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"}}}, @m_mpls={0x60, 0x14, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x74ef9}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x3a, 0x6, "736fa391591e0744565ce698c8e4fec897c071818c0b4fb95833de6612e4ae01d89692809d4439e7327e424fba30ea0788c4d517f346"}}}, @m_vlan={0xe8, 0xf, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x409c, 0x81, 0xffffffffffffffff, 0x6, 0x5}, 0x3}}]}, {0xb7, 0x6, "9d431d581df01a03950d3242401ace0267c2426d4dee6c6be6ded3a998b8017d02c069ac541ae16cc2a7d2b005b037c9e3826a5ea2b41a0c85aa4e2c578728528ea232e209f033cdbb091d743f245c56f3e146c0d0f9a6908999ff395e2b31c5920ab8d343b88d0b0bf1c07a2c75c4e06c990cd4b76a36a9f79a695aac970ca34fed65335c54b727c07d51559bb7c0227fdaccded88cd7dcc1d4ee27787c5903219587f8a933ddaa0c1af351427ff87f0542d7"}}}, @m_mpls={0xc8, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x21140}, @TCA_MPLS_LABEL={0x8, 0x5, 0x2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88b5}]}, {0x9c, 0x6, "37b571d5b771cb47be1d34d1fc34665027c3de28690de45bb09a0094c062452c26e4835d30dd852136918937767316291354ae37ffa38e3d506aea14c5545464488af9f0b155a21a1bd857ddc50809324ac390e6970d73e9dbbbc5908b30f6f9298fc20f6e2157aa4f6c24c756e17a15cd12e53f2e432cf8727a29e286295d6311aa87ca7bef86b25a01322dce212085f4af0b7e3736dd3a"}}}, @m_sample={0x158, 0x17, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x9, 0x5, 0x1, 0x8001}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1f}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x58fb}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xf3, 0x6, "8f3b9b8f6e721b8d7d367d089529f358520dd78d04db9a7834d6c5b7bffb8e81a0e982331303b1005c11eb0b2205f5796717bd5e23ff7511081dac455ac5f7a34677520124b5baeefa96c465064ffe9f58c7250ab4e177913cb57bcb544ffcac6490ab900533a63844c291b9a622be9ac7a78a14e1597788480f52000d31aaee3adfc7184ff1103c36ba423fcbf8f1471b06564c0f3ae3c758a4b5bcb5001a60a49f1b716e1c563dd511b8c273b07febf178ae7bd835876d92190d041088fd05089679b5730649df68fa0d7cc48bc7f89d3712f7e4bb29d32db0cbce627986e653b07681bc6e4f117746d16e7db918"}}}, @m_skbmod={0x10cc, 0x13, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0xb8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x2, 0x0, 0x9, 0x6fe}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x7528, 0x5, 0x80000001, 0x1}}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x7, 0x2, 0x6, 0xe00e}, 0x9}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={[], 0x1d}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x400}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1ff}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8879, 0x98f, 0x2, 0x9, 0x1ff}, 0x1}}]}, {0x1004, 0x6, "571540055d524b547f78593b473c806f80317800ded0695a8aefc4886b4a3d21fad064e01904411d83382e020540b3c75e100486524ff63473b2923060c578ae164214f17a9b9adaea6baf2a4e7c16eeb30870cc142c3f38925cea6a415e2d4ac4b5dd95ed4f86b5d5da6c11174d5c0af446b5b580809d2697b3b1e5738b7b98dc146db83f28b9b367a6fe51abbdb41f5bee456ea2976300e8f9c4379471dec567960ef84f9f77cc28227302a5ca2ae9cb941a9dfcda9366751ad29ce066ba4b96c9983870a44bbcdf08d342c78ca6aa0ce8b003fffd098ba9893ba1179b3fb473ab261943279251ef8b95b144940e6bd5457d99fcccaaa9e306b4de9cc6d54e85c7fa35d9489d5a425e52c849a3642277e12a225fd5db9363d278676cf22bba4f4849c7f1ef0ca015cd2f90805d925928501c741bfdcc99c139f4e40320a05867798173a2a88ccb452b7505e0dfb06927c5beec2702092cf3f86fc0b34c821e842dbee4d35e0ba7329fd8aef50957cb81d6adc1501623b365a0a9cf8b9e33afbb6ac87224cf91146d68222e9e8cfb320865c3a5de754546ae61eb56a6c5c801c4b1422b451a7a6f588c06357f7b66554c4c657c12ced6f89ba11f7518d3ff5a18bcbd232c374b70a745c5dac63d157438509322b67cad6323fe1a61772069cde180d43849d0b973389c584e914dc83a33fd88aa02921a36bc5c076c83db52cbf86e67bdb42e6bffc4c1eb8c1747731cb3aa34ed803916ba226220e8f48d98907456e2b31ae260b989aa241c03dbee83df44d5b66b4848d3d0bfc1c5fe936ab2cc0d6b728c882c58824c86be0dec15bcc1972024d9b927596467535ad03bae087f68ca1b3f725689a44c33b7fc33bc0350fd2d9db43cb89697f72844f9332b529be6b7c7c69233a7ec94a3af0f3f6592c0c0f01ac21a0304c7ff9882f4163b12751c573e40784f30b25e8c39d2bcb37c09357d575784530ccb42f64894acc52a0a2ae153cc9883acd208b336c375def3a1cd713da3ca5de324582a396541d6f188a608d24a6f2f14092150c51f2b40c4bb26ef77cfacd1a16dfcd4ecc070122fd142f6d84a795e4258305eac36aec41d5f130b64974895e01a975dccf3d1920ae64ce3a491cbf5f5c2f6a5e7759b37a4782459e2b1236e0a43c44c3cb8438f612f055d19defd99375f667006590cff40f74aa6683e37310f5f372b2285e23b9a84bbcdf96c77146ab8b62f9cfd345e25e9aa8a2af01b05ba5b1db3a0aa27ee0c4b99c51f8cc1ddcd63c687a8a28b8c54a2b85ad2c5932cf5e0e179a6cfaf97cd0c423493c34fe649303d057962a58063d734087e4049a44229221e3f8655da38a9c71950b6632c86aba3f1ec51ec774701b8ec3269ef4ce94c7cd73fd4f724995e6a40950d35dfcb4b4687c8c56074de574c4be64790b5de75f477f68be72d0476fe5134924a1c292e7432536726c55f7c37bf08a72071f9e478a5767f3609ddda1c36389be3b83c26df71230a0845cb5a796e99213e2f18f4dc571d07de6818254d5ca2b26b97a7a69b12de89807dc35eb7b060abf834569366d2f4e1abd8f7ae5f075b96aa36f6d04bc3426af8ffef45b8a94d33833136cdd89f242995c4d27ccc5ea40d51d48e658039b67b99abce5020503167d495ad8d248c863c0d3d58610e2ae75af1ebaf41679f8793e46c59642c660d4ceba84ab08398d5b511ad00cba24f47f197d2498e5cda1b7242582b36d764cd8d6ef9c37dd4e8ea1f7d3e122db87fb3c59d96387ef02be67f3a89e55a4e8502b01139a6cae4c97bdf0072e9faae8b8c5e97c1683d012e4ab33e643639f356a8b8e556e76c25bcc7002d50d08a5e8a8ba12acc440297ae69eb5e2aaaab4b5ada03f8c6dc955018d664e1f9ce72624cb9095153393a45a2764848a3243e14c42c4f830d05a47b88d34f9cb04f055590fad9093a8c86f21309a2a6c9370bbac39fa32b8b518e2e17b714fc03e53c285d3a192879f42d72bf14bf613a3df6d5ae0fc87c5b1753b1bcf1fa0bfadad4ae392e2e010cf514fe2be5933c4d35a30877681e8c014ae66d8a256acf7ff0153126d38460556101df20950a133797ab55cd4062f6512e6642fd8443614ea3c4fcf6f18f6a3c5c8a057d8a76abd1e1cb888b4546f1927719f796fb96160895278ee24851965a6ae4cf5e2b2060634a1d032dcbd603d9ea8a5c41b49f8e770efe53440c0ce56b028b5e110eb3777451897791f37bee1419c0d9d6836010f78815ebe1670fe2c312231c19de37d9bf511abd48944abf30c82db23c2d5e754c19238f4957766bad3b79d6cef0f915fc2c86c45d371a4b031e052c69933fac83a35442f35e825b68b130005222bf59c85d5fabc27e7848416ed0858fc7f3277a5f8a5378607b5f2302b36590467277ce5992840ee42662579f5be6f20c916b33fb94ab630d125583d196aaaff41e69bec5a9be7f5956b6972239a1044a2acfe6b36309fada913785b6aea0f9791def2f9fc4142d5ec52518ca81168bb997b30433eff570e53631a0d4deb97f2ae003706cc18d9c2e33fae10bee7ca5133ccd602fec6d4b1e62a84d68476478b3f6f8b9ade56320d27b05a8e8d67348308bf18aa20a092a569111269209ecc055bee9f551d79aee917849898ef7ec97f9deaac3baffa54aa72b0c276dca5cfcef6cc3ac860d7938023ccd531960359dce1e4ae6878a1050ff62e78f05b6b39555f16a562fefae1cf6564938fe0149d6b703b9283ac0ab64cbd0cb817bb373fcd80f974cb9744f80c8e48864c77d3c38dfe322c6d4ae237ee8ee60efde926ff095b25aa23fb5574a06399ea61200ae61c3f1214ffaee06f99882d0aac595f9b5c3ac640cdc891119c257ec4fd8686b92f38518ca044dfe425b5fd11a2cc8acfc1ff5e5e9a73b665e8e72387c864168dee9f960f4859ee760218f885be2eb0f12af2773640b84b9adae15b4d7b3aa45e9bc15449b7ea9db54b03db86233ee53febfdb5cd2552b954e70472389408aa0e7576cc67f1ce0b9e23f28d3b36d5e5517b75942f4e1bd2d7120aa04f7b1ca0b109c7ee3d2abd9528644e7a7cfde7771435146929c6ffe1b04cbed760050df8d37f566e8f26c1ad1162cd81a5c5b1a1b270e90c30a42f8093faf8a0094af2ef0a05b4e5cb06f49bda6f73391c4de9e4b2d32f5e04f4d990c5a9933f27ff40afb02304136fef681a9b6cd62a24fd71252d0211db97faea5b08572e1c33e7b4a24c0a9eb26c49730017194227aee033ef8b1046a53725d885ce368beb7717613bbb98d8a29e07e529f7471e4f6091330f15dfc53b7259d441d41b6d727ab9584ef593c7e0d27c8147f943ee59a6a8554a3be06ab44e36092d7391ad55582e34a7a0d9673e08fc24b9b7b85a2e8f867fa09cac85add3240aa7ce8163a09dfa2ea03695485b971e14e094cd4c9f76d3e1542bf07943790b70efa24014a9090a552c0a2ce42d035a678287295dd14090a3d9fe3f5de5c3aca0609628f7561a95347b21406b8537d0ae742b06abcb16e5f0b2adf0c1efbe3bee981c0e3c486aa24133c1a4b7cdb67d95de90cbc80c3f835a89f50f39a9865eea59e9f0d169ba05021e809d4da45f43f5a0a7c553d633ff1ee47fdd04037df39e7b0c9561c86426c3f77d89527312820800744d1c9ad9603e503506ce82d6996d69ca6ae0f8b080ac192b44e1ea2b214a43db6c38682ec408e39b206a18beab0d92e41eb2b3472d2f1e696441f7648315ed53299ecef824b904699037b5c87cb29a92aedbd1f6f3ad0d9f3c4284f62d1280a9d789f95eccab1fcb290c7eac5f69bfcb76188a1ab1784fefed54c30b53a9362ab61baacc47ff9507f7d2b1426603cc699b9b9665594aa25f750bb5e791a83e9488b6229cf07a95e6a6d49ad343b3859635a6fb362386b1cc75ef0f0a6bc106fc6a78b93652296578d61de194a65f562b4f9338114d7c3df94b7dc8d0480bfbbca772772f6bb6c48f79997e588ec489aba0655d2126de28fa24c2cf1a628f78ea7fde7e064e1b86ca9ce75767ec12ddaa078c449a1a0ffe73492a2e724ea3f8c6a08515e621a5c92b3d2089d5158c429af9887c5fe37654fe39d2c66221ab14bc263661a38b0cba3eb019791d3d18d413ef0515d65950649d4242d5cdbda6a9e1a0ee4c732a02b2dd6467c4deca7ef69c1759f4a2b70b90a39319deeb2da762f3a9dfbf227ffbb4305aa1a30904811cd7d80b73c900ef906e7f25dbbd771fcb74c3ca2b2ce4f9e75ed512ded9e23976cff839441cbba0a12b3ef27bb8e8244842d2d51dcf1787a2b235c9581a8b4b7357111371c39b7e23825d03113bfc38d67f7920e3c8b5177a6d4731317570b89224a40d9d1c63d6d804fafed15f0702ff80576b7c3321e98c29cc1470faf8faab7716b849105781ed3b826a9dc50dcaa3997203cbc7f4a3f50dbce2a08d5c989df9980a3f1af830366668e18fcddab63407fedfbc6b7ec7e631f23d50c9f09ca7aa1dfeaa8867727a4381233c0b253d8d213089ee7614b9956b5bd5196f2b177104c2999edd1f332e07bf4e92e6291e4a52d47f78b8bbaaa6c10dbbc879e8b08b71a66d26dc418e5528724206361ef1e4466697039872155930a634fe587001a26a5095b11ec9e28913915a090bec72d34e49f19810c7cb7bca37ad9ecb2297efce5b5cefdf475767900708c4bbc3b1762972bbefc9b330862b651e55874fb8a2721b1f863d036776ef68fd18c32dbf4d2adad6aa9d86f9cd7ee985d215028c9935375291afc9d3b5f208cb2edccc0ff715ffcffe9b39ccfac34963ff441463e5f33caa150934229d407b75b2f8995855457c1f39aad1bccfafffe73a0e826461e47d4c00e34997c21af4b157b359798727888c04f8a3ee4d072ad88b281df2e784bd75140876132cde958a47581323ee1199d88fc072d86e5b283923a8727bb943eb40cf5c3f1098e0a3d41dea250d7cb1b80800a1d90bbd0531eb6f334ef305d35b8c6d6cf8e6b29b737bf2abff19e353489d08eb117cbffd7b5638d37ae31eea983e944f2c687f0ed40698bc72859b999e0a7f5fcb0b97c231aa01d93ce0994e34e674f0a9539ef55140cbcca70b3d663c363c7b36eac64c0237c70afc948f45542ef3563e3824fc71553eca495acf6c0a5511b9277c95ebbb50e5ba283f67082961838a096d5f57c65a9ffb7cfad36f242062da20ae8fd481aceb33a13b7d0943092bad71a9c1baaed136410181f4b94ff98f22dcc5b19e3f75bc50be04e09defc1ac6c7a8119cf71c8ad98e2c19c5998793d18ac7b10d9c13617a3f0a11d762bd8f377f0b93ec73cb806fe6eb683a813a7bc3e2425428b1e04ae1e86dcb78aa052907814534f3e387df68470dc24365d49f282169e521e708cdb1db3702ea5fce76a182e4f747f3c1e4c51f1c545e36a10f75fe9d3398ccaac80817cfdf741f6b4e6c0de20240a1437d020cb2126ffd5388ef705f284452a4fa94bce49658dfbed54f65dcffe57a61b33b37dcfe2c936ec4fbb21ba025caa0020516239192ab8fa2469109f0cacf4801ca97bae68d9b4193b46ba8f98b4661be1efb41f6cfe7eaa5d6631978de8c1aa7018f2ee6647dfed96b2974f28ab4070e648ddaab72c0be1a9590682c7ba695e527850b51ad06dde5ce62975445323610cb1fcd8b4d8f3bd82613b39cb9c5f842ea0fc45e689955573d534b0693ebe76b68952c09af0f4148af5d5f630473c65c807880df43016a55b4466615a7a16c39604875850d1bb714278a5437ce798c7e4fe319"}}}, @m_vlan={0x1020, 0x7, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x1004, 0x6, "a0756cfcc9b3565f5737b2f13d0f4828c429577ddc89df7b11ceba855a1acbe2b04c876731dbd79bddeeebea68cba7b07db3b6c13a0b8e66342cc92d6fdd2a7253849ff74a8514e46f659498a04ec9db03909d49a5984ea0531d888eae1859934bb258450f7e3802098a56cad7233ba76c343d4eacc4b99f07f4b3fa39d06c1712daad0c59c7e830b4f087ab7c7bd4441f168664378cd0abdc35c89bcd037d8f96697b31fbb0e4d494ab7cfdc694f3982c102f58f067b181ff4c7c81b4779eaea834767cb87847fbcf8b6760c78abe401b301d5c58020cc32b45c88c623a1f95ae889eef3c62d3e1da06be59f5f17ad9181f498a63f53d754bf5e157541431cc8d067a15bc30dd1e20ef72d8246745011ea7f7b131bc96dd3ebf7ebfb480741cc7ed4bc162fd71e849c3aaf1884579995952cf6b5e78ce9880a30e073ec70149c0f2b153f5d3d7382f3c43980de3fd96c1bf9281f98a265762717246ab0f4c1c63f301fd71eaeaf39be7d96d2507f717689a173544f5f899b645c233c804b6aa6b68e758eed18f5aa20d0ad68ccb7cfbba596bb6fc249631317e874191091716d7d3822f5ec3d2326afa3109919ceb68356ccc95aada3dfe7b953babe42b12f2729739a44a7a1bb88f63d9562c27385dc83dc4dea9331edce1f61172b275909b25e993b4b19e3543d4f7649518afca5b6ed59b528bf527cb24c51683b85d8bd03156739591f7e025e1b48b0d61042473153d63d978c0a4a37aa168f2b86768b056d2ed5dc7d95e02179e08f445c29b2c30ef779ff83076fd6698a7c409a4ce6163d722d73508435494ec90e8b7d0da44e09359b97f32a9e5c19a95323308d89d0b2dbc5b3450e97e8f1563af56f3371146bb70dd875165fcc2556d3487f0e9a864f00148101c91d688a12f2afe70b4335d222a22647c38c3866b3b79b3b73ecf805950b63c10090597c61628905ae51aa6751d28c7ac64264ff289df21ea30361a8db1dc13e2dd4688d26012ce1fd37f27b0e6e668041a23ac435e1327993f4a3775491ea59164d3cd69a18eee87bab0b2ac4eca40814a11799c923199963f60c4e90697036fcabc77a1c3dd18acf6b7e060ae63fd4278df715d353f85ffb3cca78bb91c52bfbc732fe202307d76a783e1732f455fd49c8947df2b6a2f65574ab4cfdeb301cc12510425f29cb6847ee780ad6285cc727e8e497544e5fde99d674b5aa815e95c51cad43372b999780af74402deee18ca2e273e0ed51830ca0fffff927cd3daf839afbf6c46f679018a42fa335b60c1dfb5117a96a86df200b975260f751ff53cb46700ca03495db04d008f13db4a4163686b77090dc137dd77490da7728e12b19fff0e2960afe7190299d032c3f6d20c7c938b4b06281685ca3ee70f09d5b8f85ebc31b619eadfa494f9a4a32c46423cc2965155aa3298059d928435dbac8e13b4b40caaa623ce84ff74cd917eb172406e4651b24ca7092a9e694f1a04f9dd19fa08434bb46267bd5d7c0a6c6a624f709c9d694155b4a50e12cd6c7427e0e395177081ac74431af9c0c52050226aa9299736161aa8aaf94154af3df443f37dac985f43d583a5e9225db3a5af3421d68d00cb6b3d262b20012860ca325fa5c776cc45c646021adaccf640ef7731750450f5a0486731509a4862ee1a1c0b9069053449fe0b7f603ecc449a0880c9f4529f22760195fc3751354e592d4b6f0f9a2ae1f881dbb963b56fefbe057e85fadf78ae61547b5de7a0d0c16789d27bd31363e20534bb760498cbb8286012316d51f0bbe4276c30cda11d741552f45969574b42595d687d3b8d7d204408a15da258f23904a7968ac70effba1a027f6e92934f87f619b1c51bc7dcaac61936006dfdf83ca74ba15edcfba60894f2538b10f4b3436a060bd0433c60bec579bb3f68622da7900d13dd0ed95a5a84af27e825d974e50fd8d9f8c057f0f93510ec574035f68b0abd781408a59dee053f5ecb86e193002fad6d6da3a2c88509d3f978bf7a63001424f1b1317f3117ab10ce2b334116a2f9c53a03e8d4192fe39b7da2d703e7947ebf42f07d49db3490f5b096b251a369f7a9744e96af5b2c935b0c3a87dac852200656f3e92ec46fee5082525ff219286ece9b71d7e82b13bc9be4323db2c9755c9cdd2868055240df38d63126aa0657bbaf2bb58d7eef1d03282e3e9acdc0b7b9636b2ab51905c72dec7b307054f8f2482d074671e111988b4cc576409e10e213411fdadca1911a91d5220bb8665bb46e5e658c3d80909fac371e9ace4cb64a95c0b13e6849daf342fa5467cd7b16e2b33bb337ac92d9ce27162dd85a6647ba37c2258001eaf559495015e5355a30ffce5571da7cc60219f971a9c11bf77e316a71022213b1b596f27dfbda5c5491d481c09935cc2b40f737fb3238d45cd94db8146de5fd2929c86dd7df7020849c47d75342e8da9fa68ed93f29d16d40516ed534d0a06f97d7bcf7c5bbb201fda60d19660971cdb625055e6582f756b0e7b970d500eb0c204a192dd9a6759c42e71274671b3d663449ed486001cb84c6cc7d5951ab6207c3cc484b4f973dd8c5afb839941ccedf2508c4ccac71750fe9025a46c38beee642a378225ec89889a4801617ceb72473a75aba7ba4068f5da92140dcda8f322e5bf4a6f2a09188f11a8e10a7fd3eedcbe6691efbe358f7c0c0b51a894ac67b46ac4df3d1a684bf6caaed3ed3e9874047dd94bb727f5083e22e97d84a70b34ed622ce960b4dfdbab5ce3ae8387542455f73707a0fadbd633c89fc22e1959ea80e2785c4a65ee458114942e925920c2d3cee235ed8592f20a6160fa6044f684a8d778eabcd370bafb20041811b43a17342381de190f03d7b2c65febb320a183bf0ffcdd1162c90b6396d52e17faad9e8bf25502eb5aa7c7d7883d665d2b65898864268d9e2f9f6b41c272fc327ce9f411163f05fa457891f17a118cfbf8f8706fda494f6154efed06729117029e13563d711555f130791054b531addb2f4f62029c5e839f252d62d3a6400ddef07901db01d78f8cf20df2b55b1d148731227f406d1ad970a7613c94bb9b2fd489091375c5745d93f961cc45d7c8c0080f2c363e1d9f82691958a09e93ee20536b0fcf0ce66c17bce2ae7cb076c19d0a9e9b3aa8e3967b27564148adf536baf5e95cc4b3ae8f5addbd4363ebf590379ab4a120d1832476caeed3e647ad615defb762ae4109091871d77f926a63031abf21e66b425f7ce0f5e8cca99d0bd3a7f7bcc3fe56730f604cd4964651213ba0bf5ec90d712e8eebd05941b9c0214caaeb8149f33382dd141190bca63f46d9605f7f76e0fd9e920e7245f098a1dbeaf3136c80055bd23a9f35c974555814fe3814529cc4183222b8339b97c2d4732668e45ce315d5472b23199f41e5af306e15a2e9b6a97e07d66c447675eb7f1046a0bdc90e106190e9579437beb23b24e13f9c1d37f7879ffcf6737082fa669de93a4cf3816370b3b9374cb9825e8b20a7ebfe0c6e32a4bc30cb41b60b2d8e5967cc0cde7d77f90f8576296cd5cd54b946ef5fa241012f788dbc7545f94a2e8ac98d762328b5aebaceebaebff70219211ae604fafc40006df279cd41a31aef5e11969203563c5289572debc1cef0723cce01b141a744e0cecf59d63b1a176ae54fce09d021accc53547c61735b4c1b311bbcffd205f2daac6d89e7924bb7d6435efb248996bb147f6cab0d862db35f01b79e23b4e04f1548af4c020ed4e7fc2d330622c1f128c66d350e02eb537f5b11e9838459e67b8a0bc4c952a90a83b8223c90828cedd7cfbd0dc0a1bd186755909d3299a6497deabae05aac7424c524dc3be3cdbf637568acf5fe36ec90d7bfa83bc4598c6583ffdf37585c6a1c65f4cb3e86ec670e39448c4bbdcd5fb8b088ab7def0d3f5dbdd503d8f61d9aa96a78efe92b6858b5b6c693c611b5d7124f21f75ad19ca26956d33e4d37f4f7609595f7517e5104ba09267c85af5c7bbe6391a0eb1c253d4dff2fe9048e742d1a6cf5a8f7c3eb1e165af36029ad07199ef60d0b2cea72bb01032fe0ca1f6b4569a2f97c8f0b74528046fbd3c4df616724a61ae96e0e2d0af4e90a81606293ca2fcabf32a9af5af7b336b224a8fc109855360927ddf264ebcf62475549156744951390a7ccc504ce4d19fe571fe65a0f5f49da91928c10096deb6651bb8016a255ca334083a09f19bba540154a162420d97cda130450466a837ba78b552999debf655ae60110114ca23adb2b0240f7ae5fcba652e0d170a3108c311ae88034333b37d0df4c2bb81b4fcf5ece6b7d3ddc4ce49f6a2f7538a0403d56c39a499238d178dd0b21a7c51e15da0a9c7589e17745ebc64de34f7abf476eb56747c76557a94cccf97cf7faa2b5370ea56f3dfb59ea7f264c8857662c1f35d3812c9ee30053bd80d698931d9b60bfcdfecc78df625782d4046293f6609280b4fe4d9211148213f43c7ff0117347477261af4c2452ca92077d346af0f24c9405818e8f272abfc01b58e5d7c296888bc5abd1ba98b290b054bc64bca71ab117c65be0f788a5c7258d298cb715a6b4726ad30cc9064455a4cbeaeea7658f68d0edff615c24f908d59a1d292712478349e8ec995804ed4e1a8744698569f7b82c36aff454f9f22207edd2f3735e5e7ad0494edb9a4d5c9a80c86e01d5d201993a7a3f2917e1629171b0db4dfd24ac15a8ea4cc1c1362310912108df7b242aa205a941e4d1f3fded3ab6f4d4dfb678e88bfb011505171e1821f83ad88a2758608a4ad7ab7cc894b4635f0f67e0a02be2e5d999a2d275f54f85a4eba8254576f243fe0b26c1603ff7fd8a2572b3a8b069c90d3a9daa0ddf7813b4df58a53d6f62672076f023794ecfb04b0f312f79075d30042f2e9598c620cccb48335882d399b87c9fbb4d0ff2559a3ce3c7d90f2751bceb8b2b426ead4bd21eeb37a9c20a9fcf03cb359083361f14e7659a399f18c61b0596fb71e47a2f11fd780f8e12e1a9daaf3201f0acaa00eec244197e43a711a67346865e64493bfc99806f037ccc49e121f4cee24c9316ddc14c1ea0ff9da6d95fc4554d38cadf7b94b52b9457b827cd343f765b9fe5986b772218e0b7d6657d30ab92ec7043c9838d97c64572c7051996d39159385245f8f1346680956717bf58b644d959157953dd8e84a090f06949a973d3351b477e1c90d6837d435b510cd063851838a61bbe4b6d74fd62e01f2f2045020301b72c350d31d75357e2a6611c8fa4eb7d63bde5fcc356a75b884d20c120be0195fc73a19363eb50f3f38357a749089aaf577529ae9f77be39a1b816ab391d4c56e0b1401e9eeb591d09520230b30769f35dd816822bd08b3bdbbccb9c8416229c943a4a7ad34fd2249b7d7f7670fc9aa34d5a55ab2700c08904ced7f2544e0ef42b7ec926164784ba214ea4c42ebdc5369247e2c8aff37420586e94d8b1107a4641907988bdec4ddbeaf210b9cd977b38ee001fbfd0a782e87ff29c2d25008cdea24ba766710b24a3fda74e58727ddea5d2d30e57031a48922ea191ee81ce363bea873a2f1b7bb95cb6a943966b3509682bd89f156051b797f5610a5ec535891625d0d2b3104d3b764b7c1a30354a291129e9147fe5bbfeabb87ce148c80c6d8031c71cf564b406d34e6e16ca640323f6d572289d4b8920d7f6377152de0a68caa744ff5f2153207ea36ab54148e32b2bdf04762f774418b87f70827920d670a8b30e1325c34b4992991bc0eabb19bee8bd610582be3bd2a5be43ea0f31bdfc8d0"}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xd}}]}}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x1380, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x401, 0x3, 0x100}, {0x9c, 0x80, 0xd32}, 0xff, 0x6, 0x7}}, @TCA_RSVP_ACT={0x135c, 0x6, [@m_bpf={0x144, 0x7, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x98, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1, 0x1, 0x3, 0x8}, {0x76c6, 0x7f, 0x4, 0x7}, {0x8, 0x2, 0x6, 0x8}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0x40, 0x8, 0x9}, {0x3, 0x6, 0x6a, 0x7fffffff}, {0x6, 0x81, 0x81, 0x5}, {0x4, 0x1f, 0x2, 0x401}, {0xf000, 0x3f, 0x5, 0x3}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x20, 0x1, 0x7, 0x5cdd}, {0xce, 0x1, 0x9, 0xfc}, {0xffe0, 0x0, 0x5, 0x6}, {0x9, 0x3, 0x2, 0x400}, {0x9, 0x7, 0x7, 0x3}, {0x8000, 0x8, 0x9}]}]}, {0x9f, 0x6, "9cd756ba034555e6579ed632ef8800765565765c3ed500a33a4b00733620b90801e82cfa7113a4404176340d850c1ed3341dd1a60fc68efb908a0ba0f85017ca802c0447c5d1ebb6c93f763e57644884039551e9b8c75ab73ae7faa833dd53ff67440f4ccc3852d950c5ff29ed7260daa78c92d709704a901719779d19fdd1c6532a5d69b95dca1e3bf8360b87f4c8363c541ebe81c759ce681fc8"}}}, @m_bpf={0xb8, 0x3, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x8d0, 0xff, 0xff, 0x2}]}]}, {0x9c, 0x6, "1f29cc731f7d103d8f7dc4df076dae5b909b4d57ba28aac1f767735cad8218404d7f9694e9d499fd184107f63eb43a0068c435a1b34aae70dbee563ed9ef78c72fce4da1611f105f2cfefa17d053187f8cb9a267cc4f8b636230f7fda94e68f7e031b49a49611c1a3c545b45a664e347ee9337ed03dcc025e1382167a01f0768f95d45ed6e7b43195b57a5db54b49bc5df7c6f6841e860b4"}}}, @m_tunnel_key={0x1094, 0x2, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x1, 0x10000000, 0x0, 0x8000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x1, 0x2, 0x4, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0x1004, 0x6, "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"}}}, @m_connmark={0xc8, 0x16, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x4, 0x5, 0x70000, 0x80000001}, 0xffff}}]}, {0x94, 0x6, "9be98fe1b4f47e6b667ddef8defc9cbd4a5b3854ec0eaf7e948756ddc1187645a07b04830a569bbed29bc0d26763f7dfaaadae485be2893b627fabab694329f0ffdcd2b52910057edc19305d7f9d672770642c8291e3df8efb0b48b79114bf674df0387e2b374f837a1782ed49fbd831edc73baf2f309259b6dfe3e76e026b26a1a6a11ca8e43ffbdde2d8fda0a8f6b4"}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x97}}, @filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x8}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_INDEV={0x14, 0x2, 'team_slave_1\x00'}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @rand_addr=0x7}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x4}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}]}, 0x48f4}, 0x1, 0x0, 0x0, 0xd0}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r9, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3145.196339][T28776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3145.253817][T28776] device veth107 entered promiscuous mode [ 3145.270867][T28776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3145.284257][T28775] device veth107 left promiscuous mode [ 3145.324102][T28779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:05:58 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xd000000) 09:05:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34003f0010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:05:58 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000486900"], 0x34}}, 0x0) 09:05:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) clock_gettime(0x0, &(0x7f0000008e80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000008c00)=[{{&(0x7f0000004400)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000004680)=[{&(0x7f0000004480)=""/143, 0x8f}, {&(0x7f0000004540)=""/199, 0xc7}, {&(0x7f0000004640)=""/44, 0x2c}], 0x3, &(0x7f00000046c0)=""/61, 0x3d}, 0xcb}, {{&(0x7f0000004700), 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/109, 0x6d}, {&(0x7f0000004800)=""/35, 0x23}], 0x2, &(0x7f0000004880)=""/107, 0x6b}, 0xed3f}, {{&(0x7f0000004900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000004980)=""/68, 0x44}, {&(0x7f0000004a00)=""/78, 0x4e}, {&(0x7f0000004a80)=""/82, 0x52}, {&(0x7f0000004b00)=""/116, 0x74}, {&(0x7f0000004b80)=""/91, 0x5b}, {&(0x7f0000004c00)=""/95, 0x5f}, {&(0x7f0000000140)=""/211, 0xd3}, {&(0x7f0000004d80)=""/4092, 0xffc}, {&(0x7f0000005d80)=""/68, 0x44}, {&(0x7f0000005e00)=""/249, 0xf9}], 0xa, &(0x7f0000005fc0)=""/66, 0x42}, 0x8}, {{&(0x7f0000006040)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000006400), 0x0, &(0x7f0000006480)=""/169, 0xa9}, 0xed09}, {{0x0, 0x0, &(0x7f00000065c0)=[{&(0x7f0000006540)=""/87, 0x57}], 0x1, &(0x7f0000006600)=""/204, 0xcc}, 0xff}, {{&(0x7f0000006700)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000006980)=[{&(0x7f0000006780)=""/32, 0x20}, {&(0x7f00000067c0)}, {&(0x7f0000006800)=""/184, 0xb8}, {&(0x7f00000068c0)=""/143, 0x8f}], 0x4, &(0x7f00000069c0)=""/201, 0xc9}, 0x8001}, {{&(0x7f0000006ac0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000006c40)=[{&(0x7f0000006b40)=""/245, 0xf5}], 0x1, &(0x7f0000006c80)=""/226, 0xe2}, 0x2}, {{&(0x7f0000006d80)=@un=@abs, 0x80, &(0x7f0000007340)=[{&(0x7f0000006e00)=""/121, 0x79}, {&(0x7f0000006e80)=""/195, 0xc3}, {&(0x7f0000006f80)=""/137, 0x89}, {&(0x7f0000007040)=""/220, 0xdc}, {&(0x7f0000007140)=""/122, 0x7a}, {&(0x7f00000071c0)=""/80, 0x50}, {&(0x7f0000007240)=""/7, 0x7}, {&(0x7f0000007280)=""/176, 0xb0}], 0x8, &(0x7f00000073c0)=""/4096, 0x1000}, 0x67e0}, {{&(0x7f00000083c0)=@nl=@unspec, 0x80, &(0x7f0000008900)=[{&(0x7f0000008440)=""/197, 0xc5}, {&(0x7f0000008540)=""/238, 0xee}, {&(0x7f0000008640)=""/226, 0xe2}, {&(0x7f0000008740)=""/100, 0x64}, {&(0x7f00000087c0)}, {&(0x7f0000008800)}, {&(0x7f0000008840)=""/172, 0xac}], 0x7, &(0x7f0000008980)=""/93, 0x5d}, 0xe0000000}, {{&(0x7f0000008a00)=@hci, 0x80, &(0x7f0000008b40)=[{&(0x7f0000008a80)=""/34, 0x22}, {&(0x7f0000008ac0)=""/72, 0x48}], 0x2, &(0x7f0000008b80)=""/97, 0x61}, 0x8}], 0xa, 0x22, &(0x7f0000008ec0)={r1, r2+10000000}) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000008f00)) 09:05:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x1f00000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:05:58 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) sendmsg$sock(r2, &(0x7f0000000700)={&(0x7f0000000240)=@isdn={0x22, 0x8, 0x7f, 0x8, 0x4d}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000004c0)="7c48b938d1d9977ea1bc5f47d68a91f18d1b07b633cb11d823bc6278b9988deae77c70f82684f28b7e375bb7f9d01c068955857fb01b80589b0a8bd1ae1f6f73efd9e43ef2ea03427dcb81ff978466131a9f241a94d1c19873fb3237125a515951d2d51a74fc13890626c4dd3764ad5a764ac6ce321c544f8ff9224490f884edadec2eeb3e9d362c003d772e064cec124468df76306a190ab94990caba295b8fafbc72", 0xa3}, {&(0x7f0000000580)="f10eb9b1e745722c50f69a677cbf47d329a0a1bfad9713a60501dd4bba323d723c98f319c7c5012d2567970734a57796fda727f83f63efddf369ce93c176b393e575b5eff7961e121877ad57af4995b9e462935a6cdab080e57ed329d730819dc2c946a7912fc71fad1d016c403108e04f82945b5e29afdd22dc8284976feb36e938982256cc5133d4ce53c5b3c2f2c55092d72ab1b4f2ce2637b3aae64e7b", 0x9f}, {&(0x7f0000000640)="e4f63650c7fe4461e0862b9fd8ec4e8a3d6967f61c3d0e481dbed5a8d108319583526d9c967c39da3ff945c5638287cdff4d2db0c49f1a53c5b7a61a4f89371a8dd2ab7891c0971c354458e5510b762bfb20912896bb1bb6d8212a05a4be5c327525816a623fd891f74f7364c64662ce01a3dacd63afcacaaa5b", 0x7a}, {&(0x7f0000000100)="cbdee1e932b6f15ac793", 0xa}], 0x4, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x21}}], 0x18}, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRESHEX, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="31f8273ead568d05281470468397420f7a12c5223485e742108e8cf5f4c0fe0ca15ff7551e935ccdfb75e8af13fa25e3a2c947c14f853b5be7989b94fd7afdad74134daa77d7391ef94f8d014e3140feafbb94c6a3468963183d42a8a772b229e0aae78e43e1641e2d85b26e310ff101f5dd69c35833d9a305737c4783924c40d931699d9ed3407b2081999d9839c979767cf5151d97b25732411fd563d45da8850bd6616843be5e01085a677d627a3562a95b0848070523da4ea82245305abd654b13cd39919e0e90036a28bdb5efc088557747967f7ae40074ef5d7bf549ddf661e1bd9802d8f2ebb43d69c085ae68a8825d2298e68150", @ANYRESDEC=r0], @ANYRESDEC=r4], 0x6}}, 0x0) [ 3145.872103][T28792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:05:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="346d3f0010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3145.975847][T28792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:05:58 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) socket(0x4000000000010, 0x1000000000080002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2ee}, [@generic={0x7f, 0x9, 0x4, 0x7, 0x8000}, @ldst={0x3, 0xd1a2b027013bcaca, 0x1, 0x5, 0x1, 0x0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x38}, @generic={0x8, 0x8, 0x8, 0x400}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:05:58 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000008100"], 0x34}}, 0x0) 09:05:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400400010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3146.189971][T28814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:05:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400600010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:05:59 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="11001b0000000000"], 0x34}}, 0x0) socket(0x4000000000010, 0x1000000000080002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x21c, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x14c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x446f42ef34a55099}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa4, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2278adbb3ce3b65}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) [ 3146.320789][T28821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3146.490233][T28829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3146.601882][T28830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:05:59 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x10000000) 09:05:59 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001bc0a39d8e00"], 0x34}}, 0x0) 09:05:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="343f6d0010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:05:59 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x200100, 0x0) 09:05:59 executing program 1: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000240)={'nat\x00', 0x3a, "6330fcd57bdd4900e4fb7004f363e7a1db57dee5207c4ef194a6bd639cd0081f5d3638197e462656c6e706ab4cbd75f4ddb85f43ca1ecb55fa63"}, &(0x7f00000002c0)=0x5e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) socket(0x4000000000010, 0x1000000000080002, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) getsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:05:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x2000000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:05:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x3, [@default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) [ 3147.055049][T28841] __nla_validate_parse: 5 callbacks suppressed [ 3147.055060][T28841] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400810010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:00 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001bffffff9e00"], 0x34}}, 0x0) [ 3147.196561][T28849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:00 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b8e9da3c000"], 0x34}}, 0x0) 09:06:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400f00010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3147.508283][T28844] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000018000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:00 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f000000) 09:06:00 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001bffffffc300"], 0x34}}, 0x0) 09:06:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3460000010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x3f00000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000020000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f45344600000000da010000ffffffff00380200026a873ee557d9e9dba1de45a5e426ce8ca7351d52846889aec5e4224028e8f12c8f4891c82e2db10bfc1dcddcd890a2"], 0x44) r2 = openat$cgroup_ro(r1, &(0x7f0000005340)='cpu.stat\x00', 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000005580)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005540)={&(0x7f00000053c0)={0x178, 0xa, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x100}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'erspan0\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'team_slave_0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x82}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x40}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6tnl0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8001}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0d0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:06:01 executing program 1: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r3 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x30a, 0x0) r4 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x30a, 0x0) r5 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x30a, 0x0) r6 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x30a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r0, @ANYRES64=r4], @ANYPTR64, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX=r5, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES64=r6, @ANYRES64=r0, @ANYBLOB="0974e52796aba0d6e5feacac5ca2eb", @ANYRES16], @ANYRES64=0x0]], 0x5}}, 0x20000000) socket(0x4000000000010, 0x1000000000080002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000025000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3148.498960][T28896] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:01 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001bfffffff000"], 0x34}}, 0x0) [ 3148.566570][T28910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000028000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3148.610504][T28905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000030000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:01 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00f0ffff00"], 0x34}}, 0x0) [ 3148.792789][T28905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3148.835240][T28905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3148.881574][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3148.910133][T28905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3148.937615][T28926] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3148.967849][T28905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3148.997761][T28896] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:02 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x40000000) 09:06:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:06:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000038000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x4000000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:02 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) socket(0x23, 0x1000000000080002, 0xfffffffd) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:02 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b7fffffff00"], 0x34}}, 0x0) 09:06:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000073000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3420000090000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3149.672674][T28952] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3149.724991][T28954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:02 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b9effffff00"], 0x34}}, 0x0) 09:06:02 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8906) 09:06:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400020010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400030010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3150.206226][T28958] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:03 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x43050000) 09:06:03 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="510f9b37136a5591bb63752431c4394e", 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) getsockname$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket(0x1d, 0x400, 0x5) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c80)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000005980)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005940)={&(0x7f00000050c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) recvmmsg(r1, &(0x7f00000057c0)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000002700)=[{&(0x7f0000000280)=""/6, 0x6}, {&(0x7f00000002c0)=""/226, 0xe2}, {&(0x7f00000003c0)=""/25, 0x19}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/227, 0xe3}, {&(0x7f0000001540)=""/251, 0xfb}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/181, 0xb5}], 0x9, &(0x7f00000027c0)=""/110, 0x6e}, 0x5}, {{&(0x7f0000002840)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/47, 0x2f}, {&(0x7f0000002900)}, {&(0x7f0000002940)=""/182, 0xb6}, {&(0x7f0000002a00)=""/230, 0xe6}], 0x4, &(0x7f0000002b40)=""/131, 0x83}, 0x2}, {{&(0x7f0000002c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002c80), 0x0, &(0x7f0000002cc0)=""/4096, 0x1000}, 0x7ff}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/139, 0x8b}, {&(0x7f0000004d80)=""/69, 0x45}, {&(0x7f0000004e00)=""/96, 0x60}, {&(0x7f0000004e80)=""/165, 0xa5}, {&(0x7f0000004f40)=""/180, 0xb4}, {&(0x7f0000005000)=""/188, 0xbc}, {&(0x7f00000050c0)}, {&(0x7f0000005100)=""/214, 0xd6}], 0x9}, 0x60000000}, {{&(0x7f00000052c0)=@caif=@util, 0x80, &(0x7f00000056c0)=[{&(0x7f0000005340)=""/94, 0x5e}, {&(0x7f00000053c0)=""/118, 0x76}, {&(0x7f0000005440)=""/154, 0x9a}, {&(0x7f0000005500)=""/193, 0xc1}, {&(0x7f0000005600)=""/186, 0xba}], 0x5, &(0x7f0000005740)=""/125, 0x7d}}], 0x5, 0x2100, &(0x7f0000005900)={0x77359400}) 09:06:03 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001bc3ffffff00"], 0x34}}, 0x0) 09:06:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400040010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x4800000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400050010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3150.615322][T28989] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:03 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001bf0ffffff00"], 0x34}}, 0x0) 09:06:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400060010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:03 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:04 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8906) 09:06:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400080010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:04 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:04 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x60000000) 09:06:04 executing program 2: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x1}) 09:06:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x4c00000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400100010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:04 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3151.885070][T29034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400180010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3152.016010][T29033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:06:04 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001bffffffffff"], 0x34}}, 0x0) 09:06:04 executing program 2: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = accept4$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:06:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400280010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3152.480117][T29034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:05 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400600010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:05 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3152.738690][T29069] FAULT_INJECTION: forcing a failure. [ 3152.738690][T29069] name failslab, interval 1, probability 0, space 0, times 0 [ 3152.764039][T29069] CPU: 1 PID: 29069 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3152.772748][T29069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3152.782808][T29069] Call Trace: [ 3152.786112][T29069] dump_stack+0x188/0x20d [ 3152.790466][T29069] should_fail.cold+0x5/0xa [ 3152.794974][T29069] ? lock_downgrade+0x7f0/0x7f0 [ 3152.799837][T29069] ? fault_create_debugfs_attr+0x140/0x140 [ 3152.805668][T29069] should_failslab+0x5/0xf [ 3152.810089][T29069] kmem_cache_alloc_node+0x25c/0x760 [ 3152.815396][T29069] __alloc_skb+0xba/0x5a0 [ 3152.819734][T29069] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3152.825293][T29069] ? netlink_autobind.isra.0+0x21b/0x300 [ 3152.830934][T29069] netlink_sendmsg+0x97b/0xe10 [ 3152.835711][T29069] ? aa_af_perm+0x260/0x260 [ 3152.840230][T29069] ? netlink_unicast+0x740/0x740 [ 3152.845204][T29069] ? netlink_unicast+0x740/0x740 [ 3152.850151][T29069] sock_sendmsg+0xcf/0x120 [ 3152.854571][T29069] ____sys_sendmsg+0x6b9/0x7d0 [ 3152.859335][T29069] ? kernel_sendmsg+0x50/0x50 [ 3152.864046][T29069] ___sys_sendmsg+0x100/0x170 [ 3152.868733][T29069] ? sendmsg_copy_msghdr+0x70/0x70 [ 3152.873863][T29069] ? __fget_files+0x329/0x4f0 [ 3152.878549][T29069] ? ksys_dup3+0x3c0/0x3c0 [ 3152.882966][T29069] ? find_held_lock+0x2d/0x110 [ 3152.887730][T29069] ? vfs_write+0x342/0x5c0 [ 3152.892151][T29069] ? __fget_light+0x208/0x270 [ 3152.896934][T29069] __sys_sendmsg+0xec/0x1b0 [ 3152.901426][T29069] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3152.906436][T29069] ? vfs_write+0x15b/0x5c0 [ 3152.910841][T29069] ? trace_hardirqs_off_caller+0x55/0x230 [ 3152.916559][T29069] ? do_syscall_64+0x21/0x7d0 [ 3152.921229][T29069] do_syscall_64+0xf6/0x7d0 [ 3152.925717][T29069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3152.931598][T29069] RIP: 0033:0x45c849 [ 3152.935492][T29069] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3152.955096][T29069] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3152.963512][T29069] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3152.971485][T29069] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3152.979450][T29069] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3152.987403][T29069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3152.995369][T29069] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000000 09:06:05 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x65580000) 09:06:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400f00010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x1, 0x7, 0x25, 0x3, 0x800}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:06:05 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:05 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x6310000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000310000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3153.218873][T29082] FAULT_INJECTION: forcing a failure. [ 3153.218873][T29082] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.262786][T29082] CPU: 0 PID: 29082 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3153.271497][T29082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3153.281564][T29082] Call Trace: [ 3153.284875][T29082] dump_stack+0x188/0x20d [ 3153.289219][T29082] should_fail.cold+0x5/0xa [ 3153.293726][T29082] ? lock_downgrade+0x7f0/0x7f0 [ 3153.298590][T29082] ? fault_create_debugfs_attr+0x140/0x140 [ 3153.304427][T29082] should_failslab+0x5/0xf [ 3153.308850][T29082] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3153.314660][T29082] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3153.320640][T29082] __kmalloc_node_track_caller+0x38/0x60 [ 3153.326278][T29082] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3153.331641][T29082] __alloc_skb+0xef/0x5a0 [ 3153.335958][T29082] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3153.341491][T29082] ? netlink_autobind.isra.0+0x21b/0x300 [ 3153.347109][T29082] netlink_sendmsg+0x97b/0xe10 [ 3153.351861][T29082] ? aa_af_perm+0x260/0x260 [ 3153.356358][T29082] ? netlink_unicast+0x740/0x740 [ 3153.361286][T29082] ? netlink_unicast+0x740/0x740 [ 3153.366224][T29082] sock_sendmsg+0xcf/0x120 [ 3153.370699][T29082] ____sys_sendmsg+0x6b9/0x7d0 [ 3153.375466][T29082] ? kernel_sendmsg+0x50/0x50 [ 3153.380161][T29082] ___sys_sendmsg+0x100/0x170 [ 3153.384836][T29082] ? sendmsg_copy_msghdr+0x70/0x70 [ 3153.389943][T29082] ? __fget_files+0x329/0x4f0 [ 3153.394615][T29082] ? ksys_dup3+0x3c0/0x3c0 [ 3153.399017][T29082] ? find_held_lock+0x2d/0x110 [ 3153.403773][T29082] ? vfs_write+0x342/0x5c0 [ 3153.408187][T29082] ? __fget_light+0x208/0x270 [ 3153.412854][T29082] __sys_sendmsg+0xec/0x1b0 [ 3153.417343][T29082] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3153.422351][T29082] ? vfs_write+0x15b/0x5c0 [ 3153.426757][T29082] ? trace_hardirqs_off_caller+0x55/0x230 [ 3153.432474][T29082] ? do_syscall_64+0x21/0x7d0 [ 3153.437149][T29082] do_syscall_64+0xf6/0x7d0 [ 3153.441641][T29082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3153.447512][T29082] RIP: 0033:0x45c849 [ 3153.451390][T29082] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3153.470985][T29082] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3153.479377][T29082] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3153.487677][T29082] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3153.495640][T29082] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3153.503592][T29082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3153.511549][T29082] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000001 09:06:06 executing program 1 (fault-call:1 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3153.601108][T29087] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3153.716885][T29100] FAULT_INJECTION: forcing a failure. [ 3153.716885][T29100] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.734878][T29100] CPU: 1 PID: 29100 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3153.743598][T29100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3153.753750][T29100] Call Trace: [ 3153.757049][T29100] dump_stack+0x188/0x20d [ 3153.761401][T29100] should_fail.cold+0x5/0xa [ 3153.765905][T29100] ? fault_create_debugfs_attr+0x140/0x140 [ 3153.771720][T29100] should_failslab+0x5/0xf [ 3153.776123][T29100] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 3153.781486][T29100] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3153.786597][T29100] rtnl_newlink+0x46/0xa0 [ 3153.790910][T29100] ? __rtnl_newlink+0x1590/0x1590 [ 3153.795920][T29100] rtnetlink_rcv_msg+0x44e/0xad0 [ 3153.800842][T29100] ? rtnl_bridge_getlink+0x870/0x870 [ 3153.806116][T29100] ? mark_held_locks+0xe0/0xe0 [ 3153.810862][T29100] ? netlink_deliver_tap+0x146/0xb50 [ 3153.816133][T29100] netlink_rcv_skb+0x15a/0x410 [ 3153.820880][T29100] ? rtnl_bridge_getlink+0x870/0x870 [ 3153.826149][T29100] ? netlink_ack+0xa80/0xa80 [ 3153.830744][T29100] netlink_unicast+0x537/0x740 [ 3153.835499][T29100] ? netlink_attachskb+0x810/0x810 [ 3153.840612][T29100] ? _copy_from_iter_full+0x25c/0x870 [ 3153.845980][T29100] ? __phys_addr_symbol+0x2c/0x70 [ 3153.851002][T29100] ? __check_object_size+0x171/0x437 [ 3153.856289][T29100] netlink_sendmsg+0x882/0xe10 [ 3153.861048][T29100] ? aa_af_perm+0x260/0x260 [ 3153.865553][T29100] ? netlink_unicast+0x740/0x740 [ 3153.870501][T29100] ? netlink_unicast+0x740/0x740 [ 3153.875438][T29100] sock_sendmsg+0xcf/0x120 [ 3153.879841][T29100] ____sys_sendmsg+0x6b9/0x7d0 [ 3153.884595][T29100] ? kernel_sendmsg+0x50/0x50 [ 3153.889272][T29100] ___sys_sendmsg+0x100/0x170 [ 3153.893940][T29100] ? sendmsg_copy_msghdr+0x70/0x70 [ 3153.899052][T29100] ? __fget_files+0x329/0x4f0 [ 3153.903726][T29100] ? ksys_dup3+0x3c0/0x3c0 [ 3153.908129][T29100] ? find_held_lock+0x2d/0x110 [ 3153.912879][T29100] ? vfs_write+0x342/0x5c0 [ 3153.917283][T29100] ? __fget_light+0x208/0x270 [ 3153.921953][T29100] __sys_sendmsg+0xec/0x1b0 [ 3153.926456][T29100] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3153.931463][T29100] ? vfs_write+0x15b/0x5c0 [ 3153.935875][T29100] ? trace_hardirqs_off_caller+0x55/0x230 [ 3153.941604][T29100] ? do_syscall_64+0x21/0x7d0 [ 3153.946277][T29100] do_syscall_64+0xf6/0x7d0 [ 3153.950846][T29100] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3153.956854][T29100] RIP: 0033:0x45c849 [ 3153.960756][T29100] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3153.980363][T29100] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3153.988765][T29100] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3153.996722][T29100] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3154.004677][T29100] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 09:06:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000510000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3154.013589][T29100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3154.021540][T29100] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000002 09:06:06 executing program 1 (fault-call:1 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3154.119525][T29086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:06:06 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000610000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3154.239991][T29106] FAULT_INJECTION: forcing a failure. [ 3154.239991][T29106] name failslab, interval 1, probability 0, space 0, times 0 [ 3154.301118][T29106] CPU: 1 PID: 29106 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3154.309827][T29106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3154.319876][T29106] Call Trace: [ 3154.323163][T29106] dump_stack+0x188/0x20d [ 3154.327486][T29106] should_fail.cold+0x5/0xa [ 3154.331997][T29106] ? fault_create_debugfs_attr+0x140/0x140 [ 3154.337798][T29106] should_failslab+0x5/0xf [ 3154.342205][T29106] kmem_cache_alloc_node+0x25c/0x760 [ 3154.347477][T29106] ? br_get_linkxstats_size+0x390/0x390 [ 3154.353125][T29106] ? lock_downgrade+0x7f0/0x7f0 [ 3154.357989][T29106] __alloc_skb+0xba/0x5a0 [ 3154.362332][T29106] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3154.367866][T29106] ? if_nlmsg_size+0x541/0xa70 [ 3154.372634][T29106] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3154.377914][T29106] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3154.383363][T29106] rtmsg_ifinfo+0x7f/0xa0 [ 3154.387688][T29106] netdev_state_change+0x121/0x140 [ 3154.392790][T29106] ? netdev_notify_peers+0xc0/0xc0 [ 3154.397900][T29106] ? dev_disable_lro+0x320/0x320 [ 3154.402827][T29106] ? dev_change_xdp_fd+0x2fb/0x600 [ 3154.407926][T29106] do_setlink+0x2d6d/0x35e0 [ 3154.412421][T29106] ? rtnl_getlink+0xab0/0xab0 [ 3154.417089][T29106] ? find_held_lock+0x2d/0x110 [ 3154.421849][T29106] ? is_bpf_text_address+0xa9/0x160 [ 3154.427032][T29106] ? mark_lock+0xbc/0x1220 [ 3154.431438][T29106] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3154.437338][T29106] ? __nla_validate_parse+0x2af/0x1cd0 [ 3154.442794][T29106] ? nla_memcpy+0xa0/0xa0 [ 3154.447113][T29106] ? __nla_parse+0x2e/0x60 [ 3154.451539][T29106] __rtnl_newlink+0xc96/0x1590 [ 3154.456306][T29106] ? rtnl_link_unregister+0x240/0x240 [ 3154.461664][T29106] ? __bpf_address_lookup+0x290/0x290 [ 3154.467042][T29106] ? is_bpf_text_address+0xcb/0x160 [ 3154.472225][T29106] ? kernel_text_address+0x6e/0xe0 [ 3154.477445][T29106] ? __kernel_text_address+0x9/0x30 [ 3154.482626][T29106] ? unwind_get_return_address+0x5a/0xa0 [ 3154.489192][T29106] ? profile_setup.cold+0xc1/0xc1 [ 3154.494215][T29106] ? arch_stack_walk+0x84/0xd0 [ 3154.498988][T29106] ? stack_trace_save+0x8c/0xc0 [ 3154.503834][T29106] ? stack_trace_consume_entry+0x160/0x160 [ 3154.509681][T29106] ? rtnl_newlink+0x46/0xa0 [ 3154.514186][T29106] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3154.519732][T29106] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3154.525705][T29106] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3154.531516][T29106] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3154.537051][T29106] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3154.542148][T29106] rtnl_newlink+0x64/0xa0 [ 3154.546468][T29106] ? __rtnl_newlink+0x1590/0x1590 [ 3154.551486][T29106] rtnetlink_rcv_msg+0x44e/0xad0 [ 3154.556414][T29106] ? rtnl_bridge_getlink+0x870/0x870 [ 3154.561693][T29106] ? mark_held_locks+0xe0/0xe0 [ 3154.566442][T29106] ? netlink_deliver_tap+0x146/0xb50 [ 3154.571714][T29106] netlink_rcv_skb+0x15a/0x410 [ 3154.576467][T29106] ? rtnl_bridge_getlink+0x870/0x870 [ 3154.581741][T29106] ? netlink_ack+0xa80/0xa80 [ 3154.586327][T29106] netlink_unicast+0x537/0x740 [ 3154.591078][T29106] ? netlink_attachskb+0x810/0x810 [ 3154.596169][T29106] ? _copy_from_iter_full+0x25c/0x870 [ 3154.601531][T29106] ? __phys_addr_symbol+0x2c/0x70 [ 3154.606607][T29106] ? __check_object_size+0x171/0x437 [ 3154.611900][T29106] netlink_sendmsg+0x882/0xe10 [ 3154.616671][T29106] ? aa_af_perm+0x260/0x260 [ 3154.621280][T29106] ? netlink_unicast+0x740/0x740 [ 3154.626223][T29106] ? netlink_unicast+0x740/0x740 [ 3154.631328][T29106] sock_sendmsg+0xcf/0x120 [ 3154.635741][T29106] ____sys_sendmsg+0x6b9/0x7d0 [ 3154.640499][T29106] ? kernel_sendmsg+0x50/0x50 [ 3154.645190][T29106] ___sys_sendmsg+0x100/0x170 [ 3154.649858][T29106] ? sendmsg_copy_msghdr+0x70/0x70 [ 3154.654964][T29106] ? __fget_files+0x329/0x4f0 [ 3154.659634][T29106] ? ksys_dup3+0x3c0/0x3c0 [ 3154.664033][T29106] ? find_held_lock+0x2d/0x110 [ 3154.668782][T29106] ? vfs_write+0x342/0x5c0 [ 3154.673189][T29106] ? __fget_light+0x208/0x270 [ 3154.677860][T29106] __sys_sendmsg+0xec/0x1b0 [ 3154.682348][T29106] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3154.687378][T29106] ? vfs_write+0x15b/0x5c0 [ 3154.691796][T29106] ? trace_hardirqs_off_caller+0x55/0x230 [ 3154.697619][T29106] ? do_syscall_64+0x21/0x7d0 [ 3154.702288][T29106] do_syscall_64+0xf6/0x7d0 [ 3154.706783][T29106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3154.712672][T29106] RIP: 0033:0x45c849 [ 3154.716558][T29106] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3154.736144][T29106] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3154.744534][T29106] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3154.752487][T29106] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3154.760454][T29106] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3154.768409][T29106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3154.776450][T29106] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000003 [ 3154.808025][T29106] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:07 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800e0000) 09:06:07 executing program 1 (fault-call:1 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xa732}) 09:06:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x6800000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3154.962445][T29111] A link change request failed with some changes committed already. Interface veth4 may have been left with an inconsistent configuration, please check. 