unknown, defaulting to 1000 [ 599.610575][T23317] lo speed is unknown, defaulting to 1000 [ 599.633947][T23317] lo speed is unknown, defaulting to 1000 [ 599.678616][T23317] lo speed is unknown, defaulting to 1000 [ 599.683712][T23347] netlink: 'syz.6.6355': attribute type 10 has an invalid length. [ 599.702319][T23317] lo speed is unknown, defaulting to 1000 [ 599.710296][T23347] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6355'. [ 599.731704][T23317] lo speed is unknown, defaulting to 1000 [ 599.740873][T23347] bridge0: port 1(dummy0) entered blocking state [ 599.747378][T23347] bridge0: port 1(dummy0) entered disabled state [ 599.914104][T23347] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 599.981339][T23349] vxcan1 speed is unknown, defaulting to 1000 [ 600.503548][T23349] lo speed is unknown, defaulting to 1000 [ 600.801285][T23372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6365'. [ 600.982404][T23380] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6367'. [ 601.800650][T23406] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6376'. [ 601.816252][T23406] batadv0: entered promiscuous mode [ 601.836963][T23406] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 601.862361][T23406] batadv0: left promiscuous mode [ 602.012308][T23416] x_tables: duplicate underflow at hook 3 [ 602.030416][T23417] netlink: 'syz.4.6384': attribute type 1 has an invalid length. [ 602.031918][T23416] netlink: 'syz.3.6382': attribute type 5 has an invalid length. [ 602.051831][T23417] netlink: 'syz.4.6384': attribute type 1 has an invalid length. [ 602.148489][T23423] netlink: 144 bytes leftover after parsing attributes in process `syz.7.6386'. [ 602.286376][T23431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6389'. [ 602.291836][T23433] FAULT_INJECTION: forcing a failure. [ 602.291836][T23433] name failslab, interval 1, probability 0, space 0, times 0 [ 602.310708][T23433] CPU: 0 UID: 0 PID: 23433 Comm: syz.7.6390 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 602.310735][T23433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 602.310747][T23433] Call Trace: [ 602.310755][T23433] [ 602.310764][T23433] dump_stack_lvl+0x189/0x250 [ 602.310796][T23433] ? __pfx____ratelimit+0x10/0x10 [ 602.310822][T23433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.310847][T23433] ? __pfx__printk+0x10/0x10 [ 602.310873][T23433] ? __pfx___might_resched+0x10/0x10 [ 602.310896][T23433] ? fs_reclaim_acquire+0x7d/0x100 [ 602.310922][T23433] should_fail_ex+0x414/0x560 [ 602.310950][T23433] should_failslab+0xa8/0x100 [ 602.310971][T23433] __kmalloc_cache_noprof+0x70/0x3d0 [ 602.310989][T23433] ? mrp_init_applicant+0x191/0x4f0 [ 602.311013][T23433] mrp_init_applicant+0x191/0x4f0 [ 602.311036][T23433] register_vlan_dev+0x240/0x800 [ 602.311066][T23433] vlan_newlink+0x4b2/0x610 [ 602.311093][T23433] ? __pfx_vlan_newlink+0x10/0x10 [ 602.311119][T23433] rtnl_newlink_create+0x310/0xb00 [ 602.311150][T23433] ? __pfx_aa_get_newest_label+0x10/0x10 [ 602.311175][T23433] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 602.311195][T23433] ? rtnl_newlink+0x8db/0x1c70 [ 602.311228][T23433] ? __pfx___mutex_lock+0x10/0x10 [ 602.311257][T23433] ? ns_capable+0x8a/0xf0 [ 602.311286][T23433] rtnl_newlink+0x16d6/0x1c70 [ 602.311325][T23433] ? __pfx_rtnl_newlink+0x10/0x10 [ 602.311344][T23433] ? is_bpf_text_address+0x26/0x2b0 [ 602.311383][T23433] ? __lock_acquire+0xab9/0xd20 [ 602.311420][T23433] ? __lock_acquire+0xab9/0xd20 [ 602.311466][T23433] ? is_bpf_text_address+0x26/0x2b0 [ 602.311496][T23433] ? is_bpf_text_address+0x292/0x2b0 [ 602.311519][T23433] ? is_bpf_text_address+0x26/0x2b0 [ 602.311547][T23433] ? kernel_text_address+0xa5/0xe0 [ 602.311583][T23433] ? __lock_acquire+0xab9/0xd20 [ 602.311633][T23433] ? __pfx_rtnl_newlink+0x10/0x10 [ 602.311653][T23433] rtnetlink_rcv_msg+0x7cf/0xb70 [ 602.311681][T23433] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 602.311701][T23433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 602.311740][T23433] netlink_rcv_skb+0x205/0x470 [ 602.311762][T23433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 602.311784][T23433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.311820][T23433] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.311840][T23433] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.311867][T23433] netlink_unicast+0x758/0x8d0 [ 602.311899][T23433] netlink_sendmsg+0x805/0xb30 [ 602.311930][T23433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.311955][T23433] ? aa_sock_msg_perm+0x94/0x160 [ 602.311979][T23433] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 602.312001][T23433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.312023][T23433] __sock_sendmsg+0x219/0x270 [ 602.312046][T23433] ____sys_sendmsg+0x505/0x830 [ 602.312077][T23433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.312111][T23433] ? import_iovec+0x74/0xa0 [ 602.312132][T23433] ___sys_sendmsg+0x21f/0x2a0 [ 602.312159][T23433] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.312224][T23433] ? __fget_files+0x2a/0x420 [ 602.312242][T23433] ? __fget_files+0x3a0/0x420 [ 602.312273][T23433] __x64_sys_sendmsg+0x19b/0x260 [ 602.312299][T23433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 602.312334][T23433] ? __pfx_ksys_write+0x10/0x10 [ 602.312348][T23433] ? rcu_is_watching+0x15/0xb0 [ 602.312385][T23433] ? do_syscall_64+0xbe/0x3b0 [ 602.312407][T23433] do_syscall_64+0xfa/0x3b0 [ 602.312423][T23433] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.312448][T23433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.312466][T23433] ? clear_bhb_loop+0x60/0xb0 [ 602.312488][T23433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.312506][T23433] RIP: 0033:0x7fb29938e929 [ 602.312522][T23433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.312555][T23433] RSP: 002b:00007fb29a2b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.312574][T23433] RAX: ffffffffffffffda RBX: 00007fb2995b5fa0 RCX: 00007fb29938e929 [ 602.312588][T23433] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 602.312600][T23433] RBP: 00007fb29a2b0090 R08: 0000000000000000 R09: 0000000000000000 [ 602.312611][T23433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 602.312623][T23433] R13: 0000000000000000 R14: 00007fb2995b5fa0 R15: 00007fffc2796908 [ 602.312654][T23433] [ 602.320627][T23431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6389'. [ 602.335153][T23434] netlink: 'syz.4.6388': attribute type 2 has an invalid length. [ 602.407389][T23431] erspan0: entered promiscuous mode [ 602.789204][T23431] gretap0: entered promiscuous mode [ 602.810851][T23431] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 602.868372][T23431] Cannot create hsr