last executing test programs: 7.01696278s ago: executing program 0 (id=1780): unshare(0x20000400) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff8}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x50}}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700000000000b19d7c24ed2e22a248431573696d0000000f0002006e657464657687070000000000008a000000009f4ad7b37b6383dec81224a651423240adb9e69a1e1311432e495be75af4e5fce861501faf82eb8f6b83b98238ceb4038b561a469f8d46f6f10671f29d921508848b60fbf16738aa8004ce35b7ed97bc4567c5eb8a4d2b2f0aa8194d439d4da2f49af38ebfcb77816de66335a1506787b462c5f4b2657a931b40703001b91752e25992b8f0a24c029ea96d61dfd43a49a4ab56dc415e1de0c0bdae81f9fac5042e8a6ae84a8cbc308aba8676ddfe91b50487dac4b554be94ef", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 6.744935515s ago: executing program 0 (id=1786): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0xf, 0x6}, {0x1, 0xf0, 0x1}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0xfe}, {0x1, 0x3, {0x2, 0x0, 0x7}, {0x2, 0x1, 0x3}, 0x0, 0xfd}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000002c0)="23000000010006", 0x7) r4 = socket$inet6(0xa, 0x4, 0x7) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3400000017e0916853172ce0d7c4fdad3336879cf09d07a442e6304190a1f1f926797b0a527ca1ec7c8414f9bcd8ba7c4f6e59952ae1b4f275125518719a82e18ed0de39cf4b3c90503ce8ce6c358875379e4d6027151fbb49ee5a584c6875aef23ed29ce66dc7e26912c905762ab4103a82c0d83ffb75e7d70fd8cba4852e6bf6e5dbcef60346f309f90316e67309738b6c2a8eeb9f0e546df7a84b8d69bad295338f3540f0c3471a58a542a653c4ea8272d6bc21419570a0651583dcee0a0622964bf5bdb4aa991298c26d1378c88e35463198793a4ad8bb3084cb65b8b5e3e4ca48c1d7120d70bcd945747ae99515be3477596305feda3e", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r8, &(0x7f0000000280)=[{{&(0x7f0000000440)=@qipcrtr, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f0000000580)=""/252, 0xfc}], 0x2}, 0x4}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) 5.431698077s ago: executing program 0 (id=1802): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000800000000000000000000055a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300020000000000000002000003140000001100b30800000000000000000000000ace21b182ca126a56e197f674628833e9e2ea73a1075e9d7a3ddf42633506a35319991f6ec87257e95c881ba2317208131912679cdc45cae29f09bf568e7c0fadb0728b411657f7c6d40d055b1c3737cbd6cba01cb9ea97"], 0x68}}, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005200010000000000000000001c0800090000000000000000"], 0x1c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000a4000000000000000000000000000000000000000000001f894be2a000b2e26a2f55636b45c1114f6b323f0d651b7a2f3a"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000a4000000000000000000000000000000000000000000001f894be2a000b2e26a2f55636b45c1114f6b323f0d651b7a2f3a"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\b\x00'/18], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048884) (async) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048884) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 1:2', @ANYRESHEX=r5], 0xa) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2, 0x2, 0x8, 0x8, 0xf, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0xf, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x401}}, @sadb_x_filter={0x5, 0x1a, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x23, 0x14, 0x14}]}, 0x78}}, 0x20040000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0xc45c2, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0xc45c2, 0x0) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000640)={0x3, &(0x7f0000000680)=[{0x4, 0x5, 0x0, 0x1}, {0x1ff, 0x9, 0x7, 0x1}, {0xff81, 0x2, 0x2, 0x8}]}) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @loopback, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x0, r3}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x0, r3}, 0x18) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.863867616s ago: executing program 1 (id=1818): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000b37e82efe3570fd24a7e00007b8af8ff000000ffffffb7030000f9ffffffb60400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000000000000004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b00000002"], 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f00000000c0)=0x21, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0xc01, 0x3, 0x1e0, 0x128, 0x5002004a, 0x0, 0x128, 0x0, 0x1b8, 0x3c8, 0x3c8, 0x1b8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r6, &(0x7f0000002f00)=[{{&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @remote, 'veth1_to_hsr\x00'}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="7ad36246626c84fe9844a4a192296ac60d25d4b6cb69300d19c544041e93edc777cad142de0ab82bf1c71d5652df8473e750efeaa1bb70bb6159d66d49061b544afe", 0x42}], 0x1}}, {{&(0x7f0000000640)=@sco={0x1f, @none}, 0x80, &(0x7f0000000500)=[{&(0x7f00000007c0)="8ca77cef65a5d6639b13abfde11f88f2c5813493386d39e038878ea0a83450f6fefab0cb77e816fc5d73d441d4a2cc432c8c1c7bcda967cac4bac3b79017ff562b1c6d3f7f8c400eb51580393122e93f6019b97a70545d542c50612420b4fcdb2e", 0x61}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)="bf02af536d9a55891694eea4cd7d16ee007510", 0x13}], 0x1, &(0x7f00000008c0)=[{0xd0, 0x117, 0x80, "8e3b407cd3452901fd8cf18c7e3c8f173505226a0d491de535f38a8a9b18a18f387a1ee8fa9cf01568316e82d03892e2fb0e3a9e2b3a242f5df47b8cf0819499469d8b18a0206f86a8902bcdf62af98d983b2f2ebefbcc69dc2c79391f36e52af5516d1055a55cb9288bca88e1713b80258d0ce8dea82e684e87246abf496742d15a49c661dc2120042400ba58ea84e74f639e7d66018c1e735c6e60be52061c35e6001c66d2a5f4250594d07deadb408ebdabc637577d3fcd58734753"}, {0x60, 0x0, 0x9, "8feb25961220e6e0a37f64de8a99f9bc8a2497d18246ec5eec56720126d0397b82efbf64503c0f07e3aa57f70e67890ca626265b957e85f9a727478084a2cfce4ebec2302624dd18543058fe8a"}, {0x60, 0x1d, 0x1, "f6d932f4e466926290fbf119981a39590d4ec67233d241d3fbf7462cdae4aa372ebb92a5a986194388fedbc3f2c39de0360e8f1c4ab7c5192cdbd119b205e194829e7708c2a432eb4ced97808b"}, {0x40, 0x108, 0x50, "83a76b46c53372385c71e222ea6bcd2ccd66db16ffea598b46e82e2af8b786c11b920014a7a39bf9ef54953d2db13fc9"}, {0x30, 0x111, 0x8, "db75f47f71385a96a2e79319103d73d189cc43fdb09a6a3667"}, {0x40, 0x118, 0x7, "09f07fcc9673e513aa5a202f797ca08adc38530b65567e99ccb134cd393243a2283ee54fbd61eaff109ca1"}], 0x240}}, {{&(0x7f0000000b40)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000bc0)="72bccb91844bb292674246cef99b2f7c721bce05d2abdd3ec135a912a09e1d552281888b9321cb4d4346d90ab71242c757ea759dcc0828cdf75374a973ec4efa96565afb1b5a3cfdf2382702a423275347e55782c544da4b439d4271fbe18a08ff506ffef7349d5dadda1a9e4a47438c886757038cb5541d44720531abd35d822063edb936cf008f9a41a94ae8e390573bd1e41ec8ce88f7b54714f5129d4a9d7635863d4ffc22dcfd6c8c74bd915b7e47b2f0820ae8dd6423bbbe08b7ea0fdf", 0xc0}, {&(0x7f0000000c80)="dee8a422ea5f231ad9db72d399598307712828956f98d46fd4402b226121c72cae5ca5a846224bdff4a1a49db87a2c042357f25b8d55d3c1e570292b0a01f3b7f8d7458de08566ec6ba1ab328f64a8cfe693c03d5be72f217b7f71886fbb3f4b8afe11b16a165ace8b38f791b968589509f4756a49b1e7776ca7d06df2ef9d", 0x7f}, {&(0x7f0000000d00)="b7487b00a899051a606e44c8197a38db23ce47a55eb65c8c4422d8edf040bcba00660b71bdc1a439ae73f44171274426de38d4b130f488aa4062f45f3c4a3ce407412fd6b167f83e17", 0x49}, {&(0x7f0000000d80)="96a2410726d1a78bb770efd948b2ac60658f5a95a2a19348e8e3d06e078f0754123fd92f8665cf22a50968db635bb76175daf0677cfd2f3dd41bcbbcd9cbed851627b219ea8314563eb336acac286ca0096a4e489217fa95af98492e83e091a4b877ee7e39f0ff3c18f5cb0f0cd9723298398426bcbb7ed3cad62c03a37ef67acf34d441641244a726e57b983aff79c4cc02c8e805f3bcc0930e1f6d8d85081df304a199d69269307d015ac97cf07fb9061feb396f12fd7e80ab229a734e66", 0xbf}, {&(0x7f0000000e40)="dead9817f951d33c8c9d3121e00093aafe848eb5358aeb2daff7bbc095f3bcf51267983e27411ad0614357039675c9fcbb66f12c7c1b8b3aab9bec07b9ded5d917440dd538834b5adbe48c12ad421991be9c4423c3dfb3ba1513009bfa92b7e8559f6feee5308b5adeb1f80f8e58c311360ecde412aa3c4454af1ef0e31fb87866a6bb9941a14205c79f1a5cec5173cf5d82197a1d5600899b193c03643d8427321cd089cc42a9a5aae6792156c62af5c7eaa016ee6cc98cb25d6a8a2125221b446d0421df3a92d28d1713833ea7f9ad1d7963", 0xd3}, {&(0x7f0000000f40)="c1ffc1ee6cd459fdcc3e2bf07e748b9030684f4b90eea6d04aa16047421db4b41071a3ff67346babbe2a77dd95fc67d03f661b4bc67e4f5983fdab243b789c603d3fdd37cfc08688cf793ebfc1e99d65ac67ad217f2a7cd53f47f324180254810fa60859d4106c", 0x67}, {&(0x7f0000000fc0)="f130d03bdd6392f7e17c08dff657045822ce8d88d6e11c51753c53d0dac7bc526de16a8bc922950f465a35d989ead273a255057b5fa2f230938d25ec50ff8007371546a295439ec4ef9412124f1f6af55d6ee7eb70f3093b43deb5061b82f4b5d78354c006d5c7ef63e3cce964cacddfbdd5bd64d2b4267914b1768175690604254d4f70389376316716b822ec96ff1282c06a335eb4565e8f66e3010854cfacc707fc78a5b11bf8ab6d16d87563671a86bd0779093b297997d22b21925f48382099384159ccaadb81afd9d96604e442513399", 0xd3}], 0x7, &(0x7f0000001140)=[{0x68, 0x115, 0x6, "3f10368020c345b9d818364985528b986243b27daa3173cbd43aa6884870d9e0e0cab68233d1826a70854a53ca730ef60d6042cdb95e0eb59155cb6faafb2ae206bbe687daa91da8eea65d33d16d71bad6fb97a016b44f"}], 0x68}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000011c0)="46e0e5db3b932cbd7a735473ea90bb621afb3b6e2941c2bd207e4a5fdc9ccbf124f982396a43206ebc4de420cff063483414b2511ba7179fba8fdc02647fc67b1cb2237e2dc3a3955e0e052b0dc104d9397a3c12f331621a74d7cae186069b42a50f66b93e5aabd5a1ba1efdaac2d0527c232c2ee0821acea53ab712e8707b16fa8a99375747d4bcb3e1d36010f482e8bd550f23c1b026ae22585d38ec3afafe881f29b05555784f620434837d420864f2ccabd0a25ea8e8e2c306a744ed8f465290b688e0b73d0eda99c21665", 0xcd}, {&(0x7f00000012c0)="9212392822e76a364443266ad7b9b5fe889d86d4a25daa9ef9c4290058d41ac92ef9d506413382e717e9fbdfbe66e4bca1e7af7a98e53405c21bfd66872d97a00c8dd309f43ee8adcd207cad48fbfdab6deded6b3e641f2650", 0x59}, {&(0x7f0000001340)="68bb9223f57c1c51c7f319018a0dc22173a0cb2a04878193bba7703a35c9d536383d08b14e90557883a82245878fa29251fa11045940b2525995c7a6b839c75ff49955bbad9a6cd4a029cb9ededcfefdb2b0dd524631fbaf82a189ef96949d9bded1d445e4d9486ff5bb1a88e22df585d69169ebeec17b5d7231e8ba2454c073f00f2691fe9ba1ea1a89b32da6c1949a667f4b5c339f93b3cd1b045a03da6f73be1d62f2ad6d1774905ac179375430954186bcaca1ca32d360644137e120c4d543b020b9e3cbef", 0xc7}, {&(0x7f0000001440)="2ddc45652fe8cb15cd39578538e53dc154462dd0c1131607ec3747394af22c168f66788df0370c10750779ec6d9ec07672b930379001f79cc670ba64fb4dae0c1d7e3405a9b592d7668e4ed883d7374fcdc31e33fc687fa772399cbf5d7d2a5bbe258a7ad1d851030a4e91336b900caf669cb9db038d230d5c2c0094afdb941c52e8240398a3fbbf8a79b52fd3d718c09888ecc3fdceee16f91267f98217579a41437e7297011aa54cf1f70757753298517997e7580246", 0xb7}, {&(0x7f0000001580)="662bd46e8ed54b5c92ef36467a8c51cba16454e044c65e55e7c4be3e5d36d2c78060ce7435e8eaa994bbec57e439345c7d47a46ebb6416755a0ab44189c36f7901b0edf3838612648f3e59b00f3eafa9d80d7b440fe60790e079e9ac2bd47ac0060356db44e6a9360933780600a64d3ec8fec22baa6a246aff3ba4556059690719b31590862bacb6fd56a267bbad9a4f0e40389eaa58aa17435e060289ada1948724de", 0xa3}, {&(0x7f0000001640)="36e4ac1a12bacf636313204b3af6625f61804187e05805e9a416db653d5fcff55d33bd36894b8920b8ca1aed00ed3fb342a20084ca015e8ee380f6d1809bca32c22295afe5706eb940fe99e98c3ebec7d5760c54a9cf3f23569b814c80db1e55ded8083a7aaafc58dfc4e4187d2d03567b0495594e2adfcf48ff650d39f50a10653d32e5c271ef3b8918f97b105116bed7803e3156cb28b97e1835c5b69a2ad5edf9a250908bd2f3af5d3b7c0d60246b4137b850b24abf36cfae", 0xba}], 0x6, &(0x7f0000001780)=[{0x40, 0x119, 0x80000001, "ad5f99b624f64940ad1078a736236399fbabdf7253856be35bbf30d0e6dc1d050ad24c8675f4c8628ed7c12be518dc66"}, {0x28, 0x10d, 0xee97, "57e6f81abf0a1c865f0063b56d2d29c1bb9bab4d6a3e66"}, {0x30, 0x112, 0x8, "034904fdd541ae8e6b4e3781e74f91722e153aaef95d3276a7aa395dd8c4"}, {0xf8, 0x109, 0x2, "5691186418e1f2dcbef766b79a7cec5ff1de2cfbd24972e8cfecdd8d8b84f198b40cc79db75984df5993f31149553ea0082efc4aea6a49fd2e39e551b6a29852012fb4b087e94df1127c9267eb570256f2d533717075aa76208d3be8327b4f84e1fb52d6663d9615890feb9c3670c8d326ef962dd611027012995b3c5d2c18fb720fb37187fe3eb00e2d0eec0ce0f2d468fdd08b6f58c01642504e2eb79ce03e6673715aaa4c9607bbc03f0afc072cf2cd30723b23c8853f8b96430a8d5c681569661e72a59118ecfc719a4e0230960a972d742ecf0ffa63a90f96e8d0305dc515"}, {0xf0, 0x10f, 0x0, "8a2882f8ace40db6f32e829ea0b367b3e507a47475d5adacc30a7a59a455373eb471217ca2fb684be8c87bf41228f8edc817fbfd2de6d23632e476604e4d0c4bac82e8b7afce3e5750be6f239ecc5a8033c58bf73f24d32f5bd9cdea40ceaed5af8378c52e01e6a02369c8e7e7da9eba512ec0ce0eab9ca47294c6102bc3a168593d115457bf5ba54f2e45027a2d063ceef3b2755e2c751976fc1f10687e4c8e664cc2694ae13481a3ac1117372c1e7f24abe4603006bfc8f845ee71f5dcf8ea7804a595838ef6ff434d5aa9d184c82164753d3ee542807a31"}], 0x280}}, {{&(0x7f0000001a00)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x4, 0x1, 0x1, 0x1}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001a80)="dc5556588dce528a10cf6d10f2cecf9500b99eae0d09be3c94f1e71c7fc41bf17273645f53c5147284311029910da36327417d665ff9baddd50b5fa5bf9fadd5956397510a21ed317622fd05", 0x4c}, {&(0x7f0000001b00)="4fe251b407087a90f7029fea5e300820f6fe42ba7766c04678591bc0194ab8045ba4a6de405654ce1b20bfedd89777bc06afdf18a02ff3dd2fa9096486f85ca8b3245c0d2118854431527e8c29c004e1461c3fa1639d4508e5146b7a95e5088cfa0229b3bf856a7bad3a53053a30386def64928317e11df4532a767ee1cd6581e46f33e16f6558d53e1165d4d9ad51437464896316be8a3de59c7dc93eef3e", 0x9f}, {&(0x7f0000001bc0)="4da5949ea2718a1746a452cad3f0527e4cf6904b1ab735f3f390664044b0d353971696628ad57e7dddffdf4c169754d58c50e2b89a662651fe58068e245633dd6fe5ffae55f5aa7c1c5f8457611c9dc6d151134f302a17a2eabee7c505722fdf667b71dc33a3e5dd5b30b3f9edc23ef095b967ed101f056cd74c96213b82799b5379f92cd8e1c2", 0x87}, {&(0x7f0000001c80)="0c011234f86ecc9fcc086e50cb480691240a7cee1c55fcec634cb2dc95de7747bbd6b6cccc51f1b68e54de103b717751bc8499d1cb87ebee771220bece1316511ab84ed174e1ddc86e10b42b4abce6f0aaacc5ff7e1b2733ec711f2e49abe9d12330fcaa845f9d3a1d5e580a4b9c3ddbee50aa7054dce3d5f27c0b4ca7307db24be29b50", 0x84}], 0x4, &(0x7f0000001d40)=[{0x1010, 0x1, 0x0, "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"}, {0x38, 0x88, 0xf0, "5203359e685ee80835a7f0fb809435274a5d7bc7f7259227b834c6f5f6eeda6aac3318f94460"}, {0x60, 0x10a, 0x0, "5bd2a1395f4d455247ea08dec1e54e5f579690a60aeb5befcd1a15aec7452def7a04c3e315b9bbe9baae02c8f0e6490f070da06b20eb1f1731b74f3ca91abda26d873a32cd0ad9397b66"}, {0xd0, 0x10e, 0xca6, "e1e036bc9cebf99504d74cde5a733a6d7e24508215397da182993fe5f44bc3034d7b576671db4c1407e8a31a25e78b6865f3e627c181a5b24b22b6f32d2dd4a83b1560ca871574093074d7101e8f163e20ffe5d3949969cb26182a2b5b648561102c0e9f1456ef58988912671ef3156f2d3ddeafbc0dda56156d5f5fb40a72111ef77fdf594734b21d525e6bc9a24a1b8f0ddb5b6661bd271abcfa530633fefe63aa899558f89384bb9e3d392d2186554069a9ccbb70f95fc97ff54b5618816d"}, {0x20, 0x10d, 0x8, "efb504a6861be057340ee17d6d"}], 0x1198}}], 0x6, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendto$inet6(r5, &(0x7f0000001540)="00c14200902cc25dc432bf2997e1a550ef3668c182a7a973ed0a0a2e7a33c1339f3c", 0x22, 0x10, 0x0, 0x0) recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x162) socket$inet6(0xa, 0x2, 0x0) 3.712929108s ago: executing program 1 (id=1819): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc010000190001002abd700000000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000080000000000000000000000000000000000000000000000000020000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ff010000000000000000000000000001000004d23300"], 0x1bc}}, 0x4000) 3.560725524s ago: executing program 1 (id=1820): getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x13, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x7, 0x0, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB="2f080000000000006966f811ab3507e2a376153aac25091d965ca1e66b84ef822dd57388d9c6de324dfa29e900197ced9bf6e8566962e5d878996207f0df3e35c679dc99ad038536bfd38dcdc1e529d5b98f10b021784faae31be58ff4a9b6f16e0e03f4ed38c8b8cff892f8870931861a8c5fc2d868361cf9422e93d1fe", @ANYRES32=r1, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000f77f000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) recvfrom$inet6(r2, &(0x7f0000000480)=""/30, 0x1e, 0x60, &(0x7f0000000580)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_eee={0x45, 0x9, 0x3ff, 0x3, 0xd, 0x1, 0x7, 0xc, [0x6, 0x8]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r6}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @broadcast}, {0x1, @remote}, 0x1c, {0x2, 0x0, @multicast1}}) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="20000000190a0500000000000000ff0f030010000900010073797a3000000002b77ccd5b2a3a53d165fc5503088a6fdfc5bf5bd57a67369be0e9a0499bb0d33c27399eb9e7b1e8f3ba19b6b6a033b7f055a207c4060fbc26b77fdd66433f6e6621f04f9d10d5c63ae25f823e88741d84d4f8f5eb17cedc6c65fe3581cf4e98f6b796325dede7f241bfe71a4a90885ae4ad7b06a2bf4a75c919160b8bc1e2affa61fd3e5199a0338ce6043d85b4ec2c489a7d4528def36b953d6890117d5a152dfa403541d858899bcb2e7aaa400000000000006200000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008084}, 0x24040094) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x6) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r10, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000580000042dbd7000fbdbdf2500080001000300000008000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="20ecff"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x820) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9, 0x0, 0x4}, 0x18) 3.302295383s ago: executing program 1 (id=1821): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x7, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a30f5ff0000080003400000000a14000000110001"], 0x64}}, 0x0) 3.151413352s ago: executing program 1 (id=1824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a000000"], 0x184}}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000000900010073797a3000d10000140000001100010000000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x88}}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f0000000820000004000000", @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=0x0], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000880) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a00)={r7, 0x20, &(0x7f00000009c0)={&(0x7f0000003400)=""/4096, 0x1000, 0x0, &(0x7f00000008c0)=""/203, 0xcb}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x15, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@tail_call, @jmp={0x5, 0x0, 0x4, 0x7, 0x2, 0x2, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000440)='syzkaller\x00', 0x8, 0x2f, &(0x7f0000000780)=""/47, 0x41000, 0x34, '\x00', 0x0, 0x1b, r10, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xa, 0x1, 0x1000}, 0x10, r11, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94) 2.689361258s ago: executing program 3 (id=1828): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) writev(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$inet(0x2b, 0x801, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.492742449s ago: executing program 4 (id=1829): r0 = socket$nl_crypto(0x10, 0x3, 0x15) write(r0, &(0x7f0000000200)="3a8e663b9264aa48c35fdf1f154f0c62e1b06bfe9136d428d1968720d28c9fec55adb68e9b63a3ea686f9f340872217c21b170096276cbfc3599a2374bf1afddec2bbf247b7edcfdcd99e814d5a42fc63254eb5b77c4d4a02ac7fb06dc34e186d7a9e224d1c11df816a309c19a6a6076928f6fd6ced9688456858b0ef83b15dd638187ca512b20fdc24478e1ef1762d5b768598614cd02bda59e2b2346e4e8a9e3c33aab651d3d54640c2a1df8d8a785e8d4ff772091e7b5577a36372e9650f7d7241ae55f1615ac70a21929e2031dad095cafd0", 0xd4) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000001c0)=0x2, 0x4) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00rL', @ANYRES16=0x0, @ANYBLOB="040027bd7000fddbdf250100000008000200080000003000018008000300e000000114000400fe800000000000000000000000000031080003000a01010006000500000a00000800030008000000"], 0x54}, 0x1, 0x0, 0x0, 0x4020000}, 0x44040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, &(0x7f0000000400)="3240e499db2280e5a759818db2aae6f919dd4f946a6c667f82a5f38d911ad73e2ac9e187b5b1d84a243d7d271d98425e69590417c187832ad1d8cc4e1ab1c02aee3312158d5b96bd4a92bc6625bed9a46fd7e99d169d6b059c0343c66c6e523829b635a19eb64d244f216f455e195a4697ed7365022b21b66990a2d5962f7f7ea50192a969cee957b3a91a6f6df353d7e789fda0fc653d4a8ef7da684665c81bdb4c1b0145193da2c4c809405a9e5f176f77", &(0x7f00000004c0)=""/100, 0x4}, 0x20) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) 2.491855059s ago: executing program 1 (id=1830): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000370427bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c0400000000003400128009000100697069700000000024000280050005000300000005000a000000000006000f0003000000080002000a0101020800000001800000f012b612c8df49db5d6e81f947bd61e1"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000002140)={0x1060, 0x1, 0x5, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x101}, 0x1, 0x9, 0x7f35, 0x9, 0xe, 'syz1\x00', "c8cf1d8af4b8202cb1d819379aec21f89d85c8f161538d682b30bb5d26f5a7ba", "d785fec2598c52603d9a328b195e70c3311a22690515d888aed3b9c41e9de77e", [{0x4, 0x8001, {0x1, 0x6}}, {0xfff7, 0x8, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x3}}, {0xb6, 0x8, {0x0, 0x1}}, {0x1, 0x1595, {0xe27340d61abc60ce, 0x73f}}, {0x7, 0x0, {0x3, 0x200}}, {0xb159, 0x5, {0x0, 0x40}}, {0x1ff, 0xb, {0x1, 0x8}}, {0x1ff, 0x3, {0x1, 0x14a2e869}}, {0x5, 0x2, {0x0, 0x7fff}}, {0xd, 0x80, {0x3, 0x8}}, {0x5, 0xf, {0x2, 0x1}}, {0xd, 0xa, {0x3, 0x7fff}}, {0x3, 0x2, {0x2, 0x9}}, {0x3, 0xf4be, {0x2, 0x10}}, {0x0, 0x0, {0x1, 0x8000}}, {0x800, 0x4, {0x0, 0x81}}, {0x1, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x45cd}}, {0x5, 0x3, {0x3, 0x4}}, {0x9, 0xfeff, {0x304d05bad9c91263, 0x5}}, {0x7, 0x0, {0x1, 0x2}}, {0x8, 0x6, {0x1, 0xffffffff}}, {0x95e8, 0x0, {0x1, 0x4}}, {0x6, 0x1, {0x0, 0x2}}, {0x0, 0x0, {0x0, 0x6}}, {0x9, 0x9, {0x1, 0xa244}}, {0x0, 0x8, {0x2, 0x4}}, {0x2, 0x72e}, {0x895f, 0x8, {0x1, 0x6}}, {0xbe9, 0x100, {0x1, 0x3}}, {0x9, 0x800, {0x2, 0xc}}, {0x1c0, 0x3, {0x2, 0x568}}, {0x6, 0x4, {0x2, 0xfa}}, {0x5, 0x6, {0x3, 0x7}}, {0xf801, 0x2df, {0x3, 0x7ff}}, {0x66b, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x1, 0x40}}, {0x619, 0x6, {0x1, 0x7}}, {0x6, 0xbd, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x1ff}, 0x3, 0x8, 0x0, 0x7f, 0x1d, 'syz1\x00', "211306f120dce12e7451d0aed1203e520ee956bacbfec944d6a21af7a273325a", "a1a184cbdf99784cea0337104aa2c902638841e22c2edc1a2d7f14ee1faf2d26", [{0x7, 0xdc0, {0x1, 0x6}}, {0x8, 0x7, {0x3, 0x4}}, {0x9, 0xb, {0x1, 0x32f}}, {0xfbaf, 0x6, {0x2, 0x6}}, {0x1, 0x3, {0x1}}, {0x791, 0x8, {0x2, 0x7}}, {0x2f1, 0x6, {0x1, 0x5}}, {0x8, 0xc, {0x1, 0xc}}, {0x6, 0x2, {0x1, 0xa1}}, {0x3, 0x5, {0x2, 0x5}}, {0xe2b, 0x5, {0x2, 0x5}}, {0x3, 0x1ff, {0x0, 0x3}}, {0x4, 0xfffe, {0x1, 0x7ff}}, {0x1, 0x6, {0x3, 0xc8}}, {0x4, 0x800, {0x0, 0xa43}}, {0xcef, 0x4, {0x2, 0xfffff644}}, {0x4d, 0x1, {0x1, 0x4}}, {0x2ece, 0x8, {0x3}}, {0x800, 0x3, {0x1}}, {0x4, 0x4, {0x3, 0x1}}, {0xffb5, 0x5, {0x2, 0x3}}, {0x437, 0x0, {0x1, 0x7}}, {0x1, 0x2000, {0x3, 0x9}}, {0x8, 0x67, {0x1, 0x40000000}}, {0x2, 0x2, {0x1, 0x5}}, {0x8, 0x7, {0x0, 0x1}}, {0x197, 0x3, {0x2, 0x3}}, {0x17a9, 0x9, {0x3, 0xf}}, {0x9, 0x1, {0x2, 0x9}}, {0x8, 0xb, {0x2, 0xfffffffe}}, {0xdb, 0x5, {0x2, 0x2}}, {0x0, 0x12, {0x1, 0x3}}, {0xcf0, 0x8000, {0x2, 0x6}}, {0x0, 0x1, {0x1, 0x7}}, {0x8, 0x2, {0x3, 0x1}}, {0x8001, 0x0, {0x3, 0xfffffffa}}, {0x8000, 0x7ff, {0x1, 0x1}}, {0xfc, 0x163, {0x37f5a80dfa1768c5, 0x7fffffff}}, {0x6, 0x0, {0x2, 0x9}}, {0x3, 0x9, {0x3, 0xe8fd}}]}}}, {{0x254, 0x1, {{}, 0x1, 0x2, 0x2893, 0xf, 0x25, 'syz0\x00', "bbc981b1741bf8eafbdaa9bf791d48f551f87be03d672afde2726c3a78185c00", "c4e91b4df57719583a57bc029dfa45dd2457e62bf37f760287bdf8b37c01b095", [{0x35, 0x8, {0x0, 0x200}}, {0x5, 0xa, {0x2, 0x1}}, {0x7, 0x3, {0x1, 0x7}}, {0x6}, {0xfffa, 0x6526, {0x2, 0x4}}, {0x4, 0x6, {0x3, 0x800}}, {0x0, 0x84, {0x2, 0x1ff}}, {0x6, 0x8fc, {0x1, 0xfffffffc}}, {0x8001, 0xf, {0x3, 0x6}}, {0x5, 0x5, {0x1, 0xc}}, {0xb93, 0x9, {0x3, 0xd9}}, {0x5, 0x6a, {0x2, 0x8}}, {0x5, 0x0, {0x0, 0x7a}}, {0x4b, 0x2, {0x1, 0x3}}, {0x3ff, 0x8, {0x3, 0x5}}, {0x3, 0x2, {0x0, 0x668}}, {0x2, 0xffff, {0x3, 0x7}}, {0x4, 0x2, {0x1, 0x400}}, {0x755, 0x0, {0x3, 0x1}}, {0x2, 0x4, {0x2, 0x1378}}, {0x4, 0x1, {0x3, 0x80}}, {0x8, 0x8, {0x3, 0x6}}, {0x7ff, 0x0, {0x3, 0x2}}, {0x1, 0x0, {0x3, 0x9}}, {0x5, 0x20, {0x3, 0x4e7}}, {0x7f, 0x6, {0x0, 0xf74f}}, {0x0, 0x6, {0x0, 0x7}}, {0x4, 0xfffc, {0x3, 0x8}}, {0x94, 0x6d87, {0x3, 0xa}}, {0x8, 0xb, {0x0, 0x3ff}}, {0xfffd, 0x81, {0x3, 0x5570}}, {0x9, 0xe607, {0x3, 0x9}}, {0x7, 0x5, {0x3, 0x6db281ed}}, {0x3f90, 0x1, {0x2, 0x2}}, {0x1, 0x7, {0x84d9aeb29a346ef7, 0x2}}, {0x9, 0x6, {0x1, 0x2}}, {0x101, 0x0, {0x1, 0xffff}}, {0x35c, 0x8, {0x0, 0x7df9}}, {0x7, 0x7fff, {0x0, 0x401}}, {0x42cc, 0xfff7, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x5, 0x81, 0x8, 0x1, 0x4, 'syz1\x00', "5bbe54c1430f6d9428c19f78d269f9533eb6b077db7ec1f97217ed0e0151cd5e", "8016536e7d58fb550eebb4d3013533d18e95f0dd28a244a0559ba6b2ed534a54", [{0x0, 0x0, {0x2, 0xfffffffd}}, {0x7ff, 0x4, {0x1, 0x2}}, {0x2, 0xffff, {0x3, 0x3}}, {0x6, 0x4, {0x3, 0xc54}}, {0x4a7, 0xff, {0x1}}, {0x1, 0x4, {0x1, 0x8}}, {0xff, 0x6, {0x3, 0x24d}}, {0xff8d, 0x8, {0x1, 0x1}}, {0x474, 0x7, {0x3, 0xa8}}, {0xf, 0x4, {0x0, 0x6}}, {0x0, 0x3, {0x0, 0x16b7}}, {0x7, 0x8, {0x3, 0x1}}, {0x3ff, 0xffff, {0x3, 0xe0}}, {0x5, 0x0, {0x0, 0x3}}, {0x6f6, 0x6, {0x0, 0x4}}, {0x8001, 0x7, {0x2}}, {0xc4, 0xac63, {0x3, 0xcc}}, {0x8, 0x96, {0x0, 0x81}}, {0x1, 0x9, {0x0, 0xbe}}, {0x6, 0x6, {0x1, 0x2}}, {0x70, 0x616a, {0x2, 0x3}}, {0x387, 0x2, {0x0, 0x5}}, {0xb958, 0x80, {0x3, 0x10000}}, {0xdd, 0x100}, {0x1, 0x0, {0x1, 0x3}}, {0x2, 0x9, {0x0, 0x3}}, {0xfffe, 0x8, {0x0, 0x57a83bb7}}, {0x2, 0xc6, {0x3, 0xc190}}, {0x218, 0x5, {0x2, 0x7}}, {0xd, 0xe4, {0x1, 0xd}}, {0xfff6, 0x9}, {0x3, 0xc, {0x0, 0x419b}}, {0x7fff, 0x1, {0x2, 0x8000}}, {0x8, 0x0, {0x2, 0x9}}, {0x4, 0x3, {0x0, 0x3ff}}, {0x5, 0x2, {0x3, 0x7f}}, {0x84f, 0x7, {0x0, 0x7ff}}, {0x0, 0x3, {0x3}}, {0x54, 0x1, {0x1, 0x9}}, {0x0, 0x7f, {0x3, 0xce}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x9, 0xd, 0x28c0, 0x40, 0x3, 'syz0\x00', "6fba96a358565637fd8acc31e823f724a9bb7e66e55e29f9784e89dde4bda02d", "43c43b3e338c9c90d059c4f34b9e73006469fb45febca83b35d7c691aad36790", [{0xc, 0x8000, {0x2, 0xc}}, {0x0, 0xe688, {0x3, 0x4}}, {0x5, 0x7fff, {0x2}}, {0x0, 0x2, {0x1, 0x4}}, {0x2, 0x5, {0x0, 0x2}}, {0x5, 0x3, {0x1, 0x4}}, {0x25d, 0x1000, {0x1, 0x7ff}}, {0x8, 0x9, {0x1, 0x1}}, {0xcadb, 0x3, {0x1, 0x5}}, {0x3, 0x0, {0x3, 0x1}}, {0x0, 0x7, {0x3}}, {0x8, 0xfff8, {0x0, 0x4c2b}}, {0x1, 0x3d6c, {0x1, 0x7}}, {0x5cd, 0x7, {0x0, 0x5}}, {0x0, 0xc, {0x3, 0x5}}, {0x7, 0x4, {0x2, 0x8000}}, {0x4, 0x3, {0x3, 0x7f11}}, {0x1, 0x6b2b, {0x1, 0x3}}, {0x6, 0x0, {0x3, 0x20000000}}, {0x64, 0xebe, {0x3, 0x6}}, {0x47, 0x1, {0x1, 0x8}}, {0x8, 0xf, {0x1, 0xbac0}}, {0xfb2c, 0xfffd, {0x0, 0x7fffffff}}, {0x3, 0x2, {0x2, 0x7}}, {0x100, 0xffff, {0x3}}, {0x7fff, 0x4, {0x1, 0x8}}, {0x6, 0xfff, {0x3, 0x4140}}, {0x8, 0x1, {0x1, 0x767f}}, {0x7, 0x1, {0x1, 0x28000}}, {0x7ddb, 0x4}, {0x2, 0x2, {0x3, 0x6}}, {0x434, 0xb05f, {0x3, 0x64b6}}, {0x3ff, 0x2, {0x1}}, {0x2, 0x369, {0x0, 0x6}}, {0x9, 0x6, {0x2, 0x7}}, {0x6, 0x3, {0x3, 0x6}}, {0x8, 0xff, {0x2, 0x3}}, {0x8, 0x3, {0x1, 0xd8}}, {0xa622, 0x5, {0x0, 0x9cb}}, {0xfff9, 0x5, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x4, 0x6, 0x7, 0x2, 0x17, 'syz1\x00', "c8ece1e40514af4373fd90a55001704c730211e10bcf9513a20d3ac0b88dad08", "36e87ad49580d9fb04afced58bfb29d58f02c94a5e655b11a3eeb2b60b4336a0", [{0x0, 0xf, {0x1, 0x3}}, {0x4, 0x2, {0x1}}, {0x7, 0x9, {0x0, 0x8db}}, {0x544, 0xe1, {0x0, 0x9}}, {0x2, 0xb, {0x0, 0x4a}}, {0x2, 0xcbc, {0x2, 0x816}}, {0x2, 0x5, {0x1, 0x5}}, {0x9, 0x3ff, {0x0, 0x62}}, {0x7, 0x6, {0x2, 0xc}}, {0xfff9, 0xfffb, {0x0, 0x4}}, {0x800, 0x9, {0x3}}, {0xb348, 0xe9, {0x3, 0x3}}, {0x7b, 0x10, {0x2, 0x3}}, {0x6, 0x3, {0x2, 0xa}}, {0x200, 0x2, {0x1, 0x6}}, {0x2, 0xda, {0x0, 0x5}}, {0x7fff, 0x6, {0x0, 0x9}}, {0x9, 0x7, {0x1, 0x40000000}}, {0x8, 0x0, {0x3, 0x4}}, {0x3, 0x3, {0x3, 0x8}}, {0x5, 0xff, {0x0, 0x7}}, {0x7, 0x2, {0x2}}, {0xfeff, 0x6, {0x2, 0x1ff}}, {0xa52c, 0x4, {0x2, 0x2}}, {0x3, 0xa443, {0x3, 0x4}}, {0x5, 0x3, {0x3, 0xe54}}, {0xffff, 0x0, {0x3, 0x80000000}}, {0x4, 0xa, {0x2, 0x9}}, {0x3, 0x7ff, {0x2, 0x7f}}, {0x7f, 0x5, {0x3, 0x6226cae9}}, {0x77, 0x78a, {0x1, 0x2}}, {0xc, 0xf, {0x3}}, {0x4, 0x40, {0x3, 0x80000000}}, {0x3, 0x3, {0x2, 0x2}}, {0x7, 0x6, {0x0, 0x1b}}, {0x3, 0x1, {0x40b9e74625ae3008, 0x1}}, {0xf6, 0x6, {0x3, 0x8001}}, {0x5, 0x7ff, {0x2, 0x4}}, {0x401, 0xc, {0x0, 0x2}}, {0xcffc, 0x44, {0x0, 0x1ff}}]}}}, {{0x254, 0x1, {{0x3, 0x200}, 0x67, 0x2, 0x3, 0x1, 0x16, 'syz0\x00', "78b6983a5d3c52829405034e3bc341a19cce7b5aef07a8f25067176d5807ddc6", "f5510e69f1d7c4179abf9b9d62d1f7ea12f0c3088c2c7a6f03f077874bb931b6", [{0x1ff, 0x6, {0x1, 0x8}}, {0x8a, 0x5, {0x1, 0x2250}}, {0xee, 0x30, {0x3, 0x9}}, {0x8, 0x1000, {0x2, 0x7}}, {0x9, 0xfff, {0x3, 0xfffffffe}}, {0xc0, 0x3, {0x1, 0x81}}, {0x8, 0xfff8, {0x1, 0xfffffe00}}, {0x4c, 0xe97, {0x0, 0x451c}}, {0x300, 0xa8bd, {0x1, 0xf}}, {0xb, 0x1, {0x2, 0x4}}, {0x7ff, 0x3, {0x0, 0x2}}, {0x8, 0x3, {0x1, 0x5}}, {0x719a, 0x7, {0x0, 0x3ff}}, {0x0, 0x7, {0x3}}, {0x2, 0x6, {0x1, 0x2}}, {0x7, 0x9, {0x1, 0x401}}, {0x6, 0x4, {0x0, 0x1000}}, {0x8, 0x8, {0x0, 0x9}}, {0x2, 0x9, {0x0, 0x82}}, {0x8, 0x1, {0x1, 0x1}}, {0x8, 0x5, {0x2, 0x3}}, {0x3, 0xd6, {0x2}}, {0x0, 0x0, {0x1, 0x67bb}}, {0x4, 0x84d, {0x0, 0x44}}, {0x7, 0x7, {0x3, 0x5}}, {0x200, 0x9, {0x0, 0xfffffff8}}, {0x1, 0x8, {0x3}}, {0x4, 0x5b, {0x2}}, {0x80, 0x13d, {0x1, 0x80}}, {0x8, 0x8, {0x0, 0x10}}, {0x6, 0x3, {0x2, 0x6}}, {0x5, 0x2, {0x3, 0x1}}, {0x9, 0x6, {0x0, 0x9}}, {0x3, 0x7, {0x3, 0x3}}, {0xfffa, 0x5, {0x0, 0xfc000000}}, {0x101, 0x2, {0x3, 0x1}}, {0x4, 0x9, {0x2}}, {0x6, 0x3ff, {0x3, 0x3ff}}, {0x7, 0x7fff, {0x1, 0x2}}, {0x5792, 0x5, {0x1, 0x100}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="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", 0xfd}, {&(0x7f0000000380)="700da771d5712fb29b7d17884f02bd18d12f2639f6ace4728b3b769a66d18b92da839b04edd247b63a0d2e6c444e1692a41f96c1d5ce9a63c5194954b4c03af3b6baf106d1", 0x45}, {&(0x7f0000001140)="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", 0x1000}], 0x3}}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xffffffffffffffaf, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x34}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000004900)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000940)=[@sndinfo={0x20, 