last executing test programs: 3.156349394s ago: executing program 1 (id=654): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.079932551s ago: executing program 1 (id=656): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000002c0)={0x2f, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x5}]}, 0x18) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="080005"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x44}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f00000007c0)=""/49, 0x31}], 0x2}, 0x9}], 0x1, 0x10000, 0x0) 2.990985825s ago: executing program 3 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xff, 0x0, 0x2000000}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_GATEWAY={0x14, 0x5, @loopback={0xfc00000000000000}}]}, 0x38}}, 0x0) 2.883046459s ago: executing program 3 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000006840)={0x14, 0x2e, 0x100, 0x70bd2d, 0x25dfdbff, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x18004400}, 0x40000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}, 0x8000000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x4}, 0x8}], 0x3, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.744179887s ago: executing program 3 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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", @ANYRESDEC=r3], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x7, 0x43e64c37}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000940)=[{0x5, 0x2, 0xe, 0x3}, {0x4, 0x4, 0x10, 0x1}, {0x1, 0x4, 0xb, 0x9}, {0x1, 0x3, 0x8, 0x63733dbf9d6934db}, {0x1, 0x2, 0x3, 0x7}, {0x5, 0x3, 0x2, 0x2}], 0x10, 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000c3000c000000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0xc9, &(0x7f00000002c0)=""/201}, 0x94) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0xa, 0x2400000001, 0x0) r7 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r9, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="180000001600156ffcffffff000000000a008d02b41d9f41eac8e7ae4f017d6700fd", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 2.632898478s ago: executing program 3 (id=664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) splice(r0, &(0x7f0000000340)=0x6, r0, &(0x7f0000000540)=0x100000000, 0x4, 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x2400000e) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000044c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140f70200ff0700074000000069080003400000001408000240000000020900010073797a30000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x24004051) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="600057fae5d8c8315ab20000000000000700000014000780080011400000008b05001500060000000500010006000000050005000a00000005000400020000000912020073797a300000000014000300686173683a69702c706f72742c6970000ded258748983fba362e30cf284134d4552e1d0b379949f77b10350a545b099854b738cd77572632eb35c797eeeaca2a58a56f9770f33b2798a7eaf7bbea2ebc595be637233ae571d8d55e15002d8b837f0df9c963c7e9088adfb0ae5d986e74cd9101230b1209451832d4c4e3571b019b0daad2a94a8da63d60016e5772e470cb4aa27869d6fd343086be5aacb3a3e1817f3019f9bebe20012c9bcd849d39d3666166825509a23126032f24bd7548165025080bb3bb78f7e228dd24fe74c99f65e8cefb2d1854def8524f31e35abd851bedff30a78cbe04066357b4454a4fa9a7e285334c864721c3aaf0b11cf066db54ceb0ac3f2f019650be327110ceee"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000600), 0xc00) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 2.497335788s ago: executing program 3 (id=667): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r3, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x41, 0x0) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r6, r6, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 2.190708214s ago: executing program 2 (id=673): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback, 0xff000000}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x4, 0x2, 0x2, 0x1, 0x0, [@loopback]}}}], 0x28}, 0x24004801) 2.10825885s ago: executing program 1 (id=674): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0xffe6, 0xb}, {0xc, 0x1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10}}]}, 0x40}, 0x1, 0x0, 0x0, 0x140480a4}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 2.085195654s ago: executing program 2 (id=676): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x600, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x1000000, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="f80000000000000000000000070000000a0f88ba708c61737a195ba5167b0a830f58"], 0xf8}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) 1.91695679s ago: executing program 3 (id=677): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r4) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000007"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x8000005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='bcache_read\x00', r6, 0x0, 0x8000000000000001}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f0114"], 0xdd12}, {0x0}], 0x2}, 0x20040051) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r7, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x24000004) socketpair(0x8, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pptp(r10, &(0x7f0000000140)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r6, 0x0, 0x8000000000000000}, 0x18) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @remote, 0x1c3}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x4, 0x6, 0x7, 0x1, 0x51, @remote, @empty, 0x7, 0x700, 0xdd, 0x9}}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x124, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x5, 0x4, 0x1ff, 0x2, 0x8001, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x2b, 0xeb, 0x1000, 0x8, 0x0, 0x10009, 0x7, 0x5}}, {0xe, 0x2, [0x101, 0xfe01, 0x2f45, 0x6, 0xa2]}}, {{0x1c, 0x1, {0x4, 0x8, 0x2, 0x9, 0x3, 0xe6, 0x200, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0xe9, 0x8, 0x90a, 0x9, 0x0, 0x0, 0x100, 0x5}}, {0xe, 0x2, [0x1000, 0x4007, 0x9, 0x7e6d, 0xf5]}}, {{0x1c, 0x1, {0x7, 0x2, 0x8001, 0x7, 0x2, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x1, 0x0, 0x0, 0x1, 0x8, 0x9, 0x5}}, {0xe, 0x2, [0x9, 0x4, 0x1, 0x800, 0xa]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x124}}, 0x40010) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 1.79701867s ago: executing program 2 (id=678): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYBLOB="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", @ANYRES16], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x7, 0x43e64c37}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000940)=[{0x5, 0x2, 0xe, 0x3}, {0x4, 0x4, 0x10, 0x1}, {0x1, 0x4, 0xb, 0x9}, {0x1, 0x3, 0x8, 0x63733dbf9d6934db}, {0x5, 0x3, 0x2, 0x2}], 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180a00004b050000000000000000000018360000020000000000000000000000d590abfffcffffff1807000000000000000000000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007018500f8ffffffb702000008000000b70300000700000085000000060000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff, 0x40f00, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) splice(r0, &(0x7f0000000340)=0x3, r0, &(0x7f0000000600)=0xfaa7, 0x2, 0x1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000300)={0x2000}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000091400078008001140000000000500150009000000050005000a000000050001000700000005000400000000000900020073797a32000000000c006173683a697000"], 0x58}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000000), 0x4) getpid() socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x0) 1.795836524s ago: executing program 4 (id=679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x400000000000000) 1.620049545s ago: executing program 4 (id=681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80000001, 0x67}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048010}, 0x20044080) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1.589407121s ago: executing program 2 (id=682): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x7fffffff, @mcast2, 0x8000}, 0x1c) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120000ca7d4257d0e75bbc0ee32aaabb4704fd0007000000080000000200000000002000", @ANYRESDEC=r1, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000004200000000000000ddec98fffffffff7ea000000000000", @ANYRES32=r3, @ANYRES64=r2], 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) write(r6, &(0x7f0000000240)="94", 0x1) tee(r5, r9, 0x8f5, 0x100000000000000) write$cgroup_type(r9, &(0x7f0000000180), 0x9) write(r7, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@default) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000300), &(0x7f0000000100)=r3}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) ppoll(&(0x7f0000000500)=[{r10}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00f8f4089f70006800e9784b114b00000500"/28], 0x1c}}, 0x0) 1.423059792s ago: executing program 0 (id=683): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000480)=@canfd={{0x1}, 0xfe, 0x1, 0x0, 0x0, "27dc67c3cfcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa30acf584ecb5fee496e6866856b76b5ee000000000000012539019363a918fa1efd9b0b00"}, 0x48}, 0xee, 0x0, 0x0, 0x4001}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x1f, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 1.422744063s ago: executing program 4 (id=684): mmap(&(0x7f0000936000/0x3000)=nil, 0x3000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x2a, &(0x7f0000000240)=0xd, 0x4) 1.015395099s ago: executing program 4 (id=685): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 897.645457ms ago: executing program 0 (id=686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x25}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 729.956994ms ago: executing program 0 (id=687): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000200000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) 726.079293ms ago: executing program 1 (id=688): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000600", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}}, 0x10) 608.836899ms ago: executing program 0 (id=689): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (fail_nth: 5) 551.521208ms ago: executing program 1 (id=690): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x2, '%g'}, 0xa) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x6004}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xff}]}}]}, 0x74}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x805) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="09082d8c7c000100", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000010000"], 0x58}}, 0x40010) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x0, 0x5, {0x96, 0x7}}]}, 0x90}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e20, 0x0, 0x4e21, 0x2, 0x2, 0x20, 0x20, 0xfd, r6, r8}, {0x5a, 0x4, 0x2, 0x5, 0x0, 0x6, 0x2b7, 0x8000000000000001}, {0x4, 0x80000000, 0x0, 0x3d6e7e7a}, 0x4, 0x0, 0x2, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d6, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3507, 0x3, 0x1, 0xff, 0xfffffff9, 0x2, 0x4}}, 0xe8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b70300000040000585000000b400000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 421.840581ms ago: executing program 2 (id=691): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b0400000000000000000200003d0900020073797a32000000000900010073797a30000000006000048018000180080001"], 0xb4}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e65766500"], 0x58}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}]}, 0x40}}, 0x0) 167.972441ms ago: executing program 1 (id=692): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) sendmmsg$unix(r1, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x8000}}], 0x1, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4000004, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x1c4, r8, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0xc3cf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0xf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x89ba}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40814}, 0x40080) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000003040)={0x2260, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x21f4, 0x3, 0x0, 0x1, [{0x21e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1060, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0x31, 0x6, 0x1, 0x0, "267d5884c355a561b823c69ee5434299369e4457d2e232beffe2c80477ec8f9f3fe5341d03ec8d14782f88672a"}, @NFTA_SET_ELEM_KEY_END={0x1134, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x86, 0x1, "efedaa1e9043328996640a077c63b309e826f15d9e91ed9c377378f8fd8046ecb689e86a36db5462305c28b04c2ecf07d54ae6a9b2e6d0bc639bc4ea7f501d241b9e9a134cfa6d65123d01b1191ddd005843ee727131fae3fb4671dc372b3931e27ee782e00543ce9c163f668dcbdeb5bfe43bbdc93138238f9be26d967a5a1044c2"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x28, 0x1, "7c40d3bee0134d7882e7190b54b7fd9d32a29edc3bbf25bb1aab8314d56cba67400e97b4"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2260}, 0x1, 0x0, 0x0, 0x40021}, 0x4000) r9 = socket$unix(0x1, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x0, r2}, 0x18) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r10, &(0x7f0000000080)="da484c", 0x3, 0x200000d4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x354, 0x2c, 0xb27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x318, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x2cc, 0x2, [@m_skbedit={0x14c, 0x1f, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x6, 0x20000000, 0xaf000000, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3ff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xef, 0x6, "4c0b2d056d27d61bf9caa7638256403e0a873ca84f9e23b21c8b50af1caf8445094c77efc7a906cc51927cae63f5582b9cd772754ad95975f8cd15a7eaf94d6407b559f7e03319122770e276d047f4e861875f58f1f09c50ed6055b988b88edb58dbe1b4964af4b889e66d3e316861be06762ece4361114a00bf7934b73b2fcfcc13476192158ee9e4eb6ac960884827b73b0070d251dfb26c40ee090cf9d8b117e148b8bf73557fc7200d34a97ba8fdfb6822477f55185368e5735891cf0e8306674740bbb34c5274c454ba6a9f17fe9ac26abf476434507f12237fdafb132634a52843c93aa663f4dac1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x90, 0x16, 0x0, 0x0, {{0x8}, {0x4}, {0x68, 0x6, "efb1ceb9e1fd5c3140979a820830591412b3a1e51ff01430b993e9513caeae48b445fc37a3632c283671b57dd18d62cc84acc268c7342a5de3348ec761f3af57144f222391ee893e8205a4803bb4aa896c4072f30729be7dd8940468da8e00213347348f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0xec, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0xc2, 0x6, "c527675bf7f4646ae31c844a33598eff03ceaabbf6272a809016b3f45d79c400b539c7a4d14eaae83644f301ed04c18bf42d5c76a75e8a581d9a3557c255c6295de63eb3da7d415bef4d1f78361360ce6fe6411cab60fa0a5057105013247436fea28171a79df64b155fc529fcfebcabf8e2f34843a55ef8798b5d34a7f442bde0879242568c20977076b5be5c90ddd6de40fd02d6c00f1f52b2454bd700ba583c7a3e90fc14df63eeb534c65c8bfdca7233e81f51f78cc2c2ccc2f16679"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x354}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401b2800c0018000cac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0xc040) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r0, r4}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000002c0)="902e4f7ef85076e8855e2e7e72ffcc1cbfd76022dbff94a1ae56aabb848c3b85b11a4914006cc88b79e50addd6ca68c54115c9d40e10e06fead79a71848b84d51975e96d08a3bf84c347f90fd4c3e7a579e538517128510978c5318b6f0a9cf988c1397e7de53c082afa5bb1df5ccbd3cfa6ce06c48a4275085a277c19caa3821d6307e4a62df9b0864043c20e36b93bb3d49feb5365a9e75d4a60ffb5be37f0845f24b8517dc41e93227d9ad64c6a5d917e172c7d8838a80a541d6e88cc25cfe48f7adf97e013d5fa325a7c3d6c61511e07b35970370979782dfa", 0xdb}], 0x1) 167.704255ms ago: executing program 0 (id=693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x0) syz_init_net_socket$x25(0x9, 0x2, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000408010100000000000000000e0000050600024000f800000500030006000000c1582e096d574cbb533f056a3f20e5644632f0603c2f9d865e6043bdcccbd8dc709c90d21a004fceb5d85c34bfa33c15cf435ef63531c7591c2452a6f5289ad393fd3df4ef61d733e1b974f20f4df6123294b92e0c5efe396c8b309a5d175eb9f624b669340447095d5b640d1a1512c13bb9db6c1f91b4c669c382289577b8b003d54cd12517af69740e4ef4103c8a564f9d6af4c779c03ed72535d98e5394e28dee168d2e4ce0ec63de2493ec803848"], 0x24}}, 0x20000000) 160.458866ms ago: executing program 4 (id=694): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000300fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac3414aa000000000000000000000000ffffffff000000000000a00e00000000e0000002000000000500fd0000000000fe8000000000000000cce971d01f78824522192854000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 140.134996ms ago: executing program 2 (id=695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x2, 0x6, 0x8, 0xe00, 0x1, 0x4f3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xa}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002380), r7) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="24d2a5b4816714a1c62b4949d0a969a6136ef772cddc411a38b25387afeb146ab852c7ec965e9152ae9b332d882fc9efa44a426a0b5a820eea0a2503b27697ca5f5d3231760208fdc3892f3669148b6bde0302ac9ae3e6be9023a34ff9c546971ba0b16e0d613e9a5c94e04162d518f6586021e647d854e1df5ca5fb839bb2cea4577824606ec10b8a8bfa14859aaf9d2cb081", @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf25030000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048855}, 0x4049090) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000240), &(0x7f0000000380)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a000100800000000000000081808000009804000000000008000f"], 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r14, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x27, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8000000}, @call={0x85, 0x0, 0x0, 0x4a}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xb, 0x4, 0x10, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x30, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r13, r14], 0x0, 0x10, 0x7}, 