debugfs directory [ 603.059151][T23446] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6395'. [ 603.274912][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6393'. [ 603.720737][T23482] netlink: 'syz.0.6410': attribute type 9 has an invalid length. [ 603.745525][T23482] netlink: 'syz.0.6410': attribute type 6 has an invalid length. [ 603.996660][T23489] FAULT_INJECTION: forcing a failure. [ 603.996660][T23489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.041930][T23489] CPU: 1 UID: 0 PID: 23489 Comm: syz.6.6412 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 604.041959][T23489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 604.041971][T23489] Call Trace: [ 604.041979][T23489] [ 604.041988][T23489] dump_stack_lvl+0x189/0x250 [ 604.042018][T23489] ? __pfx____ratelimit+0x10/0x10 [ 604.042044][T23489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.042069][T23489] ? __pfx__printk+0x10/0x10 [ 604.042100][T23489] should_fail_ex+0x414/0x560 [ 604.042128][T23489] _copy_to_user+0x31/0xb0 [ 604.042148][T23489] hidp_sock_ioctl+0x3e2/0x560 [ 604.042171][T23489] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 604.042233][T23489] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 604.042255][T23489] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 604.042286][T23489] sock_do_ioctl+0xd9/0x300 [ 604.042308][T23489] ? __pfx_sock_do_ioctl+0x10/0x10 [ 604.042324][T23489] ? __lock_acquire+0xab9/0xd20 [ 604.042363][T23489] sock_ioctl+0x576/0x790 [ 604.042382][T23489] ? __pfx_sock_ioctl+0x10/0x10 [ 604.042400][T23489] ? __fget_files+0x2a/0x420 [ 604.042419][T23489] ? __fget_files+0x3a0/0x420 [ 604.042436][T23489] ? __fget_files+0x2a/0x420 [ 604.042458][T23489] ? bpf_lsm_file_ioctl+0x9/0x20 [ 604.042483][T23489] ? __pfx_sock_ioctl+0x10/0x10 [ 604.042499][T23489] __se_sys_ioctl+0xf9/0x170 [ 604.042528][T23489] do_syscall_64+0xfa/0x3b0 [ 604.042547][T23489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.042564][T23489] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.042581][T23489] ? clear_bhb_loop+0x60/0xb0 [ 604.042603][T23489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.042621][T23489] RIP: 0033:0x7f722918e929 [ 604.042637][T23489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.042654][T23489] RSP: 002b:00007f722a080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.042673][T23489] RAX: ffffffffffffffda RBX: 00007f72293b5fa0 RCX: 00007f722918e929 [ 604.042687][T23489] RDX: 0000200000000200 RSI: 00000000800448d2 RDI: 0000000000000007 [ 604.042699][T23489] RBP: 00007f722a080090 R08: 0000000000000000 R09: 0000000000000000 [ 604.042711][T23489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.042723][T23489] R13: 0000000000000000 R14: 00007f72293b5fa0 R15: 00007ffd3143bf78 [ 604.042752][T23489] [ 604.507234][T23498] __nla_validate_parse: 2 callbacks suppressed [ 604.507258][T23498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6415'. [ 604.535351][T23498] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6415'. [ 604.549273][T23498] sctp: [Deprecated]: syz.4.6415 (pid 23498) Use of int in max_burst socket option. [ 604.549273][T23498] Use struct sctp_assoc_value instead [ 605.018153][T23519] delete_channel: no stack [ 605.295294][T23523] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.303128][T23523] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.733330][T23541] netlink: 'syz.6.6431': attribute type 10 has an invalid length. [ 605.758960][T23541] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6431'. [ 606.148889][T23546] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6433'. [ 606.168996][T23523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.501422][ T55] block nbd1: Possible stuck request ffff888025597000: control (read@0,1024B). Runtime 420 seconds [ 606.512391][ T55] block nbd1: Possible stuck request ffff8880255971c0: control (read@1024,1024B). Runtime 420 seconds [ 606.524193][ T55] block nbd1: Possible stuck request ffff888025597380: control (read@2048,1024B). Runtime 420 seconds [ 606.537024][ T55] block nbd1: Possible stuck request ffff888025597540: control (read@3072,1024B). Runtime 420 seconds [ 606.707658][T23523] geneve2: left promiscuous mode [ 606.719130][T23523] ipvlan2: left promiscuous mode [ 606.775405][T23539] ip6gretap0: entered promiscuous mode [ 606.790555][T23539] macsec1: entered promiscuous mode [ 606.809218][T23539] ip6gretap0: left promiscuous mode [ 606.865920][T23541] FAULT_INJECTION: forcing a failure. [ 606.865920][T23541] name failslab, interval 1, probability 0, space 0, times 0 [ 606.871028][T23552] netlink: 596 bytes leftover after parsing attributes in process `syz.0.6435'. [ 606.884716][T23541] CPU: 1 UID: 0 PID: 23541 Comm: syz.6.6431 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 606.884744][T23541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.884765][T23541] Call Trace: [ 606.884773][T23541] [ 606.884782][T23541] dump_stack_lvl+0x189/0x250 [ 606.884814][T23541] ? __pfx____ratelimit+0x10/0x10 [ 606.884839][T23541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.884866][T23541] ? __pfx__printk+0x10/0x10 [ 606.884890][T23541] ? __pfx___might_resched+0x10/0x10 [ 606.884920][T23541] should_fail_ex+0x414/0x560 [ 606.884948][T23541] should_failslab+0xa8/0x100 [ 606.884969][T23541] __kmalloc_noprof+0xcb/0x4f0 [ 606.884987][T23541] ? new_nbp+0x29/0x440 [ 606.885011][T23541] new_nbp+0x29/0x440 [ 606.885028][T23541] ? mutex_is_locked+0x17/0x50 [ 606.885050][T23541] br_add_if+0x28e/0xec0 [ 606.885071][T23541] ? __pfx___dev_change_flags+0x10/0x10 [ 606.885105][T23541] do_set_master+0x533/0x6d0 [ 606.885135][T23541] do_setlink+0xcf0/0x41c0 [ 606.885161][T23541] ? trace_sched_exit_tp+0x38/0x120 [ 606.885191][T23541] ? __pfx_do_setlink+0x10/0x10 [ 606.885215][T23541] ? __lock_acquire+0xab9/0xd20 [ 606.885246][T23541] ? do_raw_spin_lock+0x121/0x290 [ 606.885275][T23541] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 606.885300][T23541] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.885326][T23541] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 606.885349][T23541] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 606.885378][T23541] ? rcu_is_watching+0x15/0xb0 [ 606.885406][T23541] ? __mutex_lock+0xa6d/0xe80 [ 606.885424][T23541] ? __mutex_lock+0x51b/0xe80 [ 606.885447][T23541] ? rtnl_setlink+0x4ea/0x900 [ 606.885470][T23541] ? __pfx___mutex_lock+0x10/0x10 [ 606.885497][T23541] ? ns_capable+0x8a/0xf0 [ 606.885529][T23541] rtnl_setlink+0x604/0x900 [ 606.885555][T23541] ? __pfx_rtnl_setlink+0x10/0x10 [ 606.885589][T23541] ? kasan_quarantine_put+0xdd/0x220 [ 606.885690][T23541] ? __pfx_rtnl_setlink+0x10/0x10 [ 606.885711][T23541] rtnetlink_rcv_msg+0x7cf/0xb70 [ 