0x84, 0x2, {0x4f, 0x205, 0xf}}], 0x20}], 0x1, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, 0x0) getsockname$netrom(r9, &(0x7f00000002c0)={{0x3, @bcast}, [@null, @bcast, @remote, @default, @netrom, @remote, @netrom, @rose]}, &(0x7f0000000340)=0x48) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x8c) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, 0x0, 0x0) close(0x3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001100)=ANY=[@ANYBLOB="14400000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0ca02ad62d312710dae65234d1f9d518f012522f8b5fbc6842260414aecb30da5093b0de9a885f46c6c994fc7b6cc899f59bbe7821f357a4ec654ca78eafebd3a4628fc3fed00db464beb9ffd2ee16e565c0be479678e3e45e8ce20278df6e00ed3ee35d0ea3471710cdbb810e0c49b8d728d61ca02a490964f546f60cc04ba126c6033e6cde919851ad6bd0040383c7414c7d8244088b6a0d8b21643634", @ANYRESHEX=r10, @ANYRESOCT=0x0, @ANYRES8=r10, @ANYRES8=r10, @ANYRES32=r10, @ANYRES8=r3, @ANYRESHEX], 0xe8}}, 0x840) 2.489062438s ago: executing program 0 (id=1831): socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 2) 2.452735779s ago: executing program 4 (id=1832): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0xe) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc000000210001000000000015000000ff010000000000008a00000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a0101000000000000000000000000003c000000000000000a000a002c0013007f000001000000000000000000000000e0000001000000000000000000000000000000000a00"], 0xcc}}, 0x0) 2.068822561s ago: executing program 4 (id=1834): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000dab283c9b7f556f3af8e3452b550fc5bca3e97edb71cf6fb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x5eb, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000400)={0x7, 0x2, 0xffffffff, 0x4}, &(0x7f0000000540)=0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$inet(0x2, 0x6000000000000001, 0x4) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r8, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r9, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x1}}], 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001c00c9068ebd7000fbdbdf2502000000", @ANYRES32=r7, @ANYBLOB="8000920a08000f00010000000a0001000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.710583675s ago: executing program 3 (id=1837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r3], 0x7c}}, 0x80) 1.584079533s ago: executing program 3 (id=1840): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='afs_make_fs_calli\x00', r0, 0x0, 0x8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='afs_make_fs_calli\x00', r0, 0x0, 0x8}, 0x18) socket$caif_stream(0x25, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002680)=ANY=[], 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002680)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8000000000000000, 0x25fc, 0x0, 0x7fffffff}, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x10, 0xc0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) unshare(0x4000400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0xcfa, 0x6, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r6, &(0x7f0000000ac0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000005c0)=r3}, 0x20) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @ldst={0x1, 0x1, 0x3, 0xf, 0x3, 0x140}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0xe6, &(0x7f0000000780)=""/230, 0x41100, 0x40, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000008c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[r2], &(0x7f0000000940)=[{0x3, 0x2, 0x4, 0xc}, {0x3, 0x3, 0x7}], 0x10, 0x7}, 0x94) connect$can_bcm(r4, &(0x7f00000004c0), 0x10) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)="ed463b47a5e15be18f0190e400a6cb790b1936018db66b35d292824c728b1517f91069e7ab23b11bef629a69498cb6a195b05d6aaf8673b3b0bf", 0x3a}, {0x0}], 0x2}, 0x200000c5) 1.504515922s ago: executing program 0 (id=1841): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x50, 0x0, &(0x7f0000000100)=0x2e) recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}, 0x2002}, {{&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000002ec0)=[{&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000240)=""/54, 0x36}, {&(0x7f00000015c0)=""/22, 0x16}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x7, &(0x7f0000001640)=""/201, 0xc9}, 0x4}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001740)=""/219, 0xdb}, {&(0x7f0000002900)=""/100, 0x64}, {&(0x7f0000002980)=""/235, 0xeb}, {&(0x7f0000002a80)=""/203, 0xcb}, {&(0x7f0000000180)=""/2, 0x2}, {&(0x7f0000002bc0)=""/91, 0x5b}, {&(0x7f0000002c40)=""/73, 0x49}, {&(0x7f0000002cc0)=""/166, 0xa6}], 0x8}}], 0x3, 0x40008000, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept4(r3, &(0x7f0000000100)=@xdp, &(0x7f0000000080)=0x80, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=@newtaction={0x6c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x58, 0x1, [@m_mpls={0x54, 0x1b, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x7, 0x8, 0x6, 0xfffffff7}, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xa8c0}, 0x2000a004) 1.309080865s ago: executing program 3 (id=1845): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000100000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000100006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03887bafe4c6490ef65dd193", 0x0, 0xfffffff5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001000000010400000050000000d000000000000e585470afb7bcf7c52cf689a9d4e0ee6adb190a090e00000619d1605561c88eb06b4c9120bd2f1fa6feac0dd0dc58eea53dd9c3808b1769a46d7cc72f3fdac1b339c58201616d62c"], 0x0, 0x2d}, 0x28) 1.155782023s ago: executing program 4 (id=1847): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) writev(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$inet(0x2b, 0x801, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r6}, 0x18) 847.186441ms ago: executing program 2 (id=1850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r3], 0x7c}}, 0x80) 726.018914ms ago: executing program 2 (id=1851): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000030000000000000000000000000000a0040"], 0xb8}}, 0x4000) 565.008322ms ago: executing program 0 (id=1852): socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 3) 443.482114ms ago: executing program 2 (id=1853): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@loopback, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x2b}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0) 377.639099ms ago: executing program 2 (id=1854): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500480012800e0001006970366772657461700000003400028014000600fe8000000000000000000000000000aa1400070000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 328.821668ms ago: executing program 3 (id=1855): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x7}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0xc39}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@typed={0x8, 0x77, 0x0, 0x0, @uid}, @nested={0xc, 0xea, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}]}, 0x24}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', r2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="40cabe510b4227b056ba7cc1620ef37966da21a86b003f15e5d8aa5bff5859daeef65dc1560000000000000002fa10ccffce9b780a90147547e8845a25e977322c29dafc2ae563be6406b94daf287b04d8ce805d73e14efc6a2be8173ff337b55a174e259b3cd67045f6c51ad3ce67d955cd0f645c7c54ae27ab7c9928726fc81147a7b10b8e53d3bae8d97de09ee0c2455150c85aa3b2da507626805d3b6f923edeb51fdc89bc6fa5c71e6f09b7744bce"], 0x1c}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r9, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPSET_CMD_GET_BYNAME(r10, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x1c, 0xe, 0x6, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010000305000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r13], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 278.837755ms ago: executing program 2 (id=1856): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000200"], 0xb8}}, 0x0) 191.214864ms ago: executing program 2 (id=1857): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) r2 = socket(0x8, 0x3, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000140)={0x3, 0x9}) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x61e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001380)={'syztnl0\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x1, [{0xe, 0xc8}, {0x9, 0xff, 0x3}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f, 0x2e, 0x0, 0x61, 0x0, 0x30]}}, &(0x7f0000001440)=""/96, 0x47, 0x60, 0x0, 0x2}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@o_path={&(0x7f0000001540)='./file0\x00', 0x0, 0x8, r3}, 0x18) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', 0x0, 0x4010, r4}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)='%pI4 \x00'}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000300000000000000000000000000000000000000d42a655597cc4c21e6a4e9921632c31dcc9fe85530fc385c9b9bb517c6"], 0x50) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x5, 0x5, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x0, &(0x7f0000001240), &(0x7f0000001140)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001500)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001800)=[r3, r6, r7, r8, 0xffffffffffffffff, r9], &(0x7f0000001840)=[{0x5, 0x5, 0xf, 0xc}, {0x2, 0x5, 0xf, 0xa}, {0x4, 0x2, 0xf}, {0x0, 0x3, 0x5, 0x5}], 0x10, 0x3}, 0x94) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) 169.185988ms ago: executing program 4 (id=1858): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000003000000f9ffff3f0000000000"], 0xb8}}, 0x0) 36.843059ms ago: executing program 3 (id=1859): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001a30ecfafaf2600000000210000008700010274554d45aaae979e9293cd3c2bb10000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x80000001}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000040)={0x20000014}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) r6 = epoll_create1(0x0) r7 = socket(0x1, 0x80802, 0x0) (async) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000001}) (async) epoll_pwait(r8, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) (async) close(r8) shutdown(r7, 0x0) (async) close(r6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x7, &(0x7f00000000c0)=0x80, 0x4) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0x12) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r10, 0xfe0d0000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 0s ago: executing program 4 (id=1860): r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x4e20, @empty}, 'bond0\x00'}) kernel console output (not intermixed with test programs): ] netlink: 36 bytes leftover after parsing attributes in process `syz.3.391'. [ 138.709846][ T7453] ipvlan2: entered promiscuous mode [ 138.717825][ T7453] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 139.006387][ T7472] IPv6: NLM_F_REPLACE set, but no existing node found! [ 139.034283][ T7472] xt_policy: too many policy elements [ 139.317912][ T7486] FAULT_INJECTION: forcing a failure. [ 139.317912][ T7486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.344753][ T7486] CPU: 0 UID: 0 PID: 7486 Comm: syz.1.402 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 139.344782][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.344794][ T7486] Call Trace: [ 139.344802][ T7486] [ 139.344810][ T7486] dump_stack_lvl+0x189/0x250 [ 139.344840][ T7486] ? __pfx____ratelimit+0x10/0x10 [ 139.344865][ T7486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.344888][ T7486] ? __pfx__printk+0x10/0x10 [ 139.344916][ T7486] ? __might_fault+0xb0/0x130 [ 139.344956][ T7486] should_fail_ex+0x414/0x560 [ 139.344985][ T7486] _copy_from_user+0x2d/0xb0 [ 139.345006][ T7486] ___sys_sendmsg+0x158/0x2a0 [ 139.345039][ T7486] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.345121][ T7486] ? __might_fault+0xb0/0x130 [ 139.345151][ T7486] __sys_sendmmsg+0x227/0x430 [ 139.345187][ T7486] ? __pfx___sys_sendmmsg+0x10/0x10 [ 139.345212][ T7486] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 139.345278][ T7486] ? ksys_write+0x22a/0x250 [ 139.345312][ T7486] ? __pfx_ksys_write+0x10/0x10 [ 139.345335][ T7486] ? rcu_is_watching+0x15/0xb0 [ 139.345363][ T7486] __x64_sys_sendmmsg+0xa0/0xc0 [ 139.345394][ T7486] do_syscall_64+0xfa/0x3b0 [ 139.345418][ T7486] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.345441][ T7486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.345460][ T7486] ? clear_bhb_loop+0x60/0xb0 [ 139.345485][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.345502][ T7486] RIP: 0033:0x7f338dd8ebe9 [ 139.345521][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.345544][ T7486] RSP: 002b:00007f338eb60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 139.345566][ T7486] RAX: ffffffffffffffda RBX: 00007f338dfb5fa0 RCX: 00007f338dd8ebe9 [ 139.345579][ T7486] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 139.345592][ T7486] RBP: 00007f338eb60090 R08: 0000000000000000 R09: 0000000000000000 [ 139.345604][ T7486] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 139.345616][ T7486] R13: 00007f338dfb6038 R14: 00007f338dfb5fa0 R15: 00007ffc40efcf98 [ 139.345649][ T7486] [ 139.728018][ T7494] netlink: 36 bytes leftover after parsing attributes in process `syz.3.403'. [ 139.830862][ T7492] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 139.865696][ T7500] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 139.883446][ T7503] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 139.929517][ T7492] ¾x9ÿ: left allmulticast mode [ 139.937116][ T7492] ¾x9ÿ: left promiscuous mode [ 139.942250][ T7492] bridge0: port 1(1¾x9ÿ) entered disabled state [ 140.019575][ T7492] bridge_slave_1: left allmulticast mode [ 140.034281][ T7492] bridge_slave_1: left promiscuous mode [ 140.053045][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.080299][ T7501] netlink: 'syz.1.405': attribute type 10 has an invalid length. [ 140.117392][ T7492] bond0: (slave bond_slave_0): Releasing backup interface [ 140.148248][ T7492] bond0: (slave bond_slave_1): Releasing backup interface [ 140.181483][ T7492] team0: Port device team_slave_0 removed [ 140.216766][ T7492] team0: Port device team_slave_1 removed [ 140.229556][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.237750][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.249410][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.258659][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.319419][ T7507] bond2: (slave geneve2): making interface the new active one [ 140.328486][ T7507] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 140.340686][ T7501] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 140.361207][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.382397][ T7501] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 140.406893][ T1040] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.494228][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 140.505567][ T1040] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.531858][ T1040] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.579839][ T7525] FAULT_INJECTION: forcing a failure. [ 140.579839][ T7525] name failslab, interval 1, probability 0, space 0, times 0 [ 140.596777][ T7522] macsec1: entered promiscuous mode [ 140.599518][ T7525] CPU: 0 UID: 0 PID: 7525 Comm: syz.2.415 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 140.599544][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.599554][ T7525] Call Trace: [ 140.599569][ T7525] [ 140.599576][ T7525] dump_stack_lvl+0x189/0x250 [ 140.599603][ T7525] ? __pfx____ratelimit+0x10/0x10 [ 140.599625][ T7525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.599646][ T7525] ? __pfx__printk+0x10/0x10 [ 140.599671][ T7525] ? rcu_is_watching+0x15/0xb0 [ 140.599690][ T7525] ? trace_fib_table_lookup+0x85/0x200 [ 140.599723][ T7525] should_fail_ex+0x414/0x560 [ 140.599749][ T7525] should_failslab+0xa8/0x100 [ 140.599777][ T7525] kmem_cache_alloc_noprof+0x73/0x3c0 [ 140.599800][ T7525] ? dst_alloc+0x105/0x170 [ 140.599814][ T7525] ? fib_lookup+0x76/0x440 [ 140.599843][ T7525] dst_alloc+0x105/0x170 [ 140.599865][ T7525] ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 140.599892][ T7525] ? ip_route_output_key_hash+0xde/0x2e0 [ 140.599911][ T7525] ip_route_output_key_hash+0x1b9/0x2e0 [ 140.599928][ T7525] ? __lock_acquire+0xab9/0xd20 [ 140.599954][ T7525] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 140.600000][ T7525] ip_route_output_flow+0x2a/0x150 [ 140.600023][ T7525] ? security_sk_classify_flow+0x70/0x180 [ 140.600046][ T7525] udp_sendmsg+0x142e/0x2170 [ 140.600063][ T7525] ? __lock_acquire+0xab9/0xd20 [ 140.600101][ T7525] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 140.600122][ T7525] ? __pfx_udp_sendmsg+0x10/0x10 [ 140.600146][ T7525] ? __lock_acquire+0xab9/0xd20 [ 140.600184][ T7525] ? __lock_acquire+0xab9/0xd20 [ 140.600239][ T7525] udpv6_sendmsg+0xbf0/0x24b0 [ 140.600279][ T7525] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 140.600304][ T7525] ? __pfx___might_resched+0x10/0x10 [ 140.600341][ T7525] ? aa_sk_perm+0x81e/0x950 [ 140.600378][ T7525] ? inet_send_prepare+0x5c/0x270 [ 140.600401][ T7525] ? inet6_sendmsg+0xe4/0x120 [ 140.600428][ T7525] __sock_sendmsg+0xe5/0x270 [ 140.600457][ T7525] ____sys_sendmsg+0x52d/0x830 [ 140.600489][ T7525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.600524][ T7525] ? import_iovec+0x74/0xa0 [ 140.600546][ T7525] ___sys_sendmsg+0x21f/0x2a0 [ 140.600581][ T7525] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.600654][ T7525] ? __might_fault+0xb0/0x130 [ 140.600683][ T7525] __sys_sendmmsg+0x227/0x430 [ 140.600715][ T7525] ? __pfx___sys_sendmmsg+0x10/0x10 [ 140.600737][ T7525] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 140.600789][ T7525] ? ksys_write+0x22a/0x250 [ 140.600815][ T7525] ? __pfx_ksys_write+0x10/0x10 [ 140.600835][ T7525] ? rcu_is_watching+0x15/0xb0 [ 140.600859][ T7525] __x64_sys_sendmmsg+0xa0/0xc0 [ 140.600887][ T7525] do_syscall_64+0xfa/0x3b0 [ 140.600908][ T7525] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.600929][ T7525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.600946][ T7525] ? clear_bhb_loop+0x60/0xb0 [ 140.600968][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.600985][ T7525] RIP: 0033:0x7f6e1c38ebe9 [ 140.601002][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.601016][ T7525] RSP: 002b:00007f6e1d209038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.601036][ T7525] RAX: ffffffffffffffda RBX: 00007f6e1c5b5fa0 RCX: 00007f6e1c38ebe9 [ 140.601049][ T7525] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 140.601060][ T7525] RBP: 00007f6e1d209090 R08: 0000000000000000 R09: 0000000000000000 [ 140.601071][ T7525] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 140.601082][ T7525] R13: 00007f6e1c5b6038 R14: 00007f6e1c5b5fa0 R15: 00007fff9f05f558 [ 140.601112][ T7525] [ 140.944059][ T7533] netlink: 248 bytes leftover after parsing attributes in process `syz.0.417'. [ 140.979870][ T7522] macvlan1: entered promiscuous mode [ 140.991629][ T7522] macvlan1: left promiscuous mode [ 141.017820][ T1040] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 141.027517][ T7529] netlink: 'syz.2.416': attribute type 8 has an invalid length. [ 141.044686][ T7529] netlink: 32 bytes leftover after parsing attributes in process `syz.2.416'. [ 141.087197][ T7516] syz.1.405 (7516) used greatest stack depth: 17896 bytes left [ 141.521111][ T7549] netlink: 84 bytes leftover after parsing attributes in process `syz.1.422'. [ 141.544610][ T7540] IPv6: sit1: Disabled Multicast RS [ 141.551029][ T7540] sit1: entered allmulticast mode [ 142.349187][ T7575] pim6reg1: entered promiscuous mode [ 142.442835][ T7575] pim6reg1: entered allmulticast mode [ 142.727323][ T7579] netlink: 'syz.0.431': attribute type 8 has an invalid length. [ 142.741408][ T7579] netlink: 32 bytes leftover after parsing attributes in process `syz.0.431'. [ 142.968275][ T7595] FAULT_INJECTION: forcing a failure. [ 142.968275][ T7595] name failslab, interval 1, probability 0, space 0, times 0 [ 143.012756][ T7596] netlink: 248 bytes leftover after parsing attributes in process `syz.0.434'. [ 143.041602][ T7595] CPU: 0 UID: 0 PID: 7595 Comm: syz.2.435 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 143.041631][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.041642][ T7595] Call Trace: [ 143.041650][ T7595] [ 143.041658][ T7595] dump_stack_lvl+0x189/0x250 [ 143.041688][ T7595] ? __pfx____ratelimit+0x10/0x10 [ 143.041713][ T7595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.041736][ T7595] ? __pfx__printk+0x10/0x10 [ 143.041766][ T7595] ? __pfx___might_resched+0x10/0x10 [ 143.041786][ T7595] ? fs_reclaim_acquire+0x7d/0x100 [ 143.041821][ T7595] should_fail_ex+0x414/0x560 [ 143.041849][ T7595] should_failslab+0xa8/0x100 [ 143.041878][ T7595] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 143.041905][ T7595] ? __alloc_skb+0x112/0x2d0 [ 143.041936][ T7595] __alloc_skb+0x112/0x2d0 [ 143.041966][ T7595] alloc_skb_with_frags+0xca/0x890 [ 143.042004][ T7595] ? is_bpf_text_address+0x26/0x2b0 [ 143.042036][ T7595] sock_alloc_send_pskb+0x857/0x990 [ 143.042060][ T7595] ? __lock_acquire+0xab9/0xd20 [ 143.042109][ T7595] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 143.042130][ T7595] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 143.042153][ T7595] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.042177][ T7595] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 143.042199][ T7595] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 143.042272][ T7595] __ip_append_data+0x2ce8/0x40c0 [ 143.042316][ T7595] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 143.042361][ T7595] ? __pfx___ip_append_data+0x10/0x10 [ 143.042377][ T7595] ? ipv4_mtu+0x4b2/0x5c0 [ 143.042408][ T7595] ? ip_setup_cork+0x577/0x9a0 [ 143.042430][ T7595] ip_make_skb+0x1de/0x3f0 [ 143.042456][ T7595] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 143.042532][ T7595] ? __pfx_ip_make_skb+0x10/0x10 [ 143.042600][ T7595] udp_sendmsg+0x1925/0x2170 [ 143.042626][ T7595] ? __lock_acquire+0xab9/0xd20 [ 143.042667][ T7595] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 143.042689][ T7595] ? __pfx_udp_sendmsg+0x10/0x10 [ 143.042714][ T7595] ? __lock_acquire+0xab9/0xd20 [ 143.042754][ T7595] ? __lock_acquire+0xab9/0xd20 [ 143.042812][ T7595] udpv6_sendmsg+0xbf0/0x24b0 [ 143.042854][ T7595] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 143.042882][ T7595] ? __pfx___might_resched+0x10/0x10 [ 143.042923][ T7595] ? aa_sk_perm+0x81e/0x950 [ 143.042964][ T7595] ? inet_send_prepare+0x5c/0x270 [ 143.042989][ T7595] ? inet6_sendmsg+0xe4/0x120 [ 143.043018][ T7595] __sock_sendmsg+0xe5/0x270 [ 143.043044][ T7595] ____sys_sendmsg+0x52d/0x830 [ 143.043080][ T7595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.043119][ T7595] ? import_iovec+0x74/0xa0 [ 143.043143][ T7595] ___sys_sendmsg+0x21f/0x2a0 [ 143.043174][ T7595] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.043250][ T7595] ? __might_fault+0xb0/0x130 [ 143.043279][ T7595] __sys_sendmmsg+0x227/0x430 [ 143.043316][ T7595] ? __pfx___sys_sendmmsg+0x10/0x10 [ 143.043341][ T7595] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 143.043398][ T7595] ? ksys_write+0x22a/0x250 [ 143.043428][ T7595] ? __pfx_ksys_write+0x10/0x10 [ 143.043449][ T7595] ? rcu_is_watching+0x15/0xb0 [ 143.043477][ T7595] __x64_sys_sendmmsg+0xa0/0xc0 [ 143.043517][ T7595] do_syscall_64+0xfa/0x3b0 [ 143.043541][ T7595] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.043564][ T7595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.043584][ T7595] ? clear_bhb_loop+0x60/0xb0 [ 143.043608][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.043627][ T7595] RIP: 0033:0x7f6e1c38ebe9 [ 143.043646][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.043662][ T7595] RSP: 002b:00007f6e1d209038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.043684][ T7595] RAX: ffffffffffffffda RBX: 00007f6e1c5b5fa0 RCX: 00007f6e1c38ebe9 [ 143.043698][ T7595] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 143.043711][ T7595] RBP: 00007f6e1d209090 R08: 0000000000000000 R09: 0000000000000000 [ 143.043723][ T7595] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000002 [ 143.043735][ T7595] R13: 00007f6e1c5b6038 R14: 00007f6e1c5b5fa0 R15: 00007fff9f05f558 [ 143.043769][ T7595] [ 143.587805][ T7598] IPv6: sit1: Disabled Multicast RS [ 143.595643][ T7598] sit1: entered allmulticast mode [ 144.131003][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 144.147873][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.083955][ T7629] bridge_slave_1 (unregistering): left allmulticast mode [ 145.105530][ T7629] bridge_slave_1 (unregistering): left promiscuous mode [ 145.119821][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.179229][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'. [ 145.220213][ T7668] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 145.492269][ T7678] syzkaller1: entered promiscuous mode [ 145.502771][ T7678] syzkaller1: entered allmulticast mode [ 145.991841][ T7693] IPv6: sit1: Disabled Multicast RS [ 146.014835][ T7693] sit1: entered allmulticast mode [ 146.393123][ T7726] netlink: 'syz.4.456': attribute type 12 has an invalid length. [ 146.409734][ T7724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.458'. [ 146.460748][ T7727] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 147.085604][ T7743] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 147.239665][ T7743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.485540][ T7750] bond3: (slave veth1): Enslaving as an active interface with a down link [ 147.601905][ T7743] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 147.653152][ T7743] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 147.768963][ T7754] netlink: 100 bytes leftover after parsing attributes in process `syz.3.465'. [ 147.779870][ T7754] netlink: 100 bytes leftover after parsing attributes in process `syz.3.465'. [ 147.815199][ T7757] IPv6: sit1: Disabled Multicast RS [ 147.854797][ T7757] sit1: entered allmulticast mode [ 148.058304][ T7772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.471'. [ 148.429574][ T7781] tipc: Enabled bearer , priority 0 [ 148.456448][ T7781] syzkaller0: entered promiscuous mode [ 148.482503][ T7781] syzkaller0: entered allmulticast mode [ 148.742506][ T7790] FAULT_INJECTION: forcing a failure. [ 148.742506][ T7790] name failslab, interval 1, probability 0, space 0, times 0 [ 148.820571][ T7790] CPU: 0 UID: 0 PID: 7790 Comm: syz.2.477 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 148.820601][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.820612][ T7790] Call Trace: [ 148.820621][ T7790] [ 148.820629][ T7790] dump_stack_lvl+0x189/0x250 [ 148.820660][ T7790] ? __pfx____ratelimit+0x10/0x10 [ 148.820686][ T7790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.820710][ T7790] ? __pfx__printk+0x10/0x10 [ 148.820742][ T7790] ? __pfx___might_resched+0x10/0x10 [ 148.820763][ T7790] ? fs_reclaim_acquire+0x7d/0x100 [ 148.820798][ T7790] should_fail_ex+0x414/0x560 [ 148.820827][ T7790] should_failslab+0xa8/0x100 [ 148.820858][ T7790] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 148.820885][ T7790] ? __alloc_skb+0x112/0x2d0 [ 148.820916][ T7790] __alloc_skb+0x112/0x2d0 [ 148.820946][ T7790] alloc_skb_with_frags+0xca/0x890 [ 148.820983][ T7790] ? is_bpf_text_address+0x26/0x2b0 [ 148.821016][ T7790] sock_alloc_send_pskb+0x857/0x990 [ 148.821035][ T7790] ? __lock_acquire+0xab9/0xd20 [ 148.821083][ T7790] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 148.821104][ T7790] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 148.821126][ T7790] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.821151][ T7790] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 148.821172][ T7790] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.821199][ T7790] __ip_append_data+0x2ce8/0x40c0 [ 148.821252][ T7790] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 148.821298][ T7790] ? __pfx___ip_append_data+0x10/0x10 [ 148.821314][ T7790] ? ipv4_mtu+0x4b2/0x5c0 [ 148.821347][ T7790] ? ip_setup_cork+0x577/0x9a0 [ 148.821369][ T7790] ip_make_skb+0x1de/0x3f0 [ 148.821395][ T7790] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 148.821415][ T7790] ? __pfx_ip_make_skb+0x10/0x10 [ 148.821456][ T7790] udp_sendmsg+0x1925/0x2170 [ 148.821478][ T7790] ? __lock_acquire+0xab9/0xd20 [ 148.821520][ T7790] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 148.821542][ T7790] ? __pfx_udp_sendmsg+0x10/0x10 [ 148.821569][ T7790] ? __lock_acquire+0xab9/0xd20 [ 148.821610][ T7790] ? __lock_acquire+0xab9/0xd20 [ 148.821671][ T7790] udpv6_sendmsg+0xbf0/0x24b0 [ 148.821714][ T7790] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 148.821742][ T7790] ? __pfx___might_resched+0x10/0x10 [ 148.821781][ T7790] ? aa_sk_perm+0x81e/0x950 [ 148.821822][ T7790] ? inet_send_prepare+0x5c/0x270 [ 148.821847][ T7790] ? inet6_sendmsg+0xe4/0x120 [ 148.821877][ T7790] __sock_sendmsg+0xe5/0x270 [ 148.821903][ T7790] ____sys_sendmsg+0x52d/0x830 [ 148.821938][ T7790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.821977][ T7790] ? import_iovec+0x74/0xa0 [ 148.822001][ T7790] ___sys_sendmsg+0x21f/0x2a0 [ 148.822033][ T7790] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.822112][ T7790] ? __might_fault+0xb0/0x130 [ 148.822144][ T7790] __sys_sendmmsg+0x227/0x430 [ 148.822179][ T7790] ? __pfx___sys_sendmmsg+0x10/0x10 [ 148.822212][ T7790] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 148.822269][ T7790] ? ksys_write+0x22a/0x250 [ 148.822297][ T7790] ? __pfx_ksys_write+0x10/0x10 [ 148.822320][ T7790] ? rcu_is_watching+0x15/0xb0 [ 148.822347][ T7790] __x64_sys_sendmmsg+0xa0/0xc0 [ 148.822383][ T7790] do_syscall_64+0xfa/0x3b0 [ 148.822406][ T7790] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.822428][ T7790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.822447][ T7790] ? clear_bhb_loop+0x60/0xb0 [ 148.822471][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.822488][ T7790] RIP: 0033:0x7f6e1c38ebe9 [ 148.822506][ T7790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.822522][ T7790] RSP: 002b:00007f6e1d209038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 148.822543][ T7790] RAX: ffffffffffffffda RBX: 00007f6e1c5b5fa0 RCX: 00007f6e1c38ebe9 [ 148.822558][ T7790] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 148.822570][ T7790] RBP: 00007f6e1d209090 R08: 0000000000000000 R09: 0000000000000000 [ 148.822581][ T7790] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000002 [ 148.822592][ T7790] R13: 00007f6e1c5b6038 R14: 00007f6e1c5b5fa0 R15: 00007fff9f05f558 [ 148.822625][ T7790] [ 148.846682][ T7781] tipc: Resetting bearer [ 149.244558][ T7780] tipc: Resetting bearer [ 149.475358][ T7780] tipc: Disabling bearer [ 149.526695][ T5947] tipc: Node number set to 85346598 [ 149.654401][ T7804] pimreg: entered allmulticast mode [ 152.198992][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 152.243212][ T7820] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 152.396599][ T7817] IPv6: sit1: Disabled Multicast RS [ 152.404934][ T7817] sit1: entered allmulticast mode [ 152.692691][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 152.982516][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 153.283923][ T7856] netlink: 'syz.4.495': attribute type 15 has an invalid length. [ 153.391308][ T7856] ipvlan2: left promiscuous mode [ 153.587142][ T7871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.498'. [ 154.819276][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 155.509630][ T7913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.509'. [ 156.081704][ T7937] FAULT_INJECTION: forcing a failure. [ 156.081704][ T7937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.089205][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 156.110204][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 156.150035][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.4.514 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 156.150065][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.150076][ T7937] Call Trace: [ 156.150084][ T7937] [ 156.150093][ T7937] dump_stack_lvl+0x189/0x250 [ 156.150122][ T7937] ? __pfx____ratelimit+0x10/0x10 [ 156.150147][ T7937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.150169][ T7937] ? __pfx__printk+0x10/0x10 [ 156.150196][ T7937] ? __might_fault+0xb0/0x130 [ 156.150236][ T7937] should_fail_ex+0x414/0x560 [ 156.150264][ T7937] _copy_from_user+0x2d/0xb0 [ 156.150285][ T7937] ___sys_sendmsg+0x158/0x2a0 [ 156.150317][ T7937] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.150398][ T7937] ? __might_fault+0xb0/0x130 [ 156.150438][ T7937] __sys_sendmmsg+0x227/0x430 [ 156.150473][ T7937] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.150498][ T7937] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 156.150555][ T7937] ? ksys_write+0x22a/0x250 [ 156.150584][ T7937] ? __pfx_ksys_write+0x10/0x10 [ 156.150605][ T7937] ? rcu_is_watching+0x15/0xb0 [ 156.150633][ T7937] __x64_sys_sendmmsg+0xa0/0xc0 [ 156.150664][ T7937] do_syscall_64+0xfa/0x3b0 [ 156.150688][ T7937] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.150711][ T7937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.150731][ T7937] ? clear_bhb_loop+0x60/0xb0 [ 156.150755][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.150774][ T7937] RIP: 0033:0x7eff8958ebe9 [ 156.150792][ T7937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.150808][ T7937] RSP: 002b:00007eff8a4c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.150830][ T7937] RAX: ffffffffffffffda RBX: 00007eff897b5fa0 RCX: 00007eff8958ebe9 [ 156.150845][ T7937] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 156.150858][ T7937] RBP: 00007eff8a4c4090 R08: 0000000000000000 R09: 0000000000000000 [ 156.150870][ T7937] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000002 [ 156.150882][ T7937] R13: 00007eff897b6038 R14: 00007eff897b5fa0 R15: 00007ffcbc5e87c8 [ 156.150921][ T7937] [ 156.466884][ T7944] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 157.038789][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'. [ 157.602155][ T7972] netlink: 'syz.1.519': attribute type 1 has an invalid length. [ 157.637105][ T7972] netlink: 'syz.1.519': attribute type 2 has an invalid length. [ 157.905654][ T7978] IPVS: length: 150 != 84136430776 [ 158.682698][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 159.255244][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 159.552255][ T8007] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 160.220051][ T8019] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.370010][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 160.403357][ T8021] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 160.460898][ T8021] team0: Failed to send options change via netlink (err -105) [ 160.514368][ T8021] team0: Port device batadv1 added [ 160.760435][ T8019] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.875731][ T8029] IPv6: sit1: Disabled Multicast RS [ 160.885798][ T8029] sit1: entered allmulticast mode [ 160.996291][ T8037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.067238][ T8019] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.226996][ T8037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.284931][ T8019] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.420328][ T8037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.584705][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 161.587427][ T8037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.693643][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.775895][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.859838][ T1007] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.943667][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.017588][ T1007] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.130908][ T1007] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.179132][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.265354][ T1007] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.832060][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 162.841427][ T8067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.547'. [ 162.886846][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 163.526128][ T8083] IPv6: sit1: Disabled Multicast RS [ 163.537273][ T8083] sit1: entered allmulticast mode [ 164.221748][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.229686][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.537653][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.753578][ T8111] IPv6: sit1: Disabled Multicast RS [ 164.770209][ T8111] sit1: entered allmulticast mode [ 164.859435][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.880897][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.913517][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 165.208678][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.235987][ T8135] netlink: 224 bytes leftover after parsing attributes in process `syz.0.566'. [ 165.249393][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.295443][ T8135] netlink: 'syz.0.566': attribute type 1 has an invalid length. [ 165.346089][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 165.474788][ T8135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.527747][ T8151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.569'. [ 165.803640][ T8161] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 165.830469][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.572'. [ 165.897497][ T8164] netlink: 'syz.0.572': attribute type 2 has an invalid length. [ 165.986104][ T8161] netlink: 84 bytes leftover after parsing attributes in process `syz.0.572'. [ 166.184359][ T55] block nbd1: Possible stuck request ffff88802501e000: control (read@0,4096B). Runtime 30 seconds [ 166.217599][ T8170] netlink: 'syz.4.575': attribute type 7 has an invalid length. [ 166.252745][ T8170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.575'. [ 166.410172][ T8175] IPv6: sit1: Disabled Multicast RS [ 166.461121][ T8175] sit1: entered allmulticast mode [ 167.107497][ T8210] netlink: 'syz.1.587': attribute type 12 has an invalid length. [ 167.299322][ T8214] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 167.382303][ T8199] netlink: 72 bytes leftover after parsing attributes in process `syz.2.583'. [ 167.402295][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 167.631830][ T8230] netlink: 88 bytes leftover after parsing attributes in process `syz.1.592'. [ 167.683529][ T8224] bridge_slave_1: left allmulticast mode [ 167.705606][ T8224] bridge_slave_1: left promiscuous mode [ 167.711863][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.755214][ T8224] bridge_slave_0: left allmulticast mode [ 167.761571][ T8224] bridge_slave_0: left promiscuous mode [ 167.768712][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.946960][ T8213] netlink: 'syz.4.589': attribute type 7 has an invalid length. [ 168.297489][ T8240] IPv6: sit1: Disabled Multicast RS [ 168.318775][ T8240] sit1: entered allmulticast mode [ 168.503398][ T5875] Bluetooth: hci4: command 0x0406 tx timeout [ 168.851960][ T8277] netlink: 'syz.2.605': attribute type 7 has an invalid length. [ 168.909728][ T8282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.932903][ T8282] batadv_slave_1: entered promiscuous mode [ 169.321356][ T8303] tipc: Started in network mode [ 169.331926][ T8303] tipc: Node identity 9ebe22411482, cluster identity 4711 [ 169.340625][ T8303] tipc: Enabled bearer , priority 0 [ 169.356240][ T8303] syzkaller0: entered promiscuous mode [ 169.362037][ T8303] syzkaller0: entered allmulticast mode [ 169.421047][ T8303] tipc: Resetting bearer [ 169.540267][ T8302] tipc: Resetting bearer [ 169.565259][ T8302] tipc: Disabling bearer [ 169.603773][ T8305] IPv6: sit1: Disabled Multicast RS [ 169.610543][ T8305] sit1: entered allmulticast mode [ 170.300960][ T8345] syzkaller0: entered promiscuous mode [ 170.315139][ T8349] __nla_validate_parse: 8 callbacks suppressed [ 170.315159][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 170.327683][ T8345] syzkaller0: entered allmulticast mode [ 170.330973][ T8349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 170.356926][ T8344] tipc: Enabled bearer , priority 0 [ 170.364227][ T8349] netlink: 'syz.2.630': attribute type 23 has an invalid length. [ 170.412169][ T8345] tipc: Resetting bearer [ 170.439777][ T8343] tipc: Resetting bearer [ 170.485742][ T8343] tipc: Disabling bearer [ 170.548863][ T8350] IPv6: sit1: Disabled Multicast RS [ 170.559467][ T8350] sit1: entered allmulticast mode [ 170.787485][ T8371] netlink: 92 bytes leftover after parsing attributes in process `syz.3.635'. [ 171.196957][ T8382] tipc: Started in network mode [ 171.202870][ T8382] tipc: Node identity ac1414aa, cluster identity 4711 [ 171.214822][ T8382] tipc: Enabled bearer , priority 10 [ 171.524275][ T8393] netlink: 68 bytes leftover after parsing attributes in process `syz.3.641'. [ 172.047736][ T48] IPVS: starting estimator thread 0... [ 172.322715][ T8414] IPVS: using max 26 ests per chain, 62400 per kthread [ 172.479597][ T10] tipc: Node number set to 2886997162 [ 172.502043][ T8412] IPv6: sit2: Disabled Multicast RS [ 172.523926][ T8412] sit2: entered allmulticast mode [ 173.035175][ T8429] Bluetooth: MGMT ver 1.23 [ 173.128771][ T8432] netlink: 48 bytes leftover after parsing attributes in process `syz.2.651'. [ 173.152805][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 173.265750][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 173.284149][ T8432] hsr_slave_1 (unregistering): left promiscuous mode [ 173.586873][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 173.859546][ T8458] IPv6: sit1: Disabled Multicast RS [ 173.873674][ T8458] sit1: entered allmulticast mode [ 174.012988][ T8463] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20004 [ 174.101632][ T8469] netlink: 'syz.4.660': attribute type 39 has an invalid length. [ 174.359484][ T8484] netlink: 'syz.0.667': attribute type 11 has an invalid length. [ 174.443428][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 174.455193][ T8492] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 174.488285][ T8492] netlink: 'syz.2.668': attribute type 13 has an invalid length. [ 174.495558][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 174.513351][ T8492] netlink: 'syz.2.668': attribute type 17 has an invalid length. [ 175.254433][ T8492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.264161][ T8492] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.285832][ T8492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.315136][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.331371][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.340261][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.351057][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.412471][ T8527] IPv6: sit1: Disabled Multicast RS [ 175.422380][ T8527] sit1: entered allmulticast mode [ 175.578028][ T8537] __nla_validate_parse: 69 callbacks suppressed [ 175.578048][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'. [ 175.724093][ T8542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.678'. [ 175.762653][ T8542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.678'. [ 175.979125][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 176.122945][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 176.124913][ T8564] tipc: Enabled bearer , priority 0 [ 176.147739][ T8564] veth0_to_hsr: entered allmulticast mode [ 176.159673][ T8564] tipc: Cannot configure node identity twice [ 176.175806][ T8562] tipc: Disabling bearer [ 176.650281][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 176.700099][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 177.330656][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 177.357840][ T8611] macvlan2: entered allmulticast mode [ 177.367840][ T8611] veth1_vlan: entered allmulticast mode [ 177.376907][ T8611] veth1_vlan: left allmulticast mode [ 177.438360][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 178.171544][ T8645] IPv6: sit1: Disabled Multicast RS [ 178.184367][ T8645] sit1: entered allmulticast mode [ 178.381977][ T8671] FAULT_INJECTION: forcing a failure. [ 178.381977][ T8671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.407089][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: syz.0.724 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 178.407121][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.407133][ T8671] Call Trace: [ 178.407140][ T8671] [ 178.407149][ T8671] dump_stack_lvl+0x189/0x250 [ 178.407178][ T8671] ? __pfx____ratelimit+0x10/0x10 [ 178.407203][ T8671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.407226][ T8671] ? __pfx__printk+0x10/0x10 [ 178.407254][ T8671] ? __might_fault+0xb0/0x130 [ 178.407294][ T8671] should_fail_ex+0x414/0x560 [ 178.407322][ T8671] _copy_from_iter+0x1db/0x16f0 [ 178.407361][ T8671] ? txopt_get+0x7a/0x3f0 [ 178.407383][ T8671] ? txopt_get+0x7a/0x3f0 [ 178.407407][ T8671] ? __pfx__copy_from_iter+0x10/0x10 [ 178.407430][ T8671] ? txopt_get+0x335/0x3f0 [ 178.407455][ T8671] ? txopt_get+0x7a/0x3f0 [ 178.407477][ T8671] ? __pfx_txopt_get+0x10/0x10 [ 178.407514][ T8671] rawv6_sendmsg+0xb4b/0x1820 [ 178.407558][ T8671] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 178.407614][ T8671] ? __pfx_aa_sk_perm+0x10/0x10 [ 178.407644][ T8671] ? sock_rps_record_flow+0x19/0x410 [ 178.407669][ T8671] ? inet_sendmsg+0x2f4/0x370 [ 178.407687][ T8671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.407714][ T8671] __sock_sendmsg+0x19c/0x270 [ 178.407741][ T8671] __sys_sendto+0x3bd/0x520 [ 178.407769][ T8671] ? __pfx___sys_sendto+0x10/0x10 [ 178.407792][ T8671] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 178.407832][ T8671] ? __fget_files+0x3a0/0x420 [ 178.407874][ T8671] ? ksys_write+0x22a/0x250 [ 178.407899][ T8671] ? __pfx_ksys_write+0x10/0x10 [ 178.407927][ T8671] __x64_sys_sendto+0xde/0x100 [ 178.407956][ T8671] do_syscall_64+0xfa/0x3b0 [ 178.407978][ T8671] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.407999][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.408029][ T8671] ? clear_bhb_loop+0x60/0xb0 [ 178.408054][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.408072][ T8671] RIP: 0033:0x7fbb1f98ebe9 [ 178.408091][ T8671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.408108][ T8671] RSP: 002b:00007fbb20882038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 178.408131][ T8671] RAX: ffffffffffffffda RBX: 00007fbb1fbb5fa0 RCX: 00007fbb1f98ebe9 [ 178.408145][ T8671] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000003 [ 178.408158][ T8671] RBP: 00007fbb20882090 R08: 0000000000000000 R09: fffffffffffffdfd [ 178.408172][ T8671] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 178.408184][ T8671] R13: 00007fbb1fbb6038 R14: 00007fbb1fbb5fa0 R15: 00007ffe310a43e8 [ 178.408219][ T8671] [ 178.819692][ T8693] netlink: 'syz.0.733': attribute type 1 has an invalid length. [ 178.830506][ T8693] netlink: 'syz.0.733': attribute type 1 has an invalid length. [ 179.120550][ T8702] IPv6: sit2: Disabled Multicast RS [ 179.138079][ T8702] sit2: entered allmulticast mode [ 179.219526][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.737'. [ 179.442207][ T8735] 8021q: VLANs not supported on bond0 [ 179.802058][ T8751] tipc: Enabled bearer , priority 0 [ 179.818112][ T8751] syzkaller0: entered promiscuous mode [ 179.842763][ T8751] syzkaller0: entered allmulticast mode [ 179.876136][ T8751] tipc: Resetting bearer [ 179.890675][ T8749] tipc: Resetting bearer [ 179.906203][ T8749] tipc: Disabling bearer [ 180.326201][ T8773] IPv6: sit1: Disabled Multicast RS [ 180.352036][ T8773] sit1: entered allmulticast mode [ 180.687059][ T8785] nbd: nbd1 already in use [ 180.724048][ T8787] nbd: nbd1 already in use [ 180.779694][ T8790] __nla_validate_parse: 4 callbacks suppressed [ 180.779716][ T8790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.760'. [ 181.200741][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 181.702270][ T8831] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 181.787080][ T8824] IPv6: sit1: Disabled Multicast RS [ 181.808400][ T8824] sit1: entered allmulticast mode [ 181.849230][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 181.869438][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'. [ 182.080190][ T8848] netlink: 'syz.2.778': attribute type 32 has an invalid length. [ 182.294004][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 182.415105][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 182.440465][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 182.576940][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 182.756500][ T8872] netlink: 204 bytes leftover after parsing attributes in process `syz.3.785'. [ 182.789712][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 182.822502][ T8880] FAULT_INJECTION: forcing a failure. [ 182.822502][ T8880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.877890][ T8880] CPU: 1 UID: 0 PID: 8880 Comm: syz.0.788 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 182.877920][ T8880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.877932][ T8880] Call Trace: [ 182.877939][ T8880] [ 182.877948][ T8880] dump_stack_lvl+0x189/0x250 [ 182.877987][ T8880] ? __pfx____ratelimit+0x10/0x10 [ 182.878011][ T8880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.878035][ T8880] ? __pfx__printk+0x10/0x10 [ 182.878063][ T8880] ? __might_fault+0xb0/0x130 [ 182.878103][ T8880] should_fail_ex+0x414/0x560 [ 182.878131][ T8880] _copy_from_iter+0x1db/0x16f0 [ 182.878163][ T8880] ? rcu_is_watching+0x15/0xb0 [ 182.878184][ T8880] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 182.878211][ T8880] ? __pfx__copy_from_iter+0x10/0x10 [ 182.878239][ T8880] ? __build_skb_around+0x257/0x3e0 [ 182.878269][ T8880] ? netlink_sendmsg+0x642/0xb30 [ 182.878292][ T8880] ? skb_put+0x11b/0x210 [ 182.878322][ T8880] netlink_sendmsg+0x6b2/0xb30 [ 182.878358][ T8880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.878386][ T8880] ? aa_sock_msg_perm+0xf1/0x1d0 [ 182.878415][ T8880] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.878436][ T8880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.878462][ T8880] __sock_sendmsg+0x219/0x270 [ 182.878489][ T8880] ____sys_sendmsg+0x505/0x830 [ 182.878524][ T8880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.878563][ T8880] ? import_iovec+0x74/0xa0 [ 182.878585][ T8880] ___sys_sendmsg+0x21f/0x2a0 [ 182.878616][ T8880] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.878687][ T8880] ? __fget_files+0x2a/0x420 [ 182.878714][ T8880] ? __fget_files+0x3a0/0x420 [ 182.878754][ T8880] __x64_sys_sendmsg+0x19b/0x260 [ 182.878786][ T8880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.878826][ T8880] ? __pfx_ksys_write+0x10/0x10 [ 182.878848][ T8880] ? rcu_is_watching+0x15/0xb0 [ 182.878874][ T8880] ? do_syscall_64+0xbe/0x3b0 [ 182.878904][ T8880] do_syscall_64+0xfa/0x3b0 [ 182.878932][ T8880] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.878963][ T8880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.878982][ T8880] ? clear_bhb_loop+0x60/0xb0 [ 182.879006][ T8880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.879024][ T8880] RIP: 0033:0x7fbb1f98ebe9 [ 182.879042][ T8880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.879057][ T8880] RSP: 002b:00007fbb20882038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.879078][ T8880] RAX: ffffffffffffffda RBX: 00007fbb1fbb5fa0 RCX: 00007fbb1f98ebe9 [ 182.879092][ T8880] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 182.879103][ T8880] RBP: 00007fbb20882090 R08: 0000000000000000 R09: 0000000000000000 [ 182.879114][ T8880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.879125][ T8880] R13: 00007fbb1fbb6038 R14: 00007fbb1fbb5fa0 R15: 00007ffe310a43e8 [ 182.879159][ T8880] [ 183.371517][ T8882] IPv6: sit1: Disabled Multicast RS [ 183.432468][ T8882] sit1: entered allmulticast mode [ 183.546859][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.563438][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.594110][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.606266][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.126781][ T8914] tipc: Enabled bearer , priority 0 [ 184.151552][ T8914] veth1_to_hsr: entered promiscuous mode [ 184.172894][ T8914] veth1_to_hsr: entered allmulticast mode [ 184.200181][ T8912] veth0_to_batadv: mtu greater than device maximum [ 184.216842][ T8908] tipc: Disabling bearer [ 184.562881][ T8927] IPv6: sit1: Disabled Multicast RS [ 184.569418][ T8927] sit1: entered allmulticast mode [ 184.814939][ T8950] tipc: Enabled bearer , priority 0 [ 184.847674][ T8950] syzkaller0: entered promiscuous mode [ 184.871646][ T8950] syzkaller0: entered allmulticast mode [ 185.073344][ T8961] syzkaller0: entered promiscuous mode [ 185.112714][ T30] audit: type=1800 audit(1755200051.268:4): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.811" name="memory.events" dev="tmpfs" ino=872 res=0 errno=0 [ 185.134542][ T8961] syzkaller0: entered allmulticast mode [ 185.698716][ T8948] tipc: Resetting bearer [ 185.767885][ T8968] netlink: 'syz.4.819': attribute type 13 has an invalid length. [ 185.877820][ T8968] netlink: 'syz.4.819': attribute type 17 has an invalid length. [ 186.051058][ T8948] tipc: Disabling bearer [ 186.078352][ T8968] netlink: 'syz.4.819': attribute type 5 has an invalid length. [ 186.778950][ T8972] __nla_validate_parse: 6 callbacks suppressed [ 186.778970][ T8972] netlink: 44 bytes leftover after parsing attributes in process `syz.4.819'. [ 186.926325][ T8972] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 187.937791][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 187.971019][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 189.707563][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 189.748912][ T8993] syzkaller1: entered promiscuous mode [ 189.843993][ T8993] syzkaller1: entered allmulticast mode [ 192.186822][ T8521] IPVS: starting estimator thread 0... [ 192.391908][ T9032] IPVS: using max 25 ests per chain, 60000 per kthread [ 193.338229][ T9018] netlink: 60 bytes leftover after parsing attributes in process `syz.3.832'. [ 194.170923][ T9039] netlink: 'syz.1.835': attribute type 83 has an invalid length. [ 194.359639][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.381259][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.546793][ T9040] netlink: 'syz.2.834': attribute type 7 has an invalid length. [ 194.598134][ T9040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.834'. [ 195.561730][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 195.608184][ T9048] FAULT_INJECTION: forcing a failure. [ 195.608184][ T9048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.654559][ T9048] CPU: 1 UID: 0 PID: 9048 Comm: syz.2.838 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 195.654590][ T9048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.654602][ T9048] Call Trace: [ 195.654610][ T9048] [ 195.654619][ T9048] dump_stack_lvl+0x189/0x250 [ 195.654648][ T9048] ? __pfx____ratelimit+0x10/0x10 [ 195.654674][ T9048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.654698][ T9048] ? __pfx__printk+0x10/0x10 [ 195.654743][ T9048] should_fail_ex+0x414/0x560 [ 195.654773][ T9048] _copy_to_user+0x31/0xb0 [ 195.654796][ T9048] simple_read_from_buffer+0xe1/0x170 [ 195.654831][ T9048] proc_fail_nth_read+0x1b3/0x220 [ 195.654858][ T9048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.654884][ T9048] ? rw_verify_area+0x2a6/0x4d0 [ 195.654908][ T9048] ? __lock_acquire+0xab9/0xd20 [ 195.654933][ T9048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.654957][ T9048] vfs_read+0x200/0x980 [ 195.654982][ T9048] ? fdget_pos+0x247/0x320 [ 195.655006][ T9048] ? __pfx___mutex_lock+0x10/0x10 [ 195.655034][ T9048] ? __pfx_vfs_read+0x10/0x10 [ 195.655061][ T9048] ? __fget_files+0x2a/0x420 [ 195.655095][ T9048] ? __fget_files+0x3a0/0x420 [ 195.655132][ T9048] ? __fget_files+0x2a/0x420 [ 195.655172][ T9048] ksys_read+0x145/0x250 [ 195.655201][ T9048] ? __pfx_ksys_read+0x10/0x10 [ 195.655224][ T9048] ? rcu_is_watching+0x15/0xb0 [ 195.655250][ T9048] ? do_syscall_64+0xbe/0x3b0 [ 195.655280][ T9048] do_syscall_64+0xfa/0x3b0 [ 195.655304][ T9048] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.655327][ T9048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.655347][ T9048] ? clear_bhb_loop+0x60/0xb0 [ 195.655372][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.655392][ T9048] RIP: 0033:0x7f6e1c38d5fc [ 195.655411][ T9048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 195.655428][ T9048] RSP: 002b:00007f6e1d209030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.655450][ T9048] RAX: ffffffffffffffda RBX: 00007f6e1c5b5fa0 RCX: 00007f6e1c38d5fc [ 195.655465][ T9048] RDX: 000000000000000f RSI: 00007f6e1d2090a0 RDI: 0000000000000004 [ 195.655477][ T9048] RBP: 00007f6e1d209090 R08: 0000000000000000 R09: 0000000000000000 [ 195.655489][ T9048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.655501][ T9048] R13: 00007f6e1c5b6038 R14: 00007f6e1c5b5fa0 R15: 00007fff9f05f558 [ 195.655536][ T9048] [ 195.961313][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 196.114889][ T9059] @ÿþ€: renamed from veth0_vlan [ 196.265419][ T9068] batman_adv: batadv0: Adding interface: gretap1 [ 196.271883][ T55] block nbd1: Possible stuck request ffff88802501e000: control (read@0,4096B). Runtime 60 seconds [ 196.293667][ T9068] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.342921][ T9068] batman_adv: batadv0: Interface activated: gretap1 [ 196.477121][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'. [ 196.777411][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 196.846537][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 196.953040][ T9105] netlink: 'syz.4.860': attribute type 3 has an invalid length. [ 196.983663][ T9105] syz_tun: entered allmulticast mode [ 197.068616][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.070310][ T9113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.864'. [ 197.078859][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.109231][ T9105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.135950][ T9116] tipc: Enabled bearer , priority 0 [ 197.172990][ T9111] syzkaller0: entered promiscuous mode [ 197.178712][ T9111] syzkaller0: entered allmulticast mode [ 197.189877][ T9102] syz_tun: left allmulticast mode [ 197.232285][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 197.268597][ T9111] tipc: Resetting bearer [ 197.306876][ T9111] tipc: Disabling bearer [ 197.568090][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 197.811615][ T9149] IPv6: NLM_F_REPLACE set, but no existing node found! [ 197.962867][ T9156] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 198.349256][ T9180] __nla_validate_parse: 2 callbacks suppressed [ 198.349283][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 198.396359][ T9183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.884'. [ 198.466410][ T9184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.884'. [ 198.531296][ T9178] IPVS: set_ctl: invalid protocol: 0 172.20.20.56:20001 [ 198.569737][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.883'. [ 198.579125][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.883'. [ 198.847516][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 198.863560][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 199.039571][ T9200] netlink: 104 bytes leftover after parsing attributes in process `syz.4.893'. [ 199.094685][ T9200] netlink: 104 bytes leftover after parsing attributes in process `syz.4.893'. [ 199.504708][ T9230] netlink: 'syz.1.900': attribute type 2 has