09:06:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400001810000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:07 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3155.062114][T29118] FAULT_INJECTION: forcing a failure. [ 3155.062114][T29118] name failslab, interval 1, probability 0, space 0, times 0 [ 3155.138890][T29118] CPU: 1 PID: 29118 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3155.147609][T29118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3155.157666][T29118] Call Trace: [ 3155.160954][T29118] dump_stack+0x188/0x20d [ 3155.165294][T29118] should_fail.cold+0x5/0xa [ 3155.169810][T29118] ? fault_create_debugfs_attr+0x140/0x140 [ 3155.175637][T29118] should_failslab+0x5/0xf [ 3155.180069][T29118] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3155.185890][T29118] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3155.191896][T29118] __kmalloc_node_track_caller+0x38/0x60 [ 3155.197542][T29118] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3155.202921][T29118] __alloc_skb+0xef/0x5a0 [ 3155.207242][T29118] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3155.212928][T29118] ? if_nlmsg_size+0x541/0xa70 [ 3155.217699][T29118] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3155.223013][T29118] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3155.228464][T29118] rtmsg_ifinfo+0x7f/0xa0 [ 3155.232789][T29118] netdev_state_change+0x121/0x140 [ 3155.237889][T29118] ? netdev_notify_peers+0xc0/0xc0 [ 3155.243132][T29118] ? dev_change_xdp_fd+0x2fb/0x600 [ 3155.248235][T29118] do_setlink+0x2d6d/0x35e0 [ 3155.252746][T29118] ? rtnl_getlink+0xab0/0xab0 [ 3155.257417][T29118] ? find_held_lock+0x2d/0x110 [ 3155.262168][T29118] ? is_bpf_text_address+0xa9/0x160 [ 3155.267636][T29118] ? mark_lock+0xbc/0x1220 [ 3155.272054][T29118] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3155.277934][T29118] ? __nla_validate_parse+0x2af/0x1cd0 [ 3155.283381][T29118] ? nla_memcpy+0xa0/0xa0 [ 3155.287693][T29118] ? __nla_parse+0x2e/0x60 [ 3155.292098][T29118] __rtnl_newlink+0xc96/0x1590 [ 3155.296869][T29118] ? rtnl_link_unregister+0x240/0x240 [ 3155.302222][T29118] ? __bpf_address_lookup+0x290/0x290 [ 3155.307602][T29118] ? is_bpf_text_address+0xcb/0x160 [ 3155.312807][T29118] ? kernel_text_address+0x6e/0xe0 [ 3155.317912][T29118] ? __kernel_text_address+0x9/0x30 [ 3155.323101][T29118] ? unwind_get_return_address+0x5a/0xa0 [ 3155.328724][T29118] ? profile_setup.cold+0xc1/0xc1 [ 3155.333748][T29118] ? arch_stack_walk+0x84/0xd0 [ 3155.338501][T29118] ? stack_trace_save+0x8c/0xc0 [ 3155.343334][T29118] ? stack_trace_consume_entry+0x160/0x160 [ 3155.349160][T29118] ? rtnl_newlink+0x46/0xa0 [ 3155.353647][T29118] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3155.359195][T29118] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3155.365183][T29118] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3155.370988][T29118] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3155.376529][T29118] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3155.381632][T29118] rtnl_newlink+0x64/0xa0 [ 3155.385945][T29118] ? __rtnl_newlink+0x1590/0x1590 [ 3155.390955][T29118] rtnetlink_rcv_msg+0x44e/0xad0 [ 3155.395901][T29118] ? rtnl_bridge_getlink+0x870/0x870 [ 3155.401176][T29118] ? mark_held_locks+0xe0/0xe0 [ 3155.405927][T29118] ? netlink_deliver_tap+0x146/0xb50 [ 3155.411196][T29118] netlink_rcv_skb+0x15a/0x410 [ 3155.415947][T29118] ? rtnl_bridge_getlink+0x870/0x870 [ 3155.421218][T29118] ? netlink_ack+0xa80/0xa80 [ 3155.425821][T29118] netlink_unicast+0x537/0x740 [ 3155.430586][T29118] ? netlink_attachskb+0x810/0x810 [ 3155.435698][T29118] ? _copy_from_iter_full+0x25c/0x870 [ 3155.441075][T29118] ? __phys_addr_symbol+0x2c/0x70 [ 3155.446118][T29118] ? __check_object_size+0x171/0x437 [ 3155.451416][T29118] netlink_sendmsg+0x882/0xe10 [ 3155.456196][T29118] ? aa_af_perm+0x260/0x260 [ 3155.460704][T29118] ? netlink_unicast+0x740/0x740 [ 3155.465796][T29118] ? netlink_unicast+0x740/0x740 [ 3155.470741][T29118] sock_sendmsg+0xcf/0x120 [ 3155.475149][T29118] ____sys_sendmsg+0x6b9/0x7d0 [ 3155.479907][T29118] ? kernel_sendmsg+0x50/0x50 [ 3155.484588][T29118] ___sys_sendmsg+0x100/0x170 [ 3155.489271][T29118] ? sendmsg_copy_msghdr+0x70/0x70 [ 3155.494393][T29118] ? __fget_files+0x329/0x4f0 [ 3155.499076][T29118] ? ksys_dup3+0x3c0/0x3c0 [ 3155.503490][T29118] ? find_held_lock+0x2d/0x110 [ 3155.508253][T29118] ? vfs_write+0x342/0x5c0 [ 3155.512673][T29118] ? __fget_light+0x208/0x270 [ 3155.517367][T29118] __sys_sendmsg+0xec/0x1b0 [ 3155.521872][T29118] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3155.526901][T29118] ? vfs_write+0x15b/0x5c0 [ 3155.531329][T29118] ? trace_hardirqs_off_caller+0x55/0x230 [ 3155.537045][T29118] ? do_syscall_64+0x21/0x7d0 [ 3155.541725][T29118] do_syscall_64+0xf6/0x7d0 [ 3155.546235][T29118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3155.552113][T29118] RIP: 0033:0x45c849 [ 3155.556003][T29118] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3155.575604][T29118] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3155.584013][T29118] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3155.591989][T29118] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3155.599951][T29118] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3155.607922][T29118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3155.615892][T29118] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000004 [ 3155.665348][T29118] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3155.677018][T29128] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:08 executing program 1 (fault-call:1 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400001f10000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:08 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3155.931869][T29144] FAULT_INJECTION: forcing a failure. [ 3155.931869][T29144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3155.945225][T29144] CPU: 1 PID: 29144 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3155.953899][T29144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3155.963947][T29144] Call Trace: [ 3155.967238][T29144] dump_stack+0x188/0x20d [ 3155.971575][T29144] should_fail.cold+0x5/0xa [ 3155.976102][T29144] ? fault_create_debugfs_attr+0x140/0x140 [ 3155.981919][T29144] ? __lock_acquire+0x14bd/0x3ca0 [ 3155.986962][T29144] __alloc_pages_nodemask+0x17a/0x820 [ 3155.992343][T29144] ? ___sys_sendmsg+0x100/0x170 [ 3155.997199][T29144] ? __sys_sendmsg+0xec/0x1b0 [ 3156.002110][T29144] ? do_syscall_64+0xf6/0x7d0 [ 3156.006909][T29144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3156.012995][T29144] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3156.018726][T29144] ? find_held_lock+0x2d/0x110 [ 3156.023516][T29144] cache_grow_begin+0x8c/0xc30 [ 3156.028282][T29144] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3156.033733][T29144] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3156.039534][T29144] __kmalloc_node_track_caller+0x38/0x60 [ 3156.045157][T29144] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3156.050519][T29144] __alloc_skb+0xef/0x5a0 [ 3156.054835][T29144] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3156.060373][T29144] ? if_nlmsg_size+0x541/0xa70 [ 3156.065139][T29144] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3156.070417][T29144] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3156.075869][T29144] rtmsg_ifinfo+0x7f/0xa0 [ 3156.080186][T29144] netdev_state_change+0x121/0x140 [ 3156.085296][T29144] ? netdev_notify_peers+0xc0/0xc0 [ 3156.090405][T29144] ? dev_change_xdp_fd+0x2fb/0x600 [ 3156.095527][T29144] do_setlink+0x2d6d/0x35e0 [ 3156.100058][T29144] ? rtnl_getlink+0xab0/0xab0 [ 3156.104728][T29144] ? find_held_lock+0x2d/0x110 [ 3156.109479][T29144] ? is_bpf_text_address+0xa9/0x160 [ 3156.114672][T29144] ? mark_lock+0xbc/0x1220 [ 3156.119086][T29144] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3156.125005][T29144] ? __nla_validate_parse+0x2af/0x1cd0 [ 3156.130455][T29144] ? nla_memcpy+0xa0/0xa0 [ 3156.134787][T29144] ? __nla_parse+0x2e/0x60 [ 3156.139205][T29144] __rtnl_newlink+0xc96/0x1590 [ 3156.143965][T29144] ? rtnl_link_unregister+0x240/0x240 [ 3156.149326][T29144] ? __bpf_address_lookup+0x290/0x290 [ 3156.154702][T29144] ? is_bpf_text_address+0xcb/0x160 [ 3156.159893][T29144] ? kernel_text_address+0x6e/0xe0 [ 3156.164989][T29144] ? __kernel_text_address+0x9/0x30 [ 3156.170180][T29144] ? unwind_get_return_address+0x5a/0xa0 [ 3156.175792][T29144] ? profile_setup.cold+0xc1/0xc1 [ 3156.180805][T29144] ? arch_stack_walk+0x84/0xd0 [ 3156.185575][T29144] ? stack_trace_save+0x8c/0xc0 [ 3156.190477][T29144] ? stack_trace_consume_entry+0x160/0x160 [ 3156.196334][T29144] ? rtnl_newlink+0x46/0xa0 [ 3156.200843][T29144] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3156.206375][T29144] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3156.212344][T29144] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3156.218141][T29144] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3156.223678][T29144] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3156.228780][T29144] rtnl_newlink+0x64/0xa0 [ 3156.233097][T29144] ? __rtnl_newlink+0x1590/0x1590 [ 3156.238107][T29144] rtnetlink_rcv_msg+0x44e/0xad0 [ 3156.243030][T29144] ? rtnl_bridge_getlink+0x870/0x870 [ 3156.248305][T29144] ? mark_held_locks+0xe0/0xe0 [ 3156.253053][T29144] ? netlink_deliver_tap+0x146/0xb50 [ 3156.258327][T29144] netlink_rcv_skb+0x15a/0x410 [ 3156.263082][T29144] ? rtnl_bridge_getlink+0x870/0x870 [ 3156.268351][T29144] ? netlink_ack+0xa80/0xa80 [ 3156.272935][T29144] netlink_unicast+0x537/0x740 [ 3156.277698][T29144] ? netlink_attachskb+0x810/0x810 [ 3156.282792][T29144] ? _copy_from_iter_full+0x25c/0x870 [ 3156.288146][T29144] ? __phys_addr_symbol+0x2c/0x70 [ 3156.293163][T29144] ? __check_object_size+0x171/0x437 [ 3156.298434][T29144] netlink_sendmsg+0x882/0xe10 [ 3156.303185][T29144] ? aa_af_perm+0x260/0x260 [ 3156.307706][T29144] ? netlink_unicast+0x740/0x740 [ 3156.312667][T29144] ? netlink_unicast+0x740/0x740 [ 3156.317617][T29144] sock_sendmsg+0xcf/0x120 [ 3156.322026][T29144] ____sys_sendmsg+0x6b9/0x7d0 [ 3156.326781][T29144] ? kernel_sendmsg+0x50/0x50 [ 3156.331459][T29144] ___sys_sendmsg+0x100/0x170 [ 3156.336128][T29144] ? sendmsg_copy_msghdr+0x70/0x70 [ 3156.341239][T29144] ? __fget_files+0x329/0x4f0 [ 3156.345913][T29144] ? ksys_dup3+0x3c0/0x3c0 [ 3156.350324][T29144] ? find_held_lock+0x2d/0x110 [ 3156.355090][T29144] ? vfs_write+0x342/0x5c0 [ 3156.359521][T29144] ? __fget_light+0x208/0x270 [ 3156.364197][T29144] __sys_sendmsg+0xec/0x1b0 [ 3156.368690][T29144] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3156.373705][T29144] ? vfs_write+0x15b/0x5c0 [ 3156.378132][T29144] ? trace_hardirqs_off_caller+0x55/0x230 [ 3156.383856][T29144] ? do_syscall_64+0x21/0x7d0 [ 3156.388535][T29144] do_syscall_64+0xf6/0x7d0 [ 3156.393030][T29144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3156.398903][T29144] RIP: 0033:0x45c849 [ 3156.402784][T29144] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3156.422371][T29144] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3156.430782][T29144] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3156.438747][T29144] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3156.446701][T29144] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3156.454653][T29144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3156.462608][T29144] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000005 [ 3156.484227][T29144] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400002010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:09 executing program 1 (fault-call:1 fault-nth:6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3156.539262][T29128] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3156.674110][T29156] FAULT_INJECTION: forcing a failure. [ 3156.674110][T29156] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.686864][T29156] CPU: 1 PID: 29156 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3156.695671][T29156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3156.705726][T29156] Call Trace: [ 3156.709122][T29156] dump_stack+0x188/0x20d [ 3156.713549][T29156] should_fail.cold+0x5/0xa [ 3156.718066][T29156] ? fault_create_debugfs_attr+0x140/0x140 [ 3156.723874][T29156] ? nla_put+0xfe/0x130 [ 3156.728153][T29156] ? find_held_lock+0x2d/0x110 [ 3156.733034][T29156] should_failslab+0x5/0xf [ 3156.737460][T29156] kmem_cache_alloc_node_trace+0x59/0x790 [ 3156.743305][T29156] ? memset+0x20/0x40 [ 3156.747291][T29156] ? __nla_reserve+0x9b/0xc0 [ 3156.751898][T29156] __kmalloc_node_track_caller+0x38/0x60 [ 3156.757541][T29156] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3156.762906][T29156] pskb_expand_head+0x148/0x1020 [ 3156.767839][T29156] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3156.773640][T29156] netlink_trim+0x1ea/0x240 [ 3156.778133][T29156] netlink_broadcast_filtered+0x5f/0xd40 [ 3156.783753][T29156] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3156.789433][T29156] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3156.794880][T29156] nlmsg_notify+0x90/0x250 [ 3156.799286][T29156] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3156.804751][T29156] rtmsg_ifinfo+0x7f/0xa0 [ 3156.809066][T29156] netdev_state_change+0x121/0x140 [ 3156.814161][T29156] ? netdev_notify_peers+0xc0/0xc0 [ 3156.819258][T29156] ? dev_change_xdp_fd+0x2fb/0x600 [ 3156.824377][T29156] do_setlink+0x2d6d/0x35e0 [ 3156.828891][T29156] ? rtnl_getlink+0xab0/0xab0 [ 3156.833587][T29156] ? find_held_lock+0x2d/0x110 [ 3156.838345][T29156] ? is_bpf_text_address+0xa9/0x160 [ 3156.843540][T29156] ? mark_lock+0xbc/0x1220 [ 3156.847967][T29156] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3156.853860][T29156] ? __nla_validate_parse+0x2af/0x1cd0 [ 3156.859305][T29156] ? nla_memcpy+0xa0/0xa0 [ 3156.863633][T29156] ? __nla_parse+0x2e/0x60 [ 3156.868038][T29156] __rtnl_newlink+0xc96/0x1590 [ 3156.872798][T29156] ? rtnl_link_unregister+0x240/0x240 [ 3156.878150][T29156] ? __bpf_address_lookup+0x290/0x290 [ 3156.883523][T29156] ? is_bpf_text_address+0xcb/0x160 [ 3156.888711][T29156] ? kernel_text_address+0x6e/0xe0 [ 3156.893809][T29156] ? __kernel_text_address+0x9/0x30 [ 3156.898989][T29156] ? unwind_get_return_address+0x5a/0xa0 [ 3156.904603][T29156] ? profile_setup.cold+0xc1/0xc1 [ 3156.909607][T29156] ? arch_stack_walk+0x84/0xd0 [ 3156.914381][T29156] ? stack_trace_save+0x8c/0xc0 [ 3156.919240][T29156] ? stack_trace_consume_entry+0x160/0x160 [ 3156.925175][T29156] ? rtnl_newlink+0x46/0xa0 [ 3156.929668][T29156] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3156.935205][T29156] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3156.941177][T29156] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3156.946978][T29156] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3156.952515][T29156] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3156.957611][T29156] rtnl_newlink+0x64/0xa0 [ 3156.961927][T29156] ? __rtnl_newlink+0x1590/0x1590 [ 3156.966936][T29156] rtnetlink_rcv_msg+0x44e/0xad0 [ 3156.971865][T29156] ? rtnl_bridge_getlink+0x870/0x870 [ 3156.977139][T29156] ? mark_held_locks+0xe0/0xe0 [ 3156.981887][T29156] ? netlink_deliver_tap+0x146/0xb50 [ 3156.987170][T29156] netlink_rcv_skb+0x15a/0x410 [ 3156.991920][T29156] ? rtnl_bridge_getlink+0x870/0x870 [ 3156.997192][T29156] ? netlink_ack+0xa80/0xa80 [ 3157.001783][T29156] netlink_unicast+0x537/0x740 [ 3157.006535][T29156] ? netlink_attachskb+0x810/0x810 [ 3157.011629][T29156] ? _copy_from_iter_full+0x25c/0x870 [ 3157.016984][T29156] ? __phys_addr_symbol+0x2c/0x70 [ 3157.021993][T29156] ? __check_object_size+0x171/0x437 [ 3157.027267][T29156] netlink_sendmsg+0x882/0xe10 [ 3157.032022][T29156] ? aa_af_perm+0x260/0x260 [ 3157.036508][T29156] ? netlink_unicast+0x740/0x740 [ 3157.041436][T29156] ? netlink_unicast+0x740/0x740 [ 3157.046381][T29156] sock_sendmsg+0xcf/0x120 [ 3157.050807][T29156] ____sys_sendmsg+0x6b9/0x7d0 [ 3157.055570][T29156] ? kernel_sendmsg+0x50/0x50 [ 3157.060260][T29156] ___sys_sendmsg+0x100/0x170 [ 3157.064930][T29156] ? sendmsg_copy_msghdr+0x70/0x70 [ 3157.070059][T29156] ? __fget_files+0x329/0x4f0 [ 3157.074734][T29156] ? ksys_dup3+0x3c0/0x3c0 [ 3157.079149][T29156] ? find_held_lock+0x2d/0x110 [ 3157.083919][T29156] ? vfs_write+0x342/0x5c0 [ 3157.088332][T29156] ? __fget_light+0x208/0x270 [ 3157.093007][T29156] __sys_sendmsg+0xec/0x1b0 [ 3157.097501][T29156] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3157.102513][T29156] ? vfs_write+0x15b/0x5c0 [ 3157.106924][T29156] ? trace_hardirqs_off_caller+0x55/0x230 [ 3157.112629][T29156] ? do_syscall_64+0x21/0x7d0 [ 3157.117292][T29156] do_syscall_64+0xf6/0x7d0 [ 3157.121784][T29156] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3157.127670][T29156] RIP: 0033:0x45c849 [ 3157.131547][T29156] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3157.151143][T29156] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3157.159562][T29156] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3157.167537][T29156] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3157.175501][T29156] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3157.183457][T29156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3157.191415][T29156] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000006 [ 3157.207142][T29156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1\x00', 0x4000}) [ 3157.232616][T29150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:06:10 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x80350000) 09:06:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400002810000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:10 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x68407d9800000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:10 executing program 1 (fault-call:1 fault-nth:7): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2c281, 0x0) r1 = socket(0x18, 0x5, 0x2) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000600)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes256, 0x1, [], "f3765d6710794dd8aebe100fdfeb7ca9"}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x1) 09:06:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400003f10000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3157.682714][T29183] FAULT_INJECTION: forcing a failure. [ 3157.682714][T29183] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3157.695957][T29183] CPU: 1 PID: 29183 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3157.704638][T29183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3157.714726][T29183] Call Trace: [ 3157.718031][T29183] dump_stack+0x188/0x20d [ 3157.722384][T29183] should_fail.cold+0x5/0xa [ 3157.726904][T29183] ? fault_create_debugfs_attr+0x140/0x140 [ 3157.732735][T29183] __alloc_pages_nodemask+0x17a/0x820 [ 3157.738152][T29183] ? inet6_fill_ifla6_attrs+0x1a3a/0x1fb0 [ 3157.743897][T29183] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3157.749625][T29183] ? mark_lock+0xbc/0x1220 [ 3157.754060][T29183] ? __nla_reserve+0x9b/0xc0 [ 3157.758669][T29183] cache_grow_begin+0x8c/0xc30 [ 3157.763451][T29183] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3157.768933][T29183] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3157.774760][T29183] ? __nla_reserve+0x9b/0xc0 [ 3157.779378][T29183] __kmalloc_node_track_caller+0x38/0x60 [ 3157.785023][T29183] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3157.790423][T29183] pskb_expand_head+0x148/0x1020 [ 3157.795363][T29183] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3157.801220][T29183] netlink_trim+0x1ea/0x240 [ 3157.805797][T29183] netlink_broadcast_filtered+0x5f/0xd40 [ 3157.811441][T29183] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3157.817003][T29183] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3157.822456][T29183] nlmsg_notify+0x90/0x250 [ 3157.826869][T29183] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3157.832320][T29183] rtmsg_ifinfo+0x7f/0xa0 [ 3157.836735][T29183] netdev_state_change+0x121/0x140 [ 3157.841840][T29183] ? netdev_notify_peers+0xc0/0xc0 [ 3157.846940][T29183] ? dev_change_xdp_fd+0x2fb/0x600 [ 3157.852060][T29183] do_setlink+0x2d6d/0x35e0 [ 3157.856562][T29183] ? rtnl_getlink+0xab0/0xab0 [ 3157.861224][T29183] ? find_held_lock+0x2d/0x110 [ 3157.865991][T29183] ? is_bpf_text_address+0xa9/0x160 [ 3157.871191][T29183] ? mark_lock+0xbc/0x1220 [ 3157.875595][T29183] ? mark_lock+0xbc/0x1220 [ 3157.879999][T29183] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3157.885896][T29183] ? __nla_validate_parse+0x2af/0x1cd0 [ 3157.891462][T29183] ? nla_memcpy+0xa0/0xa0 [ 3157.895819][T29183] ? __nla_parse+0x2e/0x60 [ 3157.900235][T29183] __rtnl_newlink+0xc96/0x1590 [ 3157.905030][T29183] ? rtnl_link_unregister+0x240/0x240 [ 3157.910405][T29183] ? __bpf_address_lookup+0x290/0x290 [ 3157.915794][T29183] ? is_bpf_text_address+0xcb/0x160 [ 3157.920989][T29183] ? kernel_text_address+0x6e/0xe0 [ 3157.926095][T29183] ? __kernel_text_address+0x9/0x30 [ 3157.931284][T29183] ? unwind_get_return_address+0x5a/0xa0 [ 3157.936906][T29183] ? profile_setup.cold+0xc1/0xc1 [ 3157.941916][T29183] ? arch_stack_walk+0x84/0xd0 [ 3157.946678][T29183] ? stack_trace_save+0x8c/0xc0 [ 3157.951515][T29183] ? stack_trace_consume_entry+0x160/0x160 [ 3157.957353][T29183] ? rtnl_newlink+0x46/0xa0 [ 3157.961842][T29183] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3157.967386][T29183] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3157.973352][T29183] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3157.979176][T29183] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3157.984719][T29183] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3157.989943][T29183] rtnl_newlink+0x64/0xa0 [ 3157.994381][T29183] ? __rtnl_newlink+0x1590/0x1590 [ 3157.999400][T29183] rtnetlink_rcv_msg+0x44e/0xad0 [ 3158.004358][T29183] ? rtnl_bridge_getlink+0x870/0x870 [ 3158.009648][T29183] ? mark_held_locks+0xe0/0xe0 [ 3158.014414][T29183] ? netlink_deliver_tap+0x146/0xb50 [ 3158.019893][T29183] netlink_rcv_skb+0x15a/0x410 [ 3158.024671][T29183] ? rtnl_bridge_getlink+0x870/0x870 [ 3158.029952][T29183] ? netlink_ack+0xa80/0xa80 [ 3158.034555][T29183] netlink_unicast+0x537/0x740 [ 3158.039319][T29183] ? netlink_attachskb+0x810/0x810 [ 3158.044423][T29183] ? _copy_from_iter_full+0x25c/0x870 [ 3158.049784][T29183] ? __phys_addr_symbol+0x2c/0x70 [ 3158.054811][T29183] ? __check_object_size+0x171/0x437 [ 3158.060087][T29183] netlink_sendmsg+0x882/0xe10 [ 3158.064840][T29183] ? aa_af_perm+0x260/0x260 [ 3158.069329][T29183] ? netlink_unicast+0x740/0x740 [ 3158.074274][T29183] ? netlink_unicast+0x740/0x740 [ 3158.079198][T29183] sock_sendmsg+0xcf/0x120 [ 3158.083630][T29183] ____sys_sendmsg+0x6b9/0x7d0 [ 3158.088405][T29183] ? kernel_sendmsg+0x50/0x50 [ 3158.093104][T29183] ___sys_sendmsg+0x100/0x170 [ 3158.097796][T29183] ? sendmsg_copy_msghdr+0x70/0x70 [ 3158.103021][T29183] ? __fget_files+0x329/0x4f0 [ 3158.107744][T29183] ? ksys_dup3+0x3c0/0x3c0 [ 3158.112158][T29183] ? find_held_lock+0x2d/0x110 [ 3158.116919][T29183] ? vfs_write+0x342/0x5c0 [ 3158.121339][T29183] ? __fget_light+0x208/0x270 [ 3158.126043][T29183] __sys_sendmsg+0xec/0x1b0 [ 3158.130545][T29183] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3158.135679][T29183] ? vfs_write+0x15b/0x5c0 [ 3158.140121][T29183] ? trace_hardirqs_off_caller+0x55/0x230 [ 3158.145849][T29183] ? do_syscall_64+0x21/0x7d0 [ 3158.150524][T29183] do_syscall_64+0xf6/0x7d0 [ 3158.155026][T29183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3158.160906][T29183] RIP: 0033:0x45c849 [ 3158.164788][T29183] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:06:10 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34006d3f10000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3158.184377][T29183] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3158.192772][T29183] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3158.200725][T29183] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3158.208699][T29183] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3158.216662][T29183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3158.224650][T29183] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000007 [ 3158.296649][T29183] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3158.308015][T29187] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:11 executing program 1 (fault-call:1 fault-nth:8): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3158.425894][T29200] FAULT_INJECTION: forcing a failure. [ 3158.425894][T29200] name failslab, interval 1, probability 0, space 0, times 0 [ 3158.439365][T29200] CPU: 0 PID: 29200 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3158.448050][T29200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3158.458093][T29200] Call Trace: [ 3158.461385][T29200] dump_stack+0x188/0x20d [ 3158.465714][T29200] should_fail.cold+0x5/0xa [ 3158.470215][T29200] ? fault_create_debugfs_attr+0x140/0x140 [ 3158.476023][T29200] ? nla_put+0xfe/0x130 [ 3158.480184][T29200] ? find_held_lock+0x2d/0x110 [ 3158.484952][T29200] should_failslab+0x5/0xf [ 3158.489352][T29200] kmem_cache_alloc_node_trace+0x59/0x790 [ 3158.495055][T29200] ? memset+0x20/0x40 [ 3158.499020][T29200] ? __nla_reserve+0x9b/0xc0 [ 3158.503609][T29200] __kmalloc_node_track_caller+0x38/0x60 [ 3158.509242][T29200] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3158.514610][T29200] pskb_expand_head+0x148/0x1020 [ 3158.519537][T29200] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3158.525382][T29200] netlink_trim+0x1ea/0x240 [ 3158.529890][T29200] netlink_broadcast_filtered+0x5f/0xd40 [ 3158.535526][T29200] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3158.541077][T29200] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3158.546521][T29200] nlmsg_notify+0x90/0x250 [ 3158.550943][T29200] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3158.556414][T29200] rtmsg_ifinfo+0x7f/0xa0 [ 3158.560740][T29200] netdev_state_change+0x121/0x140 [ 3158.565849][T29200] ? netdev_notify_peers+0xc0/0xc0 [ 3158.571093][T29200] ? dev_change_xdp_fd+0x2fb/0x600 [ 3158.576198][T29200] do_setlink+0x2d6d/0x35e0 [ 3158.580734][T29200] ? rtnl_getlink+0xab0/0xab0 [ 3158.585446][T29200] ? find_held_lock+0x2d/0x110 [ 3158.590215][T29200] ? is_bpf_text_address+0xa9/0x160 [ 3158.595417][T29200] ? mark_lock+0xbc/0x1220 [ 3158.599840][T29200] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3158.605824][T29200] ? __nla_validate_parse+0x2af/0x1cd0 [ 3158.611354][T29200] ? nla_memcpy+0xa0/0xa0 [ 3158.615681][T29200] ? __nla_parse+0x2e/0x60 [ 3158.620156][T29200] __rtnl_newlink+0xc96/0x1590 [ 3158.624978][T29200] ? rtnl_link_unregister+0x240/0x240 [ 3158.630339][T29200] ? __bpf_address_lookup+0x290/0x290 [ 3158.635718][T29200] ? is_bpf_text_address+0xcb/0x160 [ 3158.640917][T29200] ? kernel_text_address+0x6e/0xe0 [ 3158.646031][T29200] ? __kernel_text_address+0x9/0x30 [ 3158.651214][T29200] ? unwind_get_return_address+0x5a/0xa0 [ 3158.656832][T29200] ? profile_setup.cold+0xc1/0xc1 [ 3158.661838][T29200] ? arch_stack_walk+0x84/0xd0 [ 3158.666620][T29200] ? stack_trace_save+0x8c/0xc0 [ 3158.671468][T29200] ? stack_trace_consume_entry+0x160/0x160 [ 3158.677284][T29200] ? rtnl_newlink+0x46/0xa0 [ 3158.681770][T29200] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3158.688609][T29200] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3158.694766][T29200] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3158.700577][T29200] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3158.706142][T29200] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3158.711253][T29200] rtnl_newlink+0x64/0xa0 [ 3158.715568][T29200] ? __rtnl_newlink+0x1590/0x1590 [ 3158.720579][T29200] rtnetlink_rcv_msg+0x44e/0xad0 [ 3158.725505][T29200] ? rtnl_bridge_getlink+0x870/0x870 [ 3158.730780][T29200] ? mark_held_locks+0xe0/0xe0 [ 3158.735545][T29200] ? netlink_deliver_tap+0x146/0xb50 [ 3158.740812][T29200] netlink_rcv_skb+0x15a/0x410 [ 3158.745661][T29200] ? rtnl_bridge_getlink+0x870/0x870 [ 3158.750932][T29200] ? netlink_ack+0xa80/0xa80 [ 3158.755557][T29200] netlink_unicast+0x537/0x740 [ 3158.760320][T29200] ? netlink_attachskb+0x810/0x810 [ 3158.765464][T29200] ? _copy_from_iter_full+0x25c/0x870 [ 3158.770863][T29200] ? __phys_addr_symbol+0x2c/0x70 [ 3158.775882][T29200] ? __check_object_size+0x171/0x437 [ 3158.781157][T29200] netlink_sendmsg+0x882/0xe10 [ 3158.785921][T29200] ? aa_af_perm+0x260/0x260 [ 3158.790432][T29200] ? netlink_unicast+0x740/0x740 [ 3158.795387][T29200] ? netlink_unicast+0x740/0x740 [ 3158.800320][T29200] sock_sendmsg+0xcf/0x120 [ 3158.804722][T29200] ____sys_sendmsg+0x6b9/0x7d0 [ 3158.809470][T29200] ? kernel_sendmsg+0x50/0x50 [ 3158.814161][T29200] ___sys_sendmsg+0x100/0x170 [ 3158.818835][T29200] ? sendmsg_copy_msghdr+0x70/0x70 [ 3158.823937][T29200] ? __fget_files+0x329/0x4f0 [ 3158.828599][T29200] ? ksys_dup3+0x3c0/0x3c0 [ 3158.832998][T29200] ? find_held_lock+0x2d/0x110 [ 3158.837748][T29200] ? vfs_write+0x342/0x5c0 [ 3158.842169][T29200] ? __fget_light+0x208/0x270 [ 3158.846851][T29200] __sys_sendmsg+0xec/0x1b0 [ 3158.851362][T29200] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3158.856381][T29200] ? vfs_write+0x15b/0x5c0 [ 3158.860781][T29200] ? trace_hardirqs_off_caller+0x55/0x230 [ 3158.866490][T29200] ? do_syscall_64+0x21/0x7d0 [ 3158.871219][T29200] do_syscall_64+0xf6/0x7d0 [ 3158.875774][T29200] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3158.881661][T29200] RIP: 0033:0x45c849 [ 3158.885548][T29200] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3158.905150][T29200] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3158.913547][T29200] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3158.921521][T29200] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3158.929486][T29200] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3158.937485][T29200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3158.945498][T29200] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000008 [ 3158.967527][T29200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400004010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:11 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3158.976733][T29194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3158.998702][T29193] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:12 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x81000000) 09:06:12 executing program 1 (fault-call:1 fault-nth:9): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:12 executing program 2: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x304, 0x80, 0x7, 0x9d, 0x5, @dev={[], 0x23}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r5}) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x101, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000140)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @local}, 0x38, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'macsec0\x00'}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x82, &(0x7f00000001c0)={r8}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r8, 0xb5}, &(0x7f0000000040)=0x8) [ 3159.295920][T29218] FAULT_INJECTION: forcing a failure. [ 3159.295920][T29218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3159.309161][T29218] CPU: 1 PID: 29218 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3159.317837][T29218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3159.327927][T29218] Call Trace: [ 3159.331232][T29218] dump_stack+0x188/0x20d [ 3159.335586][T29218] should_fail.cold+0x5/0xa [ 3159.340105][T29218] ? fault_create_debugfs_attr+0x140/0x140 [ 3159.345927][T29218] ? __lock_acquire+0x14bd/0x3ca0 [ 3159.350966][T29218] __alloc_pages_nodemask+0x17a/0x820 [ 3159.356351][T29218] ? ___sys_sendmsg+0x100/0x170 [ 3159.361217][T29218] ? __sys_sendmsg+0xec/0x1b0 [ 3159.365901][T29218] ? do_syscall_64+0xf6/0x7d0 [ 3159.370590][T29218] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3159.376667][T29218] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3159.382402][T29218] ? find_held_lock+0x2d/0x110 [ 3159.387189][T29218] cache_grow_begin+0x8c/0xc30 [ 3159.391970][T29218] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3159.397452][T29218] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3159.403283][T29218] __kmalloc_node_track_caller+0x38/0x60 [ 3159.408932][T29218] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3159.414322][T29218] __alloc_skb+0xef/0x5a0 [ 3159.418666][T29218] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3159.424225][T29218] ? if_nlmsg_size+0x541/0xa70 [ 3159.429004][T29218] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3159.434310][T29218] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3159.439784][T29218] rtmsg_ifinfo+0x7f/0xa0 [ 3159.444131][T29218] netdev_state_change+0x121/0x140 [ 3159.449255][T29218] ? netdev_notify_peers+0xc0/0xc0 [ 3159.454379][T29218] ? dev_change_xdp_fd+0x2fb/0x600 [ 3159.459505][T29218] do_setlink+0x2d6d/0x35e0 [ 3159.464030][T29218] ? rtnl_getlink+0xab0/0xab0 [ 3159.468716][T29218] ? find_held_lock+0x2d/0x110 [ 3159.473472][T29218] ? is_bpf_text_address+0xa9/0x160 [ 3159.478671][T29218] ? mark_lock+0xbc/0x1220 [ 3159.483083][T29218] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3159.488962][T29218] ? __nla_validate_parse+0x2af/0x1cd0 [ 3159.494412][T29218] ? nla_memcpy+0xa0/0xa0 [ 3159.498763][T29218] ? __nla_parse+0x2e/0x60 [ 3159.503183][T29218] __rtnl_newlink+0xc96/0x1590 [ 3159.507977][T29218] ? rtnl_link_unregister+0x240/0x240 [ 3159.513339][T29218] ? __bpf_address_lookup+0x290/0x290 [ 3159.518704][T29218] ? is_bpf_text_address+0xcb/0x160 [ 3159.523895][T29218] ? kernel_text_address+0x6e/0xe0 [ 3159.528998][T29218] ? __kernel_text_address+0x9/0x30 [ 3159.534189][T29218] ? unwind_get_return_address+0x5a/0xa0 [ 3159.539910][T29218] ? profile_setup.cold+0xc1/0xc1 [ 3159.545006][T29218] ? arch_stack_walk+0x84/0xd0 [ 3159.549763][T29218] ? stack_trace_save+0x8c/0xc0 [ 3159.554602][T29218] ? stack_trace_consume_entry+0x160/0x160 [ 3159.560430][T29218] ? rtnl_newlink+0x46/0xa0 [ 3159.564920][T29218] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3159.570451][T29218] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3159.576418][T29218] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3159.582238][T29218] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3159.587773][T29218] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3159.592888][T29218] rtnl_newlink+0x64/0xa0 [ 3159.597203][T29218] ? __rtnl_newlink+0x1590/0x1590 [ 3159.602212][T29218] rtnetlink_rcv_msg+0x44e/0xad0 [ 3159.607136][T29218] ? rtnl_bridge_getlink+0x870/0x870 [ 3159.612410][T29218] ? mark_held_locks+0xe0/0xe0 [ 3159.617160][T29218] ? netlink_deliver_tap+0x146/0xb50 [ 3159.622434][T29218] netlink_rcv_skb+0x15a/0x410 [ 3159.627183][T29218] ? rtnl_bridge_getlink+0x870/0x870 [ 3159.632456][T29218] ? netlink_ack+0xa80/0xa80 [ 3159.637045][T29218] netlink_unicast+0x537/0x740 [ 3159.641801][T29218] ? netlink_attachskb+0x810/0x810 [ 3159.646895][T29218] ? _copy_from_iter_full+0x25c/0x870 [ 3159.652253][T29218] ? __phys_addr_symbol+0x2c/0x70 [ 3159.657262][T29218] ? __check_object_size+0x171/0x437 [ 3159.662535][T29218] netlink_sendmsg+0x882/0xe10 [ 3159.667300][T29218] ? aa_af_perm+0x260/0x260 [ 3159.671789][T29218] ? netlink_unicast+0x740/0x740 [ 3159.676717][T29218] ? netlink_unicast+0x740/0x740 [ 3159.681640][T29218] sock_sendmsg+0xcf/0x120 [ 3159.686047][T29218] ____sys_sendmsg+0x6b9/0x7d0 [ 3159.690797][T29218] ? kernel_sendmsg+0x50/0x50 [ 3159.695479][T29218] ___sys_sendmsg+0x100/0x170 [ 3159.700146][T29218] ? sendmsg_copy_msghdr+0x70/0x70 [ 3159.705252][T29218] ? __fget_files+0x329/0x4f0 [ 3159.709918][T29218] ? ksys_dup3+0x3c0/0x3c0 [ 3159.714318][T29218] ? find_held_lock+0x2d/0x110 [ 3159.719070][T29218] ? vfs_write+0x342/0x5c0 [ 3159.723475][T29218] ? __fget_light+0x208/0x270 [ 3159.728139][T29218] __sys_sendmsg+0xec/0x1b0 [ 3159.732641][T29218] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3159.737651][T29218] ? vfs_write+0x15b/0x5c0 [ 3159.742060][T29218] ? trace_hardirqs_off_caller+0x55/0x230 [ 3159.747764][T29218] ? do_syscall_64+0x21/0x7d0 [ 3159.752442][T29218] do_syscall_64+0xf6/0x7d0 [ 3159.756954][T29218] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3159.762846][T29218] RIP: 0033:0x45c849 [ 3159.766746][T29218] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3159.786359][T29218] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3159.794757][T29218] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3159.802712][T29218] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3159.810778][T29218] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3159.818731][T29218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3159.826687][T29218] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000009 [ 3159.857494][T29218] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x6c00000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400006010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:12 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:12 executing program 1 (fault-call:1 fault-nth:10): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3160.319383][T29240] FAULT_INJECTION: forcing a failure. [ 3160.319383][T29240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3160.332833][T29240] CPU: 0 PID: 29240 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3160.341502][T29240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3160.351565][T29240] Call Trace: [ 3160.354863][T29240] dump_stack+0x188/0x20d [ 3160.359221][T29240] should_fail.cold+0x5/0xa [ 3160.363746][T29240] ? fault_create_debugfs_attr+0x140/0x140 [ 3160.369575][T29240] ? __lock_acquire+0x14bd/0x3ca0 [ 3160.374631][T29240] __alloc_pages_nodemask+0x17a/0x820 [ 3160.380006][T29240] ? ___sys_sendmsg+0x100/0x170 [ 3160.384987][T29240] ? __sys_sendmsg+0xec/0x1b0 [ 3160.389754][T29240] ? do_syscall_64+0xf6/0x7d0 [ 3160.394447][T29240] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3160.400713][T29240] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3160.406423][T29240] ? find_held_lock+0x2d/0x110 [ 3160.411204][T29240] cache_grow_begin+0x8c/0xc30 [ 3160.415974][T29240] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3160.421489][T29240] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3160.427300][T29240] __kmalloc_node_track_caller+0x38/0x60 [ 3160.432949][T29240] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3160.438319][T29240] __alloc_skb+0xef/0x5a0 [ 3160.442654][T29240] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3160.448199][T29240] ? if_nlmsg_size+0x541/0xa70 [ 3160.452983][T29240] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3160.458281][T29240] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3160.463751][T29240] rtmsg_ifinfo+0x7f/0xa0 [ 3160.468082][T29240] netdev_state_change+0x121/0x140 [ 3160.473194][T29240] ? netdev_notify_peers+0xc0/0xc0 [ 3160.478381][T29240] ? dev_change_xdp_fd+0x2fb/0x600 [ 3160.483512][T29240] do_setlink+0x2d6d/0x35e0 [ 3160.488039][T29240] ? rtnl_getlink+0xab0/0xab0 [ 3160.492726][T29240] ? find_held_lock+0x2d/0x110 [ 3160.497497][T29240] ? is_bpf_text_address+0xa9/0x160 [ 3160.502707][T29240] ? mark_lock+0xbc/0x1220 [ 3160.507183][T29240] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3160.513426][T29240] ? __nla_validate_parse+0x2af/0x1cd0 [ 3160.518906][T29240] ? nla_memcpy+0xa0/0xa0 [ 3160.523241][T29240] ? __nla_parse+0x2e/0x60 [ 3160.527783][T29240] __rtnl_newlink+0xc96/0x1590 [ 3160.532557][T29240] ? rtnl_link_unregister+0x240/0x240 [ 3160.538004][T29240] ? __bpf_address_lookup+0x290/0x290 [ 3160.543380][T29240] ? is_bpf_text_address+0xcb/0x160 [ 3160.548628][T29240] ? kernel_text_address+0x6e/0xe0 [ 3160.553738][T29240] ? __kernel_text_address+0x9/0x30 [ 3160.559075][T29240] ? unwind_get_return_address+0x5a/0xa0 [ 3160.564697][T29240] ? profile_setup.cold+0xc1/0xc1 [ 3160.569707][T29240] ? arch_stack_walk+0x84/0xd0 [ 3160.574488][T29240] ? stack_trace_save+0x8c/0xc0 [ 3160.579342][T29240] ? stack_trace_consume_entry+0x160/0x160 [ 3160.585273][T29240] ? rtnl_newlink+0x46/0xa0 [ 3160.589847][T29240] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3160.595413][T29240] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3160.601409][T29240] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3160.607368][T29240] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3160.612931][T29240] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3160.618054][T29240] rtnl_newlink+0x64/0xa0 [ 3160.622388][T29240] ? __rtnl_newlink+0x1590/0x1590 [ 3160.627503][T29240] rtnetlink_rcv_msg+0x44e/0xad0 [ 3160.632442][T29240] ? rtnl_bridge_getlink+0x870/0x870 [ 3160.637744][T29240] ? mark_held_locks+0xe0/0xe0 [ 3160.642506][T29240] ? netlink_deliver_tap+0x146/0xb50 [ 3160.647795][T29240] netlink_rcv_skb+0x15a/0x410 [ 3160.652561][T29240] ? rtnl_bridge_getlink+0x870/0x870 [ 3160.657845][T29240] ? netlink_ack+0xa80/0xa80 [ 3160.662452][T29240] netlink_unicast+0x537/0x740 [ 3160.667224][T29240] ? netlink_attachskb+0x810/0x810 [ 3160.672327][T29240] ? _copy_from_iter_full+0x25c/0x870 [ 3160.677708][T29240] ? __phys_addr_symbol+0x2c/0x70 [ 3160.682729][T29240] ? __check_object_size+0x171/0x437 [ 3160.688077][T29240] netlink_sendmsg+0x882/0xe10 [ 3160.692851][T29240] ? aa_af_perm+0x260/0x260 [ 3160.697379][T29240] ? netlink_unicast+0x740/0x740 [ 3160.702337][T29240] ? netlink_unicast+0x740/0x740 [ 3160.707279][T29240] sock_sendmsg+0xcf/0x120 [ 3160.711708][T29240] ____sys_sendmsg+0x6b9/0x7d0 [ 3160.716487][T29240] ? kernel_sendmsg+0x50/0x50 [ 3160.721172][T29240] ___sys_sendmsg+0x100/0x170 [ 3160.725854][T29240] ? sendmsg_copy_msghdr+0x70/0x70 [ 3160.730970][T29240] ? __fget_files+0x329/0x4f0 [ 3160.735656][T29240] ? ksys_dup3+0x3c0/0x3c0 [ 3160.740081][T29240] ? find_held_lock+0x2d/0x110 [ 3160.745003][T29240] ? vfs_write+0x342/0x5c0 [ 3160.749417][T29240] ? __fget_light+0x208/0x270 [ 3160.754106][T29240] __sys_sendmsg+0xec/0x1b0 [ 3160.758628][T29240] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3160.763653][T29240] ? vfs_write+0x15b/0x5c0 [ 3160.768081][T29240] ? trace_hardirqs_off_caller+0x55/0x230 [ 3160.773814][T29240] ? do_syscall_64+0x21/0x7d0 [ 3160.778504][T29240] do_syscall_64+0xf6/0x7d0 [ 3160.783017][T29240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3160.789021][T29240] RIP: 0033:0x45c849 [ 3160.792940][T29240] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3160.812555][T29240] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3160.820986][T29240] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3160.829074][T29240] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3160.837046][T29240] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3160.845019][T29240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3160.852994][T29240] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000000a 09:06:13 executing program 1 (fault-call:1 fault-nth:11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3160.867952][T29240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3160.882632][T29242] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34003f6d10000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:13 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x86ddffff) [ 3161.003037][T29249] FAULT_INJECTION: forcing a failure. [ 3161.003037][T29249] name failslab, interval 1, probability 0, space 0, times 0 [ 3161.056909][T29249] CPU: 0 PID: 29249 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3161.065634][T29249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3161.075722][T29249] Call Trace: [ 3161.079011][T29249] dump_stack+0x188/0x20d [ 3161.083362][T29249] should_fail.cold+0x5/0xa [ 3161.087860][T29249] ? fault_create_debugfs_attr+0x140/0x140 [ 3161.093667][T29249] ? nla_put+0xfe/0x130 [ 3161.097821][T29249] ? find_held_lock+0x2d/0x110 [ 3161.102581][T29249] should_failslab+0x5/0xf [ 3161.107009][T29249] kmem_cache_alloc_node_trace+0x59/0x790 [ 3161.112722][T29249] ? memset+0x20/0x40 [ 3161.116702][T29249] ? __nla_reserve+0x9b/0xc0 [ 3161.121296][T29249] __kmalloc_node_track_caller+0x38/0x60 [ 3161.126971][T29249] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3161.132345][T29249] pskb_expand_head+0x148/0x1020 [ 3161.137286][T29249] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3161.143102][T29249] netlink_trim+0x1ea/0x240 [ 3161.147598][T29249] netlink_broadcast_filtered+0x5f/0xd40 [ 3161.153232][T29249] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3161.158786][T29249] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3161.164263][T29249] nlmsg_notify+0x90/0x250 [ 3161.168794][T29249] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3161.174262][T29249] rtmsg_ifinfo+0x7f/0xa0 [ 3161.178598][T29249] netdev_state_change+0x121/0x140 [ 3161.183726][T29249] ? netdev_notify_peers+0xc0/0xc0 [ 3161.188841][T29249] ? dev_change_xdp_fd+0x2fb/0x600 [ 3161.193954][T29249] do_setlink+0x2d6d/0x35e0 [ 3161.198454][T29249] ? rtnl_getlink+0xab0/0xab0 [ 3161.203143][T29249] ? mark_lock+0xbc/0x1220 [ 3161.207563][T29249] ? find_held_lock+0x2d/0x110 [ 3161.212331][T29249] ? mark_lock+0xbc/0x1220 [ 3161.216849][T29249] ? mark_lock+0xbc/0x1220 [ 3161.221280][T29249] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3161.227184][T29249] ? __nla_validate_parse+0x2af/0x1cd0 [ 3161.232763][T29249] ? nla_memcpy+0xa0/0xa0 [ 3161.237196][T29249] ? __nla_parse+0x2e/0x60 [ 3161.241612][T29249] __rtnl_newlink+0xc96/0x1590 [ 3161.246404][T29249] ? rtnl_link_unregister+0x240/0x240 [ 3161.251776][T29249] ? __bpf_address_lookup+0x290/0x290 [ 3161.257165][T29249] ? is_bpf_text_address+0xcb/0x160 [ 3161.262368][T29249] ? kernel_text_address+0x6e/0xe0 [ 3161.267474][T29249] ? __kernel_text_address+0x9/0x30 [ 3161.272673][T29249] ? unwind_get_return_address+0x5a/0xa0 [ 3161.278308][T29249] ? profile_setup.cold+0xc1/0xc1 [ 3161.283334][T29249] ? arch_stack_walk+0x84/0xd0 [ 3161.288110][T29249] ? stack_trace_save+0x8c/0xc0 [ 3161.292972][T29249] ? stack_trace_consume_entry+0x160/0x160 [ 3161.298805][T29249] ? rtnl_newlink+0x46/0xa0 [ 3161.303301][T29249] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3161.308859][T29249] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3161.314968][T29249] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3161.320782][T29249] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3161.326332][T29249] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3161.331564][T29249] rtnl_newlink+0x64/0xa0 [ 3161.335897][T29249] ? __rtnl_newlink+0x1590/0x1590 [ 3161.340925][T29249] rtnetlink_rcv_msg+0x44e/0xad0 [ 3161.345877][T29249] ? rtnl_bridge_getlink+0x870/0x870 [ 3161.351159][T29249] ? mark_held_locks+0xe0/0xe0 [ 3161.355921][T29249] ? netlink_deliver_tap+0x146/0xb50 [ 3161.361221][T29249] netlink_rcv_skb+0x15a/0x410 [ 3161.366245][T29249] ? rtnl_bridge_getlink+0x870/0x870 [ 3161.371521][T29249] ? netlink_ack+0xa80/0xa80 [ 3161.376115][T29249] netlink_unicast+0x537/0x740 [ 3161.380906][T29249] ? netlink_attachskb+0x810/0x810 [ 3161.386010][T29249] ? _copy_from_iter_full+0x25c/0x870 [ 3161.391399][T29249] ? __phys_addr_symbol+0x2c/0x70 [ 3161.396416][T29249] ? __check_object_size+0x171/0x437 [ 3161.401694][T29249] netlink_sendmsg+0x882/0xe10 [ 3161.406449][T29249] ? aa_af_perm+0x260/0x260 [ 3161.410957][T29249] ? netlink_unicast+0x740/0x740 [ 3161.415893][T29249] ? netlink_unicast+0x740/0x740 [ 3161.420830][T29249] sock_sendmsg+0xcf/0x120 [ 3161.425302][T29249] ____sys_sendmsg+0x6b9/0x7d0 [ 3161.430177][T29249] ? kernel_sendmsg+0x50/0x50 [ 3161.434862][T29249] ___sys_sendmsg+0x100/0x170 [ 3161.439540][T29249] ? sendmsg_copy_msghdr+0x70/0x70 [ 3161.444656][T29249] ? __fget_files+0x329/0x4f0 [ 3161.449351][T29249] ? ksys_dup3+0x3c0/0x3c0 [ 3161.453757][T29249] ? find_held_lock+0x2d/0x110 [ 3161.458540][T29249] ? vfs_write+0x342/0x5c0 [ 3161.462980][T29249] ? __fget_light+0x208/0x270 [ 3161.467665][T29249] __sys_sendmsg+0xec/0x1b0 [ 3161.472159][T29249] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3161.477176][T29249] ? vfs_write+0x15b/0x5c0 [ 3161.481587][T29249] ? trace_hardirqs_off_caller+0x55/0x230 [ 3161.487295][T29249] ? do_syscall_64+0x21/0x7d0 [ 3161.491962][T29249] do_syscall_64+0xf6/0x7d0 [ 3161.496459][T29249] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3161.502348][T29249] RIP: 0033:0x45c849 [ 3161.506230][T29249] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3161.525816][T29249] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3161.534218][T29249] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3161.542181][T29249] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3161.550139][T29249] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3161.558096][T29249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3161.566056][T29249] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000000b 09:06:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x8, 0x4) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) [ 3161.616636][T29249] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3161.626329][T29242] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:14 executing program 1 (fault-call:1 fault-nth:12): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:14 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3161.807205][T29269] FAULT_INJECTION: forcing a failure. [ 3161.807205][T29269] name failslab, interval 1, probability 0, space 0, times 0 [ 3161.839652][T29269] CPU: 0 PID: 29269 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3161.848363][T29269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3161.858419][T29269] Call Trace: [ 3161.861711][T29269] dump_stack+0x188/0x20d [ 3161.866055][T29269] should_fail.cold+0x5/0xa [ 3161.870574][T29269] ? fault_create_debugfs_attr+0x140/0x140 [ 3161.876384][T29269] ? nla_put+0xfe/0x130 [ 3161.880558][T29269] ? find_held_lock+0x2d/0x110 [ 3161.885337][T29269] should_failslab+0x5/0xf [ 3161.889879][T29269] kmem_cache_alloc_node_trace+0x59/0x790 [ 3161.895616][T29269] ? memset+0x20/0x40 [ 3161.899609][T29269] ? __nla_reserve+0x9b/0xc0 [ 3161.904217][T29269] __kmalloc_node_track_caller+0x38/0x60 [ 3161.909863][T29269] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3161.915250][T29269] pskb_expand_head+0x148/0x1020 [ 3161.920197][T29269] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3161.926020][T29269] netlink_trim+0x1ea/0x240 [ 3161.930539][T29269] netlink_broadcast_filtered+0x5f/0xd40 [ 3161.936183][T29269] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3161.941738][T29269] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3161.947192][T29269] nlmsg_notify+0x90/0x250 [ 3161.951607][T29269] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3161.957060][T29269] rtmsg_ifinfo+0x7f/0xa0 [ 3161.961385][T29269] netdev_state_change+0x121/0x140 [ 3161.966489][T29269] ? netdev_notify_peers+0xc0/0xc0 [ 3161.971588][T29269] ? dev_change_xdp_fd+0x2fb/0x600 [ 3161.976691][T29269] do_setlink+0x2d6d/0x35e0 [ 3161.981192][T29269] ? rtnl_getlink+0xab0/0xab0 [ 3161.985853][T29269] ? find_held_lock+0x2d/0x110 [ 3161.990603][T29269] ? is_bpf_text_address+0xa9/0x160 [ 3161.995786][T29269] ? mark_lock+0xbc/0x1220 [ 3162.000192][T29269] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3162.006068][T29269] ? __nla_validate_parse+0x2af/0x1cd0 [ 3162.011527][T29269] ? nla_memcpy+0xa0/0xa0 [ 3162.015842][T29269] ? __nla_parse+0x2e/0x60 [ 3162.020253][T29269] __rtnl_newlink+0xc96/0x1590 [ 3162.025024][T29269] ? rtnl_link_unregister+0x240/0x240 [ 3162.030375][T29269] ? __bpf_address_lookup+0x290/0x290 [ 3162.035736][T29269] ? is_bpf_text_address+0xcb/0x160 [ 3162.040932][T29269] ? kernel_text_address+0x6e/0xe0 [ 3162.046040][T29269] ? __kernel_text_address+0x9/0x30 [ 3162.051222][T29269] ? unwind_get_return_address+0x5a/0xa0 [ 3162.056921][T29269] ? profile_setup.cold+0xc1/0xc1 [ 3162.061953][T29269] ? arch_stack_walk+0x84/0xd0 [ 3162.066717][T29269] ? stack_trace_save+0x8c/0xc0 [ 3162.071570][T29269] ? stack_trace_consume_entry+0x160/0x160 [ 3162.077404][T29269] ? rtnl_newlink+0x46/0xa0 [ 3162.081898][T29269] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3162.087434][T29269] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3162.093405][T29269] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3162.099198][T29269] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3162.104731][T29269] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3162.109829][T29269] rtnl_newlink+0x64/0xa0 [ 3162.114144][T29269] ? __rtnl_newlink+0x1590/0x1590 [ 3162.119153][T29269] rtnetlink_rcv_msg+0x44e/0xad0 [ 3162.124077][T29269] ? rtnl_bridge_getlink+0x870/0x870 [ 3162.129354][T29269] ? mark_held_locks+0xe0/0xe0 [ 3162.134104][T29269] ? netlink_deliver_tap+0x146/0xb50 [ 3162.139384][T29269] netlink_rcv_skb+0x15a/0x410 [ 3162.144133][T29269] ? rtnl_bridge_getlink+0x870/0x870 [ 3162.149402][T29269] ? netlink_ack+0xa80/0xa80 [ 3162.153986][T29269] netlink_unicast+0x537/0x740 [ 3162.158736][T29269] ? netlink_attachskb+0x810/0x810 [ 3162.163933][T29269] ? _copy_from_iter_full+0x25c/0x870 [ 3162.169292][T29269] ? __phys_addr_symbol+0x2c/0x70 [ 3162.174303][T29269] ? __check_object_size+0x171/0x437 [ 3162.179596][T29269] netlink_sendmsg+0x882/0xe10 [ 3162.184352][T29269] ? aa_af_perm+0x260/0x260 [ 3162.188841][T29269] ? netlink_unicast+0x740/0x740 [ 3162.193779][T29269] ? netlink_unicast+0x740/0x740 [ 3162.198710][T29269] sock_sendmsg+0xcf/0x120 [ 3162.203114][T29269] ____sys_sendmsg+0x6b9/0x7d0 [ 3162.207895][T29269] ? kernel_sendmsg+0x50/0x50 [ 3162.212586][T29269] ___sys_sendmsg+0x100/0x170 [ 3162.217255][T29269] ? sendmsg_copy_msghdr+0x70/0x70 [ 3162.222364][T29269] ? __fget_files+0x329/0x4f0 [ 3162.227035][T29269] ? ksys_dup3+0x3c0/0x3c0 [ 3162.231435][T29269] ? find_held_lock+0x2d/0x110 [ 3162.236199][T29269] ? vfs_write+0x342/0x5c0 [ 3162.240617][T29269] ? __fget_light+0x208/0x270 [ 3162.245288][T29269] __sys_sendmsg+0xec/0x1b0 [ 3162.249779][T29269] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3162.254806][T29269] ? vfs_write+0x15b/0x5c0 [ 3162.259218][T29269] ? trace_hardirqs_off_caller+0x55/0x230 [ 3162.264937][T29269] ? do_syscall_64+0x21/0x7d0 [ 3162.269610][T29269] do_syscall_64+0xf6/0x7d0 [ 3162.274103][T29269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3162.279999][T29269] RIP: 0033:0x45c849 [ 3162.283877][T29269] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:06:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400008110000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3162.303546][T29269] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3162.312043][T29269] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3162.319998][T29269] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3162.327972][T29269] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3162.335927][T29269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3162.343899][T29269] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000000c [ 3162.419112][T29269] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x7400000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:15 executing program 1 (fault-call:1 fault-nth:13): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000f010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:15 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3162.665613][T29284] FAULT_INJECTION: forcing a failure. [ 3162.665613][T29284] name failslab, interval 1, probability 0, space 0, times 0 [ 3162.710396][T29284] CPU: 0 PID: 29284 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3162.719113][T29284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3162.729433][T29284] Call Trace: [ 3162.732725][T29284] dump_stack+0x188/0x20d [ 3162.737070][T29284] should_fail.cold+0x5/0xa [ 3162.741577][T29284] ? fault_create_debugfs_attr+0x140/0x140 [ 3162.747392][T29284] should_failslab+0x5/0xf [ 3162.751797][T29284] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3162.757604][T29284] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3162.763578][T29284] __kmalloc_node_track_caller+0x38/0x60 [ 3162.769200][T29284] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3162.774563][T29284] __alloc_skb+0xef/0x5a0 [ 3162.778882][T29284] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3162.784416][T29284] ? if_nlmsg_size+0x541/0xa70 [ 3162.789167][T29284] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3162.794442][T29284] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3162.799889][T29284] rtmsg_ifinfo+0x7f/0xa0 [ 3162.804221][T29284] netdev_state_change+0x121/0x140 [ 3162.809317][T29284] ? netdev_notify_peers+0xc0/0xc0 [ 3162.814412][T29284] ? dev_change_xdp_fd+0x2fb/0x600 [ 3162.819530][T29284] do_setlink+0x2d6d/0x35e0 [ 3162.824035][T29284] ? rtnl_getlink+0xab0/0xab0 [ 3162.828698][T29284] ? find_held_lock+0x2d/0x110 [ 3162.833448][T29284] ? is_bpf_text_address+0xa9/0x160 [ 3162.838634][T29284] ? mark_lock+0xbc/0x1220 [ 3162.843045][T29284] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3162.848924][T29284] ? __nla_validate_parse+0x2af/0x1cd0 [ 3162.854370][T29284] ? nla_memcpy+0xa0/0xa0 [ 3162.858685][T29284] ? __nla_parse+0x2e/0x60 [ 3162.863091][T29284] __rtnl_newlink+0xc96/0x1590 [ 3162.867873][T29284] ? rtnl_link_unregister+0x240/0x240 [ 3162.873230][T29284] ? __bpf_address_lookup+0x290/0x290 [ 3162.878615][T29284] ? is_bpf_text_address+0xcb/0x160 [ 3162.883802][T29284] ? kernel_text_address+0x6e/0xe0 [ 3162.888897][T29284] ? __kernel_text_address+0x9/0x30 [ 3162.894080][T29284] ? unwind_get_return_address+0x5a/0xa0 [ 3162.899697][T29284] ? profile_setup.cold+0xc1/0xc1 [ 3162.904706][T29284] ? arch_stack_walk+0x84/0xd0 [ 3162.909465][T29284] ? stack_trace_save+0x8c/0xc0 [ 3162.914300][T29284] ? stack_trace_consume_entry+0x160/0x160 [ 3162.920128][T29284] ? rtnl_newlink+0x46/0xa0 [ 3162.924634][T29284] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3162.930200][T29284] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3162.936167][T29284] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3162.941977][T29284] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3162.947538][T29284] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3162.952653][T29284] rtnl_newlink+0x64/0xa0 [ 3162.956972][T29284] ? __rtnl_newlink+0x1590/0x1590 [ 3162.961988][T29284] rtnetlink_rcv_msg+0x44e/0xad0 [ 3162.966921][T29284] ? rtnl_bridge_getlink+0x870/0x870 [ 3162.972203][T29284] ? mark_held_locks+0xe0/0xe0 [ 3162.977067][T29284] ? netlink_deliver_tap+0x146/0xb50 [ 3162.982365][T29284] netlink_rcv_skb+0x15a/0x410 [ 3162.987131][T29284] ? rtnl_bridge_getlink+0x870/0x870 [ 3162.992405][T29284] ? netlink_ack+0xa80/0xa80 [ 3162.997030][T29284] netlink_unicast+0x537/0x740 [ 3163.001784][T29284] ? netlink_attachskb+0x810/0x810 [ 3163.006880][T29284] ? _copy_from_iter_full+0x25c/0x870 [ 3163.012235][T29284] ? __phys_addr_symbol+0x2c/0x70 [ 3163.017245][T29284] ? __check_object_size+0x171/0x437 [ 3163.022541][T29284] netlink_sendmsg+0x882/0xe10 [ 3163.027312][T29284] ? aa_af_perm+0x260/0x260 [ 3163.031801][T29284] ? netlink_unicast+0x740/0x740 [ 3163.036732][T29284] ? netlink_unicast+0x740/0x740 [ 3163.041697][T29284] sock_sendmsg+0xcf/0x120 [ 3163.046102][T29284] ____sys_sendmsg+0x6b9/0x7d0 [ 3163.050852][T29284] ? kernel_sendmsg+0x50/0x50 [ 3163.055526][T29284] ___sys_sendmsg+0x100/0x170 [ 3163.060193][T29284] ? sendmsg_copy_msghdr+0x70/0x70 [ 3163.065299][T29284] ? __fget_files+0x329/0x4f0 [ 3163.069966][T29284] ? ksys_dup3+0x3c0/0x3c0 [ 3163.074366][T29284] ? find_held_lock+0x2d/0x110 [ 3163.079118][T29284] ? vfs_write+0x342/0x5c0 [ 3163.083537][T29284] ? __fget_light+0x208/0x270 [ 3163.088217][T29284] __sys_sendmsg+0xec/0x1b0 [ 3163.092732][T29284] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3163.097750][T29284] ? vfs_write+0x15b/0x5c0 [ 3163.102173][T29284] ? trace_hardirqs_off_caller+0x55/0x230 [ 3163.107879][T29284] ? do_syscall_64+0x21/0x7d0 [ 3163.112546][T29284] do_syscall_64+0xf6/0x7d0 [ 3163.117039][T29284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3163.122914][T29284] RIP: 0033:0x45c849 [ 3163.126811][T29284] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3163.146425][T29284] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3163.154840][T29284] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3163.162798][T29284] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3163.170839][T29284] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3163.178797][T29284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3163.186753][T29284] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000000d 09:06:16 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88470000) [ 3163.231039][T29284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3163.240874][T29293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:16 executing program 1 (fault-call:1 fault-nth:14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3163.336447][T29288] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. 