606.885735][T23541] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 606.885760][T23541] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.885779][T23541] ? ref_tracker_free+0x63a/0x7d0 [ 606.885800][T23541] ? __copy_skb_header+0xa7/0x550 [ 606.885826][T23541] ? __pfx_ref_tracker_free+0x10/0x10 [ 606.885848][T23541] ? __skb_clone+0x63/0x7a0 [ 606.885880][T23541] netlink_rcv_skb+0x205/0x470 [ 606.885902][T23541] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.885924][T23541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 606.885958][T23541] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.885979][T23541] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.886005][T23541] netlink_unicast+0x758/0x8d0 [ 606.886035][T23541] netlink_sendmsg+0x805/0xb30 [ 606.886065][T23541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.886090][T23541] ? aa_sock_msg_perm+0x94/0x160 [ 606.886113][T23541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.886135][T23541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.886157][T23541] __sock_sendmsg+0x219/0x270 [ 606.886180][T23541] ____sys_sendmsg+0x505/0x830 [ 606.886209][T23541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.886241][T23541] ? import_iovec+0x74/0xa0 [ 606.886263][T23541] ___sys_sendmsg+0x21f/0x2a0 [ 606.886288][T23541] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.886347][T23541] ? __fget_files+0x2a/0x420 [ 606.886365][T23541] ? __fget_files+0x3a0/0x420 [ 606.886394][T23541] __x64_sys_sendmsg+0x19b/0x260 [ 606.886421][T23541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 606.886454][T23541] ? __pfx_ksys_write+0x10/0x10 [ 606.886468][T23541] ? rcu_is_watching+0x15/0xb0 [ 606.886498][T23541] ? do_syscall_64+0xbe/0x3b0 [ 606.886518][T23541] do_syscall_64+0xfa/0x3b0 [ 606.886534][T23541] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.886558][T23541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.886576][T23541] ? clear_bhb_loop+0x60/0xb0 [ 606.886597][T23541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.886615][T23541] RIP: 0033:0x7f722918e929 [ 606.886632][T23541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.886647][T23541] RSP: 002b:00007f722a080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.886667][T23541] RAX: ffffffffffffffda RBX: 00007f72293b5fa0 RCX: 00007f722918e929 [ 606.886680][T23541] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 606.886691][T23541] RBP: 00007f722a080090 R08: 0000000000000000 R09: 0000000000000000 [ 606.886703][T23541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.886714][T23541] R13: 0000000000000000 R14: 00007f72293b5fa0 R15: 00007ffd3143bf78 [ 606.886742][T23541] [ 606.887247][T23541] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 607.492510][T23560] batadv0: entered promiscuous mode [ 607.511156][T23560] macsec1: entered promiscuous mode [ 607.533126][T23560] batadv0: left promiscuous mode [ 607.577576][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.587565][T23513] vxcan1 speed is unknown, defaulting to 1000 [ 607.597188][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.616663][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.640320][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.965447][T23578] syz_tun: entered promiscuous mode [ 607.972166][T23578] vlan2: entered promiscuous mode [ 607.998986][T23579] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6447'. [ 608.290028][T23591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6453'. [ 608.381111][T23587] vxcan1 speed is unknown, defaulting to 1000 [ 608.394299][T23513] lo speed is unknown, defaulting to 1000 [ 608.406539][T23589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.414039][T23589] IPv6: NLM_F_CREATE should be set when creating new route [ 608.421322][T23589] IPv6: NLM_F_CREATE should be set when creating new route [ 608.428565][T23589] IPv6: NLM_F_CREATE should be set when creating new route [ 608.500537][T23595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.716865][T23603] netlink: 'syz.6.6457': attribute type 9 has an invalid length. [ 608.746990][T23603] netlink: 'syz.6.6457': attribute type 6 has an invalid length. [ 608.830677][T23609] netlink: 'syz.7.6460': attribute type 9 has an invalid length. [ 608.839504][T23609] netlink: 'syz.7.6460': attribute type 6 has an invalid length. [ 609.176798][T23587] lo speed is unknown, defaulting to 1000 [ 609.617089][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6462'. [ 609.865252][T23626] netlink: 'syz.4.6464': attribute type 10 has an invalid length. [ 609.878643][T23626] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6464'. [ 609.951137][T23626] dummy0: entered promiscuous mode [ 609.969434][T23626] bridge0: port 3(dummy0) entered blocking state [ 609.977815][T23626] bridge0: port 3(dummy0) entered disabled state [ 609.987043][T23626] dummy0: entered allmulticast mode [ 609.997804][T23626] bridge0: port 3(dummy0) entered blocking state [ 610.004411][T23626] bridge0: port 3(dummy0) entered forwarding state [ 610.036196][T23636] vlan2: entered promiscuous mode [ 610.041559][T23636] team0: entered promiscuous mode [ 610.089644][T23630] vxcan1 speed is unknown, defaulting to 1000 [ 610.582310][T23630] lo speed is unknown, defaulting to 1000 [ 611.123360][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 611.496811][T23653] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 611.580458][T23667] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6476'. [ 611.647949][T23670] FAULT_INJECTION: forcing a failure. [ 611.647949][T23670] name failslab, interval 1, probability 0, space 0, times 0 [ 611.693965][T23670] CPU: 0 UID: 0 PID: 23670 Comm: syz.0.6477 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 611.693992][T23670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 611.694002][T23670] Call Trace: [ 611.694010][T23670] [ 611.694019][T23670] dump_stack_lvl+0x189/0x250 [ 611.694051][T23670] ? __pfx____ratelimit+0x10/0x10 [ 611.694077][T23670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.694102][T23670] ? __pfx__printk+0x10/0x10 [ 611.694129][T23670] ? __pfx___might_resched+0x10/0x10 [ 611.694151][T23670] ? fs_reclaim_acquire+0x7d/0x100 [ 611.694178][T23670] should_fail_ex+0x414/0x560 [ 611.694203][T23670] should_failslab+0xa8/0x100 [ 611.694225][T23670] __kmalloc_cache_noprof+0x70/0x3d0 [ 611.694242][T23670] ? register_vlan_dev+0x380/0x800 [ 611.694268][T23670] register_vlan_dev+0x380/0x800 [ 611.694299][T23670] vlan_newlink+0x4b2/0x610 [ 611.694326][T23670] ? __pfx_vlan_newlink+0x10/0x10 [ 611.694353][T23670] rtnl_newlink_create+0x310/0xb00 [ 611.694384][T23670] ? __pfx_aa_get_newest_label+0x10/0x10 [ 611.694411][T23670] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 