0x94) r15 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000240)={'hsr0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 318.833µs ago: executing program 0 (id=696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="f72bacc3", 0x4, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57) 0s ago: executing program 4 (id=697): socket(0x1f, 0x5, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6, 0x0, 0x0, 0x1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) socket$kcm(0x29, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[], 0xd40}}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffffffffffffd) openat$cgroup_ro(r3, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0xc002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), 0x0}, 0x20) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x61}, {}, {0x2}, {0x6}]}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'dvmrp1\x00', @remote}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.0.18'. [ 99.160947][ T6064] netem: change failed [ 99.853114][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 100.303276][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 100.499669][ T6096] openvswitch: netlink: Tunnel attr 16 has unexpected len 9 expected 0 [ 101.070652][ T6100] netlink: 'syz.0.27': attribute type 13 has an invalid length. [ 101.108579][ T6100] netlink: 'syz.0.27': attribute type 17 has an invalid length. [ 101.308061][ T6100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.379731][ T6111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.448942][ T6114] netlink: 156 bytes leftover after parsing attributes in process `syz.2.31'. [ 101.449134][ T6100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.487246][ T6115] netlink: 156 bytes leftover after parsing attributes in process `syz.2.31'. [ 101.574933][ T6117] Illegal XDP return value 808747000 on prog (id 22) dev N/A, expect packet loss! [ 101.604738][ T6118] veth0: entered promiscuous mode [ 101.632531][ T6116] veth0: left promiscuous mode [ 101.802466][ T6122] openvswitch: netlink: Message has 4 unknown bytes. [ 101.812426][ T6125] FAULT_INJECTION: forcing a failure. [ 101.812426][ T6125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.834283][ T6125] CPU: 1 UID: 0 PID: 6125 Comm: syz.2.35 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 101.834306][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.834316][ T6125] Call Trace: [ 101.834323][ T6125] [ 101.834331][ T6125] dump_stack_lvl+0x189/0x250 [ 101.834356][ T6125] ? __pfx____ratelimit+0x10/0x10 [ 101.834382][ T6125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.834403][ T6125] ? __pfx__printk+0x10/0x10 [ 101.834438][ T6125] should_fail_ex+0x414/0x560 [ 101.834460][ T6125] _copy_to_user+0x31/0xb0 [ 101.834486][ T6125] simple_read_from_buffer+0xe1/0x170 [ 101.834516][ T6125] proc_fail_nth_read+0x1df/0x250 [ 101.834537][ T6125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.834556][ T6125] ? rw_verify_area+0x258/0x650 [ 101.834578][ T6125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.834615][ T6125] vfs_read+0x200/0x980 [ 101.834644][ T6125] ? __pfx___mutex_lock+0x10/0x10 [ 101.834662][ T6125] ? __pfx_vfs_read+0x10/0x10 [ 101.834688][ T6125] ? __fget_files+0x2a/0x420 [ 101.834709][ T6125] ? __fget_files+0x3a0/0x420 [ 101.834723][ T6125] ? __fget_files+0x2a/0x420 [ 101.834749][ T6125] ksys_read+0x145/0x250 [ 101.834785][ T6125] ? __pfx_ksys_read+0x10/0x10 [ 101.834811][ T6125] ? rcu_is_watching+0x15/0xb0 [ 101.834836][ T6125] ? do_syscall_64+0xbe/0x3b0 [ 101.834857][ T6125] do_syscall_64+0xfa/0x3b0 [ 101.834871][ T6125] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.834897][ T6125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.834914][ T6125] ? clear_bhb_loop+0x60/0xb0 [ 101.834935][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.834952][ T6125] RIP: 0033:0x7fd81958d3bc [ 101.834966][ T6125] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.834980][ T6125] RSP: 002b:00007fd81a3bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.834997][ T6125] RAX: ffffffffffffffda RBX: 00007fd8197b5fa0 RCX: 00007fd81958d3bc [ 101.835009][ T6125] RDX: 000000000000000f RSI: 00007fd81a3bb0a0 RDI: 0000000000000004 [ 101.835019][ T6125] RBP: 00007fd81a3bb090 R08: 0000000000000000 R09: 0000000000000000 [ 101.835029][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.835038][ T6125] R13: 0000000000000000 R14: 00007fd8197b5fa0 R15: 00007fff0482f698 [ 101.835066][ T6125] [ 101.876711][ T6127] netlink: 'syz.4.24': attribute type 4 has an invalid length. [ 102.144621][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36'. [ 102.154209][ T6129] FAULT_INJECTION: forcing a failure. [ 102.154209][ T6129] name failslab, interval 1, probability 0, space 0, times 0 [ 102.191025][ T6129] CPU: 0 UID: 0 PID: 6129 Comm: syz.2.36 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 102.191054][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.191066][ T6129] Call Trace: [ 102.191074][ T6129] [ 102.191083][ T6129] dump_stack_lvl+0x189/0x250 [ 102.191113][ T6129] ? __pfx____ratelimit+0x10/0x10 [ 102.191144][ T6129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.191168][ T6129] ? __pfx__printk+0x10/0x10 [ 102.191202][ T6129] ? __pfx___might_resched+0x10/0x10 [ 102.191225][ T6129] ? fs_reclaim_acquire+0x7d/0x100 [ 102.191249][ T6129] should_fail_ex+0x414/0x560 [ 102.191275][ T6129] ? alloc_netdev_mqs+0xc59/0x1170 [ 102.191300][ T6129] should_failslab+0xa8/0x100 [ 102.191332][ T6129] __kvmalloc_node_noprof+0x161/0x5f0 [ 102.191366][ T6129] ? alloc_netdev_mqs+0xc59/0x1170 [ 102.191390][ T6129] ? alloc_netdev_mqs+0xbf1/0x1170 [ 102.191420][ T6129] alloc_netdev_mqs+0xc59/0x1170 [ 102.191455][ T6129] rtnl_create_link+0x31f/0xd10 [ 102.191489][ T6129] rtnl_newlink_create+0x25c/0xb00 [ 102.191525][ T6129] ? __pfx_aa_get_newest_label+0x10/0x10 [ 102.191551][ T6129] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 102.191570][ T6129] ? rtnl_newlink+0x8db/0x1c70 [ 102.191592][ T6129] ? __pfx___mutex_lock+0x10/0x10 [ 102.191623][ T6129] ? ns_capable+0x8a/0xf0 [ 102.191650][ T6129] rtnl_newlink+0x16d6/0x1c70 [ 102.191671][ T6129] ? netlink_sendmsg+0x805/0xb30 [ 102.191703][ T6129] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.191759][ T6129] ? kasan_quarantine_put+0xdd/0x220 [ 102.191783][ T6129] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.191818][ T6129] ? nlmon_xmit+0xb0/0x100 [ 102.191842][ T6129] ? kmem_cache_free+0x18f/0x400 [ 102.191875][ T6129] ? __local_bh_enable_ip+0x12d/0x1c0 [ 102.191897][ T6129] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.191925][ T6129] ? __local_bh_enable_ip+0x12d/0x1c0 [ 102.191945][ T6129] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 102.191969][ T6129] ? __dev_queue_xmit+0x27b/0x3b50 [ 102.192006][ T6129] ? __lock_acquire+0xab9/0xd20 [ 102.192052][ T6129] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.192069][ T6129] rtnetlink_rcv_msg+0x7cf/0xb70 [ 102.192103][ T6129] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 102.192131][ T6129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.192158][ T6129] ? ref_tracker_free+0x63a/0x7d0 [ 102.192176][ T6129] ? __copy_skb_header+0xa7/0x550 [ 102.192200][ T6129] ? __pfx_ref_tracker_free+0x10/0x10 [ 102.192220][ T6129] ? __skb_clone+0x63/0x7a0 [ 102.192268][ T6129] netlink_rcv_skb+0x205/0x470 [ 102.192299][ T6129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.192332][ T6129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.192378][ T6129] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.192408][ T6129] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.192446][ T6129] netlink_unicast+0x75c/0x8e0 [ 102.192486][ T6129] netlink_sendmsg+0x805/0xb30 [ 102.192522][ T6129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.192545][ T6129] ? aa_sock_msg_perm+0x94/0x160 [ 102.192568][ T6129] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.192589][ T6129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.192610][ T6129] __sock_sendmsg+0x219/0x270 [ 102.192641][ T6129] ____sys_sendmsg+0x505/0x830 [ 102.192671][ T6129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.192705][ T6129] ? import_iovec+0x74/0xa0 [ 102.192737][ T6129] ___sys_sendmsg+0x21f/0x2a0 [ 102.192762][ T6129] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.192825][ T6129] ? __fget_files+0x2a/0x420 [ 102.192843][ T6129] ? __fget_files+0x3a0/0x420 [ 102.192872][ T6129] __x64_sys_sendmsg+0x19b/0x260 [ 102.192899][ T6129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.192934][ T6129] ? __pfx_ksys_write+0x10/0x10 [ 102.192958][ T6129] ? rcu_is_watching+0x15/0xb0 [ 102.192987][ T6129] ? do_syscall_64+0xbe/0x3b0 [ 102.193010][ T6129] do_syscall_64+0xfa/0x3b0 [ 102.193027][ T6129] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.193056][ T6129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.193076][ T6129] ? clear_bhb_loop+0x60/0xb0 [ 102.193101][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.193120][ T6129] RIP: 0033:0x7fd81958e9a9 [ 102.193138][ T6129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.193153][ T6129] RSP: 002b:00007fd81a3bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.193173][ T6129] RAX: ffffffffffffffda RBX: 00007fd8197b5fa0 RCX: 00007fd81958e9a9 [ 102.193187][ T6129] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 102.193199][ T6129] RBP: 00007fd81a3bb090 R08: 0000000000000000 R09: 0000000000000000 [ 102.193210][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.193221][ T6129] R13: 0000000000000000 R14: 00007fd8197b5fa0 R15: 00007fff0482f698 [ 102.193253][ T6129] [ 102.880708][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.38'. [ 102.946534][ T6145] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.124736][ T6141] bridge_slave_0: left allmulticast mode [ 103.154776][ T6141] bridge_slave_0: left promiscuous mode [ 103.194831][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.264728][ T6141] bridge_slave_1: left allmulticast mode [ 103.270443][ T6141] bridge_slave_1: left promiscuous mode [ 103.288952][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.310358][ T6141] bond0: (slave bond_slave_0): Releasing backup interface [ 103.341829][ T6141] bond0: (slave bond_slave_1): Releasing backup interface [ 103.366424][ T6158] FAULT_INJECTION: forcing a failure. [ 103.366424][ T6158] name failslab, interval 1, probability 0, space 0, times 0 [ 103.389991][ T6158] CPU: 1 UID: 0 PID: 6158 Comm: syz.0.46 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 103.390019][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.390030][ T6158] Call Trace: [ 103.390038][ T6158] [ 103.390046][ T6158] dump_stack_lvl+0x189/0x250 [ 103.390073][ T6158] ? __pfx____ratelimit+0x10/0x10 [ 103.390102][ T6158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.390123][ T6158] ? __pfx__printk+0x10/0x10 [ 103.390153][ T6158] ? __pfx___might_resched+0x10/0x10 [ 103.390179][ T6158] should_fail_ex+0x414/0x560 [ 103.390202][ T6158] should_failslab+0xa8/0x100 [ 103.390230][ T6158] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 103.390256][ T6158] ? __alloc_skb+0x112/0x2d0 [ 103.390277][ T6158] __alloc_skb+0x112/0x2d0 [ 103.390299][ T6158] sctp_packet_transmit+0x2cc/0x2bb0 [ 103.390336][ T6158] ? sctp_outq_flush+0xbef/0x3140 [ 103.390364][ T6158] ? sctp_outq_flush+0xbef/0x3140 [ 103.390385][ T6158] ? sctp_outq_flush+0xbef/0x3140 [ 103.390408][ T6158] sctp_outq_flush+0xecb/0x3140 [ 103.390429][ T6158] ? sctp_outq_flush+0xbef/0x3140 [ 103.390452][ T6158] ? sctp_make_heartbeat+0x389/0x470 [ 103.390484][ T6158] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 103.390514][ T6158] ? __pfx_sctp_outq_flush+0x10/0x10 [ 103.390543][ T6158] ? sctp_outq_tail+0x612/0x8c0 [ 103.390564][ T6158] ? sctp_do_8_2_transport_strike+0x43c/0x8b0 [ 103.390589][ T6158] ? sctp_outq_uncork+0x4d/0xa0 [ 103.390618][ T6158] sctp_do_sm+0x5332/0x5a20 [ 103.390657][ T6158] ? __pfx_sctp_do_sm+0x10/0x10 [ 103.390677][ T6158] ? stack_trace_save+0x9c/0xe0 [ 103.390701][ T6158] ? __pfx_sctp_hash_key+0x10/0x10 [ 103.390721][ T6158] ? __pfx_sctp_hash_obj+0x10/0x10 [ 103.390778][ T6158] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 103.390797][ T6158] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 103.390814][ T6158] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 103.390839][ T6158] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 103.390865][ T6158] sctp_apply_peer_addr_params+0xdf/0x1880 [ 103.390890][ T6158] ? __pfx_sctp_addr_id2transport+0x10/0x10 [ 103.390924][ T6158] sctp_setsockopt_peer_addr_params+0x5e5/0x940 [ 103.390956][ T6158] sctp_setsockopt+0x709/0x1200 [ 103.390974][ T6158] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 103.391003][ T6158] do_sock_setsockopt+0x17c/0x1b0 [ 103.391026][ T6158] __x64_sys_setsockopt+0x13f/0x1b0 [ 103.391051][ T6158] do_syscall_64+0xfa/0x3b0 [ 103.391066][ T6158] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.391092][ T6158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.391109][ T6158] ? clear_bhb_loop+0x60/0xb0 [ 103.391130][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.391146][ T6158] RIP: 0033:0x7fb474b8e9a9 [ 103.391162][ T6158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.391177][ T6158] RSP: 002b:00007fb4729f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.391195][ T6158] RAX: ffffffffffffffda RBX: 00007fb474db5fa0 RCX: 00007fb474b8e9a9 [ 103.391208][ T6158] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 103.391218][ T6158] RBP: 00007fb4729f6090 R08: 000000000000009c R09: 0000000000000000 [ 103.391228][ T6158] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 103.391238][ T6158] R13: 0000000000000000 R14: 00007fb474db5fa0 R15: 00007ffe8c845e88 [ 103.391266][ T6158] [ 103.394592][ T6141] team0: Port device team_slave_0 removed [ 103.738754][ T6164] FAULT_INJECTION: forcing a failure. [ 103.738754][ T6164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.755210][ T6164] CPU: 1 UID: 0 PID: 6164 Comm: syz.4.48 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 103.755241][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.755253][ T6164] Call Trace: [ 103.755262][ T6164] [ 103.755271][ T6164] dump_stack_lvl+0x189/0x250 [ 103.755301][ T6164] ? __pfx____ratelimit+0x10/0x10 [ 103.755329][ T6164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.755353][ T6164] ? __pfx__printk+0x10/0x10 [ 103.755395][ T6164] should_fail_ex+0x414/0x560 [ 103.755421][ T6164] _copy_to_user+0x31/0xb0 [ 103.755452][ T6164] bpf_test_finish+0x56f/0x700 [ 103.755495][ T6164] ? __pfx_bpf_test_finish+0x10/0x10 [ 103.755533][ T6164] ? bpf_test_init+0x133/0x170 [ 103.755574][ T6164] bpf_prog_test_run_xdp+0x79a/0x1000 [ 103.755625][ T6164] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.755662][ T6164] ? __fget_files+0x2a/0x420 [ 103.755686][ T6164] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.755719][ T6164] bpf_prog_test_run+0x2c4/0x340 [ 103.755744][ T6164] __sys_bpf+0x4a4/0x860 [ 103.755777][ T6164] ? __pfx___sys_bpf+0x10/0x10 [ 103.755823][ T6164] ? ksys_write+0x22a/0x250 [ 103.755852][ T6164] ? __pfx_ksys_write+0x10/0x10 [ 103.755876][ T6164] ? rcu_is_watching+0x15/0xb0 [ 103.755909][ T6164] __x64_sys_bpf+0x7c/0x90 [ 103.755938][ T6164] do_syscall_64+0xfa/0x3b0 [ 103.755956][ T6164] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.755986][ T6164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.756006][ T6164] ? clear_bhb_loop+0x60/0xb0 [ 103.756035][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.756055][ T6164] RIP: 0033:0x7efea018e9a9 [ 103.756073][ T6164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.756089][ T6164] RSP: 002b:00007efea1046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.756110][ T6164] RAX: ffffffffffffffda RBX: 00007efea03b5fa0 RCX: 00007efea018e9a9 [ 103.756125][ T6164] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 000000000000000a [ 103.756137][ T6164] RBP: 00007efea1046090 R08: 0000000000000000 R09: 0000000000000000 [ 103.756149][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.756159][ T6164] R13: 0000000000000000 R14: 00007efea03b5fa0 R15: 00007ffdd6abde98 [ 103.756191][ T6164] [ 103.775425][ T6141] team0: Port device team_slave_1 removed [ 103.997148][ T6167] netlink: 'syz.4.49': attribute type 13 has an invalid length. [ 104.009392][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.018342][ T6167] netlink: 'syz.4.49': attribute type 17 has an invalid length. [ 104.019565][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.044250][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.051753][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.156328][ T6168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.198782][ T6168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.202457][ T6170] netlink: 108 bytes leftover after parsing attributes in process `syz.1.51'. [ 104.249976][ T6167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.304863][ T6172] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 104.318829][ T6172] syzkaller1: ignored: set checksum disabled [ 104.325349][ T6172] syzkaller1: tun_chr_ioctl cmd 35108 [ 104.353988][ T6177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.362036][ T6177] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 104.377440][ T6177] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 104.513781][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.55'. [ 104.532951][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.55'. [ 104.561380][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.55'. [ 104.684755][ T6184] batman_adv: batadv0: Adding interface: ip6gretap1 [ 104.715957][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 104.718900][ T6184] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.774691][ T6184] batman_adv: batadv0: Interface activated: ip6gretap1 [ 104.864305][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 104.911100][ T6197] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 104.932572][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.940435][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.947884][ T6202] FAULT_INJECTION: forcing a failure. [ 104.947884][ T6202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.947917][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.4.61 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 104.947941][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.947953][ T6202] Call Trace: [ 104.947961][ T6202] [ 104.947970][ T6202] dump_stack_lvl+0x189/0x250 [ 104.947999][ T6202] ? __pfx____ratelimit+0x10/0x10 [ 104.948032][ T6202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.948056][ T6202] ? __pfx__printk+0x10/0x10 [ 104.948084][ T6202] ? __might_fault+0xb0/0x130 [ 104.948125][ T6202] should_fail_ex+0x414/0x560 [ 104.948152][ T6202] _copy_from_user+0x2d/0xb0 [ 104.948182][ T6202] ___sys_sendmsg+0x158/0x2a0 [ 104.948208][ T6202] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.948283][ T6202] ? __fget_files+0x2a/0x420 [ 104.948300][ T6202] ? __fget_files+0x3a0/0x420 [ 104.948329][ T6202] __x64_sys_sendmsg+0x19b/0x260 [ 104.948354][ T6202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.948388][ T6202] ? __pfx_ksys_write+0x10/0x10 [ 104.948411][ T6202] ? rcu_is_watching+0x15/0xb0 [ 104.948440][ T6202] ? do_syscall_64+0xbe/0x3b0 [ 104.948473][ T6202] do_syscall_64+0xfa/0x3b0 [ 104.948490][ T6202] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.948518][ T6202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.948540][ T6202] ? clear_bhb_loop+0x60/0xb0 [ 104.948567][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.948589][ T6202] RIP: 0033:0x7efea018e9a9 [ 104.948611][ T6202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.948628][ T6202] RSP: 002b:00007efea1046038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.948651][ T6202] RAX: ffffffffffffffda RBX: 00007efea03b5fa0 RCX: 00007efea018e9a9 [ 104.948667][ T6202] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 104.948682][ T6202] RBP: 00007efea1046090 R08: 0000000000000000 R09: 0000000000000000 [ 104.948696][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.948708][ T6202] R13: 0000000000000000 R14: 00007efea03b5fa0 R15: 00007ffdd6abde98 [ 104.948743][ T6202] [ 105.177686][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.185204][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.427571][ T6212] FAULT_INJECTION: forcing a failure. [ 105.427571][ T6212] name failslab, interval 1, probability 0, space 0, times 0 [ 105.440845][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 105.450875][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.0.64 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 105.450900][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.450911][ T6212] Call Trace: [ 105.450918][ T6212] [ 105.450925][ T6212] dump_stack_lvl+0x189/0x250 [ 105.450952][ T6212] ? __pfx____ratelimit+0x10/0x10 [ 105.450979][ T6212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.451000][ T6212] ? __pfx__printk+0x10/0x10 [ 105.451037][ T6212] should_fail_ex+0x414/0x560 [ 105.451060][ T6212] should_failslab+0xa8/0x100 [ 105.451089][ T6212] __kmalloc_cache_noprof+0x70/0x3d0 [ 105.451113][ T6212] ? sctp_add_bind_addr+0x8c/0x370 [ 105.451143][ T6212] sctp_add_bind_addr+0x8c/0x370 [ 105.451180][ T6212] sctp_copy_local_addr_list+0x30b/0x4e0 [ 105.451209][ T6212] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 105.451234][ T6212] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 105.451262][ T6212] ? sctp_v6_is_any+0x64/0x80 [ 105.451279][ T6212] ? sctp_copy_one_addr+0x93/0x360 [ 105.451307][ T6212] sctp_bind_addr_copy+0xb3/0x3c0 [ 105.451334][ T6212] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 105.451360][ T6212] sctp_connect_new_asoc+0x2e0/0x690 [ 105.451383][ T6212] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 105.451403][ T6212] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 105.451423][ T6212] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 105.451440][ T6212] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 105.451460][ T6212] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 105.451482][ T6212] __sctp_connect+0x5ba/0xd50 [ 105.451513][ T6212] ? __pfx___sctp_connect+0x10/0x10 [ 105.451542][ T6212] sctp_inet_connect+0x12e/0x1e0 [ 105.451572][ T6212] __sys_connect+0x313/0x440 [ 105.451590][ T6212] ? __fget_files+0x3a0/0x420 [ 105.451606][ T6212] ? __pfx___sys_connect+0x10/0x10 [ 105.451635][ T6212] ? __pfx_ksys_write+0x10/0x10 [ 105.451656][ T6212] ? rcu_is_watching+0x15/0xb0 [ 105.451685][ T6212] __x64_sys_connect+0x7a/0x90 [ 105.451703][ T6212] do_syscall_64+0xfa/0x3b0 [ 105.451719][ T6212] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.451745][ T6212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.451762][ T6212] ? clear_bhb_loop+0x60/0xb0 [ 105.451783][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.451800][ T6212] RIP: 0033:0x7fb474b8e9a9 [ 105.451816][ T6212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.451830][ T6212] RSP: 002b:00007fb4729f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 105.451848][ T6212] RAX: ffffffffffffffda RBX: 00007fb474db5fa0 RCX: 00007fb474b8e9a9 [ 105.451860][ T6212] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 105.451870][ T6212] RBP: 00007fb4729f6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.451898][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.451908][ T6212] R13: 0000000000000000 R14: 00007fb474db5fa0 R15: 00007ffe8c845e88 [ 105.451938][ T6212] [ 105.750816][ T6208] vlan2: entered promiscuous mode [ 105.756014][ T6208] syz_tun: entered promiscuous mode [ 105.913683][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'. [ 105.969535][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.62'. [ 106.034586][ T6220] FAULT_INJECTION: forcing a failure. [ 106.034586][ T6220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.052230][ T6220] CPU: 1 UID: 0 PID: 6220 Comm: syz.2.68 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 106.052256][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.052266][ T6220] Call Trace: [ 106.052273][ T6220] [ 106.052281][ T6220] dump_stack_lvl+0x189/0x250 [ 106.052308][ T6220] ? __pfx____ratelimit+0x10/0x10 [ 106.052335][ T6220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.052356][ T6220] ? __pfx__printk+0x10/0x10 [ 106.052392][ T6220] should_fail_ex+0x414/0x560 [ 106.052415][ T6220] _copy_from_user+0x2d/0xb0 [ 106.052439][ T6220] __copy_msghdr+0x3c5/0x5b0 [ 106.052464][ T6220] ___sys_sendmsg+0x1a5/0x2a0 [ 106.052490][ T6220] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.052544][ T6220] ? __fget_files+0x2a/0x420 [ 106.052558][ T6220] ? __fget_files+0x3a0/0x420 [ 106.052582][ T6220] __sys_sendmmsg+0x227/0x430 [ 106.052608][ T6220] ? __pfx___sys_sendmmsg+0x10/0x10 [ 106.052643][ T6220] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 106.052688][ T6220] ? ksys_write+0x22a/0x250 [ 106.052715][ T6220] ? __pfx_ksys_write+0x10/0x10 [ 106.052737][ T6220] ? rcu_is_watching+0x15/0xb0 [ 106.052766][ T6220] __x64_sys_sendmmsg+0xa0/0xc0 [ 106.052789][ T6220] do_syscall_64+0xfa/0x3b0 [ 106.052806][ T6220] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.052833][ T6220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.052851][ T6220] ? clear_bhb_loop+0x60/0xb0 [ 106.052874][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.052892][ T6220] RIP: 0033:0x7fd81958e9a9 [ 106.052908][ T6220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.052923][ T6220] RSP: 002b:00007fd81a3bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 106.052942][ T6220] RAX: ffffffffffffffda RBX: 00007fd8197b5fa0 RCX: 00007fd81958e9a9 [ 106.052955][ T6220] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 106.052966][ T6220] RBP: 00007fd81a3bb090 R08: 0000000000000000 R09: 0000000000000000 [ 106.052977][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.052987][ T6220] R13: 0000000000000000 R14: 00007fd8197b5fa0 R15: 00007fff0482f698 [ 106.053016][ T6220] [ 106.293843][ T6209] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 106.302225][ T6222] vlan2: entered promiscuous mode [ 106.387532][ T6222] team0: entered promiscuous mode [ 106.505689][ T6235] syz.4.73 uses obsolete (PF_INET,SOCK_PACKET) [ 106.951302][ T6262] FAULT_INJECTION: forcing a failure. [ 106.951302][ T6262] name failslab, interval 1, probability 0, space 0, times 0 [ 106.988358][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.0.82 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 106.988387][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.988398][ T6262] Call Trace: [ 106.988406][ T6262] [ 106.988414][ T6262] dump_stack_lvl+0x189/0x250 [ 106.988443][ T6262] ? __pfx____ratelimit+0x10/0x10 [ 106.988473][ T6262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.988509][ T6262] ? __pfx__printk+0x10/0x10 [ 106.988537][ T6262] ? __pfx___might_resched+0x10/0x10 [ 106.988559][ T6262] ? fs_reclaim_acquire+0x7d/0x100 [ 106.988582][ T6262] should_fail_ex+0x414/0x560 [ 106.988606][ T6262] should_failslab+0xa8/0x100 [ 106.988636][ T6262] __kmalloc_noprof+0xcb/0x4f0 [ 106.988661][ T6262] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 106.988690][ T6262] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 106.988721][ T6262] genl_family_rcv_msg_doit+0xb8/0x300 [ 106.988751][ T6262] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 106.988778][ T6262] ? rcu_is_watching+0x15/0xb0 [ 106.988802][ T6262] ? apparmor_capable+0x137/0x1b0 [ 106.988829][ T6262] ? bpf_lsm_capable+0x9/0x20 [ 106.988857][ T6262] ? security_capable+0x7e/0x2e0 [ 106.988882][ T6262] genl_rcv_msg+0x60e/0x790 [ 106.988912][ T6262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.988933][ T6262] ? __pfx_ieee802154_llsec_add_dev+0x10/0x10 [ 106.988972][ T6262] netlink_rcv_skb+0x205/0x470 [ 106.989021][ T6262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.989047][ T6262] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.989096][ T6262] ? down_read+0x1ad/0x2e0 [ 106.989120][ T6262] genl_rcv+0x28/0x40 [ 106.989141][ T6262] netlink_unicast+0x75c/0x8e0 [ 106.989183][ T6262] netlink_sendmsg+0x805/0xb30 [ 106.989212][ T6262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.989235][ T6262] ? aa_sock_msg_perm+0x94/0x160 [ 106.989264][ T6262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.989284][ T6262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.989304][ T6262] __sock_sendmsg+0x219/0x270 [ 106.989347][ T6262] ____sys_sendmsg+0x505/0x830 [ 106.989374][ T6262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.989404][ T6262] ? import_iovec+0x74/0xa0 [ 106.989433][ T6262] ___sys_sendmsg+0x21f/0x2a0 [ 106.989456][ T6262] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.989515][ T6262] ? __fget_files+0x2a/0x420 [ 106.989530][ T6262] ? __fget_files+0x3a0/0x420 [ 106.989557][ T6262] __x64_sys_sendmsg+0x19b/0x260 [ 106.989582][ T6262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.989613][ T6262] ? __pfx_ksys_write+0x10/0x10 [ 106.989636][ T6262] ? rcu_is_watching+0x15/0xb0 [ 106.989663][ T6262] ? do_syscall_64+0xbe/0x3b0 [ 106.989685][ T6262] do_syscall_64+0xfa/0x3b0 [ 106.989701][ T6262] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.989728][ T6262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.989747][ T6262] ? clear_bhb_loop+0x60/0xb0 [ 106.989769][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.989787][ T6262] RIP: 0033:0x7fb474b8e9a9 [ 106.989803][ T6262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.989818][ T6262] RSP: 002b:00007fb4729f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.989837][ T6262] RAX: ffffffffffffffda RBX: 00007fb474db5fa0 RCX: 00007fb474b8e9a9 [ 106.989850][ T6262] RDX: 0000000000008850 RSI: 00002000000000c0 RDI: 0000000000000006 [ 106.989861][ T6262] RBP: 00007fb4729f6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.989871][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.989881][ T6262] R13: 0000000000000000 R14: 00007fb474db5fa0 R15: 00007ffe8c845e88 [ 106.989911][ T6262] [ 107.132566][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 107.244904][ T6258] vxcan3: entered allmulticast mode [ 107.301622][ T6264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.306903][ T6267] netlink: 'syz.2.80': attribute type 4 has an invalid length. [ 107.447650][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 107.464751][ T6282] bridge_slave_1: left allmulticast mode [ 107.481557][ T6282] bridge_slave_1: left promiscuous mode [ 107.497737][ T6281] FAULT_INJECTION: forcing a failure. [ 107.497737][ T6281] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 107.512664][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.551052][ T6282] bridge_slave_0: left allmulticast mode [ 107.558787][ T6281] CPU: 1 UID: 0 PID: 6281 Comm: syz.4.86 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 107.558817][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.558830][ T6281] Call Trace: [ 107.558838][ T6281] [ 107.558847][ T6281] dump_stack_lvl+0x189/0x250 [ 107.558877][ T6281] ? __pfx____ratelimit+0x10/0x10 [ 107.558919][ T6281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.558945][ T6281] ? __pfx__printk+0x10/0x10 [ 107.558975][ T6281] ? fs_reclaim_acquire+0x7d/0x100 [ 107.559004][ T6281] should_fail_ex+0x414/0x560 [ 107.559031][ T6281] prepare_alloc_pages+0x213/0x610 [ 107.559060][ T6281] __alloc_frozen_pages_noprof+0x123/0x370 [ 107.559087][ T6281] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.559120][ T6281] ? policy_nodemask+0x27c/0x720 [ 107.559155][ T6281] alloc_pages_mpol+0x232/0x4a0 [ 107.559191][ T6281] alloc_pages_noprof+0xa9/0x190 [ 107.559223][ T6281] get_zeroed_page_noprof+0x1a/0x90 [ 107.559245][ T6281] rds_cong_from_addr+0xd8/0x370 [ 107.559277][ T6281] rds_cong_get_maps+0x53/0xb0 [ 107.559304][ T6281] __rds_conn_create+0x9a9/0x2060 [ 107.559328][ T6281] ? __rds_conn_create+0x2e3/0x2060 [ 107.559369][ T6281] ? __pfx___rds_conn_create+0x10/0x10 [ 107.559405][ T6281] ? __raw_spin_lock_init+0x45/0x100 [ 107.559443][ T6281] rds_conn_create_outgoing+0x43/0x60 [ 107.559475][ T6281] rds_sendmsg+0x1001/0x1f00 [ 107.559514][ T6281] ? __pfx_rds_sendmsg+0x10/0x10 [ 107.559530][ T6281] ? aa_sk_perm+0x81e/0x950 [ 107.559566][ T6281] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.559594][ T6281] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 107.559625][ T6281] ? aa_sock_msg_perm+0x94/0x160 [ 107.559648][ T6281] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.559669][ T6281] ? __pfx_rds_sendmsg+0x10/0x10 [ 107.559688][ T6281] __sock_sendmsg+0x219/0x270 [ 107.559722][ T6281] ____sys_sendmsg+0x505/0x830 [ 107.559751][ T6281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.559785][ T6281] ? import_iovec+0x74/0xa0 [ 107.559817][ T6281] ___sys_sendmsg+0x21f/0x2a0 [ 107.559843][ T6281] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.559913][ T6281] ? __fget_files+0x2a/0x420 [ 107.559930][ T6281] ? __fget_files+0x3a0/0x420 [ 107.559959][ T6281] __x64_sys_sendmsg+0x19b/0x260 [ 107.559986][ T6281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.560020][ T6281] ? __pfx_ksys_write+0x10/0x10 [ 107.560045][ T6281] ? rcu_is_watching+0x15/0xb0 [ 107.560075][ T6281] ? do_syscall_64+0xbe/0x3b0 [ 107.560098][ T6281] do_syscall_64+0xfa/0x3b0 [ 107.560116][ T6281] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.560146][ T6281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.560167][ T6281] ? clear_bhb_loop+0x60/0xb0 [ 107.560192][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.560212][ T6281] RIP: 0033:0x7efea018e9a9 [ 107.560230][ T6281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.560246][ T6281] RSP: 002b:00007efea1046038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.560266][ T6281] RAX: ffffffffffffffda RBX: 00007efea03b5fa0 RCX: 00007efea018e9a9 [ 107.560280][ T6281] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 107.560292][ T6281] RBP: 00007efea1046090 R08: 0000000000000000 R09: 0000000000000000 [ 107.560303][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.560315][ T6281] R13: 0000000000000000 R14: 00007efea03b5fa0 R15: 00007ffdd6abde98 [ 107.560346][ T6281] [ 107.560771][ T6282] bridge_slave_0: left promiscuous mode [ 107.938765][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.206727][ T6302] FAULT_INJECTION: forcing a failure. [ 108.206727][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 108.231450][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.1.93 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 108.231477][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.231488][ T6302] Call Trace: [ 108.231495][ T6302] [ 108.231503][ T6302] dump_stack_lvl+0x189/0x250 [ 108.231531][ T6302] ? __pfx____ratelimit+0x10/0x10 [ 108.231558][ T6302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.231581][ T6302] ? __pfx__printk+0x10/0x10 [ 108.231609][ T6302] ? __pfx___might_resched+0x10/0x10 [ 108.231632][ T6302] ? fs_reclaim_acquire+0x7d/0x100 [ 108.231655][ T6302] should_fail_ex+0x414/0x560 [ 108.231678][ T6302] should_failslab+0xa8/0x100 [ 108.231707][ T6302] __kmalloc_noprof+0xcb/0x4f0 [ 108.231733][ T6302] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 108.231764][ T6302] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 108.231796][ T6302] genl_start+0x180/0x6c0 [ 108.231817][ T6302] ? netlink_lookup+0x30/0x200 [ 108.231851][ T6302] __netlink_dump_start+0x466/0x7e0 [ 108.231889][ T6302] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 108.231916][ T6302] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 108.231938][ T6302] ? genl_get_cmd+0x67f/0x910 [ 108.231966][ T6302] ? __pfx_genl_start+0x10/0x10 [ 108.231985][ T6302] ? __pfx_genl_dumpit+0x10/0x10 [ 108.232005][ T6302] ? __pfx_genl_done+0x10/0x10 [ 108.232041][ T6302] genl_rcv_msg+0x5da/0x790 [ 108.232070][ T6302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.232092][ T6302] ? __pfx_ieee802154_llsec_dump_devs+0x10/0x10 [ 108.232137][ T6302] netlink_rcv_skb+0x205/0x470 [ 108.232167][ T6302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.232191][ T6302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.232238][ T6302] ? down_read+0x1ad/0x2e0 [ 108.232260][ T6302] genl_rcv+0x28/0x40 [ 108.232279][ T6302] netlink_unicast+0x75c/0x8e0 [ 108.232317][ T6302] netlink_sendmsg+0x805/0xb30 [ 108.232344][ T6302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.232365][ T6302] ? aa_sock_msg_perm+0x94/0x160 [ 108.232387][ T6302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.232407][ T6302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.232426][ T6302] __sock_sendmsg+0x219/0x270 [ 108.232456][ T6302] ____sys_sendmsg+0x505/0x830 [ 108.232488][ T6302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.232518][ T6302] ? import_iovec+0x74/0xa0 [ 108.232546][ T6302] ___sys_sendmsg+0x21f/0x2a0 [ 108.232570][ T6302] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.232629][ T6302] ? __fget_files+0x2a/0x420 [ 108.232645][ T6302] ? __fget_files+0x3a0/0x420 [ 108.232672][ T6302] __x64_sys_sendmsg+0x19b/0x260 [ 108.232696][ T6302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.232728][ T6302] ? __pfx_ksys_write+0x10/0x10 [ 108.232750][ T6302] ? rcu_is_watching+0x15/0xb0 [ 108.232777][ T6302] ? do_syscall_64+0xbe/0x3b0 [ 108.232799][ T6302] do_syscall_64+0xfa/0x3b0 [ 108.232815][ T6302] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.232842][ T6302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.232860][ T6302] ? clear_bhb_loop+0x60/0xb0 [ 108.232883][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.232901][ T6302] RIP: 0033:0x7f3d4b78e9a9 [ 108.232917][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.232932][ T6302] RSP: 002b:00007f3d4c683038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.232951][ T6302] RAX: ffffffffffffffda RBX: 00007f3d4b9b5fa0 RCX: 00007f3d4b78e9a9 [ 108.232964][ T6302] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 108.232975][ T6302] RBP: 00007f3d4c683090 R08: 0000000000000000 R09: 0000000000000000 [ 108.232986][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.232996][ T6302] R13: 0000000000000000 R14: 00007f3d4b9b5fa0 R15: 00007fffefc55fa8 [ 108.233025][ T6302] [ 108.641212][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.648810][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.673505][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.680908][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.081591][ T6324] 8021q: VLANs not supported on nlmon0 [ 109.181753][ T6331] openvswitch: netlink: Message has 4 unknown bytes. [ 109.321074][ T6331] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 110.133435][ T6346] __nla_validate_parse: 7 callbacks suppressed [ 110.133453][ T6346] netlink: 504 bytes leftover after parsing attributes in process `syz.2.105'. [ 110.379982][ T6351] netlink: 256 bytes leftover after parsing attributes in process `syz.4.107'. [ 110.425157][ T6351] netlink: 56 bytes leftover after parsing attributes in process `syz.4.107'. [ 110.453877][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.107'. [ 110.773158][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 110.891124][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.112'. [ 111.084445][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.115'. [ 111.177546][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 111.219796][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 111.232429][ T6373] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 111.258144][ T6373] batman_adv: batadv0: Removing interface: ip6gretap1 [ 111.347862][ T6384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.357746][ T6384] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 111.367132][ T6384] team0: Failed to send options change via netlink (err -105) [ 111.376387][ T6384] team0: Port device batadv0 added [ 111.606291][ T6389] netlink: 'syz.2.121': attribute type 13 has an invalid length. [ 111.652063][ T6389] netlink: 'syz.2.121': attribute type 17 has an invalid length. [ 111.760330][ T6389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.842137][ T6398] netlink: 'syz.1.123': attribute type 8 has an invalid length. [ 111.852021][ T6399] openvswitch: netlink: Message has 4 unknown bytes. [ 111.880153][ T6401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.894155][ T6401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.908389][ T6399] netlink: 'syz.0.122': attribute type 4 has an invalid length. [ 112.928043][ T6416] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.127'. [ 114.187885][ T6439] openvswitch: netlink: Message has 4 unknown bytes. [ 114.205355][ T6439] netlink: 'syz.4.134': attribute type 4 has an invalid length. [ 114.461438][ T6445] openvswitch: netlink: Message has 4 unknown bytes. [ 114.473817][ T6445] netlink: 'syz.1.135': attribute type 4 has an invalid length. [ 115.820033][ T6456] netlink: 'syz.0.140': attribute type 13 has an invalid length. [ 115.829081][ T6456] netlink: 'syz.0.140': attribute type 17 has an invalid length. [ 115.857852][ T6456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.877728][ T6461] FAULT_INJECTION: forcing a failure. [ 115.877728][ T6461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.897018][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.2.142 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 115.897045][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.897057][ T6461] Call Trace: [ 115.897066][ T6461] [ 115.897074][ T6461] dump_stack_lvl+0x189/0x250 [ 115.897104][ T6461] ? __pfx____ratelimit+0x10/0x10 [ 115.897136][ T6461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.897160][ T6461] ? __pfx__printk+0x10/0x10 [ 115.897187][ T6461] ? __might_fault+0xb0/0x130 [ 115.897234][ T6461] should_fail_ex+0x414/0x560 [ 115.897260][ T6461] _copy_from_user+0x2d/0xb0 [ 115.897288][ T6461] do_ipv6_setsockopt+0x23e/0x2eb0 [ 115.897321][ T6461] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 115.897354][ T6461] ? get_pid_task+0x20/0x1f0 [ 115.897380][ T6461] ? aa_label_sk_perm+0x413/0x560 [ 115.897418][ T6461] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 115.897463][ T6461] ? vfs_write+0x8d8/0xa90 [ 115.897494][ T6461] ? __pfx___might_resched+0x10/0x10 [ 115.897527][ T6461] ? __lock_acquire+0xab9/0xd20 [ 115.897555][ T6461] ipv6_setsockopt+0x59/0x170 [ 115.897582][ T6461] rawv6_setsockopt+0x23b/0x5b0 [ 115.897610][ T6461] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 115.897634][ T6461] ? aa_sock_opt_perm+0x74/0x110 [ 115.897655][ T6461] ? sock_common_setsockopt+0x36/0xc0 [ 115.897687][ T6461] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 115.897719][ T6461] do_sock_setsockopt+0x17c/0x1b0 [ 115.897747][ T6461] __x64_sys_setsockopt+0x13f/0x1b0 [ 115.897774][ T6461] do_syscall_64+0xfa/0x3b0 [ 115.897793][ T6461] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.897822][ T6461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.897841][ T6461] ? clear_bhb_loop+0x60/0xb0 [ 115.897866][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.897885][ T6461] RIP: 0033:0x7fd81958e9a9 [ 115.897902][ T6461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.897918][ T6461] RSP: 002b:00007fd81a3bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.897939][ T6461] RAX: ffffffffffffffda RBX: 00007fd8197b5fa0 RCX: 00007fd81958e9a9 [ 115.897953][ T6461] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003 [ 115.897964][ T6461] RBP: 00007fd81a3bb090 R08: 0000000000000018 R09: 0000000000000000 [ 115.897977][ T6461] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 115.897988][ T6461] R13: 0000000000000000 R14: 00007fd8197b5fa0 R15: 00007fff0482f698 [ 115.898017][ T6461] [ 115.935307][ T6456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.304679][ T6469] __nla_validate_parse: 1 callbacks suppressed [ 116.304698][ T6469] netlink: 452 bytes leftover after parsing attributes in process `syz.1.145'. [ 116.337612][ T6470] FAULT_INJECTION: forcing a failure. [ 116.337612][ T6470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.382695][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.2.144 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 116.382736][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.382748][ T6470] Call Trace: [ 116.382755][ T6470] [ 116.382763][ T6470] dump_stack_lvl+0x189/0x250 [ 116.382791][ T6470] ? __pfx____ratelimit+0x10/0x10 [ 116.382819][ T6470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.382841][ T6470] ? __pfx__printk+0x10/0x10 [ 116.382865][ T6470] ? __might_fault+0xb0/0x130 [ 116.382901][ T6470] should_fail_ex+0x414/0x560 [ 116.382925][ T6470] _copy_from_user+0x2d/0xb0 [ 116.382951][ T6470] ___sys_sendmsg+0x158/0x2a0 [ 116.382975][ T6470] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.383032][ T6470] ? __fget_files+0x2a/0x420 [ 116.383047][ T6470] ? __fget_files+0x3a0/0x420 [ 116.383073][ T6470] __x64_sys_sendmsg+0x19b/0x260 [ 116.383097][ T6470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.383128][ T6470] ? __pfx_ksys_write+0x10/0x10 [ 116.383157][ T6470] ? rcu_is_watching+0x15/0xb0 [ 116.383194][ T6470] ? do_syscall_64+0xbe/0x3b0 [ 116.383213][ T6470] do_syscall_64+0xfa/0x3b0 [ 116.383228][ T6470] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.383270][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.383288][ T6470] ? clear_bhb_loop+0x60/0xb0 [ 116.383310][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.383328][ T6470] RIP: 0033:0x7fd81958e9a9 [ 116.383344][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.383358][ T6470] RSP: 002b:00007fd81a39a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.383377][ T6470] RAX: ffffffffffffffda RBX: 00007fd8197b6080 RCX: 00007fd81958e9a9 [ 116.383390][ T6470] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 116.383401][ T6470] RBP: 00007fd81a39a090 R08: 0000000000000000 R09: 0000000000000000 [ 116.383412][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.383422][ T6470] R13: 0000000000000000 R14: 00007fd8197b6080 R15: 00007fff0482f698 [ 116.383450][ T6470] [ 116.778973][ T6474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.146'. [ 116.869236][ T6477] syz.2.146 (6477) used obsolete PPPIOCDETACH ioctl [ 117.084359][ T6480] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 117.240828][ T6483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.150'. [ 117.250773][ T6483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.150'. [ 117.261014][ T6483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.150'. [ 117.756004][ T6321] Set syz1 is full, maxelem 65536 reached [ 117.922105][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 118.074408][ T6506] netlink: 'syz.3.156': attribute type 10 has an invalid length. [ 118.104844][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.112724][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.121795][ T6506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.156'. [ 118.372669][ T6504] netlink: 176 bytes leftover after parsing attributes in process `syz.2.158'. [ 118.396384][ T6504] ip6gretap0: entered promiscuous mode [ 118.419768][ T1146] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.431297][ T1146] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.526608][ T1146] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.557932][ T1146] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.580340][ T6518] netlink: 'syz.2.161': attribute type 1 has an invalid length. [ 118.665484][ T6523] netlink: 452 bytes leftover after parsing attributes in process `syz.0.160'. [ 118.671431][ T6522] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 118.718723][ T6518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.747293][ T6524] bond1: (slave bridge0): making interface the new active one [ 118.758692][ T6524] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 118.803482][ T6529] gretap1: entered promiscuous mode [ 118.926881][ T6533] IPv6: sit1: Disabled Multicast RS [ 119.107740][ T6540] FAULT_INJECTION: forcing a failure. [ 119.107740][ T6540] name failslab, interval 1, probability 0, space 0, times 0 [ 119.149306][ T6540] CPU: 0 UID: 0 PID: 6540 Comm: syz.1.167 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 119.149335][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.149346][ T6540] Call Trace: [ 119.149354][ T6540] [ 119.149362][ T6540] dump_stack_lvl+0x189/0x250 [ 119.149398][ T6540] ? __pfx____ratelimit+0x10/0x10 [ 119.149427][ T6540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.149449][ T6540] ? __pfx__printk+0x10/0x10 [ 119.149475][ T6540] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 119.149502][ T6540] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 119.149528][ T6540] ? preempt_schedule+0xae/0xc0 [ 119.149552][ T6540] ? dev_loopback_xmit+0x2f6/0x490 [ 119.149581][ T6540] should_fail_ex+0x414/0x560 [ 119.149605][ T6540] should_failslab+0xa8/0x100 [ 119.149635][ T6540] __kmalloc_noprof+0xcb/0x4f0 [ 119.149660][ T6540] ? ___neigh_create+0x6d5/0x2260 [ 119.149692][ T6540] ___neigh_create+0x6d5/0x2260 [ 119.149728][ T6540] ? __ipv6_neigh_lookup_noref+0x531/0x710 [ 119.149752][ T6540] ? dev_loopback_xmit+0x2f6/0x490 [ 119.149784][ T6540] ip6_finish_output2+0xb4d/0x16a0 [ 119.149808][ T6540] ? ip6_finish_output2+0x701/0x16a0 [ 119.149849][ T6540] ? ip6_mtu+0x7d/0x3f0 [ 119.149864][ T6540] ? __pfx_ip6_finish_output2+0x10/0x10 [ 119.149884][ T6540] ? ip6_mtu+0x7d/0x3f0 [ 119.149898][ T6540] ? ip6_mtu+0x321/0x3f0 [ 119.149916][ T6540] ? ip6_finish_output+0x2ef/0x4e0 [ 119.149936][ T6540] ip6_mr_output+0x4e9/0x1100 [ 119.149980][ T6540] ? ip6_mr_output+0x1ca/0x1100 [ 119.150003][ T6540] ? __pfx_ip6_mr_output+0x10/0x10 [ 119.150030][ T6540] ? __ip6_local_out+0x609/0x870 [ 119.150061][ T6540] ? __ip6_local_out+0x82c/0x870 [ 119.150085][ T6540] ? __lock_acquire+0xab9/0xd20 [ 119.150106][ T6540] ? __ip6_local_out+0x609/0x870 [ 119.150146][ T6540] ? skb_dst+0x4f/0xd0 [ 119.150173][ T6540] ? dst_output+0x17b/0x1c0 [ 119.150197][ T6540] ? ip6_send_skb+0x10f/0x390 [ 119.150219][ T6540] ip6_send_skb+0x1d5/0x390 [ 119.150242][ T6540] rawv6_push_pending_frames+0x6e9/0x8d0 [ 119.150275][ T6540] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 119.150303][ T6540] ? __pfx_raw6_getfrag+0x10/0x10 [ 119.150331][ T6540] rawv6_sendmsg+0x1331/0x1820 [ 119.150372][ T6540] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 119.150420][ T6540] ? __lock_acquire+0xab9/0xd20 [ 119.150439][ T6540] ? __pfx_aa_sk_perm+0x10/0x10 [ 119.150473][ T6540] ? sock_rps_record_flow+0x19/0x410 [ 119.150501][ T6540] ? inet_sendmsg+0x2f4/0x370 [ 119.150535][ T6540] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.150558][ T6540] __sock_sendmsg+0x19c/0x270 [ 119.150586][ T6540] ____sys_sendmsg+0x52d/0x830 [ 119.150613][ T6540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.150643][ T6540] ? import_iovec+0x74/0xa0 [ 119.150671][ T6540] ___sys_sendmsg+0x21f/0x2a0 [ 119.150694][ T6540] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.150753][ T6540] ? __fget_files+0x2a/0x420 [ 119.150767][ T6540] ? __fget_files+0x3a0/0x420 [ 119.150794][ T6540] __sys_sendmmsg+0x227/0x430 [ 119.150820][ T6540] ? __pfx___sys_sendmmsg+0x10/0x10 [ 119.150843][ T6540] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 119.150887][ T6540] ? ksys_write+0x22a/0x250 [ 119.150913][ T6540] ? __pfx_ksys_write+0x10/0x10 [ 119.150934][ T6540] ? rcu_is_watching+0x15/0xb0 [ 119.150961][ T6540] __x64_sys_sendmmsg+0xa0/0xc0 [ 119.150984][ T6540] do_syscall_64+0xfa/0x3b0 [ 119.151000][ T6540] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.151025][ T6540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.151043][ T6540] ? clear_bhb_loop+0x60/0xb0 [ 119.151064][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.151081][ T6540] RIP: 0033:0x7f3d4b78e9a9 [ 119.151102][ T6540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.151116][ T6540] RSP: 002b:00007f3d4c683038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.151141][ T6540] RAX: ffffffffffffffda RBX: 00007f3d4b9b5fa0 RCX: 00007f3d4b78e9a9 [ 119.151153][ T6540] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000003 [ 119.151163][ T6540] RBP: 00007f3d4c683090 R08: 0000000000000000 R09: 0000000000000000 [ 119.151174][ T6540] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 119.151184][ T6540] R13: 0000000000000000 R14: 00007f3d4b9b5fa0 R15: 00007fffefc55fa8 [ 119.151212][ T6540] [ 119.779671][ T6550] netlink: 156 bytes leftover after parsing attributes in process `syz.1.170'. [ 120.004770][ T6562] netlink: 'syz.4.175': attribute type 30 has an invalid length. [ 120.076694][ T6559] netlink: 'syz.0.174': attribute type 13 has an invalid length. [ 120.086938][ T6559] netlink: 'syz.0.174': attribute type 17 has an invalid length. [ 120.114528][ T6559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.172399][ T6567] FAULT_INJECTION: forcing a failure. [ 120.172399][ T6567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.192978][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.4.176 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 120.193004][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.193015][ T6567] Call Trace: [ 120.193022][ T6567] [ 120.193030][ T6567] dump_stack_lvl+0x189/0x250 [ 120.193057][ T6567] ? __pfx____ratelimit+0x10/0x10 [ 120.193085][ T6567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.193107][ T6567] ? __pfx__printk+0x10/0x10 [ 120.193132][ T6567] ? __might_fault+0xb0/0x130 [ 120.193169][ T6567] should_fail_ex+0x414/0x560 [ 120.193193][ T6567] _copy_from_user+0x2d/0xb0 [ 120.193219][ T6567] csum_and_copy_from_iter_full+0x1e1/0x1eb0 [ 120.193261][ T6567] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 120.193296][ T6567] ? trace_kmalloc+0x1f/0xd0 [ 120.193322][ T6567] ip_generic_getfrag+0x12f/0x2b0 [ 120.193349][ T6567] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 120.193375][ T6567] ? skb_put+0x11b/0x210 [ 120.193397][ T6567] __ip_append_data+0x3243/0x40a0 [ 120.193440][ T6567] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 120.193485][ T6567] ? __pfx___ip_append_data+0x10/0x10 [ 120.193512][ T6567] ? __local_bh_enable_ip+0x12d/0x1c0 [ 120.193533][ T6567] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.193564][ T6567] ip_append_data+0x10e/0x190 [ 120.193590][ T6567] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 120.193615][ T6567] udp_sendmsg+0x541/0x2170 [ 120.193645][ T6567] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 120.193681][ T6567] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 120.193707][ T6567] ? __pfx_udp_sendmsg+0x10/0x10 [ 120.193742][ T6567] ? __lock_acquire+0xab9/0xd20 [ 120.193787][ T6567] ? __pfx_aa_sk_perm+0x10/0x10 [ 120.193813][ T6567] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 120.193837][ T6567] ? __fget_files+0x2a/0x420 [ 120.193853][ T6567] ? sock_rps_record_flow+0x19/0x410 [ 120.193880][ T6567] ? inet_sendmsg+0x29c/0x370 [ 120.193902][ T6567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.193925][ T6567] __sock_sendmsg+0x19c/0x270 [ 120.193955][ T6567] __sys_sendto+0x3bd/0x520 [ 120.193977][ T6567] ? __pfx___sys_sendto+0x10/0x10 [ 120.193993][ T6567] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 120.194024][ T6567] ? __fget_files+0x3a0/0x420 [ 120.194061][ T6567] ? ksys_write+0x22a/0x250 [ 120.194086][ T6567] ? __pfx_ksys_write+0x10/0x10 [ 120.194106][ T6567] ? rcu_is_watching+0x15/0xb0 [ 120.194131][ T6567] __x64_sys_sendto+0xde/0x100 [ 120.194152][ T6567] do_syscall_64+0xfa/0x3b0 [ 120.194168][ T6567] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.194193][ T6567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.194210][ T6567] ? clear_bhb_loop+0x60/0xb0 [ 120.194231][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.194247][ T6567] RIP: 0033:0x7efea018e9a9 [ 120.194263][ T6567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.194277][ T6567] RSP: 002b:00007efea1046038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 120.194295][ T6567] RAX: ffffffffffffffda RBX: 00007efea03b5fa0 RCX: 00007efea018e9a9 [ 120.194307][ T6567] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000005 [ 120.194318][ T6567] RBP: 00007efea1046090 R08: 0000000000000000 R09: 0000000000000000 [ 120.194328][ T6567] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.194338][ T6567] R13: 0000000000000000 R14: 00007efea03b5fa0 R15: 00007ffdd6abde98 [ 120.194365][ T6567] [ 120.242161][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.561685][ T6574] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 120.867591][ T6585] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 122.166639][ T6634] __nla_validate_parse: 11 callbacks suppressed [ 122.166657][ T6634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 122.363053][ T6636] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 122.403099][ T6640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.196'. [ 122.578983][ T6647] openvswitch: netlink: Message has 4 unknown bytes. [ 122.587629][ T6647] netlink: 'syz.0.195': attribute type 4 has an invalid length. [ 122.671740][ T6651] FAULT_INJECTION: forcing a failure. [ 122.671740][ T6651] name failslab, interval 1, probability 0, space 0, times 0 [ 122.716772][ T6651] CPU: 0 UID: 0 PID: 6651 Comm: syz.4.198 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 122.716799][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.716810][ T6651] Call Trace: [ 122.716818][ T6651] [ 122.716826][ T6651] dump_stack_lvl+0x189/0x250 [ 122.716853][ T6651] ? __pfx____ratelimit+0x10/0x10 [ 122.716900][ T6651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.716924][ T6651] ? __pfx__printk+0x10/0x10 [ 122.716957][ T6651] ? __pfx___might_resched+0x10/0x10 [ 122.716996][ T6651] ? fs_reclaim_acquire+0x7d/0x100 [ 122.717021][ T6651] should_fail_ex+0x414/0x560 [ 122.717048][ T6651] should_failslab+0xa8/0x100 [ 122.717080][ T6651] __kmalloc_noprof+0xcb/0x4f0 [ 122.717108][ T6651] ? bpf_test_init+0xc2/0x170 [ 122.717143][ T6651] bpf_test_init+0xc2/0x170 [ 122.717178][ T6651] bpf_prog_test_run_xdp+0x37c/0x1000 [ 122.717227][ T6651] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 122.717265][ T6651] ? __fget_files+0x2a/0x420 [ 122.717289][ T6651] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 122.717322][ T6651] bpf_prog_test_run+0x2c4/0x340 [ 122.717348][ T6651] __sys_bpf+0x4a4/0x860 [ 122.717381][ T6651] ? __pfx___sys_bpf+0x10/0x10 [ 122.717427][ T6651] ? ksys_write+0x22a/0x250 [ 122.717464][ T6651] ? __pfx_ksys_write+0x10/0x10 [ 122.717489][ T6651] ? rcu_is_watching+0x15/0xb0 [ 122.717520][ T6651] __x64_sys_bpf+0x7c/0x90 [ 122.717549][ T6651] do_syscall_64+0xfa/0x3b0 [ 122.717568][ T6651] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.717598][ T6651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.717618][ T6651] ? clear_bhb_loop+0x60/0xb0 [ 122.717643][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.717663][ T6651] RIP: 0033:0x7efea018e9a9 [ 122.717681][ T6651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.717697][ T6651] RSP: 002b:00007efea1046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.717718][ T6651] RAX: ffffffffffffffda RBX: 00007efea03b5fa0 RCX: 00007efea018e9a9 [ 122.717733][ T6651] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 122.717746][ T6651] RBP: 00007efea1046090 R08: 0000000000000000 R09: 0000000000000000 [ 122.717758][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.717769][ T6651] R13: 0000000000000000 R14: 00007efea03b5fa0 R15: 00007ffdd6abde98 [ 122.717802][ T6651] [ 123.141779][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 123.153692][ T6662] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 124.128918][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 124.145702][ T6697] netlink: 132 bytes leftover after parsing attributes in process `syz.4.215'. [ 124.246998][ T6702] FAULT_INJECTION: forcing a failure. [ 124.246998][ T6702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.282451][ T6702] CPU: 0 UID: 0 PID: 6702 Comm: syz.2.216 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 124.282481][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.282492][ T6702] Call Trace: [ 124.282499][ T6702] [ 124.282508][ T6702] dump_stack_lvl+0x189/0x250 [ 124.282534][ T6702] ? __pfx____ratelimit+0x10/0x10 [ 124.282563][ T6702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.282585][ T6702] ? __pfx__printk+0x10/0x10 [ 124.282612][ T6702] ? fs_reclaim_acquire+0x7d/0x100 [ 124.282639][ T6702] should_fail_ex+0x414/0x560 [ 124.282662][ T6702] prepare_alloc_pages+0x213/0x610 [ 124.282688][ T6702] __alloc_frozen_pages_noprof+0x123/0x370 [ 124.282711][ T6702] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 124.282725][ T6702] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.282750][ T6702] ? exc_page_fault+0x9f/0xf0 [ 124.282774][ T6702] ? policy_nodemask+0x27c/0x720 [ 124.282811][ T6702] alloc_pages_mpol+0x232/0x4a0 [ 124.282839][ T6702] alloc_pages_noprof+0xa9/0x190 [ 124.282862][ T6702] bpf_prog_test_run_xdp+0xb8d/0x1000 [ 124.282902][ T6702] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 124.282934][ T6702] ? __fget_files+0x2a/0x420 [ 124.282954][ T6702] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 124.282982][ T6702] bpf_prog_test_run+0x2c4/0x340 [ 124.283004][ T6702] __sys_bpf+0x4a4/0x860 [ 124.283042][ T6702] ? __pfx___sys_bpf+0x10/0x10 [ 124.283080][ T6702] ? ksys_write+0x22a/0x250 [ 124.283105][ T6702] ? __pfx_ksys_write+0x10/0x10 [ 124.283125][ T6702] ? rcu_is_watching+0x15/0xb0 [ 124.283153][ T6702] __x64_sys_bpf+0x7c/0x90 [ 124.283177][ T6702] do_syscall_64+0xfa/0x3b0 [ 124.283193][ T6702] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.283218][ T6702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.283236][ T6702] ? clear_bhb_loop+0x60/0xb0 [ 124.283257][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.283273][ T6702] RIP: 0033:0x7fd81958e9a9 [ 124.283288][ T6702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.283302][ T6702] RSP: 002b:00007fd81a3bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.283320][ T6702] RAX: ffffffffffffffda RBX: 00007fd8197b5fa0 RCX: 00007fd81958e9a9 [ 124.283332][ T6702] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 124.283343][ T6702] RBP: 00007fd81a3bb090 R08: 0000000000000000 R09: 0000000000000000 [ 124.283353][ T6702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.283362][ T6702] R13: 0000000000000000 R14: 00007fd8197b5fa0 R15: 00007fff0482f698 [ 124.283390][ T6702] [ 124.905733][ T6714] netlink: 'syz.0.220': attribute type 13 has an invalid length. [ 124.914854][ T6721] netlink: 40 bytes leftover after parsing attributes in process `syz.3.223'. [ 124.925627][ T6714] netlink: 'syz.0.220': attribute type 17 has an invalid length. [ 124.946660][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 124.961787][ T6714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.126084][ T6722] team0: Port device batadv0 removed [ 125.143010][ T6725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.154629][ T6725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.190075][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 125.978142][ T6752] tipc: Started in network mode [ 125.983449][ T6752] tipc: Node identity a2ab34a9eeb3, cluster identity 4711 [ 125.994526][ T6752] tipc: Enabled bearer , priority 0 [ 126.005441][ T6752] syzkaller0: entered promiscuous mode [ 126.010971][ T6752] syzkaller0: entered allmulticast mode [ 126.036764][ T6752] syzkaller0: mtu less than device minimum [ 126.048358][ T6750] tipc: Resetting bearer [ 126.089092][ T6750] tipc: Disabling bearer [ 126.348814][ T6771] Bluetooth: MGMT ver 1.23 [ 126.403036][ T6769] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 126.416144][ T6769] netlink: 244 bytes leftover after parsing attributes in process `syz.1.235'. [ 127.117728][ T6793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.142075][ T6777] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.228009][ T6783] syzkaller0: entered promiscuous mode [ 127.247909][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 127.259389][ T6783] syzkaller0: entered allmulticast mode [ 127.337474][ T6777] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.440887][ T6799] netlink: 44 bytes leftover after parsing attributes in process `syz.1.240'. [ 127.469994][ T6799] netlink: 44 bytes leftover after parsing attributes in process `syz.1.240'. [ 127.486717][ T6777] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.703315][ T6777] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.825233][ C1] Unknown status report in ack skb [ 127.917245][ T6814] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 127.956062][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 127.956733][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.981014][ T6817] netlink: 'syz.3.244': attribute type 13 has an invalid length. [ 127.989418][ T6817] netlink: 'syz.3.244': attribute type 17 has an invalid length. [ 128.129768][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.140772][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.157652][ T6817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.181868][ T6827] openvswitch: netlink: Message has 4 unknown bytes. [ 128.191411][ T6827] netlink: 'syz.2.245': attribute type 4 has an invalid length. [ 128.216908][ T6828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.506433][ T6817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.579217][ T157] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.587803][ T157] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.856196][ T6834] Cannot find add_set index 3 as target [ 129.202440][ T157] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.350349][ T6845] netlink: 452 bytes leftover after parsing attributes in process `syz.1.251'. [ 129.365917][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 129.519657][ T6854] warning: `syz.2.253' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.561755][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 129.678910][ T6858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.256'. [ 129.731242][ T6862] syz_tun: entered allmulticast mode [ 129.745391][ T6859] syz_tun: left allmulticast mode [ 129.851676][ T6865] trusted_key: syz.0.260 sent an empty control message without MSG_MORE. [ 129.872887][ T6866] netlink: 'syz.3.259': attribute type 64 has an invalid length. [ 129.921460][ T6869] netlink: 14 bytes leftover after parsing attributes in process `syz.0.260'. [ 129.951364][ T6869] tunl0: entered allmulticast mode [ 130.051720][ T6873] netlink: 32 bytes leftover after parsing attributes in process `syz.0.262'. [ 130.094880][ T6874] No such timeout policy "syz0" [ 130.518993][ T6888] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 130.641197][ T6892] FAULT_INJECTION: forcing a failure. [ 130.641197][ T6892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.654983][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.4.268 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 130.655010][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.655022][ T6892] Call Trace: [ 130.655029][ T6892] [ 130.655037][ T6892] dump_stack_lvl+0x189/0x250 [ 130.655065][ T6892] ? __pfx____ratelimit+0x10/0x10 [ 130.655093][ T6892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.655115][ T6892] ? __pfx__printk+0x10/0x10 [ 130.655140][ T6892] ? __might_fault+0xb0/0x130 [ 130.655177][ T6892] should_fail_ex+0x414/0x560 [ 130.655201][ T6892] _copy_from_user+0x2d/0xb0 [ 130.655228][ T6892] __sys_bpf+0x1ed/0x860 [ 130.655259][ T6892] ? __pfx___sys_bpf+0x10/0x10 [ 130.655316][ T6892] ? rcu_is_watching+0x15/0xb0 [ 130.655344][ T6892] __x64_sys_bpf+0x7c/0x90 [ 130.655370][ T6892] do_syscall_64+0xfa/0x3b0 [ 130.655387][ T6892] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.655414][ T6892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.655432][ T6892] ? clear_bhb_loop+0x60/0xb0 [ 130.655455][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.655473][ T6892] RIP: 0033:0x7efea018e9a9 [ 130.655489][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.655504][ T6892] RSP: 002b:00007efea1046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.655523][ T6892] RAX: ffffffffffffffda RBX: 00007efea03b5fa0 RCX: 00007efea018e9a9 [ 130.655535][ T6892] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 130.655546][ T6892] RBP: 00007efea1046090 R08: 0000000000000000 R09: 0000000000000000 [ 130.655557][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.655567][ T6892] R13: 0000000000000000 R14: 00007efea03b5fa0 R15: 00007ffdd6abde98 [ 130.655596][ T6892] [ 131.042921][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.050458][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.092793][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.109080][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.241168][ T6901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.273663][ T6901] bridge0: port 1(bond1) entered blocking state [ 131.280714][ T6901] bridge0: port 1(bond1) entered disabled state [ 131.307067][ T6901] bond1: entered allmulticast mode [ 131.314925][ T6901] bond1: entered promiscuous mode [ 131.322287][ T6901] bridge0: port 1(bond1) entered blocking state [ 131.328840][ T6901] bridge0: port 1(bond1) entered forwarding state [ 131.369058][ T6912] dummy0: entered promiscuous mode [ 131.399927][ T6912] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 131.435856][ T6912] bridge0: port 2(hsr1) entered blocking state [ 131.444842][ T6912] bridge0: port 2(hsr1) entered disabled state [ 131.453572][ T6912] hsr1: entered allmulticast mode [ 131.458775][ T6912] dummy0: entered allmulticast mode [ 131.466488][ T6912] team0: entered allmulticast mode [ 131.473297][ T6912] hsr1: entered promiscuous mode [ 131.478829][ T6912] bridge0: port 2(hsr1) entered blocking state [ 131.485164][ T6912] bridge0: port 2(hsr1) entered forwarding state [ 131.494924][ T12] bridge0: port 1(bond1) entered disabled state [ 131.636871][ T6931] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 131.645866][ T6931] openvswitch: netlink: Message has 1 unknown bytes. [ 131.668815][ T6933] netlink: 'syz.2.281': attribute type 29 has an invalid length. [ 131.713382][ T6933] netlink: 'syz.2.281': attribute type 29 has an invalid length. [ 131.749135][ T6933] netlink: 'syz.2.281': attribute type 29 has an invalid length. [ 131.764559][ T6933] netlink: 'syz.2.281': attribute type 29 has an invalid length. [ 131.910234][ T6943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.086528][ T6952] FAULT_INJECTION: forcing a failure. [ 132.086528][ T6952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.106721][ T6952] CPU: 1 UID: 0 PID: 6952 Comm: syz.3.287 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 132.106750][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.106761][ T6952] Call Trace: [ 132.106769][ T6952] [ 132.106777][ T6952] dump_stack_lvl+0x189/0x250 [ 132.106807][ T6952] ? __pfx____ratelimit+0x10/0x10 [ 132.106837][ T6952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.106860][ T6952] ? __pfx__printk+0x10/0x10 [ 132.106887][ T6952] ? __might_fault+0xb0/0x130 [ 132.106925][ T6952] should_fail_ex+0x414/0x560 [ 132.106956][ T6952] _copy_from_iter+0x3f5/0x16f0 [ 132.106985][ T6952] ? rcu_is_watching+0x15/0xb0 [ 132.107032][ T6952] ? __pfx__copy_from_iter+0x10/0x10 [ 132.107058][ T6952] ? __build_skb_around+0x257/0x3e0 [ 132.107083][ T6952] ? netlink_sendmsg+0x642/0xb30 [ 132.107100][ T6952] ? skb_put+0x11b/0x210 [ 132.107125][ T6952] netlink_sendmsg+0x6b2/0xb30 [ 132.107164][ T6952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.107188][ T6952] ? aa_sock_msg_perm+0x94/0x160 [ 132.107212][ T6952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.107240][ T6952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.107261][ T6952] __sock_sendmsg+0x219/0x270 [ 132.107293][ T6952] ____sys_sendmsg+0x505/0x830 [ 132.107321][ T6952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.107354][ T6952] ? import_iovec+0x74/0xa0 [ 132.107387][ T6952] ___sys_sendmsg+0x21f/0x2a0 [ 132.107414][ T6952] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.107474][ T6952] ? __fget_files+0x2a/0x420 [ 132.107490][ T6952] ? __fget_files+0x3a0/0x420 [ 