09:06:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000a000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:16 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3163.478104][T29305] FAULT_INJECTION: forcing a failure. [ 3163.478104][T29305] name failslab, interval 1, probability 0, space 0, times 0 [ 3163.536879][T29305] CPU: 0 PID: 29305 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3163.545596][T29305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3163.555668][T29305] Call Trace: [ 3163.558974][T29305] dump_stack+0x188/0x20d [ 3163.563325][T29305] should_fail.cold+0x5/0xa [ 3163.567847][T29305] ? fault_create_debugfs_attr+0x140/0x140 [ 3163.573682][T29305] should_failslab+0x5/0xf [ 3163.578117][T29305] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3163.583937][T29305] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3163.589938][T29305] __kmalloc_node_track_caller+0x38/0x60 [ 3163.595583][T29305] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3163.600989][T29305] __alloc_skb+0xef/0x5a0 [ 3163.605314][T29305] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3163.610853][T29305] ? if_nlmsg_size+0x541/0xa70 [ 3163.615627][T29305] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3163.620910][T29305] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3163.626355][T29305] rtmsg_ifinfo+0x7f/0xa0 [ 3163.630758][T29305] netdev_state_change+0x121/0x140 [ 3163.635855][T29305] ? netdev_notify_peers+0xc0/0xc0 [ 3163.640950][T29305] ? dev_change_xdp_fd+0x2fb/0x600 [ 3163.646169][T29305] do_setlink+0x2d6d/0x35e0 [ 3163.650691][T29305] ? rtnl_getlink+0xab0/0xab0 [ 3163.655356][T29305] ? find_held_lock+0x2d/0x110 [ 3163.660126][T29305] ? is_bpf_text_address+0xa9/0x160 [ 3163.665328][T29305] ? mark_lock+0xbc/0x1220 [ 3163.669755][T29305] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3163.675654][T29305] ? __nla_validate_parse+0x2af/0x1cd0 [ 3163.681104][T29305] ? nla_memcpy+0xa0/0xa0 [ 3163.685424][T29305] ? __nla_parse+0x2e/0x60 [ 3163.689835][T29305] __rtnl_newlink+0xc96/0x1590 [ 3163.694614][T29305] ? rtnl_link_unregister+0x240/0x240 [ 3163.699986][T29305] ? __bpf_address_lookup+0x290/0x290 [ 3163.705454][T29305] ? is_bpf_text_address+0xcb/0x160 [ 3163.710638][T29305] ? kernel_text_address+0x6e/0xe0 [ 3163.715748][T29305] ? __kernel_text_address+0x9/0x30 [ 3163.720931][T29305] ? unwind_get_return_address+0x5a/0xa0 [ 3163.726560][T29305] ? profile_setup.cold+0xc1/0xc1 [ 3163.731582][T29305] ? arch_stack_walk+0x84/0xd0 [ 3163.736335][T29305] ? stack_trace_save+0x8c/0xc0 [ 3163.741171][T29305] ? stack_trace_consume_entry+0x160/0x160 [ 3163.747018][T29305] ? rtnl_newlink+0x46/0xa0 [ 3163.751508][T29305] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3163.757038][T29305] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3163.763004][T29305] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3163.768832][T29305] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3163.774386][T29305] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3163.779503][T29305] rtnl_newlink+0x64/0xa0 [ 3163.783823][T29305] ? __rtnl_newlink+0x1590/0x1590 [ 3163.788836][T29305] rtnetlink_rcv_msg+0x44e/0xad0 [ 3163.793783][T29305] ? rtnl_bridge_getlink+0x870/0x870 [ 3163.799068][T29305] ? mark_held_locks+0xe0/0xe0 [ 3163.803823][T29305] ? netlink_deliver_tap+0x146/0xb50 [ 3163.809099][T29305] netlink_rcv_skb+0x15a/0x410 [ 3163.813851][T29305] ? rtnl_bridge_getlink+0x870/0x870 [ 3163.819125][T29305] ? netlink_ack+0xa80/0xa80 [ 3163.823712][T29305] netlink_unicast+0x537/0x740 [ 3163.828482][T29305] ? netlink_attachskb+0x810/0x810 [ 3163.833632][T29305] ? _copy_from_iter_full+0x25c/0x870 [ 3163.838988][T29305] ? __phys_addr_symbol+0x2c/0x70 [ 3163.844000][T29305] ? __check_object_size+0x171/0x437 [ 3163.849288][T29305] netlink_sendmsg+0x882/0xe10 [ 3163.854041][T29305] ? aa_af_perm+0x260/0x260 [ 3163.858528][T29305] ? netlink_unicast+0x740/0x740 [ 3163.863469][T29305] ? netlink_unicast+0x740/0x740 [ 3163.868392][T29305] sock_sendmsg+0xcf/0x120 [ 3163.872811][T29305] ____sys_sendmsg+0x6b9/0x7d0 [ 3163.877577][T29305] ? kernel_sendmsg+0x50/0x50 [ 3163.882266][T29305] ___sys_sendmsg+0x100/0x170 [ 3163.886943][T29305] ? sendmsg_copy_msghdr+0x70/0x70 [ 3163.892052][T29305] ? __fget_files+0x329/0x4f0 [ 3163.896717][T29305] ? ksys_dup3+0x3c0/0x3c0 [ 3163.901119][T29305] ? find_held_lock+0x2d/0x110 [ 3163.907344][T29305] ? vfs_write+0x342/0x5c0 [ 3163.911754][T29305] ? __fget_light+0x208/0x270 [ 3163.916424][T29305] __sys_sendmsg+0xec/0x1b0 [ 3163.920914][T29305] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3163.925925][T29305] ? vfs_write+0x15b/0x5c0 [ 3163.930332][T29305] ? trace_hardirqs_off_caller+0x55/0x230 [ 3163.936041][T29305] ? do_syscall_64+0x21/0x7d0 [ 3163.940707][T29305] do_syscall_64+0xf6/0x7d0 [ 3163.945203][T29305] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3163.951079][T29305] RIP: 0033:0x45c849 [ 3163.954974][T29305] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3163.974564][T29305] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3163.982958][T29305] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3163.990915][T29305] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3163.998872][T29305] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3164.006827][T29305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3164.014909][T29305] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000000e [ 3164.041885][T29305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400400, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:06:17 executing program 1 (fault-call:1 fault-nth:15): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000f000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3164.313185][T29323] FAULT_INJECTION: forcing a failure. [ 3164.313185][T29323] name failslab, interval 1, probability 0, space 0, times 0 [ 3164.348217][T29323] CPU: 0 PID: 29323 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3164.356942][T29323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3164.367007][T29323] Call Trace: [ 3164.370319][T29323] dump_stack+0x188/0x20d [ 3164.374677][T29323] should_fail.cold+0x5/0xa [ 3164.379199][T29323] ? fault_create_debugfs_attr+0x140/0x140 [ 3164.385028][T29323] should_failslab+0x5/0xf [ 3164.389454][T29323] kmem_cache_alloc_node+0x25c/0x760 [ 3164.394755][T29323] ? br_get_linkxstats_size+0x390/0x390 [ 3164.400305][T29323] ? lock_downgrade+0x7f0/0x7f0 [ 3164.405169][T29323] __alloc_skb+0xba/0x5a0 [ 3164.409504][T29323] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3164.415290][T29323] ? if_nlmsg_size+0x541/0xa70 [ 3164.420071][T29323] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3164.425374][T29323] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3164.430860][T29323] rtmsg_ifinfo+0x7f/0xa0 [ 3164.435206][T29323] netdev_state_change+0x121/0x140 [ 3164.440327][T29323] ? netdev_notify_peers+0xc0/0xc0 [ 3164.445557][T29323] ? dev_change_xdp_fd+0x2fb/0x600 [ 3164.450788][T29323] do_setlink+0x2d6d/0x35e0 [ 3164.455319][T29323] ? rtnl_getlink+0xab0/0xab0 09:06:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x7a00000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x109440, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) [ 3164.460132][T29323] ? find_held_lock+0x2d/0x110 [ 3164.465025][T29323] ? is_bpf_text_address+0xa9/0x160 [ 3164.470270][T29323] ? mark_lock+0xbc/0x1220 [ 3164.474710][T29323] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3164.480614][T29323] ? __nla_validate_parse+0x2af/0x1cd0 [ 3164.486088][T29323] ? nla_memcpy+0xa0/0xa0 [ 3164.490549][T29323] ? __nla_parse+0x2e/0x60 [ 3164.494983][T29323] __rtnl_newlink+0xc96/0x1590 [ 3164.499820][T29323] ? rtnl_link_unregister+0x240/0x240 [ 3164.505225][T29323] ? __bpf_address_lookup+0x290/0x290 [ 3164.510711][T29323] ? is_bpf_text_address+0xcb/0x160 [ 3164.515922][T29323] ? kernel_text_address+0x6e/0xe0 [ 3164.521045][T29323] ? __kernel_text_address+0x9/0x30 [ 3164.526255][T29323] ? unwind_get_return_address+0x5a/0xa0 [ 3164.531907][T29323] ? profile_setup.cold+0xc1/0xc1 [ 3164.536947][T29323] ? arch_stack_walk+0x84/0xd0 [ 3164.541734][T29323] ? stack_trace_save+0x8c/0xc0 [ 3164.546596][T29323] ? stack_trace_consume_entry+0x160/0x160 [ 3164.554140][T29323] ? rtnl_newlink+0x46/0xa0 [ 3164.558671][T29323] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3164.564234][T29323] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3164.570228][T29323] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3164.576047][T29323] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3164.581608][T29323] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3164.586728][T29323] rtnl_newlink+0x64/0xa0 [ 3164.591063][T29323] ? __rtnl_newlink+0x1590/0x1590 [ 3164.596185][T29323] rtnetlink_rcv_msg+0x44e/0xad0 [ 3164.601142][T29323] ? rtnl_bridge_getlink+0x870/0x870 [ 3164.606440][T29323] ? mark_held_locks+0xe0/0xe0 [ 3164.611218][T29323] ? netlink_deliver_tap+0x146/0xb50 [ 3164.616520][T29323] netlink_rcv_skb+0x15a/0x410 [ 3164.621316][T29323] ? rtnl_bridge_getlink+0x870/0x870 [ 3164.626622][T29323] ? netlink_ack+0xa80/0xa80 [ 3164.631234][T29323] netlink_unicast+0x537/0x740 [ 3164.636120][T29323] ? netlink_attachskb+0x810/0x810 [ 3164.641229][T29323] ? _copy_from_iter_full+0x25c/0x870 [ 3164.646604][T29323] ? __phys_addr_symbol+0x2c/0x70 [ 3164.651637][T29323] ? __check_object_size+0x171/0x437 [ 3164.656921][T29323] netlink_sendmsg+0x882/0xe10 [ 3164.661692][T29323] ? aa_af_perm+0x260/0x260 [ 3164.666204][T29323] ? netlink_unicast+0x740/0x740 [ 3164.671174][T29323] ? netlink_unicast+0x740/0x740 [ 3164.676107][T29323] sock_sendmsg+0xcf/0x120 [ 3164.680508][T29323] ____sys_sendmsg+0x6b9/0x7d0 [ 3164.685270][T29323] ? kernel_sendmsg+0x50/0x50 [ 3164.689969][T29323] ___sys_sendmsg+0x100/0x170 [ 3164.694659][T29323] ? sendmsg_copy_msghdr+0x70/0x70 [ 3164.699773][T29323] ? __fget_files+0x329/0x4f0 [ 3164.704459][T29323] ? ksys_dup3+0x3c0/0x3c0 [ 3164.708980][T29323] ? find_held_lock+0x2d/0x110 [ 3164.713750][T29323] ? vfs_write+0x342/0x5c0 [ 3164.718189][T29323] ? __fget_light+0x208/0x270 [ 3164.722891][T29323] __sys_sendmsg+0xec/0x1b0 [ 3164.727418][T29323] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3164.732464][T29323] ? vfs_write+0x15b/0x5c0 [ 3164.736894][T29323] ? trace_hardirqs_off_caller+0x55/0x230 [ 3164.742620][T29323] ? do_syscall_64+0x21/0x7d0 [ 3164.747308][T29323] do_syscall_64+0xf6/0x7d0 [ 3164.751818][T29323] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3164.757737][T29323] RIP: 0033:0x45c849 [ 3164.761638][T29323] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3164.781303][T29323] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3164.789717][T29323] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3164.797782][T29323] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3164.805760][T29323] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 09:06:17 executing program 1 (fault-call:1 fault-nth:16): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3164.813743][T29323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3164.821720][T29323] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000000f [ 3164.841596][T29323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3164.904109][T29335] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:17 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88480000) 09:06:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000210000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3165.025778][T29340] FAULT_INJECTION: forcing a failure. [ 3165.025778][T29340] name failslab, interval 1, probability 0, space 0, times 0 [ 3165.050118][T29340] CPU: 1 PID: 29340 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3165.058832][T29340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3165.068897][T29340] Call Trace: [ 3165.072203][T29340] dump_stack+0x188/0x20d [ 3165.076565][T29340] should_fail.cold+0x5/0xa [ 3165.081139][T29340] ? fault_create_debugfs_attr+0x140/0x140 [ 3165.086975][T29340] should_failslab+0x5/0xf [ 3165.091404][T29340] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3165.097226][T29340] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3165.103216][T29340] __kmalloc_node_track_caller+0x38/0x60 [ 3165.108847][T29340] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3165.114359][T29340] __alloc_skb+0xef/0x5a0 [ 3165.118694][T29340] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3165.124231][T29340] ? if_nlmsg_size+0x541/0xa70 [ 3165.128998][T29340] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3165.134295][T29340] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3165.139761][T29340] rtmsg_ifinfo+0x7f/0xa0 [ 3165.144096][T29340] netdev_state_change+0x121/0x140 [ 3165.149201][T29340] ? netdev_notify_peers+0xc0/0xc0 [ 3165.154304][T29340] ? dev_change_xdp_fd+0x2fb/0x600 [ 3165.159416][T29340] do_setlink+0x2d6d/0x35e0 [ 3165.163920][T29340] ? rtnl_getlink+0xab0/0xab0 [ 3165.168588][T29340] ? find_held_lock+0x2d/0x110 [ 3165.173351][T29340] ? is_bpf_text_address+0xa9/0x160 [ 3165.178545][T29340] ? mark_lock+0xbc/0x1220 [ 3165.182950][T29340] ? mark_lock+0xbc/0x1220 [ 3165.187353][T29340] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3165.193231][T29340] ? __nla_validate_parse+0x2af/0x1cd0 [ 3165.198677][T29340] ? nla_memcpy+0xa0/0xa0 [ 3165.203124][T29340] ? __nla_parse+0x2e/0x60 [ 3165.207543][T29340] __rtnl_newlink+0xc96/0x1590 [ 3165.212318][T29340] ? rtnl_link_unregister+0x240/0x240 [ 3165.217683][T29340] ? __bpf_address_lookup+0x290/0x290 [ 3165.223051][T29340] ? is_bpf_text_address+0xcb/0x160 [ 3165.228237][T29340] ? kernel_text_address+0x6e/0xe0 [ 3165.233353][T29340] ? __kernel_text_address+0x9/0x30 [ 3165.238538][T29340] ? unwind_get_return_address+0x5a/0xa0 [ 3165.244156][T29340] ? profile_setup.cold+0xc1/0xc1 [ 3165.249162][T29340] ? arch_stack_walk+0x84/0xd0 [ 3165.254042][T29340] ? stack_trace_save+0x8c/0xc0 [ 3165.258918][T29340] ? stack_trace_consume_entry+0x160/0x160 [ 3165.264794][T29340] ? rtnl_newlink+0x46/0xa0 [ 3165.269311][T29340] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3165.274844][T29340] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3165.280817][T29340] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3165.286615][T29340] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3165.292164][T29340] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3165.297266][T29340] rtnl_newlink+0x64/0xa0 [ 3165.301582][T29340] ? __rtnl_newlink+0x1590/0x1590 [ 3165.306590][T29340] rtnetlink_rcv_msg+0x44e/0xad0 [ 3165.311523][T29340] ? rtnl_bridge_getlink+0x870/0x870 [ 3165.316797][T29340] ? mark_held_locks+0xe0/0xe0 [ 3165.321546][T29340] ? netlink_deliver_tap+0x146/0xb50 [ 3165.326816][T29340] netlink_rcv_skb+0x15a/0x410 [ 3165.331570][T29340] ? rtnl_bridge_getlink+0x870/0x870 [ 3165.336842][T29340] ? netlink_ack+0xa80/0xa80 [ 3165.341429][T29340] netlink_unicast+0x537/0x740 [ 3165.346186][T29340] ? netlink_attachskb+0x810/0x810 [ 3165.351280][T29340] ? _copy_from_iter_full+0x25c/0x870 [ 3165.356659][T29340] ? __phys_addr_symbol+0x2c/0x70 [ 3165.361688][T29340] ? __check_object_size+0x171/0x437 [ 3165.366992][T29340] netlink_sendmsg+0x882/0xe10 [ 3165.371769][T29340] ? aa_af_perm+0x260/0x260 [ 3165.376269][T29340] ? netlink_unicast+0x740/0x740 [ 3165.381216][T29340] ? netlink_unicast+0x740/0x740 [ 3165.386151][T29340] sock_sendmsg+0xcf/0x120 [ 3165.390657][T29340] ____sys_sendmsg+0x6b9/0x7d0 [ 3165.395414][T29340] ? kernel_sendmsg+0x50/0x50 [ 3165.400102][T29340] ___sys_sendmsg+0x100/0x170 [ 3165.404775][T29340] ? sendmsg_copy_msghdr+0x70/0x70 [ 3165.409882][T29340] ? __fget_files+0x329/0x4f0 [ 3165.414553][T29340] ? ksys_dup3+0x3c0/0x3c0 [ 3165.418950][T29340] ? find_held_lock+0x2d/0x110 [ 3165.423711][T29340] ? vfs_write+0x342/0x5c0 [ 3165.428120][T29340] ? __fget_light+0x208/0x270 [ 3165.432806][T29340] __sys_sendmsg+0xec/0x1b0 [ 3165.437315][T29340] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3165.442335][T29340] ? vfs_write+0x15b/0x5c0 [ 3165.446749][T29340] ? trace_hardirqs_off_caller+0x55/0x230 [ 3165.452463][T29340] ? do_syscall_64+0x21/0x7d0 [ 3165.457140][T29340] do_syscall_64+0xf6/0x7d0 [ 3165.461639][T29340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3165.467520][T29340] RIP: 0033:0x45c849 [ 3165.471405][T29340] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3165.490993][T29340] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3165.499390][T29340] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3165.507348][T29340] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3165.515305][T29340] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3165.523260][T29340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3165.531227][T29340] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000010 09:06:18 executing program 1 (fault-call:1 fault-nth:17): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3165.634266][T29340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3165.645140][T29335] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000310000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3165.783295][T29359] FAULT_INJECTION: forcing a failure. [ 3165.783295][T29359] name failslab, interval 1, probability 0, space 0, times 0 [ 3165.816700][T29359] CPU: 1 PID: 29359 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3165.825413][T29359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3165.835471][T29359] Call Trace: [ 3165.838772][T29359] dump_stack+0x188/0x20d [ 3165.843122][T29359] should_fail.cold+0x5/0xa [ 3165.847647][T29359] ? fault_create_debugfs_attr+0x140/0x140 [ 3165.853472][T29359] should_failslab+0x5/0xf [ 3165.857907][T29359] kmem_cache_alloc_node+0x25c/0x760 [ 3165.863211][T29359] ? br_get_linkxstats_size+0x390/0x390 [ 3165.868767][T29359] ? lock_downgrade+0x7f0/0x7f0 [ 3165.873636][T29359] __alloc_skb+0xba/0x5a0 [ 3165.877978][T29359] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3165.883580][T29359] ? if_nlmsg_size+0x541/0xa70 [ 3165.888379][T29359] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3165.893678][T29359] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3165.899138][T29359] rtmsg_ifinfo+0x7f/0xa0 [ 3165.903483][T29359] netdev_state_change+0x121/0x140 [ 3165.908595][T29359] ? netdev_notify_peers+0xc0/0xc0 [ 3165.913725][T29359] ? dev_change_xdp_fd+0x2fb/0x600 [ 3165.918830][T29359] do_setlink+0x2d6d/0x35e0 [ 3165.923329][T29359] ? rtnl_getlink+0xab0/0xab0 [ 3165.928000][T29359] ? find_held_lock+0x2d/0x110 [ 3165.932752][T29359] ? is_bpf_text_address+0xa9/0x160 [ 3165.937942][T29359] ? mark_lock+0xbc/0x1220 [ 3165.942353][T29359] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3165.948239][T29359] ? __nla_validate_parse+0x2af/0x1cd0 [ 3165.953688][T29359] ? nla_memcpy+0xa0/0xa0 [ 3165.958004][T29359] ? __nla_parse+0x2e/0x60 [ 3165.962407][T29359] __rtnl_newlink+0xc96/0x1590 [ 3165.967168][T29359] ? rtnl_link_unregister+0x240/0x240 [ 3165.972523][T29359] ? __bpf_address_lookup+0x290/0x290 [ 3165.977905][T29359] ? is_bpf_text_address+0xcb/0x160 [ 3165.983090][T29359] ? kernel_text_address+0x6e/0xe0 [ 3165.988188][T29359] ? __kernel_text_address+0x9/0x30 [ 3165.993371][T29359] ? unwind_get_return_address+0x5a/0xa0 [ 3165.998984][T29359] ? profile_setup.cold+0xc1/0xc1 [ 3166.003992][T29359] ? arch_stack_walk+0x84/0xd0 [ 3166.008745][T29359] ? stack_trace_save+0x8c/0xc0 [ 3166.013580][T29359] ? stack_trace_consume_entry+0x160/0x160 [ 3166.019407][T29359] ? rtnl_newlink+0x46/0xa0 [ 3166.023899][T29359] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3166.029428][T29359] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3166.035398][T29359] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3166.041189][T29359] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3166.046722][T29359] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3166.051909][T29359] rtnl_newlink+0x64/0xa0 [ 3166.056226][T29359] ? __rtnl_newlink+0x1590/0x1590 [ 3166.061328][T29359] rtnetlink_rcv_msg+0x44e/0xad0 [ 3166.066253][T29359] ? rtnl_bridge_getlink+0x870/0x870 [ 3166.071528][T29359] ? mark_held_locks+0xe0/0xe0 [ 3166.076278][T29359] ? netlink_deliver_tap+0x146/0xb50 [ 3166.081552][T29359] netlink_rcv_skb+0x15a/0x410 [ 3166.086303][T29359] ? rtnl_bridge_getlink+0x870/0x870 [ 3166.091576][T29359] ? netlink_ack+0xa80/0xa80 [ 3166.096163][T29359] netlink_unicast+0x537/0x740 [ 3166.100918][T29359] ? netlink_attachskb+0x810/0x810 [ 3166.106012][T29359] ? _copy_from_iter_full+0x25c/0x870 [ 3166.111368][T29359] ? __phys_addr_symbol+0x2c/0x70 [ 3166.116379][T29359] ? __check_object_size+0x171/0x437 [ 3166.121667][T29359] netlink_sendmsg+0x882/0xe10 [ 3166.126418][T29359] ? aa_af_perm+0x260/0x260 [ 3166.130909][T29359] ? netlink_unicast+0x740/0x740 [ 3166.135858][T29359] ? netlink_unicast+0x740/0x740 [ 3166.140803][T29359] sock_sendmsg+0xcf/0x120 [ 3166.145225][T29359] ____sys_sendmsg+0x6b9/0x7d0 [ 3166.149997][T29359] ? kernel_sendmsg+0x50/0x50 [ 3166.154684][T29359] ___sys_sendmsg+0x100/0x170 [ 3166.159370][T29359] ? sendmsg_copy_msghdr+0x70/0x70 [ 3166.164485][T29359] ? __fget_files+0x329/0x4f0 [ 3166.169159][T29359] ? ksys_dup3+0x3c0/0x3c0 [ 3166.173561][T29359] ? find_held_lock+0x2d/0x110 [ 3166.178313][T29359] ? vfs_write+0x342/0x5c0 [ 3166.182719][T29359] ? __fget_light+0x208/0x270 [ 3166.187387][T29359] __sys_sendmsg+0xec/0x1b0 [ 3166.191883][T29359] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3166.196893][T29359] ? vfs_write+0x15b/0x5c0 [ 3166.201341][T29359] ? trace_hardirqs_off_caller+0x55/0x230 [ 3166.207061][T29359] ? do_syscall_64+0x21/0x7d0 [ 3166.211731][T29359] do_syscall_64+0xf6/0x7d0 [ 3166.216230][T29359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3166.222110][T29359] RIP: 0033:0x45c849 [ 3166.226016][T29359] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3166.245867][T29359] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3166.254262][T29359] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3166.262217][T29359] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3166.270172][T29359] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3166.278127][T29359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3166.286095][T29359] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000011 [ 3166.317297][T29359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:19 executing program 1 (fault-call:1 fault-nth:18): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000410000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xeff5b3b5bff3f91d, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) [ 3166.516612][T29375] FAULT_INJECTION: forcing a failure. [ 3166.516612][T29375] name failslab, interval 1, probability 0, space 0, times 0 [ 3166.589684][T29375] CPU: 0 PID: 29375 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3166.598405][T29375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3166.608471][T29375] Call Trace: [ 3166.611776][T29375] dump_stack+0x188/0x20d [ 3166.616112][T29375] should_fail.cold+0x5/0xa [ 3166.620609][T29375] ? fault_create_debugfs_attr+0x140/0x140 [ 3166.626407][T29375] should_failslab+0x5/0xf [ 3166.630807][T29375] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3166.636615][T29375] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3166.642616][T29375] __kmalloc_node_track_caller+0x38/0x60 [ 3166.648263][T29375] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3166.653646][T29375] __alloc_skb+0xef/0x5a0 [ 3166.657989][T29375] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3166.663637][T29375] ? if_nlmsg_size+0x541/0xa70 [ 3166.668428][T29375] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3166.673714][T29375] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3166.679214][T29375] rtmsg_ifinfo+0x7f/0xa0 [ 3166.683548][T29375] netdev_state_change+0x121/0x140 [ 3166.688660][T29375] ? netdev_notify_peers+0xc0/0xc0 [ 3166.693759][T29375] ? dev_change_xdp_fd+0x2fb/0x600 [ 3166.698873][T29375] do_setlink+0x2d6d/0x35e0 [ 3166.703398][T29375] ? mark_held_locks+0x9f/0xe0 [ 3166.708149][T29375] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3166.713334][T29375] ? rtnl_getlink+0xab0/0xab0 [ 3166.717996][T29375] ? lockdep_hardirqs_on+0x417/0x5d0 [ 3166.723276][T29375] ? _raw_spin_unlock_irq+0x55/0x80 [ 3166.728468][T29375] ? finish_task_switch+0x147/0x750 [ 3166.733662][T29375] ? finish_task_switch+0x119/0x750 [ 3166.738879][T29375] ? mark_lock+0xbc/0x1220 [ 3166.743288][T29375] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3166.749177][T29375] ? __nla_validate_parse+0x2af/0x1cd0 [ 3166.754631][T29375] ? nla_memcpy+0xa0/0xa0 [ 3166.758956][T29375] ? __nla_parse+0x2e/0x60 [ 3166.763365][T29375] __rtnl_newlink+0xc96/0x1590 [ 3166.768124][T29375] ? rtnl_link_unregister+0x240/0x240 [ 3166.773501][T29375] ? __bpf_address_lookup+0x290/0x290 [ 3166.778878][T29375] ? is_bpf_text_address+0xcb/0x160 [ 3166.784063][T29375] ? kernel_text_address+0x6e/0xe0 [ 3166.789177][T29375] ? __kernel_text_address+0x9/0x30 [ 3166.794371][T29375] ? unwind_get_return_address+0x5a/0xa0 [ 3166.800009][T29375] ? profile_setup.cold+0xc1/0xc1 [ 3166.805018][T29375] ? arch_stack_walk+0x84/0xd0 [ 3166.809775][T29375] ? stack_trace_save+0x8c/0xc0 [ 3166.814625][T29375] ? stack_trace_consume_entry+0x160/0x160 [ 3166.820471][T29375] ? rtnl_newlink+0x46/0xa0 [ 3166.824960][T29375] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3166.830485][T29375] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3166.836451][T29375] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3166.842251][T29375] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3166.847801][T29375] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3166.852940][T29375] rtnl_newlink+0x64/0xa0 [ 3166.857333][T29375] ? __rtnl_newlink+0x1590/0x1590 [ 3166.862505][T29375] rtnetlink_rcv_msg+0x44e/0xad0 [ 3166.867442][T29375] ? rtnl_bridge_getlink+0x870/0x870 [ 3166.872736][T29375] ? mark_held_locks+0xe0/0xe0 [ 3166.877501][T29375] ? netlink_deliver_tap+0x146/0xb50 [ 3166.882804][T29375] netlink_rcv_skb+0x15a/0x410 [ 3166.887611][T29375] ? rtnl_bridge_getlink+0x870/0x870 [ 3166.892897][T29375] ? netlink_ack+0xa80/0xa80 [ 3166.897515][T29375] netlink_unicast+0x537/0x740 [ 3166.902278][T29375] ? netlink_attachskb+0x810/0x810 [ 3166.907455][T29375] ? _copy_from_iter_full+0x25c/0x870 [ 3166.912836][T29375] ? __phys_addr_symbol+0x2c/0x70 [ 3166.917855][T29375] ? __check_object_size+0x171/0x437 [ 3166.923145][T29375] netlink_sendmsg+0x882/0xe10 [ 3166.927901][T29375] ? aa_af_perm+0x260/0x260 [ 3166.932413][T29375] ? netlink_unicast+0x740/0x740 [ 3166.937352][T29375] ? netlink_unicast+0x740/0x740 [ 3166.942275][T29375] sock_sendmsg+0xcf/0x120 [ 3166.946696][T29375] ____sys_sendmsg+0x6b9/0x7d0 [ 3166.951475][T29375] ? kernel_sendmsg+0x50/0x50 [ 3166.956223][T29375] ___sys_sendmsg+0x100/0x170 [ 3166.960902][T29375] ? sendmsg_copy_msghdr+0x70/0x70 [ 3166.966022][T29375] ? __fget_files+0x329/0x4f0 [ 3166.970688][T29375] ? ksys_dup3+0x3c0/0x3c0 [ 3166.975145][T29375] ? find_held_lock+0x2d/0x110 [ 3166.979949][T29375] ? vfs_write+0x342/0x5c0 [ 3166.984355][T29375] ? __fget_light+0x208/0x270 [ 3166.989021][T29375] __sys_sendmsg+0xec/0x1b0 [ 3166.993526][T29375] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3166.998601][T29375] ? vfs_write+0x15b/0x5c0 [ 3167.003061][T29375] ? trace_hardirqs_off_caller+0x55/0x230 [ 3167.008774][T29375] ? do_syscall_64+0x21/0x7d0 [ 3167.013454][T29375] do_syscall_64+0xf6/0x7d0 [ 3167.017968][T29375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3167.023910][T29375] RIP: 0033:0x45c849 [ 3167.027808][T29375] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3167.047412][T29375] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3167.055904][T29375] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3167.063872][T29375] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3167.071959][T29375] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3167.079940][T29375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3167.088032][T29375] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000012 [ 3167.102598][T29375] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x8100000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:06:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88640000) 09:06:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000510000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:19 executing program 1 (fault-call:1 fault-nth:19): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3167.371665][T29396] FAULT_INJECTION: forcing a failure. [ 3167.371665][T29396] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.386362][T29396] CPU: 0 PID: 29396 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3167.395231][T29396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3167.405350][T29396] Call Trace: [ 3167.408652][T29396] dump_stack+0x188/0x20d [ 3167.413156][T29396] should_fail.cold+0x5/0xa [ 3167.417647][T29396] ? fault_create_debugfs_attr+0x140/0x140 [ 3167.423459][T29396] should_failslab+0x5/0xf [ 3167.427901][T29396] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3167.433751][T29396] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3167.439774][T29396] __kmalloc_node_track_caller+0x38/0x60 [ 3167.445394][T29396] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3167.450764][T29396] __alloc_skb+0xef/0x5a0 [ 3167.455106][T29396] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3167.460635][T29396] ? if_nlmsg_size+0x541/0xa70 [ 3167.465390][T29396] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3167.470671][T29396] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3167.476133][T29396] rtmsg_ifinfo+0x7f/0xa0 [ 3167.480449][T29396] netdev_state_change+0x121/0x140 [ 3167.485559][T29396] ? netdev_notify_peers+0xc0/0xc0 [ 3167.490654][T29396] ? dev_change_xdp_fd+0x2fb/0x600 [ 3167.495760][T29396] do_setlink+0x2d6d/0x35e0 [ 3167.500255][T29396] ? rtnl_getlink+0xab0/0xab0 [ 3167.504926][T29396] ? find_held_lock+0x2d/0x110 [ 3167.509680][T29396] ? is_bpf_text_address+0xa9/0x160 [ 3167.514871][T29396] ? mark_lock+0xbc/0x1220 [ 3167.519272][T29396] ? mark_lock+0xbc/0x1220 [ 3167.523679][T29396] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3167.529560][T29396] ? __nla_validate_parse+0x2af/0x1cd0 [ 3167.535010][T29396] ? nla_memcpy+0xa0/0xa0 [ 3167.539383][T29396] ? __nla_parse+0x2e/0x60 [ 3167.543798][T29396] __rtnl_newlink+0xc96/0x1590 [ 3167.548554][T29396] ? rtnl_link_unregister+0x240/0x240 [ 3167.553928][T29396] ? __bpf_address_lookup+0x290/0x290 [ 3167.559471][T29396] ? is_bpf_text_address+0xcb/0x160 [ 3167.564658][T29396] ? kernel_text_address+0x6e/0xe0 [ 3167.569759][T29396] ? __kernel_text_address+0x9/0x30 [ 3167.574950][T29396] ? unwind_get_return_address+0x5a/0xa0 [ 3167.580573][T29396] ? profile_setup.cold+0xc1/0xc1 [ 3167.585622][T29396] ? arch_stack_walk+0x84/0xd0 [ 3167.590384][T29396] ? stack_trace_save+0x8c/0xc0 [ 3167.595227][T29396] ? stack_trace_consume_entry+0x160/0x160 [ 3167.601087][T29396] ? rtnl_newlink+0x46/0xa0 [ 3167.605594][T29396] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3167.611128][T29396] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3167.617100][T29396] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3167.622890][T29396] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3167.628447][T29396] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3167.633546][T29396] rtnl_newlink+0x64/0xa0 [ 3167.637882][T29396] ? __rtnl_newlink+0x1590/0x1590 [ 3167.642892][T29396] rtnetlink_rcv_msg+0x44e/0xad0 [ 3167.647814][T29396] ? rtnl_bridge_getlink+0x870/0x870 [ 3167.653086][T29396] ? mark_held_locks+0xe0/0xe0 [ 3167.657835][T29396] ? netlink_deliver_tap+0x146/0xb50 [ 3167.663108][T29396] netlink_rcv_skb+0x15a/0x410 [ 3167.667869][T29396] ? rtnl_bridge_getlink+0x870/0x870 [ 3167.673141][T29396] ? netlink_ack+0xa80/0xa80 [ 3167.677739][T29396] netlink_unicast+0x537/0x740 [ 3167.682517][T29396] ? netlink_attachskb+0x810/0x810 [ 3167.687633][T29396] ? _copy_from_iter_full+0x25c/0x870 [ 3167.693002][T29396] ? __phys_addr_symbol+0x2c/0x70 [ 3167.698010][T29396] ? __check_object_size+0x171/0x437 [ 3167.703297][T29396] netlink_sendmsg+0x882/0xe10 [ 3167.708061][T29396] ? aa_af_perm+0x260/0x260 [ 3167.712550][T29396] ? netlink_unicast+0x740/0x740 [ 3167.717476][T29396] ? netlink_unicast+0x740/0x740 [ 3167.722419][T29396] sock_sendmsg+0xcf/0x120 [ 3167.726847][T29396] ____sys_sendmsg+0x6b9/0x7d0 [ 3167.731695][T29396] ? kernel_sendmsg+0x50/0x50 [ 3167.736379][T29396] ___sys_sendmsg+0x100/0x170 [ 3167.741044][T29396] ? sendmsg_copy_msghdr+0x70/0x70 [ 3167.746234][T29396] ? __fget_files+0x329/0x4f0 [ 3167.750898][T29396] ? ksys_dup3+0x3c0/0x3c0 [ 3167.755295][T29396] ? find_held_lock+0x2d/0x110 [ 3167.760059][T29396] ? vfs_write+0x342/0x5c0 [ 3167.764464][T29396] ? __fget_light+0x208/0x270 [ 3167.769128][T29396] __sys_sendmsg+0xec/0x1b0 [ 3167.773635][T29396] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3167.778656][T29396] ? vfs_write+0x15b/0x5c0 [ 3167.783058][T29396] ? trace_hardirqs_off_caller+0x55/0x230 [ 3167.788760][T29396] ? do_syscall_64+0x21/0x7d0 [ 3167.793439][T29396] do_syscall_64+0xf6/0x7d0 [ 3167.797930][T29396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3167.803808][T29396] RIP: 0033:0x45c849 [ 3167.807688][T29396] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3167.827292][T29396] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3167.835759][T29396] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3167.843740][T29396] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3167.851704][T29396] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3167.859686][T29396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:06:20 executing program 1 (fault-call:1 fault-nth:20): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3167.867646][T29396] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000013 [ 3167.884041][T29396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3167.893539][T29397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000610000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3167.979810][T29391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3168.001785][T29405] FAULT_INJECTION: forcing a failure. [ 3168.001785][T29405] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3168.015045][T29405] CPU: 0 PID: 29405 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3168.023722][T29405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3168.033902][T29405] Call Trace: [ 3168.037209][T29405] dump_stack+0x188/0x20d [ 3168.041568][T29405] should_fail.cold+0x5/0xa [ 3168.046092][T29405] ? fault_create_debugfs_attr+0x140/0x140 [ 3168.051923][T29405] __alloc_pages_nodemask+0x17a/0x820 [ 3168.057326][T29405] ? inet6_fill_ifla6_attrs+0x1a3a/0x1fb0 [ 3168.063059][T29405] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3168.068787][T29405] ? mark_lock+0xbc/0x1220 [ 3168.073211][T29405] ? __nla_reserve+0x9b/0xc0 [ 3168.077815][T29405] cache_grow_begin+0x8c/0xc30 [ 3168.082572][T29405] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3168.088031][T29405] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3168.093826][T29405] ? __nla_reserve+0x9b/0xc0 [ 3168.098432][T29405] __kmalloc_node_track_caller+0x38/0x60 [ 3168.104057][T29405] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3168.109420][T29405] pskb_expand_head+0x148/0x1020 [ 3168.114352][T29405] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3168.120148][T29405] netlink_trim+0x1ea/0x240 [ 3168.124638][T29405] netlink_broadcast_filtered+0x5f/0xd40 [ 3168.130257][T29405] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3168.135796][T29405] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3168.141255][T29405] nlmsg_notify+0x90/0x250 [ 3168.145667][T29405] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3168.151113][T29405] rtmsg_ifinfo+0x7f/0xa0 [ 3168.155445][T29405] netdev_state_change+0x121/0x140 [ 3168.160543][T29405] ? netdev_notify_peers+0xc0/0xc0 [ 3168.165642][T29405] ? dev_change_xdp_fd+0x2fb/0x600 [ 3168.170744][T29405] do_setlink+0x2d6d/0x35e0 [ 3168.175243][T29405] ? rtnl_getlink+0xab0/0xab0 [ 3168.179906][T29405] ? find_held_lock+0x2d/0x110 [ 3168.184654][T29405] ? is_bpf_text_address+0xa9/0x160 [ 3168.189856][T29405] ? mark_lock+0xbc/0x1220 [ 3168.194266][T29405] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3168.200146][T29405] ? __nla_validate_parse+0x2af/0x1cd0 [ 3168.205614][T29405] ? nla_memcpy+0xa0/0xa0 [ 3168.209963][T29405] ? __nla_parse+0x2e/0x60 [ 3168.214384][T29405] __rtnl_newlink+0xc96/0x1590 [ 3168.219151][T29405] ? rtnl_link_unregister+0x240/0x240 [ 3168.224514][T29405] ? __bpf_address_lookup+0x290/0x290 [ 3168.229897][T29405] ? is_bpf_text_address+0xcb/0x160 [ 3168.235101][T29405] ? kernel_text_address+0x6e/0xe0 [ 3168.240198][T29405] ? __kernel_text_address+0x9/0x30 [ 3168.245384][T29405] ? unwind_get_return_address+0x5a/0xa0 [ 3168.251001][T29405] ? profile_setup.cold+0xc1/0xc1 [ 3168.256014][T29405] ? arch_stack_walk+0x84/0xd0 [ 3168.260772][T29405] ? stack_trace_save+0x8c/0xc0 [ 3168.265610][T29405] ? stack_trace_consume_entry+0x160/0x160 [ 3168.271458][T29405] ? rtnl_newlink+0x46/0xa0 [ 3168.275966][T29405] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3168.281603][T29405] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3168.287575][T29405] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3168.293374][T29405] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3168.298928][T29405] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3168.304030][T29405] rtnl_newlink+0x64/0xa0 [ 3168.308368][T29405] ? __rtnl_newlink+0x1590/0x1590 [ 3168.313389][T29405] rtnetlink_rcv_msg+0x44e/0xad0 [ 3168.318327][T29405] ? rtnl_bridge_getlink+0x870/0x870 [ 3168.323611][T29405] ? mark_held_locks+0xe0/0xe0 [ 3168.328367][T29405] ? netlink_deliver_tap+0x146/0xb50 [ 3168.333649][T29405] netlink_rcv_skb+0x15a/0x410 [ 3168.338402][T29405] ? rtnl_bridge_getlink+0x870/0x870 [ 3168.343678][T29405] ? netlink_ack+0xa80/0xa80 [ 3168.348267][T29405] netlink_unicast+0x537/0x740 [ 3168.353020][T29405] ? netlink_attachskb+0x810/0x810 [ 3168.358114][T29405] ? _copy_from_iter_full+0x25c/0x870 [ 3168.363472][T29405] ? __phys_addr_symbol+0x2c/0x70 [ 3168.368496][T29405] ? __check_object_size+0x171/0x437 [ 3168.373772][T29405] netlink_sendmsg+0x882/0xe10 [ 3168.378540][T29405] ? aa_af_perm+0x260/0x260 [ 3168.383036][T29405] ? netlink_unicast+0x740/0x740 [ 3168.387972][T29405] ? netlink_unicast+0x740/0x740 [ 3168.392901][T29405] sock_sendmsg+0xcf/0x120 [ 3168.397311][T29405] ____sys_sendmsg+0x6b9/0x7d0 [ 3168.402068][T29405] ? kernel_sendmsg+0x50/0x50 [ 3168.406754][T29405] ___sys_sendmsg+0x100/0x170 [ 3168.411423][T29405] ? sendmsg_copy_msghdr+0x70/0x70 [ 3168.416528][T29405] ? __fget_files+0x329/0x4f0 [ 3168.421213][T29405] ? ksys_dup3+0x3c0/0x3c0 [ 3168.425615][T29405] ? find_held_lock+0x2d/0x110 [ 3168.430371][T29405] ? vfs_write+0x342/0x5c0 [ 3168.434779][T29405] ? __fget_light+0x208/0x270 [ 3168.439457][T29405] __sys_sendmsg+0xec/0x1b0 [ 3168.443974][T29405] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3168.448990][T29405] ? vfs_write+0x15b/0x5c0 [ 3168.453528][T29405] ? trace_hardirqs_off_caller+0x55/0x230 [ 3168.459370][T29405] ? do_syscall_64+0x21/0x7d0 [ 3168.464043][T29405] do_syscall_64+0xf6/0x7d0 [ 3168.468538][T29405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3168.474431][T29405] RIP: 0033:0x45c849 [ 3168.478318][T29405] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3168.497923][T29405] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3168.506320][T29405] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3168.514293][T29405] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3168.522254][T29405] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3168.530213][T29405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3168.538193][T29405] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000014 09:06:21 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3168.576096][T29405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:21 executing program 1 (fault-call:1 fault-nth:21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000810000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3168.790718][T29419] FAULT_INJECTION: forcing a failure. [ 3168.790718][T29419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3168.804048][T29419] CPU: 1 PID: 29419 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3168.812724][T29419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3168.822794][T29419] Call Trace: [ 3168.826099][T29419] dump_stack+0x188/0x20d [ 3168.830449][T29419] should_fail.cold+0x5/0xa [ 3168.834977][T29419] ? fault_create_debugfs_attr+0x140/0x140 [ 3168.840799][T29419] ? __lock_acquire+0x14bd/0x3ca0 [ 3168.845838][T29419] __alloc_pages_nodemask+0x17a/0x820 [ 3168.851235][T29419] ? ___sys_sendmsg+0x100/0x170 [ 3168.856094][T29419] ? __sys_sendmsg+0xec/0x1b0 [ 3168.860777][T29419] ? do_syscall_64+0xf6/0x7d0 [ 3168.865487][T29419] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3168.871563][T29419] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3168.877295][T29419] ? find_held_lock+0x2d/0x110 [ 3168.882083][T29419] cache_grow_begin+0x8c/0xc30 [ 3168.886977][T29419] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3168.892444][T29419] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3168.898261][T29419] __kmalloc_node_track_caller+0x38/0x60 [ 3168.903887][T29419] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3168.909249][T29419] __alloc_skb+0xef/0x5a0 [ 3168.913568][T29419] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3168.919108][T29419] ? if_nlmsg_size+0x541/0xa70 [ 3168.923863][T29419] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3168.929160][T29419] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3168.934611][T29419] rtmsg_ifinfo+0x7f/0xa0 [ 3168.938947][T29419] netdev_state_change+0x121/0x140 [ 3168.944043][T29419] ? netdev_notify_peers+0xc0/0xc0 [ 3168.949157][T29419] ? dev_change_xdp_fd+0x2fb/0x600 [ 3168.954263][T29419] do_setlink+0x2d6d/0x35e0 [ 3168.958759][T29419] ? rtnl_getlink+0xab0/0xab0 [ 3168.963423][T29419] ? find_held_lock+0x2d/0x110 [ 3168.968345][T29419] ? is_bpf_text_address+0xa9/0x160 [ 3168.973533][T29419] ? mark_lock+0xbc/0x1220 [ 3168.977966][T29419] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3168.983871][T29419] ? __nla_validate_parse+0x2af/0x1cd0 [ 3168.989324][T29419] ? nla_memcpy+0xa0/0xa0 [ 3168.993644][T29419] ? __nla_parse+0x2e/0x60 [ 3168.998071][T29419] __rtnl_newlink+0xc96/0x1590 [ 3169.002865][T29419] ? rtnl_link_unregister+0x240/0x240 [ 3169.008234][T29419] ? __bpf_address_lookup+0x290/0x290 [ 3169.013601][T29419] ? is_bpf_text_address+0xcb/0x160 [ 3169.018786][T29419] ? kernel_text_address+0x6e/0xe0 [ 3169.023884][T29419] ? __kernel_text_address+0x9/0x30 [ 3169.029067][T29419] ? unwind_get_return_address+0x5a/0xa0 [ 3169.034701][T29419] ? profile_setup.cold+0xc1/0xc1 [ 3169.039709][T29419] ? arch_stack_walk+0x84/0xd0 [ 3169.044469][T29419] ? stack_trace_save+0x8c/0xc0 [ 3169.049307][T29419] ? stack_trace_consume_entry+0x160/0x160 [ 3169.055155][T29419] ? rtnl_newlink+0x46/0xa0 [ 3169.059666][T29419] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3169.065224][T29419] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3169.071223][T29419] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3169.077035][T29419] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3169.082590][T29419] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3169.087704][T29419] rtnl_newlink+0x64/0xa0 [ 3169.092036][T29419] ? __rtnl_newlink+0x1590/0x1590 [ 3169.097049][T29419] rtnetlink_rcv_msg+0x44e/0xad0 [ 3169.101999][T29419] ? rtnl_bridge_getlink+0x870/0x870 [ 3169.107281][T29419] ? mark_held_locks+0xe0/0xe0 [ 3169.112037][T29419] ? netlink_deliver_tap+0x146/0xb50 [ 3169.117324][T29419] netlink_rcv_skb+0x15a/0x410 [ 3169.122083][T29419] ? rtnl_bridge_getlink+0x870/0x870 [ 3169.127360][T29419] ? netlink_ack+0xa80/0xa80 [ 3169.131956][T29419] netlink_unicast+0x537/0x740 [ 3169.136725][T29419] ? netlink_attachskb+0x810/0x810 [ 3169.141838][T29419] ? _copy_from_iter_full+0x25c/0x870 [ 3169.147213][T29419] ? __phys_addr_symbol+0x2c/0x70 [ 3169.152222][T29419] ? __check_object_size+0x171/0x437 [ 3169.157495][T29419] netlink_sendmsg+0x882/0xe10 [ 3169.162247][T29419] ? aa_af_perm+0x260/0x260 [ 3169.166734][T29419] ? netlink_unicast+0x740/0x740 [ 3169.171677][T29419] ? netlink_unicast+0x740/0x740 [ 3169.176616][T29419] sock_sendmsg+0xcf/0x120 [ 3169.181019][T29419] ____sys_sendmsg+0x6b9/0x7d0 [ 3169.185772][T29419] ? kernel_sendmsg+0x50/0x50 [ 3169.190466][T29419] ___sys_sendmsg+0x100/0x170 [ 3169.195131][T29419] ? sendmsg_copy_msghdr+0x70/0x70 [ 3169.200235][T29419] ? __fget_files+0x329/0x4f0 [ 3169.204900][T29419] ? ksys_dup3+0x3c0/0x3c0 [ 3169.209317][T29419] ? find_held_lock+0x2d/0x110 [ 3169.214089][T29419] ? vfs_write+0x342/0x5c0 [ 3169.218504][T29419] ? __fget_light+0x208/0x270 [ 3169.223192][T29419] __sys_sendmsg+0xec/0x1b0 [ 3169.227685][T29419] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3169.232698][T29419] ? vfs_write+0x15b/0x5c0 [ 3169.237107][T29419] ? trace_hardirqs_off_caller+0x55/0x230 [ 3169.242816][T29419] ? do_syscall_64+0x21/0x7d0 [ 3169.247483][T29419] do_syscall_64+0xf6/0x7d0 [ 3169.251978][T29419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3169.257856][T29419] RIP: 0033:0x45c849 [ 3169.261740][T29419] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3169.281329][T29419] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 09:06:21 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00000000ff"], 0x34}}, 0x0) [ 3169.289740][T29419] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3169.297717][T29419] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3169.305673][T29419] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3169.313779][T29419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3169.321741][T29419] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000015 [ 3169.382599][T29419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x9600000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:22 executing program 2: r0 = socket(0xb, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) recvmsg$can_raw(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)=""/133, 0x85}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/223, 0xdf}, {&(0x7f0000001480)=""/73, 0x49}], 0x8, &(0x7f0000001580)=""/8, 0x8}, 0x10020) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:06:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400001010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:22 executing program 1 (fault-call:1 fault-nth:22): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:22 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b000000008e"], 0x34}}, 0x0) 09:06:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88a8ffff) 09:06:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400001810000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3169.566728][T29434] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3169.711484][T29439] FAULT_INJECTION: forcing a failure. [ 3169.711484][T29439] name failslab, interval 1, probability 0, space 0, times 0 [ 3169.729684][T29439] CPU: 0 PID: 29439 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3169.738496][T29439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3169.748632][T29439] Call Trace: [ 3169.751930][T29439] dump_stack+0x188/0x20d [ 3169.756341][T29439] should_fail.cold+0x5/0xa [ 3169.760835][T29439] ? fault_create_debugfs_attr+0x140/0x140 [ 3169.766639][T29439] ? nla_put+0xfe/0x130 [ 3169.770810][T29439] ? find_held_lock+0x2d/0x110 [ 3169.775594][T29439] should_failslab+0x5/0xf [ 3169.780018][T29439] kmem_cache_alloc_node_trace+0x59/0x790 [ 3169.785746][T29439] ? memset+0x20/0x40 [ 3169.789738][T29439] ? __nla_reserve+0x9b/0xc0 [ 3169.794345][T29439] __kmalloc_node_track_caller+0x38/0x60 [ 3169.799976][T29439] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3169.805491][T29439] pskb_expand_head+0x148/0x1020 [ 3169.810421][T29439] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3169.816243][T29439] netlink_trim+0x1ea/0x240 [ 3169.820811][T29439] netlink_broadcast_filtered+0x5f/0xd40 [ 3169.826506][T29439] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3169.832060][T29439] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3169.837541][T29439] nlmsg_notify+0x90/0x250 [ 3169.841970][T29439] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3169.847473][T29439] rtmsg_ifinfo+0x7f/0xa0 [ 3169.851822][T29439] netdev_state_change+0x121/0x140 [ 3169.856956][T29439] ? netdev_notify_peers+0xc0/0xc0 [ 3169.862091][T29439] ? dev_change_xdp_fd+0x2fb/0x600 [ 3169.867205][T29439] do_setlink+0x2d6d/0x35e0 [ 3169.871825][T29439] ? rtnl_getlink+0xab0/0xab0 [ 3169.876511][T29439] ? find_held_lock+0x2d/0x110 [ 3169.881272][T29439] ? is_bpf_text_address+0xa9/0x160 [ 3169.886482][T29439] ? mark_lock+0xbc/0x1220 [ 3169.890911][T29439] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3169.896813][T29439] ? __nla_validate_parse+0x2af/0x1cd0 [ 3169.902286][T29439] ? nla_memcpy+0xa0/0xa0 [ 3169.906614][T29439] ? __nla_parse+0x2e/0x60 [ 3169.911020][T29439] __rtnl_newlink+0xc96/0x1590 [ 3169.915795][T29439] ? rtnl_link_unregister+0x240/0x240 [ 3169.921220][T29439] ? __bpf_address_lookup+0x290/0x290 [ 3169.926647][T29439] ? is_bpf_text_address+0xcb/0x160 [ 3169.931845][T29439] ? kernel_text_address+0x6e/0xe0 [ 3169.936968][T29439] ? __kernel_text_address+0x9/0x30 [ 3169.942278][T29439] ? unwind_get_return_address+0x5a/0xa0 [ 3169.947996][T29439] ? profile_setup.cold+0xc1/0xc1 [ 3169.953028][T29439] ? arch_stack_walk+0x84/0xd0 [ 3169.957813][T29439] ? stack_trace_save+0x8c/0xc0 [ 3169.962661][T29439] ? stack_trace_consume_entry+0x160/0x160 [ 3169.968483][T29439] ? rtnl_newlink+0x46/0xa0 [ 