611.694430][T23670] ? rtnl_newlink+0x8db/0x1c70 [ 611.694454][T23670] ? __pfx___mutex_lock+0x10/0x10 [ 611.694483][T23670] ? ns_capable+0x8a/0xf0 [ 611.694512][T23670] rtnl_newlink+0x16d6/0x1c70 [ 611.694534][T23670] ? netlink_sendmsg+0x805/0xb30 [ 611.694568][T23670] ? __pfx_rtnl_newlink+0x10/0x10 [ 611.694613][T23670] ? kasan_quarantine_put+0xdd/0x220 [ 611.694638][T23670] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.694669][T23670] ? nlmon_xmit+0xb0/0x100 [ 611.694685][T23670] ? kmem_cache_free+0x18f/0x400 [ 611.694710][T23670] ? __local_bh_enable_ip+0x12d/0x1c0 [ 611.694735][T23670] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.694761][T23670] ? __local_bh_enable_ip+0x12d/0x1c0 [ 611.694791][T23670] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 611.694819][T23670] ? __dev_queue_xmit+0x27e/0x3a70 [ 611.694859][T23670] ? __lock_acquire+0xab9/0xd20 [ 611.694909][T23670] ? __pfx_rtnl_newlink+0x10/0x10 [ 611.694948][T23670] rtnetlink_rcv_msg+0x7cf/0xb70 [ 611.694973][T23670] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 611.694994][T23670] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 611.695012][T23670] ? ref_tracker_free+0x63a/0x7d0 [ 611.695034][T23670] ? __copy_skb_header+0xa7/0x550 [ 611.695062][T23670] ? __pfx_ref_tracker_free+0x10/0x10 [ 611.695084][T23670] ? __skb_clone+0x63/0x7a0 [ 611.695116][T23670] netlink_rcv_skb+0x205/0x470 [ 611.695139][T23670] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 611.695162][T23670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.695196][T23670] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.695216][T23670] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.695243][T23670] netlink_unicast+0x758/0x8d0 [ 611.695274][T23670] netlink_sendmsg+0x805/0xb30 [ 611.695306][T23670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.695330][T23670] ? aa_sock_msg_perm+0x94/0x160 [ 611.695354][T23670] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 611.695377][T23670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.695399][T23670] __sock_sendmsg+0x219/0x270 [ 611.695422][T23670] ____sys_sendmsg+0x505/0x830 [ 611.695452][T23670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.695485][T23670] ? import_iovec+0x74/0xa0 [ 611.695507][T23670] ___sys_sendmsg+0x21f/0x2a0 [ 611.695534][T23670] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.695597][T23670] ? __fget_files+0x2a/0x420 [ 611.695615][T23670] ? __fget_files+0x3a0/0x420 [ 611.695645][T23670] __x64_sys_sendmsg+0x19b/0x260 [ 611.695672][T23670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.695706][T23670] ? __pfx_ksys_write+0x10/0x10 [ 611.695721][T23670] ? rcu_is_watching+0x15/0xb0 [ 611.695752][T23670] ? do_syscall_64+0xbe/0x3b0 [ 611.695774][T23670] do_syscall_64+0xfa/0x3b0 [ 611.695790][T23670] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.695815][T23670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.695833][T23670] ? clear_bhb_loop+0x60/0xb0 [ 611.695855][T23670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.695873][T23670] RIP: 0033:0x7ff379f8e929 [ 611.695891][T23670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.695931][T23670] RSP: 002b:00007ff37aede038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.695960][T23670] RAX: ffffffffffffffda RBX: 00007ff37a1b5fa0 RCX: 00007ff379f8e929 [ 611.695973][T23670] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 611.695986][T23670] RBP: 00007ff37aede090 R08: 0000000000000000 R09: 0000000000000000 [ 611.695997][T23670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.696009][T23670] R13: 0000000000000000 R14: 00007ff37a1b5fa0 R15: 00007ffd1395d4f8 [ 611.696041][T23670] [ 612.302035][T23674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6479'. [ 612.320797][T23674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6479'. [ 612.364180][T23674] erspan0: entered promiscuous mode [ 612.371085][T23674] gretap0: entered promiscuous mode [ 612.377231][T23674] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 612.385294][T23674] Cannot create hsr debugfs directory [ 612.391153][T23674] hsr2: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 612.401772][T23674] hsr2: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 612.778635][T23688] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6484'. [ 612.843564][T23694] netlink: 'syz.3.6484': attribute type 1 has an invalid length. [ 613.004330][T23696] FAULT_INJECTION: forcing a failure. [ 613.004330][T23696] name failslab, interval 1, probability 0, space 0, times 0 [ 613.061161][T23696] CPU: 1 UID: 0 PID: 23696 Comm: syz.6.6487 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 613.061190][T23696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 613.061202][T23696] Call Trace: [ 613.061210][T23696] [ 613.061219][T23696] dump_stack_lvl+0x189/0x250 [ 613.061251][T23696] ? __pfx____ratelimit+0x10/0x10 [ 613.061278][T23696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.061304][T23696] ? __pfx__printk+0x10/0x10 [ 613.061330][T23696] ? __pfx___might_resched+0x10/0x10 [ 613.061360][T23696] should_fail_ex+0x414/0x560 [ 613.061388][T23696] should_failslab+0xa8/0x100 [ 613.061410][T23696] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 613.061430][T23696] ? __alloc_skb+0x112/0x2d0 [ 613.061457][T23696] __alloc_skb+0x112/0x2d0 [ 613.061483][T23696] netlink_sendmsg+0x5c6/0xb30 [ 613.061516][T23696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.061542][T23696] ? aa_sock_msg_perm+0x94/0x160 [ 613.061567][T23696] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 613.061589][T23696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.061612][T23696] __sock_sendmsg+0x219/0x270 [ 613.061636][T23696] ____sys_sendmsg+0x505/0x830 [ 613.061666][T23696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.061700][T23696] ? import_iovec+0x74/0xa0 [ 613.061723][T23696] ___sys_sendmsg+0x21f/0x2a0 [ 613.061750][T23696] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.061812][T23696] ? __fget_files+0x2a/0x420 [ 613.061831][T23696] ? __fget_files+0x3a0/0x420 [ 613.061857][T23696] __x64_sys_sendmsg+0x19b/0x260 [ 613.061880][T23696] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 613.061913][T23696] ? __pfx_ksys_write+0x10/0x10 [ 613.061928][T23696] ? rcu_is_watching+0x15/0xb0 [ 613.061959][T23696] ? do_syscall_64+0xbe/0x3b0 [ 613.061981][T23696] do_syscall_64+0xfa/0x3b0 [ 613.061998][T23696] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.062024][T23696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.062043][T23696] ? clear_bhb_loop+0x60/0xb0 [ 613.062067][T23696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.062085][T23696] RIP: 0033:0x7f722918e929 [ 