132.107521][ T6952] __x64_sys_sendmsg+0x19b/0x260 [ 132.107547][ T6952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.107582][ T6952] ? __pfx_ksys_write+0x10/0x10 [ 132.107606][ T6952] ? rcu_is_watching+0x15/0xb0 [ 132.107636][ T6952] ? do_syscall_64+0xbe/0x3b0 [ 132.107659][ T6952] do_syscall_64+0xfa/0x3b0 [ 132.107677][ T6952] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.107706][ T6952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.107726][ T6952] ? clear_bhb_loop+0x60/0xb0 [ 132.107751][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.107770][ T6952] RIP: 0033:0x7f6991f8e9a9 [ 132.107788][ T6952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.107803][ T6952] RSP: 002b:00007f6992d7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.107824][ T6952] RAX: ffffffffffffffda RBX: 00007f69921b5fa0 RCX: 00007f6991f8e9a9 [ 132.107837][ T6952] RDX: 0000000000008850 RSI: 00002000000000c0 RDI: 0000000000000006 [ 132.107849][ T6952] RBP: 00007f6992d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 132.107861][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.107871][ T6952] R13: 0000000000000000 R14: 00007f69921b5fa0 R15: 00007ffc539f8628 [ 132.107902][ T6952] [ 132.719753][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730482][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.740911][ T6966] __nla_validate_parse: 14 callbacks suppressed [ 132.740929][ T6966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.291'. [ 133.027941][ T6976] netlink: 'syz.1.292': attribute type 4 has an invalid length. [ 133.170120][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 133.735531][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.296'. [ 133.951043][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 134.004635][ T6999] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 134.023786][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.297'. [ 134.057215][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 134.067258][ T7003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.074774][ T7003] IPv6: NLM_F_CREATE should be set when creating new route [ 134.329531][ T7011] netlink: 452 bytes leftover after parsing attributes in process `syz.0.301'. [ 134.344175][ T7012] Unsupported ieee802154 address type: 0 [ 134.448165][ T7014] netlink: 40 bytes leftover after parsing attributes in process `syz.4.303'. [ 134.731387][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 134.802374][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 134.811487][ T7027] netlink: 'syz.1.308': attribute type 7 has an invalid length. [ 135.958529][ T7060] netlink: 'syz.2.319': attribute type 13 has an invalid length. [ 135.975974][ T7060] netlink: 'syz.2.319': attribute type 17 has an invalid length. [ 136.054348][ T7060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.159027][ T7060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.192027][ T7060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.312841][ T5167] Bluetooth: hci4: command tx timeout [ 137.561918][ T7100] syz_tun: entered promiscuous mode [ 137.579570][ T7100] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 137.597003][ T7100] Cannot create hsr debugfs directory [ 137.965946][ T7118] __nla_validate_parse: 9 callbacks suppressed [ 137.965963][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 138.215410][ T7112] tipc: Started in network mode [ 138.233657][ T7112] tipc: Node identity 7ee185522e55, cluster identity 4711 [ 138.275408][ T7112] tipc: Enabled bearer , priority 0 [ 138.305637][ T7124] syzkaller0: entered promiscuous mode [ 138.324387][ T7124] syzkaller0: entered allmulticast mode [ 138.463684][ T7112] tipc: Resetting bearer [ 138.610932][ T7139] netlink: 164 bytes leftover after parsing attributes in process `syz.1.343'. [ 138.741732][ T7143] bond1: entered promiscuous mode [ 138.831795][ T7111] tipc: Resetting bearer [ 138.877823][ T7111] tipc: Disabling bearer [ 139.055488][ T7156] netlink: 248 bytes leftover after parsing attributes in process `syz.4.349'. [ 139.070370][ T7159] FAULT_INJECTION: forcing a failure. [ 139.070370][ T7159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.092613][ T7159] CPU: 0 UID: 0 PID: 7159 Comm: syz.3.350 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 139.092642][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.092653][ T7159] Call Trace: [ 139.092662][ T7159] [ 139.092670][ T7159] dump_stack_lvl+0x189/0x250 [ 139.092700][ T7159] ? __pfx____ratelimit+0x10/0x10 [ 139.092732][ T7159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.092756][ T7159] ? __pfx__printk+0x10/0x10 [ 139.092786][ T7159] ? fs_reclaim_acquire+0x7d/0x100 [ 139.092816][ T7159] should_fail_ex+0x414/0x560 [ 139.092843][ T7159] prepare_alloc_pages+0x213/0x610 [ 139.092872][ T7159] __alloc_frozen_pages_noprof+0x123/0x370 [ 139.092898][ T7159] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.092924][ T7159] ? __pfx_css_rstat_updated+0x10/0x10 [ 139.092949][ T7159] ? policy_nodemask+0x27c/0x720 [ 139.092984][ T7159] alloc_pages_mpol+0x232/0x4a0 [ 139.093020][ T7159] folio_alloc_mpol_noprof+0x39/0x70 [ 139.093051][ T7159] shmem_alloc_and_add_folio+0x447/0xf60 [ 139.093083][ T7159] ? filemap_get_entry+0xad/0x2f0 [ 139.093102][ T7159] ? filemap_get_entry+0xad/0x2f0 [ 139.093117][ T7159] ? filemap_get_entry+0xad/0x2f0 [ 139.093141][ T7159] ? shmem_huge_global_enabled+0x174/0x3a0 [ 139.093165][ T7159] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 139.093197][ T7159] ? shmem_allowable_huge_orders+0x414/0x420 [ 139.093229][ T7159] shmem_get_folio_gfp+0x59d/0x1660 [ 139.093276][ T7159] shmem_fault+0x179/0x390 [ 139.093313][ T7159] __do_fault+0x138/0x390 [ 139.093347][ T7159] __handle_mm_fault+0x198b/0x5620 [ 139.093397][ T7159] ? __pfx___handle_mm_fault+0x10/0x10 [ 139.093440][ T7159] ? follow_page_pte+0x8d6/0x14b0 [ 139.093478][ T7159] handle_mm_fault+0x40a/0x8e0 [ 139.093517][ T7159] __get_user_pages+0x1af4/0x30b0 [ 139.093582][ T7159] ? __pfx___get_user_pages+0x10/0x10 [ 139.093613][ T7159] ? __gup_longterm_locked+0x64f/0x15b0 [ 139.093638][ T7159] ? down_read_killable+0x1d1/0x350 [ 139.093658][ T7159] ? try_get_folio+0x633/0x660 [ 139.093689][ T7159] __gup_longterm_locked+0x7c3/0x15b0 [ 139.093742][ T7159] gup_fast_fallback+0x1cd4/0x2260 [ 139.093809][ T7159] ? __pfx_gup_fast_fallback+0x10/0x10 [ 139.093839][ T7159] ? rcu_is_watching+0x15/0xb0 [ 139.093867][ T7159] ? is_valid_gup_args+0x11f/0x200 [ 139.093895][ T7159] ? pin_user_pages_fast+0x4d/0xb0 [ 139.093924][ T7159] rds_cmsg_rdma_args+0x8f4/0x1240 [ 139.093986][ T7159] rds_cmsg_send+0x33d/0x5c0 [ 139.094021][ T7159] rds_sendmsg+0x1129/0x1f00 [ 139.094060][ T7159] ? __pfx_rds_sendmsg+0x10/0x10 [ 139.094078][ T7159] ? aa_sk_perm+0x81e/0x950 [ 139.094116][ T7159] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.094145][ T7159] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 139.094177][ T7159] ? aa_sock_msg_perm+0x94/0x160 [ 139.094200][ T7159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.094221][ T7159] ? __pfx_rds_sendmsg+0x10/0x10 [ 139.094242][ T7159] __sock_sendmsg+0x219/0x270 [ 139.094276][ T7159] ____sys_sendmsg+0x505/0x830 [ 139.094306][ T7159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.094341][ T7159] ? import_iovec+0x74/0xa0 [ 139.094373][ T7159] ___sys_sendmsg+0x21f/0x2a0 [ 139.094400][ T7159] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.094467][ T7159] ? __fget_files+0x2a/0x420 [ 139.094484][ T7159] ? __fget_files+0x3a0/0x420 [ 139.094515][ T7159] __x64_sys_sendmsg+0x19b/0x260 [ 139.094541][ T7159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.094576][ T7159] ? __pfx_ksys_write+0x10/0x10 [ 139.094609][ T7159] ? rcu_is_watching+0x15/0xb0 [ 139.094639][ T7159] ? do_syscall_64+0xbe/0x3b0 [ 139.094664][ T7159] do_syscall_64+0xfa/0x3b0 [ 139.094681][ T7159] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.094712][ T7159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.094732][ T7159] ? clear_bhb_loop+0x60/0xb0 [ 139.094758][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.094777][ T7159] RIP: 0033:0x7f6991f8e9a9 [ 139.094795][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.094811][ T7159] RSP: 002b:00007f6992d7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.094833][ T7159] RAX: ffffffffffffffda RBX: 00007f69921b5fa0 RCX: 00007f6991f8e9a9 [ 139.094847][ T7159] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 139.094859][ T7159] RBP: 00007f6992d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 139.094870][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.094881][ T7159] R13: 0000000000000000 R14: 00007f69921b5fa0 R15: 00007ffc539f8628 [ 139.094914][ T7159] [ 139.716038][ T7168] FAULT_INJECTION: forcing a failure. [ 139.716038][ T7168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.788448][ T7168] CPU: 1 UID: 0 PID: 7168 Comm: syz.3.353 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 139.788480][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.788491][ T7168] Call Trace: [ 139.788498][ T7168] [ 139.788506][ T7168] dump_stack_lvl+0x189/0x250 [ 139.788533][ T7168] ? __pfx____ratelimit+0x10/0x10 [ 139.788562][ T7168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.788585][ T7168] ? __pfx__printk+0x10/0x10 [ 139.788610][ T7168] ? __might_fault+0xb0/0x130 [ 139.788666][ T7168] should_fail_ex+0x414/0x560 [ 139.788692][ T7168] _copy_from_user+0x2d/0xb0 [ 139.788720][ T7168] ___sys_sendmsg+0x158/0x2a0 [ 139.788746][ T7168] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.788808][ T7168] ? __fget_files+0x2a/0x420 [ 139.788825][ T7168] ? __fget_files+0x3a0/0x420 [ 139.788854][ T7168] __x64_sys_sendmsg+0x19b/0x260 [ 139.788880][ T7168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.788913][ T7168] ? __pfx_ksys_write+0x10/0x10 [ 139.788938][ T7168] ? rcu_is_watching+0x15/0xb0 [ 139.788966][ T7168] ? do_syscall_64+0xbe/0x3b0 [ 139.788990][ T7168] do_syscall_64+0xfa/0x3b0 [ 139.789007][ T7168] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.789036][ T7168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.789055][ T7168] ? clear_bhb_loop+0x60/0xb0 [ 139.789080][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.789099][ T7168] RIP: 0033:0x7f6991f8e9a9 [ 139.789116][ T7168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.789132][ T7168] RSP: 002b:00007f6992d7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.789152][ T7168] RAX: ffffffffffffffda RBX: 00007f69921b5fa0 RCX: 00007f6991f8e9a9 [ 139.789166][ T7168] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 139.789179][ T7168] RBP: 00007f6992d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 139.789190][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.789201][ T7168] R13: 0000000000000000 R14: 00007f69921b5fa0 R15: 00007ffc539f8628 [ 139.789231][ T7168] [ 140.015404][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 140.205787][ T7190] FAULT_INJECTION: forcing a failure. [ 140.205787][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 140.258770][ T7190] CPU: 0 UID: 0 PID: 7190 Comm: syz.4.358 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 140.258793][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.258804][ T7190] Call Trace: [ 140.258811][ T7190] [ 140.258818][ T7190] dump_stack_lvl+0x189/0x250 [ 140.258844][ T7190] ? __pfx____ratelimit+0x10/0x10 [ 140.258871][ T7190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.258892][ T7190] ? __pfx__printk+0x10/0x10 [ 140.258921][ T7190] ? __pfx___might_resched+0x10/0x10 [ 140.258946][ T7190] should_fail_ex+0x414/0x560 [ 140.258969][ T7190] should_failslab+0xa8/0x100 [ 140.258995][ T7190] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 140.259020][ T7190] ? __alloc_skb+0x112/0x2d0 [ 140.259041][ T7190] __alloc_skb+0x112/0x2d0 [ 140.259062][ T7190] netlink_sendmsg+0x5c6/0xb30 [ 140.259089][ T7190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.259109][ T7190] ? aa_sock_msg_perm+0x94/0x160 [ 140.259129][ T7190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.259148][ T7190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.259164][ T7190] __sock_sendmsg+0x219/0x270 [ 140.259191][ T7190] ____sys_sendmsg+0x505/0x830 [ 140.259216][ T7190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.259245][ T7190] ? import_iovec+0x74/0xa0 [ 140.259271][ T7190] ___sys_sendmsg+0x21f/0x2a0 [ 140.259294][ T7190] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.259347][ T7190] ? __fget_files+0x2a/0x420 [ 140.259362][ T7190] ? __fget_files+0x3a0/0x420 [ 140.259391][ T7190] __x64_sys_sendmsg+0x19b/0x260 [ 140.259414][ T7190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.259443][ T7190] ? __pfx_ksys_write+0x10/0x10 [ 140.259464][ T7190] ? rcu_is_watching+0x15/0xb0 [ 140.259495][ T7190] ? do_syscall_64+0xbe/0x3b0 [ 140.259516][ T7190] do_syscall_64+0xfa/0x3b0 [ 140.259531][ T7190] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.259557][ T7190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.259574][ T7190] ? clear_bhb_loop+0x60/0xb0 [ 140.259595][ T7190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.259612][ T7190] RIP: 0033:0x7efea018e9a9 [ 140.259628][ T7190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.259642][ T7190] RSP: 002b:00007efea1046038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.259660][ T7190] RAX: ffffffffffffffda RBX: 00007efea03b5fa0 RCX: 00007efea018e9a9 [ 140.259672][ T7190] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 140.259684][ T7190] RBP: 00007efea1046090 R08: 0000000000000000 R09: 0000000000000000 [ 140.259694][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.259704][ T7190] R13: 0000000000000000 R14: 00007efea03b5fa0 R15: 00007ffdd6abde98 [ 140.259748][ T7190] [ 140.534932][ T7195] netlink: 128 bytes leftover after parsing attributes in process `syz.3.362'. [ 140.673622][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 140.767758][ T7214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.364'. [ 140.909067][ T7219] netlink: 'syz.1.370': attribute type 13 has an invalid length. [ 140.936406][ T7219] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.370'. [ 140.943289][ T7221] bridge1: entered allmulticast mode [ 140.974103][ C1] Unknown status report in ack skb [ 141.018839][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.371'. [ 141.043643][ T7226] syzkaller0: create flow: hash 3495532533 index 1 [ 141.081086][ T7226] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 141.098795][ T7226] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.370'. [ 141.261628][ T1146] syzkaller0: tun_net_xmit 76 [ 141.267886][ T1146] syzkaller0: tun_net_xmit 48 [ 141.296379][ T3565] syzkaller0: tun_net_xmit 76 [ 141.353817][ T7233] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 141.381018][ T7218] syzkaller0: delete flow: hash 3495532533 index 1 [ 141.867300][ T7252] netlink: 'syz.4.383': attribute type 13 has an invalid length. [ 141.879683][ T7252] netlink: 'syz.4.383': attribute type 17 has an invalid length. [ 142.057961][ T7257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.089492][ T7257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.155965][ T5167] Bluetooth: hci4: link tx timeout [ 142.162598][ T5167] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.671997][ T7237] bond0: (slave bond_slave_0): Releasing backup interface [ 142.688697][ T7237] bond0: (slave bond_slave_1): Releasing backup interface [ 142.724597][ T7237] team0: Port device team_slave_0 removed [ 142.745233][ T7237] team0: Port device team_slave_1 removed [ 142.779789][ T7237] bond1: (slave bridge0): Releasing active interface [ 142.794520][ T7237] gretap1: left promiscuous mode [ 142.799916][ T7237] bridge1: left allmulticast mode [ 142.889331][ T7252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.002896][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 143.038320][ T7275] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 143.419916][ T7291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.464003][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'. [ 143.526313][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 143.743326][ T7303] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 143.751699][ T7303] netlink: 40 bytes leftover after parsing attributes in process `syz.4.400'. [ 143.817176][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.400'. [ 143.839860][ T7303] team0: Port device geneve0 added [ 143.846575][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 143.865156][ T7305] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 143.905204][ T7307] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 144.009226][ T7316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.406'. [ 144.076588][ T7321] lo speed is unknown, defaulting to 1000 [ 144.084057][ T7321] lo speed is unknown, defaulting to 1000 [ 144.100411][ T7321] lo speed is unknown, defaulting to 1000 [ 144.128713][ T7321] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.172233][ T7321] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 144.208762][ T7324] netlink: 'syz.2.408': attribute type 13 has an invalid length. [ 144.218334][ T7321] lo speed is unknown, defaulting to 1000 [ 144.227962][ T7321] lo speed is unknown, defaulting to 1000 [ 144.229716][ T7324] netlink: 'syz.2.408': attribute type 17 has an invalid length. [ 144.243841][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 144.300583][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 144.327589][ T7324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.343514][ T7321] lo speed is unknown, defaulting to 1000 [ 144.350992][ T7338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.351807][ T7321] lo speed is unknown, defaulting to 1000 [ 144.369092][ T7321] lo speed is unknown, defaulting to 1000 [ 144.398975][ T7324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.430884][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.414'. [ 144.479928][ T7343] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 144.891999][ T7368] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 