3169.973160][T29439] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3169.978717][T29439] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3169.984693][T29439] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3169.990488][T29439] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3169.996037][T29439] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3170.001147][T29439] rtnl_newlink+0x64/0xa0 [ 3170.005479][T29439] ? __rtnl_newlink+0x1590/0x1590 [ 3170.010517][T29439] rtnetlink_rcv_msg+0x44e/0xad0 [ 3170.015473][T29439] ? rtnl_bridge_getlink+0x870/0x870 [ 3170.020820][T29439] ? mark_held_locks+0xe0/0xe0 [ 3170.025599][T29439] ? netlink_deliver_tap+0x146/0xb50 [ 3170.030941][T29439] netlink_rcv_skb+0x15a/0x410 [ 3170.035709][T29439] ? rtnl_bridge_getlink+0x870/0x870 [ 3170.040993][T29439] ? netlink_ack+0xa80/0xa80 [ 3170.045718][T29439] netlink_unicast+0x537/0x740 [ 3170.050590][T29439] ? netlink_attachskb+0x810/0x810 [ 3170.055698][T29439] ? _copy_from_iter_full+0x25c/0x870 [ 3170.061073][T29439] ? __phys_addr_symbol+0x2c/0x70 [ 3170.066167][T29439] ? __check_object_size+0x171/0x437 [ 3170.071481][T29439] netlink_sendmsg+0x882/0xe10 [ 3170.076264][T29439] ? aa_af_perm+0x260/0x260 [ 3170.080795][T29439] ? netlink_unicast+0x740/0x740 [ 3170.085777][T29439] ? netlink_unicast+0x740/0x740 [ 3170.090714][T29439] sock_sendmsg+0xcf/0x120 [ 3170.095171][T29439] ____sys_sendmsg+0x6b9/0x7d0 [ 3170.099935][T29439] ? kernel_sendmsg+0x50/0x50 [ 3170.104605][T29439] ___sys_sendmsg+0x100/0x170 [ 3170.109286][T29439] ? sendmsg_copy_msghdr+0x70/0x70 [ 3170.114410][T29439] ? __fget_files+0x329/0x4f0 [ 3170.119193][T29439] ? ksys_dup3+0x3c0/0x3c0 [ 3170.123621][T29439] ? find_held_lock+0x2d/0x110 [ 3170.128371][T29439] ? vfs_write+0x342/0x5c0 [ 3170.132792][T29439] ? __fget_light+0x208/0x270 [ 3170.137482][T29439] __sys_sendmsg+0xec/0x1b0 [ 3170.142013][T29439] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3170.147080][T29439] ? vfs_write+0x15b/0x5c0 [ 3170.151521][T29439] ? trace_hardirqs_off_caller+0x55/0x230 [ 3170.157256][T29439] ? do_syscall_64+0x21/0x7d0 [ 3170.162722][T29439] do_syscall_64+0xf6/0x7d0 [ 3170.167220][T29439] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3170.173117][T29439] RIP: 0033:0x45c849 [ 3170.177039][T29439] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3170.196654][T29439] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3170.205142][T29439] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3170.213118][T29439] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3170.221090][T29439] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3170.229054][T29439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3170.237018][T29439] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000016 [ 3170.252924][T29439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:23 executing program 1 (fault-call:1 fault-nth:23): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:23 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00000000ff"], 0x34}}, 0x0) 09:06:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400002810000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3170.370514][T29457] FAULT_INJECTION: forcing a failure. [ 3170.370514][T29457] name failslab, interval 1, probability 0, space 0, times 0 [ 3170.414476][T29457] CPU: 0 PID: 29457 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3170.423555][T29457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3170.433647][T29457] Call Trace: [ 3170.436959][T29457] dump_stack+0x188/0x20d [ 3170.441394][T29457] should_fail.cold+0x5/0xa [ 3170.445914][T29457] ? fault_create_debugfs_attr+0x140/0x140 [ 3170.451739][T29457] should_failslab+0x5/0xf [ 3170.456169][T29457] kmem_cache_alloc_node+0x25c/0x760 [ 3170.461467][T29457] ? br_get_linkxstats_size+0x390/0x390 [ 3170.467030][T29457] ? lock_downgrade+0x7f0/0x7f0 [ 3170.471895][T29457] __alloc_skb+0xba/0x5a0 [ 3170.476230][T29457] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3170.481768][T29457] ? if_nlmsg_size+0x541/0xa70 [ 3170.486540][T29457] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3170.491814][T29457] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3170.497260][T29457] rtmsg_ifinfo+0x7f/0xa0 [ 3170.501584][T29457] netdev_state_change+0x121/0x140 [ 3170.506686][T29457] ? netdev_notify_peers+0xc0/0xc0 [ 3170.511786][T29457] ? dev_change_xdp_fd+0x2fb/0x600 [ 3170.516888][T29457] do_setlink+0x2d6d/0x35e0 [ 3170.521390][T29457] ? rtnl_getlink+0xab0/0xab0 [ 3170.526058][T29457] ? find_held_lock+0x2d/0x110 [ 3170.530813][T29457] ? is_bpf_text_address+0xa9/0x160 [ 3170.536024][T29457] ? mark_lock+0xbc/0x1220 [ 3170.540432][T29457] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3170.546333][T29457] ? __nla_validate_parse+0x2af/0x1cd0 [ 3170.555266][T29457] ? nla_memcpy+0xa0/0xa0 [ 3170.559585][T29457] ? __nla_parse+0x2e/0x60 [ 3170.564011][T29457] __rtnl_newlink+0xc96/0x1590 [ 3170.568770][T29457] ? rtnl_link_unregister+0x240/0x240 [ 3170.574130][T29457] ? __bpf_address_lookup+0x290/0x290 [ 3170.579507][T29457] ? is_bpf_text_address+0xcb/0x160 [ 3170.584700][T29457] ? kernel_text_address+0x6e/0xe0 [ 3170.589804][T29457] ? __kernel_text_address+0x9/0x30 [ 3170.595006][T29457] ? unwind_get_return_address+0x5a/0xa0 [ 3170.600651][T29457] ? profile_setup.cold+0xc1/0xc1 [ 3170.605668][T29457] ? arch_stack_walk+0x84/0xd0 [ 3170.610448][T29457] ? stack_trace_save+0x8c/0xc0 [ 3170.615314][T29457] ? stack_trace_consume_entry+0x160/0x160 [ 3170.621260][T29457] ? rtnl_newlink+0x46/0xa0 [ 3170.625761][T29457] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3170.631296][T29457] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3170.637284][T29457] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3170.643084][T29457] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3170.648636][T29457] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3170.653757][T29457] rtnl_newlink+0x64/0xa0 [ 3170.658077][T29457] ? __rtnl_newlink+0x1590/0x1590 [ 3170.663090][T29457] rtnetlink_rcv_msg+0x44e/0xad0 [ 3170.668017][T29457] ? rtnl_bridge_getlink+0x870/0x870 [ 3170.673294][T29457] ? mark_held_locks+0xe0/0xe0 [ 3170.678062][T29457] ? netlink_deliver_tap+0x146/0xb50 [ 3170.683341][T29457] netlink_rcv_skb+0x15a/0x410 [ 3170.688272][T29457] ? rtnl_bridge_getlink+0x870/0x870 [ 3170.693576][T29457] ? netlink_ack+0xa80/0xa80 [ 3170.698200][T29457] netlink_unicast+0x537/0x740 [ 3170.702971][T29457] ? netlink_attachskb+0x810/0x810 [ 3170.708071][T29457] ? _copy_from_iter_full+0x25c/0x870 [ 3170.713430][T29457] ? __phys_addr_symbol+0x2c/0x70 [ 3170.718446][T29457] ? __check_object_size+0x171/0x437 [ 3170.723725][T29457] netlink_sendmsg+0x882/0xe10 [ 3170.728484][T29457] ? aa_af_perm+0x260/0x260 [ 3170.732975][T29457] ? netlink_unicast+0x740/0x740 [ 3170.737923][T29457] ? netlink_unicast+0x740/0x740 [ 3170.742850][T29457] sock_sendmsg+0xcf/0x120 [ 3170.747256][T29457] ____sys_sendmsg+0x6b9/0x7d0 [ 3170.752009][T29457] ? kernel_sendmsg+0x50/0x50 [ 3170.756709][T29457] ___sys_sendmsg+0x100/0x170 [ 3170.761397][T29457] ? sendmsg_copy_msghdr+0x70/0x70 [ 3170.766605][T29457] ? __fget_files+0x329/0x4f0 [ 3170.771278][T29457] ? ksys_dup3+0x3c0/0x3c0 [ 3170.775684][T29457] ? find_held_lock+0x2d/0x110 [ 3170.780441][T29457] ? vfs_write+0x342/0x5c0 [ 3170.784855][T29457] ? __fget_light+0x208/0x270 [ 3170.789551][T29457] __sys_sendmsg+0xec/0x1b0 [ 3170.794047][T29457] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3170.799058][T29457] ? vfs_write+0x15b/0x5c0 [ 3170.804694][T29457] ? trace_hardirqs_off_caller+0x55/0x230 [ 3170.810400][T29457] ? do_syscall_64+0x21/0x7d0 [ 3170.815064][T29457] do_syscall_64+0xf6/0x7d0 [ 3170.819552][T29457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3170.825425][T29457] RIP: 0033:0x45c849 [ 3170.829304][T29457] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3170.848899][T29457] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3170.857291][T29457] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3170.865245][T29457] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3170.873230][T29457] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3170.881185][T29457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3170.889138][T29457] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000017 09:06:23 executing program 1 (fault-call:1 fault-nth:24): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3170.958542][T29457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400006010000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3171.137372][T29468] FAULT_INJECTION: forcing a failure. [ 3171.137372][T29468] name failslab, interval 1, probability 0, space 0, times 0 [ 3171.162673][T29468] CPU: 0 PID: 29468 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3171.171386][T29468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3171.181532][T29468] Call Trace: [ 3171.184837][T29468] dump_stack+0x188/0x20d [ 3171.189171][T29468] should_fail.cold+0x5/0xa [ 3171.193673][T29468] ? fault_create_debugfs_attr+0x140/0x140 [ 3171.199476][T29468] should_failslab+0x5/0xf [ 3171.203885][T29468] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3171.209690][T29468] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3171.215684][T29468] __kmalloc_node_track_caller+0x38/0x60 [ 3171.221319][T29468] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3171.226701][T29468] __alloc_skb+0xef/0x5a0 [ 3171.231029][T29468] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3171.236567][T29468] ? if_nlmsg_size+0x541/0xa70 [ 3171.241327][T29468] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3171.246610][T29468] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3171.252060][T29468] rtmsg_ifinfo+0x7f/0xa0 [ 3171.256813][T29468] netdev_state_change+0x121/0x140 [ 3171.261908][T29468] ? netdev_notify_peers+0xc0/0xc0 [ 3171.267008][T29468] ? dev_change_xdp_fd+0x2fb/0x600 [ 3171.272110][T29468] do_setlink+0x2d6d/0x35e0 [ 3171.276603][T29468] ? rtnl_getlink+0xab0/0xab0 [ 3171.281271][T29468] ? find_held_lock+0x2d/0x110 [ 3171.286025][T29468] ? is_bpf_text_address+0xa9/0x160 [ 3171.291208][T29468] ? mark_lock+0xbc/0x1220 [ 3171.295615][T29468] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3171.301493][T29468] ? __nla_validate_parse+0x2af/0x1cd0 [ 3171.306938][T29468] ? nla_memcpy+0xa0/0xa0 [ 3171.311252][T29468] ? __nla_parse+0x2e/0x60 [ 3171.315688][T29468] __rtnl_newlink+0xc96/0x1590 [ 3171.320447][T29468] ? rtnl_link_unregister+0x240/0x240 [ 3171.325800][T29468] ? __bpf_address_lookup+0x290/0x290 [ 3171.331183][T29468] ? is_bpf_text_address+0xcb/0x160 [ 3171.336366][T29468] ? kernel_text_address+0x6e/0xe0 [ 3171.341461][T29468] ? __kernel_text_address+0x9/0x30 [ 3171.346664][T29468] ? unwind_get_return_address+0x5a/0xa0 [ 3171.352279][T29468] ? profile_setup.cold+0xc1/0xc1 [ 3171.357282][T29468] ? arch_stack_walk+0x84/0xd0 [ 3171.362041][T29468] ? stack_trace_save+0x8c/0xc0 [ 3171.366881][T29468] ? stack_trace_consume_entry+0x160/0x160 [ 3171.372723][T29468] ? rtnl_newlink+0x46/0xa0 [ 3171.377226][T29468] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3171.382777][T29468] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3171.388749][T29468] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3171.394545][T29468] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3171.400093][T29468] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3171.405193][T29468] rtnl_newlink+0x64/0xa0 [ 3171.409506][T29468] ? __rtnl_newlink+0x1590/0x1590 [ 3171.414520][T29468] rtnetlink_rcv_msg+0x44e/0xad0 [ 3171.419450][T29468] ? rtnl_bridge_getlink+0x870/0x870 [ 3171.424723][T29468] ? mark_held_locks+0xe0/0xe0 [ 3171.429471][T29468] ? netlink_deliver_tap+0x146/0xb50 [ 3171.434745][T29468] netlink_rcv_skb+0x15a/0x410 [ 3171.439495][T29468] ? rtnl_bridge_getlink+0x870/0x870 [ 3171.444764][T29468] ? netlink_ack+0xa80/0xa80 [ 3171.449353][T29468] netlink_unicast+0x537/0x740 [ 3171.454122][T29468] ? netlink_attachskb+0x810/0x810 [ 3171.459215][T29468] ? _copy_from_iter_full+0x25c/0x870 [ 3171.464638][T29468] ? __phys_addr_symbol+0x2c/0x70 [ 3171.469671][T29468] ? __check_object_size+0x171/0x437 [ 3171.475078][T29468] netlink_sendmsg+0x882/0xe10 [ 3171.479836][T29468] ? aa_af_perm+0x260/0x260 [ 3171.484329][T29468] ? netlink_unicast+0x740/0x740 [ 3171.489265][T29468] ? netlink_unicast+0x740/0x740 [ 3171.494193][T29468] sock_sendmsg+0xcf/0x120 [ 3171.498599][T29468] ____sys_sendmsg+0x6b9/0x7d0 [ 3171.503369][T29468] ? kernel_sendmsg+0x50/0x50 [ 3171.508036][T29468] ? preempt_schedule_common+0x5e/0xc0 [ 3171.513503][T29468] ___sys_sendmsg+0x100/0x170 [ 3171.518455][T29468] ? rcu_preempt_deferred_qs_irqrestore+0x887/0xb60 [ 3171.525052][T29468] ? sendmsg_copy_msghdr+0x70/0x70 [ 3171.530167][T29468] ? __rcu_read_unlock+0x26c/0x700 [ 3171.535287][T29468] ? __fget_files+0x329/0x4f0 [ 3171.539979][T29468] ? ksys_dup3+0x3c0/0x3c0 [ 3171.544453][T29468] ? find_held_lock+0x2d/0x110 [ 3171.549205][T29468] ? vfs_write+0x342/0x5c0 [ 3171.553616][T29468] ? __fget_light+0x208/0x270 [ 3171.558301][T29468] __sys_sendmsg+0xec/0x1b0 [ 3171.562805][T29468] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3171.567835][T29468] ? vfs_write+0x15b/0x5c0 [ 3171.572246][T29468] ? trace_hardirqs_off_caller+0x55/0x230 [ 3171.577967][T29468] ? do_syscall_64+0x21/0x7d0 [ 3171.582665][T29468] do_syscall_64+0xf6/0x7d0 [ 3171.587171][T29468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3171.593057][T29468] RIP: 0033:0x45c849 [ 3171.596939][T29468] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3171.616535][T29468] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3171.624951][T29468] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3171.632920][T29468] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3171.640894][T29468] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3171.649210][T29468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3171.657187][T29468] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000018 [ 3171.672835][T29468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x9639000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x400}) 09:06:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00000000ff"], 0x34}}, 0x0) 09:06:24 executing program 1 (fault-call:1 fault-nth:25): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:24 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88caffff) 09:06:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000018000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3171.803849][T29478] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3171.906567][T29482] FAULT_INJECTION: forcing a failure. [ 3171.906567][T29482] name failslab, interval 1, probability 0, space 0, times 0 [ 3171.945065][T29482] CPU: 0 PID: 29482 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3171.953782][T29482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3171.963841][T29482] Call Trace: [ 3171.967146][T29482] dump_stack+0x188/0x20d [ 3171.971491][T29482] should_fail.cold+0x5/0xa [ 3171.975991][T29482] ? fault_create_debugfs_attr+0x140/0x140 [ 3171.981796][T29482] should_failslab+0x5/0xf [ 3171.986207][T29482] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3171.992014][T29482] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3171.998011][T29482] __kmalloc_node_track_caller+0x38/0x60 [ 3172.003643][T29482] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3172.009003][T29482] __alloc_skb+0xef/0x5a0 [ 3172.013322][T29482] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3172.018862][T29482] ? if_nlmsg_size+0x541/0xa70 [ 3172.023620][T29482] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3172.028898][T29482] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3172.034345][T29482] rtmsg_ifinfo+0x7f/0xa0 [ 3172.038664][T29482] netdev_state_change+0x121/0x140 [ 3172.043759][T29482] ? netdev_notify_peers+0xc0/0xc0 [ 3172.048853][T29482] ? dev_change_xdp_fd+0x2fb/0x600 [ 3172.053953][T29482] do_setlink+0x2d6d/0x35e0 [ 3172.058451][T29482] ? rtnl_getlink+0xab0/0xab0 [ 3172.063115][T29482] ? find_held_lock+0x2d/0x110 [ 3172.067882][T29482] ? is_bpf_text_address+0xa9/0x160 [ 3172.073082][T29482] ? mark_lock+0xbc/0x1220 [ 3172.077514][T29482] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3172.083396][T29482] ? __nla_validate_parse+0x2af/0x1cd0 [ 3172.088845][T29482] ? nla_memcpy+0xa0/0xa0 [ 3172.093165][T29482] ? __nla_parse+0x2e/0x60 [ 3172.097573][T29482] __rtnl_newlink+0xc96/0x1590 [ 3172.102341][T29482] ? rtnl_link_unregister+0x240/0x240 [ 3172.107696][T29482] ? __bpf_address_lookup+0x290/0x290 [ 3172.113067][T29482] ? is_bpf_text_address+0xcb/0x160 [ 3172.118254][T29482] ? kernel_text_address+0x6e/0xe0 [ 3172.123349][T29482] ? __kernel_text_address+0x9/0x30 [ 3172.128528][T29482] ? unwind_get_return_address+0x5a/0xa0 [ 3172.134141][T29482] ? profile_setup.cold+0xc1/0xc1 [ 3172.139147][T29482] ? arch_stack_walk+0x84/0xd0 [ 3172.143900][T29482] ? stack_trace_save+0x8c/0xc0 [ 3172.148740][T29482] ? stack_trace_consume_entry+0x160/0x160 [ 3172.154566][T29482] ? rtnl_newlink+0x46/0xa0 [ 3172.159055][T29482] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3172.164586][T29482] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3172.170551][T29482] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3172.176345][T29482] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3172.182012][T29482] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3172.187122][T29482] rtnl_newlink+0x64/0xa0 [ 3172.191443][T29482] ? __rtnl_newlink+0x1590/0x1590 [ 3172.196457][T29482] rtnetlink_rcv_msg+0x44e/0xad0 [ 3172.201392][T29482] ? rtnl_bridge_getlink+0x870/0x870 [ 3172.206675][T29482] ? mark_held_locks+0xe0/0xe0 [ 3172.211439][T29482] ? netlink_deliver_tap+0x146/0xb50 [ 3172.216714][T29482] netlink_rcv_skb+0x15a/0x410 [ 3172.221483][T29482] ? rtnl_bridge_getlink+0x870/0x870 [ 3172.226751][T29482] ? netlink_ack+0xa80/0xa80 [ 3172.231345][T29482] netlink_unicast+0x537/0x740 [ 3172.236101][T29482] ? netlink_attachskb+0x810/0x810 [ 3172.241194][T29482] ? _copy_from_iter_full+0x25c/0x870 [ 3172.246547][T29482] ? __phys_addr_symbol+0x2c/0x70 [ 3172.251556][T29482] ? __check_object_size+0x171/0x437 [ 3172.256840][T29482] netlink_sendmsg+0x882/0xe10 [ 3172.261590][T29482] ? aa_af_perm+0x260/0x260 [ 3172.266076][T29482] ? netlink_unicast+0x740/0x740 [ 3172.271012][T29482] ? netlink_unicast+0x740/0x740 [ 3172.275950][T29482] sock_sendmsg+0xcf/0x120 [ 3172.280356][T29482] ____sys_sendmsg+0x6b9/0x7d0 [ 3172.285132][T29482] ? kernel_sendmsg+0x50/0x50 [ 3172.289807][T29482] ___sys_sendmsg+0x100/0x170 [ 3172.294477][T29482] ? sendmsg_copy_msghdr+0x70/0x70 [ 3172.299588][T29482] ? __fget_files+0x329/0x4f0 [ 3172.304606][T29482] ? ksys_dup3+0x3c0/0x3c0 [ 3172.309094][T29482] ? find_held_lock+0x2d/0x110 [ 3172.313843][T29482] ? vfs_write+0x342/0x5c0 [ 3172.318250][T29482] ? __fget_light+0x208/0x270 [ 3172.322918][T29482] __sys_sendmsg+0xec/0x1b0 [ 3172.327410][T29482] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3172.332417][T29482] ? vfs_write+0x15b/0x5c0 [ 3172.336837][T29482] ? trace_hardirqs_off_caller+0x55/0x230 [ 3172.342541][T29482] ? do_syscall_64+0x21/0x7d0 [ 3172.347203][T29482] do_syscall_64+0xf6/0x7d0 [ 3172.351710][T29482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3172.357583][T29482] RIP: 0033:0x45c849 [ 3172.361471][T29482] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3172.381076][T29482] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3172.389476][T29482] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3172.397430][T29482] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3172.405385][T29482] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3172.413337][T29482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3172.421295][T29482] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000019 [ 3172.448181][T29482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:25 executing program 1 (fault-call:1 fault-nth:26): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000001c0)=""/217, 0xd9}], 0x3) 09:06:25 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b000000007f"], 0x34}}, 0x0) [ 3172.661878][T29507] FAULT_INJECTION: forcing a failure. [ 3172.661878][T29507] name failslab, interval 1, probability 0, space 0, times 0 [ 3172.676060][T29507] CPU: 0 PID: 29507 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3172.684761][T29507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3172.694820][T29507] Call Trace: [ 3172.698121][T29507] dump_stack+0x188/0x20d [ 3172.702463][T29507] should_fail.cold+0x5/0xa [ 3172.707019][T29507] ? fault_create_debugfs_attr+0x140/0x140 [ 3172.712834][T29507] ? nla_put+0xfe/0x130 [ 3172.716998][T29507] ? find_held_lock+0x2d/0x110 [ 3172.721833][T29507] should_failslab+0x5/0xf [ 3172.726272][T29507] kmem_cache_alloc_node_trace+0x59/0x790 [ 3172.732029][T29507] ? memset+0x20/0x40 [ 3172.736015][T29507] ? __nla_reserve+0x9b/0xc0 [ 3172.740619][T29507] __kmalloc_node_track_caller+0x38/0x60 [ 3172.746277][T29507] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3172.751650][T29507] pskb_expand_head+0x148/0x1020 [ 3172.756594][T29507] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3172.762399][T29507] netlink_trim+0x1ea/0x240 [ 3172.767154][T29507] netlink_broadcast_filtered+0x5f/0xd40 [ 3172.772771][T29507] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3172.778302][T29507] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3172.783747][T29507] nlmsg_notify+0x90/0x250 [ 3172.788156][T29507] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3172.793605][T29507] rtmsg_ifinfo+0x7f/0xa0 [ 3172.797920][T29507] netdev_state_change+0x121/0x140 [ 3172.803019][T29507] ? netdev_notify_peers+0xc0/0xc0 [ 3172.808116][T29507] ? dev_change_xdp_fd+0x2fb/0x600 [ 3172.813213][T29507] do_setlink+0x2d6d/0x35e0 [ 3172.817705][T29507] ? rtnl_getlink+0xab0/0xab0 [ 3172.822404][T29507] ? find_held_lock+0x2d/0x110 [ 3172.827158][T29507] ? is_bpf_text_address+0xa9/0x160 [ 3172.832353][T29507] ? mark_lock+0xbc/0x1220 [ 3172.836767][T29507] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3172.842662][T29507] ? __nla_validate_parse+0x2af/0x1cd0 [ 3172.848114][T29507] ? nla_memcpy+0xa0/0xa0 [ 3172.852433][T29507] ? __nla_parse+0x2e/0x60 [ 3172.856846][T29507] __rtnl_newlink+0xc96/0x1590 [ 3172.861607][T29507] ? rtnl_link_unregister+0x240/0x240 [ 3172.866962][T29507] ? __bpf_address_lookup+0x290/0x290 [ 3172.872324][T29507] ? is_bpf_text_address+0xcb/0x160 [ 3172.877506][T29507] ? kernel_text_address+0x6e/0xe0 [ 3172.882612][T29507] ? __kernel_text_address+0x9/0x30 [ 3172.887816][T29507] ? unwind_get_return_address+0x5a/0xa0 [ 3172.893466][T29507] ? profile_setup.cold+0xc1/0xc1 [ 3172.898658][T29507] ? arch_stack_walk+0x84/0xd0 [ 3172.903439][T29507] ? stack_trace_save+0x8c/0xc0 [ 3172.908281][T29507] ? stack_trace_consume_entry+0x160/0x160 [ 3172.914113][T29507] ? rtnl_newlink+0x46/0xa0 [ 3172.918601][T29507] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3172.924150][T29507] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3172.930142][T29507] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3172.935942][T29507] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3172.941477][T29507] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3172.946577][T29507] rtnl_newlink+0x64/0xa0 [ 3172.950924][T29507] ? __rtnl_newlink+0x1590/0x1590 [ 3172.955935][T29507] rtnetlink_rcv_msg+0x44e/0xad0 [ 3172.960862][T29507] ? rtnl_bridge_getlink+0x870/0x870 [ 3172.966134][T29507] ? mark_held_locks+0xe0/0xe0 [ 3172.970881][T29507] ? netlink_deliver_tap+0x146/0xb50 [ 3172.976152][T29507] netlink_rcv_skb+0x15a/0x410 [ 3172.980936][T29507] ? rtnl_bridge_getlink+0x870/0x870 [ 3172.986214][T29507] ? netlink_ack+0xa80/0xa80 [ 3172.990922][T29507] netlink_unicast+0x537/0x740 [ 3172.995687][T29507] ? netlink_attachskb+0x810/0x810 [ 3173.000787][T29507] ? _copy_from_iter_full+0x25c/0x870 [ 3173.006149][T29507] ? __phys_addr_symbol+0x2c/0x70 [ 3173.011163][T29507] ? __check_object_size+0x171/0x437 [ 3173.016457][T29507] netlink_sendmsg+0x882/0xe10 [ 3173.021209][T29507] ? aa_af_perm+0x260/0x260 [ 3173.025697][T29507] ? netlink_unicast+0x740/0x740 [ 3173.030626][T29507] ? netlink_unicast+0x740/0x740 [ 3173.035595][T29507] sock_sendmsg+0xcf/0x120 [ 3173.040021][T29507] ____sys_sendmsg+0x6b9/0x7d0 [ 3173.044792][T29507] ? kernel_sendmsg+0x50/0x50 [ 3173.049487][T29507] ___sys_sendmsg+0x100/0x170 [ 3173.054161][T29507] ? sendmsg_copy_msghdr+0x70/0x70 [ 3173.059389][T29507] ? __fget_files+0x329/0x4f0 [ 3173.064067][T29507] ? ksys_dup3+0x3c0/0x3c0 [ 3173.068586][T29507] ? find_held_lock+0x2d/0x110 [ 3173.073353][T29507] ? vfs_write+0x342/0x5c0 [ 3173.077763][T29507] ? __fget_light+0x208/0x270 [ 3173.082432][T29507] __sys_sendmsg+0xec/0x1b0 [ 3173.086932][T29507] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3173.091948][T29507] ? vfs_write+0x15b/0x5c0 [ 3173.096374][T29507] ? trace_hardirqs_off_caller+0x55/0x230 [ 3173.102080][T29507] ? do_syscall_64+0x21/0x7d0 [ 3173.106750][T29507] do_syscall_64+0xf6/0x7d0 [ 3173.111241][T29507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3173.117126][T29507] RIP: 0033:0x45c849 [ 3173.121014][T29507] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3173.141461][T29507] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3173.149865][T29507] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 09:06:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000020000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3173.157836][T29507] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3173.165791][T29507] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3173.173746][T29507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3173.181702][T29507] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000001a [ 3173.230834][T29507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:26 executing program 1 (fault-call:1 fault-nth:27): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000025000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3173.364017][T29516] FAULT_INJECTION: forcing a failure. [ 3173.364017][T29516] name failslab, interval 1, probability 0, space 0, times 0 [ 3173.419361][T29516] CPU: 1 PID: 29516 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3173.428079][T29516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3173.438144][T29516] Call Trace: [ 3173.441546][T29516] dump_stack+0x188/0x20d [ 3173.445894][T29516] should_fail.cold+0x5/0xa [ 3173.450410][T29516] ? fault_create_debugfs_attr+0x140/0x140 [ 3173.456320][T29516] should_failslab+0x5/0xf [ 3173.460744][T29516] kmem_cache_alloc_node+0x25c/0x760 [ 3173.466041][T29516] ? br_get_linkxstats_size+0x390/0x390 [ 3173.471597][T29516] ? lock_downgrade+0x7f0/0x7f0 [ 3173.476447][T29516] __alloc_skb+0xba/0x5a0 [ 3173.480774][T29516] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3173.486319][T29516] ? if_nlmsg_size+0x541/0xa70 [ 3173.491148][T29516] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3173.496421][T29516] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3173.501877][T29516] rtmsg_ifinfo+0x7f/0xa0 [ 3173.506204][T29516] netdev_state_change+0x121/0x140 [ 3173.511297][T29516] ? netdev_notify_peers+0xc0/0xc0 [ 3173.516402][T29516] ? dev_change_xdp_fd+0x2fb/0x600 [ 3173.522409][T29516] do_setlink+0x2d6d/0x35e0 [ 3173.526908][T29516] ? rtnl_getlink+0xab0/0xab0 [ 3173.531569][T29516] ? find_held_lock+0x2d/0x110 [ 3173.536315][T29516] ? is_bpf_text_address+0xa9/0x160 [ 3173.541519][T29516] ? mark_lock+0xbc/0x1220 [ 3173.545919][T29516] ? mark_lock+0xbc/0x1220 [ 3173.550330][T29516] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3173.556211][T29516] ? __nla_validate_parse+0x2af/0x1cd0 [ 3173.561657][T29516] ? nla_memcpy+0xa0/0xa0 [ 3173.566051][T29516] ? __nla_parse+0x2e/0x60 [ 3173.570453][T29516] __rtnl_newlink+0xc96/0x1590 [ 3173.575211][T29516] ? rtnl_link_unregister+0x240/0x240 [ 3173.580565][T29516] ? __bpf_address_lookup+0x290/0x290 [ 3173.585922][T29516] ? is_bpf_text_address+0xcb/0x160 [ 3173.591103][T29516] ? kernel_text_address+0x6e/0xe0 [ 3173.596203][T29516] ? __kernel_text_address+0x9/0x30 [ 3173.601394][T29516] ? unwind_get_return_address+0x5a/0xa0 [ 3173.607014][T29516] ? profile_setup.cold+0xc1/0xc1 [ 3173.612035][T29516] ? arch_stack_walk+0x84/0xd0 [ 3173.616799][T29516] ? stack_trace_save+0x8c/0xc0 [ 3173.621639][T29516] ? stack_trace_consume_entry+0x160/0x160 [ 3173.627459][T29516] ? rtnl_newlink+0x46/0xa0 [ 3173.631949][T29516] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3173.637480][T29516] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3173.643444][T29516] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3173.649234][T29516] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3173.654818][T29516] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3173.659917][T29516] rtnl_newlink+0x64/0xa0 [ 3173.664229][T29516] ? __rtnl_newlink+0x1590/0x1590 [ 3173.669235][T29516] rtnetlink_rcv_msg+0x44e/0xad0 [ 3173.674157][T29516] ? rtnl_bridge_getlink+0x870/0x870 [ 3173.679424][T29516] ? mark_held_locks+0xe0/0xe0 [ 3173.684168][T29516] ? netlink_deliver_tap+0x146/0xb50 [ 3173.689445][T29516] netlink_rcv_skb+0x15a/0x410 [ 3173.694190][T29516] ? rtnl_bridge_getlink+0x870/0x870 [ 3173.699455][T29516] ? netlink_ack+0xa80/0xa80 [ 3173.704034][T29516] netlink_unicast+0x537/0x740 [ 3173.708844][T29516] ? netlink_attachskb+0x810/0x810 [ 3173.713948][T29516] ? _copy_from_iter_full+0x25c/0x870 [ 3173.719346][T29516] ? __phys_addr_symbol+0x2c/0x70 [ 3173.724359][T29516] ? __check_object_size+0x171/0x437 [ 3173.729633][T29516] netlink_sendmsg+0x882/0xe10 [ 3173.734391][T29516] ? aa_af_perm+0x260/0x260 [ 3173.738876][T29516] ? netlink_unicast+0x740/0x740 [ 3173.743806][T29516] ? netlink_unicast+0x740/0x740 [ 3173.748738][T29516] sock_sendmsg+0xcf/0x120 [ 3173.753166][T29516] ____sys_sendmsg+0x6b9/0x7d0 [ 3173.757913][T29516] ? kernel_sendmsg+0x50/0x50 [ 3173.762577][T29516] ___sys_sendmsg+0x100/0x170 [ 3173.767237][T29516] ? sendmsg_copy_msghdr+0x70/0x70 [ 3173.772343][T29516] ? __fget_files+0x329/0x4f0 [ 3173.777008][T29516] ? ksys_dup3+0x3c0/0x3c0 [ 3173.781402][T29516] ? find_held_lock+0x2d/0x110 [ 3173.786201][T29516] ? vfs_write+0x342/0x5c0 [ 3173.790787][T29516] ? __fget_light+0x208/0x270 [ 3173.795463][T29516] __sys_sendmsg+0xec/0x1b0 [ 3173.800005][T29516] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3173.805023][T29516] ? vfs_write+0x15b/0x5c0 [ 3173.809431][T29516] ? trace_hardirqs_off_caller+0x55/0x230 [ 3173.815147][T29516] ? do_syscall_64+0x21/0x7d0 [ 3173.819811][T29516] do_syscall_64+0xf6/0x7d0 [ 3173.824304][T29516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3173.830175][T29516] RIP: 0033:0x45c849 [ 3173.834049][T29516] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3173.853653][T29516] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3173.862101][T29516] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3173.870055][T29516] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3173.878007][T29516] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3173.885972][T29516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3173.893951][T29516] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000001b [ 3173.908127][T29516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x9effffff00000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:26 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00000000ff"], 0x34}}, 0x0) 09:06:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000028000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:26 executing program 1 (fault-call:1 fault-nth:28): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x89060000) [ 3174.142178][T29533] FAULT_INJECTION: forcing a failure. [ 3174.142178][T29533] name failslab, interval 1, probability 0, space 0, times 0 [ 3174.176907][T29533] CPU: 1 PID: 29533 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3174.185614][T29533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3174.195667][T29533] Call Trace: [ 3174.198958][T29533] dump_stack+0x188/0x20d [ 3174.203330][T29533] should_fail.cold+0x5/0xa [ 3174.207844][T29533] ? fault_create_debugfs_attr+0x140/0x140 [ 3174.213683][T29533] ? nla_put+0xfe/0x130 [ 3174.217848][T29533] ? find_held_lock+0x2d/0x110 [ 3174.222613][T29533] should_failslab+0x5/0xf [ 3174.227029][T29533] kmem_cache_alloc_node_trace+0x59/0x790 [ 3174.232731][T29533] ? memset+0x20/0x40 [ 3174.237839][T29533] ? __nla_reserve+0x9b/0xc0 [ 3174.242426][T29533] __kmalloc_node_track_caller+0x38/0x60 [ 3174.248048][T29533] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3174.253407][T29533] pskb_expand_head+0x148/0x1020 [ 3174.258338][T29533] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3174.264155][T29533] netlink_trim+0x1ea/0x240 [ 3174.268661][T29533] netlink_broadcast_filtered+0x5f/0xd40 [ 3174.274300][T29533] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3174.279887][T29533] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3174.285356][T29533] nlmsg_notify+0x90/0x250 [ 3174.289888][T29533] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3174.295355][T29533] rtmsg_ifinfo+0x7f/0xa0 [ 3174.299705][T29533] netdev_state_change+0x121/0x140 [ 3174.304885][T29533] ? netdev_notify_peers+0xc0/0xc0 [ 3174.309996][T29533] ? dev_change_xdp_fd+0x2fb/0x600 [ 3174.315104][T29533] do_setlink+0x2d6d/0x35e0 [ 3174.319659][T29533] ? rtnl_getlink+0xab0/0xab0 [ 3174.324324][T29533] ? find_held_lock+0x2d/0x110 [ 3174.329084][T29533] ? is_bpf_text_address+0xa9/0x160 [ 3174.334293][T29533] ? mark_lock+0xbc/0x1220 [ 3174.338739][T29533] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3174.344623][T29533] ? __nla_validate_parse+0x2af/0x1cd0 [ 3174.350093][T29533] ? nla_memcpy+0xa0/0xa0 [ 3174.354410][T29533] ? __nla_parse+0x2e/0x60 [ 3174.358817][T29533] __rtnl_newlink+0xc96/0x1590 [ 3174.363571][T29533] ? rtnl_link_unregister+0x240/0x240 [ 3174.368938][T29533] ? __bpf_address_lookup+0x290/0x290 [ 3174.374301][T29533] ? is_bpf_text_address+0xcb/0x160 [ 3174.379484][T29533] ? kernel_text_address+0x6e/0xe0 [ 3174.384593][T29533] ? __kernel_text_address+0x9/0x30 [ 3174.389797][T29533] ? unwind_get_return_address+0x5a/0xa0 [ 3174.395433][T29533] ? profile_setup.cold+0xc1/0xc1 [ 3174.400452][T29533] ? arch_stack_walk+0x84/0xd0 [ 3174.405215][T29533] ? stack_trace_save+0x8c/0xc0 [ 3174.410157][T29533] ? stack_trace_consume_entry+0x160/0x160 [ 3174.415977][T29533] ? rtnl_newlink+0x46/0xa0 [ 3174.420472][T29533] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3174.426004][T29533] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3174.431982][T29533] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3174.437785][T29533] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3174.443326][T29533] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3174.448467][T29533] rtnl_newlink+0x64/0xa0 [ 3174.452793][T29533] ? __rtnl_newlink+0x1590/0x1590 [ 3174.457821][T29533] rtnetlink_rcv_msg+0x44e/0xad0 [ 3174.462763][T29533] ? rtnl_bridge_getlink+0x870/0x870 [ 3174.468154][T29533] ? mark_held_locks+0xe0/0xe0 [ 3174.472944][T29533] ? netlink_deliver_tap+0x146/0xb50 [ 3174.478215][T29533] netlink_rcv_skb+0x15a/0x410 [ 3174.482967][T29533] ? rtnl_bridge_getlink+0x870/0x870 [ 3174.488239][T29533] ? netlink_ack+0xa80/0xa80 [ 3174.492845][T29533] netlink_unicast+0x537/0x740 [ 3174.497639][T29533] ? netlink_attachskb+0x810/0x810 [ 3174.502764][T29533] ? _copy_from_iter_full+0x25c/0x870 [ 3174.508233][T29533] ? __phys_addr_symbol+0x2c/0x70 [ 3174.513255][T29533] ? __check_object_size+0x171/0x437 [ 3174.518542][T29533] netlink_sendmsg+0x882/0xe10 [ 3174.523292][T29533] ? aa_af_perm+0x260/0x260 [ 3174.527779][T29533] ? netlink_unicast+0x740/0x740 [ 3174.532712][T29533] ? netlink_unicast+0x740/0x740 [ 3174.537641][T29533] sock_sendmsg+0xcf/0x120 [ 3174.542039][T29533] ____sys_sendmsg+0x6b9/0x7d0 [ 3174.546782][T29533] ? kernel_sendmsg+0x50/0x50 [ 3174.551451][T29533] ___sys_sendmsg+0x100/0x170 [ 3174.556117][T29533] ? sendmsg_copy_msghdr+0x70/0x70 [ 3174.561226][T29533] ? __fget_files+0x329/0x4f0 [ 3174.565885][T29533] ? ksys_dup3+0x3c0/0x3c0 [ 3174.570280][T29533] ? find_held_lock+0x2d/0x110 [ 3174.575033][T29533] ? vfs_write+0x342/0x5c0 [ 3174.579478][T29533] ? __fget_light+0x208/0x270 [ 3174.584155][T29533] __sys_sendmsg+0xec/0x1b0 [ 3174.588639][T29533] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3174.593642][T29533] ? vfs_write+0x15b/0x5c0 [ 3174.598042][T29533] ? trace_hardirqs_off_caller+0x55/0x230 [ 3174.603803][T29533] ? do_syscall_64+0x21/0x7d0 [ 3174.608467][T29533] do_syscall_64+0xf6/0x7d0 [ 3174.612956][T29533] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3174.618865][T29533] RIP: 0033:0x45c849 [ 3174.622766][T29533] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3174.642355][T29533] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3174.650749][T29533] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3174.658710][T29533] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3174.666676][T29533] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3174.674640][T29533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3174.682607][T29533] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000001c [ 3174.696389][T29533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:27 executing program 1 (fault-call:1 fault-nth:29): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3174.751264][T29539] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x30a, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x82, &(0x7f00000001c0)={r8}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r8, 0x64, &(0x7f0000001180)=[@in6={0xa, 0x4e24, 0x25d, @dev={0xfe, 0x80, [], 0x38}, 0x8000}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x80000001}, @in6={0xa, 0x4e24, 0x9, @rand_addr="44c62639e2dd40650dc8e9b5c64158ab", 0x5}]}, &(0x7f0000001200)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x82, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r4, 0x1000, "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"}, &(0x7f0000000000)=0x1008) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r9}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1_to_bond\x00', 0x10}) [ 3174.878046][T29547] FAULT_INJECTION: forcing a failure. [ 3174.878046][T29547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3174.891286][T29547] CPU: 0 PID: 29547 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3174.900048][T29547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3174.910107][T29547] Call Trace: [ 3174.913415][T29547] dump_stack+0x188/0x20d [ 3174.917765][T29547] should_fail.cold+0x5/0xa [ 3174.922285][T29547] ? fault_create_debugfs_attr+0x140/0x140 [ 3174.928123][T29547] ? __lock_acquire+0x14bd/0x3ca0 [ 3174.933164][T29547] __alloc_pages_nodemask+0x17a/0x820 [ 3174.938548][T29547] ? ___sys_sendmsg+0x100/0x170 [ 3174.943411][T29547] ? __sys_sendmsg+0xec/0x1b0 [ 3174.948091][T29547] ? do_syscall_64+0xf6/0x7d0 [ 3174.952781][T29547] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3174.958863][T29547] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3174.964590][T29547] ? find_held_lock+0x2d/0x110 [ 3174.969384][T29547] cache_grow_begin+0x8c/0xc30 [ 3174.974161][T29547] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3174.979632][T29547] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3174.985450][T29547] __kmalloc_node_track_caller+0x38/0x60 [ 3174.991083][T29547] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3174.996457][T29547] __alloc_skb+0xef/0x5a0 [ 3175.000792][T29547] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3175.006350][T29547] ? if_nlmsg_size+0x541/0xa70 [ 3175.011126][T29547] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3175.016439][T29547] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3175.021920][T29547] rtmsg_ifinfo+0x7f/0xa0 [ 3175.026266][T29547] netdev_state_change+0x121/0x140 [ 3175.031384][T29547] ? netdev_notify_peers+0xc0/0xc0 [ 3175.036508][T29547] ? dev_change_xdp_fd+0x2fb/0x600 [ 3175.041633][T29547] do_setlink+0x2d6d/0x35e0 [ 3175.046150][T29547] ? rtnl_getlink+0xab0/0xab0 [ 3175.050826][T29547] ? find_held_lock+0x2d/0x110 [ 3175.055641][T29547] ? is_bpf_text_address+0xa9/0x160 [ 3175.060856][T29547] ? mark_lock+0xbc/0x1220 [ 3175.065288][T29547] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3175.071191][T29547] ? __nla_validate_parse+0x2af/0x1cd0 [ 3175.076664][T29547] ? nla_memcpy+0xa0/0xa0 [ 3175.081011][T29547] ? __nla_parse+0x2e/0x60 [ 3175.085441][T29547] __rtnl_newlink+0xc96/0x1590 [ 3175.090220][T29547] ? rtnl_link_unregister+0x240/0x240 [ 3175.095592][T29547] ? __bpf_address_lookup+0x290/0x290 [ 3175.100962][T29547] ? is_bpf_text_address+0xcb/0x160 [ 3175.106159][T29547] ? kernel_text_address+0x6e/0xe0 [ 3175.111278][T29547] ? __kernel_text_address+0x9/0x30 [ 3175.116482][T29547] ? unwind_get_return_address+0x5a/0xa0 [ 3175.122119][T29547] ? profile_setup.cold+0xc1/0xc1 [ 3175.127150][T29547] ? arch_stack_walk+0x84/0xd0 [ 3175.131935][T29547] ? stack_trace_save+0x8c/0xc0 [ 3175.136798][T29547] ? stack_trace_consume_entry+0x160/0x160 [ 3175.142675][T29547] ? rtnl_newlink+0x46/0xa0 [ 3175.147187][T29547] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3175.152743][T29547] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3175.158735][T29547] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3175.164554][T29547] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3175.170115][T29547] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3175.175219][T29547] rtnl_newlink+0x64/0xa0 [ 3175.179536][T29547] ? __rtnl_newlink+0x1590/0x1590 [ 3175.184548][T29547] rtnetlink_rcv_msg+0x44e/0xad0 [ 3175.189488][T29547] ? rtnl_bridge_getlink+0x870/0x870 [ 3175.194887][T29547] ? mark_held_locks+0xe0/0xe0 [ 3175.199643][T29547] ? netlink_deliver_tap+0x146/0xb50 [ 3175.204922][T29547] netlink_rcv_skb+0x15a/0x410 [ 3175.209686][T29547] ? rtnl_bridge_getlink+0x870/0x870 [ 3175.214965][T29547] ? netlink_ack+0xa80/0xa80 [ 3175.219575][T29547] netlink_unicast+0x537/0x740 [ 3175.224341][T29547] ? netlink_attachskb+0x810/0x810 [ 3175.229441][T29547] ? _copy_from_iter_full+0x25c/0x870 [ 3175.234800][T29547] ? __phys_addr_symbol+0x2c/0x70 [ 3175.239811][T29547] ? __check_object_size+0x171/0x437 [ 3175.245087][T29547] netlink_sendmsg+0x882/0xe10 [ 3175.249847][T29547] ? aa_af_perm+0x260/0x260 [ 3175.254358][T29547] ? netlink_unicast+0x740/0x740 [ 3175.259305][T29547] ? netlink_unicast+0x740/0x740 [ 3175.264362][T29547] sock_sendmsg+0xcf/0x120 [ 3175.268772][T29547] ____sys_sendmsg+0x6b9/0x7d0 [ 3175.273531][T29547] ? kernel_sendmsg+0x50/0x50 [ 3175.278213][T29547] ___sys_sendmsg+0x100/0x170 [ 3175.282881][T29547] ? sendmsg_copy_msghdr+0x70/0x70 [ 3175.287994][T29547] ? __fget_files+0x329/0x4f0 [ 3175.292663][T29547] ? ksys_dup3+0x3c0/0x3c0 [ 3175.297063][T29547] ? find_held_lock+0x2d/0x110 [ 3175.301814][T29547] ? vfs_write+0x342/0x5c0 [ 3175.306217][T29547] ? __fget_light+0x208/0x270 [ 3175.310880][T29547] __sys_sendmsg+0xec/0x1b0 [ 3175.315370][T29547] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3175.320394][T29547] ? vfs_write+0x15b/0x5c0 [ 3175.324802][T29547] ? trace_hardirqs_off_caller+0x55/0x230 [ 3175.330505][T29547] ? do_syscall_64+0x21/0x7d0 [ 3175.335171][T29547] do_syscall_64+0xf6/0x7d0 [ 3175.339668][T29547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3175.345543][T29547] RIP: 0033:0x45c849 [ 3175.349421][T29547] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3175.369019][T29547] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 09:06:27 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00f0ffffff"], 0x34}}, 0x0) 09:06:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000030000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3175.377530][T29547] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3175.385501][T29547] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3175.393462][T29547] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3175.401435][T29547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3175.409396][T29547] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000001d 09:06:28 executing program 1 (fault-call:1 fault-nth:30): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3175.468867][T29547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3175.484814][T29543] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3175.596547][T29558] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3175.609088][T29560] FAULT_INJECTION: forcing a failure. [ 3175.609088][T29560] name failslab, interval 1, probability 0, space 0, times 0 [ 3175.625351][T29560] CPU: 0 PID: 29560 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3175.634044][T29560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3175.644362][T29560] Call Trace: [ 3175.647659][T29560] dump_stack+0x188/0x20d [ 3175.652018][T29560] should_fail.cold+0x5/0xa [ 3175.656511][T29560] ? fault_create_debugfs_attr+0x140/0x140 [ 3175.662311][T29560] should_failslab+0x5/0xf [ 3175.666721][T29560] kmem_cache_alloc_node+0x25c/0x760 [ 3175.671996][T29560] ? br_get_linkxstats_size+0x390/0x390 [ 3175.677527][T29560] ? lock_downgrade+0x7f0/0x7f0 [ 3175.682365][T29560] __alloc_skb+0xba/0x5a0 [ 3175.686678][T29560] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3175.692209][T29560] ? if_nlmsg_size+0x541/0xa70 [ 3175.696960][T29560] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3175.702242][T29560] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3175.707779][T29560] rtmsg_ifinfo+0x7f/0xa0 [ 3175.712114][T29560] netdev_state_change+0x121/0x140 [ 3175.717208][T29560] ? netdev_notify_peers+0xc0/0xc0 [ 3175.722317][T29560] ? dev_change_xdp_fd+0x2fb/0x600 [ 3175.727436][T29560] do_setlink+0x2d6d/0x35e0 [ 3175.731964][T29560] ? rtnl_getlink+0xab0/0xab0 [ 3175.736634][T29560] ? find_held_lock+0x2d/0x110 [ 3175.741396][T29560] ? is_bpf_text_address+0xa9/0x160 [ 3175.746593][T29560] ? mark_lock+0xbc/0x1220 [ 3175.751004][T29560] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3175.756882][T29560] ? __nla_validate_parse+0x2af/0x1cd0 [ 3175.762335][T29560] ? nla_memcpy+0xa0/0xa0 [ 3175.766651][T29560] ? __nla_parse+0x2e/0x60 [ 3175.771055][T29560] __rtnl_newlink+0xc96/0x1590 [ 3175.775813][T29560] ? rtnl_link_unregister+0x240/0x240 [ 3175.781175][T29560] ? __bpf_address_lookup+0x290/0x290 [ 3175.786546][T29560] ? is_bpf_text_address+0xcb/0x160 [ 3175.791744][T29560] ? kernel_text_address+0x6e/0xe0 [ 3175.796839][T29560] ? __kernel_text_address+0x9/0x30 [ 3175.802022][T29560] ? unwind_get_return_address+0x5a/0xa0 [ 3175.807635][T29560] ? profile_setup.cold+0xc1/0xc1 [ 3175.812649][T29560] ? arch_stack_walk+0x84/0xd0 [ 3175.817401][T29560] ? stack_trace_save+0x8c/0xc0 [ 3175.822238][T29560] ? stack_trace_consume_entry+0x160/0x160 [ 3175.828072][T29560] ? rtnl_newlink+0x46/0xa0 [ 3175.832562][T29560] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3175.838090][T29560] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3175.844055][T29560] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3175.849846][T29560] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3175.855387][T29560] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3175.860482][T29560] rtnl_newlink+0x64/0xa0 [ 3175.864796][T29560] ? __rtnl_newlink+0x1590/0x1590 [ 3175.869801][T29560] rtnetlink_rcv_msg+0x44e/0xad0 [ 3175.874725][T29560] ? rtnl_bridge_getlink+0x870/0x870 [ 3175.880000][T29560] ? mark_held_locks+0xe0/0xe0 [ 3175.884753][T29560] ? netlink_deliver_tap+0x146/0xb50 [ 3175.890025][T29560] netlink_rcv_skb+0x15a/0x410 [ 3175.894772][T29560] ? rtnl_bridge_getlink+0x870/0x870 [ 3175.900040][T29560] ? netlink_ack+0xa80/0xa80 [ 3175.904625][T29560] netlink_unicast+0x537/0x740 [ 3175.909405][T29560] ? netlink_attachskb+0x810/0x810 [ 3175.914507][T29560] ? _copy_from_iter_full+0x25c/0x870 [ 3175.920006][T29560] ? __phys_addr_symbol+0x2c/0x70 [ 3175.925024][T29560] ? __check_object_size+0x171/0x437 [ 3175.930303][T29560] netlink_sendmsg+0x882/0xe10 [ 3175.935058][T29560] ? aa_af_perm+0x260/0x260 [ 3175.939547][T29560] ? netlink_unicast+0x740/0x740 [ 3175.944477][T29560] ? netlink_unicast+0x740/0x740 [ 3175.949400][T29560] sock_sendmsg+0xcf/0x120 [ 3175.953804][T29560] ____sys_sendmsg+0x6b9/0x7d0 [ 3175.958553][T29560] ? kernel_sendmsg+0x50/0x50 [ 3175.963227][T29560] ___sys_sendmsg+0x100/0x170 [ 3175.967889][T29560] ? sendmsg_copy_msghdr+0x70/0x70 [ 3175.972992][T29560] ? __fget_files+0x329/0x4f0 [ 3175.977657][T29560] ? ksys_dup3+0x3c0/0x3c0 [ 3175.982054][T29560] ? find_held_lock+0x2d/0x110 [ 3175.986817][T29560] ? vfs_write+0x342/0x5c0 [ 3175.991220][T29560] ? __fget_light+0x208/0x270 [ 3175.995893][T29560] __sys_sendmsg+0xec/0x1b0 [ 3176.000382][T29560] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3176.005388][T29560] ? vfs_write+0x15b/0x5c0 [ 3176.009795][T29560] ? trace_hardirqs_off_caller+0x55/0x230 [ 3176.015539][T29560] ? do_syscall_64+0x21/0x7d0 [ 3176.020229][T29560] do_syscall_64+0xf6/0x7d0 [ 3176.024731][T29560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3176.030613][T29560] RIP: 0033:0x45c849 [ 3176.034494][T29560] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3176.054085][T29560] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3176.062479][T29560] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3176.070434][T29560] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3176.078510][T29560] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3176.086590][T29560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:06:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000038000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3176.094557][T29560] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000001e 09:06:28 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0002000000"], 0x34}}, 0x0) [ 3176.149445][T29560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0xf0ffffff00000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x82, &(0x7f00000001c0)={r4}, 0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r4, 0x0, 0x0, 0x3}, 0x10) 09:06:29 executing program 1 (fault-call:1 fault-nth:31): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000073000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x894f0000) [ 3176.454635][T29579] FAULT_INJECTION: forcing a failure. [ 3176.454635][T29579] name failslab, interval 1, probability 0, space 0, times 0 [ 3176.481534][T29579] CPU: 0 PID: 29579 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3176.490267][T29579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3176.500315][T29579] Call Trace: [ 3176.503948][T29579] dump_stack+0x188/0x20d [ 3176.508267][T29579] should_fail.cold+0x5/0xa [ 3176.512764][T29579] ? fault_create_debugfs_attr+0x140/0x140 [ 3176.518563][T29579] should_failslab+0x5/0xf [ 3176.522966][T29579] kmem_cache_alloc_node+0x25c/0x760 [ 3176.528284][T29579] ? br_get_linkxstats_size+0x390/0x390 [ 3176.533814][T29579] ? lock_downgrade+0x7f0/0x7f0 [ 3176.538669][T29579] __alloc_skb+0xba/0x5a0 [ 3176.542992][T29579] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3176.548546][T29579] ? if_nlmsg_size+0x541/0xa70 [ 3176.553316][T29579] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3176.558599][T29579] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3176.564056][T29579] rtmsg_ifinfo+0x7f/0xa0 [ 3176.568381][T29579] netdev_state_change+0x121/0x140 [ 3176.573482][T29579] ? netdev_notify_peers+0xc0/0xc0 [ 3176.578583][T29579] ? dev_change_xdp_fd+0x2fb/0x600 [ 3176.583685][T29579] do_setlink+0x2d6d/0x35e0 [ 3176.588190][T29579] ? rtnl_getlink+0xab0/0xab0 [ 3176.592850][T29579] ? find_held_lock+0x2d/0x110 [ 3176.597608][T29579] ? is_bpf_text_address+0xa9/0x160 [ 3176.602802][T29579] ? mark_lock+0xbc/0x1220 [ 3176.607200][T29579] ? mark_lock+0xbc/0x1220 [ 3176.611616][T29579] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3176.617493][T29579] ? __nla_validate_parse+0x2af/0x1cd0 [ 3176.622941][T29579] ? nla_memcpy+0xa0/0xa0 [ 3176.627251][T29579] ? __nla_parse+0x2e/0x60 [ 3176.631660][T29579] __rtnl_newlink+0xc96/0x1590 [ 3176.636417][T29579] ? rtnl_link_unregister+0x240/0x240 [ 3176.641769][T29579] ? __bpf_address_lookup+0x290/0x290 [ 3176.647129][T29579] ? is_bpf_text_address+0xcb/0x160 [ 3176.652316][T29579] ? kernel_text_address+0x6e/0xe0 [ 3176.657413][T29579] ? __kernel_text_address+0x9/0x30 [ 3176.662598][T29579] ? unwind_get_return_address+0x5a/0xa0 [ 3176.668209][T29579] ? profile_setup.cold+0xc1/0xc1 [ 3176.673214][T29579] ? arch_stack_walk+0x84/0xd0 [ 3176.677970][T29579] ? stack_trace_save+0x8c/0xc0 [ 3176.682805][T29579] ? stack_trace_consume_entry+0x160/0x160 [ 3176.688630][T29579] ? rtnl_newlink+0x46/0xa0 [ 3176.693116][T29579] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3176.698644][T29579] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3176.704611][T29579] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3176.710403][T29579] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3176.715936][T29579] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3176.721030][T29579] rtnl_newlink+0x64/0xa0 [ 3176.725347][T29579] ? __rtnl_newlink+0x1590/0x1590 [ 3176.730368][T29579] rtnetlink_rcv_msg+0x44e/0xad0 [ 3176.735295][T29579] ? rtnl_bridge_getlink+0x870/0x870 [ 3176.740567][T29579] ? mark_held_locks+0xe0/0xe0 [ 3176.745329][T29579] ? netlink_deliver_tap+0x146/0xb50 [ 3176.750602][T29579] netlink_rcv_skb+0x15a/0x410 [ 3176.755361][T29579] ? rtnl_bridge_getlink+0x870/0x870 [ 3176.760636][T29579] ? netlink_ack+0xa80/0xa80 [ 3176.765225][T29579] netlink_unicast+0x537/0x740 [ 3176.769987][T29579] ? netlink_attachskb+0x810/0x810 [ 3176.775093][T29579] ? _copy_from_iter_full+0x25c/0x870 [ 3176.780450][T29579] ? __phys_addr_symbol+0x2c/0x70 [ 3176.785472][T29579] ? __check_object_size+0x171/0x437 [ 3176.790776][T29579] netlink_sendmsg+0x882/0xe10 [ 3176.795550][T29579] ? aa_af_perm+0x260/0x260 [ 3176.800043][T29579] ? netlink_unicast+0x740/0x740 [ 3176.804976][T29579] ? netlink_unicast+0x740/0x740 [ 3176.809913][T29579] sock_sendmsg+0xcf/0x120 [ 3176.814321][T29579] ____sys_sendmsg+0x6b9/0x7d0 [ 3176.819087][T29579] ? kernel_sendmsg+0x50/0x50 [ 3176.823762][T29579] ___sys_sendmsg+0x100/0x170 [ 3176.828429][T29579] ? sendmsg_copy_msghdr+0x70/0x70 [ 3176.833537][T29579] ? __fget_files+0x329/0x4f0 [ 3176.838204][T29579] ? ksys_dup3+0x3c0/0x3c0 [ 3176.842601][T29579] ? find_held_lock+0x2d/0x110 [ 3176.847349][T29579] ? vfs_write+0x342/0x5c0 [ 3176.851755][T29579] ? __fget_light+0x208/0x270 [ 3176.856420][T29579] __sys_sendmsg+0xec/0x1b0 [ 3176.860908][T29579] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3176.865916][T29579] ? vfs_write+0x15b/0x5c0 [ 3176.870325][T29579] ? trace_hardirqs_off_caller+0x55/0x230 [ 3176.876029][T29579] ? do_syscall_64+0x21/0x7d0 [ 3176.880689][T29579] do_syscall_64+0xf6/0x7d0 [ 3176.885190][T29579] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3176.891063][T29579] RIP: 0033:0x45c849 [ 