last executing test programs: 2.840541347s ago: executing program 2 (id=1919): unshare(0x20000400) unshare(0x2c060000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000340)=0x5, 0x15) unshare(0x24020400) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3, 0x4}, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @private=0xa010102}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0x0, 0xfdff, &(0x7f0000000180)='lo\x00'}) 2.000097997s ago: executing program 0 (id=1933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="1802f8ffffffffffffff0000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.874199933s ago: executing program 0 (id=1934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='rxrpc_local\x00', r0, 0x0, 0x200fffe}, 0x18) socket(0xa, 0x2400000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x31, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}, 0x300}], 0x1, 0x0) 1.710915503s ago: executing program 2 (id=1935): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000015c0)}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001c40)="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", 0x4c4}, {&(0x7f0000000100)="aa3d375025bc5e5b22402c6bc2b74d05557866776adbe43f0b87154fb9ccb967587c784994ee8b2b6822efc7f5d8b6498f0c7bd3df443b29475108699ab2dc772583b8de74fd4eff96bdeac758d85aac80928ff807a27624831c36caa3250460ce26adc9f1cc83e58d21abd5fafce3212e7d76b915a0b55b6d2e46ecff544879ec590032ae88298e2dbc1c6716283b544f9ef21650df51ef", 0x98}], 0x2}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000580)="d1f5c6f503c5b81272dd38a84687dd800ce1a8c6049c1605dd2bbae331d50ff418df56e30143577a6131ad94ed56858992f2461bfa0ab6ee23aa4488ca810276f7aa3cd2c5d64d799b5f9cf16070c5f691d45b1e5e8097966f170471aa9b2aee87a64b7f99d9b958da1bdc21aef924c6651ddbb2ed19d5b685fe30c5258f3e2c0d69f4d9fe9e", 0x86}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="35264f68197c0bec480bafe10b1c5f6636585775de355f6affdf5f1bf93a87d51d1433360057446b95c57b9ab879dabc1ab02c442ed9f31b71a697b2e51e2d8b2c68602ce48af22aa3126a1ad88a5e36056f8c6dba4d01739825cbc8fca14e6ded53c9", 0x63}, {&(0x7f00000007c0)="7a4ad0d0756f5efaa56a4d00cab7a514b6cff5be0285ced9a3e05a6fa01ef75d3f036acede4047", 0x27}], 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="e400000000000000000000000700000044347e63ac1414aa000000ff7f00000100004f3600000000000000107f00000100000004e0000002000003ffe000000200000009832317ffffffff640101027f000001ac1414aaac14141864010101e00000010a0101018917357f000001e0000002ffffffff0a01"], 0xe8}}], 0x4, 0x8010) shutdown(r0, 0x1) 1.688282433s ago: executing program 1 (id=1936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='rxrpc_local\x00', r0, 0x0, 0x200fffe}, 0x18) socket(0xa, 0x2400000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x31, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440), 0x0, 0x0) 1.588300622s ago: executing program 0 (id=1938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa0000000000000000000000007f0000010000000000000000000000004e23000020008000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r1 = socket$inet6(0xa, 0x3, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x140b, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x7ffffffe}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3c}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x400000c) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = socket$kcm(0x10, 0x2, 0x4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001400090525bd7000000300000238"], 0x54}}, 0x4004000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) 1.545478158s ago: executing program 1 (id=1939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000001400010000000900010073797a300000000034000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}}, 0x0) 1.45308017s ago: executing program 2 (id=1941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000018000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.348145653s ago: executing program 0 (id=1943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003400000004a08000640000000010800044000000002"], 0x94}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x25, 0x1, 0x4b, 0x4}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)="7f", 0x1}, {&(0x7f0000001300)="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", 0xd01}, {&(0x7f00000002c0)="40288f34bcff367c6993649e41118758375f199400599d9c8e1141c3777325c36236ae73b0a9755e1b624228bf70", 0x7fffffffffffffff}, {&(0x7f00000007c0)="155332afc2328ac86f330b721481623fa21d1c82095d68a6e83f6a0c272f5c44e27b53bb9c747b5fc8b89cb566637c7c444a", 0x32}, {&(0x7f0000004040)="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", 0xfc1}], 0x6, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$kcm(0x29, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="bf", 0x1}], 0x1}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000400)={r8, r7}) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) listen(r2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r11, @ANYRESDEC=r10, @ANYBLOB='\x00'], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000089120f0000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) 1.315299734s ago: executing program 1 (id=1944): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f0030670014fe8000000000000000000000000000aab1f42e3f40c41063beb6901e464bcf01d5d64b97cc7f75564ab922374db98550eeed4e56d118d05d67cc144db3c0de1700"/102], 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x1e4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6}]}, @NFQA_CT={0x74, 0xb, 0x0, 0x1, [@CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x3, 0x2, 0x1, 0x9, 0x15ad, 0x0, 0x7fff, 0xfffffffb]}, @CTA_NAT_SRC={0x44, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, @NFQA_CT={0xf8, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xdaf9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xaf67}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffc01}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x56db}]}, @CTA_NAT_DST={0xa0, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}]}}]}, @NFQA_CT={0x4}, @NFQA_CT={0x54, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xd}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xef88}]}}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x6002}, 0x880) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c40)=@migrate={0xec, 0x21, 0x1, 0x70bd28, 0x25dfdbfe, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e23, 0x6, 0x4e20, 0x9, 0xa, 0x80, 0x0, 0x2f, 0x0, 0xee01}, 0x6e6bc0}, [@migrate={0x9c, 0x11, [{@in=@empty, @in=@rand_addr=0x64010100, @in=@private=0xa010100, @in=@multicast2, 0x2b, 0x3, 0x0, 0x0, 0xa, 0xa}, {@in6=@remote, @in=@remote, @in=@multicast1, @in=@empty, 0x32, 0x2, 0x0, 0x3501, 0x2, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000050000009500000000000000c3492895246348bf79855db116f785cc6b65"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x46) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'gretap0\x00', 0x1000}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c064", 0x14}, {0x0}], 0x2}}], 0x1, 0x24000004) sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="3587"], 0x44}}, 0x0) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, 0xa, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x81}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb2}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x800448f0, &(0x7f0000000280)={0xffffffffffffffff, 0xfff5, 'H8-', 0x1f, 0x80}) 1.293272424s ago: executing program 2 (id=1945): unshare(0x20000400) unshare(0x2c060000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000340)=0x5, 0x15) unshare(0x24020400) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3, 0x4}, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @private=0xa010102}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0x0, 0xfdff, &(0x7f0000000180)='lo\x00'}) 1.137770849s ago: executing program 1 (id=1948): accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@bcast, @netrom, @rose, @remote, @remote, @remote, @null, @bcast]}, &(0x7f0000000000)=0x48, 0x80800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0040480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x80, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0xc) accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@bcast, @netrom, @rose, @remote, @remote, @remote, @null, @bcast]}, &(0x7f0000000000)=0x48, 0x80800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0040480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x80, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0xc) (async) 1.092417956s ago: executing program 0 (id=1949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='rxrpc_local\x00', r0, 0x0, 0x200fffe}, 0x18) socket(0xa, 0x2400000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x31, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440), 0x0, 0x0) 837.699329ms ago: executing program 4 (id=1950): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000101850000002e000000850000007d00000095000000000000004a43008e6b81ac78df2a6bcfc861033e41d8df342fd5128d7f3280362cbb46ccc36fda92a997c1b58f0da7137269b9de5b6568e1398e3d0589b1b36a1a582dc80e8b7c2df4df5dda875b7b17"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) (async) socket(0x22, 0x2, 0x4) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) sendmmsg(r3, 0x0, 0x0, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff030768442650e04e7a8c09a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x3, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000140)={0x2f, 0x4, '\x00', [@ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x8, [0xfebe, 0x5]}}, @enc_lim={0x4, 0x1, 0x3}]}, 0x30) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000000)=0x101, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x7, 0x0, 0xa, 0x1}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=""/80, 0x0, 0xc00, 0x0, 0x1}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86812164b8886c3588ed6", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x212002, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000040)=r0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 826.189992ms ago: executing program 1 (id=1951): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000015c0)}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001c40)="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", 0x4c4}, {&(0x7f0000000100)="aa3d375025bc5e5b22402c6bc2b74d05557866776adbe43f0b87154fb9ccb967587c784994ee8b2b6822efc7f5d8b6498f0c7bd3df443b29475108699ab2dc772583b8de74fd4eff96bdeac758d85aac80928ff807a27624831c36caa3250460ce26adc9f1cc83e58d21abd5fafce3212e7d76b915a0b55b6d2e46ecff544879ec590032ae88298e2dbc1c6716283b544f9ef21650df51ef", 0x98}], 0x2}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000580)="d1f5c6f503c5b81272dd38a84687dd800ce1a8c6049c1605dd2bbae331d50ff418df56e30143577a6131ad94ed56858992f2461bfa0ab6ee23aa4488ca810276f7aa3cd2c5d64d799b5f9cf16070c5f691d45b1e5e8097966f170471aa9b2aee87a64b7f99d9b958da1bdc21aef924c6651ddbb2ed19d5b685fe30c5258f3e2c0d69f4d9fe9e", 0x86}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="35264f68197c0bec480bafe10b1c5f6636585775de355f6affdf5f1bf93a87d51d1433360057446b95c57b9ab879dabc1ab02c442ed9f31b71a697b2e51e2d8b2c68602ce48af22aa3126a1ad88a5e36056f8c6dba4d01739825cbc8fca14e6ded53c9", 0x63}, {&(0x7f00000007c0)="7a4ad0d0756f5efaa56a4d00cab7a514b6cff5be0285ced9a3e05a6fa01ef75d3f036acede4047", 0x27}], 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="e400000000000000000000000700000044347e63ac1414aa000000ff7f00000100004f3600000000000000107f00000100000004e0000002000003ffe000000200000009832317ffffffff640101027f000001ac1414aaac14141864010101e00000010a0101018917357f000001e0000002ffffffff0a01"], 0xe8}}], 0x4, 0x8010) shutdown(r0, 0x1) 704.00488ms ago: executing program 3 (id=1952): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0x410}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0041}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01010000000000000000000000090900010073797a31000000000c00034000000000000000050c010000180a0102000000000000000000000000090002"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@newnexthop={0x18, 0x68, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x3, 0x0, 0x2a}}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$key(0xf, 0x3, 0x2) 702.769156ms ago: executing program 0 (id=1953): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(echainiv(aegis128))\x00'}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7ffc, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, @none={0x0, 0x3}}, 0x1, &(0x7f0000000180)={0x0, 0x3a}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8f33e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8051) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x4b8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x420, 0x240, 0x240, 0x420, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x16, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x100000, 0x1ff, 0x100000, 0x0, 0xed, 0x7}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x7}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x2, 0x4}, 0x0, 0x260, 0x2c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x7fff, 0x5, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x4e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) r11 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000000200)={0x80}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000340)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xdd}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1001, 0x6, 0x3, 0x0, 0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$can_j1939(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2404c040}, 0x20040000) 676.070312ms ago: executing program 3 (id=1954): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x740, 0x328, 0x580, 0x580, 0xd0, 0x328, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [0x4100], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) 675.396965ms ago: executing program 1 (id=1955): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffff8, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000012c0), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 615.335795ms ago: executing program 4 (id=1956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x900000000000000, 0x8000}, 0x0) 476.437918ms ago: executing program 4 (id=1957): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000ffe000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda9880ffe0ffe2800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 475.969806ms ago: executing program 3 (id=1958): r0 = epoll_create(0x20000000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80000020}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r4, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r3, &(0x7f0000000040)={0x11, 0x4, r4}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000340)={@local, @empty, @void, {@llc={0x4, {@llc={0x42, 0x8e, "be"}}}}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000002e0000007b02010000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) getsockopt(r7, 0x695, 0x4, &(0x7f0000000040)=""/83, &(0x7f0000000200)=0x53) socket$nl_generic(0x10, 0x3, 0x10) splice(r5, 0x0, r7, 0x0, 0x10d00, 0x0) 366.236882ms ago: executing program 2 (id=1959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000002818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 328.745807ms ago: executing program 3 (id=1960): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0x410}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0041}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@newnexthop={0x18, 0x68, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x3, 0x0, 0x2a}}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 284.429598ms ago: executing program 4 (id=1961): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000004000000000000000000850001037d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 236.000628ms ago: executing program 2 (id=1962): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x700, 0x8001, 0x5, {{0x36, 0x4, 0x0, 0x3a, 0xd8, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x4c, 0x75, 0x1, 0x7, [{@empty, 0xe}, {@private=0xa010100, 0x1ff}, {@broadcast, 0x5b}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}, {@multicast1, 0xa00}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @rr={0x7, 0x13, 0xe4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @generic={0x82, 0x3, 'v'}, @timestamp_addr={0x44, 0x3c, 0x8b, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@multicast2, 0x5}, {@loopback, 0x149fea77}]}, @ssrr={0x89, 0x1f, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x1d}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x5, 0x4, 0x9, 0x59, 0x1}) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0xbc, &(0x7f0000000480)=""/188, 0x41000, 0x46, '\x00', r6, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xdd, 0x9}, 0x10, r8, r3, 0x0, &(0x7f0000000780)=[r4, r1, r4, r4, r4, r4, r4], 0x0, 0x10, 0x48, @void, @value}, 0x94) ppoll(&(0x7f0000000080)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x800000, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0x200, 0x20}}}}]}, 0x78}}, 0x4080) 202.408756ms ago: executing program 3 (id=1963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='rxrpc_local\x00', r0, 0x0, 0x200fffe}, 0x18) socket(0xa, 0x2400000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x31, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440), 0x0, 0x0) 156.398746ms ago: executing program 4 (id=1964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000bc0)="0f", 0x1}], 0x2, &(0x7f0000001e80)=ANY=[], 0xc0}}], 0x1, 0x0) (fail_nth: 6) 214.478µs ago: executing program 4 (id=1965): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0x410}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0041}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01010000000000000000000000090900010073797a31000000000c00034000000000000000050c010000180a0102000000000000000000000000090002"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@newnexthop={0x18, 0x68, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x3, 0x0, 0x2a}}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$key(0xf, 0x3, 0x2) 0s ago: executing program 3 (id=1966): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000015c0)}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001c40)="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", 