613.062122][T23696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.062138][T23696] RSP: 002b:00007f722a080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.062159][T23696] RAX: ffffffffffffffda RBX: 00007f72293b5fa0 RCX: 00007f722918e929 [ 613.062172][T23696] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 613.062184][T23696] RBP: 00007f722a080090 R08: 0000000000000000 R09: 0000000000000000 [ 613.062200][T23696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.062210][T23696] R13: 0000000000000000 R14: 00007f72293b5fa0 R15: 00007ffd3143bf78 [ 613.062240][T23696] [ 613.372970][T23703] bridge_slave_0: left allmulticast mode [ 613.378758][T23703] bridge_slave_0: left promiscuous mode [ 613.384904][T23703] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.881529][T23703] bridge_slave_1: left allmulticast mode [ 613.887907][T23703] bridge_slave_1: left promiscuous mode [ 613.894008][T23703] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.902943][T23712] netlink: 'syz.7.6493': attribute type 9 has an invalid length. [ 613.910976][T23712] netlink: 'syz.7.6493': attribute type 6 has an invalid length. [ 613.985369][T23703] bond0: (slave bond_slave_0): Releasing backup interface [ 614.005391][T23703] bond0: (slave bond_slave_1): Releasing backup interface [ 614.023435][T23703] team_slave_0: left promiscuous mode [ 614.036574][T23703] team0: Port device team_slave_0 removed [ 614.045085][T23703] team_slave_1: left promiscuous mode [ 614.058060][T23703] team0: Port device team_slave_1 removed [ 614.083611][T23703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.387227][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6501'. [ 614.566766][T23737] pim6reg1: entered promiscuous mode [ 614.595991][T23737] pim6reg1: entered allmulticast mode [ 614.618510][T23740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6503'. [ 614.654722][T23737] 8021q: VLANs not supported on gre0 [ 614.677266][T23737] Cannot find add_set index 4 as target [ 614.877794][T23752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6508'. [ 614.963593][T23757] netlink: 'syz.0.6511': attribute type 4 has an invalid length. [ 614.986325][T23757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6511'. [ 614.996279][T23758] netlink: 'syz.3.6510': attribute type 1 has an invalid length. [ 614.996306][T23758] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6510'. [ 615.223854][T23769] netlink: 'syz.4.6514': attribute type 1 has an invalid length. [ 615.231854][T23769] NCSI netlink: No device for ifindex 0 [ 615.398024][T23773] tipc: Enabled bearer , priority 0 [ 615.450425][T23773] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 615.484094][T23773] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 615.516095][T23776] SET target dimension over the limit! [ 615.549679][T23773] tipc: Resetting bearer [ 615.716244][T23784] FAULT_INJECTION: forcing a failure. [ 615.716244][T23784] name failslab, interval 1, probability 0, space 0, times 0 [ 615.752003][T23784] CPU: 1 UID: 0 PID: 23784 Comm: syz.6.6522 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 615.752032][T23784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 615.752044][T23784] Call Trace: [ 615.752052][T23784] [ 615.752061][T23784] dump_stack_lvl+0x189/0x250 [ 615.752092][T23784] ? __pfx____ratelimit+0x10/0x10 [ 615.752118][T23784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.752144][T23784] ? __pfx__printk+0x10/0x10 [ 615.752167][T23784] ? __mutex_trylock_common+0x153/0x260 [ 615.752194][T23784] should_fail_ex+0x414/0x560 [ 615.752221][T23784] should_failslab+0xa8/0x100 [ 615.752243][T23784] __kmalloc_cache_noprof+0x70/0x3d0 [ 615.752261][T23784] ? __hw_addr_add_ex+0x1f4/0x770 [ 615.752289][T23784] __hw_addr_add_ex+0x1f4/0x770 [ 615.752321][T23784] dev_addr_init+0x14f/0x230 [ 615.752348][T23784] ? __pfx_dev_addr_init+0x10/0x10 [ 615.752369][T23784] ? alloc_netdev_mqs+0xa6/0x11e0 [ 615.752401][T23784] alloc_netdev_mqs+0x2f3/0x11e0 [ 615.752417][T23784] ? __pfx_vlan_setup+0x10/0x10 [ 615.752445][T23784] rtnl_create_link+0x31f/0xd10 [ 615.752470][T23784] rtnl_newlink_create+0x25c/0xb00 [ 615.752501][T23784] ? __pfx_aa_get_newest_label+0x10/0x10 [ 615.752528][T23784] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 615.752548][T23784] ? rtnl_newlink+0x8db/0x1c70 [ 615.752571][T23784] ? __pfx___mutex_lock+0x10/0x10 [ 615.752601][T23784] ? ns_capable+0x8a/0xf0 [ 615.752630][T23784] rtnl_newlink+0x16d6/0x1c70 [ 615.752652][T23784] ? netlink_sendmsg+0x805/0xb30 [ 615.752686][T23784] ? __pfx_rtnl_newlink+0x10/0x10 [ 615.752737][T23784] ? kasan_quarantine_put+0xdd/0x220 [ 615.752761][T23784] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.752792][T23784] ? nlmon_xmit+0xb0/0x100 [ 615.752807][T23784] ? kmem_cache_free+0x18f/0x400 [ 615.752833][T23784] ? __local_bh_enable_ip+0x12d/0x1c0 [ 615.752858][T23784] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.752884][T23784] ? __local_bh_enable_ip+0x12d/0x1c0 [ 615.752908][T23784] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 615.752937][T23784] ? __dev_queue_xmit+0x27e/0x3a70 [ 615.752976][T23784] ? __lock_acquire+0xab9/0xd20 [ 615.753028][T23784] ? __pfx_rtnl_newlink+0x10/0x10 [ 615.753049][T23784] rtnetlink_rcv_msg+0x7cf/0xb70 [ 615.753074][T23784] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 615.753094][T23784] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 615.753112][T23784] ? ref_tracker_free+0x63a/0x7d0 [ 615.753133][T23784] ? __copy_skb_header+0xa7/0x550 [ 615.753160][T23784] ? __pfx_ref_tracker_free+0x10/0x10 [ 615.753183][T23784] ? __skb_clone+0x63/0x7a0 [ 615.753215][T23784] netlink_rcv_skb+0x205/0x470 [ 615.753238][T23784] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 615.753260][T23784] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 615.753296][T23784] ? netlink_deliver_tap+0x2e/0x1b0 [ 615.753316][T23784] ? netlink_deliver_tap+0x2e/0x1b0 [ 615.753343][T23784] netlink_unicast+0x758/0x8d0 [ 615.753373][T23784] netlink_sendmsg+0x805/0xb30 [ 615.753403][T23784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.753426][T23784] ? aa_sock_msg_perm+0x94/0x160 [ 615.753449][T23784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.753470][T23784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.753493][T23784] __sock_sendmsg+0x219/0x270 [ 615.753517][T23784] ____sys_sendmsg+0x505/0x830 [ 615.753546][T23784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.753580][T23784] ? import_iovec+0x74/0xa0 [ 615.753602][T23784] ___sys_sendmsg+0x21f/0x2a0 [ 615.753628][T23784] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.753690][T23784] ? __fget_files+0x2a/0x420 [ 615.753709][T23784] ? __fget_files+0x3a0/0x420 [ 615.753743][T23784] __x64_sys_sendmsg+0x19b/0x260 [ 