145.020705][ T7368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.422'. [ 145.069989][ T7368] bond1: (slave gretap1): making interface the new active one [ 145.079272][ T7368] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 145.373612][ T7393] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 145.582382][ T7400] xt_hashlimit: max too large, truncated to 1048576 [ 145.589619][ T7400] Cannot find add_set index 3 as target [ 145.599786][ T7400] netlink: 'syz.1.431': attribute type 10 has an invalid length. [ 145.627211][ T7400] dummy0: entered promiscuous mode [ 145.644989][ T7400] dummy0: entered allmulticast mode [ 145.657333][ T7400] bridge0: port 1(dummy0) entered blocking state [ 145.664063][ T7400] bridge0: port 1(dummy0) entered disabled state [ 145.676939][ T7400] bridge0: port 1(dummy0) entered blocking state [ 145.683545][ T7400] bridge0: port 1(dummy0) entered forwarding state [ 145.781077][ T7410] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 145.819899][ T7412] netlink: 'syz.3.433': attribute type 4 has an invalid length. [ 145.928133][ T7413] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 146.031482][ T7418] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 146.063744][ T7418] tipc: Enabled bearer , priority 10 [ 146.216583][ T7425] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 146.861571][ T7443] netlink: 'syz.0.446': attribute type 8 has an invalid length. [ 146.896793][ T7417] tipc: Disabling bearer [ 146.950807][ T7448] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 147.077216][ T7448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.143065][ T7454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.152359][ T7454] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 147.164670][ T7454] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 147.193755][ T7463] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 147.269003][ T7455] veth3: entered promiscuous mode [ 147.307840][ T7455] bond1: (slave veth3): Enslaving as an active interface with a down link [ 147.316940][ T7448] erspan0: entered allmulticast mode [ 147.370684][ T7448] bond1: (slave erspan0): making interface the new active one [ 147.400649][ T7448] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 147.688906][ T7480] lo speed is unknown, defaulting to 1000 [ 148.123919][ T7509] netlink: 'syz.1.465': attribute type 4 has an invalid length. [ 148.142869][ T7504] lo speed is unknown, defaulting to 1000 [ 148.224063][ T7507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.345511][ T7513] __nla_validate_parse: 15 callbacks suppressed [ 148.345528][ T7513] netlink: 260 bytes leftover after parsing attributes in process `syz.2.466'. [ 148.385940][ T7513] netlink: 260 bytes leftover after parsing attributes in process `syz.2.466'. [ 148.837391][ T7521] lo speed is unknown, defaulting to 1000 [ 148.931668][ T7527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.471'. [ 148.987671][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 149.723328][ T7551] netlink: 'syz.0.478': attribute type 13 has an invalid length. [ 149.731265][ T7551] netlink: 'syz.0.478': attribute type 17 has an invalid length. [ 149.745133][ T7551] tunl0: left allmulticast mode [ 149.880994][ T7551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.941263][ T7566] netlink: 'syz.1.483': attribute type 4 has an invalid length. [ 149.942403][ T7567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.023183][ T978] lo speed is unknown, defaulting to 1000 [ 150.061883][ T7551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.037038][ T7589] netlink: 'syz.0.490': attribute type 13 has an invalid length. [ 151.056969][ T7589] netlink: 'syz.0.490': attribute type 17 has an invalid length. [ 151.140172][ T7593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.163075][ T7589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.191859][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 151.193708][ T7593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.278377][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 151.398188][ T7609] netlink: 'syz.3.497': attribute type 3 has an invalid length. [ 151.454286][ T7610] lo speed is unknown, defaulting to 1000 [ 151.895644][ T7626] netlink: 36 bytes leftover after parsing attributes in process `syz.3.500'. [ 151.907527][ T7626] netlink: 36 bytes leftover after parsing attributes in process `syz.3.500'. [ 151.936335][ T7620] "syz.3.500" (7620) uses obsolete ecb(arc4) skcipher [ 152.021376][ T7633] netlink: 132 bytes leftover after parsing attributes in process `syz.2.505'. [ 152.204536][ T7643] Bluetooth: MGMT ver 1.23 [ 152.479996][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 153.128920][ T7692] lo speed is unknown, defaulting to 1000 [ 153.307325][ T7706] FAULT_INJECTION: forcing a failure. [ 153.307325][ T7706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.324693][ T7706] CPU: 0 UID: 0 PID: 7706 Comm: syz.2.527 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 153.324718][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.324729][ T7706] Call Trace: [ 153.324736][ T7706] [ 153.324744][ T7706] dump_stack_lvl+0x189/0x250 [ 153.324770][ T7706] ? __pfx____ratelimit+0x10/0x10 [ 153.324796][ T7706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.324816][ T7706] ? __pfx__printk+0x10/0x10 [ 153.324840][ T7706] ? __might_fault+0xb0/0x130 [ 153.324874][ T7706] should_fail_ex+0x414/0x560 [ 153.324896][ T7706] _copy_from_user+0x2d/0xb0 [ 153.324921][ T7706] ___sys_sendmsg+0x158/0x2a0 [ 153.324943][ T7706] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.324996][ T7706] ? __fget_files+0x2a/0x420 [ 153.325011][ T7706] ? __fget_files+0x3a0/0x420 [ 153.325035][ T7706] __sys_sendmmsg+0x227/0x430 [ 153.325060][ T7706] ? __pfx___sys_sendmmsg+0x10/0x10 [ 153.325084][ T7706] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 153.325125][ T7706] ? ksys_write+0x22a/0x250 [ 153.325150][ T7706] ? __pfx_ksys_write+0x10/0x10 [ 153.325169][ T7706] ? rcu_is_watching+0x15/0xb0 [ 153.325196][ T7706] __x64_sys_sendmmsg+0xa0/0xc0 [ 153.325217][ T7706] do_syscall_64+0xfa/0x3b0 [ 153.325232][ T7706] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.325257][ T7706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.325274][ T7706] ? clear_bhb_loop+0x60/0xb0 [ 153.325295][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.325311][ T7706] RIP: 0033:0x7fd81958e9a9 [ 153.325326][ T7706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.325340][ T7706] RSP: 002b:00007fd81a3bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.325358][ T7706] RAX: ffffffffffffffda RBX: 00007fd8197b5fa0 RCX: 00007fd81958e9a9 [ 153.325372][ T7706] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 0000000000000003 [ 153.325382][ T7706] RBP: 00007fd81a3bb090 R08: 0000000000000000 R09: 0000000000000000 [ 153.325392][ T7706] R10: 00000000000097ff R11: 0000000000000246 R12: 0000000000000001 [ 153.325402][ T7706] R13: 0000000000000000 R14: 00007fd8197b5fa0 R15: 00007fff0482f698 [ 153.325429][ T7706] [ 153.573221][ T7713] __nla_validate_parse: 5 callbacks suppressed [ 153.573240][ T7713] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.530'. [ 153.609787][ T7713] netlink: 'syz.1.530': attribute type 12 has an invalid length. [ 153.642630][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 153.680969][ T7712] lo speed is unknown, defaulting to 1000 [ 154.021168][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 154.102095][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 154.140478][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.533'. [ 154.140520][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 154.187664][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.533'. [ 154.287460][ T7740] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 154.295445][ T7740] netlink: 224 bytes leftover after parsing attributes in process `syz.0.535'. [ 154.300860][ T7727] lo speed is unknown, defaulting to 1000 [ 154.608003][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 154.739894][ T7762] FAULT_INJECTION: forcing a failure. [ 154.739894][ T7762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.779058][ T7762] CPU: 1 UID: 0 PID: 7762 Comm: syz.1.541 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 154.779084][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.779094][ T7762] Call Trace: [ 154.779101][ T7762] [ 154.779108][ T7762] dump_stack_lvl+0x189/0x250 [ 154.779135][ T7762] ? __pfx____ratelimit+0x10/0x10 [ 154.779162][ T7762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.779184][ T7762] ? __pfx__printk+0x10/0x10 [ 154.779207][ T7762] ? __might_fault+0xb0/0x130 [ 154.779242][ T7762] should_fail_ex+0x414/0x560 [ 154.779264][ T7762] _copy_from_user+0x2d/0xb0 [ 154.779289][ T7762] ___sys_recvmsg+0x12e/0x510 [ 154.779317][ T7762] ? __pfx____sys_recvmsg+0x10/0x10 [ 154.779361][ T7762] ? __fget_files+0x3a0/0x420 [ 154.779387][ T7762] do_recvmmsg+0x307/0x770 [ 154.779416][ T7762] ? __pfx_do_recvmmsg+0x10/0x10 [ 154.779447][ T7762] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.779476][ T7762] __x64_sys_recvmmsg+0x190/0x240 [ 154.779499][ T7762] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 154.779522][ T7762] ? do_syscall_64+0xbe/0x3b0 [ 154.779541][ T7762] do_syscall_64+0xfa/0x3b0 [ 154.779556][ T7762] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.779582][ T7762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.779600][ T7762] ? clear_bhb_loop+0x60/0xb0 [ 154.779629][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.779646][ T7762] RIP: 0033:0x7f3d4b78e9a9 [ 154.779662][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.779677][ T7762] RSP: 002b:00007f3d4c683038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 154.779695][ T7762] RAX: ffffffffffffffda RBX: 00007f3d4b9b5fa0 RCX: 00007f3d4b78e9a9 [ 154.779707][ T7762] RDX: 0000000000000f00 RSI: 0000200000003300 RDI: 0000000000000006 [ 154.779718][ T7762] RBP: 00007f3d4c683090 R08: 0000000000000000 R09: 0000000000000000 [ 154.779728][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.779738][ T7762] R13: 0000000000000000 R14: 00007f3d4b9b5fa0 R15: 00007fffefc55fa8 [ 154.779764][ T7762] [ 155.038163][ T7771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 155.047206][ T7771] FAULT_INJECTION: forcing a failure. [ 155.047206][ T7771] name failslab, interval 1, probability 0, space 0, times 0 [ 155.060407][ T7771] CPU: 1 UID: 0 PID: 7771 Comm: syz.0.543 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 155.060431][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.060442][ T7771] Call Trace: [ 155.060449][ T7771] [ 155.060457][ T7771] dump_stack_lvl+0x189/0x250 [ 155.060482][ T7771] ? __pfx____ratelimit+0x10/0x10 [ 155.060510][ T7771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.060531][ T7771] ? __pfx__printk+0x10/0x10 [ 155.060561][ T7771] ? __pfx___might_resched+0x10/0x10 [ 155.060589][ T7771] ? fs_reclaim_acquire+0x7d/0x100 [ 155.060611][ T7771] should_fail_ex+0x414/0x560 [ 155.060633][ T7771] should_failslab+0xa8/0x100 [ 155.060660][ T7771] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 155.060684][ T7771] ? __d_alloc+0x31/0x6f0 [ 155.060707][ T7771] __d_alloc+0x31/0x6f0 [ 155.060732][ T7771] d_alloc_parallel+0xe0/0x14e0 [ 155.060766][ T7771] ? __lock_acquire+0xab9/0xd20 [ 155.060790][ T7771] ? __pfx_d_alloc_parallel+0x10/0x10 [ 155.060816][ T7771] ? __raw_spin_lock_init+0x45/0x100 [ 155.060843][ T7771] ? __init_waitqueue_head+0xa9/0x150 [ 155.060873][ T7771] __lookup_slow+0x116/0x3d0 [ 155.060895][ T7771] ? __pfx___lookup_slow+0x10/0x10 [ 155.060925][ T7771] ? d_lookup+0x8a/0xa0 [ 155.060945][ T7771] ? lookup_noperm+0x112/0x220 [ 155.060968][ T7771] start_creating+0x22e/0x3c0 [ 155.060995][ T7771] ? __pfx_start_creating+0x10/0x10 [ 155.061019][ T7771] ? snprintf+0xda/0x120 [ 155.061049][ T7771] __debugfs_create_file+0x79/0x4f0 [ 155.061078][ T7771] debugfs_create_file_full+0x3f/0x60 [ 155.061104][ T7771] ref_tracker_dir_debugfs+0x14e/0x270 [ 155.061125][ T7771] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 155.061171][ T7771] ? rcu_is_watching+0x15/0xb0 [ 155.061191][ T7771] ? alloc_netdev_mqs+0xa3/0x1170 [ 155.061218][ T7771] ? __raw_spin_lock_init+0x45/0x100 [ 155.061245][ T7771] alloc_netdev_mqs+0x26f/0x1170 [ 155.061266][ T7771] ? __pfx_hsr_dev_setup+0x10/0x10 [ 155.061293][ T7771] rtnl_create_link+0x31f/0xd10 [ 155.061323][ T7771] rtnl_newlink_create+0x25c/0xb00 [ 155.061350][ T7771] ? __pfx_aa_get_newest_label+0x10/0x10 [ 155.061372][ T7771] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 155.061389][ T7771] ? rtnl_newlink+0x8db/0x1c70 [ 155.061408][ T7771] ? __pfx___mutex_lock+0x10/0x10 [ 155.061452][ T7771] ? ns_capable+0x8a/0xf0 [ 155.061495][ T7771] rtnl_newlink+0x16d6/0x1c70 [ 155.061515][ T7771] ? netlink_sendmsg+0x805/0xb30 [ 155.061549][ T7771] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.061599][ T7771] ? kasan_quarantine_put+0xdd/0x220 [ 155.061625][ T7771] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.061661][ T7771] ? nlmon_xmit+0xb0/0x100 [ 155.061687][ T7771] ? kmem_cache_free+0x18f/0x400 [ 155.061724][ T7771] ? __local_bh_enable_ip+0x12d/0x1c0 [ 155.061748][ T7771] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.061778][ T7771] ? __local_bh_enable_ip+0x12d/0x1c0 [ 155.061801][ T7771] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 155.061828][ T7771] ? __dev_queue_xmit+0x27b/0x3b50 [ 155.061867][ T7771] ? __lock_acquire+0xab9/0xd20 [ 155.061916][ T7771] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.061934][ T7771] rtnetlink_rcv_msg+0x7cf/0xb70 [ 155.061970][ T7771] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 155.062000][ T7771] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.062029][ T7771] ? ref_tracker_free+0x63a/0x7d0 [ 155.062049][ T7771] ? __copy_skb_header+0xa7/0x550 [ 155.062075][ T7771] ? __pfx_ref_tracker_free+0x10/0x10 [ 155.062097][ T7771] ? __skb_clone+0x63/0x7a0 [ 155.062129][ T7771] netlink_rcv_skb+0x205/0x470 [ 155.062162][ T7771] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.062195][ T7771] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.062241][ T7771] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.062272][ T7771] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.062309][ T7771] netlink_unicast+0x75c/0x8e0 [ 155.062351][ T7771] netlink_sendmsg+0x805/0xb30 [ 155.062382][ T7771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.062405][ T7771] ? aa_sock_msg_perm+0x94/0x160 [ 155.062429][ T7771] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.062450][ T7771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.062475][ T7771] __sock_sendmsg+0x219/0x270 [ 155.062507][ T7771] ____sys_sendmsg+0x505/0x830 [ 155.062537][ T7771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.062571][ T7771] ? import_iovec+0x74/0xa0 [ 155.062610][ T7771] ___sys_sendmsg+0x21f/0x2a0 [ 155.062649][ T7771] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.062720][ T7771] ? __fget_files+0x2a/0x420 [ 155.062735][ T7771] ? __fget_files+0x3a0/0x420 [ 155.062761][ T7771] __x64_sys_sendmsg+0x19b/0x260 [ 155.062785][ T7771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.062816][ T7771] ? __pfx_ksys_write+0x10/0x10 [ 155.062836][ T7771] ? rcu_is_watching+0x15/0xb0 [ 155.062862][ T7771] ? do_syscall_64+0xbe/0x3b0 [ 155.062883][ T7771] do_syscall_64+0xfa/0x3b0 [ 155.062898][ T7771] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.062923][ T7771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.062940][ T7771] ? clear_bhb_loop+0x60/0xb0 [ 155.062962][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.062979][ T7771] RIP: 0033:0x7fb474b8e9a9 [ 155.062995][ T7771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.063011][ T7771] RSP: 002b:00007fb4729f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.063030][ T7771] RAX: ffffffffffffffda RBX: 00007fb474db5fa0 RCX: 00007fb474b8e9a9 [ 155.063043][ T7771] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 155.063053][ T7771] RBP: 00007fb4729f6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.063064][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.063074][ T7771] R13: 0000000000000000 R14: 00007fb474db5fa0 R15: 00007ffe8c845e88 [ 155.063103][ T7771] [ 155.671559][ T7771] erspan0: entered promiscuous mode [ 155.705903][ T7771] gretap0: entered promiscuous mode [ 155.862629][ T7780] netlink: 'syz.2.548': attribute type 13 has an invalid length. [ 155.870500][ T7780] netlink: 'syz.2.548': attribute type 17 has an invalid length. [ 155.934668][ T7780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.970996][ T7780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.984979][ T7780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.993320][ T7784] lo speed is unknown, defaulting to 1000 [ 156.018366][ T7795] tipc: Started in network mode [ 156.023506][ T7795] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 156.030875][ T7795] tipc: Enabled bearer , priority 0 [ 156.113360][ T7801] tipc: Resetting bearer [ 156.119314][ T7801] bridge_slave_0: left allmulticast mode [ 156.125077][ T7801] bridge_slave_0: left promiscuous mode [ 156.130862][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.148096][ T7801] bridge_slave_1: left allmulticast mode [ 156.153835][ T7801] bridge_slave_1: left promiscuous mode [ 156.159610][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.185827][ T7801] bond0: (slave bond_slave_0): Releasing backup interface [ 156.199803][ T7801] bond0: (slave bond_slave_1): Releasing backup interface [ 156.218349][ T7801] team0: Port device team_slave_0 removed [ 156.229936][ T7801] team0: Port device team_slave_1 removed [ 156.240876][ T7801] bond1: (slave gretap1): Releasing active interface [ 156.263679][ T7803] tipc: Resetting bearer [ 156.300673][ T7803] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 156.653972][ T7831] netlink: 'syz.3.560': attribute type 4 has an invalid length. [ 157.103657][ T5902] tipc: Node number set to 11578026 [ 157.587409][ T7855] lo speed is