0x4c4}, {&(0x7f0000000100)="aa3d375025bc5e5b22402c6bc2b74d05557866776adbe43f0b87154fb9ccb967587c784994ee8b2b6822efc7f5d8b6498f0c7bd3df443b29475108699ab2dc772583b8de74fd4eff96bdeac758d85aac80928ff807a27624831c36caa3250460ce26adc9f1cc83e58d21abd5fafce3212e7d76b915a0b55b6d2e46ecff544879ec590032ae88298e2dbc1c6716283b544f9ef21650df51ef", 0x98}], 0x2}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000580)="d1f5c6f503c5b81272dd38a84687dd800ce1a8c6049c1605dd2bbae331d50ff418df56e30143577a6131ad94ed56858992f2461bfa0ab6ee23aa4488ca810276f7aa3cd2c5d64d799b5f9cf16070c5f691d45b1e5e8097966f170471aa9b2aee87a64b7f99d9b958da1bdc21aef924c6651ddbb2ed19d5b685fe30c5258f3e2c0d69f4d9fe9e", 0x86}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="35264f68197c0bec480bafe10b1c5f6636585775de355f6affdf5f1bf93a87d51d1433360057446b95c57b9ab879dabc1ab02c442ed9f31b71a697b2e51e2d8b2c68602ce48af22aa3126a1ad88a5e36056f8c6dba4d01739825cbc8fca14e6ded53c9", 0x63}, {&(0x7f00000007c0)="7a4ad0d0756f5efaa56a4d00cab7a514b6cff5be0285ced9a3e05a6fa01ef75d3f036acede4047", 0x27}], 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="e400000000000000000000000700000044347e63ac1414aa000000ff7f00000100004f3600000000000000107f00000100000004e0000002000003ffe000000200000009832317ffffffff640101027f000001ac1414aaac14141864010101e00000010a0101018917357f000001e0000002ffffffff0a01"], 0xe8}}], 0x4, 0x8010) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): 203.598792][ T9008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.598807][ T9008] ? clear_bhb_loop+0x60/0xb0 [ 203.598825][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.598840][ T9008] RIP: 0033:0x7ff53f58e929 [ 203.598855][ T9008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.598869][ T9008] RSP: 002b:00007ff540414038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.598887][ T9008] RAX: ffffffffffffffda RBX: 00007ff53f7b5fa0 RCX: 00007ff53f58e929 [ 203.598899][ T9008] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 203.598910][ T9008] RBP: 00007ff540414090 R08: 0000000000000000 R09: 0000000000000000 [ 203.598921][ T9008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.598931][ T9008] R13: 0000000000000000 R14: 00007ff53f7b5fa0 R15: 00007ffe456b5888 [ 203.598959][ T9008] [ 203.889494][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880548aa400: rx timeout, send abort [ 204.116403][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880548a9400: rx timeout, send abort [ 204.183294][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 204.252915][ T9031] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1027'. [ 204.302261][ T9033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.397807][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880548aa400: abort rx timeout. Force session deactivation [ 204.624745][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880548a9400: abort rx timeout. Force session deactivation [ 204.852565][ T2155] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 204.896218][ T2155] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 204.918330][ T2155] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 204.940239][ T2155] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 204.969101][ T2155] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 205.001776][ T2155] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 205.035066][ T2155] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x3 [ 205.065676][ T2155] hid-generic 0005:16C0:5505.0003: item fetching failed at offset 17/19 [ 205.102432][ T2155] hid-generic 0005:16C0:5505.0003: probe with driver hid-generic failed with error -22 [ 206.072348][ T9092] lo speed is unknown, defaulting to 1000 [ 206.441718][ T5915] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 206.450633][ T5915] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 206.458260][ T5915] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 206.467364][ T5915] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 206.474799][ T5915] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 206.482451][ T5915] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 206.490916][ T5915] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x3 [ 206.498548][ T5915] hid-generic 0005:16C0:5505.0004: item fetching failed at offset 17/19 [ 206.517358][ T5915] hid-generic 0005:16C0:5505.0004: probe with driver hid-generic failed with error -22 [ 207.065743][ T9146] Cannot find del_set index 1 as target [ 207.135711][ T9149] __nla_validate_parse: 12 callbacks suppressed [ 207.135731][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 207.173931][ T9149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.234386][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 207.273182][ T9151] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1064'. [ 207.308895][ T9151] netlink: 'syz.4.1064': attribute type 15 has an invalid length. [ 207.359561][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'. [ 207.741981][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 207.874122][ T9181] xt_hashlimit: size too large, truncated to 1048576 [ 207.999832][ T9191] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1077'. [ 208.708076][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 209.019450][ T9236] syz.1.1090: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 209.084509][ T9236] CPU: 1 UID: 0 PID: 9236 Comm: syz.1.1090 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 209.084536][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.084545][ T9236] Call Trace: [ 209.084552][ T9236] [ 209.084559][ T9236] dump_stack_lvl+0x189/0x250 [ 209.084592][ T9236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.084614][ T9236] ? __pfx__printk+0x10/0x10 [ 209.084632][ T9236] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 209.084652][ T9236] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 209.084671][ T9236] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 209.084692][ T9236] warn_alloc+0x214/0x310 [ 209.084718][ T9236] ? __pfx_warn_alloc+0x10/0x10 [ 209.084746][ T9236] ? __get_vm_area_node+0x28f/0x300 [ 209.084764][ T9236] ? xskq_create+0xbf/0x170 [ 209.084784][ T9236] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 209.084838][ T9236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 209.084863][ T9236] ? __kasan_kmalloc+0x93/0xb0 [ 209.084882][ T9236] vmalloc_user_noprof+0xad/0xf0 [ 209.084899][ T9236] ? xskq_create+0xbf/0x170 [ 209.084915][ T9236] xskq_create+0xbf/0x170 [ 209.084934][ T9236] xsk_init_queue+0xb0/0x110 [ 209.084960][ T9236] xsk_setsockopt+0x4de/0x710 [ 209.084985][ T9236] ? __pfx_xsk_setsockopt+0x10/0x10 [ 209.085013][ T9236] ? aa_sock_opt_perm+0x74/0x110 [ 209.085045][ T9236] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 209.085064][ T9236] ? __pfx_xsk_setsockopt+0x10/0x10 [ 209.085086][ T9236] do_sock_setsockopt+0x257/0x3e0 [ 209.085111][ T9236] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 209.085137][ T9236] ? __fget_files+0x2a/0x420 [ 209.085169][ T9236] __x64_sys_setsockopt+0x18b/0x220 [ 209.085195][ T9236] do_syscall_64+0xfa/0x3b0 [ 209.085210][ T9236] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.085230][ T9236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.085245][ T9236] ? clear_bhb_loop+0x60/0xb0 [ 209.085266][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.085286][ T9236] RIP: 0033:0x7ff53f58e929 [ 209.085301][ T9236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.085314][ T9236] RSP: 002b:00007ff5403f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 209.085332][ T9236] RAX: ffffffffffffffda RBX: 00007ff53f7b6080 RCX: 00007ff53f58e929 [ 209.085344][ T9236] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 209.085355][ T9236] RBP: 00007ff53f610b39 R08: 0000000000000004 R09: 0000000000000000 [ 209.085366][ T9236] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 209.085376][ T9236] R13: 0000000000000000 R14: 00007ff53f7b6080 R15: 00007ffe456b5888 [ 209.085408][ T9236] [ 209.085425][ T9236] Mem-Info: [ 209.365464][ T9248] lo speed is unknown, defaulting to 1000 [ 209.369502][ T9236] active_anon:4445 inactive_anon:0 isolated_anon:0 [ 209.369502][ T9236] active_file:1784 inactive_file:39879 isolated_file:0 [ 209.369502][ T9236] unevictable:768 dirty:182 writeback:0 [ 209.369502][ T9236] slab_reclaimable:11154 slab_unreclaimable:116533 [ 209.369502][ T9236] mapped:29502 shmem:1364 pagetables:1162 [ 209.369502][ T9236] sec_pagetables:0 bounce:0 [ 209.369502][ T9236] kernel_misc_reclaimable:0 [ 209.369502][ T9236] free:1312331 free_pcp:15440 free_cma:0 [ 209.448471][ T9236] Node 0 active_anon:17880kB inactive_anon:0kB active_file:7136kB inactive_file:159316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118008kB dirty:728kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12120kB pagetables:4312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 209.456899][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 209.495833][ T9236] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 209.540989][ T9236] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 209.585483][ T9236] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 209.592043][ T9236] Node 0 DMA32 free:1331276kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17532kB inactive_anon:0kB active_file:7136kB inactive_file:157488kB unevictable:1536kB writepending:728kB present:3129332kB managed:2561012kB mlocked:0kB bounce:0kB free_pcp:43144kB local_pcp:22504kB free_cma:0kB [ 209.627591][ T9236] lowmem_reserve[]: 0 0 1 1 1 [ 209.632424][ T9236] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 209.664075][ T9258] sctp: [Deprecated]: syz.2.1097 (pid 9258) Use of int in max_burst socket option deprecated. [ 209.664075][ T9258] Use struct sctp_assoc_value instead [ 209.683325][ T9236] lowmem_reserve[]: 0 0 0 0 0 [ 209.683377][ T9236] Node 1 Normal free:3902928kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18724kB local_pcp:7428kB free_cma:0kB [ 209.683497][ T9236] lowmem_reserve[]: 0 0 0 0 0 [ 209.683538][ T9236] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 209.683693][ T9236] Node 0 DMA32: 1115*4kB (UME) 784*8kB (UME) 368*16kB (UME) 497*32kB (UME) 367*64kB (UME) 113*128kB (UME) 29*256kB (UM) 8*512kB (ME) 6*1024kB (UME) 7*2048kB (UM) 300*4096kB (M) = 1331276kB [ 209.683871][ T9236] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 209.683981][ T9236] Node 1 Normal: 176*4kB (UE) 42*8kB (UME) 30*16kB (UME) 69*32kB (UME) 23*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3902928kB [ 209.684163][ T9236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.684179][ T9236] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 209.684194][ T9236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.684210][ T9236] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 209.684225][ T9236] 43023 total pagecache pages [ 209.684238][ T9236] 0 pages in swap cache [ 209.684245][ T9236] Free swap = 124996kB [ 209.684252][ T9236] Total swap = 124996kB [ 209.684260][ T9236] 2097051 pages RAM [ 209.684268][ T9236] 0 pages HighMem/MovableOnly [ 209.684275][ T9236] 424692 pages reserved [ 209.684282][ T9236] 0 pages cma reserved [ 210.088904][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 210.098287][ T9277] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 210.112727][ T9277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.249195][ T9285] netlink: 'syz.2.1106': attribute type 10 has an invalid length. [ 210.291391][ T9285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1106'. [ 210.379459][ T9290] Cannot find del_set index 1 as target [ 210.652089][ T9298] lo speed is unknown, defaulting to 1000 [ 211.352158][ T5893] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 211.368524][ T5893] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 211.381205][ T5893] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 211.390998][ T5893] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 211.401886][ T5893] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 211.411463][ T5893] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 211.422332][ T5893] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x3 [ 211.430966][ T5893] hid-generic 0005:16C0:5505.0005: item fetching failed at offset 17/19 [ 211.442572][ T5893] hid-generic 0005:16C0:5505.0005: probe with driver hid-generic failed with error -22 [ 211.457861][ T9345] syzkaller0: entered promiscuous mode [ 211.528943][ T9345] syzkaller0: entered allmulticast mode [ 212.461925][ T9382] __nla_validate_parse: 2 callbacks suppressed [ 212.461946][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1137'. [ 212.768895][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 213.639167][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 213.782112][ T9407] FAULT_INJECTION: forcing a failure. [ 213.782112][ T9407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.828817][ T9407] CPU: 1 UID: 0 PID: 9407 Comm: syz.2.1142 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 213.828844][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.828855][ T9407] Call Trace: [ 213.828863][ T9407] [ 213.828871][ T9407] dump_stack_lvl+0x189/0x250 [ 213.828900][ T9407] ? __pfx____ratelimit+0x10/0x10 [ 213.828918][ T9407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.828941][ T9407] ? __pfx__printk+0x10/0x10 [ 213.828973][ T9407] should_fail_ex+0x414/0x560 [ 213.828999][ T9407] _copy_to_user+0x31/0xb0 [ 213.829019][ T9407] simple_read_from_buffer+0xe1/0x170 [ 213.829042][ T9407] proc_fail_nth_read+0x1df/0x250 [ 213.829065][ T9407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.829088][ T9407] ? rw_verify_area+0x258/0x650 [ 213.829111][ T9407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.829132][ T9407] vfs_read+0x1fd/0x980 [ 213.829160][ T9407] ? __pfx___mutex_lock+0x10/0x10 [ 213.829179][ T9407] ? __pfx_vfs_read+0x10/0x10 [ 213.829203][ T9407] ? __fget_files+0x2a/0x420 [ 213.829225][ T9407] ? __fget_files+0x3a0/0x420 [ 213.829241][ T9407] ? __fget_files+0x2a/0x420 [ 213.829267][ T9407] ksys_read+0x145/0x250 [ 213.829286][ T9407] ? __pfx_ksys_read+0x10/0x10 [ 213.829314][ T9407] ? do_syscall_64+0xbe/0x3b0 [ 213.829335][ T9407] do_syscall_64+0xfa/0x3b0 [ 213.829351][ T9407] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.829368][ T9407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.829385][ T9407] ? clear_bhb_loop+0x60/0xb0 [ 213.829406][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.829421][ T9407] RIP: 0033:0x7f55d538d33c [ 213.829437][ T9407] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.829451][ T9407] RSP: 002b:00007f55d6202030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.829470][ T9407] RAX: ffffffffffffffda RBX: 00007f55d55b6160 RCX: 00007f55d538d33c [ 213.829482][ T9407] RDX: 000000000000000f RSI: 00007f55d62020a0 RDI: 0000000000000007 [ 213.829493][ T9407] RBP: 00007f55d6202090 R08: 0000000000000000 R09: 0000000000000000 [ 213.829504][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.829515][ T9407] R13: 0000000000000001 R14: 00007f55d55b6160 R15: 00007ffede34c768 [ 213.829556][ T9407] [ 213.923151][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805493b400: rx timeout, send abort [ 214.113929][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 214.130765][ T9416] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 214.148511][ T9416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.270550][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1151'. [ 214.423280][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054d0f800: rx timeout, send abort [ 214.481705][ T9435] netlink: 'syz.0.1153': attribute type 2 has an invalid length. [ 214.571149][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805493b400: abort rx timeout. Force session deactivation [ 214.574972][ T24] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 214.616186][ T24] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 214.623619][ T24] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 214.646201][ T24] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 214.653676][ T24] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 214.661370][ T24] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 214.676232][ T24] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x3 [ 214.683745][ T24] hid-generic 0005:16C0:5505.0006: item fetching failed at offset 17/19 [ 214.687581][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 214.931749][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054d0f800: abort rx timeout. Force session deactivation [ 215.211463][ T9455] xt_ecn: cannot match TCP bits for non-tcp packets [ 215.296813][ T24] hid-generic 0005:16C0:5505.0006: probe with driver hid-generic failed with error -22 [ 215.315613][ T9453] : renamed from bond_slave_0 (while UP) [ 215.371588][ T9454] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 215.633382][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 215.872775][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 216.213374][ T9490] vlan3: entered promiscuous mode [ 216.293361][ T9493] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1171'. [ 216.504223][ T9498] lo speed is unknown, defaulting to 1000 [ 216.576880][ T9502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1174'. [ 216.595388][ T9502] netlink: 'syz.3.1174': attribute type 10 has an invalid length. [ 216.612565][ T9502] bridge0: port 3(dummy0) entered disabled state [ 216.619206][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.626922][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.877048][ T9512] netlink: 'syz.3.1178': attribute type 10 has an invalid length. [ 217.441048][ T9519] lo speed is unknown, defaulting to 1000 [ 217.733395][ T9533] FAULT_INJECTION: forcing a failure. [ 217.733395][ T9533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.746676][ T9532] Cannot find del_set index 1 as target [ 217.780596][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.2.1183 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 217.780624][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.780635][ T9533] Call Trace: [ 217.780642][ T9533] [ 217.780649][ T9533] dump_stack_lvl+0x189/0x250 [ 217.780677][ T9533] ? __pfx____ratelimit+0x10/0x10 [ 217.780694][ T9533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.780717][ T9533] ? __pfx__printk+0x10/0x10 [ 217.780735][ T9533] ? __might_fault+0xb0/0x130 [ 217.780762][ T9533] should_fail_ex+0x414/0x560 [ 217.780789][ T9533] _copy_from_iter+0x1db/0x16f0 [ 217.780815][ T9533] ? rcu_is_watching+0x15/0xb0 [ 217.780840][ T9533] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 217.780858][ T9533] ? __pfx__copy_from_iter+0x10/0x10 [ 217.780882][ T9533] ? __build_skb_around+0x257/0x3e0 [ 217.780914][ T9533] ? netlink_sendmsg+0x642/0xb30 [ 217.780933][ T9533] ? skb_put+0x11b/0x210 [ 217.780957][ T9533] netlink_sendmsg+0x6b2/0xb30 [ 217.780983][ T9533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.781005][ T9533] ? aa_sock_msg_perm+0x94/0x160 [ 217.781025][ T9533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.781044][ T9533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.781063][ T9533] __sock_sendmsg+0x21c/0x270 [ 217.781083][ T9533] ____sys_sendmsg+0x505/0x830 [ 217.781108][ T9533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.781136][ T9533] ? import_iovec+0x74/0xa0 [ 217.781154][ T9533] ___sys_sendmsg+0x21f/0x2a0 [ 217.781177][ T9533] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.781227][ T9533] ? __fget_files+0x2a/0x420 [ 217.781243][ T9533] ? __fget_files+0x3a0/0x420 [ 217.781269][ T9533] __x64_sys_sendmsg+0x19b/0x260 [ 217.781292][ T9533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.781321][ T9533] ? __pfx_ksys_write+0x10/0x10 [ 217.781334][ T9533] ? rcu_is_watching+0x15/0xb0 [ 217.781360][ T9533] ? do_syscall_64+0xbe/0x3b0 [ 217.781379][ T9533] do_syscall_64+0xfa/0x3b0 [ 217.781393][ T9533] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.781408][ T9533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.781424][ T9533] ? clear_bhb_loop+0x60/0xb0 [ 217.781441][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.781456][ T9533] RIP: 0033:0x7f55d538e929 [ 217.781470][ T9533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.781483][ T9533] RSP: 002b:00007f55d6244038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.781502][ T9533] RAX: ffffffffffffffda RBX: 00007f55d55b5fa0 RCX: 00007f55d538e929 [ 217.781514][ T9533] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 217.781525][ T9533] RBP: 00007f55d6244090 R08: 0000000000000000 R09: 0000000000000000 [ 217.781536][ T9533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.781546][ T9533] R13: 0000000000000000 R14: 00007f55d55b5fa0 R15: 00007ffede34c768 [ 217.781574][ T9533] [ 218.277996][ T9541] __nla_validate_parse: 1 callbacks suppressed [ 218.278016][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 218.434972][ T9538] lo speed is unknown, defaulting to 1000 [ 218.748774][ T9544] syzkaller0: entered promiscuous mode [ 218.754391][ T9544] syzkaller0: entered allmulticast mode [ 219.513611][ T9563] netlink: 'syz.3.1191': attribute type 10 has an invalid length. [ 219.526543][ T9563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1191'. [ 222.585808][ T9567] lo speed is unknown, defaulting to 1000 [ 222.688953][ T9586] FAULT_INJECTION: forcing a failure. [ 222.688953][ T9586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.715447][ T9588] netlink: 'syz.1.1197': attribute type 10 has an invalid length. [ 222.720684][ T9586] CPU: 0 UID: 0 PID: 9586 Comm: syz.0.1196 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 222.720711][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.720722][ T9586] Call Trace: [ 222.720730][ T9586] [ 222.720737][ T9586] dump_stack_lvl+0x189/0x250 [ 222.720765][ T9586] ? __pfx____ratelimit+0x10/0x10 [ 222.720789][ T9586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.720811][ T9586] ? __pfx__printk+0x10/0x10 [ 222.720830][ T9586] ? __might_fault+0xb0/0x130 [ 222.720856][ T9586] should_fail_ex+0x414/0x560 [ 222.720882][ T9586] _copy_from_iter+0x3f5/0x16f0 [ 222.720916][ T9586] ? __pfx__copy_from_iter+0x10/0x10 [ 222.720941][ T9586] ? dev_get_by_index+0x22/0x2e0 [ 222.720958][ T9586] ? dev_get_by_index+0x22/0x2e0 [ 222.720980][ T9586] packet_sendmsg+0x333c/0x53f0 [ 222.721015][ T9586] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 222.721052][ T9586] ? __pfx___might_resched+0x10/0x10 [ 222.721073][ T9586] ? __lock_acquire+0xab9/0xd20 [ 222.721108][ T9586] ? __pfx_packet_sendmsg+0x10/0x10 [ 222.721126][ T9586] ? aa_sk_perm+0x81e/0x950 [ 222.721150][ T9586] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 222.721178][ T9586] ? __lock_acquire+0xab9/0xd20 [ 222.721196][ T9586] ? aa_sock_msg_perm+0x94/0x160 [ 222.721218][ T9586] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.721237][ T9586] ? __pfx_packet_sendmsg+0x10/0x10 [ 222.721259][ T9586] __sock_sendmsg+0x21c/0x270 [ 222.721280][ T9586] ____sys_sendmsg+0x505/0x830 [ 222.721308][ T9586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.721338][ T9586] ? import_iovec+0x74/0xa0 [ 222.721358][ T9586] ___sys_sendmsg+0x21f/0x2a0 [ 222.721382][ T9586] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.721437][ T9586] ? __fget_files+0x2a/0x420 [ 222.721454][ T9586] ? __fget_files+0x3a0/0x420 [ 222.721482][ T9586] __x64_sys_sendmsg+0x19b/0x260 [ 222.721507][ T9586] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.721536][ T9586] ? __pfx_ksys_write+0x10/0x10 [ 222.721557][ T9586] ? do_syscall_64+0xbe/0x3b0 [ 222.721578][ T9586] do_syscall_64+0xfa/0x3b0 [ 222.721593][ T9586] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.721608][ T9586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.721628][ T9586] ? clear_bhb_loop+0x60/0xb0 [ 222.721647][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.721662][ T9586] RIP: 0033:0x7fab8418e929 [ 222.721678][ T9586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.721691][ T9586] RSP: 002b:00007fab850c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.721710][ T9586] RAX: ffffffffffffffda RBX: 00007fab843b5fa0 RCX: 00007fab8418e929 [ 222.721722][ T9586] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 222.721732][ T9586] RBP: 00007fab850c7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.721742][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.721752][ T9586] R13: 0000000000000000 R14: 00007fab843b5fa0 R15: 00007ffe85e57308 [ 222.721783][ T9586] [ 222.737796][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 222.750406][ T9588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1197'. [ 222.775380][ T9590] 8021q: VLANs not supported on nlmon0 [ 223.067206][ T9599] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1199'. [ 223.138611][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'. [ 223.220103][ T9592] lo speed is unknown, defaulting to 1000 [ 223.228851][ T9602] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1200'. [ 223.242760][ T9602] siw: device registration error -23 [ 223.363878][ T5893] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 223.381868][ T5893] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 223.395426][ T5893] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 223.403312][ T5893] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 223.421694][ T5893] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 223.446733][ T5893] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 223.454261][ T5893] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x3 [ 223.481357][ T5893] hid-generic 0005:16C0:5505.0007: item fetching failed at offset 17/19 [ 223.498539][ T5893] hid-generic 0005:16C0:5505.0007: probe with driver hid-generic failed with error -22 [ 223.542769][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 223.553022][ T9613] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 223.684347][ T9617] netlink: 'syz.4.1206': attribute type 10 has an invalid length. [ 223.717028][ T9617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1206'. [ 223.738545][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 224.156062][ T9638] lo speed is unknown, defaulting to 1000 [ 224.179569][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 224.409462][ T5846] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 224.425304][ T5846] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 224.447661][ T5846] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 224.459670][ T5846] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 224.476833][ T5846] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 224.484870][ T5846] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 224.509870][ T5846] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x3 [ 224.522912][ T5846] hid-generic 0005:16C0:5505.0008: item fetching failed at offset 17/19 [ 224.551000][ T5846] hid-generic 0005:16C0:5505.0008: probe with driver hid-generic failed with error -22 [ 224.614744][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 224.635246][ T9672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1218'. [ 224.704198][ T5846] IPVS: starting estimator thread 0... [ 224.731610][ T9684] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 224.762176][ T9684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1223'. [ 224.795975][ T9672] vlan2: entered allmulticast mode [ 224.798919][ T9682] IPVS: using max 28 ests per chain, 67200 per kthread [ 224.829070][ T9672] macvlan1: entered allmulticast mode [ 224.834573][ T9672] veth1_vlan: entered allmulticast mode [ 224.915366][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 225.079471][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 225.085147][ T9684] lo speed is unknown, defaulting to 1000 [ 225.363696][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 225.389383][ T9715] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 225.415278][ T9715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.516749][ T9719] lo speed is unknown, defaulting to 1000 [ 225.538242][ T5893] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 225.545882][ T5893] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 225.549330][ T9727] x_tables: duplicate underflow at hook 1 [ 225.553915][ T5893] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 225.584240][ T5893] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 225.592133][ T5893] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 225.600004][ T5893] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 225.608007][ T5893] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x3 [ 225.615966][ T5893] hid-generic 0005:16C0:5505.0009: item fetching failed at offset 17/19 [ 225.625719][ T5893] hid-generic 0005:16C0:5505.0009: probe with driver hid-generic failed with error -22 [ 226.553869][ T24] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 226.576987][ T9777] FAULT_INJECTION: forcing a failure. [ 226.576987][ T9777] name failslab, interval 1, probability 0, space 0, times 0 [ 226.580032][ T24] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 226.590324][ T9777] CPU: 0 UID: 0 PID: 9777 Comm: syz.1.1246 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 226.590348][ T9777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.590359][ T9777] Call Trace: [ 226.590366][ T9777] [ 226.590373][ T9777] dump_stack_lvl+0x189/0x250 [ 226.590400][ T9777] ? __pfx____ratelimit+0x10/0x10 [ 226.590418][ T9777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.590440][ T9777] ? __pfx__printk+0x10/0x10 [ 226.590465][ T9777] ? ref_tracker_alloc+0x318/0x460 [ 226.590489][ T9777] should_fail_ex+0x414/0x560 [ 226.590514][ T9777] should_failslab+0xa8/0x100 [ 226.590534][ T9777] kmem_cache_alloc_noprof+0x73/0x3c0 [ 226.590564][ T9777] ? skb_clone+0x212/0x3a0 [ 226.590585][ T9777] skb_clone+0x212/0x3a0 [ 226.590604][ T9777] __netlink_deliver_tap+0x404/0x850 [ 226.590637][ T9777] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.590658][ T9777] netlink_deliver_tap+0x19c/0x1b0 [ 226.590678][ T9777] netlink_unicast+0x72f/0x8d0 [ 226.590708][ T9777] netlink_sendmsg+0x805/0xb30 [ 226.590737][ T9777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.590761][ T9777] ? aa_sock_msg_perm+0x94/0x160 [ 226.590783][ T9777] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.590803][ T9777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.590823][ T9777] __sock_sendmsg+0x21c/0x270 [ 226.590844][ T9777] ____sys_sendmsg+0x505/0x830 [ 226.590872][ T9777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.590904][ T9777] ? import_iovec+0x74/0xa0 [ 226.590924][ T9777] ___sys_sendmsg+0x21f/0x2a0 [ 226.590948][ T9777] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.591006][ T9777] ? __fget_files+0x2a/0x420 [ 226.591024][ T9777] ? __fget_files+0x3a0/0x420 [ 226.591051][ T9777] __x64_sys_sendmsg+0x19b/0x260 [ 226.591076][ T9777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.591108][ T9777] ? __pfx_ksys_write+0x10/0x10 [ 226.591122][ T9777] ? rcu_is_watching+0x15/0xb0 [ 226.591149][ T9777] ? do_syscall_64+0xbe/0x3b0 [ 226.591170][ T9777] do_syscall_64+0xfa/0x3b0 [ 226.591185][ T9777] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.591201][ T9777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.591217][ T9777] ? clear_bhb_loop+0x60/0xb0 [ 226.591237][ T9777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.591252][ T9777] RIP: 0033:0x7ff53f58e929 [ 226.591267][ T9777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.591281][ T9777] RSP: 002b:00007ff540414038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.591299][ T9777] RAX: ffffffffffffffda RBX: 00007ff53f7b5fa0 RCX: 00007ff53f58e929 [ 226.591311][ T9777] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 226.591322][ T9777] RBP: 00007ff540414090 R08: 0000000000000000 R09: 0000000000000000 [ 226.591332][ T9777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.591342][ T9777] R13: 0000000000000000 R14: 00007ff53f7b5fa0 R15: 00007ffe456b5888 [ 226.591370][ T9777] [ 226.591394][ T9777] netlink: 'syz.1.1246': attribute type 10 has an invalid length. [ 226.716890][ T24] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 226.924619][ T9777] lo speed is unknown, defaulting to 1000 [ 226.970560][ T9782] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 226.984595][ T24] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 226.992371][ T24] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 227.056940][ T24] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 227.064458][ T24] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x3 [ 227.075825][ T24] hid-generic 0005:16C0:5505.000A: item fetching failed at offset 17/19 [ 227.085917][ T24] hid-generic 0005:16C0:5505.000A: probe with driver hid-generic failed with error -22 [ 227.269539][ T9791] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 227.580153][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055214800: rx timeout, send abort [ 227.851203][ T5846] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 227.870814][ T5846] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 227.886356][ T5846] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 227.900090][ T5846] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 227.909744][ T5846] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 227.917586][ T5846] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 227.925139][ T5846] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x3 [ 227.933004][ T5846] hid-generic 0005:16C0:5505.000B: item fetching failed at offset 17/19 [ 227.942810][ T5846] hid-generic 0005:16C0:5505.000B: probe with driver hid-generic failed with error -22 [ 227.960996][ T9830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.080285][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055214c00: rx timeout, send abort [ 228.088688][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055214800: abort rx timeout. Force session deactivation [ 228.105082][ T9840] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 228.132851][ T9840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.588641][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055214c00: abort rx timeout. Force session deactivation [ 228.649232][ T9874] FAULT_INJECTION: forcing a failure. [ 228.649232][ T9874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.665884][ T9874] CPU: 1 UID: 0 PID: 9874 Comm: syz.0.1274 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 228.665911][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.665921][ T9874] Call Trace: [ 228.665929][ T9874] [ 228.665936][ T9874] dump_stack_lvl+0x189/0x250 [ 228.665965][ T9874] ? __pfx____ratelimit+0x10/0x10 [ 228.665981][ T9874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.666004][ T9874] ? __pfx__printk+0x10/0x10 [ 228.666035][ T9874] should_fail_ex+0x414/0x560 [ 228.666114][ T9874] _copy_to_user+0x31/0xb0 [ 228.666135][ T9874] simple_read_from_buffer+0xe1/0x170 [ 228.666157][ T9874] proc_fail_nth_read+0x1df/0x250 [ 228.666179][ T9874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.666201][ T9874] ? rw_verify_area+0x258/0x650 [ 228.666223][ T9874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.666244][ T9874] vfs_read+0x1fd/0x980 [ 228.666271][ T9874] ? __pfx___mutex_lock+0x10/0x10 [ 228.666287][ T9874] ? __pfx_vfs_read+0x10/0x10 [ 228.666309][ T9874] ? __fget_files+0x2a/0x420 [ 228.666331][ T9874] ? __fget_files+0x3a0/0x420 [ 228.666347][ T9874] ? __fget_files+0x2a/0x420 [ 228.666373][ T9874] ksys_read+0x145/0x250 [ 228.666391][ T9874] ? __pfx_ksys_read+0x10/0x10 [ 228.666411][ T9874] ? rcu_is_watching+0x15/0xb0 [ 228.666439][ T9874] ? do_syscall_64+0xbe/0x3b0 [ 228.666460][ T9874] do_syscall_64+0xfa/0x3b0 [ 228.666475][ T9874] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.666491][ T9874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.666506][ T9874] ? clear_bhb_loop+0x60/0xb0 [ 228.666526][ T9874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.666542][ T9874] RIP: 0033:0x7fab8418d33c [ 228.666558][ T9874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 228.666572][ T9874] RSP: 002b:00007fab850c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.666591][ T9874] RAX: ffffffffffffffda RBX: 00007fab843b5fa0 RCX: 00007fab8418d33c [ 228.666604][ T9874] RDX: 000000000000000f RSI: 00007fab850c70a0 RDI: 0000000000000004 [ 228.666615][ T9874] RBP: 00007fab850c7090 R08: 0000000000000000 R09: 0000000000000000 [ 228.666625][ T9874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.666636][ T9874] R13: 0000000000000000 R14: 00007fab843b5fa0 R15: 00007ffe85e57308 [ 228.666664][ T9874] [ 228.910841][ T9877] netlink: 'syz.2.1275': attribute type 3 has an invalid length. [ 228.918694][ T9877] __nla_validate_parse: 19 callbacks suppressed [ 228.918711][ T9877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1275'. [ 229.043699][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1278'. [ 229.227491][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1281'. [ 229.237637][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1281'. [ 229.383761][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 229.438604][ T9911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1283'. [ 229.456419][ T9911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1283'. [ 229.470454][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1285'. [ 229.483003][ T9911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1283'. [ 229.537160][ T9911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1283'. [ 229.643095][ T5957] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 229.654137][ T5957] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 229.664097][ T5957] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 229.670162][ T9925] IPv6: Can't replace route, no match found [ 229.675838][ T5957] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 229.680181][ T9926] netlink: 'syz.0.1291': attribute type 2 has an invalid length. [ 229.685461][ T5957] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 229.695492][ T9925] netlink: 'syz.0.1291': attribute type 2 has an invalid length. [ 229.700753][ T5957] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 229.717200][ T5957] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x3 [ 229.724636][ T5957] hid-generic 0005:16C0:5505.000C: item fetching failed at offset 17/19 [ 229.733901][ T5957] hid-generic 0005:16C0:5505.000C: probe with driver hid-generic failed with error -22 [ 230.176892][ T9948] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 230.501494][ T9958] FAULT_INJECTION: forcing a failure. [ 230.501494][ T9958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.515034][ T9958] CPU: 1 UID: 0 PID: 9958 Comm: syz.4.1299 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 230.515050][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.515058][ T9958] Call Trace: [ 230.515064][ T9958] [ 230.515069][ T9958] dump_stack_lvl+0x189/0x250 [ 230.515088][ T9958] ? __pfx____ratelimit+0x10/0x10 [ 230.515099][ T9958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.515113][ T9958] ? __pfx__printk+0x10/0x10 [ 230.515124][ T9958] ? __might_fault+0xb0/0x130 [ 230.515139][ T9958] should_fail_ex+0x414/0x560 [ 230.515165][ T9958] _copy_from_iter+0x1db/0x16f0 [ 230.515182][ T9958] ? rcu_is_watching+0x15/0xb0 [ 230.515204][ T9958] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 230.515221][ T9958] ? __pfx__copy_from_iter+0x10/0x10 [ 230.515245][ T9958] ? __build_skb_around+0x257/0x3e0 [ 230.515270][ T9958] ? netlink_sendmsg+0x642/0xb30 [ 230.515286][ T9958] ? skb_put+0x11b/0x210 [ 230.515310][ T9958] netlink_sendmsg+0x6b2/0xb30 [ 230.515339][ T9958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.515358][ T9958] ? aa_sock_msg_perm+0x94/0x160 [ 230.515372][ T9958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.515385][ T9958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.515398][ T9958] __sock_sendmsg+0x21c/0x270 [ 230.515411][ T9958] ____sys_sendmsg+0x505/0x830 [ 230.515428][ T9958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.515446][ T9958] ? import_iovec+0x74/0xa0 [ 230.515457][ T9958] ___sys_sendmsg+0x21f/0x2a0 [ 230.515478][ T9958] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.515510][ T9958] ? __fget_files+0x2a/0x420 [ 230.515521][ T9958] ? __fget_files+0x3a0/0x420 [ 230.515536][ T9958] __x64_sys_sendmsg+0x19b/0x260 [ 230.515551][ T9958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.515570][ T9958] ? __pfx_ksys_write+0x10/0x10 [ 230.515577][ T9958] ? rcu_is_watching+0x15/0xb0 [ 230.515594][ T9958] ? do_syscall_64+0xbe/0x3b0 [ 230.515606][ T9958] do_syscall_64+0xfa/0x3b0 [ 230.515615][ T9958] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.515624][ T9958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.515633][ T9958] ? clear_bhb_loop+0x60/0xb0 [ 230.515645][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.515654][ T9958] RIP: 0033:0x7f529798e929 [ 230.515664][ T9958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.515672][ T9958] RSP: 002b:00007f52987de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.515685][ T9958] RAX: ffffffffffffffda RBX: 00007f5297bb5fa0 RCX: 00007f529798e929 [ 230.515692][ T9958] RDX: 0000000000004004 RSI: 0000200000000340 RDI: 0000000000000005 [ 230.515700][ T9958] RBP: 00007f52987de090 R08: 0000000000000000 R09: 0000000000000000 [ 230.515834][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.515844][ T9958] R13: 0000000000000000 R14: 00007f5297bb5fa0 R15: 00007ffddd43fdb8 [ 230.515869][ T9958] [ 231.018866][ T5957] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 231.045498][ T5957] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 231.098416][ T5957] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 231.129931][ T5957] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 231.154355][ T5957] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 231.171059][ T5957] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 231.191856][ T5957] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x3 [ 231.207424][ T5957] hid-generic 0005:16C0:5505.000D: item fetching failed at offset 17/19 [ 231.220231][ T9983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.230805][ T5957] hid-generic 0005:16C0:5505.000D: probe with driver hid-generic failed with error -22 [ 231.552201][T10002] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 231.751280][ T5957] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 231.760978][ T5957] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 231.768568][ T5957] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 231.776402][ T5957] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 231.783825][ T5957] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 231.806279][ T5957] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 231.829789][ T5957] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x3 [ 231.846023][ T5957] hid-generic 0005:16C0:5505.000E: item fetching failed at offset 17/19 [ 231.864593][ T5957] hid-generic 0005:16C0:5505.000E: probe with driver hid-generic failed with error -22 [ 232.112619][T10032] vlan2: entered promiscuous mode [ 232.452828][ T2155] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 232.470546][ T2155] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 232.500165][ T2155] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 232.522854][T10047] netlink: 'syz.3.1331': attribute type 3 has an invalid length. [ 232.539502][ T2155] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 232.556381][T10047] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.562751][T10047] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.573480][T10057] vlan2: entered promiscuous mode [ 232.581553][ T2155] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 232.602092][ T2155] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 232.611319][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888033255800: rx timeout, send abort [ 232.636219][ T2155] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x3 [ 232.643639][ T2155] hid-generic 0005:16C0:5505.000F: item fetching failed at offset 17/19 [ 232.669464][ T2155] hid-generic 0005:16C0:5505.000F: probe with driver hid-generic failed with error -22 [ 232.876359][T10070] 8021q: VLANs not supported on nlmon0 [ 233.111498][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888033254c00: rx timeout, send abort [ 233.119979][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888033255800: abort rx timeout. Force session deactivation [ 233.290151][T10082] Cannot find del_set index 1 as target [ 233.468728][T10092] netlink: 'syz.0.1347': attribute type 10 has an invalid length. [ 233.480178][T10092] batman_adv: batadv0: Adding interface: vlan1 [ 233.487535][T10092] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.514229][T10092] batman_adv: batadv0: Interface activated: vlan1 [ 233.619910][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888033254c00: abort rx timeout. Force session deactivation [ 233.915973][T10120] openvswitch: netlink: IPv4 tunnel dst address is zero [ 233.929957][T10121] __nla_validate_parse: 23 callbacks suppressed [ 233.929976][T10121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1357'. [ 233.946280][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1357'. [ 233.955278][T10121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1357'. [ 233.964458][T10121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1357'. [ 233.991744][T10123] netlink: 'syz.4.1359': attribute type 2 has an invalid length. [ 234.274927][ T5957] hid-generic 0005:16C0:5505.0010: unknown main item tag 0x0 [ 234.283314][ T5957] hid-generic 0005:16C0:5505.0010: unknown main item tag 0x0 [ 234.291466][ T5957] hid-generic 0005:16C0:5505.0010: unknown main item tag 0x0 [ 234.299707][ T5957] hid-generic 0005:16C0:5505.0010: unknown main item tag 0x0 [ 234.307890][ T5957] hid-generic 0005:16C0:5505.0010: unknown main item tag 0x0 [ 234.315693][ T5957] hid-generic 0005:16C0:5505.0010: unknown main item tag 0x0 [ 234.325390][ T5957] hid-generic 0005:16C0:5505.0010: unknown main item tag 0x3 [ 234.334277][ T5957] hid-generic 0005:16C0:5505.0010: item fetching failed at offset 17/19 [ 234.344439][ T5957] hid-generic 0005:16C0:5505.0010: probe with driver hid-generic failed with error -22 [ 234.598928][T10137] FAULT_INJECTION: forcing a failure. [ 234.598928][T10137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.612460][T10137] CPU: 0 UID: 0 PID: 10137 Comm: syz.3.1362 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 234.612485][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.612495][T10137] Call Trace: [ 234.612503][T10137] [ 234.612510][T10137] dump_stack_lvl+0x189/0x250 [ 234.612539][T10137] ? __pfx____ratelimit+0x10/0x10 [ 234.612556][T10137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.612578][T10137] ? __pfx__printk+0x10/0x10 [ 234.612597][T10137] ? __might_fault+0xb0/0x130 [ 234.612624][T10137] should_fail_ex+0x414/0x560 [ 234.612650][T10137] _copy_from_user+0x2d/0xb0 [ 234.612668][T10137] ___sys_sendmsg+0x158/0x2a0 [ 234.612706][T10137] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.612761][T10137] ? __fget_files+0x2a/0x420 [ 234.612778][T10137] ? __fget_files+0x3a0/0x420 [ 234.612805][T10137] __x64_sys_sendmsg+0x19b/0x260 [ 234.612830][T10137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.612863][T10137] ? __pfx_ksys_write+0x10/0x10 [ 234.612876][T10137] ? rcu_is_watching+0x15/0xb0 [ 234.612905][T10137] ? do_syscall_64+0xbe/0x3b0 [ 234.612925][T10137] do_syscall_64+0xfa/0x3b0 [ 234.612939][T10137] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.612955][T10137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.612971][T10137] ? clear_bhb_loop+0x60/0xb0 [ 234.612990][T10137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.613006][T10137] RIP: 0033:0x7fa0b178e929 [ 234.613021][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.613034][T10137] RSP: 002b:00007fa0b2526038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.613052][T10137] RAX: ffffffffffffffda RBX: 00007fa0b19b6080 RCX: 00007fa0b178e929 [ 234.613065][T10137] RDX: 00000000000000c4 RSI: 0000200000000100 RDI: 0000000000000004 [ 234.613076][T10137] RBP: 00007fa0b2526090 R08: 0000000000000000 R09: 0000000000000000 [ 234.613085][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.613096][T10137] R13: 0000000000000000 R14: 00007fa0b19b6080 R15: 00007ffdaa0cde28 [ 234.613121][T10137] [ 234.852118][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 235.068502][T10149] netlink: 'syz.0.1366': attribute type 28 has an invalid length. [ 235.166067][T10154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1366'. [ 235.443541][ T5846] hid-generic 0005:16C0:5505.0011: unknown main item tag 0x0 [ 235.454899][ T5846] hid-generic 0005:16C0:5505.0011: unknown main item tag 0x0 [ 235.462767][ T5846] hid-generic 0005:16C0:5505.0011: unknown main item tag 0x0 [ 235.470649][ T5846] hid-generic 0005:16C0:5505.0011: unknown main item tag 0x0 [ 235.478326][ T5846] hid-generic 0005:16C0:5505.0011: unknown main item tag 0x0 [ 235.487258][ T5846] hid-generic 0005:16C0:5505.0011: unknown main item tag 0x0 [ 235.494718][ T5846] hid-generic 0005:16C0:5505.0011: unknown main item tag 0x3 [ 235.503848][ T5846] hid-generic 0005:16C0:5505.0011: item fetching failed at offset 17/19 [ 235.519681][ T5846] hid-generic 0005:16C0:5505.0011: probe with driver hid-generic failed with error -22 [ 235.594357][T10171] netlink: 'syz.1.1374': attribute type 11 has an invalid length. [ 235.690360][T10176] vlan2: entered promiscuous mode [ 235.748004][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 235.828157][T10177] lo speed is unknown, defaulting to 1000 [ 235.994678][T10191] batadv0: entered promiscuous mode [ 236.015663][T10191] vlan2: entered promiscuous mode [ 236.193096][T10200] netlink: 'syz.2.1380': attribute type 9 has an invalid length. [ 236.400792][ T5893] hid-generic 0005:16C0:5505.0012: unknown main item tag 0x0 [ 236.416640][ T5893] hid-generic 0005:16C0:5505.0012: unknown main item tag 0x0 [ 236.436384][ T5893] hid-generic 0005:16C0:5505.0012: unknown main item tag 0x0 [ 236.467834][ T5893] hid-generic 0005:16C0:5505.0012: unknown main item tag 0x0 [ 236.507129][ T5893] hid-generic 0005:16C0:5505.0012: unknown main item tag 0x0 [ 236.540231][ T5893] hid-generic 0005:16C0:5505.0012: unknown main item tag 0x0 [ 236.540772][T10213] netlink: 'syz.3.1389': attribute type 10 has an invalid length. [ 236.555946][T10213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1389'. [ 236.566323][ T5893] hid-generic 0005:16C0:5505.0012: unknown main item tag 0x3 [ 236.603689][T10216] Cannot find del_set index 1 as target [ 236.605025][ T5893] hid-generic 0005:16C0:5505.0012: item fetching failed at offset 17/19 [ 236.663307][ T5893] hid-generic 0005:16C0:5505.0012: probe with driver hid-generic failed with error -22 [ 236.841148][T10213] lo speed is unknown, defaulting to 1000 [ 237.252879][T10243] syzkaller0: entered promiscuous mode [ 237.268477][T10243] syzkaller0: entered allmulticast mode [ 237.354940][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1402'. [ 237.561779][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 239.425260][T10258] netlink: 'syz.3.1406': attribute type 2 has an invalid length. [ 239.460725][T10256] macvlan1: entered promiscuous mode [ 239.481650][T10256] ipvlan0: entered promiscuous mode [ 239.495503][T10256] ipvlan0: left promiscuous mode [ 239.509550][T10256] macvlan1: left promiscuous mode [ 239.796821][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1410'. [ 240.067152][T10307] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1417'. [ 240.111944][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'. [ 240.242857][T10317] netlink: 'syz.3.1422': attribute type 2 has an invalid length. [ 240.255074][T10320] C: renamed from team_slave_0 (while UP) [ 240.272474][T10320] netlink: 'syz.0.1421': attribute type 4 has an invalid length. [ 240.286515][T10320] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1421'. [ 240.315931][T10320] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 240.390227][T10320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1421'. [ 240.400655][T10320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1421'. [ 240.401555][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 240.443953][T10329] openvswitch: netlink: Message has 8 unknown bytes. [ 240.959015][T10354] lo speed is unknown, defaulting to 1000 [ 241.703743][T10375] FAULT_INJECTION: forcing a failure. [ 241.703743][T10375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.743589][T10375] CPU: 1 UID: 0 PID: 10375 Comm: syz.2.1443 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 241.743615][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.743637][T10375] Call Trace: [ 241.743649][T10375] [ 241.743656][T10375] dump_stack_lvl+0x189/0x250 [ 241.743683][T10375] ? __pfx____ratelimit+0x10/0x10 [ 241.743700][T10375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.743722][T10375] ? __pfx__printk+0x10/0x10 [ 241.743738][T10375] ? __might_fault+0xb0/0x130 [ 241.743764][T10375] should_fail_ex+0x414/0x560 [ 241.743790][T10375] _copy_from_iter+0x575/0x16f0 [ 241.743817][T10375] ? sock_alloc_send_pskb+0x875/0x990 [ 241.743838][T10375] ? __pfx__copy_from_iter+0x10/0x10 [ 241.743868][T10375] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 241.743888][T10375] skb_copy_datagram_from_iter+0xf5/0x720 [ 241.743907][T10375] ? dev_get_by_index+0x22/0x2e0 [ 241.743924][T10375] ? skb_put+0x11b/0x210 [ 241.743947][T10375] packet_sendmsg+0x3abb/0x53f0 [ 241.743982][T10375] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 241.744017][T10375] ? __pfx___might_resched+0x10/0x10 [ 241.744037][T10375] ? __lock_acquire+0xab9/0xd20 [ 241.744080][T10375] ? __pfx_packet_sendmsg+0x10/0x10 [ 241.744099][T10375] ? aa_sk_perm+0x81e/0x950 [ 241.744125][T10375] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 241.744153][T10375] ? __lock_acquire+0xab9/0xd20 [ 241.744171][T10375] ? aa_sock_msg_perm+0x94/0x160 [ 241.744193][T10375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.744212][T10375] ? __pfx_packet_sendmsg+0x10/0x10 [ 241.744234][T10375] __sock_sendmsg+0x21c/0x270 [ 241.744256][T10375] ____sys_sendmsg+0x505/0x830 [ 241.744284][T10375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.744314][T10375] ? import_iovec+0x74/0xa0 [ 241.744332][T10375] ___sys_sendmsg+0x21f/0x2a0 [ 241.744355][T10375] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.744411][T10375] ? __fget_files+0x2a/0x420 [ 241.744428][T10375] ? __fget_files+0x3a0/0x420 [ 241.744455][T10375] __x64_sys_sendmsg+0x19b/0x260 [ 241.744479][T10375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.744510][T10375] ? __pfx_ksys_write+0x10/0x10 [ 241.744523][T10375] ? rcu_is_watching+0x15/0xb0 [ 241.744551][T10375] ? do_syscall_64+0xbe/0x3b0 [ 241.744571][T10375] do_syscall_64+0xfa/0x3b0 [ 241.744591][T10375] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.744606][T10375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.744622][T10375] ? clear_bhb_loop+0x60/0xb0 [ 241.744642][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.744658][T10375] RIP: 0033:0x7f55d538e929 [ 241.744673][T10375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.744687][T10375] RSP: 002b:00007f55d6244038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.744706][T10375] RAX: ffffffffffffffda RBX: 00007f55d55b5fa0 RCX: 00007f55d538e929 [ 241.744718][T10375] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 241.744727][T10375] RBP: 00007f55d6244090 R08: 0000000000000000 R09: 0000000000000000 [ 241.744737][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.744744][T10375] R13: 0000000000000000 R14: 00007f55d55b5fa0 R15: 00007ffede34c768 [ 241.744765][T10375] [ 242.415203][T10391] netlink: 'syz.0.1448': attribute type 10 has an invalid length. [ 242.457059][T10391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1448'. [ 242.515109][T10393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1449'. [ 242.607582][T10401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.682117][T10402] lo speed is unknown, defaulting to 1000 [ 242.691915][T10401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1452'. [ 242.883506][T10411] macvlan1: entered promiscuous mode [ 242.902871][T10411] ipvlan0: entered promiscuous mode [ 242.919933][T10411] ipvlan0: left promiscuous mode [ 242.967725][T10411] macvlan1: left promiscuous mode [ 244.010922][T10458] openvswitch: netlink: Message has 2 unknown bytes. [ 244.026625][T10460] netlink: 'syz.2.1477': attribute type 2 has an invalid length. [ 244.036271][T10458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.214968][T10476] FAULT_INJECTION: forcing a failure. [ 244.214968][T10476] name failslab, interval 1, probability 0, space 0, times 0 [ 244.248563][T10476] CPU: 0 UID: 0 PID: 10476 Comm: syz.0.1480 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 244.248591][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.248602][T10476] Call Trace: [ 244.248609][T10476] [ 244.248617][T10476] dump_stack_lvl+0x189/0x250 [ 244.248646][T10476] ? __pfx____ratelimit+0x10/0x10 [ 244.248663][T10476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.248687][T10476] ? __pfx__printk+0x10/0x10 [ 244.248708][T10476] ? __pfx___might_resched+0x10/0x10 [ 244.248732][T10476] ? fs_reclaim_acquire+0x7d/0x100 [ 244.248756][T10476] should_fail_ex+0x414/0x560 [ 244.248783][T10476] should_failslab+0xa8/0x100 [ 244.248803][T10476] __kmalloc_noprof+0xcb/0x4f0 [ 244.248819][T10476] ? ethnl_default_start+0x141/0x570 [ 244.248847][T10476] ethnl_default_start+0x141/0x570 [ 244.248875][T10476] genl_start+0x4c3/0x6c0 [ 244.248907][T10476] __netlink_dump_start+0x469/0x7e0 [ 244.248937][T10476] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 244.248965][T10476] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 244.248995][T10476] ? rcu_is_watching+0x15/0xb0 [ 244.249017][T10476] ? __pfx_genl_start+0x10/0x10 [ 244.249030][T10476] ? __pfx_genl_dumpit+0x10/0x10 [ 244.249044][T10476] ? __pfx_genl_done+0x10/0x10 [ 244.249064][T10476] ? bpf_lsm_capable+0x9/0x20 [ 244.249079][T10476] ? security_capable+0x7e/0x2e0 [ 244.249107][T10476] genl_rcv_msg+0x5da/0x790 [ 244.249138][T10476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.249158][T10476] ? ref_tracker_free+0x63a/0x7d0 [ 244.249177][T10476] ? __pfx_ethnl_default_start+0x10/0x10 [ 244.249196][T10476] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 244.249215][T10476] ? __pfx_ethnl_default_done+0x10/0x10 [ 244.249237][T10476] ? __pfx_ref_tracker_free+0x10/0x10 [ 244.249269][T10476] netlink_rcv_skb+0x205/0x470 [ 244.249290][T10476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.249322][T10476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.249360][T10476] ? down_read+0x1ad/0x2e0 [ 244.249383][T10476] genl_rcv+0x28/0x40 [ 244.249404][T10476] netlink_unicast+0x758/0x8d0 [ 244.249436][T10476] netlink_sendmsg+0x805/0xb30 [ 244.249466][T10476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.249490][T10476] ? aa_sock_msg_perm+0x94/0x160 [ 244.249513][T10476] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.249536][T10476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.249556][T10476] __sock_sendmsg+0x21c/0x270 [ 244.249577][T10476] ____sys_sendmsg+0x505/0x830 [ 244.249607][T10476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.249640][T10476] ? import_iovec+0x74/0xa0 [ 244.249661][T10476] ___sys_sendmsg+0x21f/0x2a0 [ 244.249686][T10476] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.249749][T10476] ? __fget_files+0x2a/0x420 [ 244.249766][T10476] ? __fget_files+0x3a0/0x420 [ 244.249795][T10476] __x64_sys_sendmsg+0x19b/0x260 [ 244.249821][T10476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.249854][T10476] ? __pfx_ksys_write+0x10/0x10 [ 244.249868][T10476] ? rcu_is_watching+0x15/0xb0 [ 244.249901][T10476] ? do_syscall_64+0xbe/0x3b0 [ 244.249923][T10476] do_syscall_64+0xfa/0x3b0 [ 244.249939][T10476] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.249955][T10476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.249972][T10476] ? clear_bhb_loop+0x60/0xb0 [ 244.249993][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.250009][T10476] RIP: 0033:0x7fab8418e929 [ 244.250025][T10476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.250039][T10476] RSP: 002b:00007fab850c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.250058][T10476] RAX: ffffffffffffffda RBX: 00007fab843b5fa0 RCX: 00007fab8418e929 [ 244.250070][T10476] RDX: 0000000000004004 RSI: 0000200000000340 RDI: 0000000000000005 [ 244.250082][T10476] RBP: 00007fab850c7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.250092][T10476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.250102][T10476] R13: 0000000000000000 R14: 00007fab843b5fa0 R15: 00007ffe85e57308 [ 244.250132][T10476] [ 245.009815][T10486] FAULT_INJECTION: forcing a failure. [ 245.009815][T10486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.023089][T10486] CPU: 0 UID: 0 PID: 10486 Comm: syz.0.1483 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 245.023115][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.023125][T10486] Call Trace: [ 245.023132][T10486] [ 245.023139][T10486] dump_stack_lvl+0x189/0x250 [ 245.023168][T10486] ? __pfx____ratelimit+0x10/0x10 [ 245.023186][T10486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.023209][T10486] ? __pfx__printk+0x10/0x10 [ 245.023227][T10486] ? __might_fault+0xb0/0x130 [ 245.023255][T10486] should_fail_ex+0x414/0x560 [ 245.023281][T10486] _copy_from_iter+0x1db/0x16f0 [ 245.023308][T10486] ? rcu_is_watching+0x15/0xb0 [ 245.023333][T10486] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 245.023351][T10486] ? __pfx__copy_from_iter+0x10/0x10 [ 245.023375][T10486] ? __build_skb_around+0x257/0x3e0 [ 245.023400][T10486] ? netlink_sendmsg+0x642/0xb30 [ 245.023419][T10486] ? skb_put+0x11b/0x210 [ 245.023443][T10486] netlink_sendmsg+0x6b2/0xb30 [ 245.023471][T10486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.023494][T10486] ? aa_sock_msg_perm+0x94/0x160 [ 245.023516][T10486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.023536][T10486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.023557][T10486] __sock_sendmsg+0x21c/0x270 [ 245.023578][T10486] ____sys_sendmsg+0x505/0x830 [ 245.023607][T10486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.023638][T10486] ? import_iovec+0x74/0xa0 [ 245.023658][T10486] ___sys_sendmsg+0x21f/0x2a0 [ 245.023683][T10486] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.023741][T10486] ? __fget_files+0x2a/0x420 [ 245.023758][T10486] ? __fget_files+0x3a0/0x420 [ 245.023786][T10486] __x64_sys_sendmsg+0x19b/0x260 [ 245.023818][T10486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.023849][T10486] ? __pfx_ksys_write+0x10/0x10 [ 245.023863][T10486] ? rcu_is_watching+0x15/0xb0 [ 245.023891][T10486] ? do_syscall_64+0xbe/0x3b0 [ 245.023912][T10486] do_syscall_64+0xfa/0x3b0 [ 245.023928][T10486] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.023944][T10486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.023961][T10486] ? clear_bhb_loop+0x60/0xb0 [ 245.023981][T10486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.023998][T10486] RIP: 0033:0x7fab8418e929 [ 245.024014][T10486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.024028][T10486] RSP: 002b:00007fab850a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.024046][T10486] RAX: ffffffffffffffda RBX: 00007fab843b6080 RCX: 00007fab8418e929 [ 245.024059][T10486] RDX: 00000000000000c4 RSI: 0000200000000100 RDI: 0000000000000003 [ 245.024070][T10486] RBP: 00007fab850a6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.024081][T10486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.024091][T10486] R13: 0000000000000000 R14: 00007fab843b6080 R15: 00007ffe85e57308 [ 245.024119][T10486] [ 245.427905][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 245.448627][T10490] __nla_validate_parse: 12 callbacks suppressed [ 245.448647][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 245.766780][T10506] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1489'. [ 245.818928][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'. [ 245.925965][T10514] lo speed is unknown, defaulting to 1000 [ 246.165694][T10525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1494'. [ 246.182596][T10525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1494'. [ 246.206346][T10525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1494'. [ 246.226585][T10525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1494'. [ 246.458600][T10535] pimreg: entered allmulticast mode [ 246.566207][T10534] pimreg: left allmulticast mode [ 247.121551][T10554] netlink: 'syz.4.1505': attribute type 11 has an invalid length. [ 247.161038][T10554] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1505'. [ 247.377499][T10566] netlink: 'syz.3.1506': attribute type 5 has an invalid length. [ 247.552938][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1509'. [ 247.943409][T10587] FAULT_INJECTION: forcing a failure. [ 247.943409][T10587] name failslab, interval 1, probability 0, space 0, times 0 [ 247.982534][T10587] CPU: 0 UID: 0 PID: 10587 Comm: syz.2.1513 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 247.982561][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.982571][T10587] Call Trace: [ 247.982578][T10587] [ 247.982586][T10587] dump_stack_lvl+0x189/0x250 [ 247.982614][T10587] ? __pfx____ratelimit+0x10/0x10 [ 247.982643][T10587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.982666][T10587] ? __pfx__printk+0x10/0x10 [ 247.982688][T10587] ? __pfx___might_resched+0x10/0x10 [ 247.982710][T10587] ? fs_reclaim_acquire+0x7d/0x100 [ 247.982734][T10587] should_fail_ex+0x414/0x560 [ 247.982760][T10587] should_failslab+0xa8/0x100 [ 247.982778][T10587] __kmalloc_noprof+0xcb/0x4f0 [ 247.982794][T10587] ? ethnl_default_start+0x141/0x570 [ 247.982820][T10587] ethnl_default_start+0x141/0x570 [ 247.982847][T10587] genl_start+0x4c3/0x6c0 [ 247.982872][T10587] __netlink_dump_start+0x469/0x7e0 [ 247.982901][T10587] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 247.982928][T10587] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 247.982958][T10587] ? rcu_is_watching+0x15/0xb0 [ 247.982980][T10587] ? __pfx_genl_start+0x10/0x10 [ 247.982993][T10587] ? __pfx_genl_dumpit+0x10/0x10 [ 247.983006][T10587] ? __pfx_genl_done+0x10/0x10 [ 247.983026][T10587] ? bpf_lsm_capable+0x9/0x20 [ 247.983041][T10587] ? security_capable+0x7e/0x2e0 [ 247.983068][T10587] genl_rcv_msg+0x5da/0x790 [ 247.983099][T10587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.983118][T10587] ? ref_tracker_free+0x63a/0x7d0 [ 247.983136][T10587] ? __pfx_ethnl_default_start+0x10/0x10 [ 247.983154][T10587] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 247.983171][T10587] ? __pfx_ethnl_default_done+0x10/0x10 [ 247.983190][T10587] ? __pfx_ref_tracker_free+0x10/0x10 [ 247.983222][T10587] netlink_rcv_skb+0x205/0x470 [ 247.983244][T10587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.983267][T10587] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.983304][T10587] ? down_read+0x1ad/0x2e0 [ 247.983326][T10587] genl_rcv+0x28/0x40 [ 247.983350][T10587] netlink_unicast+0x758/0x8d0 [ 247.983381][T10587] netlink_sendmsg+0x805/0xb30 [ 247.983412][T10587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.983434][T10587] ? aa_sock_msg_perm+0x94/0x160 [ 247.983455][T10587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.983472][T10587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.983492][T10587] __sock_sendmsg+0x21c/0x270 [ 247.983515][T10587] ____sys_sendmsg+0x505/0x830 [ 247.983543][T10587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.983576][T10587] ? import_iovec+0x74/0xa0 [ 247.983598][T10587] ___sys_sendmsg+0x21f/0x2a0 [ 247.983628][T10587] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.983692][T10587] ? __fget_files+0x2a/0x420 [ 247.983709][T10587] ? __fget_files+0x3a0/0x420 [ 247.983739][T10587] __x64_sys_sendmsg+0x19b/0x260 [ 247.983764][T10587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.983798][T10587] ? __pfx_ksys_write+0x10/0x10 [ 247.983812][T10587] ? rcu_is_watching+0x15/0xb0 [ 247.983840][T10587] ? do_syscall_64+0xbe/0x3b0 [ 247.983861][T10587] do_syscall_64+0xfa/0x3b0 [ 247.983876][T10587] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.983892][T10587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.983909][T10587] ? clear_bhb_loop+0x60/0xb0 [ 247.983930][T10587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.983946][T10587] RIP: 0033:0x7f55d538e929 [ 247.983962][T10587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.983976][T10587] RSP: 002b:00007f55d6244038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.983995][T10587] RAX: ffffffffffffffda RBX: 00007f55d55b5fa0 RCX: 00007f55d538e929 [ 247.984007][T10587] RDX: 0000000000004004 RSI: 0000200000000340 RDI: 0000000000000005 [ 247.984018][T10587] RBP: 00007f55d6244090 R08: 0000000000000000 R09: 0000000000000000 [ 247.984029][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.984040][T10587] R13: 0000000000000000 R14: 00007f55d55b5fa0 R15: 00007ffede34c768 [ 247.984070][T10587] [ 248.488663][T10594] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1516'. [ 248.522993][T10594] netlink: zone id is out of range [ 248.538694][T10594] netlink: zone id is out of range [ 248.543848][T10594] netlink: get zone limit has 8 unknown bytes [ 248.969170][T10619] netlink: 'syz.0.1521': attribute type 2 has an invalid length. [ 249.548605][T10634] netlink: 'syz.4.1524': attribute type 10 has an invalid length. [ 249.899319][T10642] lo speed is unknown, defaulting to 1000 [ 250.153828][T10653] vlan0: entered promiscuous mode [ 250.583551][T10666] __nla_validate_parse: 8 callbacks suppressed [ 250.583569][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 250.600154][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 250.714685][T10671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1534'. [ 250.748607][T10671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1534'. [ 250.769106][T10671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1534'. [ 250.787930][T10671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1534'. [ 251.092806][T10679] pimreg: entered allmulticast mode [ 251.244666][T10678] pimreg: left allmulticast mode [ 251.509118][T10697] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 251.670476][T10709] FAULT_INJECTION: forcing a failure. [ 251.670476][T10709] name failslab, interval 1, probability 0, space 0, times 0 [ 251.697820][T10709] CPU: 0 UID: 0 PID: 10709 Comm: syz.3.1547 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 251.697845][T10709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.697855][T10709] Call Trace: [ 251.697862][T10709] [ 251.697870][T10709] dump_stack_lvl+0x189/0x250 [ 251.697898][T10709] ? __pfx____ratelimit+0x10/0x10 [ 251.697916][T10709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.697940][T10709] ? __pfx__printk+0x10/0x10 [ 251.697964][T10709] ? __pfx___might_resched+0x10/0x10 [ 251.697992][T10709] should_fail_ex+0x414/0x560 [ 251.698020][T10709] should_failslab+0xa8/0x100 [ 251.698041][T10709] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 251.698059][T10709] ? __alloc_skb+0x112/0x2d0 [ 251.698086][T10709] __alloc_skb+0x112/0x2d0 [ 251.698111][T10709] netlink_dump+0x22b/0xe20 [ 251.698132][T10709] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 251.698158][T10709] ? rcu_is_watching+0x15/0xb0 [ 251.698184][T10709] ? __pfx_netlink_dump+0x10/0x10 [ 251.698199][T10709] ? ethnl_default_start+0x173/0x570 [ 251.698231][T10709] ? genl_start+0x581/0x6c0 [ 251.698255][T10709] __netlink_dump_start+0x5cb/0x7e0 [ 251.698295][T10709] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 251.698322][T10709] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 251.698351][T10709] ? rcu_is_watching+0x15/0xb0 [ 251.698372][T10709] ? __pfx_genl_start+0x10/0x10 [ 251.698385][T10709] ? __pfx_genl_dumpit+0x10/0x10 [ 251.698398][T10709] ? __pfx_genl_done+0x10/0x10 [ 251.698417][T10709] ? bpf_lsm_capable+0x9/0x20 [ 251.698431][T10709] ? security_capable+0x7e/0x2e0 [ 251.698458][T10709] genl_rcv_msg+0x5da/0x790 [ 251.698488][T10709] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.698507][T10709] ? ref_tracker_free+0x63a/0x7d0 [ 251.698526][T10709] ? __pfx_ethnl_default_start+0x10/0x10 [ 251.698544][T10709] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 251.698561][T10709] ? __pfx_ethnl_default_done+0x10/0x10 [ 251.698582][T10709] ? __pfx_ref_tracker_free+0x10/0x10 [ 251.698613][T10709] netlink_rcv_skb+0x205/0x470 [ 251.698635][T10709] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.698660][T10709] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.698697][T10709] ? down_read+0x1ad/0x2e0 [ 251.698719][T10709] genl_rcv+0x28/0x40 [ 251.698739][T10709] netlink_unicast+0x758/0x8d0 [ 251.698768][T10709] netlink_sendmsg+0x805/0xb30 [ 251.698797][T10709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.698824][T10709] ? aa_sock_msg_perm+0x94/0x160 [ 251.698844][T10709] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.698862][T10709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.698883][T10709] __sock_sendmsg+0x21c/0x270 [ 251.698905][T10709] ____sys_sendmsg+0x505/0x830 [ 251.698931][T10709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.698960][T10709] ? import_iovec+0x74/0xa0 [ 251.698979][T10709] ___sys_sendmsg+0x21f/0x2a0 [ 251.699002][T10709] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.699060][T10709] ? __fget_files+0x2a/0x420 [ 251.699076][T10709] ? __fget_files+0x3a0/0x420 [ 251.699105][T10709] __x64_sys_sendmsg+0x19b/0x260 [ 251.699128][T10709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.699160][T10709] ? __pfx_ksys_write+0x10/0x10 [ 251.699173][T10709] ? rcu_is_watching+0x15/0xb0 [ 251.699199][T10709] ? do_syscall_64+0xbe/0x3b0 [ 251.699220][T10709] do_syscall_64+0xfa/0x3b0 [ 251.699236][T10709] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.699251][T10709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.699267][T10709] ? clear_bhb_loop+0x60/0xb0 [ 251.699297][T10709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.699312][T10709] RIP: 0033:0x7fa0b178e929 [ 251.699329][T10709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.699344][T10709] RSP: 002b:00007fa0b2547038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.699363][T10709] RAX: ffffffffffffffda RBX: 00007fa0b19b5fa0 RCX: 00007fa0b178e929 [ 251.699376][T10709] RDX: 0000000000004004 RSI: 0000200000000340 RDI: 0000000000000005 [ 251.699387][T10709] RBP: 00007fa0b2547090 R08: 0000000000000000 R09: 0000000000000000 [ 251.699398][T10709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.699408][T10709] R13: 0000000000000000 R14: 00007fa0b19b5fa0 R15: 00007ffdaa0cde28 [ 251.699439][T10709] [ 251.722389][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 252.134163][T10712] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 252.298820][T10722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1550'. [ 252.644374][T10732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1553'. [ 252.669495][T10732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1553'. [ 252.947847][T10749] netlink: 'syz.1.1561': attribute type 2 has an invalid length. [ 253.079580][T10756] FAULT_INJECTION: forcing a failure. [ 253.079580][T10756] name failslab, interval 1, probability 0, space 0, times 0 [ 253.300246][T10756] CPU: 1 UID: 0 PID: 10756 Comm: syz.4.1564 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 253.300273][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.300284][T10756] Call Trace: [ 253.300292][T10756] [ 253.300300][T10756] dump_stack_lvl+0x189/0x250 [ 253.300328][T10756] ? __pfx____ratelimit+0x10/0x10 [ 253.300346][T10756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.300369][T10756] ? __pfx__printk+0x10/0x10 [ 253.300393][T10756] ? __pfx___might_resched+0x10/0x10 [ 253.300420][T10756] should_fail_ex+0x414/0x560 [ 253.300447][T10756] should_failslab+0xa8/0x100 [ 253.300467][T10756] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 253.300485][T10756] ? __get_vm_area_node+0x13f/0x300 [ 253.300507][T10756] __get_vm_area_node+0x13f/0x300 [ 253.300530][T10756] __vmalloc_node_range_noprof+0x301/0x12f0 [ 253.300549][T10756] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 253.300574][T10756] ? is_bpf_text_address+0x26/0x2b0 [ 253.300621][T10756] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 253.300637][T10756] ? __might_fault+0xb0/0x130 [ 253.300653][T10756] ? __pfx_aa_get_newest_label+0x10/0x10 [ 253.300674][T10756] ? _parse_integer_limit+0x1ae/0x1f0 [ 253.300700][T10756] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 253.300719][T10756] __vmalloc_noprof+0xb1/0xf0 [ 253.300737][T10756] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 253.300761][T10756] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 253.300788][T10756] bpf_prog_alloc+0x3c/0x1a0 [ 253.300812][T10756] bpf_prog_load+0x735/0x1930 [ 253.300846][T10756] ? __pfx_bpf_prog_load+0x10/0x10 [ 253.300890][T10756] ? bpf_lsm_bpf+0x9/0x20 [ 253.300903][T10756] ? security_bpf+0x7e/0x300 [ 253.300925][T10756] __sys_bpf+0x5f1/0x860 [ 253.300948][T10756] ? __pfx___sys_bpf+0x10/0x10 [ 253.300981][T10756] ? ksys_write+0x22a/0x250 [ 253.301000][T10756] ? __pfx_ksys_write+0x10/0x10 [ 253.301023][T10756] __x64_sys_bpf+0x7c/0x90 [ 253.301044][T10756] do_syscall_64+0xfa/0x3b0 [ 253.301060][T10756] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.301076][T10756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.301092][T10756] ? clear_bhb_loop+0x60/0xb0 [ 253.301113][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.301129][T10756] RIP: 0033:0x7f529798e929 [ 253.301145][T10756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.301160][T10756] RSP: 002b:00007f52987de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.301185][T10756] RAX: ffffffffffffffda RBX: 00007f5297bb5fa0 RCX: 00007f529798e929 [ 253.301197][T10756] RDX: 0000000000000083 RSI: 00002000000004c0 RDI: 0000000000000005 [ 253.301208][T10756] RBP: 00007f52987de090 R08: 0000000000000000 R09: 0000000000000000 [ 253.301219][T10756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.301229][T10756] R13: 0000000000000001 R14: 00007f5297bb5fa0 R15: 00007ffddd43fdb8 [ 253.301257][T10756] [ 253.302442][T10756] syz.4.1564: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 253.591522][T10769] x_tables: duplicate underflow at hook 2 [ 253.619462][T10756] ,cpuset=/,mems_allowed=0-1 [ 253.624916][T10756] CPU: 0 UID: 0 PID: 10756 Comm: syz.4.1564 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 253.624942][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.624952][T10756] Call Trace: [ 253.624959][T10756] [ 253.624967][T10756] dump_stack_lvl+0x189/0x250 [ 253.624998][T10756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.625022][T10756] ? __pfx__printk+0x10/0x10 [ 253.625040][T10756] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 253.625059][T10756] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 253.625080][T10756] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 253.625101][T10756] warn_alloc+0x214/0x310 [ 253.625126][T10756] ? __pfx_warn_alloc+0x10/0x10 [ 253.625146][T10756] ? __get_vm_area_node+0x13f/0x300 [ 253.625165][T10756] ? __get_vm_area_node+0x2b5/0x300 [ 253.625189][T10756] __vmalloc_node_range_noprof+0x326/0x12f0 [ 253.625210][T10756] ? is_bpf_text_address+0x26/0x2b0 [ 253.625257][T10756] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 253.625274][T10756] ? __might_fault+0xb0/0x130 [ 253.625290][T10756] ? __pfx_aa_get_newest_label+0x10/0x10 [ 253.625311][T10756] ? _parse_integer_limit+0x1ae/0x1f0 [ 253.625338][T10756] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 253.625358][T10756] __vmalloc_noprof+0xb1/0xf0 [ 253.625376][T10756] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 253.625407][T10756] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 253.625434][T10756] bpf_prog_alloc+0x3c/0x1a0 [ 253.625458][T10756] bpf_prog_load+0x735/0x1930 [ 253.625490][T10756] ? __pfx_bpf_prog_load+0x10/0x10 [ 253.625532][T10756] ? bpf_lsm_bpf+0x9/0x20 [ 253.625545][T10756] ? security_bpf+0x7e/0x300 [ 253.625571][T10756] __sys_bpf+0x5f1/0x860 [ 253.625594][T10756] ? __pfx___sys_bpf+0x10/0x10 [ 253.625628][T10756] ? ksys_write+0x22a/0x250 [ 253.625647][T10756] ? __pfx_ksys_write+0x10/0x10 [ 253.625671][T10756] __x64_sys_bpf+0x7c/0x90 [ 253.625691][T10756] do_syscall_64+0xfa/0x3b0 [ 253.625707][T10756] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.625724][T10756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.625741][T10756] ? clear_bhb_loop+0x60/0xb0 [ 253.625762][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.625778][T10756] RIP: 0033:0x7f529798e929 [ 253.625793][T10756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.625807][T10756] RSP: 002b:00007f52987de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.625825][T10756] RAX: ffffffffffffffda RBX: 00007f5297bb5fa0 RCX: 00007f529798e929 [ 253.625837][T10756] RDX: 0000000000000083 RSI: 00002000000004c0 RDI: 0000000000000005 [ 253.625848][T10756] RBP: 00007f52987de090 R08: 0000000000000000 R09: 0000000000000000 [ 253.625859][T10756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.625868][T10756] R13: 0000000000000001 R14: 00007f5297bb5fa0 R15: 00007ffddd43fdb8 [ 253.625897][T10756] [ 253.625966][T10756] Mem-Info: [ 253.853909][T10774] SET target dimension over the limit! [ 253.873535][T10756] active_anon:5235 inactive_anon:0 isolated_anon:0 [ 253.873535][T10756] active_file:1957 inactive_file:39895 isolated_file:0 [ 253.873535][T10756] unevictable:768 dirty:389 writeback:0 [ 253.873535][T10756] slab_reclaimable:11252 slab_unreclaimable:116843 [ 253.873535][T10756] mapped:29664 shmem:1365 pagetables:1294 [ 253.873535][T10756] sec_pagetables:0 bounce:0 [ 253.873535][T10756] kernel_misc_reclaimable:0 [ 253.873535][T10756] free:1309773 free_pcp:16724 free_cma:0 [ 254.056536][T10756] Node 0 active_anon:21328kB inactive_anon:0kB active_file:7828kB inactive_file:159388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118556kB dirty:1568kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11936kB pagetables:4952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 254.149632][T10756] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 254.219707][T10756] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.254459][T10756] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 254.260782][T10756] Node 0 DMA32 free:1320844kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22780kB inactive_anon:0kB active_file:7828kB inactive_file:157560kB unevictable:1536kB writepending:1568kB present:3129332kB managed:2561012kB mlocked:0kB bounce:0kB free_pcp:46596kB local_pcp:28628kB free_cma:0kB [ 254.295611][T10784] netlink: 'syz.0.1571': attribute type 2 has an invalid length. [ 254.312253][T10756] lowmem_reserve[]: 0 0 1 1 1 [ 254.331892][T10756] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 254.361641][T10756] lowmem_reserve[]: 0 0 0 0 0 [ 254.396879][T10756] Node 1 Normal free:3902928kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18724kB local_pcp:11296kB free_cma:0kB [ 254.429546][T10756] lowmem_reserve[]: 0 0 0 0 0 [ 254.434530][T10756] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 254.450469][T10756] Node 0 DMA32: 607*4kB (UM) 502*8kB (UM) 610*16kB (UME) 844*32kB (UME) 505*64kB (UME) 263*128kB (UM) 185*256kB (UM) 150*512kB (UME) 104*1024kB (UME) 5*2048kB (UM) 237*4096kB (M) = 1320844kB [ 254.470374][T10756] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 254.483511][T10756] Node 1 Normal: 176*4kB (UE) 42*8kB (UME) 30*16kB (UME) 69*32kB (UME) 23*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3902928kB [ 254.508992][T10756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 254.522291][T10756] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 254.532795][T10756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 254.544188][T10756] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 254.554734][T10756] 43215 total pagecache pages [ 254.560684][T10756] 0 pages in swap cache [ 254.564972][T10756] Free swap = 124996kB [ 254.573909][T10756] Total swap = 124996kB [ 254.579171][T10756] 2097051 pages RAM [ 254.583063][T10756] 0 pages HighMem/MovableOnly [ 254.591959][T10756] 424692 pages reserved [ 254.598619][T10756] 0 pages cma reserved [ 254.750986][T10799] lo speed is unknown, defaulting to 1000 [ 254.783241][T10801] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 255.232690][ T24] hid-generic 0005:16C0:5505.0013: unknown main item tag 0x0 [ 255.252895][ T24] hid-generic 0005:16C0:5505.0013: unknown main item tag 0x0 [ 255.279455][ T24] hid-generic 0005:16C0:5505.0013: unknown main item tag 0x0 [ 255.302492][ T24] hid-generic 0005:16C0:5505.0013: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 255.403595][T10822] lo speed is unknown, defaulting to 1000 [ 255.499035][T10825] syzkaller1: entered promiscuous mode [ 255.504544][T10825] syzkaller1: entered allmulticast mode [ 255.750926][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.767052][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.964777][T10845] __nla_validate_parse: 5 callbacks suppressed [ 255.964794][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 256.045890][T10854] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1594'. [ 256.057688][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1594'. [ 256.218425][T10857] vlan0: entered promiscuous mode [ 256.549175][ T5846] hid-generic 0005:16C0:5505.0014: unknown main item tag 0x0 [ 256.596254][ T5846] hid-generic 0005:16C0:5505.0014: unknown main item tag 0x0 [ 256.626264][ T5846] hid-generic 0005:16C0:5505.0014: unknown main item tag 0x0 [ 256.668404][ T5846] hid-generic 0005:16C0:5505.0014: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 256.753651][T10868] netlink: 'syz.2.1600': attribute type 11 has an invalid length. [ 256.783704][T10868] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 256.871572][T10876] Cannot find del_set index 1 as target [ 257.189543][T10895] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1606'. [ 257.221985][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 257.389793][ T24] hid-generic 0005:16C0:5505.0015: unknown main item tag 0x0 [ 257.404021][ T24] hid-generic 0005:16C0:5505.0015: unknown main item tag 0x0 [ 257.405666][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 257.412246][ T24] hid-generic 0005:16C0:5505.0015: unknown main item tag 0x0 [ 257.412277][ T24] hid-generic 0005:16C0:5505.0015: unknown main item tag 0x0 [ 257.412303][ T24] hid-generic 0005:16C0:5505.0015: unknown main item tag 0x0 [ 257.452340][ T24] hid-generic 0005:16C0:5505.0015: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 257.452757][T10907] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 257.472034][T10907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.639969][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 257.690161][T10926] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1616'. [ 257.712155][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1616'. [ 257.736214][T10926] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1616'. [ 258.430992][T10943] openvswitch: netlink: Multiple metadata blocks provided [ 258.544529][ T5893] hid-generic 0005:16C0:5505.0016: unknown main item tag 0x0 [ 258.570876][ T5893] hid-generic 0005:16C0:5505.0016: unknown main item tag 0x0 [ 258.625624][ T5893] hid-generic 0005:16C0:5505.0016: unknown main item tag 0x0 [ 258.679318][ T5893] hid-generic 0005:16C0:5505.0016: unknown main item tag 0x0 [ 258.702085][ T5893] hid-generic 0005:16C0:5505.0016: unknown main item tag 0x0 [ 258.724295][ T5893] hid-generic 0005:16C0:5505.0016: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 258.731033][T10961] vlan2: entered promiscuous mode [ 258.756572][T10961] vlan2: entered allmulticast mode [ 258.769112][T10961] hsr_slave_1: entered allmulticast mode [ 259.357583][T10993] vlan0: entered promiscuous mode [ 259.385032][T10993] tipc: Enabling of bearer rejected, failed to enable media [ 259.455956][ T5915] hid-generic 0005:16C0:5505.0017: unknown main item tag 0x0 [ 259.483630][ T5915] hid-generic 0005:16C0:5505.0017: unknown main item tag 0x0 [ 259.511286][ T5915] hid-generic 0005:16C0:5505.0017: unknown main item tag 0x0 [ 259.532440][ T5915] hid-generic 0005:16C0:5505.0017: unknown main item tag 0x0 [ 259.548752][ T5915] hid-generic 0005:16C0:5505.0017: unknown main item tag 0x0 [ 259.563930][ T5915] hid-generic 0005:16C0:5505.0017: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 259.683830][T11012] vlan2: entered promiscuous mode [ 259.861484][T11020] Cannot find del_set index 1 as target [ 259.870719][T11024] netlink: 'syz.0.1653': attribute type 1 has an invalid length. [ 259.910768][T11024] bond4: entered promiscuous mode [ 259.915945][T11024] bond4: entered allmulticast mode [ 259.939713][T11024] bond4: (slave ip6gretap1): making interface the new active one [ 259.947660][T11024] ip6gretap1: entered promiscuous mode [ 259.953386][T11024] ip6gretap1: entered allmulticast mode [ 259.961498][T11024] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 260.250421][T11045] netlink: 'syz.1.1663': attribute type 11 has an invalid length. [ 260.332209][T11055] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 260.385110][T11061] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 260.399337][T11061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.715838][ T24] hid-generic 0005:16C0:5505.0018: unknown main item tag 0x0 [ 260.723468][ T24] hid-generic 0005:16C0:5505.0018: unknown main item tag 0x0 [ 260.735524][ T24] hid-generic 0005:16C0:5505.0018: unknown main item tag 0x0 [ 260.780084][ T24] hid-generic 0005:16C0:5505.0018: unknown main item tag 0x0 [ 260.800273][ T24] hid-generic 0005:16C0:5505.0018: unknown main item tag 0x0 [ 260.834563][ T24] hid-generic 0005:16C0:5505.0018: unknown main item tag 0x0 [ 260.863247][ T24] hid-generic 0005:16C0:5505.0018: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 261.099209][T11110] __nla_validate_parse: 16 callbacks suppressed [ 261.099230][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1685'. [ 261.151372][T11113] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1686'. [ 261.163125][T11109] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1686'. [ 261.205456][T11109] netlink: 'syz.2.1686': attribute type 1 has an invalid length. [ 261.245898][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 261.513506][T11134] vlan3: entered promiscuous mode [ 261.579763][T11139] Cannot find del_set index 1 as target [ 261.919173][T11158] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1705'. [ 261.928293][T11158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1705'. [ 261.937908][T11158] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1705'. [ 261.947045][T11158] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1705'. [ 262.460485][T11170] netlink: 'syz.4.1711': attribute type 11 has an invalid length. [ 262.514485][T11168] syzkaller0: entered promiscuous mode [ 262.541215][T11168] syzkaller0: entered allmulticast mode [ 262.886676][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 262.897382][T11181] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 262.904557][T11181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.166457][T11184] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1714'. [ 264.609516][T11209] 8021q: VLANs not supported on nlmon0 [ 264.782246][T11219] vlan0: entered promiscuous mode [ 264.934469][T11231] netlink: 'syz.3.1733': attribute type 10 has an invalid length. [ 264.978578][T11227] lo speed is unknown, defaulting