3176.894942][T29579] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3176.914529][T29579] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3176.922922][T29579] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3176.930874][T29579] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3176.938828][T29579] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3176.946782][T29579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 09:06:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000002000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3176.954748][T29579] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000001f 09:06:29 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0003000000"], 0x34}}, 0x0) 09:06:29 executing program 1 (fault-call:1 fault-nth:32): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3177.059906][T29579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3177.087445][T29586] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3177.271092][T29602] FAULT_INJECTION: forcing a failure. [ 3177.271092][T29602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3177.284330][T29602] CPU: 0 PID: 29602 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3177.292998][T29602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3177.303042][T29602] Call Trace: [ 3177.306330][T29602] dump_stack+0x188/0x20d [ 3177.310648][T29602] should_fail.cold+0x5/0xa [ 3177.315160][T29602] ? fault_create_debugfs_attr+0x140/0x140 [ 3177.320977][T29602] __alloc_pages_nodemask+0x17a/0x820 [ 3177.326353][T29602] ? inet6_fill_ifla6_attrs+0x1a3a/0x1fb0 [ 3177.332178][T29602] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3177.337886][T29602] ? mark_lock+0xbc/0x1220 [ 3177.342293][T29602] ? __nla_reserve+0x9b/0xc0 [ 3177.346876][T29602] cache_grow_begin+0x8c/0xc30 [ 3177.351633][T29602] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3177.357082][T29602] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3177.362877][T29602] ? __nla_reserve+0x9b/0xc0 [ 3177.367457][T29602] __kmalloc_node_track_caller+0x38/0x60 [ 3177.373076][T29602] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3177.378435][T29602] pskb_expand_head+0x148/0x1020 [ 3177.383381][T29602] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3177.389192][T29602] netlink_trim+0x1ea/0x240 [ 3177.393700][T29602] netlink_broadcast_filtered+0x5f/0xd40 [ 3177.399332][T29602] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3177.404989][T29602] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3177.410454][T29602] nlmsg_notify+0x90/0x250 [ 3177.414874][T29602] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3177.420324][T29602] rtmsg_ifinfo+0x7f/0xa0 [ 3177.424651][T29602] netdev_state_change+0x121/0x140 [ 3177.429747][T29602] ? netdev_notify_peers+0xc0/0xc0 [ 3177.434845][T29602] ? dev_change_xdp_fd+0x2fb/0x600 [ 3177.440037][T29602] do_setlink+0x2d6d/0x35e0 [ 3177.444531][T29602] ? rtnl_getlink+0xab0/0xab0 [ 3177.449189][T29602] ? find_held_lock+0x2d/0x110 [ 3177.453938][T29602] ? is_bpf_text_address+0xa9/0x160 [ 3177.459121][T29602] ? mark_lock+0xbc/0x1220 [ 3177.463535][T29602] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3177.469412][T29602] ? __nla_validate_parse+0x2af/0x1cd0 [ 3177.474870][T29602] ? nla_memcpy+0xa0/0xa0 [ 3177.479186][T29602] ? __nla_parse+0x2e/0x60 [ 3177.483589][T29602] __rtnl_newlink+0xc96/0x1590 [ 3177.488462][T29602] ? rtnl_link_unregister+0x240/0x240 [ 3177.493818][T29602] ? __bpf_address_lookup+0x290/0x290 [ 3177.499180][T29602] ? is_bpf_text_address+0xcb/0x160 [ 3177.504491][T29602] ? kernel_text_address+0x6e/0xe0 [ 3177.509832][T29602] ? __kernel_text_address+0x9/0x30 [ 3177.515038][T29602] ? unwind_get_return_address+0x5a/0xa0 [ 3177.520675][T29602] ? profile_setup.cold+0xc1/0xc1 [ 3177.525708][T29602] ? arch_stack_walk+0x84/0xd0 [ 3177.530477][T29602] ? stack_trace_save+0x8c/0xc0 [ 3177.535324][T29602] ? stack_trace_consume_entry+0x160/0x160 [ 3177.541161][T29602] ? rtnl_newlink+0x46/0xa0 [ 3177.545666][T29602] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3177.551197][T29602] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3177.557174][T29602] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3177.562969][T29602] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3177.568511][T29602] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3177.573609][T29602] rtnl_newlink+0x64/0xa0 [ 3177.577937][T29602] ? __rtnl_newlink+0x1590/0x1590 [ 3177.582968][T29602] rtnetlink_rcv_msg+0x44e/0xad0 [ 3177.587890][T29602] ? rtnl_bridge_getlink+0x870/0x870 [ 3177.593164][T29602] ? mark_held_locks+0xe0/0xe0 [ 3177.597919][T29602] ? netlink_deliver_tap+0x146/0xb50 [ 3177.603190][T29602] netlink_rcv_skb+0x15a/0x410 [ 3177.607940][T29602] ? rtnl_bridge_getlink+0x870/0x870 [ 3177.613227][T29602] ? netlink_ack+0xa80/0xa80 [ 3177.617841][T29602] netlink_unicast+0x537/0x740 [ 3177.622619][T29602] ? netlink_attachskb+0x810/0x810 [ 3177.627723][T29602] ? _copy_from_iter_full+0x25c/0x870 [ 3177.633083][T29602] ? __phys_addr_symbol+0x2c/0x70 [ 3177.638094][T29602] ? __check_object_size+0x171/0x437 [ 3177.643370][T29602] netlink_sendmsg+0x882/0xe10 [ 3177.648126][T29602] ? aa_af_perm+0x260/0x260 [ 3177.652615][T29602] ? netlink_unicast+0x740/0x740 [ 3177.657549][T29602] ? netlink_unicast+0x740/0x740 [ 3177.662477][T29602] sock_sendmsg+0xcf/0x120 [ 3177.666883][T29602] ____sys_sendmsg+0x6b9/0x7d0 [ 3177.671631][T29602] ? kernel_sendmsg+0x50/0x50 [ 3177.676303][T29602] ___sys_sendmsg+0x100/0x170 [ 3177.680968][T29602] ? sendmsg_copy_msghdr+0x70/0x70 [ 3177.686084][T29602] ? __fget_files+0x329/0x4f0 [ 3177.690750][T29602] ? ksys_dup3+0x3c0/0x3c0 [ 3177.695151][T29602] ? find_held_lock+0x2d/0x110 [ 3177.699913][T29602] ? vfs_write+0x342/0x5c0 [ 3177.704317][T29602] ? __fget_light+0x208/0x270 [ 3177.708987][T29602] __sys_sendmsg+0xec/0x1b0 [ 3177.713475][T29602] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3177.718485][T29602] ? vfs_write+0x15b/0x5c0 [ 3177.722890][T29602] ? trace_hardirqs_off_caller+0x55/0x230 [ 3177.728592][T29602] ? do_syscall_64+0x21/0x7d0 [ 3177.733269][T29602] do_syscall_64+0xf6/0x7d0 [ 3177.737768][T29602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3177.743900][T29602] RIP: 0033:0x45c849 [ 3177.747792][T29602] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:06:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000008000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3177.767376][T29602] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3177.775772][T29602] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3177.783812][T29602] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3177.791766][T29602] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3177.799720][T29602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3177.807676][T29602] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000020 [ 3177.838970][T29602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:30 executing program 1 (fault-call:1 fault-nth:33): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3177.927207][T29586] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3178.018705][T29609] FAULT_INJECTION: forcing a failure. [ 3178.018705][T29609] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3178.031952][T29609] CPU: 1 PID: 29609 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3178.040632][T29609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3178.050806][T29609] Call Trace: [ 3178.054112][T29609] dump_stack+0x188/0x20d [ 3178.058490][T29609] should_fail.cold+0x5/0xa [ 3178.063012][T29609] ? fault_create_debugfs_attr+0x140/0x140 [ 3178.068829][T29609] ? __lock_acquire+0x14bd/0x3ca0 [ 3178.073855][T29609] __alloc_pages_nodemask+0x17a/0x820 [ 3178.079288][T29609] ? ___sys_sendmsg+0x100/0x170 [ 3178.084127][T29609] ? __sys_sendmsg+0xec/0x1b0 [ 3178.088788][T29609] ? do_syscall_64+0xf6/0x7d0 [ 3178.093455][T29609] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3178.099521][T29609] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3178.105234][T29609] ? find_held_lock+0x2d/0x110 [ 3178.110052][T29609] cache_grow_begin+0x8c/0xc30 09:06:30 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0004000000"], 0x34}}, 0x0) 09:06:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000a000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3178.114858][T29609] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3178.120303][T29609] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3178.126133][T29609] __kmalloc_node_track_caller+0x38/0x60 [ 3178.131783][T29609] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3178.137184][T29609] __alloc_skb+0xef/0x5a0 [ 3178.141526][T29609] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3178.147208][T29609] ? if_nlmsg_size+0x541/0xa70 [ 3178.152000][T29609] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3178.157301][T29609] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3178.162772][T29609] rtmsg_ifinfo+0x7f/0xa0 [ 3178.167121][T29609] netdev_state_change+0x121/0x140 [ 3178.172249][T29609] ? netdev_notify_peers+0xc0/0xc0 [ 3178.177383][T29609] ? dev_change_xdp_fd+0x2fb/0x600 [ 3178.182514][T29609] do_setlink+0x2d6d/0x35e0 [ 3178.187032][T29609] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3178.192593][T29609] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3178.198585][T29609] ? rtnl_getlink+0xab0/0xab0 [ 3178.203278][T29609] ? update_load_avg+0x1329/0x1b40 [ 3178.208410][T29609] ? find_held_lock+0x2d/0x110 [ 3178.213179][T29609] ? load_balance+0xd75/0x2b60 [ 3178.217962][T29609] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3178.223856][T29609] ? __nla_validate_parse+0x2af/0x1cd0 [ 3178.229318][T29609] ? nla_memcpy+0xa0/0xa0 [ 3178.233648][T29609] ? __nla_parse+0x2e/0x60 [ 3178.238073][T29609] __rtnl_newlink+0xc96/0x1590 [ 3178.242836][T29609] ? rtnl_link_unregister+0x240/0x240 [ 3178.248209][T29609] ? __bpf_address_lookup+0x290/0x290 [ 3178.253591][T29609] ? is_bpf_text_address+0xcb/0x160 [ 3178.258781][T29609] ? kernel_text_address+0x6e/0xe0 [ 3178.263886][T29609] ? __kernel_text_address+0x9/0x30 [ 3178.269074][T29609] ? unwind_get_return_address+0x5a/0xa0 [ 3178.274689][T29609] ? profile_setup.cold+0xc1/0xc1 [ 3178.279697][T29609] ? arch_stack_walk+0x84/0xd0 [ 3178.284454][T29609] ? stack_trace_save+0x8c/0xc0 [ 3178.289287][T29609] ? stack_trace_consume_entry+0x160/0x160 [ 3178.295073][T29609] ? __lock_acquire+0x80b/0x3ca0 [ 3178.300029][T29609] ? rtnl_newlink+0x46/0xa0 [ 3178.304516][T29609] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3178.310046][T29609] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3178.316011][T29609] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3178.321819][T29609] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3178.327350][T29609] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3178.332448][T29609] rtnl_newlink+0x64/0xa0 [ 3178.336763][T29609] ? __rtnl_newlink+0x1590/0x1590 [ 3178.341772][T29609] rtnetlink_rcv_msg+0x44e/0xad0 [ 3178.346694][T29609] ? rtnl_bridge_getlink+0x870/0x870 [ 3178.351970][T29609] ? mark_held_locks+0xe0/0xe0 [ 3178.356729][T29609] ? netlink_deliver_tap+0x146/0xb50 [ 3178.362007][T29609] netlink_rcv_skb+0x15a/0x410 [ 3178.366758][T29609] ? rtnl_bridge_getlink+0x870/0x870 [ 3178.372029][T29609] ? netlink_ack+0xa80/0xa80 [ 3178.376739][T29609] netlink_unicast+0x537/0x740 [ 3178.381502][T29609] ? netlink_attachskb+0x810/0x810 [ 3178.386617][T29609] ? _copy_from_iter_full+0x25c/0x870 [ 3178.392006][T29609] ? __phys_addr_symbol+0x2c/0x70 [ 3178.397025][T29609] ? __check_object_size+0x171/0x437 [ 3178.402334][T29609] netlink_sendmsg+0x882/0xe10 [ 3178.407091][T29609] ? aa_af_perm+0x260/0x260 [ 3178.411584][T29609] ? netlink_unicast+0x740/0x740 [ 3178.416519][T29609] ? netlink_unicast+0x740/0x740 [ 3178.421457][T29609] sock_sendmsg+0xcf/0x120 [ 3178.425859][T29609] ____sys_sendmsg+0x6b9/0x7d0 [ 3178.430627][T29609] ? kernel_sendmsg+0x50/0x50 [ 3178.435303][T29609] ___sys_sendmsg+0x100/0x170 [ 3178.439969][T29609] ? sendmsg_copy_msghdr+0x70/0x70 [ 3178.445073][T29609] ? __fget_files+0x329/0x4f0 [ 3178.449736][T29609] ? ksys_dup3+0x3c0/0x3c0 [ 3178.454133][T29609] ? find_held_lock+0x2d/0x110 [ 3178.458881][T29609] ? vfs_write+0x342/0x5c0 [ 3178.463425][T29609] ? __fget_light+0x208/0x270 [ 3178.468105][T29609] __sys_sendmsg+0xec/0x1b0 [ 3178.472714][T29609] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3178.477731][T29609] ? vfs_write+0x15b/0x5c0 [ 3178.482143][T29609] ? trace_hardirqs_off_caller+0x55/0x230 [ 3178.487861][T29609] ? do_syscall_64+0x21/0x7d0 [ 3178.492531][T29609] do_syscall_64+0xf6/0x7d0 [ 3178.497028][T29609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3178.502917][T29609] RIP: 0033:0x45c849 [ 3178.506797][T29609] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3178.526381][T29609] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3178.534775][T29609] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3178.542728][T29609] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3178.550681][T29609] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3178.558633][T29609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3178.566586][T29609] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000021 [ 3178.629070][T29609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0xfeffffff00000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000f000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:31 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0005000000"], 0x34}}, 0x0) 09:06:31 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xee0f0000) 09:06:31 executing program 1 (fault-call:1 fault-nth:34): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x7274c1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:06:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000000)={0x8, 'veth0_to_bridge\x00', {'ip6gretap0\x00'}, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) [ 3178.985566][T29632] FAULT_INJECTION: forcing a failure. [ 3178.985566][T29632] name failslab, interval 1, probability 0, space 0, times 0 [ 3179.030654][T29632] CPU: 0 PID: 29632 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3179.039410][T29632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3179.049469][T29632] Call Trace: [ 3179.052773][T29632] dump_stack+0x188/0x20d [ 3179.057229][T29632] should_fail.cold+0x5/0xa [ 3179.061752][T29632] ? fault_create_debugfs_attr+0x140/0x140 [ 3179.067565][T29632] ? nla_put+0xfe/0x130 [ 3179.071731][T29632] ? find_held_lock+0x2d/0x110 [ 3179.076585][T29632] should_failslab+0x5/0xf [ 3179.081009][T29632] kmem_cache_alloc_node_trace+0x59/0x790 [ 3179.086741][T29632] ? memset+0x20/0x40 [ 3179.090744][T29632] ? __nla_reserve+0x9b/0xc0 [ 3179.095432][T29632] __kmalloc_node_track_caller+0x38/0x60 [ 3179.101091][T29632] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3179.106480][T29632] pskb_expand_head+0x148/0x1020 [ 3179.111443][T29632] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3179.117260][T29632] netlink_trim+0x1ea/0x240 [ 3179.121779][T29632] netlink_broadcast_filtered+0x5f/0xd40 [ 3179.127600][T29632] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3179.133169][T29632] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3179.138738][T29632] nlmsg_notify+0x90/0x250 [ 3179.143186][T29632] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3179.148657][T29632] rtmsg_ifinfo+0x7f/0xa0 [ 3179.153102][T29632] netdev_state_change+0x121/0x140 [ 3179.158294][T29632] ? netdev_notify_peers+0xc0/0xc0 [ 3179.163397][T29632] ? dev_change_xdp_fd+0x2fb/0x600 [ 3179.168498][T29632] do_setlink+0x2d6d/0x35e0 [ 3179.173012][T29632] ? rtnl_getlink+0xab0/0xab0 [ 3179.177686][T29632] ? find_held_lock+0x2d/0x110 [ 3179.182450][T29632] ? is_bpf_text_address+0xa9/0x160 [ 3179.187680][T29632] ? mark_lock+0xbc/0x1220 [ 3179.192103][T29632] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3179.198008][T29632] ? __nla_validate_parse+0x2af/0x1cd0 [ 3179.203579][T29632] ? nla_memcpy+0xa0/0xa0 [ 3179.208109][T29632] ? __nla_parse+0x2e/0x60 [ 3179.212530][T29632] __rtnl_newlink+0xc96/0x1590 [ 3179.217315][T29632] ? rtnl_link_unregister+0x240/0x240 [ 3179.222692][T29632] ? __bpf_address_lookup+0x290/0x290 [ 3179.228055][T29632] ? is_bpf_text_address+0xcb/0x160 [ 3179.233258][T29632] ? kernel_text_address+0x6e/0xe0 [ 3179.238406][T29632] ? __kernel_text_address+0x9/0x30 [ 3179.243650][T29632] ? unwind_get_return_address+0x5a/0xa0 [ 3179.249269][T29632] ? profile_setup.cold+0xc1/0xc1 [ 3179.254292][T29632] ? arch_stack_walk+0x84/0xd0 [ 3179.259087][T29632] ? stack_trace_save+0x8c/0xc0 [ 3179.263939][T29632] ? stack_trace_consume_entry+0x160/0x160 [ 3179.269763][T29632] ? rtnl_newlink+0x46/0xa0 [ 3179.274273][T29632] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3179.279973][T29632] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3179.286048][T29632] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3179.291867][T29632] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3179.297438][T29632] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3179.302656][T29632] rtnl_newlink+0x64/0xa0 [ 3179.306987][T29632] ? __rtnl_newlink+0x1590/0x1590 [ 3179.312015][T29632] rtnetlink_rcv_msg+0x44e/0xad0 [ 3179.316970][T29632] ? rtnl_bridge_getlink+0x870/0x870 [ 3179.322361][T29632] ? mark_held_locks+0xe0/0xe0 [ 3179.327121][T29632] ? netlink_deliver_tap+0x146/0xb50 [ 3179.332498][T29632] netlink_rcv_skb+0x15a/0x410 [ 3179.337277][T29632] ? rtnl_bridge_getlink+0x870/0x870 [ 3179.342565][T29632] ? netlink_ack+0xa80/0xa80 [ 3179.347291][T29632] netlink_unicast+0x537/0x740 [ 3179.352181][T29632] ? netlink_attachskb+0x810/0x810 [ 3179.357301][T29632] ? _copy_from_iter_full+0x25c/0x870 [ 3179.362673][T29632] ? __phys_addr_symbol+0x2c/0x70 [ 3179.367687][T29632] ? __check_object_size+0x171/0x437 [ 3179.372974][T29632] netlink_sendmsg+0x882/0xe10 [ 3179.377868][T29632] ? aa_af_perm+0x260/0x260 [ 3179.382389][T29632] ? netlink_unicast+0x740/0x740 [ 3179.387435][T29632] ? netlink_unicast+0x740/0x740 [ 3179.392372][T29632] sock_sendmsg+0xcf/0x120 [ 3179.396904][T29632] ____sys_sendmsg+0x6b9/0x7d0 [ 3179.401709][T29632] ? kernel_sendmsg+0x50/0x50 [ 3179.406397][T29632] ___sys_sendmsg+0x100/0x170 [ 3179.411066][T29632] ? sendmsg_copy_msghdr+0x70/0x70 [ 3179.416195][T29632] ? __fget_files+0x329/0x4f0 [ 3179.420887][T29632] ? ksys_dup3+0x3c0/0x3c0 [ 3179.425309][T29632] ? find_held_lock+0x2d/0x110 [ 3179.430077][T29632] ? vfs_write+0x342/0x5c0 [ 3179.434497][T29632] ? __fget_light+0x208/0x270 [ 3179.439179][T29632] __sys_sendmsg+0xec/0x1b0 [ 3179.443717][T29632] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3179.448724][T29632] ? vfs_write+0x15b/0x5c0 [ 3179.453142][T29632] ? trace_hardirqs_off_caller+0x55/0x230 [ 3179.458966][T29632] ? do_syscall_64+0x21/0x7d0 [ 3179.463760][T29632] do_syscall_64+0xf6/0x7d0 [ 3179.468257][T29632] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3179.474143][T29632] RIP: 0033:0x45c849 [ 3179.478032][T29632] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3179.497629][T29632] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3179.506049][T29632] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3179.514030][T29632] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3179.522422][T29632] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 09:06:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000018000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3179.530394][T29632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3179.538399][T29632] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000022 [ 3179.555048][T29632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:32 executing program 1 (fault-call:1 fault-nth:35): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3179.665728][T29637] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:32 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0006000000"], 0x34}}, 0x0) [ 3179.755174][T29651] FAULT_INJECTION: forcing a failure. [ 3179.755174][T29651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3179.768416][T29651] CPU: 0 PID: 29651 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3179.777082][T29651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3179.787128][T29651] Call Trace: [ 3179.790417][T29651] dump_stack+0x188/0x20d [ 3179.794757][T29651] should_fail.cold+0x5/0xa [ 3179.799250][T29651] ? fault_create_debugfs_attr+0x140/0x140 [ 3179.805042][T29651] ? __lock_acquire+0x14bd/0x3ca0 [ 3179.810057][T29651] __alloc_pages_nodemask+0x17a/0x820 [ 3179.815420][T29651] ? ___sys_sendmsg+0x100/0x170 [ 3179.820253][T29651] ? __sys_sendmsg+0xec/0x1b0 [ 3179.824928][T29651] ? do_syscall_64+0xf6/0x7d0 [ 3179.829587][T29651] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3179.835640][T29651] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3179.841348][T29651] ? find_held_lock+0x2d/0x110 [ 3179.846107][T29651] cache_grow_begin+0x8c/0xc30 [ 3179.850856][T29651] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3179.856302][T29651] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3179.862101][T29651] __kmalloc_node_track_caller+0x38/0x60 [ 3179.867718][T29651] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3179.873147][T29651] __alloc_skb+0xef/0x5a0 [ 3179.877484][T29651] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3179.883028][T29651] ? if_nlmsg_size+0x541/0xa70 [ 3179.887958][T29651] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3179.893239][T29651] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3179.898697][T29651] rtmsg_ifinfo+0x7f/0xa0 [ 3179.903014][T29651] netdev_state_change+0x121/0x140 [ 3179.908107][T29651] ? netdev_notify_peers+0xc0/0xc0 [ 3179.913201][T29651] ? dev_change_xdp_fd+0x2fb/0x600 [ 3179.918308][T29651] do_setlink+0x2d6d/0x35e0 [ 3179.922802][T29651] ? rtnl_getlink+0xab0/0xab0 [ 3179.927465][T29651] ? update_load_avg+0xa54/0x1b40 [ 3179.932475][T29651] ? find_held_lock+0x2d/0x110 [ 3179.937220][T29651] ? load_balance+0xd75/0x2b60 [ 3179.942023][T29651] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3179.947898][T29651] ? __nla_validate_parse+0x2af/0x1cd0 [ 3179.953345][T29651] ? nla_memcpy+0xa0/0xa0 [ 3179.957689][T29651] ? __nla_parse+0x2e/0x60 [ 3179.962095][T29651] __rtnl_newlink+0xc96/0x1590 [ 3179.966850][T29651] ? rtnl_link_unregister+0x240/0x240 [ 3179.972206][T29651] ? __bpf_address_lookup+0x290/0x290 [ 3179.977572][T29651] ? is_bpf_text_address+0xcb/0x160 [ 3179.982801][T29651] ? kernel_text_address+0x6e/0xe0 [ 3179.987922][T29651] ? __kernel_text_address+0x9/0x30 [ 3179.993134][T29651] ? unwind_get_return_address+0x5a/0xa0 [ 3179.998761][T29651] ? profile_setup.cold+0xc1/0xc1 [ 3180.003775][T29651] ? arch_stack_walk+0x84/0xd0 [ 3180.008536][T29651] ? stack_trace_save+0x8c/0xc0 [ 3180.013384][T29651] ? stack_trace_consume_entry+0x160/0x160 [ 3180.019213][T29651] ? rtnl_newlink+0x46/0xa0 [ 3180.023702][T29651] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3180.029231][T29651] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3180.035196][T29651] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3180.040988][T29651] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3180.046536][T29651] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3180.051635][T29651] rtnl_newlink+0x64/0xa0 [ 3180.055959][T29651] ? __rtnl_newlink+0x1590/0x1590 [ 3180.060970][T29651] rtnetlink_rcv_msg+0x44e/0xad0 [ 3180.065904][T29651] ? rtnl_bridge_getlink+0x870/0x870 [ 3180.071174][T29651] ? mark_held_locks+0xe0/0xe0 [ 3180.075922][T29651] ? netlink_deliver_tap+0x146/0xb50 [ 3180.081192][T29651] netlink_rcv_skb+0x15a/0x410 [ 3180.085943][T29651] ? rtnl_bridge_getlink+0x870/0x870 [ 3180.091222][T29651] ? netlink_ack+0xa80/0xa80 [ 3180.095806][T29651] netlink_unicast+0x537/0x740 [ 3180.100557][T29651] ? netlink_attachskb+0x810/0x810 [ 3180.105651][T29651] ? _copy_from_iter_full+0x25c/0x870 [ 3180.111006][T29651] ? __phys_addr_symbol+0x2c/0x70 [ 3180.116021][T29651] ? __check_object_size+0x171/0x437 [ 3180.121295][T29651] netlink_sendmsg+0x882/0xe10 [ 3180.126051][T29651] ? aa_af_perm+0x260/0x260 [ 3180.130625][T29651] ? netlink_unicast+0x740/0x740 [ 3180.135564][T29651] ? netlink_unicast+0x740/0x740 [ 3180.140493][T29651] sock_sendmsg+0xcf/0x120 [ 3180.144909][T29651] ____sys_sendmsg+0x6b9/0x7d0 [ 3180.149660][T29651] ? kernel_sendmsg+0x50/0x50 [ 3180.154333][T29651] ___sys_sendmsg+0x100/0x170 [ 3180.158995][T29651] ? sendmsg_copy_msghdr+0x70/0x70 [ 3180.164108][T29651] ? __fget_files+0x329/0x4f0 [ 3180.168781][T29651] ? ksys_dup3+0x3c0/0x3c0 [ 3180.173179][T29651] ? find_held_lock+0x2d/0x110 [ 3180.178289][T29651] ? vfs_write+0x342/0x5c0 [ 3180.182717][T29651] ? __fget_light+0x208/0x270 [ 3180.187419][T29651] __sys_sendmsg+0xec/0x1b0 [ 3180.192032][T29651] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3180.197063][T29651] ? vfs_write+0x15b/0x5c0 [ 3180.201485][T29651] ? trace_hardirqs_off_caller+0x55/0x230 [ 3180.207203][T29651] ? do_syscall_64+0x21/0x7d0 [ 3180.211882][T29651] do_syscall_64+0xf6/0x7d0 [ 3180.216379][T29651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3180.222255][T29651] RIP: 0033:0x45c849 [ 3180.226152][T29651] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3180.245859][T29651] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 09:06:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000025000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3180.254257][T29651] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3180.262220][T29651] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3180.270200][T29651] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3180.278178][T29651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3180.286153][T29651] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000023 [ 3180.385109][T29651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:33 executing program 1 (fault-call:1 fault-nth:36): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3180.554518][T29664] FAULT_INJECTION: forcing a failure. [ 3180.554518][T29664] name failslab, interval 1, probability 0, space 0, times 0 [ 3180.567810][T29664] CPU: 1 PID: 29664 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3180.576604][T29664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3180.586670][T29664] Call Trace: [ 3180.589986][T29664] dump_stack+0x188/0x20d [ 3180.594327][T29664] should_fail.cold+0x5/0xa [ 3180.598874][T29664] ? fault_create_debugfs_attr+0x140/0x140 [ 3180.604854][T29664] should_failslab+0x5/0xf [ 3180.609288][T29664] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3180.615114][T29664] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3180.621118][T29664] __kmalloc_node_track_caller+0x38/0x60 [ 3180.626797][T29664] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3180.632181][T29664] __alloc_skb+0xef/0x5a0 [ 3180.636606][T29664] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3180.642135][T29664] ? if_nlmsg_size+0x541/0xa70 [ 3180.646929][T29664] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3180.652263][T29664] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3180.657705][T29664] rtmsg_ifinfo+0x7f/0xa0 [ 3180.662021][T29664] netdev_state_change+0x121/0x140 [ 3180.667127][T29664] ? netdev_notify_peers+0xc0/0xc0 [ 3180.672229][T29664] ? dev_change_xdp_fd+0x2fb/0x600 [ 3180.677380][T29664] do_setlink+0x2d6d/0x35e0 [ 3180.681883][T29664] ? rtnl_getlink+0xab0/0xab0 [ 3180.686538][T29664] ? find_held_lock+0x2d/0x110 [ 3180.691282][T29664] ? is_bpf_text_address+0xa9/0x160 [ 3180.696468][T29664] ? mark_lock+0xbc/0x1220 [ 3180.700878][T29664] ? mark_lock+0xbc/0x1220 [ 3180.705345][T29664] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3180.711232][T29664] ? __nla_validate_parse+0x2af/0x1cd0 [ 3180.716679][T29664] ? nla_memcpy+0xa0/0xa0 [ 3180.720994][T29664] ? __nla_parse+0x2e/0x60 [ 3180.725405][T29664] __rtnl_newlink+0xc96/0x1590 [ 3180.730182][T29664] ? rtnl_link_unregister+0x240/0x240 [ 3180.735551][T29664] ? __bpf_address_lookup+0x290/0x290 [ 3180.740923][T29664] ? is_bpf_text_address+0xcb/0x160 [ 3180.746118][T29664] ? kernel_text_address+0x6e/0xe0 [ 3180.751209][T29664] ? __kernel_text_address+0x9/0x30 [ 3180.756389][T29664] ? unwind_get_return_address+0x5a/0xa0 [ 3180.762002][T29664] ? profile_setup.cold+0xc1/0xc1 [ 3180.767006][T29664] ? arch_stack_walk+0x84/0xd0 [ 3180.771756][T29664] ? stack_trace_save+0x8c/0xc0 [ 3180.776586][T29664] ? stack_trace_consume_entry+0x160/0x160 [ 3180.782417][T29664] ? rtnl_newlink+0x46/0xa0 [ 3180.787013][T29664] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3180.792542][T29664] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3180.798515][T29664] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3180.804316][T29664] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3180.809865][T29664] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3180.815015][T29664] rtnl_newlink+0x64/0xa0 [ 3180.819340][T29664] ? __rtnl_newlink+0x1590/0x1590 [ 3180.824390][T29664] rtnetlink_rcv_msg+0x44e/0xad0 [ 3180.829339][T29664] ? rtnl_bridge_getlink+0x870/0x870 [ 3180.834628][T29664] ? mark_held_locks+0xe0/0xe0 [ 3180.839389][T29664] ? netlink_deliver_tap+0x146/0xb50 [ 3180.844660][T29664] netlink_rcv_skb+0x15a/0x410 [ 3180.849409][T29664] ? rtnl_bridge_getlink+0x870/0x870 [ 3180.854690][T29664] ? netlink_ack+0xa80/0xa80 [ 3180.859268][T29664] netlink_unicast+0x537/0x740 [ 3180.864028][T29664] ? netlink_attachskb+0x810/0x810 [ 3180.869119][T29664] ? _copy_from_iter_full+0x25c/0x870 [ 3180.874495][T29664] ? __phys_addr_symbol+0x2c/0x70 [ 3180.879513][T29664] ? __check_object_size+0x171/0x437 [ 3180.884780][T29664] netlink_sendmsg+0x882/0xe10 [ 3180.889525][T29664] ? aa_af_perm+0x260/0x260 [ 3180.894019][T29664] ? netlink_unicast+0x740/0x740 [ 3180.898967][T29664] ? netlink_unicast+0x740/0x740 [ 3180.903883][T29664] sock_sendmsg+0xcf/0x120 [ 3180.908283][T29664] ____sys_sendmsg+0x6b9/0x7d0 [ 3180.913028][T29664] ? kernel_sendmsg+0x50/0x50 [ 3180.917705][T29664] ___sys_sendmsg+0x100/0x170 [ 3180.922365][T29664] ? sendmsg_copy_msghdr+0x70/0x70 [ 3180.927471][T29664] ? __fget_files+0x329/0x4f0 [ 3180.932130][T29664] ? ksys_dup3+0x3c0/0x3c0 [ 3180.936545][T29664] ? find_held_lock+0x2d/0x110 [ 3180.941288][T29664] ? vfs_write+0x342/0x5c0 [ 3180.945689][T29664] ? __fget_light+0x208/0x270 [ 3180.950362][T29664] __sys_sendmsg+0xec/0x1b0 [ 3180.954857][T29664] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3180.959856][T29664] ? vfs_write+0x15b/0x5c0 [ 3180.964255][T29664] ? trace_hardirqs_off_caller+0x55/0x230 [ 3180.969953][T29664] ? do_syscall_64+0x21/0x7d0 [ 3180.974627][T29664] do_syscall_64+0xf6/0x7d0 [ 3180.979111][T29664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3180.984994][T29664] RIP: 0033:0x45c849 [ 3180.988883][T29664] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3181.008476][T29664] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3181.016866][T29664] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3181.024816][T29664] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3181.032766][T29664] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3181.040714][T29664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3181.048677][T29664] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000024 [ 3181.064811][T29664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0xffffff7f00000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000028000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:33 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0007000000"], 0x34}}, 0x0) 09:06:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfc0f0000) 09:06:34 executing program 1 (fault-call:1 fault-nth:37): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf250700000014000500be6dd0ac9b3b93f1280bed87c2bcf85214000500000000000000000000000000000000001200010076657468305f746f5f626f6e6400000008000800ffffffff14000500fe8000000000000000000000000000bb"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_to_bond\x00', 0x20}) 09:06:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000030000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3181.300704][T29677] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3181.408274][T29678] FAULT_INJECTION: forcing a failure. [ 3181.408274][T29678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3181.421637][T29678] CPU: 1 PID: 29678 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3181.430314][T29678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3181.440379][T29678] Call Trace: [ 3181.443685][T29678] dump_stack+0x188/0x20d [ 3181.448061][T29678] should_fail.cold+0x5/0xa [ 3181.452589][T29678] ? fault_create_debugfs_attr+0x140/0x140 [ 3181.458416][T29678] ? __lock_acquire+0x14bd/0x3ca0 [ 3181.463458][T29678] __alloc_pages_nodemask+0x17a/0x820 [ 3181.468841][T29678] ? ___sys_sendmsg+0x100/0x170 [ 3181.473704][T29678] ? __sys_sendmsg+0xec/0x1b0 [ 3181.478396][T29678] ? do_syscall_64+0xf6/0x7d0 [ 3181.483086][T29678] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3181.489164][T29678] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3181.494896][T29678] ? find_held_lock+0x2d/0x110 [ 3181.499688][T29678] cache_grow_begin+0x8c/0xc30 [ 3181.504466][T29678] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3181.509942][T29678] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3181.515778][T29678] __kmalloc_node_track_caller+0x38/0x60 [ 3181.521430][T29678] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3181.526818][T29678] __alloc_skb+0xef/0x5a0 [ 3181.531160][T29678] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3181.536722][T29678] ? if_nlmsg_size+0x541/0xa70 [ 3181.541504][T29678] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3181.546802][T29678] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3181.552282][T29678] rtmsg_ifinfo+0x7f/0xa0 [ 3181.556626][T29678] netdev_state_change+0x121/0x140 [ 3181.561749][T29678] ? netdev_notify_peers+0xc0/0xc0 [ 3181.566855][T29678] ? dev_change_xdp_fd+0x2fb/0x600 [ 3181.571968][T29678] do_setlink+0x2d6d/0x35e0 [ 3181.576469][T29678] ? rtnl_getlink+0xab0/0xab0 [ 3181.581134][T29678] ? find_held_lock+0x2d/0x110 [ 3181.585891][T29678] ? is_bpf_text_address+0xa9/0x160 [ 3181.592306][T29678] ? mark_lock+0xbc/0x1220 [ 3181.596722][T29678] ? mark_lock+0xbc/0x1220 [ 3181.601162][T29678] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3181.607064][T29678] ? __nla_validate_parse+0x2af/0x1cd0 [ 3181.612518][T29678] ? nla_memcpy+0xa0/0xa0 [ 3181.616841][T29678] ? __nla_parse+0x2e/0x60 [ 3181.621250][T29678] __rtnl_newlink+0xc96/0x1590 [ 3181.626009][T29678] ? rtnl_link_unregister+0x240/0x240 [ 3181.631365][T29678] ? __bpf_address_lookup+0x290/0x290 [ 3181.636749][T29678] ? is_bpf_text_address+0xcb/0x160 [ 3181.641947][T29678] ? kernel_text_address+0x6e/0xe0 [ 3181.647046][T29678] ? __kernel_text_address+0x9/0x30 [ 3181.652229][T29678] ? unwind_get_return_address+0x5a/0xa0 [ 3181.657844][T29678] ? profile_setup.cold+0xc1/0xc1 [ 3181.662967][T29678] ? arch_stack_walk+0x84/0xd0 [ 3181.667734][T29678] ? stack_trace_save+0x8c/0xc0 [ 3181.672601][T29678] ? stack_trace_consume_entry+0x160/0x160 [ 3181.678455][T29678] ? rtnl_newlink+0x46/0xa0 [ 3181.682951][T29678] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3181.688486][T29678] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3181.694453][T29678] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3181.700250][T29678] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3181.705802][T29678] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3181.710902][T29678] rtnl_newlink+0x64/0xa0 [ 3181.715231][T29678] ? __rtnl_newlink+0x1590/0x1590 [ 3181.720253][T29678] rtnetlink_rcv_msg+0x44e/0xad0 [ 3181.725180][T29678] ? rtnl_bridge_getlink+0x870/0x870 [ 3181.730453][T29678] ? mark_held_locks+0xe0/0xe0 [ 3181.735214][T29678] ? netlink_deliver_tap+0x146/0xb50 [ 3181.740486][T29678] netlink_rcv_skb+0x15a/0x410 [ 3181.745251][T29678] ? rtnl_bridge_getlink+0x870/0x870 [ 3181.750522][T29678] ? netlink_ack+0xa80/0xa80 [ 3181.755125][T29678] netlink_unicast+0x537/0x740 [ 3181.759893][T29678] ? netlink_attachskb+0x810/0x810 [ 3181.764985][T29678] ? _copy_from_iter_full+0x25c/0x870 [ 3181.770366][T29678] ? __phys_addr_symbol+0x2c/0x70 [ 3181.775415][T29678] ? __check_object_size+0x171/0x437 [ 3181.780697][T29678] netlink_sendmsg+0x882/0xe10 [ 3181.785460][T29678] ? aa_af_perm+0x260/0x260 [ 3181.789972][T29678] ? netlink_unicast+0x740/0x740 [ 3181.794930][T29678] ? netlink_unicast+0x740/0x740 [ 3181.799857][T29678] sock_sendmsg+0xcf/0x120 [ 3181.804262][T29678] ____sys_sendmsg+0x6b9/0x7d0 [ 3181.809016][T29678] ? kernel_sendmsg+0x50/0x50 [ 3181.813688][T29678] ___sys_sendmsg+0x100/0x170 [ 3181.818358][T29678] ? sendmsg_copy_msghdr+0x70/0x70 [ 3181.823462][T29678] ? __fget_files+0x329/0x4f0 [ 3181.828214][T29678] ? ksys_dup3+0x3c0/0x3c0 [ 3181.832614][T29678] ? find_held_lock+0x2d/0x110 [ 3181.837365][T29678] ? vfs_write+0x342/0x5c0 [ 3181.841772][T29678] ? __fget_light+0x208/0x270 [ 3181.846438][T29678] __sys_sendmsg+0xec/0x1b0 [ 3181.850928][T29678] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3181.855939][T29678] ? vfs_write+0x15b/0x5c0 [ 3181.860346][T29678] ? trace_hardirqs_off_caller+0x55/0x230 [ 3181.866052][T29678] ? do_syscall_64+0x21/0x7d0 [ 3181.870719][T29678] do_syscall_64+0xf6/0x7d0 [ 3181.875335][T29678] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3181.881230][T29678] RIP: 0033:0x45c849 [ 3181.885151][T29678] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:06:34 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0008000000"], 0x34}}, 0x0) [ 3181.904771][T29678] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3181.913171][T29678] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3181.921150][T29678] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3181.929112][T29678] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3181.937066][T29678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3181.945027][T29678] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000025 09:06:34 executing program 1 (fault-call:1 fault-nth:38): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3181.971404][T29678] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3182.079896][T29702] FAULT_INJECTION: forcing a failure. [ 3182.079896][T29702] name failslab, interval 1, probability 0, space 0, times 0 [ 3182.098943][T29702] CPU: 1 PID: 29702 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3182.107647][T29702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3182.117709][T29702] Call Trace: [ 3182.121137][T29702] dump_stack+0x188/0x20d [ 3182.125486][T29702] should_fail.cold+0x5/0xa [ 3182.130010][T29702] ? fault_create_debugfs_attr+0x140/0x140 [ 3182.135866][T29702] should_failslab+0x5/0xf [ 3182.140292][T29702] kmem_cache_alloc_node+0x25c/0x760 [ 3182.145585][T29702] ? br_get_linkxstats_size+0x390/0x390 [ 3182.151150][T29702] ? lock_downgrade+0x7f0/0x7f0 [ 3182.156016][T29702] __alloc_skb+0xba/0x5a0 [ 3182.160367][T29702] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3182.165924][T29702] ? if_nlmsg_size+0x541/0xa70 [ 3182.170697][T29702] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3182.175996][T29702] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3182.181469][T29702] rtmsg_ifinfo+0x7f/0xa0 [ 3182.185822][T29702] netdev_state_change+0x121/0x140 [ 3182.190943][T29702] ? netdev_notify_peers+0xc0/0xc0 [ 3182.196070][T29702] ? dev_change_xdp_fd+0x2fb/0x600 [ 3182.201197][T29702] do_setlink+0x2d6d/0x35e0 [ 3182.205861][T29702] ? rtnl_getlink+0xab0/0xab0 [ 3182.210569][T29702] ? find_held_lock+0x2d/0x110 [ 3182.215344][T29702] ? is_bpf_text_address+0xa9/0x160 [ 3182.220537][T29702] ? mark_lock+0xbc/0x1220 [ 3182.224981][T29702] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3182.230868][T29702] ? __nla_validate_parse+0x2af/0x1cd0 [ 3182.236322][T29702] ? nla_memcpy+0xa0/0xa0 [ 3182.240641][T29702] ? __nla_parse+0x2e/0x60 [ 3182.245048][T29702] __rtnl_newlink+0xc96/0x1590 [ 3182.249810][T29702] ? rtnl_link_unregister+0x240/0x240 [ 3182.255182][T29702] ? __bpf_address_lookup+0x290/0x290 [ 3182.260543][T29702] ? is_bpf_text_address+0xcb/0x160 [ 3182.265731][T29702] ? kernel_text_address+0x6e/0xe0 [ 3182.270828][T29702] ? __kernel_text_address+0x9/0x30 [ 3182.276024][T29702] ? unwind_get_return_address+0x5a/0xa0 [ 3182.281641][T29702] ? profile_setup.cold+0xc1/0xc1 [ 3182.286648][T29702] ? arch_stack_walk+0x84/0xd0 [ 3182.291404][T29702] ? stack_trace_save+0x8c/0xc0 [ 3182.296241][T29702] ? stack_trace_consume_entry+0x160/0x160 [ 3182.302070][T29702] ? rtnl_newlink+0x46/0xa0 [ 3182.306565][T29702] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3182.312229][T29702] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3182.318215][T29702] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3182.324040][T29702] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3182.329671][T29702] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3182.334797][T29702] rtnl_newlink+0x64/0xa0 [ 3182.339116][T29702] ? __rtnl_newlink+0x1590/0x1590 [ 3182.344127][T29702] rtnetlink_rcv_msg+0x44e/0xad0 [ 3182.349052][T29702] ? rtnl_bridge_getlink+0x870/0x870 [ 3182.354449][T29702] ? mark_held_locks+0xe0/0xe0 [ 3182.359235][T29702] ? netlink_deliver_tap+0x146/0xb50 [ 3182.364523][T29702] netlink_rcv_skb+0x15a/0x410 [ 3182.369288][T29702] ? rtnl_bridge_getlink+0x870/0x870 [ 3182.374581][T29702] ? netlink_ack+0xa80/0xa80 [ 3182.379179][T29702] netlink_unicast+0x537/0x740 [ 3182.383940][T29702] ? netlink_attachskb+0x810/0x810 [ 3182.389035][T29702] ? _copy_from_iter_full+0x25c/0x870 [ 3182.394411][T29702] ? __phys_addr_symbol+0x2c/0x70 [ 3182.399442][T29702] ? __check_object_size+0x171/0x437 [ 3182.404735][T29702] netlink_sendmsg+0x882/0xe10 [ 3182.409617][T29702] ? aa_af_perm+0x260/0x260 [ 3182.414114][T29702] ? netlink_unicast+0x740/0x740 [ 3182.419052][T29702] ? netlink_unicast+0x740/0x740 [ 3182.423985][T29702] sock_sendmsg+0xcf/0x120 [ 3182.428397][T29702] ____sys_sendmsg+0x6b9/0x7d0 [ 3182.433177][T29702] ? kernel_sendmsg+0x50/0x50 [ 3182.437853][T29702] ___sys_sendmsg+0x100/0x170 [ 3182.442523][T29702] ? sendmsg_copy_msghdr+0x70/0x70 [ 3182.447629][T29702] ? __fget_files+0x329/0x4f0 [ 3182.452296][T29702] ? ksys_dup3+0x3c0/0x3c0 [ 3182.456697][T29702] ? find_held_lock+0x2d/0x110 [ 3182.461447][T29702] ? vfs_write+0x342/0x5c0 [ 3182.465855][T29702] ? __fget_light+0x208/0x270 [ 3182.470536][T29702] __sys_sendmsg+0xec/0x1b0 [ 3182.475032][T29702] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3182.480197][T29702] ? vfs_write+0x15b/0x5c0 [ 3182.484630][T29702] ? trace_hardirqs_off_caller+0x55/0x230 [ 3182.490362][T29702] ? do_syscall_64+0x21/0x7d0 [ 3182.495040][T29702] do_syscall_64+0xf6/0x7d0 [ 3182.499538][T29702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3182.505419][T29702] RIP: 0033:0x45c849 [ 3182.509303][T29702] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:06:34 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0010000000"], 0x34}}, 0x0) [ 3182.528893][T29702] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3182.537287][T29702] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3182.545255][T29702] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3182.553221][T29702] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3182.561188][T29702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3182.569142][T29702] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000026 09:06:35 executing program 1 (fault-call:1 fault-nth:39): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3182.596528][T29702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3182.608328][T29699] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 09:06:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) [ 3182.711057][T29699] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3182.743182][T29709] FAULT_INJECTION: forcing a failure. [ 3182.743182][T29709] name failslab, interval 1, probability 0, space 0, times 0 [ 3182.766903][T29709] CPU: 0 PID: 29709 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3182.775624][T29709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3182.785689][T29709] Call Trace: [ 3182.789002][T29709] dump_stack+0x188/0x20d [ 3182.793360][T29709] should_fail.cold+0x5/0xa [ 3182.797885][T29709] ? fault_create_debugfs_attr+0x140/0x140 [ 3182.803711][T29709] should_failslab+0x5/0xf [ 3182.808136][T29709] kmem_cache_alloc_node+0x25c/0x760 [ 3182.813438][T29709] ? br_get_linkxstats_size+0x390/0x390 [ 3182.819001][T29709] ? lock_downgrade+0x7f0/0x7f0 [ 3182.823870][T29709] __alloc_skb+0xba/0x5a0 [ 3182.828216][T29709] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3182.833929][T29709] ? if_nlmsg_size+0x541/0xa70 [ 3182.838698][T29709] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3182.843977][T29709] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3182.849445][T29709] rtmsg_ifinfo+0x7f/0xa0 [ 3182.853770][T29709] netdev_state_change+0x121/0x140 [ 3182.858868][T29709] ? netdev_notify_peers+0xc0/0xc0 [ 3182.864015][T29709] ? dev_change_xdp_fd+0x2fb/0x600 [ 3182.869131][T29709] do_setlink+0x2d6d/0x35e0 [ 3182.873664][T29709] ? rtnl_getlink+0xab0/0xab0 [ 3182.878338][T29709] ? find_held_lock+0x2d/0x110 [ 3182.883098][T29709] ? is_bpf_text_address+0xa9/0x160 [ 3182.888293][T29709] ? mark_lock+0xbc/0x1220 [ 3182.892693][T29709] ? mark_lock+0xbc/0x1220 [ 3182.897093][T29709] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3182.902966][T29709] ? __nla_validate_parse+0x2af/0x1cd0 [ 3182.908415][T29709] ? nla_memcpy+0xa0/0xa0 [ 3182.912731][T29709] ? __nla_parse+0x2e/0x60 [ 3182.917135][T29709] __rtnl_newlink+0xc96/0x1590 [ 3182.921969][T29709] ? rtnl_link_unregister+0x240/0x240 [ 3182.927376][T29709] ? __bpf_address_lookup+0x290/0x290 [ 3182.932793][T29709] ? is_bpf_text_address+0xcb/0x160 [ 3182.937989][T29709] ? kernel_text_address+0x6e/0xe0 [ 3182.943094][T29709] ? __kernel_text_address+0x9/0x30 [ 3182.948294][T29709] ? unwind_get_return_address+0x5a/0xa0 [ 3182.953918][T29709] ? profile_setup.cold+0xc1/0xc1 [ 3182.958939][T29709] ? arch_stack_walk+0x84/0xd0 [ 3182.963768][T29709] ? stack_trace_save+0x8c/0xc0 [ 3182.968608][T29709] ? stack_trace_consume_entry+0x160/0x160 [ 3182.974492][T29709] ? rtnl_newlink+0x46/0xa0 [ 3182.978998][T29709] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3182.984557][T29709] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3182.990549][T29709] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3182.996372][T29709] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3183.001916][T29709] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3183.007130][T29709] rtnl_newlink+0x64/0xa0 [ 3183.011465][T29709] ? __rtnl_newlink+0x1590/0x1590 [ 3183.016485][T29709] rtnetlink_rcv_msg+0x44e/0xad0 [ 3183.021418][T29709] ? rtnl_bridge_getlink+0x870/0x870 [ 3183.026712][T29709] ? mark_held_locks+0xe0/0xe0 [ 3183.031474][T29709] ? netlink_deliver_tap+0x146/0xb50 [ 3183.036752][T29709] netlink_rcv_skb+0x15a/0x410 [ 3183.041511][T29709] ? rtnl_bridge_getlink+0x870/0x870 [ 3183.046792][T29709] ? netlink_ack+0xa80/0xa80 [ 3183.051492][T29709] netlink_unicast+0x537/0x740 [ 3183.056301][T29709] ? netlink_attachskb+0x810/0x810 [ 3183.061400][T29709] ? _copy_from_iter_full+0x25c/0x870 [ 3183.066762][T29709] ? __phys_addr_symbol+0x2c/0x70 [ 3183.071787][T29709] ? __check_object_size+0x171/0x437 [ 3183.077068][T29709] netlink_sendmsg+0x882/0xe10 [ 3183.081830][T29709] ? aa_af_perm+0x260/0x260 [ 3183.086338][T29709] ? netlink_unicast+0x740/0x740 [ 3183.091398][T29709] ? netlink_unicast+0x740/0x740 [ 3183.096327][T29709] sock_sendmsg+0xcf/0x120 [ 3183.100731][T29709] ____sys_sendmsg+0x6b9/0x7d0 [ 3183.105481][T29709] ? kernel_sendmsg+0x50/0x50 [ 3183.110171][T29709] ___sys_sendmsg+0x100/0x170 [ 3183.114861][T29709] ? sendmsg_copy_msghdr+0x70/0x70 [ 3183.119963][T29709] ? __fget_files+0x329/0x4f0 [ 3183.124660][T29709] ? ksys_dup3+0x3c0/0x3c0 [ 3183.129058][T29709] ? find_held_lock+0x2d/0x110 [ 3183.133825][T29709] ? vfs_write+0x342/0x5c0 [ 3183.138245][T29709] ? __fget_light+0x208/0x270 [ 3183.142931][T29709] __sys_sendmsg+0xec/0x1b0 [ 3183.147421][T29709] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3183.152432][T29709] ? vfs_write+0x15b/0x5c0 [ 3183.156850][T29709] ? trace_hardirqs_off_caller+0x55/0x230 [ 3183.162556][T29709] ? do_syscall_64+0x21/0x7d0 [ 3183.167220][T29709] do_syscall_64+0xf6/0x7d0 [ 3183.171709][T29709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3183.177582][T29709] RIP: 0033:0x45c849 [ 3183.181485][T29709] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3183.201129][T29709] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3183.209539][T29709] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3183.217501][T29709] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3183.225517][T29709] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3183.233494][T29709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3183.241456][T29709] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000027 [ 3183.255074][T29709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0xffffffff00000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000038000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:36 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0018000000"], 0x34}}, 0x0) 09:06:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffa888) 09:06:36 executing program 1 (fault-call:1 fault-nth:40): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000073000508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3183.470043][T29723] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) r2 = accept4$rose(r1, 0x0, &(0x7f0000000000), 0x80800) setsockopt$rose(r2, 0x104, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:06:36 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0028000000"], 0x34}}, 0x0) [ 3183.645438][T29725] FAULT_INJECTION: forcing a failure. [ 3183.645438][T29725] name failslab, interval 1, probability 0, space 0, times 0 [ 3183.678496][T29725] CPU: 0 PID: 29725 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3183.687213][T29725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3183.697270][T29725] Call Trace: [ 3183.700563][T29725] dump_stack+0x188/0x20d [ 3183.704890][T29725] should_fail.cold+0x5/0xa [ 3183.709397][T29725] ? fault_create_debugfs_attr+0x140/0x140 [ 3183.715201][T29725] should_failslab+0x5/0xf [ 3183.719608][T29725] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3183.725404][T29725] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3183.731387][T29725] __kmalloc_node_track_caller+0x38/0x60 [ 3183.737031][T29725] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3183.742408][T29725] __alloc_skb+0xef/0x5a0 [ 3183.746739][T29725] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3183.752280][T29725] ? if_nlmsg_size+0x541/0xa70 [ 3183.757044][T29725] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3183.762345][T29725] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3183.767901][T29725] rtmsg_ifinfo+0x7f/0xa0 [ 3183.772226][T29725] netdev_state_change+0x121/0x140 [ 3183.777367][T29725] ? netdev_notify_peers+0xc0/0xc0 [ 3183.782468][T29725] ? dev_change_xdp_fd+0x2fb/0x600 [ 3183.787570][T29725] do_setlink+0x2d6d/0x35e0 [ 3183.792067][T29725] ? rtnl_getlink+0xab0/0xab0 [ 3183.796848][T29725] ? find_held_lock+0x2d/0x110 [ 3183.801612][T29725] ? is_bpf_text_address+0xa9/0x160 [ 3183.806808][T29725] ? mark_lock+0xbc/0x1220 [ 3183.811252][T29725] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3183.817140][T29725] ? __nla_validate_parse+0x2af/0x1cd0 [ 3183.822610][T29725] ? nla_memcpy+0xa0/0xa0 [ 3183.826935][T29725] ? __nla_parse+0x2e/0x60 [ 3183.831351][T29725] __rtnl_newlink+0xc96/0x1590 [ 3183.836121][T29725] ? rtnl_link_unregister+0x240/0x240 [ 3183.841517][T29725] ? __bpf_address_lookup+0x290/0x290 [ 3183.846896][T29725] ? is_bpf_text_address+0xcb/0x160 [ 3183.852088][T29725] ? kernel_text_address+0x6e/0xe0 [ 3183.857185][T29725] ? __kernel_text_address+0x9/0x30 [ 3183.862369][T29725] ? unwind_get_return_address+0x5a/0xa0 [ 3183.867984][T29725] ? profile_setup.cold+0xc1/0xc1 [ 3183.872990][T29725] ? arch_stack_walk+0x84/0xd0 [ 3183.877747][T29725] ? stack_trace_save+0x8c/0xc0 [ 3183.882585][T29725] ? stack_trace_consume_entry+0x160/0x160 [ 3183.888414][T29725] ? rtnl_newlink+0x46/0xa0 [ 3183.892909][T29725] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3183.898438][T29725] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3183.904425][T29725] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3183.910237][T29725] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3183.915793][T29725] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3183.920903][T29725] rtnl_newlink+0x64/0xa0 [ 3183.925238][T29725] ? __rtnl_newlink+0x1590/0x1590 [ 3183.930256][T29725] rtnetlink_rcv_msg+0x44e/0xad0 [ 3183.935185][T29725] ? rtnl_bridge_getlink+0x870/0x870 [ 3183.940465][T29725] ? mark_held_locks+0xe0/0xe0 [ 3183.945238][T29725] ? netlink_deliver_tap+0x146/0xb50 [ 3183.950514][T29725] netlink_rcv_skb+0x15a/0x410 [ 3183.955267][T29725] ? rtnl_bridge_getlink+0x870/0x870 [ 3183.960539][T29725] ? netlink_ack+0xa80/0xa80 [ 3183.965145][T29725] netlink_unicast+0x537/0x740 [ 3183.969899][T29725] ? netlink_attachskb+0x810/0x810 [ 3183.974995][T29725] ? _copy_from_iter_full+0x25c/0x870 [ 3183.980368][T29725] ? __phys_addr_symbol+0x2c/0x70 [ 3183.985379][T29725] ? __check_object_size+0x171/0x437 [ 3183.990656][T29725] netlink_sendmsg+0x882/0xe10 [ 3183.995409][T29725] ? aa_af_perm+0x260/0x260 [ 3183.999900][T29725] ? netlink_unicast+0x740/0x740 [ 3184.004848][T29725] ? netlink_unicast+0x740/0x740 [ 3184.009796][T29725] sock_sendmsg+0xcf/0x120 [ 3184.014219][T29725] ____sys_sendmsg+0x6b9/0x7d0 [ 3184.018978][T29725] ? kernel_sendmsg+0x50/0x50 [ 3184.023676][T29725] ___sys_sendmsg+0x100/0x170 [ 3184.028350][T29725] ? sendmsg_copy_msghdr+0x70/0x70 [ 3184.033461][T29725] ? __fget_files+0x329/0x4f0 [ 3184.038130][T29725] ? ksys_dup3+0x3c0/0x3c0 [ 3184.042556][T29725] ? find_held_lock+0x2d/0x110 [ 3184.047310][T29725] ? vfs_write+0x342/0x5c0 [ 3184.051733][T29725] ? __fget_light+0x208/0x270 [ 3184.056403][T29725] __sys_sendmsg+0xec/0x1b0 [ 3184.060898][T29725] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3184.065912][T29725] ? vfs_write+0x15b/0x5c0 [ 3184.070322][T29725] ? trace_hardirqs_off_caller+0x55/0x230 [ 3184.076028][T29725] ? do_syscall_64+0x21/0x7d0 [ 3184.080691][T29725] do_syscall_64+0xf6/0x7d0 [ 3184.085190][T29725] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3184.091067][T29725] RIP: 0033:0x45c849 [ 3184.094948][T29725] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3184.114536][T29725] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3184.122927][T29725] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3184.130889][T29725] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3184.138842][T29725] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3184.146823][T29725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3184.154794][T29725] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000028 09:06:37 executing program 1 (fault-call:1 fault-nth:41): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3184.276983][T29725] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010020508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3184.435486][T29754] FAULT_INJECTION: forcing a failure. [ 3184.435486][T29754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3184.448859][T29754] CPU: 1 PID: 29754 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3184.457537][T29754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3184.467876][T29754] Call Trace: [ 3184.471184][T29754] dump_stack+0x188/0x20d [ 3184.475622][T29754] should_fail.cold+0x5/0xa [ 3184.480155][T29754] ? fault_create_debugfs_attr+0x140/0x140 [ 3184.485975][T29754] ? __lock_acquire+0x14bd/0x3ca0 [ 3184.491016][T29754] __alloc_pages_nodemask+0x17a/0x820 [ 3184.496401][T29754] ? ___sys_sendmsg+0x100/0x170 [ 3184.501372][T29754] ? __sys_sendmsg+0xec/0x1b0 [ 3184.506073][T29754] ? do_syscall_64+0xf6/0x7d0 [ 3184.510762][T29754] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3184.516845][T29754] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3184.522692][T29754] ? find_held_lock+0x2d/0x110 [ 3184.527484][T29754] cache_grow_begin+0x8c/0xc30 [ 3184.532264][T29754] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3184.537741][T29754] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3184.543597][T29754] __kmalloc_node_track_caller+0x38/0x60 [ 3184.549243][T29754] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3184.554624][T29754] __alloc_skb+0xef/0x5a0 [ 3184.558965][T29754] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3184.564522][T29754] ? if_nlmsg_size+0x541/0xa70 [ 3184.569291][T29754] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3184.574576][T29754] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3184.580042][T29754] rtmsg_ifinfo+0x7f/0xa0 [ 3184.584368][T29754] netdev_state_change+0x121/0x140 [ 3184.589463][T29754] ? netdev_notify_peers+0xc0/0xc0 [ 3184.594565][T29754] ? dev_change_xdp_fd+0x2fb/0x600 [ 3184.599666][T29754] do_setlink+0x2d6d/0x35e0 [ 3184.604162][T29754] ? rtnl_getlink+0xab0/0xab0 [ 3184.608836][T29754] ? find_held_lock+0x2d/0x110 [ 3184.613698][T29754] ? is_bpf_text_address+0xa9/0x160 [ 3184.618915][T29754] ? mark_lock+0xbc/0x1220 [ 3184.623329][T29754] ? mark_lock+0xbc/0x1220 [ 3184.627752][T29754] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3184.633639][T29754] ? __nla_validate_parse+0x2af/0x1cd0 [ 3184.639096][T29754] ? nla_memcpy+0xa0/0xa0 [ 3184.643413][T29754] ? __nla_parse+0x2e/0x60 [ 3184.647822][T29754] __rtnl_newlink+0xc96/0x1590 [ 3184.652597][T29754] ? rtnl_link_unregister+0x240/0x240 [ 3184.658001][T29754] ? __bpf_address_lookup+0x290/0x290 [ 3184.663364][T29754] ? is_bpf_text_address+0xcb/0x160 [ 3184.668547][T29754] ? kernel_text_address+0x6e/0xe0 [ 3184.673643][T29754] ? __kernel_text_address+0x9/0x30 [ 3184.678829][T29754] ? unwind_get_return_address+0x5a/0xa0 [ 3184.684450][T29754] ? profile_setup.cold+0xc1/0xc1 [ 3184.689457][T29754] ? arch_stack_walk+0x84/0xd0 [ 3184.694213][T29754] ? stack_trace_save+0x8c/0xc0 [ 3184.699046][T29754] ? stack_trace_consume_entry+0x160/0x160 [ 3184.704882][T29754] ? rtnl_newlink+0x46/0xa0 [ 3184.709368][T29754] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3184.714895][T29754] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3184.720860][T29754] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3184.726650][T29754] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3184.732180][T29754] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3184.737304][T29754] rtnl_newlink+0x64/0xa0 [ 3184.741618][T29754] ? __rtnl_newlink+0x1590/0x1590 [ 3184.746625][T29754] rtnetlink_rcv_msg+0x44e/0xad0 [ 3184.751548][T29754] ? rtnl_bridge_getlink+0x870/0x870 [ 3184.756826][T29754] ? mark_held_locks+0xe0/0xe0 [ 3184.761577][T29754] ? netlink_deliver_tap+0x146/0xb50 [ 3184.766848][T29754] netlink_rcv_skb+0x15a/0x410 [ 3184.771596][T29754] ? rtnl_bridge_getlink+0x870/0x870 [ 3184.776865][T29754] ? netlink_ack+0xa80/0xa80 [ 3184.781451][T29754] netlink_unicast+0x537/0x740 [ 3184.786210][T29754] ? netlink_attachskb+0x810/0x810 [ 3184.791305][T29754] ? _copy_from_iter_full+0x25c/0x870 [ 3184.796696][T29754] ? __phys_addr_symbol+0x2c/0x70 [ 3184.801726][T29754] ? __check_object_size+0x171/0x437 [ 3184.807042][T29754] netlink_sendmsg+0x882/0xe10 [ 3184.811804][T29754] ? aa_af_perm+0x260/0x260 [ 3184.816313][T29754] ? netlink_unicast+0x740/0x740 [ 3184.821251][T29754] ? netlink_unicast+0x740/0x740 [ 3184.826179][T29754] sock_sendmsg+0xcf/0x120 [ 3184.830583][T29754] ____sys_sendmsg+0x6b9/0x7d0 [ 3184.835357][T29754] ? kernel_sendmsg+0x50/0x50 [ 3184.840027][T29754] ___sys_sendmsg+0x100/0x170 [ 3184.844691][T29754] ? sendmsg_copy_msghdr+0x70/0x70 [ 3184.849796][T29754] ? __fget_files+0x329/0x4f0 [ 3184.854463][T29754] ? ksys_dup3+0x3c0/0x3c0 [ 3184.858859][T29754] ? find_held_lock+0x2d/0x110 [ 3184.863608][T29754] ? vfs_write+0x342/0x5c0 [ 3184.868040][T29754] ? __fget_light+0x208/0x270 [ 3184.872735][T29754] __sys_sendmsg+0xec/0x1b0 [ 3184.877236][T29754] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3184.882263][T29754] ? vfs_write+0x15b/0x5c0 [ 3184.886688][T29754] ? trace_hardirqs_off_caller+0x55/0x230 [ 3184.892410][T29754] ? do_syscall_64+0x21/0x7d0 [ 3184.897080][T29754] do_syscall_64+0xf6/0x7d0 [ 3184.901574][T29754] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3184.907449][T29754] RIP: 0033:0x45c849 [ 3184.911336][T29754] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:06:37 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0030000000"], 0x34}}, 0x0) [ 3184.930928][T29754] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3184.939332][T29754] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3184.947290][T29754] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3184.955247][T29754] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3184.963232][T29754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3184.971201][T29754] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000029 09:06:37 executing program 1 (fault-call:1 fault-nth:42): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3184.982396][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3185.006520][T29754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0xfffffffffffff000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010030508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:37 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0060000000"], 0x34}}, 0x0) [ 3185.210849][T29766] FAULT_INJECTION: forcing a failure. [ 3185.210849][T29766] name failslab, interval 1, probability 0, space 0, times 0 [ 3185.252858][T29766] CPU: 1 PID: 29766 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3185.261583][T29766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3185.271644][T29766] Call Trace: [ 3185.274949][T29766] dump_stack+0x188/0x20d [ 3185.279294][T29766] should_fail.cold+0x5/0xa [ 3185.283814][T29766] ? fault_create_debugfs_attr+0x140/0x140 [ 3185.289636][T29766] should_failslab+0x5/0xf [ 3185.294063][T29766] kmem_cache_alloc_node_trace+0x27c/0x790 [ 3185.299880][T29766] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3185.305889][T29766] __kmalloc_node_track_caller+0x38/0x60 [ 3185.311530][T29766] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3185.316918][T29766] __alloc_skb+0xef/0x5a0 [ 3185.321258][T29766] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3185.326814][T29766] ? if_nlmsg_size+0x541/0xa70 [ 3185.331573][T29766] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3185.336858][T29766] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3185.342305][T29766] rtmsg_ifinfo+0x7f/0xa0 [ 3185.346629][T29766] netdev_state_change+0x121/0x140 [ 3185.351725][T29766] ? netdev_notify_peers+0xc0/0xc0 [ 3185.356820][T29766] ? dev_change_xdp_fd+0x2fb/0x600 [ 3185.361926][T29766] ? dev_disable_lro+0x320/0x320 [ 3185.366869][T29766] do_setlink+0x2d6d/0x35e0 [ 3185.371386][T29766] ? rtnl_getlink+0xab0/0xab0 [ 3185.376097][T29766] ? find_held_lock+0x2d/0x110 [ 3185.380861][T29766] ? is_bpf_text_address+0xa9/0x160 [ 3185.386057][T29766] ? mark_lock+0xbc/0x1220 [ 3185.390460][T29766] ? mark_lock+0xbc/0x1220 [ 3185.394867][T29766] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3185.400742][T29766] ? __nla_validate_parse+0x2af/0x1cd0 [ 3185.406186][T29766] ? nla_memcpy+0xa0/0xa0 [ 3185.410497][T29766] ? __nla_parse+0x2e/0x60 [ 3185.414900][T29766] __rtnl_newlink+0xc96/0x1590 [ 3185.419660][T29766] ? rtnl_link_unregister+0x240/0x240 [ 3185.425031][T29766] ? __bpf_address_lookup+0x290/0x290 [ 3185.430411][T29766] ? is_bpf_text_address+0xcb/0x160 [ 3185.435615][T29766] ? kernel_text_address+0x6e/0xe0 [ 3185.440721][T29766] ? __kernel_text_address+0x9/0x30 [ 3185.446006][T29766] ? unwind_get_return_address+0x5a/0xa0 [ 3185.451659][T29766] ? profile_setup.cold+0xc1/0xc1 [ 3185.456683][T29766] ? arch_stack_walk+0x84/0xd0 [ 3185.461457][T29766] ? stack_trace_save+0x8c/0xc0 [ 3185.466301][T29766] ? stack_trace_consume_entry+0x160/0x160 [ 3185.472149][T29766] ? rtnl_newlink+0x46/0xa0 [ 3185.476659][T29766] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3185.482211][T29766] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3185.488194][T29766] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3185.494087][T29766] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3185.499639][T29766] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3185.504755][T29766] rtnl_newlink+0x64/0xa0 [ 3185.509087][T29766] ? __rtnl_newlink+0x1590/0x1590 [ 3185.514108][T29766] rtnetlink_rcv_msg+0x44e/0xad0 [ 3185.519042][T29766] ? rtnl_bridge_getlink+0x870/0x870 [ 3185.524373][T29766] ? mark_held_locks+0xe0/0xe0 [ 3185.529140][T29766] ? netlink_deliver_tap+0x146/0xb50 [ 3185.534425][T29766] netlink_rcv_skb+0x15a/0x410 [ 3185.539195][T29766] ? rtnl_bridge_getlink+0x870/0x870 [ 3185.544483][T29766] ? netlink_ack+0xa80/0xa80 [ 3185.549075][T29766] netlink_unicast+0x537/0x740 [ 3185.553843][T29766] ? netlink_attachskb+0x810/0x810 [ 3185.558959][T29766] ? _copy_from_iter_full+0x25c/0x870 [ 3185.564346][T29766] ? __phys_addr_symbol+0x2c/0x70 [ 3185.569376][T29766] ? __check_object_size+0x171/0x437 [ 3185.574668][T29766] netlink_sendmsg+0x882/0xe10 [ 3185.579439][T29766] ? aa_af_perm+0x260/0x260 [ 3185.583945][T29766] ? netlink_unicast+0x740/0x740 [ 3185.588903][T29766] ? netlink_unicast+0x740/0x740 [ 3185.593977][T29766] sock_sendmsg+0xcf/0x120 [ 3185.598402][T29766] ____sys_sendmsg+0x6b9/0x7d0 [ 3185.603171][T29766] ? kernel_sendmsg+0x50/0x50 [ 3185.607969][T29766] ___sys_sendmsg+0x100/0x170 [ 3185.612642][T29766] ? sendmsg_copy_msghdr+0x70/0x70 [ 3185.617766][T29766] ? __fget_files+0x329/0x4f0 [ 3185.622436][T29766] ? ksys_dup3+0x3c0/0x3c0 [ 3185.626872][T29766] ? find_held_lock+0x2d/0x110 [ 3185.631638][T29766] ? vfs_write+0x342/0x5c0 [ 3185.636047][T29766] ? __fget_light+0x208/0x270 [ 3185.640716][T29766] __sys_sendmsg+0xec/0x1b0 [ 3185.645212][T29766] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3185.650226][T29766] ? vfs_write+0x15b/0x5c0 [ 3185.654638][T29766] ? trace_hardirqs_off_caller+0x55/0x230 [ 3185.660347][T29766] ? do_syscall_64+0x21/0x7d0 [ 3185.665013][T29766] do_syscall_64+0xf6/0x7d0 [ 3185.669505][T29766] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3185.675414][T29766] RIP: 0033:0x45c849 [ 3185.679308][T29766] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3185.698911][T29766] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3185.707313][T29766] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3185.715268][T29766] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3185.723223][T29766] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3185.731184][T29766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3185.739137][T29766] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000002a [ 3185.754991][T29766] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3185.766246][T29772] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:38 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffca88) 09:06:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010040508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:38 executing program 1 (fault-call:1 fault-nth:43): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3185.984171][T29785] FAULT_INJECTION: forcing a failure. [ 3185.984171][T29785] name failslab, interval 1, probability 0, space 0, times 0 [ 3186.019488][T29785] CPU: 0 PID: 29785 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3186.028200][T29785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3186.038264][T29785] Call Trace: [ 3186.041566][T29785] dump_stack+0x188/0x20d [ 3186.045930][T29785] should_fail.cold+0x5/0xa [ 3186.050456][T29785] ? fault_create_debugfs_attr+0x140/0x140 [ 3186.056288][T29785] should_failslab+0x5/0xf [ 3186.060723][T29785] kmem_cache_alloc_node+0x25c/0x760 [ 3186.066024][T29785] ? br_get_linkxstats_size+0x390/0x390 [ 3186.071590][T29785] ? lock_downgrade+0x7f0/0x7f0 [ 3186.076452][T29785] __alloc_skb+0xba/0x5a0 [ 3186.080794][T29785] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3186.086341][T29785] ? if_nlmsg_size+0x541/0xa70 [ 3186.091187][T29785] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3186.096481][T29785] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3186.101948][T29785] rtmsg_ifinfo+0x7f/0xa0 [ 3186.106286][T29785] netdev_state_change+0x121/0x140 [ 3186.111401][T29785] ? netdev_notify_peers+0xc0/0xc0 [ 3186.116549][T29785] ? dev_change_xdp_fd+0x2fb/0x600 [ 3186.121649][T29785] ? dev_disable_lro+0x320/0x320 [ 3186.126589][T29785] do_setlink+0x2d6d/0x35e0 [ 3186.131081][T29785] ? rtnl_getlink+0xab0/0xab0 [ 3186.135755][T29785] ? find_held_lock+0x2d/0x110 [ 3186.140557][T29785] ? is_bpf_text_address+0xa9/0x160 [ 3186.145841][T29785] ? mark_lock+0xbc/0x1220 [ 3186.150268][T29785] ? mark_lock+0xbc/0x1220 [ 3186.154689][T29785] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3186.160567][T29785] ? __nla_validate_parse+0x2af/0x1cd0 [ 3186.166025][T29785] ? nla_memcpy+0xa0/0xa0 [ 3186.170348][T29785] ? __nla_parse+0x2e/0x60 [ 3186.174751][T29785] __rtnl_newlink+0xc96/0x1590 [ 3186.179564][T29785] ? rtnl_link_unregister+0x240/0x240 [ 3186.184928][T29785] ? __bpf_address_lookup+0x290/0x290 [ 3186.190357][T29785] ? is_bpf_text_address+0xcb/0x160 [ 3186.195545][T29785] ? kernel_text_address+0x6e/0xe0 [ 3186.200644][T29785] ? __kernel_text_address+0x9/0x30 [ 3186.205840][T29785] ? unwind_get_return_address+0x5a/0xa0 [ 3186.211503][T29785] ? profile_setup.cold+0xc1/0xc1 [ 3186.216509][T29785] ? arch_stack_walk+0x84/0xd0 [ 3186.221270][T29785] ? stack_trace_save+0x8c/0xc0 [ 3186.226115][T29785] ? stack_trace_consume_entry+0x160/0x160 [ 3186.231948][T29785] ? rtnl_newlink+0x46/0xa0 [ 3186.236444][T29785] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3186.241982][T29785] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3186.247969][T29785] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3186.253770][T29785] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3186.259300][T29785] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3186.264411][T29785] rtnl_newlink+0x64/0xa0 [ 3186.268732][T29785] ? __rtnl_newlink+0x1590/0x1590 [ 3186.273739][T29785] rtnetlink_rcv_msg+0x44e/0xad0 [ 3186.278660][T29785] ? rtnl_bridge_getlink+0x870/0x870 [ 3186.283952][T29785] ? mark_held_locks+0xe0/0xe0 [ 3186.288711][T29785] ? netlink_deliver_tap+0x146/0xb50 [ 3186.293977][T29785] netlink_rcv_skb+0x15a/0x410 [ 3186.298723][T29785] ? rtnl_bridge_getlink+0x870/0x870 [ 3186.304001][T29785] ? netlink_ack+0xa80/0xa80 [ 3186.308594][T29785] netlink_unicast+0x537/0x740 [ 3186.313345][T29785] ? netlink_attachskb+0x810/0x810 [ 3186.318437][T29785] ? _copy_from_iter_full+0x25c/0x870 [ 3186.323805][T29785] ? __phys_addr_symbol+0x2c/0x70 [ 3186.328835][T29785] ? __check_object_size+0x171/0x437 [ 3186.334110][T29785] netlink_sendmsg+0x882/0xe10 [ 3186.338865][T29785] ? aa_af_perm+0x260/0x260 [ 3186.343362][T29785] ? netlink_unicast+0x740/0x740 [ 3186.348300][T29785] ? netlink_unicast+0x740/0x740 [ 3186.353288][T29785] sock_sendmsg+0xcf/0x120 [ 3186.357695][T29785] ____sys_sendmsg+0x6b9/0x7d0 [ 3186.362460][T29785] ? kernel_sendmsg+0x50/0x50 [ 3186.367144][T29785] ___sys_sendmsg+0x100/0x170 [ 3186.371816][T29785] ? sendmsg_copy_msghdr+0x70/0x70 [ 3186.376957][T29785] ? __fget_files+0x329/0x4f0 [ 3186.381632][T29785] ? ksys_dup3+0x3c0/0x3c0 [ 3186.386066][T29785] ? find_held_lock+0x2d/0x110 [ 3186.390832][T29785] ? vfs_write+0x342/0x5c0 [ 3186.395263][T29785] ? __fget_light+0x208/0x270 [ 3186.399926][T29785] __sys_sendmsg+0xec/0x1b0 [ 3186.404423][T29785] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3186.409444][T29785] ? vfs_write+0x15b/0x5c0 [ 3186.413922][T29785] ? trace_hardirqs_off_caller+0x55/0x230 [ 3186.419625][T29785] ? do_syscall_64+0x21/0x7d0 [ 3186.424297][T29785] do_syscall_64+0xf6/0x7d0 [ 3186.428794][T29785] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3186.434665][T29785] RIP: 0033:0x45c849 [ 3186.438544][T29785] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3186.458132][T29785] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3186.466542][T29785] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3186.474634][T29785] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3186.482598][T29785] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3186.490673][T29785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3186.499843][T29785] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000002b [ 3186.511019][T29785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000180), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x4) 09:06:39 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00f0000000"], 0x34}}, 0x0) 09:06:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010050508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:39 executing program 1 (fault-call:1 fault-nth:44): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3186.707169][T29796] FAULT_INJECTION: forcing a failure. [ 3186.707169][T29796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3186.720497][T29796] CPU: 0 PID: 29796 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3186.729179][T29796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3186.739232][T29796] Call Trace: [ 3186.742527][T29796] dump_stack+0x188/0x20d [ 3186.746875][T29796] should_fail.cold+0x5/0xa [ 3186.751397][T29796] ? fault_create_debugfs_attr+0x140/0x140 [ 3186.757220][T29796] ? __lock_acquire+0x14bd/0x3ca0 [ 3186.762259][T29796] __alloc_pages_nodemask+0x17a/0x820 [ 3186.767629][T29796] ? ___sys_sendmsg+0x100/0x170 [ 3186.772474][T29796] ? __sys_sendmsg+0xec/0x1b0 [ 3186.777163][T29796] ? do_syscall_64+0xf6/0x7d0 [ 3186.781845][T29796] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3186.787926][T29796] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3186.793642][T29796] ? find_held_lock+0x2d/0x110 [ 3186.798409][T29796] cache_grow_begin+0x8c/0xc30 [ 3186.803176][T29796] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3186.808633][T29796] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3186.814449][T29796] __kmalloc_node_track_caller+0x38/0x60 [ 3186.820083][T29796] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3186.825459][T29796] __alloc_skb+0xef/0x5a0 [ 3186.829803][T29796] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3186.835357][T29796] ? if_nlmsg_size+0x541/0xa70 [ 3186.840248][T29796] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3186.845541][T29796] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3186.851004][T29796] rtmsg_ifinfo+0x7f/0xa0 [ 3186.855328][T29796] netdev_state_change+0x121/0x140 [ 3186.860433][T29796] ? netdev_notify_peers+0xc0/0xc0 [ 3186.865541][T29796] ? dev_change_xdp_fd+0x2fb/0x600 [ 3186.870662][T29796] do_setlink+0x2d6d/0x35e0 [ 3186.875167][T29796] ? rtnl_getlink+0xab0/0xab0 [ 3186.879835][T29796] ? find_held_lock+0x2d/0x110 [ 3186.884593][T29796] ? is_bpf_text_address+0xa9/0x160 [ 3186.889877][T29796] ? mark_lock+0xbc/0x1220 [ 3186.894306][T29796] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3186.900193][T29796] ? __nla_validate_parse+0x2af/0x1cd0 [ 3186.905687][T29796] ? nla_memcpy+0xa0/0xa0 [ 3186.909997][T29796] ? __nla_parse+0x2e/0x60 [ 3186.914412][T29796] __rtnl_newlink+0xc96/0x1590 [ 3186.919203][T29796] ? rtnl_link_unregister+0x240/0x240 [ 3186.924577][T29796] ? __bpf_address_lookup+0x290/0x290 [ 3186.929955][T29796] ? is_bpf_text_address+0xcb/0x160 [ 3186.935159][T29796] ? kernel_text_address+0x6e/0xe0 [ 3186.940282][T29796] ? __kernel_text_address+0x9/0x30 [ 3186.945467][T29796] ? unwind_get_return_address+0x5a/0xa0 [ 3186.951081][T29796] ? profile_setup.cold+0xc1/0xc1 [ 3186.956087][T29796] ? arch_stack_walk+0x84/0xd0 [ 3186.960858][T29796] ? stack_trace_save+0x8c/0xc0 [ 3186.965717][T29796] ? stack_trace_consume_entry+0x160/0x160 [ 3186.971585][T29796] ? rtnl_newlink+0x46/0xa0 [ 3186.976085][T29796] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3186.981630][T29796] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3186.987619][T29796] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3186.993438][T29796] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3186.998978][T29796] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3187.004084][T29796] rtnl_newlink+0x64/0xa0 [ 3187.008468][T29796] ? __rtnl_newlink+0x1590/0x1590 [ 3187.013496][T29796] rtnetlink_rcv_msg+0x44e/0xad0 [ 3187.018436][T29796] ? rtnl_bridge_getlink+0x870/0x870 [ 3187.023723][T29796] ? mark_held_locks+0xe0/0xe0 [ 3187.028483][T29796] ? netlink_deliver_tap+0x146/0xb50 [ 3187.033769][T29796] netlink_rcv_skb+0x15a/0x410 [ 3187.038536][T29796] ? rtnl_bridge_getlink+0x870/0x870 [ 3187.043842][T29796] ? netlink_ack+0xa80/0xa80 [ 3187.048467][T29796] netlink_unicast+0x537/0x740 [ 3187.053257][T29796] ? netlink_attachskb+0x810/0x810 [ 3187.058373][T29796] ? _copy_from_iter_full+0x25c/0x870 [ 3187.063750][T29796] ? __phys_addr_symbol+0x2c/0x70 [ 3187.068775][T29796] ? __check_object_size+0x171/0x437 [ 3187.074061][T29796] netlink_sendmsg+0x882/0xe10 [ 3187.078827][T29796] ? aa_af_perm+0x260/0x260 [ 3187.083441][T29796] ? netlink_unicast+0x740/0x740 [ 3187.088387][T29796] ? netlink_unicast+0x740/0x740 [ 3187.093330][T29796] sock_sendmsg+0xcf/0x120 [ 3187.097771][T29796] ____sys_sendmsg+0x6b9/0x7d0 [ 3187.102534][T29796] ? kernel_sendmsg+0x50/0x50 [ 3187.107223][T29796] ___sys_sendmsg+0x100/0x170 [ 3187.111914][T29796] ? sendmsg_copy_msghdr+0x70/0x70 [ 3187.117052][T29796] ? __fget_files+0x329/0x4f0 [ 3187.121746][T29796] ? ksys_dup3+0x3c0/0x3c0 [ 3187.126168][T29796] ? find_held_lock+0x2d/0x110 [ 3187.130933][T29796] ? vfs_write+0x342/0x5c0 [ 3187.135354][T29796] ? __fget_light+0x208/0x270 [ 3187.140047][T29796] __sys_sendmsg+0xec/0x1b0 [ 3187.144564][T29796] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3187.149588][T29796] ? vfs_write+0x15b/0x5c0 [ 3187.154023][T29796] ? trace_hardirqs_off_caller+0x55/0x230 [ 3187.159742][T29796] ? do_syscall_64+0x21/0x7d0 [ 3187.164526][T29796] do_syscall_64+0xf6/0x7d0 [ 3187.169039][T29796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3187.174951][T29796] RIP: 0033:0x45c849 [ 3187.178850][T29796] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3187.198453][T29796] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3187.206916][T29796] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3187.214888][T29796] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3187.223019][T29796] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3187.230978][T29796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3187.238932][T29796] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000002c 09:06:40 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000030000"], 0x34}}, 0x0) [ 3187.258605][T29796] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0xffffffffffffffff}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:40 executing program 1 (fault-call:1 fault-nth:45): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010060508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3187.501307][T29816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3187.559877][T29819] FAULT_INJECTION: forcing a failure. [ 3187.559877][T29819] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3187.573138][T29819] CPU: 0 PID: 29819 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3187.581829][T29819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3187.591880][T29819] Call Trace: [ 3187.595167][T29819] dump_stack+0x188/0x20d [ 3187.599485][T29819] should_fail.cold+0x5/0xa [ 3187.603980][T29819] ? fault_create_debugfs_attr+0x140/0x140 [ 3187.609771][T29819] ? __lock_acquire+0x14bd/0x3ca0 [ 3187.614784][T29819] __alloc_pages_nodemask+0x17a/0x820 [ 3187.620139][T29819] ? ___sys_sendmsg+0x100/0x170 [ 3187.624972][T29819] ? __sys_sendmsg+0xec/0x1b0 [ 3187.629647][T29819] ? do_syscall_64+0xf6/0x7d0 [ 3187.634319][T29819] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3187.640368][T29819] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3187.646079][T29819] ? find_held_lock+0x2d/0x110 [ 3187.651808][T29819] cache_grow_begin+0x8c/0xc30 [ 3187.656580][T29819] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3187.662046][T29819] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3187.667855][T29819] __kmalloc_node_track_caller+0x38/0x60 [ 3187.673484][T29819] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3187.678852][T29819] __alloc_skb+0xef/0x5a0 [ 3187.683185][T29819] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3187.688735][T29819] ? if_nlmsg_size+0x541/0xa70 [ 3187.693489][T29819] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3187.698773][T29819] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3187.704220][T29819] rtmsg_ifinfo+0x7f/0xa0 [ 3187.708537][T29819] netdev_state_change+0x121/0x140 [ 3187.713753][T29819] ? netdev_notify_peers+0xc0/0xc0 [ 3187.718882][T29819] ? dev_change_xdp_fd+0x2fb/0x600 [ 3187.723995][T29819] ? dev_disable_lro+0x320/0x320 [ 3187.729043][T29819] do_setlink+0x2d6d/0x35e0 [ 3187.733552][T29819] ? rtnl_getlink+0xab0/0xab0 [ 3187.738230][T29819] ? find_held_lock+0x2d/0x110 [ 3187.742999][T29819] ? is_bpf_text_address+0xa9/0x160 [ 3187.748201][T29819] ? mark_lock+0xbc/0x1220 [ 3187.752613][T29819] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3187.758504][T29819] ? __nla_validate_parse+0x2af/0x1cd0 [ 3187.763955][T29819] ? nla_memcpy+0xa0/0xa0 [ 3187.768279][T29819] ? __nla_parse+0x2e/0x60 [ 3187.772688][T29819] __rtnl_newlink+0xc96/0x1590 [ 3187.777447][T29819] ? rtnl_link_unregister+0x240/0x240 [ 3187.782804][T29819] ? __bpf_address_lookup+0x290/0x290 [ 3187.788171][T29819] ? is_bpf_text_address+0xcb/0x160 [ 3187.793352][T29819] ? kernel_text_address+0x6e/0xe0 [ 3187.798446][T29819] ? __kernel_text_address+0x9/0x30 [ 3187.803628][T29819] ? unwind_get_return_address+0x5a/0xa0 [ 3187.809260][T29819] ? profile_setup.cold+0xc1/0xc1 [ 3187.814278][T29819] ? arch_stack_walk+0x84/0xd0 [ 3187.819061][T29819] ? stack_trace_save+0x8c/0xc0 [ 3187.823908][T29819] ? stack_trace_consume_entry+0x160/0x160 [ 3187.829744][T29819] ? rtnl_newlink+0x46/0xa0 [ 3187.834239][T29819] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3187.839774][T29819] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3187.845742][T29819] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3187.851536][T29819] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3187.857074][T29819] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3187.862173][T29819] rtnl_newlink+0x64/0xa0 [ 3187.866487][T29819] ? __rtnl_newlink+0x1590/0x1590 [ 3187.871580][T29819] rtnetlink_rcv_msg+0x44e/0xad0 [ 3187.876502][T29819] ? rtnl_bridge_getlink+0x870/0x870 [ 3187.881778][T29819] ? mark_held_locks+0xe0/0xe0 [ 3187.886539][T29819] ? netlink_deliver_tap+0x146/0xb50 [ 3187.891813][T29819] netlink_rcv_skb+0x15a/0x410 [ 3187.896565][T29819] ? rtnl_bridge_getlink+0x870/0x870 [ 3187.901849][T29819] ? netlink_ack+0xa80/0xa80 [ 3187.906445][T29819] netlink_unicast+0x537/0x740 [ 3187.911197][T29819] ? netlink_attachskb+0x810/0x810 [ 3187.916290][T29819] ? _copy_from_iter_full+0x25c/0x870 [ 3187.921754][T29819] ? __phys_addr_symbol+0x2c/0x70 [ 3187.926765][T29819] ? __check_object_size+0x171/0x437 [ 3187.932040][T29819] netlink_sendmsg+0x882/0xe10 [ 3187.936806][T29819] ? aa_af_perm+0x260/0x260 [ 3187.941306][T29819] ? netlink_unicast+0x740/0x740 [ 3187.946240][T29819] ? netlink_unicast+0x740/0x740 [ 3187.951162][T29819] sock_sendmsg+0xcf/0x120 [ 3187.955566][T29819] ____sys_sendmsg+0x6b9/0x7d0 [ 3187.960317][T29819] ? kernel_sendmsg+0x50/0x50 [ 3187.964988][T29819] ___sys_sendmsg+0x100/0x170 [ 3187.969650][T29819] ? sendmsg_copy_msghdr+0x70/0x70 [ 3187.974767][T29819] ? __fget_files+0x329/0x4f0 [ 3187.979434][T29819] ? ksys_dup3+0x3c0/0x3c0 [ 3187.983834][T29819] ? find_held_lock+0x2d/0x110 [ 3187.988580][T29819] ? vfs_write+0x342/0x5c0 [ 3187.993002][T29819] ? __fget_light+0x208/0x270 [ 3187.997692][T29819] __sys_sendmsg+0xec/0x1b0 [ 3188.002188][T29819] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3188.007218][T29819] ? vfs_write+0x15b/0x5c0 [ 3188.011637][T29819] ? trace_hardirqs_off_caller+0x55/0x230 [ 3188.017349][T29819] ? do_syscall_64+0x21/0x7d0 [ 3188.022016][T29819] do_syscall_64+0xf6/0x7d0 [ 3188.026517][T29819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3188.032394][T29819] RIP: 0033:0x45c849 [ 3188.036273][T29819] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:06:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010080508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3188.055870][T29819] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3188.064263][T29819] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3188.072333][T29819] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3188.080302][T29819] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3188.088260][T29819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3188.096219][T29819] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000002d [ 3188.129862][T29819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffdd86) 09:06:40 executing program 1 (fault-call:1 fault-nth:46): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010100508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3188.419482][T29829] FAULT_INJECTION: forcing a failure. [ 3188.419482][T29829] name failslab, interval 1, probability 0, space 0, times 0 [ 3188.434304][T29829] CPU: 1 PID: 29829 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3188.443004][T29829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3188.453065][T29829] Call Trace: [ 3188.456364][T29829] dump_stack+0x188/0x20d [ 3188.460701][T29829] should_fail.cold+0x5/0xa [ 3188.465198][T29829] ? fault_create_debugfs_attr+0x140/0x140 [ 3188.470993][T29829] ? nla_put+0xfe/0x130 [ 3188.475132][T29829] ? find_held_lock+0x2d/0x110 [ 3188.479900][T29829] should_failslab+0x5/0xf [ 3188.484322][T29829] kmem_cache_alloc_node_trace+0x59/0x790 [ 3188.490029][T29829] ? memset+0x20/0x40 [ 3188.494008][T29829] ? __nla_reserve+0x9b/0xc0 [ 3188.498622][T29829] __kmalloc_node_track_caller+0x38/0x60 [ 3188.504256][T29829] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3188.509631][T29829] pskb_expand_head+0x148/0x1020 [ 3188.514581][T29829] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3188.520405][T29829] netlink_trim+0x1ea/0x240 [ 3188.524935][T29829] netlink_broadcast_filtered+0x5f/0xd40 [ 3188.530580][T29829] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3188.536131][T29829] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3188.541586][T29829] nlmsg_notify+0x90/0x250 [ 3188.546002][T29829] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3188.551452][T29829] rtmsg_ifinfo+0x7f/0xa0 [ 3188.555795][T29829] netdev_state_change+0x121/0x140 [ 3188.560912][T29829] ? netdev_notify_peers+0xc0/0xc0 [ 3188.566005][T29829] ? dev_change_xdp_fd+0x2fb/0x600 [ 3188.571144][T29829] do_setlink+0x2d6d/0x35e0 [ 3188.575641][T29829] ? rtnl_getlink+0xab0/0xab0 [ 3188.580316][T29829] ? find_held_lock+0x2d/0x110 [ 3188.585094][T29829] ? is_bpf_text_address+0xa9/0x160 [ 3188.590292][T29829] ? mark_lock+0xbc/0x1220 [ 3188.594736][T29829] ? mark_lock+0xbc/0x1220 [ 3188.599138][T29829] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3188.605050][T29829] ? __nla_validate_parse+0x2af/0x1cd0 [ 3188.610510][T29829] ? nla_memcpy+0xa0/0xa0 [ 3188.614822][T29829] ? __nla_parse+0x2e/0x60 [ 3188.619221][T29829] __rtnl_newlink+0xc96/0x1590 [ 3188.623989][T29829] ? rtnl_link_unregister+0x240/0x240 [ 3188.629353][T29829] ? __bpf_address_lookup+0x290/0x290 [ 3188.634723][T29829] ? is_bpf_text_address+0xcb/0x160 [ 3188.639942][T29829] ? kernel_text_address+0x6e/0xe0 [ 3188.645045][T29829] ? __kernel_text_address+0x9/0x30 [ 3188.650282][T29829] ? unwind_get_return_address+0x5a/0xa0 [ 3188.655899][T29829] ? profile_setup.cold+0xc1/0xc1 [ 3188.660932][T29829] ? arch_stack_walk+0x84/0xd0 [ 3188.665709][T29829] ? stack_trace_save+0x8c/0xc0 [ 3188.670561][T29829] ? stack_trace_consume_entry+0x160/0x160 [ 3188.676398][T29829] ? rtnl_newlink+0x46/0xa0 [ 3188.680889][T29829] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3188.686418][T29829] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3188.692391][T29829] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3188.698180][T29829] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3188.703709][T29829] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3188.708816][T29829] rtnl_newlink+0x64/0xa0 [ 3188.713145][T29829] ? __rtnl_newlink+0x1590/0x1590 [ 3188.718174][T29829] rtnetlink_rcv_msg+0x44e/0xad0 [ 3188.723135][T29829] ? rtnl_bridge_getlink+0x870/0x870 [ 3188.728420][T29829] ? mark_held_locks+0xe0/0xe0 [ 3188.733199][T29829] ? netlink_deliver_tap+0x146/0xb50 [ 3188.738484][T29829] netlink_rcv_skb+0x15a/0x410 [ 3188.743251][T29829] ? rtnl_bridge_getlink+0x870/0x870 [ 3188.748526][T29829] ? netlink_ack+0xa80/0xa80 [ 3188.753139][T29829] netlink_unicast+0x537/0x740 [ 3188.757898][T29829] ? netlink_attachskb+0x810/0x810 [ 3188.763005][T29829] ? _copy_from_iter_full+0x25c/0x870 [ 3188.768362][T29829] ? __phys_addr_symbol+0x2c/0x70 [ 3188.773383][T29829] ? __check_object_size+0x171/0x437 [ 3188.778670][T29829] netlink_sendmsg+0x882/0xe10 [ 3188.783443][T29829] ? aa_af_perm+0x260/0x260 [ 3188.788050][T29829] ? netlink_unicast+0x740/0x740 [ 3188.793004][T29829] ? netlink_unicast+0x740/0x740 [ 3188.797947][T29829] sock_sendmsg+0xcf/0x120 [ 3188.802358][T29829] ____sys_sendmsg+0x6b9/0x7d0 [ 3188.807132][T29829] ? kernel_sendmsg+0x50/0x50 [ 3188.811819][T29829] ___sys_sendmsg+0x100/0x170 [ 3188.816523][T29829] ? sendmsg_copy_msghdr+0x70/0x70 [ 3188.821633][T29829] ? __fget_files+0x329/0x4f0 [ 3188.826308][T29829] ? ksys_dup3+0x3c0/0x3c0 [ 3188.830708][T29829] ? find_held_lock+0x2d/0x110 [ 3188.835469][T29829] ? vfs_write+0x342/0x5c0 [ 3188.839872][T29829] ? __fget_light+0x208/0x270 [ 3188.844536][T29829] __sys_sendmsg+0xec/0x1b0 [ 3188.849024][T29829] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3188.854047][T29829] ? vfs_write+0x15b/0x5c0 [ 3188.858462][T29829] ? trace_hardirqs_off_caller+0x55/0x230 [ 3188.864264][T29829] ? do_syscall_64+0x21/0x7d0 [ 3188.868927][T29829] do_syscall_64+0xf6/0x7d0 [ 3188.873416][T29829] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3188.879297][T29829] RIP: 0033:0x45c849 [ 3188.883235][T29829] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3188.902835][T29829] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3188.911243][T29829] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3188.919205][T29829] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3188.927167][T29829] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3188.935134][T29829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3188.943105][T29829] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000002e [ 3188.966480][T29829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x400}) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 09:06:41 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000050000"], 0x34}}, 0x0) 09:06:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010180508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x2}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:41 executing program 1 (fault-call:1 fault-nth:47): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3189.189689][T29848] FAULT_INJECTION: forcing a failure. [ 3189.189689][T29848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3189.202936][T29848] CPU: 0 PID: 29848 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3189.211613][T29848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3189.221674][T29848] Call Trace: [ 3189.224977][T29848] dump_stack+0x188/0x20d [ 3189.229325][T29848] should_fail.cold+0x5/0xa [ 3189.233848][T29848] ? fault_create_debugfs_attr+0x140/0x140 [ 3189.239667][T29848] ? __lock_acquire+0x14bd/0x3ca0 [ 3189.244713][T29848] __alloc_pages_nodemask+0x17a/0x820 [ 3189.250295][T29848] ? ___sys_sendmsg+0x100/0x170 [ 3189.255156][T29848] ? __sys_sendmsg+0xec/0x1b0 [ 3189.259852][T29848] ? do_syscall_64+0xf6/0x7d0 [ 3189.264531][T29848] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3189.270595][T29848] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3189.276316][T29848] ? find_held_lock+0x2d/0x110 [ 3189.281086][T29848] cache_grow_begin+0x8c/0xc30 [ 3189.285911][T29848] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3189.291376][T29848] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3189.297201][T29848] __kmalloc_node_track_caller+0x38/0x60 [ 3189.302818][T29848] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3189.308185][T29848] __alloc_skb+0xef/0x5a0 [ 3189.312503][T29848] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3189.318033][T29848] ? if_nlmsg_size+0x541/0xa70 [ 3189.322786][T29848] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3189.328061][T29848] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3189.333514][T29848] rtmsg_ifinfo+0x7f/0xa0 [ 3189.337941][T29848] netdev_state_change+0x121/0x140 [ 3189.343042][T29848] ? netdev_notify_peers+0xc0/0xc0 [ 3189.348155][T29848] ? dev_change_xdp_fd+0x2fb/0x600 [ 3189.353269][T29848] do_setlink+0x2d6d/0x35e0 [ 3189.357766][T29848] ? rtnl_getlink+0xab0/0xab0 [ 3189.362442][T29848] ? find_held_lock+0x2d/0x110 [ 3189.367209][T29848] ? is_bpf_text_address+0xa9/0x160 [ 3189.372408][T29848] ? mark_lock+0xbc/0x1220 [ 3189.376817][T29848] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3189.382705][T29848] ? __nla_validate_parse+0x2af/0x1cd0 [ 3189.388164][T29848] ? nla_memcpy+0xa0/0xa0 [ 3189.392486][T29848] ? __nla_parse+0x2e/0x60 [ 3189.396890][T29848] __rtnl_newlink+0xc96/0x1590 [ 3189.401651][T29848] ? rtnl_link_unregister+0x240/0x240 [ 3189.407011][T29848] ? __bpf_address_lookup+0x290/0x290 [ 3189.412373][T29848] ? is_bpf_text_address+0xcb/0x160 [ 3189.417659][T29848] ? kernel_text_address+0x6e/0xe0 [ 3189.422815][T29848] ? __kernel_text_address+0x9/0x30 [ 3189.427994][T29848] ? unwind_get_return_address+0x5a/0xa0 [ 3189.433616][T29848] ? profile_setup.cold+0xc1/0xc1 [ 3189.438632][T29848] ? arch_stack_walk+0x84/0xd0 [ 3189.443496][T29848] ? stack_trace_save+0x8c/0xc0 [ 3189.448327][T29848] ? stack_trace_consume_entry+0x160/0x160 [ 3189.454144][T29848] ? rtnl_newlink+0x46/0xa0 [ 3189.458643][T29848] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3189.464344][T29848] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3189.470370][T29848] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3189.476173][T29848] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3189.481705][T29848] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3189.486804][T29848] rtnl_newlink+0x64/0xa0 [ 3189.491122][T29848] ? __rtnl_newlink+0x1590/0x1590 [ 3189.496150][T29848] rtnetlink_rcv_msg+0x44e/0xad0 [ 3189.501073][T29848] ? rtnl_bridge_getlink+0x870/0x870 [ 3189.506345][T29848] ? mark_held_locks+0xe0/0xe0 [ 3189.511100][T29848] ? netlink_deliver_tap+0x146/0xb50 [ 3189.516395][T29848] netlink_rcv_skb+0x15a/0x410 [ 3189.521158][T29848] ? rtnl_bridge_getlink+0x870/0x870 [ 3189.526472][T29848] ? netlink_ack+0xa80/0xa80 [ 3189.531064][T29848] netlink_unicast+0x537/0x740 [ 3189.535818][T29848] ? netlink_attachskb+0x810/0x810 [ 3189.540916][T29848] ? _copy_from_iter_full+0x25c/0x870 [ 3189.546294][T29848] ? __phys_addr_symbol+0x2c/0x70 [ 3189.551314][T29848] ? __check_object_size+0x171/0x437 [ 3189.556607][T29848] netlink_sendmsg+0x882/0xe10 [ 3189.561378][T29848] ? aa_af_perm+0x260/0x260 [ 3189.565865][T29848] ? netlink_unicast+0x740/0x740 [ 3189.570814][T29848] ? netlink_unicast+0x740/0x740 [ 3189.575753][T29848] sock_sendmsg+0xcf/0x120 [ 3189.580177][T29848] ____sys_sendmsg+0x6b9/0x7d0 [ 3189.584946][T29848] ? kernel_sendmsg+0x50/0x50 [ 3189.589628][T29848] ___sys_sendmsg+0x100/0x170 [ 3189.594294][T29848] ? sendmsg_copy_msghdr+0x70/0x70 [ 3189.599406][T29848] ? __fget_files+0x329/0x4f0 [ 3189.604073][T29848] ? ksys_dup3+0x3c0/0x3c0 [ 3189.608470][T29848] ? find_held_lock+0x2d/0x110 [ 3189.613218][T29848] ? vfs_write+0x342/0x5c0 [ 3189.617636][T29848] ? __fget_light+0x208/0x270 [ 3189.622322][T29848] __sys_sendmsg+0xec/0x1b0 [ 3189.626815][T29848] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3189.631882][T29848] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3189.637848][T29848] ? vfs_write+0x15b/0x5c0 [ 3189.642267][T29848] ? trace_hardirqs_off_caller+0x55/0x230 [ 3189.647984][T29848] ? do_syscall_64+0x21/0x7d0 [ 3189.652643][T29848] do_syscall_64+0xf6/0x7d0 [ 3189.657130][T29848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3189.663011][T29848] RIP: 0033:0x45c849 [ 3189.666901][T29848] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3189.686485][T29848] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3189.694880][T29848] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3189.702845][T29848] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3189.710799][T29848] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3189.718753][T29848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3189.726709][T29848] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000000002f 09:06:42 executing program 1 (fault-call:1 fault-nth:48): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3189.745412][T29848] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3189.754894][T29847] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:42 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000060000"], 0x34}}, 0x0) 09:06:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010280508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3189.904905][T29859] FAULT_INJECTION: forcing a failure. [ 3189.904905][T29859] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3189.918135][T29859] CPU: 1 PID: 29859 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3189.926819][T29859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3189.936880][T29859] Call Trace: [ 3189.940310][T29859] dump_stack+0x188/0x20d [ 3189.944661][T29859] should_fail.cold+0x5/0xa [ 3189.949190][T29859] ? fault_create_debugfs_attr+0x140/0x140 [ 3189.955029][T29859] ? __lock_acquire+0x14bd/0x3ca0 [ 3189.960057][T29859] __alloc_pages_nodemask+0x17a/0x820 [ 3189.965433][T29859] ? ___sys_sendmsg+0x100/0x170 [ 3189.970291][T29859] ? __sys_sendmsg+0xec/0x1b0 [ 3189.974979][T29859] ? do_syscall_64+0xf6/0x7d0 [ 3189.979664][T29859] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3189.985748][T29859] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3189.991487][T29859] ? find_held_lock+0x2d/0x110 [ 3189.996265][T29859] cache_grow_begin+0x8c/0xc30 [ 3190.001019][T29859] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3190.006477][T29859] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3190.012281][T29859] __kmalloc_node_track_caller+0x38/0x60 [ 3190.017901][T29859] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3190.023260][T29859] __alloc_skb+0xef/0x5a0 [ 3190.027580][T29859] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3190.033112][T29859] ? if_nlmsg_size+0x541/0xa70 [ 3190.037864][T29859] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3190.043139][T29859] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3190.048598][T29859] rtmsg_ifinfo+0x7f/0xa0 [ 3190.052915][T29859] netdev_state_change+0x121/0x140 [ 3190.058009][T29859] ? netdev_notify_peers+0xc0/0xc0 [ 3190.063104][T29859] ? dev_change_xdp_fd+0x2fb/0x600 [ 3190.068213][T29859] do_setlink+0x2d6d/0x35e0 [ 3190.072707][T29859] ? rtnl_getlink+0xab0/0xab0 [ 3190.077366][T29859] ? find_held_lock+0x2d/0x110 [ 3190.082113][T29859] ? is_bpf_text_address+0xa9/0x160 [ 3190.087298][T29859] ? mark_lock+0xbc/0x1220 [ 3190.091704][T29859] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3190.097580][T29859] ? __nla_validate_parse+0x2af/0x1cd0 [ 3190.103026][T29859] ? nla_memcpy+0xa0/0xa0 [ 3190.107350][T29859] ? __nla_parse+0x2e/0x60 [ 3190.111751][T29859] __rtnl_newlink+0xc96/0x1590 [ 3190.116506][T29859] ? rtnl_link_unregister+0x240/0x240 [ 3190.121858][T29859] ? __bpf_address_lookup+0x290/0x290 [ 3190.127236][T29859] ? is_bpf_text_address+0xcb/0x160 [ 3190.132436][T29859] ? kernel_text_address+0x6e/0xe0 [ 3190.137554][T29859] ? __kernel_text_address+0x9/0x30 [ 3190.142740][T29859] ? unwind_get_return_address+0x5a/0xa0 [ 3190.148364][T29859] ? profile_setup.cold+0xc1/0xc1 [ 3190.153379][T29859] ? arch_stack_walk+0x84/0xd0 [ 3190.158140][T29859] ? stack_trace_save+0x8c/0xc0 [ 3190.162974][T29859] ? stack_trace_consume_entry+0x160/0x160 [ 3190.168816][T29859] ? rtnl_newlink+0x46/0xa0 [ 3190.173305][T29859] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3190.178847][T29859] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3190.184813][T29859] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3190.190616][T29859] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3190.196151][T29859] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3190.201246][T29859] rtnl_newlink+0x64/0xa0 [ 3190.205668][T29859] ? __rtnl_newlink+0x1590/0x1590 [ 3190.210695][T29859] rtnetlink_rcv_msg+0x44e/0xad0 [ 3190.215661][T29859] ? rtnl_bridge_getlink+0x870/0x870 [ 3190.220941][T29859] ? mark_held_locks+0xe0/0xe0 [ 3190.225696][T29859] ? netlink_deliver_tap+0x146/0xb50 [ 3190.230989][T29859] netlink_rcv_skb+0x15a/0x410 [ 3190.235758][T29859] ? rtnl_bridge_getlink+0x870/0x870 [ 3190.241036][T29859] ? netlink_ack+0xa80/0xa80 [ 3190.245642][T29859] netlink_unicast+0x537/0x740 [ 3190.250836][T29859] ? netlink_attachskb+0x810/0x810 [ 3190.256025][T29859] ? _copy_from_iter_full+0x25c/0x870 [ 3190.261393][T29859] ? __phys_addr_symbol+0x2c/0x70 [ 3190.266420][T29859] ? __check_object_size+0x171/0x437 [ 3190.271707][T29859] netlink_sendmsg+0x882/0xe10 [ 3190.276480][T29859] ? aa_af_perm+0x260/0x260 [ 3190.280977][T29859] ? netlink_unicast+0x740/0x740 [ 3190.285926][T29859] ? netlink_unicast+0x740/0x740 [ 3190.290867][T29859] sock_sendmsg+0xcf/0x120 [ 3190.295283][T29859] ____sys_sendmsg+0x6b9/0x7d0 [ 3190.300073][T29859] ? kernel_sendmsg+0x50/0x50 [ 3190.304766][T29859] ___sys_sendmsg+0x100/0x170 [ 3190.309449][T29859] ? sendmsg_copy_msghdr+0x70/0x70 [ 3190.314566][T29859] ? __fget_files+0x329/0x4f0 [ 3190.319251][T29859] ? ksys_dup3+0x3c0/0x3c0 [ 3190.323660][T29859] ? find_held_lock+0x2d/0x110 [ 3190.328416][T29859] ? vfs_write+0x342/0x5c0 [ 3190.332834][T29859] ? __fget_light+0x208/0x270 [ 3190.337518][T29859] __sys_sendmsg+0xec/0x1b0 [ 3190.342023][T29859] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3190.347047][T29859] ? vfs_write+0x15b/0x5c0 [ 3190.351470][T29859] ? trace_hardirqs_off_caller+0x55/0x230 [ 3190.357188][T29859] ? do_syscall_64+0x21/0x7d0 [ 3190.361867][T29859] do_syscall_64+0xf6/0x7d0 [ 3190.366375][T29859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3190.372255][T29859] RIP: 0033:0x45c849 [ 3190.376148][T29859] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3190.395751][T29859] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 09:06:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x3}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3190.404161][T29859] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3190.412131][T29859] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3190.420106][T29859] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3190.428075][T29859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3190.436033][T29859] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000030 [ 3190.530716][T29859] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3190.551826][T29868] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x100000000000000) 09:06:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r3 = accept4(r1, 0x0, &(0x7f0000007980), 0xc0000) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000079c0), &(0x7f0000007a00)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:06:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x4}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:43 executing program 1 (fault-call:1 fault-nth:49): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010600508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3190.739579][T29880] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:43 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000070000"], 0x34}}, 0x0) [ 3190.879342][T29885] FAULT_INJECTION: forcing a failure. [ 3190.879342][T29885] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3190.892579][T29885] CPU: 1 PID: 29885 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3190.901255][T29885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3190.911321][T29885] Call Trace: [ 3190.914618][T29885] dump_stack+0x188/0x20d [ 3190.918946][T29885] should_fail.cold+0x5/0xa [ 3190.923588][T29885] ? fault_create_debugfs_attr+0x140/0x140 [ 3190.929396][T29885] ? __lock_acquire+0x14bd/0x3ca0 [ 3190.934418][T29885] __alloc_pages_nodemask+0x17a/0x820 [ 3190.939816][T29885] ? ___sys_sendmsg+0x100/0x170 [ 3190.944674][T29885] ? __sys_sendmsg+0xec/0x1b0 [ 3190.949351][T29885] ? do_syscall_64+0xf6/0x7d0 [ 3190.954016][T29885] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3190.960073][T29885] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3190.965777][T29885] ? find_held_lock+0x2d/0x110 [ 3190.970534][T29885] cache_grow_begin+0x8c/0xc30 [ 3190.975289][T29885] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3190.980742][T29885] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3190.986547][T29885] __kmalloc_node_track_caller+0x38/0x60 [ 3190.992165][T29885] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3190.997535][T29885] __alloc_skb+0xef/0x5a0 [ 3191.001848][T29885] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3191.007411][T29885] ? if_nlmsg_size+0x541/0xa70 [ 3191.012188][T29885] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3191.017606][T29885] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3191.023058][T29885] rtmsg_ifinfo+0x7f/0xa0 [ 3191.027381][T29885] netdev_state_change+0x121/0x140 [ 3191.032484][T29885] ? netdev_notify_peers+0xc0/0xc0 [ 3191.037588][T29885] ? dev_change_xdp_fd+0x2fb/0x600 [ 3191.042691][T29885] do_setlink+0x2d6d/0x35e0 [ 3191.047190][T29885] ? rtnl_getlink+0xab0/0xab0 [ 3191.051853][T29885] ? find_held_lock+0x2d/0x110 [ 3191.056600][T29885] ? is_bpf_text_address+0xa9/0x160 [ 3191.061786][T29885] ? mark_lock+0xbc/0x1220 [ 3191.066193][T29885] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3191.072070][T29885] ? __nla_validate_parse+0x2af/0x1cd0 [ 3191.077515][T29885] ? nla_memcpy+0xa0/0xa0 [ 3191.081827][T29885] ? __nla_parse+0x2e/0x60 [ 3191.086228][T29885] __rtnl_newlink+0xc96/0x1590 [ 3191.090996][T29885] ? rtnl_link_unregister+0x240/0x240 [ 3191.096349][T29885] ? __bpf_address_lookup+0x290/0x290 [ 3191.101707][T29885] ? is_bpf_text_address+0xcb/0x160 [ 3191.106922][T29885] ? kernel_text_address+0x6e/0xe0 [ 3191.112018][T29885] ? __kernel_text_address+0x9/0x30 [ 3191.117223][T29885] ? unwind_get_return_address+0x5a/0xa0 [ 3191.122855][T29885] ? profile_setup.cold+0xc1/0xc1 [ 3191.127876][T29885] ? arch_stack_walk+0x84/0xd0 [ 3191.132644][T29885] ? stack_trace_save+0x8c/0xc0 [ 3191.137503][T29885] ? stack_trace_consume_entry+0x160/0x160 [ 3191.143388][T29885] ? rtnl_newlink+0x46/0xa0 [ 3191.147904][T29885] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3191.153437][T29885] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3191.159425][T29885] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3191.165253][T29885] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3191.170811][T29885] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3191.175928][T29885] rtnl_newlink+0x64/0xa0 [ 3191.180245][T29885] ? __rtnl_newlink+0x1590/0x1590 [ 3191.185271][T29885] rtnetlink_rcv_msg+0x44e/0xad0 [ 3191.190249][T29885] ? rtnl_bridge_getlink+0x870/0x870 [ 3191.195544][T29885] ? mark_held_locks+0xe0/0xe0 [ 3191.200314][T29885] ? netlink_deliver_tap+0x146/0xb50 [ 3191.205618][T29885] netlink_rcv_skb+0x15a/0x410 [ 3191.210383][T29885] ? rtnl_bridge_getlink+0x870/0x870 [ 3191.215668][T29885] ? netlink_ack+0xa80/0xa80 [ 3191.220273][T29885] netlink_unicast+0x537/0x740 [ 3191.225039][T29885] ? netlink_attachskb+0x810/0x810 [ 3191.230134][T29885] ? _copy_from_iter_full+0x25c/0x870 [ 3191.235593][T29885] ? __phys_addr_symbol+0x2c/0x70 [ 3191.240617][T29885] ? __check_object_size+0x171/0x437 [ 3191.245917][T29885] netlink_sendmsg+0x882/0xe10 [ 3191.250677][T29885] ? aa_af_perm+0x260/0x260 [ 3191.255186][T29885] ? netlink_unicast+0x740/0x740 [ 3191.260135][T29885] ? netlink_unicast+0x740/0x740 [ 3191.265063][T29885] sock_sendmsg+0xcf/0x120 [ 3191.269473][T29885] ____sys_sendmsg+0x6b9/0x7d0 [ 3191.274486][T29885] ? kernel_sendmsg+0x50/0x50 [ 3191.279274][T29885] ___sys_sendmsg+0x100/0x170 [ 3191.283976][T29885] ? sendmsg_copy_msghdr+0x70/0x70 [ 3191.289096][T29885] ? __fget_files+0x329/0x4f0 [ 3191.294727][T29885] ? ksys_dup3+0x3c0/0x3c0 [ 3191.299135][T29885] ? find_held_lock+0x2d/0x110 [ 3191.303900][T29885] ? vfs_write+0x342/0x5c0 [ 3191.308346][T29885] ? __fget_light+0x208/0x270 [ 3191.313020][T29885] __sys_sendmsg+0xec/0x1b0 [ 3191.317531][T29885] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3191.322554][T29885] ? vfs_write+0x15b/0x5c0 [ 3191.326967][T29885] ? trace_hardirqs_off_caller+0x55/0x230 [ 3191.332680][T29885] ? do_syscall_64+0x21/0x7d0 [ 3191.337350][T29885] do_syscall_64+0xf6/0x7d0 [ 3191.341845][T29885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3191.347725][T29885] RIP: 0033:0x45c849 [ 3191.351609][T29885] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3191.371394][T29885] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3191.379796][T29885] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3191.387781][T29885] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3191.395741][T29885] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3191.403718][T29885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3191.411673][T29885] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000031 09:06:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x5}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3191.437182][T29885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:44 executing program 