615.753770][T23784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.753805][T23784] ? __pfx_ksys_write+0x10/0x10 [ 615.753820][T23784] ? rcu_is_watching+0x15/0xb0 [ 615.753849][T23784] ? do_syscall_64+0xbe/0x3b0 [ 615.753870][T23784] do_syscall_64+0xfa/0x3b0 [ 615.753887][T23784] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.753911][T23784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.753930][T23784] ? clear_bhb_loop+0x60/0xb0 [ 615.753951][T23784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.753968][T23784] RIP: 0033:0x7f722918e929 [ 615.753986][T23784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.754001][T23784] RSP: 002b:00007f722a080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.754021][T23784] RAX: ffffffffffffffda RBX: 00007f72293b5fa0 RCX: 00007f722918e929 [ 615.754034][T23784] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 615.754046][T23784] RBP: 00007f722a080090 R08: 0000000000000000 R09: 0000000000000000 [ 615.754056][T23784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.754066][T23784] R13: 0000000000000000 R14: 00007f72293b5fa0 R15: 00007ffd3143bf78 [ 615.754096][T23784] [ 616.276181][ T5851] Bluetooth: hci6: command 0x0406 tx timeout [ 616.291076][T23789] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6524'. [ 616.300388][T23789] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6524'. [ 616.316233][T23789] ip6gretap0: entered promiscuous mode [ 616.325307][T23789] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 616.333082][T23789] Cannot create hsr debugfs directory [ 616.336754][T23786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6521'. [ 616.433436][T23786] 8021q: adding VLAN 0 to HW filter on device bond3 [ 616.500064][ T5969] tipc: Node number set to 4278255617 [ 616.579085][T23794] bond3: (slave veth9): Enslaving as an active interface with an up link [ 616.846248][T23814] ip6gretap0: entered promiscuous mode [ 616.852183][T23814] macsec1: entered promiscuous mode [ 616.905764][T23820] netlink: 'syz.0.6534': attribute type 9 has an invalid length. [ 616.932568][T23814] ip6gretap0: left promiscuous mode [ 616.975960][T23820] netlink: 'syz.0.6534': attribute type 6 has an invalid length. [ 617.335942][T23846] netlink: 'syz.0.6542': attribute type 1 has an invalid length. [ 617.344579][T23846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6542'. [ 617.416206][T23844] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 617.630582][T23860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6550'. [ 617.641890][T23862] netlink: 'syz.7.6549': attribute type 9 has an invalid length. [ 617.780556][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6551'. [ 617.794512][T23869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6551'. [ 618.465929][T23874] geneve2: left promiscuous mode [ 618.482461][T23874] syzkaller0: left promiscuous mode [ 618.487706][T23874] syzkaller0: left allmulticast mode [ 618.513449][T23880] erspan0: entered promiscuous mode [ 618.528029][T23880] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 618.554747][ T6988] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.602642][ T6988] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.654338][ T6988] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.678001][ T6988] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.748197][T23900] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 618.758540][T23892] validate_nla: 1 callbacks suppressed [ 618.758560][T23892] netlink: 'syz.6.6564': attribute type 10 has an invalid length. [ 618.776534][T23897] netlink: 'syz.0.6565': attribute type 1 has an invalid length. [ 618.788993][T23892] bridge0: port 1(dummy0) entered blocking state [ 618.798015][T23899] netlink: 'syz.3.6567': attribute type 9 has an invalid length. [ 618.807253][T23899] netlink: 'syz.3.6567': attribute type 6 has an invalid length. [ 618.817375][T23892] bridge0: port 1(dummy0) entered disabled state [ 618.835572][T23892] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 618.942836][T23897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.636342][T23902] bond1: (slave ip6erspan0): making interface the new active one [ 619.655733][T23902] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 621.600057][T23905] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 621.787445][T23923] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 621.973745][T23938] __nla_validate_parse: 5 callbacks suppressed [ 621.973770][T23938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6576'. [ 622.087255][T23946] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6579'. [ 622.210200][T23945] vlan2: entered promiscuous mode [ 622.701612][T23967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6590'. [ 622.768699][T23967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6590'. [ 622.873431][T23967] gretap0: entered promiscuous mode [ 622.900876][T23967] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 622.908498][T23967] Cannot create hsr debugfs directory [ 622.961141][T23967] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 623.191331][T23982] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20000 [ 623.195155][T23983] Cannot find add_set index 4 as target [ 623.292806][T23985] syzkaller1: entered promiscuous mode [ 623.298360][T23985] syzkaller1: entered allmulticast mode [ 623.381238][T23987] bond3: (slave veth9): Releasing backup interface [ 623.647618][T23998] netlink: 'syz.4.6603': attribute type 10 has an invalid length. [ 623.666424][T23998] veth0_macvtap: left promiscuous mode [ 623.680856][ T5158] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 623.704177][T23998] batman_adv: batadv0: Adding interface: macvtap0 [ 623.733169][T23998] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.761333][ T31] INFO: task syz.5.4937:19510 blocked for more than 143 seconds. [ 623.769388][ T31] Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 [ 623.779564][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 623.791174][ T31] task:syz.5.4937 state:D stack:27432 pid:19510 tgid:19509 ppid:18238 task_flags:0x400140 flags:0x00004004 [ 623.807211][T23998] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 623.812534][ T31] Call Trace: [ 623.821483][ T31] [ 623.824626][ T31] __schedule+0x16f5/0x4d00 [ 623.829326][ T31] ? __lock_acquire+0xab9/0xd20 [ 623.835680][ T31] ? schedule+0x165/0x360 [ 623.854112][ T31] ? __pfx___schedule+0x10/0x10 [ 623.867049][ T31] ? schedule+0x91/0x360 [ 623.890511][ T31] schedule+0x165/0x360 [ 623.903723][ T31] schedule_preempt_disabled+0x13/0x30 [ 623.915986][ T31] __mutex_lock+0x724/0xe80 [ 623.927362][ T31] ? __mutex_lock+0x51b/0xe80 [ 623.938163][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 