unknown, defaulting to 1000 [ 157.909702][ T7869] lo speed is unknown, defaulting to 1000 [ 158.272437][ T7882] lo speed is unknown, defaulting to 1000 [ 158.495257][ T7891] netlink: 'syz.1.582': attribute type 4 has an invalid length. [ 159.517894][ T7916] openvswitch: netlink: IP tunnel attribute has 233 unknown bytes. [ 159.610077][ T7921] __nla_validate_parse: 6 callbacks suppressed [ 159.610097][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.587'. [ 159.702851][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'. [ 159.744871][ T7919] netlink: 27 bytes leftover after parsing attributes in process `syz.4.589'. [ 159.938950][ T7923] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 159.964194][ T7923] syzkaller0: entered promiscuous mode [ 159.969701][ T7923] syzkaller0: entered allmulticast mode [ 159.994161][ T7925] syzkaller0: entered promiscuous mode [ 159.999808][ T7925] syzkaller0: entered allmulticast mode [ 160.186409][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 160.255435][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 160.441044][ T7960] x_tables: duplicate underflow at hook 1 [ 160.459639][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 160.892096][ T7973] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 161.904118][ T7984] netlink: 'syz.3.605': attribute type 10 has an invalid length. [ 162.112854][ T5916] lo speed is unknown, defaulting to 1000 [ 162.151553][ T5916] syz2: Port: 1 Link DOWN [ 162.478730][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 162.522262][ T8004] wireguard0: entered promiscuous mode [ 162.549046][ T8004] wireguard0: entered allmulticast mode [ 162.596213][ T8010] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 162.609570][ T8016] netlink: 'syz.0.614': attribute type 11 has an invalid length. [ 162.810883][ T8023] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 162.865038][ T8023] bond2: entered promiscuous mode [ 162.872792][ T8023] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.909718][ T8028] bond2: (slave bridge2): making interface the new active one [ 162.917383][ T8028] bridge2: entered promiscuous mode [ 162.923783][ T8028] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 162.965306][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 163.542995][ T8065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.627'. [ 163.659587][ T8071] netlink: 244 bytes leftover after parsing attributes in process `syz.2.628'. [ 163.730520][ T8071] lo speed is unknown, defaulting to 1000 [ 164.159265][ T8086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.247926][ T8091] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.288293][ T8091] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 164.344292][ T8086] tipc: Resetting bearer [ 164.358997][ T8086] bond2: (slave macvlan2): Releasing backup interface [ 164.529689][ T8100] netlink: 'syz.3.636': attribute type 13 has an invalid length. [ 164.552193][ T8100] netlink: 'syz.3.636': attribute type 17 has an invalid length. [ 164.676411][ T8100] tipc: Resetting bearer [ 164.717962][ T8100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.790750][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.826597][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.484527][ T8152] syz_tun: entered allmulticast mode [ 165.539322][ T8151] syz_tun: left allmulticast mode [ 165.828270][ T8169] __nla_validate_parse: 1 callbacks suppressed [ 165.828290][ T8169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.660'. [ 165.849859][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 165.858925][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 166.183933][ T8191] netlink: 'syz.3.667': attribute type 13 has an invalid length. [ 166.193664][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 166.301506][ T8188] lo speed is unknown, defaulting to 1000 [ 166.522810][ T8201] netlink: 112 bytes leftover after parsing attributes in process `syz.0.672'. [ 166.526042][ T8210] bridge0: port 3(macsec0) entered blocking state [ 166.540956][ T8210] bridge0: port 3(macsec0) entered disabled state [ 166.548119][ T8210] macsec0: entered allmulticast mode [ 166.555543][ T8210] veth1_macvtap: entered allmulticast mode [ 166.564464][ T8210] macsec0: entered promiscuous mode [ 166.570724][ T8210] bridge0: port 3(macsec0) entered blocking state [ 166.577496][ T8210] bridge0: port 3(macsec0) entered forwarding state [ 166.670847][ T8219] tipc: Enabled bearer , priority 0 [ 166.714987][ T8219] syzkaller0: entered promiscuous mode [ 166.734824][ T8219] syzkaller0: entered allmulticast mode [ 167.103115][ T8227] tipc: Resetting bearer [ 167.500776][ T8203] tipc: Resetting bearer [ 167.548756][ T8203] tipc: Disabling bearer [ 167.923165][ T8254] FAULT_INJECTION: forcing a failure. [ 167.923165][ T8254] name failslab, interval 1, probability 0, space 0, times 0 [ 167.943588][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.0.689 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 167.943614][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.943624][ T8254] Call Trace: [ 167.943631][ T8254] [ 167.943639][ T8254] dump_stack_lvl+0x189/0x250 [ 167.943666][ T8254] ? __pfx____ratelimit+0x10/0x10 [ 167.943694][ T8254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.943715][ T8254] ? __pfx__printk+0x10/0x10 [ 167.943745][ T8254] ? ref_tracker_alloc+0x318/0x460 [ 167.943769][ T8254] should_fail_ex+0x414/0x560 [ 167.943792][ T8254] should_failslab+0xa8/0x100 [ 167.943820][ T8254] kmem_cache_alloc_noprof+0x73/0x3c0 [ 167.943844][ T8254] ? skb_clone+0x212/0x3a0 [ 167.943870][ T8254] skb_clone+0x212/0x3a0 [ 167.943895][ T8254] __netlink_deliver_tap+0x404/0x850 [ 167.943935][ T8254] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.943964][ T8254] netlink_deliver_tap+0x19c/0x1b0 [ 167.943992][ T8254] netlink_unicast+0x730/0x8e0 [ 167.944028][ T8254] netlink_sendmsg+0x805/0xb30 [ 167.944055][ T8254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.944075][ T8254] ? aa_sock_msg_perm+0x94/0x160 [ 167.944096][ T8254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.944115][ T8254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.944134][ T8254] __sock_sendmsg+0x219/0x270 [ 167.944162][ T8254] ____sys_sendmsg+0x505/0x830 [ 167.944188][ T8254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.944218][ T8254] ? import_iovec+0x74/0xa0 [ 167.944246][ T8254] ___sys_sendmsg+0x21f/0x2a0 [ 167.944269][ T8254] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.944325][ T8254] ? __fget_files+0x2a/0x420 [ 167.944340][ T8254] ? __fget_files+0x3a0/0x420 [ 167.944365][ T8254] __x64_sys_sendmsg+0x19b/0x260 [ 167.944389][ T8254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.944419][ T8254] ? __pfx_ksys_write+0x10/0x10 [ 167.944440][ T8254] ? rcu_is_watching+0x15/0xb0 [ 167.944466][ T8254] ? do_syscall_64+0xbe/0x3b0 [ 167.944492][ T8254] do_syscall_64+0xfa/0x3b0 [ 167.944508][ T8254] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.944533][ T8254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.944551][ T8254] ? clear_bhb_loop+0x60/0xb0 [ 167.944573][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.944590][ T8254] RIP: 0033:0x7fb474b8e9a9 [ 167.944610][ T8254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.944625][ T8254] RSP: 002b:00007fb4729f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.944644][ T8254] RAX: ffffffffffffffda RBX: 00007fb474db5fa0 RCX: 00007fb474b8e9a9 [ 167.944656][ T8254] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000e [ 167.944667][ T8254] RBP: 00007fb4729f6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.944677][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.944687][ T8254] R13: 0000000000000000 R14: 00007fb474db5fa0 R15: 00007ffe8c845e88 [ 167.944715][ T8254] [ 167.945557][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.689'. [ 168.064317][ T8257] netlink: 68 bytes leftover after parsing attributes in process `syz.1.690'. [ 168.091713][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.689'. [ 168.156221][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 168.238445][ T8254] bridge0: entered promiscuous mode [ 168.247840][ T8259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.691'. [ 168.258415][ T8254] ip6gretap0: entered promiscuous mode [ 168.443040][ T8262] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.539770][ T8269] hsr0: entered promiscuous mode [ 168.545105][ T8269] hsr0: entered allmulticast mode [ 168.550359][ T8269] hsr_slave_0: entered allmulticast mode [ 168.558394][ T8269] hsr_slave_1: entered allmulticast mode [ 168.572876][ T5916] [ 168.575227][ T5916] ============================================ [ 168.581375][ T5916] WARNING: possible recursive locking detected [ 168.587532][ T5916] 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 Not tainted [ 168.594642][ T5916] -------------------------------------------- [ 168.600789][ T5916] kworker/1:3/5916 is trying to acquire lock: [ 168.606858][ T5916] ffff8880521aaf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 168.615931][ T5916] [ 168.615931][ T5916] but task is already holding lock: [ 168.623307][ T5916] ffff88823becef30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 168.632372][ T5916] [ 168.632372][ T5916] other info that might help us debug this: [ 168.640435][ T5916] Possible unsafe locking scenario: [ 168.640435][ T5916] [ 168.647901][ T5916] CPU0 [ 168.651183][ T5916] ---- [ 168.654468][ T5916] lock(&hsr->seqnr_lock); [ 168.658999][ T5916] lock(&hsr->seqnr_lock); [ 168.663509][ T5916] [ 168.663509][ T5916] *** DEADLOCK *** [ 168.663509][ T5916] [ 168.671675][ T5916] May be due to missing lock nesting notation [ 168.671675][ T5916] [ 168.680011][ T5916] 11 locks held by kworker/1:3/5916: [ 168.685285][ T5916] #0: ffff88814c7c2148 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 168.695993][ T5916] #1: ffffc9000430fbc0 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 168.709147][ T5916] #2: ffff88805a163538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd60 [ 168.718383][ T5916] #3: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80 [ 168.727609][ T5916] #4: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 168.737465][ T5916] #5: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 168.747395][ T5916] #6: ffff88823becef30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 168.756882][ T5916] #7: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 168.766366][ T5916] #8: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 168.776305][ T5916] #9: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 168.785521][ T5916] #10: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 168.795521][ T5916] [ 168.795521][ T5916] stack backtrace: [ 168.801400][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: kworker/1:3 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 168.801420][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.801431][ T5916] Workqueue: mld mld_ifc_work [ 168.801446][ T5916] Call Trace: [ 168.801452][ T5916] [ 168.801459][ T5916] dump_stack_lvl+0x189/0x250 [ 168.801480][ T5916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.801497][ T5916] ? __pfx__printk+0x10/0x10 [ 168.801529][ T5916] ? print_lock_name+0xde/0x100 [ 168.801548][ T5916] print_deadlock_bug+0x28b/0x2a0 [ 168.801566][ T5916] validate_chain+0x1a3f/0x2140 [ 168.801586][ T5916] ? __lock_acquire+0xab9/0xd20 [ 168.801601][ T5916] ? unwind_next_frame+0xa5/0x2390 [ 168.801616][ T5916] ? rcu_is_watching+0x15/0xb0 [ 168.801631][ T5916] ? __kasan_check_byte+0x12/0x40 [ 168.801651][ T5916] ? unwind_next_frame+0xa5/0x2390 [ 168.801667][ T5916] __lock_acquire+0xab9/0xd20 [ 168.801683][ T5916] ? hsr_dev_xmit+0x19a/0x220 [ 168.801699][ T5916] lock_acquire+0x120/0x360 [ 168.801712][ T5916] ? hsr_dev_xmit+0x19a/0x220 [ 168.801729][ T5916] ? unwind_next_frame+0xa5/0x2390 [ 168.801747][ T5916] ? hsr_dev_xmit+0x19a/0x220 [ 168.801763][ T5916] _raw_spin_lock_bh+0x36/0x50 [ 168.801781][ T5916] ? hsr_dev_xmit+0x19a/0x220 [ 168.801798][ T5916] hsr_dev_xmit+0x19a/0x220 [ 168.801815][ T5916] dev_hard_start_xmit+0x2d4/0x830 [ 168.801838][ T5916] __dev_queue_xmit+0x1b8d/0x3b50 [ 168.801860][ T5916] ? __dev_queue_xmit+0x27b/0x3b50 [ 168.801879][ T5916] ? __local_bh_enable_ip+0x12d/0x1c0 [ 168.801894][ T5916] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.801916][ T5916] ? __pfx___dev_queue_xmit+0x10/0x10 [ 168.801935][ T5916] ? do_raw_read_unlock+0x3d/0x80 [ 168.801956][ T5916] ? ebt_do_table+0x265b/0x2820 [ 168.801971][ T5916] ? __lock_acquire+0xab9/0xd20 [ 168.801994][ T5916] br_dev_queue_push_xmit+0x6c5/0x890 [ 168.802016][ T5916] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 168.802037][ T5916] ? NF_HOOK+0x9e/0x3c0 [ 168.802055][ T5916] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 168.802074][ T5916] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 168.802093][ T5916] NF_HOOK+0x31d/0x3c0 [ 168.802111][ T5916] ? NF_HOOK+0x9e/0x3c0 [ 168.802129][ T5916] ? __pfx_NF_HOOK+0x10/0x10 [ 168.802147][ T5916] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 168.802170][ T5916] br_forward_finish+0xd3/0x130 [ 168.802188][ T5916] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 168.802207][ T5916] ? __pfx_br_forward_finish+0x10/0x10 [ 168.802226][ T5916] ? __pfx_br_forward_finish+0x10/0x10 [ 168.802243][ T5916] NF_HOOK+0x31d/0x3c0 [ 168.802263][ T5916] ? NF_HOOK+0x9e/0x3c0 [ 168.802284][ T5916] ? __pfx_NF_HOOK+0x10/0x10 [ 168.802301][ T5916] ? br_multicast_count+0xf2/0xdc0 [ 168.802322][ T5916] ? __pfx_br_forward_finish+0x10/0x10 [ 168.802344][ T5916] __br_forward+0x41e/0x600 [ 168.802362][ T5916] ? __pfx_br_forward_finish+0x10/0x10 [ 168.802380][ T5916] ? maybe_deliver+0xc6/0x160 [ 168.802400][ T5916] ? __pfx___br_forward+0x10/0x10 [ 168.802421][ T5916] ? br_dev_xmit+0x185/0x1840 [ 168.802434][ T5916] br_dev_xmit+0x11b3/0x1840 [ 168.802449][ T5916] ? br_dev_xmit+0x185/0x1840 [ 168.802468][ T5916] ? __pfx_br_dev_xmit+0x10/0x10 [ 168.802482][ T5916] ? validate_xmit_xfrm+0xbf/0x1130 [ 168.802500][ T5916] ? __pfx_skb_network_protocol+0x10/0x10 [ 168.802518][ T5916] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 168.802536][ T5916] ? __pfx_passthru_features_check+0x10/0x10 [ 168.802557][ T5916] dev_hard_start_xmit+0x2d4/0x830 [ 168.802579][ T5916] __dev_queue_xmit+0x1b8d/0x3b50 [ 168.802600][ T5916] ? __dev_queue_xmit+0x27b/0x3b50 [ 168.802619][ T5916] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 168.802637][ T5916] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 168.802657][ T5916] ? __pfx___dev_queue_xmit+0x10/0x10 [ 168.802674][ T5916] ? __copy_skb_header+0xa7/0x550 [ 168.802690][ T5916] ? __asan_memcpy+0x40/0x70 [ 168.802706][ T5916] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 168.802723][ T5916] ? __asan_memcpy+0x40/0x70 [ 168.802738][ T5916] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 168.802757][ T5916] ? hsr_create_tagged_frame+0x449/0xc30 [ 168.802777][ T5916] ? __asan_memmove+0x40/0x70 [ 168.802792][ T5916] ? hsr_addr_subst_dest+0x307/0xac0 [ 168.802813][ T5916] hsr_forward_skb+0x158b/0x2860 [ 168.802836][ T5916] ? hsr_forward_skb+0x9e/0x2860 [ 168.802856][ T5916] ? __pfx_hsr_forward_skb+0x10/0x10 [ 168.802875][ T5916] ? do_raw_spin_lock+0x121/0x290 [ 168.802895][ T5916] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 168.802916][ T5916] ? hsr_dev_xmit+0x19a/0x220 [ 168.802933][ T5916] hsr_dev_xmit+0x1a5/0x220 [ 168.802950][ T5916] dev_hard_start_xmit+0x2d4/0x830 [ 168.802973][ T5916] __dev_queue_xmit+0x1b8d/0x3b50 [ 168.802993][ T5916] ? __dev_queue_xmit+0x27b/0x3b50 [ 168.803015][ T5916] ? __pfx___dev_queue_xmit+0x10/0x10 [ 168.803034][ T5916] ? read_seqbegin+0x122/0x250 [ 168.803053][ T5916] ? neigh_connected_output+0x1ea/0x460 [ 168.803074][ T5916] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.803094][ T5916] ? read_seqbegin+0x1ac/0x250 [ 168.803114][ T5916] ? __pfx_read_seqbegin+0x10/0x10 [ 168.803133][ T5916] ? eth_header+0x11b/0x200 [ 168.803147][ T5916] ? __asan_memcpy+0x40/0x70 [ 168.803163][ T5916] ? eth_header+0x11b/0x200 [ 168.803176][ T5916] ? __pfx_eth_header+0x10/0x10 [ 168.803190][ T5916] ? neigh_connected_output+0x3b6/0x460 [ 168.803217][ T5916] ip6_finish_output2+0x11fb/0x16a0 [ 168.803233][ T5916] ? ip6_finish_output2+0x701/0x16a0 [ 168.803249][ T5916] ? ip6_mtu+0x7d/0x3f0 [ 168.803260][ T5916] ? __pfx_ip6_finish_output2+0x10/0x10 [ 168.803279][ T5916] ? ip6_mtu+0x7d/0x3f0 [ 168.803290][ T5916] ? ip6_mtu+0x321/0x3f0 [ 168.803302][ T5916] ? ip6_finish_output+0x2ef/0x4e0 [ 168.803315][ T5916] NF_HOOK+0x9e/0x380 [ 168.803328][ T5916] ? NF_HOOK+0x101/0x380 [ 168.803341][ T5916] ? __pfx_NF_HOOK+0x10/0x10 [ 168.803355][ T5916] ? __pfx_dst_output+0x10/0x10 [ 168.803367][ T5916] ? icmp6_dst_alloc+0x3a5/0x420 [ 168.803380][ T5916] ? icmp6_dst_alloc+0x3a5/0x420 [ 168.803394][ T5916] mld_sendpack+0x800/0xd80 [ 168.803413][ T5916] ? mld_sendpack+0x1de/0xd80 [ 168.803426][ T5916] ? __pfx_mld_sendpack+0x10/0x10 [ 168.803447][ T5916] mld_ifc_work+0x83e/0xd60 [ 168.803460][ T5916] ? _raw_spin_unlock_irq+0x23/0x50 [ 168.803479][ T5916] ? process_scheduled_works+0x9ef/0x17b0 [ 168.803495][ T5916] process_scheduled_works+0xae1/0x17b0 [ 168.803520][ T5916] ? __pfx_process_scheduled_works+0x10/0x10 [ 168.803541][ T5916] worker_thread+0x8a0/0xda0 [ 168.803558][ T5916] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 168.803580][ T5916] ? __kthread_parkme+0x7b/0x200 [ 168.803600][ T5916] kthread+0x70e/0x8a0 [ 168.803620][ T5916] ? __pfx_worker_thread+0x10/0x10 [ 168.803635][ T5916] ? __pfx_kthread+0x10/0x10 [ 168.803654][ T5916] ? _raw_spin_unlock_irq+0x23/0x50 [ 168.803672][ T5916] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.803692][ T5916] ? __pfx_kthread+0x10/0x10 [ 168.803710][ T5916] ret_from_fork+0x3fc/0x770 [ 168.803725][ T5916] ? __pfx_ret_from_fork+0x10/0x10 [ 168.803741][ T5916] ? __switch_to_asm+0x39/0x70 [ 168.803758][ T5916] ? __switch_to_asm+0x33/0x70 [ 168.803776][ T5916] ? __pfx_kthread+0x10/0x10 [ 168.803794][ T5916] ret_from_fork_asm+0x1a/0x30 [ 168.803818][ T5916]