1 (fault-call:1 fault-nth:50): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000608000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:44 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000180000"], 0x34}}, 0x0) [ 3191.628948][T29901] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x6}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3191.809174][T29905] FAULT_INJECTION: forcing a failure. [ 3191.809174][T29905] name failslab, interval 1, probability 0, space 0, times 0 [ 3191.858429][T29905] CPU: 1 PID: 29905 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3191.867234][T29905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3191.877310][T29905] Call Trace: [ 3191.880609][T29905] dump_stack+0x188/0x20d [ 3191.884950][T29905] should_fail.cold+0x5/0xa [ 3191.889492][T29905] ? fault_create_debugfs_attr+0x140/0x140 [ 3191.895281][T29905] ? nla_put+0xfe/0x130 [ 3191.899420][T29905] ? find_held_lock+0x2d/0x110 [ 3191.904276][T29905] should_failslab+0x5/0xf [ 3191.908687][T29905] kmem_cache_alloc_node_trace+0x59/0x790 [ 3191.914455][T29905] ? memset+0x20/0x40 [ 3191.918467][T29905] ? __nla_reserve+0x9b/0xc0 [ 3191.923059][T29905] __kmalloc_node_track_caller+0x38/0x60 [ 3191.928691][T29905] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3191.934065][T29905] pskb_expand_head+0x148/0x1020 [ 3191.938998][T29905] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3191.944800][T29905] netlink_trim+0x1ea/0x240 [ 3191.949292][T29905] netlink_broadcast_filtered+0x5f/0xd40 [ 3191.954909][T29905] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3191.960440][T29905] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3191.965886][T29905] nlmsg_notify+0x90/0x250 [ 3191.970303][T29905] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3191.975769][T29905] rtmsg_ifinfo+0x7f/0xa0 [ 3191.980086][T29905] netdev_state_change+0x121/0x140 [ 3191.985183][T29905] ? netdev_notify_peers+0xc0/0xc0 [ 3191.990290][T29905] ? dev_change_xdp_fd+0x2fb/0x600 [ 3191.995406][T29905] do_setlink+0x2d6d/0x35e0 [ 3191.999917][T29905] ? rtnl_getlink+0xab0/0xab0 [ 3192.004587][T29905] ? find_held_lock+0x2d/0x110 [ 3192.009345][T29905] ? is_bpf_text_address+0xa9/0x160 [ 3192.014537][T29905] ? mark_lock+0xbc/0x1220 [ 3192.018949][T29905] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3192.024831][T29905] ? __nla_validate_parse+0x2af/0x1cd0 [ 3192.030291][T29905] ? nla_memcpy+0xa0/0xa0 [ 3192.034607][T29905] ? __nla_parse+0x2e/0x60 [ 3192.039013][T29905] __rtnl_newlink+0xc96/0x1590 [ 3192.043773][T29905] ? rtnl_link_unregister+0x240/0x240 [ 3192.049127][T29905] ? __bpf_address_lookup+0x290/0x290 [ 3192.054497][T29905] ? is_bpf_text_address+0xcb/0x160 [ 3192.059679][T29905] ? kernel_text_address+0x6e/0xe0 [ 3192.064777][T29905] ? __kernel_text_address+0x9/0x30 [ 3192.069974][T29905] ? unwind_get_return_address+0x5a/0xa0 [ 3192.075620][T29905] ? profile_setup.cold+0xc1/0xc1 [ 3192.080638][T29905] ? arch_stack_walk+0x84/0xd0 [ 3192.085405][T29905] ? stack_trace_save+0x8c/0xc0 [ 3192.090247][T29905] ? stack_trace_consume_entry+0x160/0x160 [ 3192.096079][T29905] ? rtnl_newlink+0x46/0xa0 [ 3192.100568][T29905] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3192.106096][T29905] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3192.112061][T29905] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3192.117849][T29905] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3192.123381][T29905] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3192.128476][T29905] rtnl_newlink+0x64/0xa0 [ 3192.132792][T29905] ? __rtnl_newlink+0x1590/0x1590 [ 3192.137797][T29905] rtnetlink_rcv_msg+0x44e/0xad0 [ 3192.142719][T29905] ? rtnl_bridge_getlink+0x870/0x870 [ 3192.147994][T29905] ? mark_held_locks+0xe0/0xe0 [ 3192.152745][T29905] ? netlink_deliver_tap+0x146/0xb50 [ 3192.158015][T29905] netlink_rcv_skb+0x15a/0x410 [ 3192.162765][T29905] ? rtnl_bridge_getlink+0x870/0x870 [ 3192.168035][T29905] ? netlink_ack+0xa80/0xa80 [ 3192.172619][T29905] netlink_unicast+0x537/0x740 [ 3192.177372][T29905] ? netlink_attachskb+0x810/0x810 [ 3192.182463][T29905] ? _copy_from_iter_full+0x25c/0x870 [ 3192.187817][T29905] ? __phys_addr_symbol+0x2c/0x70 [ 3192.192835][T29905] ? __check_object_size+0x171/0x437 [ 3192.198107][T29905] netlink_sendmsg+0x882/0xe10 [ 3192.202858][T29905] ? aa_af_perm+0x260/0x260 [ 3192.207364][T29905] ? netlink_unicast+0x740/0x740 [ 3192.212307][T29905] ? netlink_unicast+0x740/0x740 [ 3192.217241][T29905] sock_sendmsg+0xcf/0x120 [ 3192.221653][T29905] ____sys_sendmsg+0x6b9/0x7d0 [ 3192.226409][T29905] ? kernel_sendmsg+0x50/0x50 [ 3192.231084][T29905] ___sys_sendmsg+0x100/0x170 [ 3192.235748][T29905] ? sendmsg_copy_msghdr+0x70/0x70 [ 3192.240854][T29905] ? __fget_files+0x329/0x4f0 [ 3192.245519][T29905] ? ksys_dup3+0x3c0/0x3c0 [ 3192.249919][T29905] ? find_held_lock+0x2d/0x110 [ 3192.254668][T29905] ? vfs_write+0x342/0x5c0 [ 3192.259074][T29905] ? __fget_light+0x208/0x270 [ 3192.263741][T29905] __sys_sendmsg+0xec/0x1b0 [ 3192.268253][T29905] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3192.273275][T29905] ? vfs_write+0x15b/0x5c0 [ 3192.277691][T29905] ? trace_hardirqs_off_caller+0x55/0x230 [ 3192.283412][T29905] ? do_syscall_64+0x21/0x7d0 [ 3192.288081][T29905] do_syscall_64+0xf6/0x7d0 [ 3192.292576][T29905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3192.298454][T29905] RIP: 0033:0x45c849 [ 3192.302334][T29905] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3192.321921][T29905] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3192.330316][T29905] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3192.338285][T29905] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3192.346257][T29905] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 09:06:45 executing program 1 (fault-call:1 fault-nth:51): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3192.354266][T29905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3192.362224][T29905] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000032 [ 3192.379088][T29905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3192.388775][T29915] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3192.524148][T29922] FAULT_INJECTION: forcing a failure. [ 3192.524148][T29922] name failslab, interval 1, probability 0, space 0, times 0 [ 3192.538310][T29922] CPU: 1 PID: 29922 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3192.546996][T29922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3192.557055][T29922] Call Trace: [ 3192.560357][T29922] dump_stack+0x188/0x20d [ 3192.564708][T29922] should_fail.cold+0x5/0xa [ 3192.569225][T29922] ? fault_create_debugfs_attr+0x140/0x140 [ 3192.575051][T29922] should_failslab+0x5/0xf [ 3192.579475][T29922] kmem_cache_alloc_node+0x25c/0x760 [ 3192.584776][T29922] ? br_get_link_af_size_filtered+0x26d/0x9f0 [ 3192.590850][T29922] ? lock_downgrade+0x7f0/0x7f0 [ 3192.595720][T29922] __alloc_skb+0xba/0x5a0 [ 3192.600067][T29922] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3192.605622][T29922] ? if_nlmsg_size+0x541/0xa70 [ 3192.610400][T29922] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3192.615708][T29922] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3192.621178][T29922] rtmsg_ifinfo+0x7f/0xa0 [ 3192.625520][T29922] netdev_state_change+0x121/0x140 [ 3192.630637][T29922] ? netdev_notify_peers+0xc0/0xc0 [ 3192.635761][T29922] ? dev_change_xdp_fd+0x2fb/0x600 [ 3192.640889][T29922] do_setlink+0x2d6d/0x35e0 [ 3192.645399][T29922] ? rtnl_getlink+0xab0/0xab0 [ 3192.650057][T29922] ? find_held_lock+0x2d/0x110 [ 3192.654806][T29922] ? is_bpf_text_address+0xa9/0x160 [ 3192.660033][T29922] ? mark_lock+0xbc/0x1220 [ 3192.664479][T29922] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3192.670353][T29922] ? __nla_validate_parse+0x2af/0x1cd0 [ 3192.675796][T29922] ? nla_memcpy+0xa0/0xa0 [ 3192.680104][T29922] ? __nla_parse+0x2e/0x60 [ 3192.684504][T29922] __rtnl_newlink+0xc96/0x1590 [ 3192.689266][T29922] ? rtnl_link_unregister+0x240/0x240 [ 3192.694628][T29922] ? __bpf_address_lookup+0x290/0x290 [ 3192.700002][T29922] ? is_bpf_text_address+0xcb/0x160 [ 3192.705179][T29922] ? kernel_text_address+0x6e/0xe0 [ 3192.710283][T29922] ? __kernel_text_address+0x9/0x30 [ 3192.715470][T29922] ? unwind_get_return_address+0x5a/0xa0 [ 3192.721082][T29922] ? profile_setup.cold+0xc1/0xc1 [ 3192.726081][T29922] ? arch_stack_walk+0x84/0xd0 [ 3192.730832][T29922] ? stack_trace_save+0x8c/0xc0 [ 3192.735661][T29922] ? stack_trace_consume_entry+0x160/0x160 [ 3192.741480][T29922] ? rtnl_newlink+0x46/0xa0 [ 3192.745968][T29922] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3192.751493][T29922] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3192.757465][T29922] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3192.763253][T29922] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3192.768792][T29922] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3192.773906][T29922] rtnl_newlink+0x64/0xa0 [ 3192.778222][T29922] ? __rtnl_newlink+0x1590/0x1590 [ 3192.783383][T29922] rtnetlink_rcv_msg+0x44e/0xad0 [ 3192.788308][T29922] ? rtnl_bridge_getlink+0x870/0x870 [ 3192.793580][T29922] ? mark_held_locks+0xe0/0xe0 [ 3192.798326][T29922] ? netlink_deliver_tap+0x146/0xb50 [ 3192.803595][T29922] netlink_rcv_skb+0x15a/0x410 [ 3192.808352][T29922] ? rtnl_bridge_getlink+0x870/0x870 [ 3192.813618][T29922] ? netlink_ack+0xa80/0xa80 [ 3192.818218][T29922] netlink_unicast+0x537/0x740 [ 3192.822969][T29922] ? netlink_attachskb+0x810/0x810 [ 3192.828060][T29922] ? _copy_from_iter_full+0x25c/0x870 [ 3192.833418][T29922] ? __phys_addr_symbol+0x2c/0x70 [ 3192.838423][T29922] ? __check_object_size+0x171/0x437 [ 3192.843738][T29922] netlink_sendmsg+0x882/0xe10 [ 3192.848485][T29922] ? aa_af_perm+0x260/0x260 [ 3192.852969][T29922] ? netlink_unicast+0x740/0x740 [ 3192.857894][T29922] ? netlink_unicast+0x740/0x740 [ 3192.862854][T29922] sock_sendmsg+0xcf/0x120 [ 3192.867254][T29922] ____sys_sendmsg+0x6b9/0x7d0 [ 3192.871997][T29922] ? kernel_sendmsg+0x50/0x50 [ 3192.876661][T29922] ___sys_sendmsg+0x100/0x170 [ 3192.881334][T29922] ? sendmsg_copy_msghdr+0x70/0x70 [ 3192.886469][T29922] ? __fget_files+0x329/0x4f0 [ 3192.891132][T29922] ? ksys_dup3+0x3c0/0x3c0 [ 3192.895526][T29922] ? find_held_lock+0x2d/0x110 [ 3192.900312][T29922] ? vfs_write+0x342/0x5c0 [ 3192.904723][T29922] ? __fget_light+0x208/0x270 [ 3192.909385][T29922] __sys_sendmsg+0xec/0x1b0 [ 3192.913869][T29922] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3192.918873][T29922] ? vfs_write+0x15b/0x5c0 [ 3192.923287][T29922] ? trace_hardirqs_off_caller+0x55/0x230 [ 3192.928987][T29922] ? do_syscall_64+0x21/0x7d0 [ 3192.933648][T29922] do_syscall_64+0xf6/0x7d0 [ 3192.938133][T29922] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3192.944005][T29922] RIP: 0033:0x45c849 [ 3192.947889][T29922] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3192.967490][T29922] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3192.975881][T29922] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3192.983943][T29922] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3192.991896][T29922] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3192.999851][T29922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3193.007807][T29922] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000033 09:06:45 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x200000000000000) [ 3193.022509][T29922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:06:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x7}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000708000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:45 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000200000"], 0x34}}, 0x0) 09:06:45 executing program 1 (fault-call:1 fault-nth:52): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:06:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x2002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x7, 0x4, 0x402, 0x0, 0x1}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x4, &(0x7f0000000200)={r2, &(0x7f0000000040), 0x0}, 0x20) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000c7cd281de4f94fdb7f1483e02b3dbb717afd22cfcd45d7e66d09b6df1cd84c10847b873ff7df88d74afcc068d585039fc75feb62c591e2d922df74ff0d81f47f39364b46", @ANYRES16=r7, @ANYBLOB="1107000000000000000009000000080003", @ANYRES32=r5, @ANYRES32, @ANYBLOB], 0x6}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="e8ff26bd7000fcdb00000005002e0000000000050035000500000005002e00000000000800320003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040005) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x8, &(0x7f0000000200)=@raw=[@ldst={0x1, 0x2, 0x2, 0x8, 0xb, 0x18, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x7}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x51a, 0x0, 0x0, 0x0, 0xba}, @generic={0x3f, 0x5, 0x2, 0x6, 0x1395}], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) [ 3193.253432][T29934] FAULT_INJECTION: forcing a failure. [ 3193.253432][T29934] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3193.266664][T29934] CPU: 0 PID: 29934 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3193.275329][T29934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3193.285382][T29934] Call Trace: [ 3193.288665][T29934] dump_stack+0x188/0x20d [ 3193.292999][T29934] should_fail.cold+0x5/0xa [ 3193.297531][T29934] ? fault_create_debugfs_attr+0x140/0x140 [ 3193.303335][T29934] __alloc_pages_nodemask+0x17a/0x820 [ 3193.308692][T29934] ? inet6_fill_ifla6_attrs+0x1a3a/0x1fb0 [ 3193.314407][T29934] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3193.320131][T29934] ? mark_lock+0xbc/0x1220 [ 3193.324648][T29934] ? __nla_reserve+0x9b/0xc0 [ 3193.329411][T29934] cache_grow_begin+0x8c/0xc30 [ 3193.334172][T29934] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3193.339636][T29934] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3193.345449][T29934] ? __nla_reserve+0x9b/0xc0 [ 3193.350061][T29934] __kmalloc_node_track_caller+0x38/0x60 [ 3193.355694][T29934] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3193.361069][T29934] pskb_expand_head+0x148/0x1020 [ 3193.366012][T29934] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3193.371821][T29934] netlink_trim+0x1ea/0x240 [ 3193.376334][T29934] netlink_broadcast_filtered+0x5f/0xd40 [ 3193.381970][T29934] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3193.387528][T29934] ? rtmsg_ifinfo_build_skb+0xcd/0x1a0 [ 3193.392996][T29934] nlmsg_notify+0x90/0x250 [ 3193.397415][T29934] rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 3193.402857][T29934] rtmsg_ifinfo+0x7f/0xa0 [ 3193.407174][T29934] netdev_state_change+0x121/0x140 [ 3193.412290][T29934] ? netdev_notify_peers+0xc0/0xc0 [ 3193.417404][T29934] ? dev_change_xdp_fd+0x2fb/0x600 [ 3193.422512][T29934] ? dev_disable_lro+0x320/0x320 [ 3193.427475][T29934] do_setlink+0x2d6d/0x35e0 [ 3193.431991][T29934] ? rtnl_getlink+0xab0/0xab0 [ 3193.436662][T29934] ? find_held_lock+0x2d/0x110 [ 3193.441423][T29934] ? is_bpf_text_address+0xa9/0x160 [ 3193.446615][T29934] ? mark_lock+0xbc/0x1220 [ 3193.451033][T29934] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3193.456943][T29934] ? __nla_validate_parse+0x2af/0x1cd0 [ 3193.462402][T29934] ? nla_memcpy+0xa0/0xa0 [ 3193.466739][T29934] ? __nla_parse+0x2e/0x60 [ 3193.471188][T29934] __rtnl_newlink+0xc96/0x1590 [ 3193.475992][T29934] ? rtnl_link_unregister+0x240/0x240 [ 3193.481372][T29934] ? __bpf_address_lookup+0x290/0x290 [ 3193.486746][T29934] ? is_bpf_text_address+0xcb/0x160 [ 3193.491954][T29934] ? kernel_text_address+0x6e/0xe0 [ 3193.497071][T29934] ? __kernel_text_address+0x9/0x30 [ 3193.502279][T29934] ? unwind_get_return_address+0x5a/0xa0 [ 3193.507907][T29934] ? profile_setup.cold+0xc1/0xc1 [ 3193.512927][T29934] ? arch_stack_walk+0x84/0xd0 [ 3193.517828][T29934] ? stack_trace_save+0x8c/0xc0 [ 3193.522669][T29934] ? stack_trace_consume_entry+0x160/0x160 [ 3193.528490][T29934] ? rtnl_newlink+0x46/0xa0 [ 3193.532986][T29934] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3193.538527][T29934] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3193.544502][T29934] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3193.550308][T29934] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3193.555852][T29934] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3193.560982][T29934] rtnl_newlink+0x64/0xa0 [ 3193.565311][T29934] ? __rtnl_newlink+0x1590/0x1590 [ 3193.570318][T29934] rtnetlink_rcv_msg+0x44e/0xad0 [ 3193.575254][T29934] ? rtnl_bridge_getlink+0x870/0x870 [ 3193.580537][T29934] ? mark_held_locks+0xe0/0xe0 [ 3193.585297][T29934] ? netlink_deliver_tap+0x146/0xb50 [ 3193.590582][T29934] netlink_rcv_skb+0x15a/0x410 [ 3193.595341][T29934] ? rtnl_bridge_getlink+0x870/0x870 [ 3193.600633][T29934] ? netlink_ack+0xa80/0xa80 [ 3193.605226][T29934] netlink_unicast+0x537/0x740 [ 3193.610000][T29934] ? netlink_attachskb+0x810/0x810 [ 3193.615120][T29934] ? _copy_from_iter_full+0x25c/0x870 [ 3193.620484][T29934] ? __phys_addr_symbol+0x2c/0x70 [ 3193.625491][T29934] ? __check_object_size+0x171/0x437 [ 3193.630773][T29934] netlink_sendmsg+0x882/0xe10 [ 3193.635550][T29934] ? aa_af_perm+0x260/0x260 [ 3193.640055][T29934] ? netlink_unicast+0x740/0x740 [ 3193.644983][T29934] ? netlink_unicast+0x740/0x740 [ 3193.649920][T29934] sock_sendmsg+0xcf/0x120 [ 3193.654335][T29934] ____sys_sendmsg+0x6b9/0x7d0 [ 3193.659103][T29934] ? kernel_sendmsg+0x50/0x50 [ 3193.663775][T29934] ___sys_sendmsg+0x100/0x170 [ 3193.668450][T29934] ? sendmsg_copy_msghdr+0x70/0x70 [ 3193.673568][T29934] ? __fget_files+0x329/0x4f0 [ 3193.678255][T29934] ? ksys_dup3+0x3c0/0x3c0 [ 3193.682669][T29934] ? find_held_lock+0x2d/0x110 [ 3193.687429][T29934] ? vfs_write+0x342/0x5c0 [ 3193.691845][T29934] ? __fget_light+0x208/0x270 [ 3193.696518][T29934] __sys_sendmsg+0xec/0x1b0 [ 3193.701006][T29934] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3193.706059][T29934] ? vfs_write+0x15b/0x5c0 [ 3193.710462][T29934] ? trace_hardirqs_off_caller+0x55/0x230 [ 3193.716179][T29934] ? do_syscall_64+0x21/0x7d0 [ 3193.720851][T29934] do_syscall_64+0xf6/0x7d0 [ 3193.725415][T29934] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3193.731300][T29934] RIP: 0033:0x45c849 [ 3193.735196][T29934] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3193.754802][T29934] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3193.763366][T29934] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3193.771327][T29934] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3193.779294][T29934] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3193.787252][T29934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3193.795238][T29934] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000034 [ 3193.809352][T29934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3193.819493][T29937] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:06:46 executing program 1 (fault-call:1 fault-nth:53): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3194.102560][T29942] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. 09:06:46 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000280000"], 0x34}}, 0x0) 09:06:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001f08000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3194.344144][T29952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3194.353603][T29952] FAULT_INJECTION: forcing a failure. [ 3194.353603][T29952] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3194.366821][T29952] CPU: 0 PID: 29952 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 3194.375498][T29952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3194.385570][T29952] Call Trace: [ 3194.388850][T29952] dump_stack+0x188/0x20d [ 3194.393183][T29952] should_fail.cold+0x5/0xa [ 3194.397689][T29952] ? fault_create_debugfs_attr+0x140/0x140 [ 3194.403537][T29952] ? __lock_acquire+0x14bd/0x3ca0 [ 3194.408554][T29952] __alloc_pages_nodemask+0x17a/0x820 [ 3194.413930][T29952] ? ___sys_sendmsg+0x100/0x170 [ 3194.418797][T29952] ? __sys_sendmsg+0xec/0x1b0 [ 3194.423477][T29952] ? do_syscall_64+0xf6/0x7d0 [ 3194.428152][T29952] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3194.434224][T29952] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 3194.439942][T29952] ? find_held_lock+0x2d/0x110 [ 3194.444711][T29952] cache_grow_begin+0x8c/0xc30 [ 3194.449525][T29952] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3194.454999][T29952] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 3194.460876][T29952] __kmalloc_node_track_caller+0x38/0x60 [ 3194.466540][T29952] __kmalloc_reserve.isra.0+0x39/0xe0 [ 3194.471913][T29952] __alloc_skb+0xef/0x5a0 [ 3194.476263][T29952] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 3194.481833][T29952] ? if_nlmsg_size+0x541/0xa70 [ 3194.486597][T29952] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 3194.492020][T29952] rtmsg_ifinfo_event.part.0+0x49/0xe0 [ 3194.497557][T29952] rtmsg_ifinfo+0x7f/0xa0 [ 3194.501897][T29952] netdev_state_change+0x121/0x140 [ 3194.507014][T29952] ? netdev_notify_peers+0xc0/0xc0 [ 3194.512135][T29952] ? dev_change_xdp_fd+0x2fb/0x600 [ 3194.517253][T29952] do_setlink+0x2d6d/0x35e0 [ 3194.521763][T29952] ? rtnl_getlink+0xab0/0xab0 [ 3194.526436][T29952] ? find_held_lock+0x2d/0x110 [ 3194.531238][T29952] ? is_bpf_text_address+0xa9/0x160 [ 3194.536438][T29952] ? mark_lock+0xbc/0x1220 [ 3194.540843][T29952] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3194.546724][T29952] ? __nla_validate_parse+0x2af/0x1cd0 [ 3194.552186][T29952] ? nla_memcpy+0xa0/0xa0 [ 3194.556532][T29952] ? __nla_parse+0x2e/0x60 [ 3194.560948][T29952] __rtnl_newlink+0xc96/0x1590 [ 3194.565818][T29952] ? rtnl_link_unregister+0x240/0x240 [ 3194.571183][T29952] ? __bpf_address_lookup+0x290/0x290 [ 3194.576554][T29952] ? is_bpf_text_address+0xcb/0x160 [ 3194.581757][T29952] ? kernel_text_address+0x6e/0xe0 [ 3194.586872][T29952] ? __kernel_text_address+0x9/0x30 [ 3194.592073][T29952] ? unwind_get_return_address+0x5a/0xa0 [ 3194.597699][T29952] ? profile_setup.cold+0xc1/0xc1 [ 3194.602719][T29952] ? arch_stack_walk+0x84/0xd0 [ 3194.607479][T29952] ? stack_trace_save+0x8c/0xc0 [ 3194.612327][T29952] ? stack_trace_consume_entry+0x160/0x160 [ 3194.618234][T29952] ? rtnl_newlink+0x46/0xa0 [ 3194.622780][T29952] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3194.628327][T29952] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3194.634325][T29952] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 3194.640216][T29952] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 3194.645750][T29952] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 3194.650847][T29952] rtnl_newlink+0x64/0xa0 [ 3194.655182][T29952] ? __rtnl_newlink+0x1590/0x1590 [ 3194.660321][T29952] rtnetlink_rcv_msg+0x44e/0xad0 [ 3194.665253][T29952] ? rtnl_bridge_getlink+0x870/0x870 [ 3194.670538][T29952] ? mark_held_locks+0xe0/0xe0 [ 3194.675304][T29952] ? netlink_deliver_tap+0x146/0xb50 [ 3194.680587][T29952] netlink_rcv_skb+0x15a/0x410 [ 3194.685362][T29952] ? rtnl_bridge_getlink+0x870/0x870 [ 3194.690637][T29952] ? netlink_ack+0xa80/0xa80 [ 3194.695248][T29952] netlink_unicast+0x537/0x740 [ 3194.700083][T29952] ? netlink_attachskb+0x810/0x810 [ 3194.705180][T29952] ? _copy_from_iter_full+0x25c/0x870 [ 3194.710543][T29952] ? __phys_addr_symbol+0x2c/0x70 [ 3194.715574][T29952] ? __check_object_size+0x171/0x437 [ 3194.720858][T29952] netlink_sendmsg+0x882/0xe10 [ 3194.725626][T29952] ? aa_af_perm+0x260/0x260 [ 3194.730210][T29952] ? netlink_unicast+0x740/0x740 [ 3194.735169][T29952] ? netlink_unicast+0x740/0x740 [ 3194.740115][T29952] sock_sendmsg+0xcf/0x120 [ 3194.744520][T29952] ____sys_sendmsg+0x6b9/0x7d0 [ 3194.749271][T29952] ? kernel_sendmsg+0x50/0x50 [ 3194.753966][T29952] ___sys_sendmsg+0x100/0x170 [ 3194.758638][T29952] ? sendmsg_copy_msghdr+0x70/0x70 [ 3194.763744][T29952] ? __fget_files+0x329/0x4f0 [ 3194.768419][T29952] ? ksys_dup3+0x3c0/0x3c0 [ 3194.772836][T29952] ? find_held_lock+0x2d/0x110 [ 3194.777604][T29952] ? vfs_write+0x342/0x5c0 [ 3194.782118][T29952] ? __fget_light+0x208/0x270 [ 3194.786828][T29952] __sys_sendmsg+0xec/0x1b0 [ 3194.791482][T29952] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3194.796507][T29952] ? vfs_write+0x15b/0x5c0 [ 3194.800978][T29952] ? trace_hardirqs_off_caller+0x55/0x230 [ 3194.806709][T29952] ? do_syscall_64+0x21/0x7d0 [ 3194.811403][T29952] do_syscall_64+0xf6/0x7d0 [ 3194.815919][T29952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3194.821823][T29952] RIP: 0033:0x45c849 [ 3194.825726][T29952] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:06:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3194.845531][T29952] RSP: 002b:00007fd0ed277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3194.853965][T29952] RAX: ffffffffffffffda RBX: 00007fd0ed2786d4 RCX: 000000000045c849 [ 3194.861953][T29952] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 3194.869937][T29952] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3194.877904][T29952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3194.886562][T29952] R13: 00000000000009fc R14: 00000000004ccb3c R15: 0000000000000035 09:06:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x8}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:06:47 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000300000"], 0x34}}, 0x0) [ 3195.335627][T29964] bridge0: port 2(bridge_slave_1) entered disabled state [ 3195.343153][T29964] bridge0: port 1(bridge_slave_0) entered disabled state [ 3198.282240][T29964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3198.492234][T29964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3218.562544][T29971] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3218.594251][T29970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:11 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x500000000000000) 09:07:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010002008000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000)=0x2, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}}, 0x20040000) 09:07:11 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00003f0000"], 0x34}}, 0x0) 09:07:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x48}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0f00000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010002508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c000000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3219.087843][T29995] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c00e000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x4c}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:12 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000400000"], 0x34}}, 0x0) [ 3219.349125][T30024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:12 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800000000000000) 09:07:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003008000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="e03f030010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:12 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0069480000"], 0x34}}, 0x0) 09:07:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x68}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ip6tnl0\x00', 0xa732}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000)) [ 3219.826239][T30033] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="7400002010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x1d) 09:07:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000408000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x6c}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="00f0ff7f10000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:12 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000600000"], 0x34}}, 0x0) [ 3220.254058][T30059] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x806000000000000) 09:07:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000001000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x74}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000608000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:13 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0048690000"], 0x34}}, 0x0) 09:07:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000002000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ipvlan1\x00', 0xa732}) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/187, &(0x7f0000000000)=0xbb) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x1}}, 0x10) [ 3221.041813][T30082] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000a000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000708000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x7a}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:14 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000810000"], 0x34}}, 0x0) [ 3221.527266][T30116] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:14 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xd00000000000000) 09:07:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000f000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:14 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000f00000"], 0x34}}, 0x0) 09:07:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x96}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000808000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x1, 'vxcan1\x00', {}, 0x5}) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000200)=""/182, &(0x7f0000000000)=0xb6) 09:07:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3402000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3222.171977][T30133] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001008000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0xf0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34f0000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:15 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000400"], 0x34}}, 0x0) [ 3222.456206][T30155] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010002508000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:16 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1000000000000000) 09:07:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34501a0010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x300}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010003008000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:16 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000800"], 0x34}}, 0x0) 09:07:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x24000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="341a500010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r3) [ 3223.273384][T30177] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000502000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x500}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:16 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00fffff000"], 0x34}}, 0x0) 09:07:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400810010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3223.748601][T30202] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000503000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400f00010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x600}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000001"], 0x34}}, 0x0) 09:07:17 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f00000000000000) 09:07:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x886c}, @val={0x2, 0x80, 0xc4ff, 0x74e, 0x6, 0x2}, @llc={@snap={0xaa, 0x0, "01", '\ac\r', 0x22f0, "d514a839b631ba2013c4633b429e736acad37b25dc4631907d6884e6af8d9e3a06f9e0ff8fd443ff3de3fac1424a9a5c76464e2ad0b38703e292cc0f2225cd58f4015bd8694fc843a7a188a0f1a8c0ec3078b69d810ad934d5226256ce2641158d486117c5fbebf15ef94f82940e07340fb13bacb209d67d44361bbc6114f2c2600bcb52ecf6ab11583f24ec35e48161fed8a1977c6dc06b0aae371d92886b0071deda184bcc8a2d0d0e65283f44d257eeeb65b1b7f45745524133"}}}, 0xd1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000073000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3224.432170][T30229] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3224.571777][T30234] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3420000090000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000504000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x700}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000002"], 0x34}}, 0x0) 09:07:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400020010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3224.818233][T30252] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400f00010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000505000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x1063}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000003"], 0x34}}, 0x0) [ 3225.130804][T30270] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:18 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4000000000000000) 09:07:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400501a10000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x721402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000506000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x1f00}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000004"], 0x34}}, 0x0) 09:07:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34001a5010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3225.610702][T30290] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f0000000100)=r5, 0x12) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delrule={0x28, 0x21, 0x101, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r7}}]}, 0x28}}, 0x0) r8 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={r5, r7, r8}, 0xc) r9 = socket(0x4000000000010, 0x2, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x30a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x4599, 0x1, 0x80000000, 0x6, 0x43, 0x2004}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000507000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400008110000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3225.750855][T30294] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x2000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000f010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3225.984170][T30314] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4305000000000000) 09:07:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000509000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000005"], 0x34}}, 0x0) 09:07:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x3996}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000a000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x20}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x100000, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x6, &(0x7f0000000140)=[{0xfffc, 0x0, 0x80, 0x9c2}, {0x94, 0x5, 0x20, 0x4}, {0x0, 0xe1, 0xdb, 0x6}, {0x3, 0x3f, 0x9, 0x80000000}, {0x6, 0x40, 0x1, 0x4}, {0xffff, 0x3, 0x9, 0x7}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000c7cd281de4f94fdb7f1483e02b3dbb717afd22cfcd45d7e66d09b6df1cd84c10847b873ff7df88d74afcc068d585039fc75feb62c591e2d922df74ff0d81f47f39364b46", @ANYRES16=r4, @ANYBLOB="1107000000000000000009000000080003", @ANYRES32=r2, @ANYRES32, @ANYBLOB], 0x6}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000280)={r8, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r8}}, 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40101, 0x0) ioctl$TUNSETSNDBUF(r10, 0x400454d4, &(0x7f00000000c0)=0xfffffff9) [ 3226.743356][T30329] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000f000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3226.812959][T30331] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:07:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000210000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x3f00}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000006"], 0x34}}, 0x0) 09:07:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000073000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000002000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3227.123863][T30339] device veth103 entered promiscuous mode [ 3227.146337][T30346] device veth103 left promiscuous mode 09:07:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6000000000000000) 09:07:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000050a000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x4000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000a000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:20 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000007"], 0x34}}, 0x0) 09:07:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000f000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000050b000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:20 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000008"], 0x34}}, 0x0) 09:07:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000073000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000510000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x4800}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:21 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6558000000000000) 09:07:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010030008000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000511000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:21 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000010"], 0x34}}, 0x0) 09:07:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x4c00}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x351f02, 0x0) r1 = socket(0x4, 0x4, 0x4) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2b0f000000000000000067"], 0x3}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0xe21d6c53e4569462}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'gre0\x00', 0xa732}) 09:07:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010040008000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3229.117451][T30425] __nla_validate_parse: 4 callbacks suppressed [ 3229.117461][T30425] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x6ead) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x82, &(0x7f00000001c0)={0x0, 0xfffff000}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0)={r2, 0x8, 0x4, 0x3, 0x10000, 0x4}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x240c0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x9, 0x8, 0x1, 0x80000000}, {0x6, 0x6, 0x7f, 0x6}, {0xffed, 0x5, 0x81, 0x4}]}) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x20}) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f00000016c0)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000000c0), 0x4) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR64, @ANYBLOB="8820803387b2ca8c8c326170dde415b2fe23d575a00958cfce39cc000d644e004ca3ac065c3162e269f40f907cedc96796d9baa68dde2fab5a1e1b8615cff89ab637d1900cfb3006f2c6ce3be36301f27f27419d29ba709842891a33817d7a385c12b7062d81679c9fc371d6f119394526a4517a2d1ce01318e4b1a7784628265d57a4740e584a0b5eb08c9e0f06398920584a8163145a6be8fd4370665fe1599df5c8a19af7d97b73d293c8a156ac789d554d327b4302070da851f628494205dffeea20159bce0b93cf5367ec20fe4b3ff6b2be4a8034493b0cdef3cef8b4174cecd0d516f404aef6a844dc0b38", @ANYRESHEX=0x0, @ANYPTR64, @ANYRESOCT, @ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="9cdd32099d58969b35e0231b02997e3e6fd55beb5cc0193d5a1382087b3a131a902a580677803972d3df2aaacef6bb799288fb3f358437ac6eeb70b06dece667"], @ANYBLOB="48dc187228f27ee7dd57714f7835f4fec84a82296cc1267828c0653aac273dcbc4858e56a368f7a10624fb86cf78cb41bcea40a8bef6ba7ad55fbf0d90edae27dfc5a1e0e9839c62d874f8c4e8e21f91429ab861ea93baf1a9905080d132f2ce9122601054fe742bb81e8ccb843b67b81a8097841b7e21b1550b413d60ad74b11a91dee07c3a29557caaa5379c0b6e4c7d4d5c53cc2bf5a9dd147388802f668678fe3c32a2d9fc74e72029bb24ae63ea4ebbb5af5bf1c26c5c10ae317b8654", @ANYBLOB="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"], @ANYRES16=r7, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x2004891}, 0x8000) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) accept$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) 09:07:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000512000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x6310}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:22 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000018"], 0x34}}, 0x0) 09:07:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010020108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3229.512799][T30451] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800e000000000000) 09:07:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000513000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000808000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x6800}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:22 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000020"], 0x34}}, 0x0) 09:07:22 executing program 2: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108020000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3230.251720][T30471] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000514000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x6c00}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:23 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000028"], 0x34}}, 0x0) 09:07:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108f00000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3230.574445][T30484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3230.598554][T30493] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x7400}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3230.784616][T30503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3230.848615][T30505] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000518000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000030"], 0x34}}, 0x0) 09:07:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108501a00000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x7a00}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:24 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8035000000000000) 09:07:24 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3f2, 0x2, 0x70bd28, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0x48010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x309881, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200000001000000000006a24e38c13b7e845bb26c29b9fee105493444148661681e87262d79d2976eedf2377598e7828ad1cadfa5f52ac23ef3b68cb8d2d5fe97b382ffe91d4dae437f1f7e88c1b0ed62057b2e6c8666c829eeba3f20f9e18f2741e3ba747fcfb9ba5ca23b6bfb60dfc7bc19475109e667cd40b7656f9b715067bd4227faf0cc886ef254e0f8509d38f27709a931ec3da8beefab524145c990f1ddcaee80ced409a8c51bf4268da8b37b91324e982c2f91918897386f54934c4d1ef4d582986fad665e65d4f4b98beda5d2eeff0ecf3ce33bd67272830dd92c5ade3bf770361d8cb179", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f6224e858f9fcee56ae99a957ebe9f3264ca499fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5eda70d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x5}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000280)={r6, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010000000000000000000000007a", @ANYRES32=r6, @ANYBLOB="a401000000100000"], 0x20}}, 0x0) r8 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x30a, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000050a742d5cef1d08b53403760cf91f3d2", @ANYRES16=r9, @ANYBLOB="10002dbd7000fedbdf25070000004000018007000600666f000008000b0073697000080009006800000008000500020000001400030054e58114e000a4d457c9d949f5aa2b4d08000b0073697000"], 0x54}, 0x1, 0x0, 0x0, 0x44011}, 0x20040004) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000280)=r6) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) [ 3231.428857][T30517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001081a5000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3231.470053][T30520] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x8100}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000525000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b000000003f"], 0x34}}, 0x0) 09:07:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108008100000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3231.755072][T30531] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3231.771307][T30535] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000040"], 0x34}}, 0x0) 09:07:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x9600}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000530000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3231.968188][T30545] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800f000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3232.014892][T30553] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108fffff0000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3232.130509][T30559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3232.323135][T30564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:25 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8100000000000000) 09:07:25 executing program 2: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x804000}, 0xffffffffffffffec, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x440c0}, 0x40) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1407, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000051c090000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:25 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000060"], 0x34}}, 0x0) 09:07:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x9639}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000010057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000057c0b0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3232.613431][T30574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3232.641271][T30579] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000020057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0xf000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:25 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000004869"], 0x34}}, 0x0) 09:07:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005140c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3232.956008][T30593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3232.966152][T30597] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000501a0057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3233.160938][T30610] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x86ddffff00000000) 09:07:26 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000081"], 0x34}}, 0x0) 09:07:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x40000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000051c0c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="a300000000e82646a055c923d4c08aa5e9", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) accept$packet(r3, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001a80)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x7, 0x4}, 0x0, 0x0, &(0x7f00000002c0)={0x5, 0x8, 0x9, 0x3}, &(0x7f0000000300)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x1}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r5}, 0x8, 0x3, 0x4}) 09:07:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000810057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:26 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00c0a39d8e"], 0x34}}, 0x0) [ 3233.787717][T30622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108ffffff9e0057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0xf0ffff}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005240c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108fffffff00057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3234.055201][T30640] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3234.203907][T30651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3234.250880][T30656] __nla_validate_parse: 4 callbacks suppressed [ 3234.250890][T30656] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3234.337074][T30629] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3234.347984][T30659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:07:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8847000000000000) 09:07:27 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00ffffff9e"], 0x34}}, 0x0) 09:07:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000052c0c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800f0ffff0057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400400, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x16) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xb}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x75c, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2a}]}, 0x30}, 0x1, 0x0, 0x0, 0x20001080}, 0x4) [ 3234.904805][T30668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3234.972193][T30671] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005340c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001087fffffff0057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x3000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:27 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b008e9da3c0"], 0x34}}, 0x0) 09:07:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001089effffff0057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3235.260785][T30692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3235.277014][T30695] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000053c0c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3235.361225][T30697] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3235.399584][T30701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:28 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8848000000000000) 09:07:28 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00ffffffc3"], 0x34}}, 0x0) 09:07:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x4000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005440c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108f0ffffff0057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket(0x4000000000010, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x4020001) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x4841, 0x2) [ 3235.997170][T30714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000200000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3236.053723][T30717] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:28 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00fffffff0"], 0x34}}, 0x0) [ 3236.155792][T30729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x5000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800f000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000054c0c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3236.424670][T30740] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3236.456788][T30742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:29 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000f0ffff"], 0x34}}, 0x0) [ 3236.479433][T30746] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8864000000000000) 09:07:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800501a000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005540c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x6000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:29 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b007fffffff"], 0x34}}, 0x0) 09:07:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='cubic\x00', 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES64=0x0], 0x3}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b735b814fc50eb892125a3ef2b"}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local}]}, 0x58}, 0x1, 0x0, 0x0, 0x4880}, 0x40000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x120, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7be}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x24008014}, 0x40011) [ 3237.167791][T30766] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000055c0c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3237.229744][T30771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108001a50000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x7000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:30 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b009effffff"], 0x34}}, 0x0) [ 3237.499997][T30779] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3237.519575][T30787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000081000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005640c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3237.716452][T30801] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:31 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88a8ffff00000000) 09:07:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x8000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:31 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00c3ffffff"], 0x34}}, 0x0) 09:07:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000f0000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000056c0c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r3, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000280)={r8, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r8}}, 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) [ 3238.313710][T30816] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800fffff00057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x1f000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3238.436453][T30823] device veth105 entered promiscuous mode 09:07:31 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00f0ffffff"], 0x34}}, 0x0) 09:07:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005740c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3238.617254][T30829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3238.639057][T30817] device veth107 entered promiscuous mode [ 3238.670593][T30809] device veth105 left promiscuous mode 09:07:31 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x20000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3238.721758][T30809] device veth107 left promiscuous mode 09:07:32 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88caffff00000000) 09:07:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000157000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005900c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x3f000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:32 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f0000000200)=0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x82, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r4, 0x3}, &(0x7f0000000280)=0x8) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x140b, 0xb00, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20008000) [ 3239.471906][T30865] __nla_validate_parse: 9 callbacks suppressed [ 