623.952978][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 623.963822][ T31] ? __nlmsg_put+0xef/0x1b0 [ 623.974188][ T31] ? genlmsg_put+0x137/0x2e0 [ 623.985390][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 623.999916][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 624.007540][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 624.025496][ T31] ? kernel_text_address+0xa5/0xe0 [ 624.032105][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 624.037807][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 624.044708][ T31] genl_rcv_msg+0x60e/0x790 [ 624.049415][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.054997][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 624.069597][ T31] netlink_rcv_skb+0x205/0x470 [ 624.078948][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.102742][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.129628][ T31] ? down_read+0x1ad/0x2e0 [ 624.140175][ T31] genl_rcv+0x28/0x40 [ 624.150009][ T31] netlink_unicast+0x758/0x8d0 [ 624.167576][ T31] netlink_sendmsg+0x805/0xb30 [ 624.179153][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.189952][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 624.200288][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.205670][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.220527][ T31] __sock_sendmsg+0x219/0x270 [ 624.225448][ T31] ____sys_sendmsg+0x505/0x830 [ 624.231016][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.240512][ T31] ? import_iovec+0x74/0xa0 [ 624.250387][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 624.260279][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.265541][ T31] ? __fget_files+0x2a/0x420 [ 624.270565][ T31] ? __fget_files+0x3a0/0x420 [ 624.275288][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 624.280411][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.286304][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.291207][ T31] ? do_syscall_64+0xbe/0x3b0 [ 624.296042][ T31] do_syscall_64+0xfa/0x3b0 [ 624.300983][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.306226][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.313461][ T31] ? clear_bhb_loop+0x60/0xb0 [ 624.318181][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.324832][ T31] RIP: 0033:0x7fb68498e929 [ 624.329262][ T31] RSP: 002b:00007fb685737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.338286][ T31] RAX: ffffffffffffffda RBX: 00007fb684bb5fa0 RCX: 00007fb68498e929 [ 624.346685][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 624.355194][ T31] RBP: 00007fb684a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 624.363437][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.371793][ T31] R13: 0000000000000000 R14: 00007fb684bb5fa0 R15: 00007ffd8dc62e08 [ 624.379830][ T31] [ 624.383394][ T31] INFO: task syz.1.4991:19662 blocked for more than 143 seconds. [ 624.392061][ T31] Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 [ 624.417625][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.435254][ T31] task:syz.1.4991 state:D stack:24664 pid:19662 tgid:19661 ppid:14831 task_flags:0x400140 flags:0x00004004 [ 624.447587][ T31] Call Trace: [ 624.450949][ T31] [ 624.453909][ T31] __schedule+0x16f5/0x4d00 [ 624.458449][ T31] ? __lock_acquire+0xab9/0xd20 [ 624.463412][ T31] ? schedule+0x165/0x360 [ 624.467777][ T31] ? __pfx___schedule+0x10/0x10 [ 624.472923][ T31] ? schedule+0x91/0x360 [ 624.477225][ T31] schedule+0x165/0x360 [ 624.481732][ T31] schedule_preempt_disabled+0x13/0x30 [ 624.487765][ T31] __mutex_lock+0x724/0xe80 [ 624.492585][ T31] ? __mutex_lock+0x51b/0xe80 [ 624.497288][ T31] ? nfsd_nl_listener_set_doit+0x12a/0x1650 [ 624.503538][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 624.508602][ T31] ? __asan_memset+0x22/0x50 [ 624.514258][ T31] ? ____sys_sendmsg+0x505/0x830 [ 624.519322][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 624.524322][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 624.529485][ T31] nfsd_nl_listener_set_doit+0x12a/0x1650 [ 624.535546][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 624.541438][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 624.547686][ T31] ? __nla_parse+0x40/0x60 [ 624.552384][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 624.558762][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 624.565266][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 624.571541][ T31] ? bpf_lsm_capable+0x9/0x20 [ 624.576261][ T31] ? security_capable+0x7e/0x2e0 [ 624.581565][ T31] genl_rcv_msg+0x60e/0x790 [ 624.586161][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.592688][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 624.598887][ T31] netlink_rcv_skb+0x205/0x470 [ 624.603807][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.609211][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.614731][ T31] ? down_read+0x1ad/0x2e0 [ 624.620101][ T31] genl_rcv+0x28/0x40 [ 624.624137][ T31] netlink_unicast+0x758/0x8d0 [ 624.628942][ T31] netlink_sendmsg+0x805/0xb30 [ 624.634130][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.639461][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 624.644655][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.650069][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.655410][ T31] __sock_sendmsg+0x219/0x270 [ 624.660384][ T31] ____sys_sendmsg+0x505/0x830 [ 624.665203][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.670601][ T31] ? import_iovec+0x74/0xa0 [ 624.675126][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 624.679944][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.685226][ T31] ? __fget_files+0x2a/0x420 [ 624.689965][ T31] ? __fget_files+0x3a0/0x420 [ 624.694782][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 624.699794][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.705530][ T31] ? rcu_is_watching+0x15/0xb0 [ 624.710559][ T31] ? do_syscall_64+0xbe/0x3b0 [ 624.715284][ T31] do_syscall_64+0xfa/0x3b0 [ 624.721085][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.726390][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.732587][ T31] ? clear_bhb_loop+0x60/0xb0 [ 624.737329][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.743347][ T31] RIP: 0033:0x7fcfad18e929 [ 624.747784][ T31] RSP: 002b:00007fcfadfe3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.756301][ T31] RAX: ffffffffffffffda RBX: 00007fcfad3b5fa0 RCX: 00007fcfad18e929 [ 624.764655][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 624.772917][ T31] RBP: 00007fcfad210b39 R08: 0000000000000000 R09: 0000000000000000 [ 624.781019][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.789025][ T31] R13: 0000000000000000 R14: 00007fcfad3b5fa0 R15: 00007ffeeb521828 [ 624.797158][ T31] [ 624.805951][ T31] [ 624.805951][ T31] Showing all locks held in the system: [ 624.820251][ T31] 1 lock held by khungtaskd/31: [ 624.826818][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 624.837070][ T31] 3 locks held by kworker/u8:2/36: [ 624.842435][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 624.854386][ T31] #1: ffffc90000ac7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 624.865499][ T31] #2: ffffffff8f511c48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 624.874728][ T31] 2 locks held by getty/5599: [ 624.879497][ T31] #0: ffff888034f690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 624.889526][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 624.899753][ T31] 1 lock held by udevd/8361: [ 624.904417][ T31] #0: ffff8880254cb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 624.913842][ T31] 2 locks held by syz.2.4225/17628: [ 624.919062][ T31] #0: ffffffff8f5768b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 624.928293][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 624.938682][ T31] 2 locks held by syz.5.4937/19510: [ 624.944407][ T31] #0: ffffffff8f5768b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 624.952809][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 624.963303][ T31] 2 locks held by syz.1.4991/19662: [ 624.968519][ T31] #0: ffffffff8f5768b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 624.976952][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 624.987345][ T31] 2 locks held by syz.0.6593/23976: [ 624.992903][ T31] #0: ffffffff8f511c48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 625.002101][ T31] #1: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 625.013707][ T31] 1 lock held by syz.4.6603/23997: [ 625.018828][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 625.030811][ T31] [ 625.033168][ T31] ============================================= [ 625.033168][ T31] [ 625.043600][ T31] NMI backtrace for cpu 0 [ 625.043625][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 625.043644][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.043655][ T31] Call Trace: [ 625.043662][ T31] [ 625.043669][ T31] dump_stack_lvl+0x189/0x250 [ 625.043698][ T31] ? __wake_up_klogd+0xd9/0x110 [ 625.043717][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.043740][ T31] ? __pfx__printk+0x10/0x10 [ 625.043846][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 625.043882][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 625.043898][ T31] ? _printk+0xcf/0x120 [ 625.043919][ T31] ? __pfx__printk+0x10/0x10 [ 625.043934][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 625.043957][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 625.043980][ T31] watchdog+0xfee/0x1030 [ 625.044003][ T31] ? watchdog+0x1de/0x1030 [ 625.044030][ T31] kthread+0x70e/0x8a0 [ 625.044052][ T31] ? __pfx_watchdog+0x10/0x10 [ 625.044073][ T31] ? __pfx_kthread+0x10/0x10 [ 625.044092][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.044115][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.044137][ T31] ? __pfx_kthread+0x10/0x10 [ 625.044158][ T31] ret_from_fork+0x3fc/0x770 [ 625.044184][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 625.044210][ T31] ? __switch_to_asm+0x39/0x70 [ 625.044226][ T31] ? __switch_to_asm+0x33/0x70 [ 625.044241][ T31] ? __pfx_kthread+0x10/0x10 [ 625.044262][ T31] ret_from_fork_asm+0x1a/0x30 [ 625.044297][ T31] [ 625.044306][ T31] Sending NMI from CPU 0 to CPUs 1: [ 625.203867][ C1] NMI backtrace for cpu 1 [ 625.203887][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 625.203908][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.203919][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 625.203950][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 15 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 625.203966][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 625.203981][ C1] RAX: 4235ef69be314e00 RBX: ffffffff81976058 RCX: 4235ef69be314e00 [ 625.203995][ C1] RDX: 0000000000000001 RSI: ffffffff8d982dfc RDI: ffffffff8be28300 [ 625.204007][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 625.204020][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa10ff0 [ 625.204033][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003adab40 [ 625.204045][ C1] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 625.204058][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 625.204070][ C1] CR2: 00007fa095581178 CR3: 0000000076358000 CR4: 00000000003526f0 [ 625.204086][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 625.204096][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 625.204106][ C1] Call Trace: [ 625.204117][ C1] [ 625.204125][ C1] default_idle+0x13/0x20 [ 625.204143][ C1] default_idle_call+0x74/0xb0 [ 625.204161][ C1] do_idle+0x1e8/0x510 [ 625.204177][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 625.204195][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.204218][ C1] ? __pfx_do_idle+0x10/0x10 [ 625.204237][ C1] ? do_idle+0x4ef/0x510 [ 625.204254][ C1] cpu_startup_entry+0x44/0x60 [ 625.204268][ C1] start_secondary+0x101/0x110 [ 625.204286][ C1] common_startup_64+0x13e/0x147 [ 625.204306][ C1] [ 625.205111][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 625.408563][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 625.420374][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.430442][ T31] Call Trace: [ 625.433727][ T31] [ 625.436654][ T31] dump_stack_lvl+0x99/0x250 [ 625.441272][ T31] ? __asan_memcpy+0x40/0x70 [ 625.446066][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.451296][ T31] ? __pfx__printk+0x10/0x10 [ 625.455905][ T31] panic+0x2db/0x790 [ 625.459837][ T31] ? __pfx_panic+0x10/0x10 [ 625.464295][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 625.470119][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 625.475581][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 625.481737][ T31] watchdog+0x102d/0x1030 [ 625.486073][ T31] ? watchdog+0x1de/0x1030 [ 625.490490][ T31] kthread+0x70e/0x8a0 [ 625.494577][ T31] ? __pfx_watchdog+0x10/0x10 [ 625.499284][ T31] ? __pfx_kthread+0x10/0x10 [ 625.503891][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.509090][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.514545][ T31] ? __pfx_kthread+0x10/0x10 [ 625.519131][ T31] ret_from_fork+0x3fc/0x770 [ 625.523865][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 625.529145][ T31] ? __switch_to_asm+0x39/0x70 [ 625.534095][ T31] ? __switch_to_asm+0x33/0x70 [ 625.538953][ T31] ? __pfx_kthread+0x10/0x10 [ 625.543938][ T31] ret_from_fork_asm+0x1a/0x30 [ 625.548762][ T31] [ 625.552089][ T31] Kernel Offset: disabled [ 625.556612][ T31] Rebooting in 86400 seconds..