to 1000 [ 265.193939][T11239] lo speed is unknown, defaulting to 1000 [ 265.437239][T11254] netlink: 'syz.4.1737': attribute type 11 has an invalid length. [ 265.666363][T11264] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 265.708673][T11265] lo speed is unknown, defaulting to 1000 [ 265.843041][T11272] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 265.850617][T11272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.209339][T11291] __nla_validate_parse: 5 callbacks suppressed [ 266.209356][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1749'. [ 266.591171][T11306] netlink: 'syz.4.1752': attribute type 10 has an invalid length. [ 266.695886][T11302] syzkaller0: entered promiscuous mode [ 266.724782][T11302] syzkaller0: entered allmulticast mode [ 266.815565][T11306] bridge0: port 3(dummy0) entered blocking state [ 266.822320][T11306] bridge0: port 3(dummy0) entered forwarding state [ 266.848011][T11306] team0: Port device bridge0 added [ 266.905843][T11314] FAULT_INJECTION: forcing a failure. [ 266.905843][T11314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.996255][T11314] CPU: 1 UID: 0 PID: 11314 Comm: syz.3.1753 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 266.996283][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.996294][T11314] Call Trace: [ 266.996301][T11314] [ 266.996308][T11314] dump_stack_lvl+0x189/0x250 [ 266.996338][T11314] ? __pfx____ratelimit+0x10/0x10 [ 266.996355][T11314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.996378][T11314] ? __pfx__printk+0x10/0x10 [ 266.996396][T11314] ? __might_fault+0xb0/0x130 [ 266.996424][T11314] should_fail_ex+0x414/0x560 [ 266.996451][T11314] _copy_from_user+0x2d/0xb0 [ 266.996469][T11314] ___sys_sendmsg+0x158/0x2a0 [ 266.996495][T11314] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.996555][T11314] ? __fget_files+0x2a/0x420 [ 266.996573][T11314] ? __fget_files+0x3a0/0x420 [ 266.996602][T11314] __sys_sendmmsg+0x227/0x430 [ 266.996629][T11314] ? __pfx___sys_sendmmsg+0x10/0x10 [ 266.996649][T11314] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 266.996692][T11314] ? ksys_write+0x22a/0x250 [ 266.996711][T11314] ? __pfx_ksys_write+0x10/0x10 [ 266.996724][T11314] ? rcu_is_watching+0x15/0xb0 [ 266.996754][T11314] __x64_sys_sendmmsg+0xa0/0xc0 [ 266.996778][T11314] do_syscall_64+0xfa/0x3b0 [ 266.996794][T11314] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.996810][T11314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.996827][T11314] ? clear_bhb_loop+0x60/0xb0 [ 266.996848][T11314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.996864][T11314] RIP: 0033:0x7fa0b178e929 [ 266.996880][T11314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.996895][T11314] RSP: 002b:00007fa0b2547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 266.996912][T11314] RAX: ffffffffffffffda RBX: 00007fa0b19b5fa0 RCX: 00007fa0b178e929 [ 266.996924][T11314] RDX: 0000000000000001 RSI: 0000200000001f40 RDI: 0000000000000003 [ 266.996934][T11314] RBP: 00007fa0b2547090 R08: 0000000000000000 R09: 0000000000000000 [ 266.996943][T11314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.996953][T11314] R13: 0000000000000000 R14: 00007fa0b19b5fa0 R15: 00007ffdaa0cde28 [ 266.996979][T11314] [ 267.498223][T11331] netlink: 'syz.3.1758': attribute type 10 has an invalid length. [ 267.506768][T11331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1758'. [ 267.604232][T11338] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1758'. [ 268.377397][T11363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1763'. [ 268.410005][T11363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1763'. [ 268.436603][T11363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1763'. [ 268.468148][T11363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1763'. [ 269.144768][T11369] FAULT_INJECTION: forcing a failure. [ 269.144768][T11369] name failslab, interval 1, probability 0, space 0, times 0 [ 269.159385][T11369] CPU: 0 UID: 0 PID: 11369 Comm: syz.2.1764 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 269.159412][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.159423][T11369] Call Trace: [ 269.159430][T11369] [ 269.159438][T11369] dump_stack_lvl+0x189/0x250 [ 269.159467][T11369] ? __pfx____ratelimit+0x10/0x10 [ 269.159484][T11369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.159507][T11369] ? __pfx__printk+0x10/0x10 [ 269.159528][T11369] ? __pfx___might_resched+0x10/0x10 [ 269.159551][T11369] ? fs_reclaim_acquire+0x7d/0x100 [ 269.159576][T11369] should_fail_ex+0x414/0x560 [ 269.159600][T11369] should_failslab+0xa8/0x100 [ 269.159617][T11369] __kmalloc_noprof+0xcb/0x4f0 [ 269.159633][T11369] ? tomoyo_encode+0x28b/0x550 [ 269.159658][T11369] tomoyo_encode+0x28b/0x550 [ 269.159685][T11369] tomoyo_realpath_from_path+0x58d/0x5d0 [ 269.159708][T11369] ? tomoyo_domain+0xd9/0x130 [ 269.159731][T11369] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 269.159748][T11369] tomoyo_path_number_perm+0x1e8/0x5a0 [ 269.159767][T11369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 269.159802][T11369] ? __lock_acquire+0xab9/0xd20 [ 269.159844][T11369] ? __fget_files+0x2a/0x420 [ 269.159865][T11369] ? __fget_files+0x2a/0x420 [ 269.159881][T11369] ? __fget_files+0x3a0/0x420 [ 269.159896][T11369] ? __fget_files+0x2a/0x420 [ 269.159930][T11369] security_file_ioctl+0xcb/0x2d0 [ 269.159951][T11369] __se_sys_ioctl+0x47/0x170 [ 269.159977][T11369] do_syscall_64+0xfa/0x3b0 [ 269.159993][T11369] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.160009][T11369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.160026][T11369] ? clear_bhb_loop+0x60/0xb0 [ 269.160046][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.160061][T11369] RIP: 0033:0x7f55d538e929 [ 269.160077][T11369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.160091][T11369] RSP: 002b:00007f55d6244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.160109][T11369] RAX: ffffffffffffffda RBX: 00007f55d55b5fa0 RCX: 00007f55d538e929 [ 269.160121][T11369] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 269.160131][T11369] RBP: 00007f55d6244090 R08: 0000000000000000 R09: 0000000000000000 [ 269.160140][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.160149][T11369] R13: 0000000000000000 R14: 00007f55d55b5fa0 R15: 00007ffede34c768 [ 269.160172][T11369] [ 269.160193][T11369] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.474692][T11371] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1765'. [ 269.484596][T11372] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1765'. [ 270.009376][T11318] lo speed is unknown, defaulting to 1000 [ 270.057597][T11344] lo speed is unknown, defaulting to 1000 [ 270.132232][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 270.151168][T11376] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 270.241340][ T5846] hid-generic 0005:16C0:5505.0019: unknown main item tag 0x0 [ 270.260620][ T5846] hid-generic 0005:16C0:5505.0019: unknown main item tag 0x0 [ 270.282655][ T5846] hid-generic 0005:16C0:5505.0019: unknown main item tag 0x0 [ 270.290927][ T5846] hid-generic 0005:16C0:5505.0019: unknown main item tag 0x0 [ 270.298545][ T5846] hid-generic 0005:16C0:5505.0019: unknown main item tag 0x0 [ 270.306279][ T5846] hid-generic 0005:16C0:5505.0019: unknown main item tag 0x0 [ 270.320989][ T5846] hid-generic 0005:16C0:5505.0019: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 270.805071][T11414] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 270.820711][T11414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.846937][T11419] Illegal XDP return value 5 on prog (id 567) dev N/A, expect packet loss! [ 271.076876][ T24] hid-generic 0005:16C0:5505.001A: unknown main item tag 0x0 [ 271.078949][T11432] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 271.085214][T11434] FAULT_INJECTION: forcing a failure. [ 271.085214][T11434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.116708][ T24] hid-generic 0005:16C0:5505.001A: unknown main item tag 0x0 [ 271.134368][ T24] hid-generic 0005:16C0:5505.001A: unknown main item tag 0x0 [ 271.136601][T11434] CPU: 0 UID: 0 PID: 11434 Comm: syz.3.1784 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 271.136626][T11434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.136636][T11434] Call Trace: [ 271.136643][T11434] [ 271.136651][T11434] dump_stack_lvl+0x189/0x250 [ 271.136679][T11434] ? __pfx____ratelimit+0x10/0x10 [ 271.136696][T11434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.136718][T11434] ? __pfx__printk+0x10/0x10 [ 271.136737][T11434] ? __might_fault+0xb0/0x130 [ 271.136764][T11434] should_fail_ex+0x414/0x560 [ 271.136797][T11434] _copy_from_user+0x2d/0xb0 [ 271.136814][T11434] hidp_sock_ioctl+0x1c7/0x560 [ 271.136836][T11434] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 271.136896][T11434] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 271.136916][T11434] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 271.136946][T11434] sock_do_ioctl+0xdc/0x300 [ 271.136966][T11434] ? __pfx_sock_do_ioctl+0x10/0x10 [ 271.136981][T11434] ? __lock_acquire+0xab9/0xd20 [ 271.137017][T11434] sock_ioctl+0x576/0x790 [ 271.137036][T11434] ? __pfx_sock_ioctl+0x10/0x10 [ 271.137053][T11434] ? __fget_files+0x2a/0x420 [ 271.137069][T11434] ? __fget_files+0x3a0/0x420 [ 271.137085][T11434] ? __fget_files+0x2a/0x420 [ 271.137105][T11434] ? bpf_lsm_file_ioctl+0x9/0x20 [ 271.137127][T11434] ? __pfx_sock_ioctl+0x10/0x10 [ 271.137143][T11434] __se_sys_ioctl+0xfc/0x170 [ 271.137168][T11434] do_syscall_64+0xfa/0x3b0 [ 271.137184][T11434] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.137199][T11434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.137216][T11434] ? clear_bhb_loop+0x60/0xb0 [ 271.137235][T11434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.137251][T11434] RIP: 0033:0x7fa0b178e929 [ 271.137266][T11434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.137280][T11434] RSP: 002b:00007fa0b2547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.137298][T11434] RAX: ffffffffffffffda RBX: 00007fa0b19b5fa0 RCX: 00007fa0b178e929 [ 271.137310][T11434] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 271.137321][T11434] RBP: 00007fa0b2547090 R08: 0000000000000000 R09: 0000000000000000 [ 271.137331][T11434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.137341][T11434] R13: 0000000000000000 R14: 00007fa0b19b5fa0 R15: 00007ffdaa0cde28 [ 271.137368][T11434] [ 271.237242][T11439] netlink: 'syz.1.1783': attribute type 11 has an invalid length. [ 271.245153][ T24] hid-generic 0005:16C0:5505.001A: unknown main item tag 0x0 [ 271.355680][T11444] __nla_validate_parse: 1 callbacks suppressed [ 271.355699][T11444] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1788'. [ 271.364831][ T24] hid-generic 0005:16C0:5505.001A: unknown main item tag 0x0 [ 271.584778][ T24] hid-generic 0005:16C0:5505.001A: unknown main item tag 0x0 [ 271.646027][ T24] hid-generic 0005:16C0:5505.001A: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 271.803370][T11466] netlink: 'syz.1.1792': attribute type 6 has an invalid length. [ 271.803888][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 271.822943][T11466] netlink: 'syz.1.1792': attribute type 7 has an invalid length. [ 271.835670][T11466] netlink: 'syz.1.1792': attribute type 8 has an invalid length. [ 271.875585][T11465] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 272.005686][T11462] syzkaller0: entered promiscuous mode [ 272.039598][T11462] syzkaller0: entered allmulticast mode [ 272.704725][T11507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1804'. [ 272.714393][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1804'. [ 272.724049][T11507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1804'. [ 272.733257][T11507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1804'. [ 273.554240][T11514] netlink: 'syz.1.1807': attribute type 10 has an invalid length. [ 273.568480][T11514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1807'. [ 273.787946][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 273.824387][T11511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1806'. [ 273.848281][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 273.854175][T11511] netlink: 'syz.0.1806': attribute type 4 has an invalid length. [ 273.969533][T11516] lo speed is unknown, defaulting to 1000 [ 274.051705][T11529] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 274.059527][T11529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.144894][T11532] FAULT_INJECTION: forcing a failure. [ 274.144894][T11532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.162656][T11532] CPU: 1 UID: 0 PID: 11532 Comm: syz.4.1813 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 274.162683][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.162694][T11532] Call Trace: [ 274.162700][T11532] [ 274.162708][T11532] dump_stack_lvl+0x189/0x250 [ 274.162736][T11532] ? __pfx____ratelimit+0x10/0x10 [ 274.162754][T11532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.162777][T11532] ? __pfx__printk+0x10/0x10 [ 274.162795][T11532] ? __might_fault+0xb0/0x130 [ 274.162823][T11532] should_fail_ex+0x414/0x560 [ 274.162849][T11532] _copy_from_user+0x2d/0xb0 [ 274.162866][T11532] ____sys_sendmsg+0x2fe/0x830 [ 274.162896][T11532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.162927][T11532] ? import_iovec+0x74/0xa0 [ 274.162948][T11532] ___sys_sendmsg+0x21f/0x2a0 [ 274.162973][T11532] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.163032][T11532] ? __fget_files+0x2a/0x420 [ 274.163048][T11532] ? __fget_files+0x3a0/0x420 [ 274.163076][T11532] __sys_sendmmsg+0x227/0x430 [ 274.163105][T11532] ? __pfx___sys_sendmmsg+0x10/0x10 [ 274.163124][T11532] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 274.163169][T11532] ? ksys_write+0x22a/0x250 [ 274.163187][T11532] ? __pfx_ksys_write+0x10/0x10 [ 274.163200][T11532] ? rcu_is_watching+0x15/0xb0 [ 274.163231][T11532] __x64_sys_sendmmsg+0xa0/0xc0 [ 274.163260][T11532] do_syscall_64+0xfa/0x3b0 [ 274.163276][T11532] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.163292][T11532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.163309][T11532] ? clear_bhb_loop+0x60/0xb0 [ 274.163330][T11532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.163346][T11532] RIP: 0033:0x7f529798e929 [ 274.163361][T11532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.163375][T11532] RSP: 002b:00007f52987de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 274.163395][T11532] RAX: ffffffffffffffda RBX: 00007f5297bb5fa0 RCX: 00007f529798e929 [ 274.163407][T11532] RDX: 0000000000000001 RSI: 0000200000001f40 RDI: 0000000000000003 [ 274.163418][T11532] RBP: 00007f52987de090 R08: 0000000000000000 R09: 0000000000000000 [ 274.163429][T11532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.163440][T11532] R13: 0000000000000000 R14: 00007f5297bb5fa0 R15: 00007ffddd43fdb8 [ 274.163468][T11532] [ 275.462988][T11579] pim6reg1: entered promiscuous mode [ 275.472134][T11579] pim6reg1: entered allmulticast mode [ 275.839740][T11594] bridge_slave_0: invalid flags given to default FDB implementation [ 275.945695][T11594] lo speed is unknown, defaulting to 1000 [ 276.119100][T11604] FAULT_INJECTION: forcing a failure. [ 276.119100][T11604] name failslab, interval 1, probability 0, space 0, times 0 [ 276.163495][T11604] CPU: 0 UID: 0 PID: 11604 Comm: syz.0.1842 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 276.163522][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.163532][T11604] Call Trace: [ 276.163539][T11604] [ 276.163548][T11604] dump_stack_lvl+0x189/0x250 [ 276.163576][T11604] ? __pfx____ratelimit+0x10/0x10 [ 276.163594][T11604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.163617][T11604] ? __pfx__printk+0x10/0x10 [ 276.163639][T11604] ? __pfx___might_resched+0x10/0x10 [ 276.163663][T11604] ? fs_reclaim_acquire+0x7d/0x100 [ 276.163687][T11604] should_fail_ex+0x414/0x560 [ 276.163714][T11604] should_failslab+0xa8/0x100 [ 276.163735][T11604] __kmalloc_noprof+0xcb/0x4f0 [ 276.163750][T11604] ? kobject_get_path+0xc5/0x2d0 [ 276.163773][T11604] kobject_get_path+0xc5/0x2d0 [ 276.163798][T11604] kobject_uevent_env+0x292/0x8c0 [ 276.163829][T11604] device_del+0x73a/0x8e0 [ 276.163858][T11604] ? __pfx_device_del+0x10/0x10 [ 276.163889][T11604] device_destroy+0xa6/0x160 [ 276.163908][T11604] ? __pfx_device_destroy+0x10/0x10 [ 276.163924][T11604] ? down_write+0x162/0x1f0 [ 276.163942][T11604] ? __pfx_down_write+0x10/0x10 [ 276.163960][T11604] ? up_write+0x1c4/0x420 [ 276.163983][T11604] drop_ref+0x100/0x360 [ 276.164001][T11604] hidraw_disconnect+0x4f/0x60 [ 276.164016][T11604] hid_device_remove+0x1c2/0x370 [ 276.164039][T11604] ? __pfx_hid_device_remove+0x10/0x10 [ 276.164061][T11604] device_release_driver_internal+0x46c/0x7c0 [ 276.164089][T11604] bus_remove_device+0x34d/0x410 [ 276.164117][T11604] device_del+0x511/0x8e0 [ 276.164137][T11604] ? enable_work+0x258/0x2c0 [ 276.164156][T11604] ? __pfx_device_del+0x10/0x10 [ 276.164185][T11604] hid_destroy_device+0x6b/0x1b0 [ 276.164208][T11604] hidp_session_remove+0x10e/0x260 [ 276.164229][T11604] l2cap_unregister_user+0x18e/0x1b0 [ 276.164253][T11604] hidp_connection_del+0xb0/0x170 [ 276.164273][T11604] hidp_sock_ioctl+0x317/0x560 [ 276.164295][T11604] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 276.164364][T11604] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 276.164385][T11604] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 276.164417][T11604] sock_do_ioctl+0xdc/0x300 [ 276.164445][T11604] ? __pfx_sock_do_ioctl+0x10/0x10 [ 276.164460][T11604] ? __lock_acquire+0xab9/0xd20 [ 276.164500][T11604] sock_ioctl+0x576/0x790 [ 276.164525][T11604] ? __pfx_sock_ioctl+0x10/0x10 [ 276.164543][T11604] ? __fget_files+0x2a/0x420 [ 276.164560][T11604] ? __fget_files+0x3a0/0x420 [ 276.164577][T11604] ? __fget_files+0x2a/0x420 [ 276.164596][T11604] ? bpf_lsm_file_ioctl+0x9/0x20 [ 276.164618][T11604] ? __pfx_sock_ioctl+0x10/0x10 [ 276.164635][T11604] __se_sys_ioctl+0xfc/0x170 [ 276.164661][T11604] do_syscall_64+0xfa/0x3b0 [ 276.164677][T11604] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.164693][T11604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.164709][T11604] ? clear_bhb_loop+0x60/0xb0 [ 276.164731][T11604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.164747][T11604] RIP: 0033:0x7fab8418e929 [ 