3239.471917][T30865] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000257000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3239.540829][T30867] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x40000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:32 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3239.759461][T30873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3239.788832][T30878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005980c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000501a57000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3239.811156][T30882] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:32 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00ffffffff"], 0x34}}, 0x0) [ 3239.926490][T30886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3239.992403][T30894] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:33 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8906000000000000) 09:07:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x48000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005a00c0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000008157000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000c7cd281de4f94fdb7f1483e02b3dbb717afd22cfcd45d7e66d09b6df1cd84c10847b873ff7df88d74afcc068d585039fc75feb62c591e2d922df74ff0d81f47f39364b46", @ANYRES16=r4, @ANYBLOB="1107000000000000000009000000080003", @ANYRES32=r2, @ANYRES32, @ANYBLOB], 0x6}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x7) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3f95f765", @ANYRES32=r8, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="8e8a832cb54893b1076c0db37e5fe9b35aea9055ddcbf488a8a6ec2e91db8ec4a68475dc480df1beb8fdae2bc8d2dba02a53504410e2474fd27562a7bd402a916f3e593867e840768eebd46d76e47eb52f299f21c4a0", @ANYBLOB="bf852b0b3d91cc4e3ab771bff35a76e774cb735e56e1f2d62ba1648760db4aa2cd2be2385a1bc756043416db57c39680728d0e2e2bbe872350b1b205b9d927efce135ab0b24091167f009601aa3a848d8902a048fbd2fa143aa017a41bbfb3209b28fa83b0fc695b5f78720256209fb983e46642eab670f172c90fcf618d749410a6b315a70f3f8a", @ANYRES64=r3, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRESDEC], @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x5}}, 0x0) r9 = socket(0x11, 0x800000003, 0x7fffffff) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000280)={r8, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010000000000000000000000007a", @ANYRES32=r8, @ANYBLOB="0000663bfab0d181"], 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x7c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000801) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:33 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3240.615902][T30911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3240.641850][T30913] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800ffffff9e57000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:33 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x4c000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005d40d0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3240.800282][T30926] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800fffffff057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3241.013501][T30938] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005dc0d0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3241.085296][T30943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3241.099615][T30942] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x894f000000000000) 09:07:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000f0ffff57000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:34 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x63100000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005080e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vxcan1\x00', 0x100}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00}}, 0x20}}, 0x0) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000280)={r6, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r6}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000033c0)={'wg0\x00', r6}) getpeername$packet(0xffffffffffffffff, &(0x7f0000003400)={0x11, 0x0, 0x0}, &(0x7f0000003440)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004080)={&(0x7f0000003480)={0xbdc, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x229e}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x577}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x3ff, 0x1, 0x0, 0xfff}, {0x0, 0x7, 0x6, 0xfffffc0c}, {0x6, 0x0, 0xdf, 0x9}, {0xfff9, 0x3, 0x6, 0x7}, {0x3ff, 0x6, 0x2, 0x9f5}, {0x1ff, 0x8, 0x9, 0x6}, {0x4bb, 0x9, 0x72, 0x3ff}, {0x200, 0x81, 0x2, 0xdf}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5901}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6879}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x190, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x5, 0x9, 0x1}, {0x401, 0xe0, 0x4, 0x4}, {0x8, 0x1, 0xe2, 0xff}, {0x0, 0x25, 0x0, 0xb6}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xdd5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xa183}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x84c8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}]}, 0xbdc}, 0x1, 0x0, 0x0, 0x10}, 0x48880) 09:07:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005100e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3241.807614][T30963] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3241.893637][T30959] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3241.944065][T30965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3241.955617][T30967] device veth111 entered promiscuous mode 09:07:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x68000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108007fffffff57000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:34 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3241.995499][T30973] device veth111 left promiscuous mode [ 3242.075960][T30977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3242.135389][T30982] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005180e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3242.215467][T30986] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005200e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3242.444583][T30963] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:07:35 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xee0f000000000000) 09:07:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x68407d98}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:35 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108009effffff57000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005340e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x121200, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x4000000000000000}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x1, @mcast2, 0x32a}, @in={0x2, 0x4e22, @multicast1}], 0x2c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe92, 0x20c49a, 0x0, 0x27) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1b30eea3b252c83c}, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000300)="3586389c9471a6e3e3253932b4f6fe6bf3ef98bd7020cf65a3377e3c82e6ed2e6bb1d56cbb539bd2a2d776ae36497263a2354c4a785084ba951411b9e76a266075c26d83582a6f02d63475c9f1f70b6f865d06a069041ec86386f0fe04036703d7fc5361eea9b1c4a20ea38d7ec15844fcfc4ec05213edc47e452b475c259c8511e359e761c7b72bdec6598892d316cce4c62117b7ea349c5042cec31c625a8a0d94f357ef08dba2f68f0fd13f157e7d3b455ca09b01c7e11e678bff64b91a0d56", 0xc1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000f8000000000200000100ad6cec59704b", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x200448c0}, 0x40) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000053c0e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3242.951131][T31009] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x6c000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800f0ffffff57000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:35 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005440e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x74000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3243.269669][T31031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfc0f000000000000) 09:07:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000002000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:36 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x7a000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000054c0e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3244.029639][T31050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:37 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000f0000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005540e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x81000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:37 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180)='wireguard\x00') sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x30a, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000000c0)=0x87, 0x4) write(r3, &(0x7f0000000000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000044, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48040}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xc4, r5, 0x415, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x40}, @TIPC_NLA_NODE={0x10}, @TIPC_NLA_SOCK={0x28}, @TIPC_NLA_NODE={0x10}, @TIPC_NLA_SOCK={0x28}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8144}, 0x8000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x120, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6b4c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff389}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5b2}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9f1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe772f00}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ab7}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000801}, 0x4004000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000001c0)={0xf40, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xf24, 0x8, 0x0, 0x1, [{0x3c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x38c, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="a858abae0e08c91f492291380fb84e8a"}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xb}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="7cee0b4c7e0d1f9af4699901ae4450e3"}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x2d}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3ff, @dev={0xfe, 0x80, [], 0x2f}, 0x82f}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x4a4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x180, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr="6b073201da30f451331d79e9b712c8bf"}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="ee6c8fe934a810e326249697902fb9d6"}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x88bb, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffffff00000000) 09:07:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x96000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:37 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800001a500057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1_vlan\x00', 0x1200}) 09:07:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005640e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3245.149869][T31103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:37 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r0 = socket(0x6, 0x800, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "f122163e58c8704e", "a8169732fb5f864a5ee8b8e9c4917959d66a9089f9499ece2884915ef5aca1d3", "7c3c5bcb", "7157ae553119dede"}, 0x38) [ 3245.191519][T31104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000810057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000056c0e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x96390000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x1000, 0x0) socketpair(0x10, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x82, &(0x7f00000001c0)={r4}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4, 0xfff}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:38 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3245.514464][T31129] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3245.549910][T31126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:39 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:07:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005740e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x987d4068}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000f00057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:39 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket(0x4000000000010, 0x1000000000080002, 0x80008001) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) r3 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x30a, 0x0) connect(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @multicast2}, 0x3, 0x3, 0x4}}, 0x80) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) [ 3246.305093][T31154] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3246.372357][T31155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000020057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000057c0e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x9effffff}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:39 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000f00057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3246.694903][T31174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3246.708214][T31179] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:39 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3246.866791][T31186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x28082, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f45344600000000da010000ffffffff00380200026a873ee557d9e9dba1de45a5e426ce8ca7351d52846889aec5e4224028e8f12c8f4891c82e2db10bfc1dcddcd890a2"], 0x44) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:07:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005840e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000501a57000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:40 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:40 executing program 2: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) getpeername$tipc(r0, &(0x7f00000001c0)=@id, &(0x7f0000000200)=0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x8000, 0x1, 0x2, 0x2, 0x5, 0xe87}, &(0x7f0000000140)=0x20) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) splice(r2, &(0x7f0000000180)=0x7, r3, &(0x7f00000017c0)=0x100000001, 0x9, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100011950223ff2d55aac3a43a150", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000240)={'veth1_to_team\x00', 0x400}) [ 3247.386808][T31197] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000058c0e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000001a5057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3247.443944][T31204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:40 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3247.616048][T31217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3247.646963][T31220] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0xfeffffff}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005940e0000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3247.714876][T31209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:07:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000008157000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3247.914911][T31236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:41 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x30a, 0x0) r4 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x30a, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000140)=""/42, &(0x7f0000000180)=0x2a) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:07:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508020000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000f057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0xfffff000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:41 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) accept4$llc(r1, 0x0, &(0x7f0000000000), 0x400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) [ 3248.399714][T31251] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508030000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000257000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:41 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3248.768888][T31270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057020000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0xffffff9e}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3248.970923][T31282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:42 executing program 4: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@del={0xe8, 0x11, 0x800, 0x70bd2c, 0x25dfdbfd, {{'rfc4106(gcm(aes))\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x400}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYPTR], 0x8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) splice(r3, &(0x7f0000000300)=0x582, r0, &(0x7f0000000340)=0xfffffffffffeffff, 0x1, 0x16) 09:07:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508040000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:42 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0xfffffff0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x781, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) bind$bt_sco(r2, &(0x7f0000000100)={0x1f, @fixed={[], 0x10}}, 0x8) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x400}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x10, 0x3, 0x100, 0x40, 0x413, 0xffffffffffffffff, 0x4, [], 0x0, r4, 0x0, 0x1, 0x3}, 0x40) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000400)="4b4bf7e3bd52ddef970d70e3779ea4f6589996d2bb25ec62b910bf781457b5", 0x1f}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x5eb, 0x5, 0x8000, 0x6}) 09:07:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057f00000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3249.534326][T31294] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3249.563203][T31300] __nla_validate_parse: 6 callbacks suppressed [ 3249.563213][T31300] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057501a00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xa732}) 09:07:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508050000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:42 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0xfffffffe}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000000000571a5000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3249.926980][T31313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3249.941123][T31324] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3250.071583][T31327] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3250.085857][T31330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x30a, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5f6e4b05f63068b1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r6, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x4000000) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:07:43 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508060000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x1000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057008100000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x10001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) [ 3250.579749][T31342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508080000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700f000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3250.640031][T31345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000140)=""/170, 0xaa}, {&(0x7f00000000c0)=""/8, 0x8}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000003580)=""/4107, 0x100b}, {&(0x7f0000002200)=""/80, 0x50}, {&(0x7f0000002280)=""/225, 0xe1}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/242, 0xf2}], 0x8, &(0x7f0000003500)=""/74, 0x4a}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$nl_xfrm(0x10, 0x3, 0x6) [ 3250.840061][T31362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:43 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x4000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057fffff0000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3251.108556][T31377] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3251.136103][T31378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3251.149161][T31367] A link change request failed with some changes committed already. Interface veth20 may have been left with an inconsistent configuration, please check. 09:07:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508100000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000010000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:44 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:44 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) r3 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x30a, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000009c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000500)={0x38, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x54004) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="c2dd31ad98c994d799059dbe77446f7f1d526515d565eb83e9f7de9c75a92b1b0f9254671f93173cf72923f2e6bce7dff51e5a1ceeeafe81a4db214113f7505d09d390e60b07b8f48fb06c88d042fb68f80410411f260ed050bf633f073ce3d66d14e872bdaec2a3c34bd5de574b4ce676c8acbe8d0115ab5ea4ec66", 0x7c}, {&(0x7f00000001c0)="21e653dded9deaacf6302d686080d329518e0809ce4b785018eb7d387fee3c42c7555ce3ce91a425d61002f4e375f6377ac30602df4b503c2bf5a5c763619245e4692348af856c68f1a169e4965f41dd0c46c237c4587b10d2a52b25fc025f1a4f001039a1d5bbee45", 0x69}, {&(0x7f0000000240)="fedb6acbe138d6c7f69ee3169c224ed474fde9151aa4201525578b2c7fa1c4598807495eafdabe9826d993fa39b7bca90244ae4a3cd897f8c728c27cb7d71f0bed565017417164298019b8f9c081fdff568d615b8232d7dccd91d203d6ef795e400bda0136e3d0329064921bcae6d9a8bf9dd9549461b971cbe51067c48ea05a852df6d86df7aa0f9e544bb0e49c0d0fa5fddbedc488e14112d5afa5793b1d8f011ad301d3e3106867bde0df699edf4e60b68aefce32d7d03fe581f74e46f578493a41948f01cff6033b9d204d66", 0xce}, {&(0x7f0000000340)="84698e6242b8cfdb340417bcdb1ef8a466629da9708a3328fb736be50dccc46b5ab19abd1e769872180a81b7e0517d40c6414d732cdd41762b9b58431c08edf9ab79a18f9e447a89733f0bd77effd434e0116524846a02cd78d6c3bfdc75e5caccb1770a5ae3", 0x66}], 0x4}, 0x4000004) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="2b0f000000000000000067"], 0x3}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x318, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_PROBE_RESP={0x304, 0x91, "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"}]}, 0x318}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000940)={0x1, [0x8000]}, &(0x7f0000000980)=0x6) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) [ 3251.750296][T31390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3251.780026][T31394] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000020000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:44 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3251.934406][T31403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x100000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3252.206373][T31413] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vlan1\x00', 0x1000}) 09:07:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000000000570000501a0000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508180000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x200000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:45 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508280000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3252.372990][T31422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3252.406943][T31427] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000810000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508600000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3252.627638][T31438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:45 executing program 2: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) connect$netrom(r0, &(0x7f00000001c0)={{0x3, @null, 0x9}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000000c0)=0x1e) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) 09:07:45 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000f0ffff"], 0x34}}, 0x0) 09:07:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x300000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057ffffff9e0000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508f00000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:45 executing program 4: setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001300)={0x0, 0x7}, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x4000000000010, 0x1000000000080002, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000001240), &(0x7f0000001280)=0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'\x00', {0x7, 0x4e23, @remote}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f00000012c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) write$binfmt_misc(r7, &(0x7f0000001140)={'syz1', "894b4d335c51ac7a29e310448942333876eb0570a5567ddd2c9c0f74f2deb584463e2ab1c3b92f6a91b72dd8eea3e6f88632b607239e9ef1e008db1f90cbb9a008562763be3b74067c7328ef797ab9a7be5c262d4daeeb177372112631b41d42615b1736fcf6812490281ef2d2b4f1ff7c222371259d65351d872d6162804c6a4b5fa90839c5febb9eee1178e7296c39b3221deec36a729314a6cc99904b7485a93c5a7b740606418d708bf465daba04983d1df548361e93c70b8765c0187cb1142a56f459447f6ef09130c8d6f2a270"}, 0xd4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r9, @ANYBLOB="08001b0000000074"], 0x5}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000140)=""/4096, &(0x7f00000000c0)=0x1000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 3253.014684][T31453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057fffffff00000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3253.061619][T31452] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508000300000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:46 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000020000"], 0x34}}, 0x0) [ 3253.341043][T31470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3253.356469][T31462] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508000500000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700f0ffff0000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x400000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3253.526950][T31483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) setsockopt(r0, 0x8000, 0x5, &(0x7f0000000140)="e7a62baf37ce2da7aae3a82c1ba036ceb54e1c28cfa6e421aaef6f6a6e878c9097b5ff6083880cb84d38a5ce9769ef8007c1c5a88a361e2ab1531ab4a64caa1f38b96f00d69c9eac5e851f2413d8aa6096e50352d1a3eec5b7be1803b8310f099e601ecb4b3afe61f0e7c224e5df1570c0da2549a4374d0b2bff9a91b40845d399a8dee68fa1e10312aa71c5ff61aff712b4aa9fe9cca891fe8ce0d332a39791fbf166895dec94f2a5c1ac6931c5eeb6385f31063deac731a0d3d952a2aa67a3c842fdebb666d707c4cade488c7c6a8457947611cec9d55af051cb643f552244e8edf6564d0a0df23a6af3e6", 0xec) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x800}) 09:07:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000000000577fffffff0000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:46 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000030000"], 0x34}}, 0x0) 09:07:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x500000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508000600000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3253.915835][T31500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:46 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x30a, 0x0) sendto$ax25(r5, &(0x7f0000000140)="59e4f85376306eee8a4b8373b2228040403d1ddf24579b1fd5e57900fc0a06ac983c268ac25dbab12aaffb5091e75e95363b02db9a63c263658a0ffb9a85758fa01612660cac", 0x46, 0x4, &(0x7f00000001c0)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:07:46 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/90, &(0x7f0000000040)=0x5a) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'caif0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r2, 0x4404}, {r4, 0xc080}, {r5, 0x8014}], 0x3, &(0x7f0000000200)={r6, r7+10000000}, &(0x7f0000000240)={[0x9]}, 0x8) 09:07:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000000000579effffff0000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x600000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508001800000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:46 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000040000"], 0x34}}, 0x0) [ 3254.209722][T31520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057f0ffffff0000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508001f00000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x700000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:47 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000050000"], 0x34}}, 0x0) 09:07:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x82, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0x3, @rand_addr="6b0c6241e2baaf04b606689d5a40568a", 0x3ff}}, 0x80, 0x4, 0xa6, 0x5, 0x20, 0x7, 0x3f}, &(0x7f0000000000)=0x9c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) getuid() [ 3254.530787][T31533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3254.577968][T31540] __nla_validate_parse: 3 callbacks suppressed [ 3254.577977][T31540] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057ffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3254.797692][T31555] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:48 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x10005, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x28, &(0x7f0000000140)}, 0x10) 09:07:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508002000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x800000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:48 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000060000"], 0x34}}, 0x0) 09:07:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3255.313703][T31564] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3255.399716][T31565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:48 executing program 2: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f0000000140)=@canfd={{0x0, 0x0, 0x1, 0x1}, 0x3a, 0x3, 0x0, 0x0, "e0c26d633ee806cd00f35293ac9bf8a07d8e09651647575eb1995696cd3ce6f46f846bf2a2c03e60a58126f3363f44b352821503841b6b79f4e728aa6cbd4cd3"}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x8000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x200}) 09:07:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x1f00000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508002800000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:48 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000070000"], 0x34}}, 0x0) [ 3255.719520][T31584] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3255.757865][T31591] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000c7cd281de4f94fdb7f1483e02b3dbb717afd22cfcd45d7e66d09b6df1cd84c10847b873ff7df88d74afcc068d585039fc75feb62c591e2d922df74ff0d81f47f39364b46", @ANYRES16=r5, @ANYBLOB="1107000000000000000009000000080003", @ANYRES32=r3, @ANYRES32, @ANYBLOB], 0x6}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000016c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000017c0)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000018c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x68, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x875a}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x46}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}]}, 0x68}}, 0x24000080) 09:07:48 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000080000"], 0x34}}, 0x0) 09:07:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x88802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x30a, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000006c0)={{0x33, @multicast2, 0x4e21, 0x4, 'wlc\x00', 0x38, 0x1f, 0x42}, {@multicast1, 0x4e21, 0x4, 0xc311, 0x5, 0x1ff}}, 0x44) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x82, &(0x7f00000001c0)={r8}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x8d7, 0xff}, 0x8) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) recvmsg$kcm(r1, &(0x7f0000000680)={&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/110, 0x6e}, {&(0x7f0000000180)=""/18, 0x12}, {&(0x7f0000000300)=""/188, 0xbc}, {&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000000500)=""/173, 0xad}], 0x7, &(0x7f0000000640)=""/18, 0x12}, 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:07:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508003f00000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x2000000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:49 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000100000"], 0x34}}, 0x0) 09:07:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) [ 3256.447780][T31612] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005086d3f00000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3256.514968][T31613] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x3f00000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:49 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000180000"], 0x34}}, 0x0) [ 3256.802122][T31634] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3256.857375][T31635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508004000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3256.910733][T31638] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3257.117116][T31648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:50 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:07:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x4000000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:50 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000280000"], 0x34}}, 0x0) 09:07:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508006000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket(0x4000000000010, 0x8bed6368b834b4e1, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000140)=""/147, 0x93}, &(0x7f00000000c0), 0x41}, 0x20) sendmmsg$alg(r1, &(0x7f0000000140), 0x30a, 0x0) getsockname$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10) [ 3257.633429][T31661] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000007fff", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3257.705992][T31663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x4800000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:50 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000300000"], 0x34}}, 0x0) [ 3257.811548][T31667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:07:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100005083f6d00000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3257.858780][T31673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700f0ffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3257.949388][T31679] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508008100000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3258.191248][T31687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:51 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:07:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x4c00000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:51 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000600000"], 0x34}}, 0x0) 09:07:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000200000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000050800f000000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@rand_addr, @local, @empty}, &(0x7f0000000040)=0xc) [ 3258.732464][T31702] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3258.824973][T31705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700f000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x6310000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3258.997307][T31712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3259.025155][T31720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:51 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000f00000"], 0x34}}, 0x0) 09:07:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508fffff0000057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3259.040162][T31722] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700501a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x6800000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3259.244338][T31733] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:52 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x30a, 0x0) r5 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x30a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r7, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000180)={'bond_slave_1\x00', {0x7, 0x4e27, @initdev={0xac, 0x1e, 0x1, 0x0}}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r8 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x30a, 0x0) accept$phonet_pipe(r8, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000240)=0x10) 09:07:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057001a50000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508000000010057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:52 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000300"], 0x34}}, 0x0) 09:07:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x400040, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000001c0)={'tunl0\x00', @random="7b35919464e6"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x30a, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000200)=0x6, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004040) 09:07:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x68407d9800000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 3259.879971][T31750] __nla_validate_parse: 1 callbacks suppressed [ 3259.879980][T31750] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3259.962195][T31751] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000081000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x6c00000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508000000020057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:52 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000500"], 0x34}}, 0x0) [ 3260.149432][T31769] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000000000570000f0000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3260.275849][T31770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700fffff00000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3260.413854][T31780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3260.530580][T31784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:53 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket(0x4000000000010, 0x1000000000080002, 0x0) r6 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x30a, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001ac0), 0x8) r7 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x30a, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000001a80)) sendmsg(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="846c65340e26ba2c2ed47f772e685d54159aeaef", 0x14}, {&(0x7f00000002c0)="22c79466951aca02c775eec2ff646be2320716606ce0e3ff3f96c45ad6a56a7df6dae464f719ecde1de584cc60ece7a5d680bb5c9350e77df0ef55dfd52b208fa4ce47adc2bc8d6e41f4326201ba0e62393fcefbb611b4a3fd23a1730a845470023153779d05062ab61133b87ad87a6ecca67df4110f5aaa557cda6b059ff26d78098dc604a9452c357236bd37b6343be8de930b862255ebbb6844debc6dc8615770bed889a51e6d4e18a90b3dd65e6dffbdf6ccbcc0687b99b76ea44e1995af798b025c116a06c245d01a2dbcedb1d1bb4e", 0xd2}, {&(0x7f00000003c0)="35b4de2ce01653f82eb3ce70cec9bc681e74fc55a884cbf0f9410893eea680226af15eaf94da271f5eaace82459223937b4c6e76a669fddecaa84b9e30d01d6eb34762dc7437d7719700", 0x4a}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="6e54a29d1008231eda9c719204fa300246370cd59a199108fed27da045ea8dccdacdb4d906c4e9f1793e3d68924fa45880dfa22b24ffb105eda3d2798ff9ed5b44a99001c2f507bee20e435dab033ee3dbd39e0350b08ebb11c565311c71c3f96bc99bf99f477dd9b4bf54cdc000726ad5f210ba9ed47ea149a22bd9a21457975c2a951ed1abf985f6286d15b1a88590330345318fbbc8a7f71aa090aef145559927858600b8565a1fa71635e9f3b9bbc7c7313e9e7ac29906ae4131c6fd360447c182774ae3ba74918a380433955d5c1fd5e72054649af6004149cb73c367eb4272a71e4629273fdc02c7", 0xeb}, {&(0x7f0000001540)="cf506b51acff", 0x6}, {&(0x7f0000001580)="a47139210015a0db8adbb494760842874979e089a3fc1397adce8065", 0x1c}], 0x7, &(0x7f0000001640)=[{0x48, 0x108, 0x9, "f42ada6901df07d4bd889c7315d54b58765f170c497a0f5ffae46f3e1ae41edea3e2aa776f7009679e9f163359dcdae49ccb2a47c94f"}, {0xe8, 0x105, 0x1f, "4e2f79d551cab0dcf426c5211974f111279fa5dc57ed54b14693700d501a436ee8ccc188855c74ebf8a85e98bfd60270f311af485594416744898d308fc1856e55c3b3bb7685635a2b398d60c205209d22b2e6bec82796e76d44c20dc8eb9c108d9d81b644a1575eb806e3406463163f8de9607e4e7aefe24ea63205602eee1c706a3c4e991829c658e31e7bc1a896d40c437e37b772ee82f417f073cf68efe00d428cb6db5d68479691ac16bad3afa159115c9380e6768376de94d39ef79cec7705fd81474444be6fd9d2870e8a3188b8d410"}, {0xe0, 0x107, 0xfffffffc, "5419b3affee5acb5f548ffa597697175e322226ca8b5d7072c2e51df980dc749393e693a50ec6d4536c63c64f917c9301ef1a9e8490bdd4f9c2d7d3a1152edf441a6ea2e638ecdd12c9219d8e31466d0fae69a0dcc728d7300476487a24cf3047f9272b606b60737a284c4ef8ccb136a952371a5744177884bc98b47ab515a2dcebb96c2f964977ce6ebb42e4535779edeadcb2c72ff588e4482385b1a3bd8c18eac5d5e94590345a35cf7004eb7969332334e002604f59032c95707d463d15acf1b5a0cfbd592d61904b7de0b"}, {0xc0, 0x29, 0xbf, "785c8ee31a02953218a3f517081171ae87aa74f130becd840dcc6a977747868e89e29d3a7250fdd8a6fefd38063ce44e3030b6aa72301f0019f72f1a8a1eef1749144573f34c2977982aae2fff50e8b6d24ef230bb96c99f8d0579acf4ef86584da2112c4ebe5bf95aaac851df9bd838a1920f5caa645359b334a873eec8b59bd034bd01f309b3a45e097dd6da2c13167bbe637c3190d0aada3b0572515ce10383abb776b3f83ee453eb"}, {0x60, 0x114, 0x0, "3ef65a3b9e5151ec2d2c7e243b954fbb0cc77a8cb4f85ccd793c2a96f3da12da3282bd0ca7eaed45ace8e68431de791b0187f702bc9d8a59ea5e03e4689768f1f7f2cd41cac4fc28bd86497a"}, {0xb8, 0x3a, 0x81, "40c4b15c9df3463141221b79224491f8f3c054bab0d4201eda3def491a03b0a10ede71a85e5ee20824091c2536b5aaf4bfd96621a4851261102c42a6ae0b78f26585a9f52b0046a2ee8289f5be2f1675d35e9467219128588341a58a87c0f139adf63120291fb7804613cd6b71283266cce4e77cb4d32afe7e0608b11a5528e410b541679d2e76d62cd51106bf54de065b65f613cc2bc56acf3ae42a2773b887221d677cc381a7"}], 0x3e8}, 0x48400) sendmmsg$alg(r5, &(0x7f0000000140), 0x30a, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "201022"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:07:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508000000030057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x7400000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:53 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000600"], 0x34}}, 0x0) 09:07:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000100", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:53 executing program 2: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x17, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x66480, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'wg1\x00', 0x20}) [ 3261.011871][T31792] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3261.080832][T31800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:53 executing program 2: 09:07:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000200", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x7a00000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:54 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000700"], 0x34}}, 0x0) [ 3261.327476][T31805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:07:54 executing program 2: [ 3261.370159][T31812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508000000040057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3261.412118][T31821] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000501a00", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:54 executing program 2: 09:07:54 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)={r6, 0x48, "2e411ddbdc1ad5feb05bd22e6c64f5a39468fa618ccadc22ceabaccc4ecdc308ce4c1180ecf3f903110c5cef2be25add9e27cca4c4bc471d504416311c0e4a1c9134842ccc64f38d"}, &(0x7f0000000240)=0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r10 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x30a, 0x0) bind$rose(r10, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x40000006, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r7, 0x0, 0x10005, 0x0) 09:07:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x8100000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508000000050057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:54 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000001800"], 0x34}}, 0x0) 09:07:54 executing program 2: [ 3262.116826][T31840] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3262.199650][T31842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x9600000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508000000060057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:55 executing program 2: 09:07:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000008100", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:55 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000002000"], 0x34}}, 0x0) 09:07:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{&(0x7f0000001300)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev, 0x100}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr="48c23e2d99bf07090ac50300eccc5e6d"}}}], 0x28}}], 0x2, 0x0) [ 3262.558353][T31859] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3262.669813][T31866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:56 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000040)) write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x1163}, @val={0x0, 0x84, 0x5, 0x3, 0x3f, 0x9}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @broadcast, @remote, @remote, @ipv4={[], [], @multicast1}}}, 0x42) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x30a, 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xf4, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_EXP={0xe0, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x50, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x10001}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4091}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:07:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x9639000000000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:56 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x30a, 0x0) r5 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x30a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r7, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000180)={'bond_slave_1\x00', {0x7, 0x4e27, @initdev={0xac, 0x1e, 0x1, 0x0}}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r8 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x30a, 0x0) accept$phonet_pipe(r8, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000240)=0x10) 09:07:56 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000002800"], 0x34}}, 0x0) 09:07:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700ffffff9e00", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508000000080057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700fffffff000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3263.292890][T31885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3263.317191][T31886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3263.457953][T31901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:07:56 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000003000"], 0x34}}, 0x0) 09:07:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="656c67b30c5f8324e858f9fcee56ae99a957eb99fbe1458821edb7b0c5402dc38d07275b3bc18afcdeab68bcaac6dcf566aaa265b4498a8d4374cfab31e2b197589617ec3fb2413961b5b0bcf24d0af2b7d6cf03ebb242df128faf2f648187fc21193ea3f1d403b8c0cd833c9e4a0ce9fb2c37c659c3846da11aa4e07cb01a5f03c5edab0d78f5aa30e80604a8e302e4872bd4caf6712e32099802a936f02db3afd0d92ec1c30a462b4b547bc8d1f88ffe1c766f754356de0c267f5ce8f2a3"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7a00, r3}}, 0x20}, 0x1, 0x0, 0x9effffff00000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 09:07:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000508000000100057000000000000", @ANYRES32=0x0, @ANYBLOB="0c000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 09:07:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000000000570000f0ffff00", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) [ 3263.744354][T31913] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:56 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800000000005700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000057000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000003f00"], 0x34}}, 0x0) [ 3263.795618][T31917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3263.806282][T31916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3263.915965][T31893] BUG: unable to handle page fault for address: ffff887f4fd7ffff [ 3263.923925][T31893] #PF: supervisor read access in kernel mode [ 3263.929924][T31893] #PF: error_code(0x0000) - not-present page [ 3263.936021][T31893] PGD 0 P4D 0 [ 3263.939450][T31893] Oops: 0000 [#1] PREEMPT SMP KASAN [ 3263.944651][T31893] CPU: 1 PID: 31893 Comm: syz-executor.2 Not tainted 5.6.0-rc5-syzkaller #0 [ 3263.953318][T31893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3263.963382][T31893] RIP: 0010:do_xdp_generic.part.0+0x45f/0x1780 [ 3263.969546][T31893] Code: 4c 89 f8 4c 29 f0 4c 89 ac 24 b0 00 00 00 48 89 84 24 b8 00 00 00 48 b8 00 00 00 00 00 fc ff df 80 3c 02 00 0f 85 bd 10 00 00 <49> 8b 45 00 49 8d 7d 0c 48 ba 00 00 00 00 00 fc ff df 48 89 44 24 [ 3263.989142][T31893] RSP: 0018:ffffc90001687648 EFLAGS: 00010246 [ 3263.995311][T31893] RAX: dffffc0000000000 RBX: ffff88804fd7ffff RCX: 00000000ffff0101 [ 3264.003275][T31893] RDX: 1ffff10fe9faffff RSI: ffffffff8610e970 RDI: 0000000000000005 [ 3264.011236][T31893] RBP: ffff88809be5be00 R08: ffff888098648280 R09: ffffed1009fae7dd [ 3264.019191][T31893] R10: ffffed1009fae7dc R11: ffff88804fd73ee3 R12: ffffc90000d28000 [ 3264.027157][T31893] R13: ffff887f4fd7ffff R14: 0000000000000100 R15: ffff88804fd70100 [ 3264.035139][T31893] FS: 00007f89d440d700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 3264.044048][T31893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3264.050612][T31893] CR2: ffff887f4fd7ffff CR3: 000000005cf19000 CR4: 00000000001406e0 [ 3264.058579][T31893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3264.066529][T31893] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3264.074530][T31893] Call Trace: [ 3264.077827][T31893] ? _copy_from_iter+0x307/0xb60 [ 3264.082765][T31893] ? mark_held_locks+0xe0/0xe0 [ 3264.087538][T31893] ? generic_xdp_tx+0x710/0x710 [ 3264.092388][T31893] ? rcu_read_lock_held+0x9c/0xb0 [ 3264.097396][T31893] do_xdp_generic+0x2b/0x40 [ 3264.101885][T31893] tun_get_user+0x2917/0x3be0 [ 3264.106550][T31893] ? lock_acquire+0x197/0x420 [ 3264.111208][T31893] ? tun_build_skb.isra.0+0x13c0/0x13c0 [ 3264.116741][T31893] ? tun_get+0x16d/0x290 [ 3264.120967][T31893] ? rcu_read_lock_held_common+0x130/0x130 [ 3264.126757][T31893] tun_chr_write_iter+0xb0/0x147 [ 3264.131680][T31893] new_sync_write+0x49c/0x700 [ 3264.136338][T31893] ? new_sync_read+0x790/0x790 [ 3264.141087][T31893] ? aa_file_perm+0x594/0x14d0 [ 3264.145834][T31893] ? lock_acquire+0x197/0x420 [ 3264.150489][T31893] ? pipe_lock+0x5a/0x70 [ 3264.154806][T31893] __vfs_write+0xc9/0x100 [ 3264.159118][T31893] __kernel_write+0x116/0x3a0 [ 3264.163777][T31893] write_pipe_buf+0x153/0x1e0 [ 3264.168436][T31893] ? do_splice_direct+0x270/0x270 [ 3264.173442][T31893] ? splice_from_pipe_next.part.0+0x29c/0x350 [ 3264.179499][T31893] __splice_from_pipe+0x3e6/0x7b0 [ 3264.184506][T31893] ? do_splice_direct+0x270/0x270 [ 3264.189526][T31893] ? do_splice_direct+0x270/0x270 [ 3264.194551][T31893] splice_from_pipe+0xd9/0x140 [ 3264.199309][T31893] ? splice_shrink_spd+0xc0/0xc0 [ 3264.204252][T31893] ? security_file_permission+0x8a/0x370 [ 3264.209872][T31893] default_file_splice_write+0x37/0x90 [ 3264.215314][T31893] ? generic_splice_sendpage+0x40/0x40 [ 3264.220758][T31893] do_splice+0xb01/0x1510 [ 3264.225072][T31893] ? __fget_files+0x329/0x4f0 [ 3264.229731][T31893] ? ksys_dup3+0x3c0/0x3c0 [ 3264.234129][T31893] ? opipe_prep.part.0+0x2f0/0x2f0 [ 3264.239225][T31893] __x64_sys_splice+0x2b5/0x320 [ 3264.244060][T31893] do_syscall_64+0xf6/0x7d0 [ 3264.248546][T31893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3264.254530][T31893] RIP: 0033:0x45c849 [ 3264.258442][T31893] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3264.278043][T31893] RSP: 002b:00007f89d440cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 3264.286452][T31893] RAX: ffffffffffffffda RBX: 00007f89d440d6d4 RCX: 000000000045c849 [ 3264.294409][T31893] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 3264.302362][T31893] RBP: 000000000076bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 3264.310317][T31893] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3264.318268][T31893] R13: 0000000000000ba2 R14: 00000000004ce68a R15: 000000000076bfac [ 3264.326356][T31893] Modules linked in: [ 3264.330244][T31893] CR2: ffff887f4fd7ffff [ 3264.334389][T31893] ---[ end trace f906cf2481a4db54 ]--- [ 3264.339841][T31893] RIP: 0010:do_xdp_generic.part.0+0x45f/0x1780 [ 3264.345986][T31893] Code: 4c 89 f8 4c 29 f0 4c 89 ac 24 b0 00 00 00 48 89 84 24 b8 00 00 00 48 b8 00 00 00 00 00 fc ff df 80 3c 02 00 0f 85 bd 10 00 00 <49> 8b 45 00 49 8d 7d 0c 48 ba 00 00 00 00 00 fc ff df 48 89 44 24 [ 3264.365582][T31893] RSP: 0018:ffffc90001687648 EFLAGS: 00010246 [ 3264.371643][T31893] RAX: dffffc0000000000 RBX: ffff88804fd7ffff RCX: 00000000ffff0101 [ 3264.379696][T31893] RDX: 1ffff10fe9faffff RSI: ffffffff8610e970 RDI: 0000000000000005 [ 3264.387650][T31893] RBP: ffff88809be5be00 R08: ffff888098648280 R09: ffffed1009fae7dd [ 3264.395779][T31893] R10: ffffed1009fae7dc R11: ffff88804fd73ee3 R12: ffffc90000d28000 [ 3264.403740][T31893] R13: ffff887f4fd7ffff R14: 0000000000000100 R15: ffff88804fd70100 [ 3264.411695][T31893] FS: 00007f89d440d700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 3264.420615][T31893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3264.427197][T31893] CR2: ffff887f4fd7ffff CR3: 000000005cf19000 CR4: 00000000001406e0 [ 3264.435168][T31893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3264.443125][T31893] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3264.451080][T31893] Kernel panic - not syncing: Fatal exception in interrupt [ 3264.459695][T31893] Kernel Offset: disabled [ 3264.464021][T31893] Rebooting in 86400 seconds..