276.164762][T11604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.164777][T11604] RSP: 002b:00007fab850c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.164796][T11604] RAX: ffffffffffffffda RBX: 00007fab843b5fa0 RCX: 00007fab8418e929 [ 276.164809][T11604] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 276.164820][T11604] RBP: 00007fab850c7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.164831][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.164841][T11604] R13: 0000000000000000 R14: 00007fab843b5fa0 R15: 00007ffe85e57308 [ 276.164871][T11604] [ 276.594273][T11617] __nla_validate_parse: 4 callbacks suppressed [ 276.594291][T11617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1845'. [ 276.640016][T11610] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 276.666893][T11619] netlink: 'syz.4.1845': attribute type 9 has an invalid length. [ 276.882290][T11626] can: request_module (can-proto-3) failed. [ 277.052825][T11628] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1837'. [ 277.162578][T11641] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1851'. [ 277.195294][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 277.795609][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'. [ 277.892976][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'. [ 277.940976][T11680] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 277.948043][T11683] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1865'. [ 278.020513][T11683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1865'. [ 278.025926][T11686] lo speed is unknown, defaulting to 1000 [ 278.180771][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'. [ 278.312715][T11703] netlink: 'syz.1.1870': attribute type 10 has an invalid length. [ 278.427137][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 278.578065][ T5840] hid-generic 0005:16C0:5505.001B: unknown main item tag 0x0 [ 278.593576][ T5840] hid-generic 0005:16C0:5505.001B: unknown main item tag 0x0 [ 278.626972][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 278.645637][T11720] lo speed is unknown, defaulting to 1000 [ 278.666574][ T5840] hid-generic 0005:16C0:5505.001B: unknown main item tag 0x0 [ 278.695789][ T5840] hid-generic 0005:16C0:5505.001B: unknown main item tag 0x0 [ 278.714707][ T5840] hid-generic 0005:16C0:5505.001B: unknown main item tag 0x0 [ 278.735084][ T5840] hid-generic 0005:16C0:5505.001B: unknown main item tag 0x0 [ 278.762535][ T5840] hid-generic 0005:16C0:5505.001B: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 279.089593][T11736] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 280.145627][T11785] !: renamed from dummy0 (while UP) [ 280.215354][T11788] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 280.224660][T11788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.286540][T11793] netlink: 'syz.1.1902': attribute type 11 has an invalid length. [ 280.302836][T11792] lo speed is unknown, defaulting to 1000 [ 280.409498][T11798] Cannot find del_set index 1 as target [ 281.753301][T11858] xt_hashlimit: size too large, truncated to 1048576 [ 281.844272][T11861] __nla_validate_parse: 13 callbacks suppressed [ 281.844290][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1918'. [ 282.020360][ T24] hid-generic 0005:16C0:5505.001C: unknown main item tag 0x0 [ 282.028103][ T24] hid-generic 0005:16C0:5505.001C: unknown main item tag 0x0 [ 282.035706][ T24] hid-generic 0005:16C0:5505.001C: unknown main item tag 0x0 [ 282.043854][ T24] hid-generic 0005:16C0:5505.001C: unknown main item tag 0x0 [ 282.051823][ T24] hid-generic 0005:16C0:5505.001C: unknown main item tag 0x0 [ 282.059775][ T24] hid-generic 0005:16C0:5505.001C: unknown main item tag 0x0 [ 282.070955][ T24] hid-generic 0005:16C0:5505.001C: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 282.132890][T11880] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1923'. [ 282.155218][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'. [ 283.015081][T11915] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1938'. [ 283.073343][T11915] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1938'. [ 283.101653][T11921] netlink: 'syz.1.1939': attribute type 11 has an invalid length. [ 283.288001][T11930] SET target dimension over the limit! [ 283.461597][T11940] FAULT_INJECTION: forcing a failure. [ 283.461597][T11940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.492077][T11940] CPU: 1 UID: 0 PID: 11940 Comm: syz.3.1946 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 283.492106][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.492117][T11940] Call Trace: [ 283.492124][T11940] [ 283.492131][T11940] dump_stack_lvl+0x189/0x250 [ 283.492160][T11940] ? __pfx____ratelimit+0x10/0x10 [ 283.492184][T11940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.492208][T11940] ? __pfx__printk+0x10/0x10 [ 283.492226][T11940] ? __might_fault+0xb0/0x130 [ 283.492255][T11940] should_fail_ex+0x414/0x560 [ 283.492280][T11940] _copy_from_user+0x2d/0xb0 [ 283.492298][T11940] ___sys_sendmsg+0x158/0x2a0 [ 283.492324][T11940] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.492384][T11940] ? __fget_files+0x2a/0x420 [ 283.492401][T11940] ? __fget_files+0x3a0/0x420 [ 283.492429][T11940] __x64_sys_sendmsg+0x19b/0x260 [ 283.492454][T11940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.492486][T11940] ? __pfx_ksys_write+0x10/0x10 [ 283.492500][T11940] ? rcu_is_watching+0x15/0xb0 [ 283.492529][T11940] ? do_syscall_64+0xbe/0x3b0 [ 283.492550][T11940] do_syscall_64+0xfa/0x3b0 [ 283.492566][T11940] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.492582][T11940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.492598][T11940] ? clear_bhb_loop+0x60/0xb0 [ 283.492619][T11940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.492635][T11940] RIP: 0033:0x7fa0b178e929 [ 283.492650][T11940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.492665][T11940] RSP: 002b:00007fa0b2526038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.492684][T11940] RAX: ffffffffffffffda RBX: 00007fa0b19b6080 RCX: 00007fa0b178e929 [ 283.492697][T11940] RDX: 00000000000000c4 RSI: 0000200000000100 RDI: 0000000000000004 [ 283.492709][T11940] RBP: 00007fa0b2526090 R08: 0000000000000000 R09: 0000000000000000 [ 283.492720][T11940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.492730][T11940] R13: 0000000000000000 R14: 00007fa0b19b6080 R15: 00007ffdaa0cde28 [ 283.492759][T11940] [ 283.715018][T11946] netlink: 'syz.1.1948': attribute type 11 has an invalid length. [ 284.122617][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1957'. [ 284.253967][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054a0f800: rx timeout, send abort [ 284.577208][ C0] ------------[ cut here ]------------ [ 284.582985][ C0] WARNING: CPU: 0 PID: 5834 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 284.592561][ C0] Modules linked in: [ 284.597323][ C0] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 284.609531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.619631][ C0] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 284.625441][ C0] Code: 0f 0b 90 e9 62 fe ff ff e8 0a c9 d1 f7 90 0f 0b 90 e9 95 fe ff ff e8 fc c8 d1 f7 90 0f 0b 90 e9 bb fe ff ff e8 ee c8 d1 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 284.645102][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 284.651264][ C0] RAX: ffffffff89ee9362 RBX: dffffc0000000000 RCX: ffff888020bd3c00 [ 284.659343][ C0] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 284.667475][ C0] RBP: 0000000000000fff R08: ffff88805295611f R09: 1ffff1100a52ac23 [ 284.675467][ C0] R10: dffffc0000000000 R11: ffffed100a52ac24 R12: ffff888052955e80 [ 284.683519][ C0] R13: dffffc0000000000 R14: ffff888052956104 R15: 1ffff1100a52abd2 [ 284.691559][ C0] FS: 000055559494a500(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 284.700580][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.707270][ C0] CR2: 00007fa0b197e2d8 CR3: 000000006dd12000 CR4: 00000000003526f0 [ 284.715337][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.723386][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 284.731544][ C0] Call Trace: [ 284.734841][ C0] [ 284.737790][ C0] ? inet6_cleanup_sock+0x197/0x230 [ 284.743102][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 284.748813][ C0] __sk_destruct+0x89/0x660 [ 284.753343][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 284.758625][ C0] ? rcu_core+0xc34/0x1710 [ 284.763068][ C0] rcu_core+0xca5/0x1710 [ 284.767394][ C0] ? __pfx_rcu_core+0x10/0x10 [ 284.772111][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 284.777875][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 284.784167][ C0] handle_softirqs+0x286/0x870 [ 284.789059][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 284.793858][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 284.799274][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 284.804503][ C0] __irq_exit_rcu+0xca/0x1f0 [ 284.809223][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 284.814464][ C0] irq_exit_rcu+0x9/0x30 [ 284.818840][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 284.824511][ C0] [ 284.827560][ C0] [ 284.830504][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.836692][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 284.843225][ C0] Code: 74 05 e8 ab fc 5e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 e8 27 f6 65 8b 05 3c 24 34 07 85 c0 74 40 48 c7 04 24 0e 36 [ 284.862922][ C0] RSP: 0018:ffffc900040df700 EFLAGS: 00000206 [ 284.869243][ C0] RAX: cb61af9d7b574a00 RBX: 0000000000000a02 RCX: cb61af9d7b574a00 [ 284.877294][ C0] RDX: 0000000000000006 RSI: ffffffff8d984a0d RDI: 0000000000000001 [ 284.885283][ C0] RBP: ffffc900040df788 R08: ffffffff8fa11ff7 R09: 1ffffffff1f423fe [ 284.893323][ C0] R10: dffffc0000000000 R11: fffffbfff1f423ff R12: dffffc0000000000 [ 284.901372][ C0] R13: ffffc9000c042000 R14: ffffffff99c6e320 R15: 1ffff9200081bee0 [ 284.909459][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 284.915817][ C0] ? do_raw_spin_lock+0x121/0x290 [ 284.920914][ C0] debug_check_no_obj_freed+0x451/0x470 [ 284.926576][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 284.931807][ C0] remove_vm_area+0x1d3/0x300 [ 284.936556][ C0] vfree+0x63/0x400 [ 284.940381][ C0] do_ipt_get_ctl+0xebc/0x1180 [ 284.945232][ C0] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 284.950503][ C0] ? __mutex_trylock_common+0x153/0x260 [ 284.956064][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 284.962080][ C0] ? rcu_is_watching+0x15/0xb0 [ 284.966963][ C0] ? nf_getsockopt+0x224/0x290 [ 284.971750][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 284.977505][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 284.982550][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 284.988602][ C0] ? __might_fault+0xb0/0x130 [ 284.993305][ C0] nf_getsockopt+0x26e/0x290 [ 284.997974][ C0] ip_getsockopt+0x1c4/0x220 [ 285.002584][ C0] ? __pfx_ip_getsockopt+0x10/0x10 [ 285.007924][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 285.013317][ C0] do_sock_getsockopt+0x360/0x650 [ 285.018419][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 285.023992][ C0] ? do_syscall_64+0x80/0x3b0 [ 285.028738][ C0] ? fd_install+0x97/0x540 [ 285.033194][ C0] __x64_sys_getsockopt+0x1a5/0x250 [ 285.038492][ C0] ? do_syscall_64+0x80/0x3b0 [ 285.043190][ C0] ? do_syscall_64+0x80/0x3b0 [ 285.047951][ C0] do_syscall_64+0xfa/0x3b0 [ 285.052475][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.057750][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.063840][ C0] ? clear_bhb_loop+0x60/0xb0 [ 285.068595][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.074507][ C0] RIP: 0033:0x7fa0b179066a [ 285.079006][ C0] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 285.098731][ C0] RSP: 002b:00007ffdaa0cdab8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 285.107270][ C0] RAX: ffffffffffffffda RBX: 00007ffdaa0cdb40 RCX: 00007fa0b179066a [ 285.115267][ C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 285.123365][ C0] RBP: 0000000000000003 R08: 00007ffdaa0cdadc R09: 00007ffdaa0cdef7 [ 285.131420][ C0] R10: 00007ffdaa0cdb40 R11: 0000000000000216 R12: 00007fa0b1981e40 [ 285.139464][ C0] R13: 00007ffdaa0cdadc R14: 0000000000000000 R15: 00007fa0b1984000 [ 285.147531][ C0] [ 285.150561][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 285.157855][ C0] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 285.169997][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.180050][ C0] Call Trace: [ 285.183321][ C0] [ 285.186157][ C0] dump_stack_lvl+0x99/0x250 [ 285.190749][ C0] ? __asan_memcpy+0x40/0x70 [ 285.195327][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.200513][ C0] ? __pfx__printk+0x10/0x10 [ 285.205096][ C0] panic+0x2db/0x790 [ 285.208993][ C0] ? __pfx_panic+0x10/0x10 [ 285.213403][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 285.218606][ C0] __warn+0x31b/0x4b0 [ 285.222578][ C0] ? inet_sock_destruct+0x623/0x730 [ 285.227763][ C0] ? inet_sock_destruct+0x623/0x730 [ 285.232948][ C0] report_bug+0x2be/0x4f0 [ 285.237269][ C0] ? inet_sock_destruct+0x623/0x730 [ 285.242471][ C0] ? inet_sock_destruct+0x623/0x730 [ 285.247654][ C0] ? inet_sock_destruct+0x625/0x730 [ 285.252843][ C0] handle_bug+0x84/0x160 [ 285.257081][ C0] exc_invalid_op+0x1a/0x50 [ 285.261611][ C0] asm_exc_invalid_op+0x1a/0x20 [ 285.266447][ C0] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 285.272241][ C0] Code: 0f 0b 90 e9 62 fe ff ff e8 0a c9 d1 f7 90 0f 0b 90 e9 95 fe ff ff e8 fc c8 d1 f7 90 0f 0b 90 e9 bb fe ff ff e8 ee c8 d1 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 285.291957][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 285.298019][ C0] RAX: ffffffff89ee9362 RBX: dffffc0000000000 RCX: ffff888020bd3c00 [ 285.305985][ C0] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 285.313953][ C0] RBP: 0000000000000fff R08: ffff88805295611f R09: 1ffff1100a52ac23 [ 285.321932][ C0] R10: dffffc0000000000 R11: ffffed100a52ac24 R12: ffff888052955e80 [ 285.329896][ C0] R13: dffffc0000000000 R14: ffff888052956104 R15: 1ffff1100a52abd2 [ 285.337868][ C0] ? inet_sock_destruct+0x622/0x730 [ 285.343156][ C0] ? inet_sock_destruct+0x622/0x730 [ 285.348341][ C0] ? inet6_cleanup_sock+0x197/0x230 [ 285.353532][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 285.359168][ C0] __sk_destruct+0x89/0x660 [ 285.363694][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 285.368799][ C0] ? rcu_core+0xc34/0x1710 [ 285.373205][ C0] rcu_core+0xca5/0x1710 [ 285.377447][ C0] ? __pfx_rcu_core+0x10/0x10 [ 285.382116][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 285.387739][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 285.393983][ C0] handle_softirqs+0x286/0x870 [ 285.398763][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 285.403533][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 285.408830][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 285.414030][ C0] __irq_exit_rcu+0xca/0x1f0 [ 285.418617][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 285.423822][ C0] irq_exit_rcu+0x9/0x30 [ 285.428142][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 285.433773][ C0] [ 285.436691][ C0] [ 285.439640][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.445605][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 285.452093][ C0] Code: 74 05 e8 ab fc 5e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 e8 27 f6 65 8b 05 3c 24 34 07 85 c0 74 40 48 c7 04 24 0e 36 [ 285.471778][ C0] RSP: 0018:ffffc900040df700 EFLAGS: 00000206 [ 285.477839][ C0] RAX: cb61af9d7b574a00 RBX: 0000000000000a02 RCX: cb61af9d7b574a00 [ 285.485836][ C0] RDX: 0000000000000006 RSI: ffffffff8d984a0d RDI: 0000000000000001 [ 285.493800][ C0] RBP: ffffc900040df788 R08: ffffffff8fa11ff7 R09: 1ffffffff1f423fe [ 285.501861][ C0] R10: dffffc0000000000 R11: fffffbfff1f423ff R12: dffffc0000000000 [ 285.509824][ C0] R13: ffffc9000c042000 R14: ffffffff99c6e320 R15: 1ffff9200081bee0 [ 285.517800][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 285.524129][ C0] ? do_raw_spin_lock+0x121/0x290 [ 285.529155][ C0] debug_check_no_obj_freed+0x451/0x470 [ 285.534702][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 285.539895][ C0] remove_vm_area+0x1d3/0x300 [ 285.544559][ C0] vfree+0x63/0x400 [ 285.548360][ C0] do_ipt_get_ctl+0xebc/0x1180 [ 285.553119][ C0] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 285.558312][ C0] ? __mutex_trylock_common+0x153/0x260 [ 285.563847][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 285.569731][ C0] ? rcu_is_watching+0x15/0xb0 [ 285.574490][ C0] ? nf_getsockopt+0x224/0x290 [ 285.579255][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 285.585049][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 285.590061][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 285.596078][ C0] ? __might_fault+0xb0/0x130 [ 285.600762][ C0] nf_getsockopt+0x26e/0x290 [ 285.605347][ C0] ip_getsockopt+0x1c4/0x220 [ 285.609929][ C0] ? __pfx_ip_getsockopt+0x10/0x10 [ 285.615040][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 285.620401][ C0] do_sock_getsockopt+0x360/0x650 [ 285.625506][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 285.631048][ C0] ? do_syscall_64+0x80/0x3b0 [ 285.635713][ C0] ? fd_install+0x97/0x540 [ 285.640124][ C0] __x64_sys_getsockopt+0x1a5/0x250 [ 285.645311][ C0] ? do_syscall_64+0x80/0x3b0 [ 285.649969][ C0] ? do_syscall_64+0x80/0x3b0 [ 285.654630][ C0] do_syscall_64+0xfa/0x3b0 [ 285.659116][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.664300][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.670348][ C0] ? clear_bhb_loop+0x60/0xb0 [ 285.675009][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.680890][ C0] RIP: 0033:0x7fa0b179066a [ 285.685286][ C0] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 285.704874][ C0] RSP: 002b:00007ffdaa0cdab8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 285.713282][ C0] RAX: ffffffffffffffda RBX: 00007ffdaa0cdb40 RCX: 00007fa0b179066a [ 285.721260][ C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 285.729227][ C0] RBP: 0000000000000003 R08: 00007ffdaa0cdadc R09: 00007ffdaa0cdef7 [ 285.737466][ C0] R10: 00007ffdaa0cdb40 R11: 0000000000000216 R12: 00007fa0b1981e40 [ 285.745574][ C0] R13: 00007ffdaa0cdadc R14: 0000000000000000 R15: 00007fa0b1984000 [ 285.753550][ C0] [ 285.756835][ C0] Kernel Offset: disabled [ 285.761156][ C0] Rebooting in 86400 seconds..