an invalid length. [ 199.533618][ T9230] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 199.648462][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 200.569872][ T9264] syzkaller0: entered promiscuous mode [ 200.575674][ T9264] syzkaller0: entered allmulticast mode [ 203.535329][ T9284] geneve2: entered promiscuous mode [ 203.540591][ T9284] geneve2: entered allmulticast mode [ 203.550774][ T9295] tipc: Enabled bearer , priority 0 [ 203.587973][ T9296] syzkaller0: entered promiscuous mode [ 203.593850][ T9296] syzkaller0: entered allmulticast mode [ 203.612433][ T9300] tipc: Resetting bearer [ 203.670090][ T9286] tipc: Resetting bearer [ 203.674305][ T9320] __nla_validate_parse: 6 callbacks suppressed [ 203.674324][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'. [ 203.732995][ T9286] tipc: Disabling bearer [ 203.751536][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 203.791178][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.823229][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.928'. [ 203.847274][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.936622][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.987905][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.866782][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 204.897720][ T9350] bridge_slave_1: left allmulticast mode [ 204.903773][ T9350] bridge_slave_1: left promiscuous mode [ 204.909708][ T9350] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.924570][ T9350] bridge_slave_0: left allmulticast mode [ 204.940522][ T9350] bridge_slave_0: left promiscuous mode [ 204.950766][ T9350] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.201009][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 205.367725][ T9376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.943'. [ 205.567129][ T9385] pimreg: entered allmulticast mode [ 205.862729][ T5871] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 206.054513][ T9397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.389219][ T9410] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.953'. [ 206.920902][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 207.029811][ T9442] netlink: 84 bytes leftover after parsing attributes in process `syz.0.964'. [ 207.140038][ T9444] netlink: 844 bytes leftover after parsing attributes in process `syz.0.965'. [ 207.917799][ T9478] netlink: 'syz.0.977': attribute type 3 has an invalid length. [ 207.950663][ T9478] openvswitch: netlink: Message has 4 unknown bytes. [ 207.984415][ T9478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.783919][ T9528] __nla_validate_parse: 6 callbacks suppressed [ 208.783939][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 208.815215][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'. [ 208.902481][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 209.176187][ T9524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.830151][ T9524] batman_adv: batadv0: Interface deactivated: gretap1 [ 209.873945][ T9546] tipc: Started in network mode [ 209.882635][ T9546] tipc: Node identity b2265491803e, cluster identity 4711 [ 209.893210][ T9546] tipc: Enabled bearer , priority 0 [ 209.927590][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.939175][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 209.958137][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.972018][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 209.996972][ T9550] syzkaller0: entered promiscuous mode [ 210.004976][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1002'. [ 210.012610][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1002'. [ 210.030770][ T9550] syzkaller0: entered allmulticast mode [ 210.056373][ T9568] tipc: Resetting bearer [ 210.155716][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.180852][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 210.287214][ T9568] tipc: Resetting bearer [ 210.363600][ T9568] tipc: Disabling bearer [ 210.415456][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.464135][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 210.589341][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 211.262462][ T9623] tap0: tun_chr_ioctl cmd 1074025680 [ 211.273795][ T9623] tipc: Enabled bearer , priority 0 [ 211.287927][ T9623] D: renamed from syzkaller0 [ 211.297943][ T9623] tipc: Disabling bearer [ 211.784741][ T5878] Bluetooth: hci3: command 0x0406 tx timeout [ 211.790836][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 211.796922][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 211.845085][ T9629] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1018'. [ 212.213685][ T9649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.308089][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 212.349506][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 212.358405][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 212.507987][ T9666] netlink: 'syz.0.1031': attribute type 1 has an invalid length. [ 212.627564][ T9666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.310047][ T9698] netlink: 'syz.2.1042': attribute type 2 has an invalid length. [ 213.405970][ T9698] þ`Ì: entered promiscuous mode [ 213.993041][ T9730] __nla_validate_parse: 5 callbacks suppressed [ 213.993065][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 214.850150][ T9747] netlink: 'syz.4.1057': attribute type 7 has an invalid length. [ 214.878556][ T9747] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1057'. [ 215.146516][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 215.177832][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 215.277970][ T9764] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1065'. [ 215.338133][ T9775] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1068'. [ 215.590702][ T9775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.603660][ T9775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.615665][ T9775] bond0 (unregistering): Released all slaves [ 216.059318][ T9797] netlink: 'syz.4.1073': attribute type 7 has an invalid length. [ 216.072789][ T9797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1073'. [ 216.909723][ T9833] pim6reg: entered allmulticast mode [ 216.945217][ T9837] pim6reg: left allmulticast mode [ 216.974925][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 217.105867][ T9846] tipc: Enabled bearer , priority 0 [ 217.169759][ T9833] tipc: Resetting bearer [ 217.312861][ T9866] netlink: 'syz.2.1090': attribute type 1 has an invalid length. [ 217.360874][ T9825] tipc: Disabling bearer [ 217.470724][ T9871] netlink: 'syz.1.1093': attribute type 12 has an invalid length. [ 217.487236][ T9871] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1093'. [ 217.624686][ T9885] FAULT_INJECTION: forcing a failure. [ 217.624686][ T9885] name failslab, interval 1, probability 0, space 0, times 0 [ 217.645298][ T9885] CPU: 1 UID: 0 PID: 9885 Comm: syz.4.1097 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 217.645331][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.645344][ T9885] Call Trace: [ 217.645352][ T9885] [ 217.645361][ T9885] dump_stack_lvl+0x189/0x250 [ 217.645392][ T9885] ? __pfx____ratelimit+0x10/0x10 [ 217.645417][ T9885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.645441][ T9885] ? __pfx__printk+0x10/0x10 [ 217.645472][ T9885] ? __lock_acquire+0xab9/0xd20 [ 217.645513][ T9885] should_fail_ex+0x414/0x560 [ 217.645541][ T9885] should_failslab+0xa8/0x100 [ 217.645572][ T9885] kmem_cache_alloc_noprof+0x73/0x3c0 [ 217.645598][ T9885] ? skb_clone+0x212/0x3a0 [ 217.645623][ T9885] skb_clone+0x212/0x3a0 [ 217.645646][ T9885] __netlink_deliver_tap+0x404/0x850 [ 217.645688][ T9885] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.645715][ T9885] netlink_deliver_tap+0x19c/0x1b0 [ 217.645741][ T9885] netlink_unicast+0x7fa/0x9e0 [ 217.645774][ T9885] ? __pfx_netlink_unicast+0x10/0x10 [ 217.645799][ T9885] ? netlink_sendmsg+0x642/0xb30 [ 217.645822][ T9885] ? skb_put+0x11b/0x210 [ 217.645852][ T9885] netlink_sendmsg+0x805/0xb30 [ 217.645890][ T9885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.645919][ T9885] ? aa_sock_msg_perm+0xf1/0x1d0 [ 217.645948][ T9885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.645969][ T9885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.645996][ T9885] __sock_sendmsg+0x219/0x270 [ 217.646032][ T9885] ____sys_sendmsg+0x505/0x830 [ 217.646068][ T9885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.646106][ T9885] ? import_iovec+0x74/0xa0 [ 217.646129][ T9885] ___sys_sendmsg+0x21f/0x2a0 [ 217.646160][ T9885] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.646230][ T9885] ? __fget_files+0x2a/0x420 [ 217.646259][ T9885] ? __fget_files+0x3a0/0x420 [ 217.646301][ T9885] __x64_sys_sendmsg+0x19b/0x260 [ 217.646334][ T9885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.646373][ T9885] ? __pfx_ksys_write+0x10/0x10 [ 217.646396][ T9885] ? rcu_is_watching+0x15/0xb0 [ 217.646423][ T9885] ? do_syscall_64+0xbe/0x3b0 [ 217.646453][ T9885] do_syscall_64+0xfa/0x3b0 [ 217.646477][ T9885] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.646500][ T9885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.646520][ T9885] ? clear_bhb_loop+0x60/0xb0 [ 217.646546][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.646565][ T9885] RIP: 0033:0x7eff8958ebe9 [ 217.646583][ T9885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.646601][ T9885] RSP: 002b:00007eff8a4c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.646624][ T9885] RAX: ffffffffffffffda RBX: 00007eff897b5fa0 RCX: 00007eff8958ebe9 [ 217.646638][ T9885] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000008 [ 217.646650][ T9885] RBP: 00007eff8a4c4090 R08: 0000000000000000 R09: 0000000000000000 [ 217.646662][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.646674][ T9885] R13: 00007eff897b6038 R14: 00007eff897b5fa0 R15: 00007ffcbc5e87c8 [ 217.646709][ T9885] [ 218.001416][ T9885] netlink: 'syz.4.1097': attribute type 6 has an invalid length. [ 218.009425][ T9885] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1097'. [ 218.586606][ T9912] netlink: 'syz.4.1106': attribute type 30 has an invalid length. [ 219.049937][ T9919] netlink: 'syz.3.1109': attribute type 12 has an invalid length. [ 219.058238][ T9919] __nla_validate_parse: 2 callbacks suppressed [ 219.058257][ T9919] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1109'. [ 222.019035][ T9958] netlink: 'syz.1.1123': attribute type 21 has an invalid length. [ 222.087818][ T9958] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 222.155190][ T9961] netlink: 'syz.1.1123': attribute type 30 has an invalid length. [ 222.183851][ T9962] FAULT_INJECTION: forcing a failure. [ 222.183851][ T9962] name failslab, interval 1, probability 0, space 0, times 0 [ 222.243864][ T9962] CPU: 1 UID: 0 PID: 9962 Comm: syz.4.1124 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 222.243896][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.243909][ T9962] Call Trace: [ 222.243918][ T9962] [ 222.243928][ T9962] dump_stack_lvl+0x189/0x250 [ 222.243968][ T9962] ? __pfx____ratelimit+0x10/0x10 [ 222.243993][ T9962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.244018][ T9962] ? __pfx__printk+0x10/0x10 [ 222.244049][ T9962] ? __pfx___might_resched+0x10/0x10 [ 222.244068][ T9962] ? fs_reclaim_acquire+0x7d/0x100 [ 222.244104][ T9962] should_fail_ex+0x414/0x560 [ 222.244134][ T9962] should_failslab+0xa8/0x100 [ 222.244164][ T9962] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 222.244192][ T9962] ? __request_module+0x2d1/0x5e0 [ 222.244228][ T9962] kstrdup+0x42/0x100 [ 222.244252][ T9962] __request_module+0x2d1/0x5e0 [ 222.244285][ T9962] ? rtnl_link_ops_get+0x23/0x250 [ 222.244313][ T9962] ? __pfx___request_module+0x10/0x10 [ 222.244357][ T9962] ? rtnl_link_ops_get+0x23/0x250 [ 222.244382][ T9962] ? rtnl_link_ops_get+0x23/0x250 [ 222.244409][ T9962] ? rtnl_link_ops_get+0x215/0x250 [ 222.244440][ T9962] rtnl_newlink+0x64f/0x1c70 [ 222.244462][ T9962] ? netlink_sendmsg+0x805/0xb30 [ 222.244489][ T9962] ? __x64_sys_sendmsg+0x19b/0x260 [ 222.244516][ T9962] ? do_syscall_64+0xfa/0x3b0 [ 222.244540][ T9962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.244570][ T9962] ? __pfx_rtnl_newlink+0x10/0x10 [ 222.244624][ T9962] ? kasan_quarantine_put+0xdd/0x220 [ 222.244648][ T9962] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.244679][ T9962] ? nlmon_xmit+0xb0/0x100 [ 222.244701][ T9962] ? kmem_cache_free+0x18f/0x400 [ 222.244732][ T9962] ? __local_bh_enable_ip+0x12d/0x1c0 [ 222.244753][ T9962] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.244777][ T9962] ? __local_bh_enable_ip+0x12d/0x1c0 [ 222.244797][ T9962] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 222.244822][ T9962] ? __dev_queue_xmit+0x27b/0x3b50 [ 222.244841][ T9962] ? __dev_queue_xmit+0x27b/0x3b50 [ 222.244858][ T9962] ? __dev_queue_xmit+0x27b/0x3b50 [ 222.244879][ T9962] ? __dev_queue_xmit+0x1d79/0x3b50 [ 222.244906][ T9962] ? __lock_acquire+0xab9/0xd20 [ 222.244972][ T9962] ? __pfx_rtnl_newlink+0x10/0x10 [ 222.244997][ T9962] rtnetlink_rcv_msg+0x7cf/0xb70 [ 222.245026][ T9962] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 222.245050][ T9962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.245073][ T9962] ? ref_tracker_free+0x63a/0x7d0 [ 222.245098][ T9962] ? __asan_memcpy+0x40/0x70 [ 222.245119][ T9962] ? __pfx_ref_tracker_free+0x10/0x10 [ 222.245156][ T9962] netlink_rcv_skb+0x208/0x470 [ 222.245183][ T9962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.245211][ T9962] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.245250][ T9962] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.245285][ T9962] netlink_unicast+0x82f/0x9e0 [ 222.245319][ T9962] ? __pfx_netlink_unicast+0x10/0x10 [ 222.245344][ T9962] ? netlink_sendmsg+0x642/0xb30 [ 222.245367][ T9962] ? skb_put+0x11b/0x210 [ 222.245399][ T9962] netlink_sendmsg+0x805/0xb30 [ 222.245436][ T9962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.245466][ T9962] ? aa_sock_msg_perm+0xf1/0x1d0 [ 222.245496][ T9962] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.245518][ T9962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.245544][ T9962] __sock_sendmsg+0x219/0x270 [ 222.245569][ T9962] ____sys_sendmsg+0x505/0x830 [ 222.245605][ T9962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.245646][ T9962] ? import_iovec+0x74/0xa0 [ 222.245671][ T9962] ___sys_sendmsg+0x21f/0x2a0 [ 222.245702][ T9962] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.245793][ T9962] ? __fget_files+0x2a/0x420 [ 222.245821][ T9962] ? __fget_files+0x3a0/0x420 [ 222.245863][ T9962] __x64_sys_sendmsg+0x19b/0x260 [ 222.245896][ T9962] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.245944][ T9962] ? __pfx_ksys_write+0x10/0x10 [ 222.245967][ T9962] ? rcu_is_watching+0x15/0xb0 [ 222.245994][ T9962] ? do_syscall_64+0xbe/0x3b0 [ 222.246024][ T9962] do_syscall_64+0xfa/0x3b0 [ 222.246047][ T9962] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.246071][ T9962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.246090][ T9962] ? clear_bhb_loop+0x60/0xb0 [ 222.246116][ T9962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.246136][ T9962] RIP: 0033:0x7eff8958ebe9 [ 222.246154][ T9962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.246172][ T9962] RSP: 002b:00007eff8a4a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.246194][ T9962] RAX: ffffffffffffffda RBX: 00007eff897b6090 RCX: 00007eff8958ebe9 [ 222.246209][ T9962] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000006 [ 222.246222][ T9962] RBP: 00007eff8a4a3090 R08: 0000000000000000 R09: 0000000000000000 [ 222.246234][ T9962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.246246][ T9962] R13: 00007eff897b6128 R14: 00007eff897b6090 R15: 00007ffcbc5e87c8 [ 222.246282][ T9962] [ 222.847783][ T9962] netlink: 'syz.4.1124': attribute type 4 has an invalid length. [ 222.858200][ T9962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1124'. [ 222.923641][ T9969] sctp: [Deprecated]: syz.0.1127 (pid 9969) Use of int in max_burst socket option. [ 222.923641][ T9969] Use struct sctp_assoc_value instead [ 222.994506][ T9970] sctp: [Deprecated]: syz.0.1127 (pid 9970) Use of int in max_burst socket option. [ 222.994506][ T9970] Use struct sctp_assoc_value instead [ 223.344800][ T9986] openvswitch: netlink: IPv6 tunnel dst address is zero [ 223.707258][ T9999] hsr0: entered promiscuous mode [ 223.875635][T10006] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1137'. [ 223.920901][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1137'. [ 224.039751][T10011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.047100][T10011] IPv6: NLM_F_CREATE should be set when creating new route [ 224.054499][T10011] IPv6: NLM_F_CREATE should be set when creating new route [ 224.065319][T10004] netlink: 'syz.4.1135': attribute type 4 has an invalid length. [ 224.083010][T10004] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1135'. [ 224.143861][T10011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1139'. [ 224.219349][ T9995] hsr0: left promiscuous mode [ 224.244610][T10015] FAULT_INJECTION: forcing a failure. [ 224.244610][T10015] name failslab, interval 1, probability 0, space 0, times 0 [ 224.265967][T10015] CPU: 1 UID: 0 PID: 10015 Comm: syz.3.1140 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 224.266000][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.266012][T10015] Call Trace: [ 224.266020][T10015] [ 224.266029][T10015] dump_stack_lvl+0x189/0x250 [ 224.266058][T10015] ? __pfx____ratelimit+0x10/0x10 [ 224.266082][T10015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.266104][T10015] ? __pfx__printk+0x10/0x10 [ 224.266138][T10015] ? __pfx___might_resched+0x10/0x10 [ 224.266155][T10015] ? fs_reclaim_acquire+0x7d/0x100 [ 224.266190][T10015] should_fail_ex+0x414/0x560 [ 224.266216][T10015] should_failslab+0xa8/0x100 [ 224.266246][T10015] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 224.266273][T10015] ? __alloc_skb+0x112/0x2d0 [ 224.266302][T10015] __alloc_skb+0x112/0x2d0 [ 224.266332][T10015] netlink_ack+0x146/0xa50 [ 224.266352][T10015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 224.266396][T10015] netlink_rcv_skb+0x28c/0x470 [ 224.266417][T10015] ? __lock_acquire+0xab9/0xd20 [ 224.266446][T10015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 224.266472][T10015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.266512][T10015] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.266547][T10015] netlink_unicast+0x82f/0x9e0 [ 224.266581][T10015] ? __pfx_netlink_unicast+0x10/0x10 [ 224.266607][T10015] ? netlink_sendmsg+0x642/0xb30 [ 224.266629][T10015] ? skb_put+0x11b/0x210 [ 224.266659][T10015] netlink_sendmsg+0x805/0xb30 [ 224.266697][T10015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.266727][T10015] ? aa_sock_msg_perm+0xf1/0x1d0 [ 224.266757][T10015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.266777][T10015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.266802][T10015] __sock_sendmsg+0x219/0x270 [ 224.266828][T10015] ____sys_sendmsg+0x505/0x830 [ 224.266861][T10015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.266914][T10015] ? import_iovec+0x74/0xa0 [ 224.266937][T10015] ___sys_sendmsg+0x21f/0x2a0 [ 224.266967][T10015] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.267037][T10015] ? __fget_files+0x2a/0x420 [ 224.267065][T10015] ? __fget_files+0x3a0/0x420 [ 224.267105][T10015] __x64_sys_sendmsg+0x19b/0x260 [ 224.267137][T10015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.267177][T10015] ? __pfx_ksys_write+0x10/0x10 [ 224.267200][T10015] ? rcu_is_watching+0x15/0xb0 [ 224.267226][T10015] ? do_syscall_64+0xbe/0x3b0 [ 224.267256][T10015] do_syscall_64+0xfa/0x3b0 [ 224.267279][T10015] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.267301][T10015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.267321][T10015] ? clear_bhb_loop+0x60/0xb0 [ 224.267345][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.267362][T10015] RIP: 0033:0x7f4e35b8ebe9 [ 224.267382][T10015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.267396][T10015] RSP: 002b:00007f4e36949038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.267417][T10015] RAX: ffffffffffffffda RBX: 00007f4e35db5fa0 RCX: 00007f4e35b8ebe9 [ 224.267431][T10015] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000008 [ 224.267443][T10015] RBP: 00007f4e36949090 R08: 0000000000000000 R09: 0000000000000000 [ 224.267455][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.267465][T10015] R13: 00007f4e35db6038 R14: 00007f4e35db5fa0 R15: 00007ffeb25759e8 [ 224.267499][T10015] [ 224.874465][T10024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1143'. [ 224.908637][T10024] IPv6: sit2: Disabled Multicast RS [ 224.942452][T10024] sit2: entered allmulticast mode [ 225.195075][T10047] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1150'. [ 225.382091][T10059] netlink: 'syz.4.1153': attribute type 13 has an invalid length. [ 225.390423][T10059] netlink: 'syz.4.1153': attribute type 17 has an invalid length. [ 225.398691][T10059] netlink: 'syz.4.1153': attribute type 27 has an invalid length. [ 225.987744][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1158'. [ 226.022912][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1158'. [ 226.043803][T10075] netlink: 'syz.2.1158': attribute type 3 has an invalid length. [ 226.177479][T10087] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1160'. [ 226.356977][ T55] block nbd1: Possible stuck request ffff88802501e000: control (read@0,4096B). Runtime 90 seconds [ 226.573621][T10108] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 226.627176][T10108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.922421][T10123] syzkaller1: entered promiscuous mode [ 226.970182][T10123] syzkaller1: entered allmulticast mode [ 227.013032][T10125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1168'. [ 227.120045][T10129] netlink: 'syz.2.1171': attribute type 2 has an invalid length. [ 227.179831][T10130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.262016][T10129] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 227.371216][T10129] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1171'. [ 227.462475][T10135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1172'. [ 228.345762][T10171] syzkaller0: entered promiscuous mode [ 228.351290][T10171] syzkaller0: entered allmulticast mode [ 228.640268][T10187] netlink: 'syz.4.1185': attribute type 21 has an invalid length. [ 228.826258][T10193] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 228.833833][T10193] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 228.901993][T10193] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 229.146136][T10208] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 229.155035][T10208] __nla_validate_parse: 7 callbacks suppressed [ 229.155055][T10208] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1190'. [ 229.177158][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 229.391352][T10225] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 229.414175][T10225] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 229.879689][ T51] Bluetooth: hci4: link tx timeout [ 229.884943][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 229.895399][ T5871] Bluetooth: hci4: link tx timeout [ 229.900568][ T5871] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 229.929607][ T5871] Bluetooth: hci4: link tx timeout [ 229.934901][ T5871] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 229.996884][ T5871] Bluetooth: hci4: link tx timeout [ 230.002107][ T5871] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 230.010054][ T5871] Bluetooth: hci4: link tx timeout [ 230.016515][ T5871] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 230.221390][T10269] tipc: Enabling of bearer rejected, failed to enable media [ 230.435358][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1212'. [ 231.076158][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 231.401761][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'. [ 231.736622][T10349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1233'. [ 231.737578][T10350] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1233'. [ 231.947916][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 231.952955][T10362] tipc: Cannot configure node identity twice [ 232.263760][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1240'. [ 232.457461][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1245'. [ 232.901804][T10390] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 232.945563][T10390] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 233.062135][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 233.083831][T10398] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 233.991624][T10432] tun0: tun_chr_ioctl cmd 2147767520 [ 234.509575][T10454] __nla_validate_parse: 1 callbacks suppressed [ 234.509596][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1264'. [ 234.699808][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 234.867144][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 234.898040][T10478] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.1272'. [ 234.944677][T10476] veth1_to_hsr: left promiscuous mode [ 234.957867][T10476] veth1_to_hsr: left allmulticast mode [ 235.094328][T10484] netlink: 'syz.4.1273': attribute type 10 has an invalid length. [ 235.117807][T10484] team0: Port device dummy0 added [ 235.150993][T10484] netlink: 'syz.4.1273': attribute type 10 has an invalid length. [ 235.167100][T10486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1275'. [ 235.195351][T10484] team0: Port device dummy0 removed [ 235.220358][T10484] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 235.923177][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 235.926114][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'. [ 235.974686][T10512] netlink: 'syz.4.1282': attribute type 1 has an invalid length. [ 236.075272][T10513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1282'. [ 236.108828][T10513] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 236.344681][T10522] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 236.352465][T10522] netlink: 'syz.0.1283': attribute type 2 has an invalid length. [ 236.442164][T10523] tipc: Enabling of bearer rejected, already enabled [ 236.503791][T10523] syzkaller1: entered promiscuous mode [ 236.510242][T10523] syzkaller1: entered allmulticast mode [ 236.909548][T10540] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1288'. [ 236.941500][T10539] syz.2.1289: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 237.030053][T10539] CPU: 0 UID: 0 PID: 10539 Comm: syz.2.1289 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 237.030084][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.030097][T10539] Call Trace: [ 237.030105][T10539] [ 237.030114][T10539] dump_stack_lvl+0x189/0x250 [ 237.030149][T10539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.030173][T10539] ? __pfx__printk+0x10/0x10 [ 237.030201][T10539] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 237.030224][T10539] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 237.030249][T10539] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 237.030274][T10539] warn_alloc+0x214/0x310 [ 237.030305][T10539] ? stack_depot_save_flags+0x40/0x860 [ 237.030330][T10539] ? __pfx_warn_alloc+0x10/0x10 [ 237.030360][T10539] ? kasan_save_track+0x4f/0x80 [ 237.030383][T10539] ? xskq_create+0x56/0x170 [ 237.030402][T10539] ? xsk_init_queue+0xb0/0x110 [ 237.030420][T10539] ? xsk_setsockopt+0x4dc/0x8d0 [ 237.030438][T10539] ? do_sock_setsockopt+0x17c/0x1b0 [ 237.030463][T10539] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 237.030488][T10539] ? do_syscall_64+0xfa/0x3b0 [ 237.030510][T10539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.030535][T10539] __vmalloc_node_range_noprof+0x125/0x12f0 [ 237.030608][T10539] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.030643][T10539] ? __kasan_kmalloc+0x93/0xb0 [ 237.030671][T10539] vmalloc_user_noprof+0xad/0xf0 [ 237.030697][T10539] ? xskq_create+0xbf/0x170 [ 237.030721][T10539] xskq_create+0xbf/0x170 [ 237.030746][T10539] xsk_init_queue+0xb0/0x110 [ 237.030769][T10539] xsk_setsockopt+0x4dc/0x8d0 [ 237.030793][T10539] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.030813][T10539] ? __pfx_aa_sk_perm+0x10/0x10 [ 237.030843][T10539] ? aa_sock_opt_perm+0xff/0x1b0 [ 237.030874][T10539] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 237.030895][T10539] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.030918][T10539] do_sock_setsockopt+0x17c/0x1b0 [ 237.030952][T10539] __x64_sys_setsockopt+0x13f/0x1b0 [ 237.030987][T10539] do_syscall_64+0xfa/0x3b0 [ 237.031010][T10539] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.031033][T10539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.031052][T10539] ? clear_bhb_loop+0x60/0xb0 [ 237.031077][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.031095][T10539] RIP: 0033:0x7f6e1c38ebe9 [ 237.031113][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.031131][T10539] RSP: 002b:00007f6e1d1e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.031154][T10539] RAX: ffffffffffffffda RBX: 00007f6e1c5b6090 RCX: 00007f6e1c38ebe9 [ 237.031168][T10539] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 237.031180][T10539] RBP: 00007f6e1c411e19 R08: 0000000000000004 R09: 0000000000000000 [ 237.031192][T10539] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.031204][T10539] R13: 00007f6e1c5b6128 R14: 00007f6e1c5b6090 R15: 00007fff9f05f558 [ 237.031237][T10539] [ 237.031246][T10539] Mem-Info: [ 237.329614][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 237.486357][T10539] active_anon:4447 inactive_anon:0 isolated_anon:0 [ 237.486357][T10539] active_file:1491 inactive_file:39894 isolated_file:0 [ 237.486357][T10539] unevictable:3818 dirty:300 writeback:0 [ 237.486357][T10539] slab_reclaimable:12007 slab_unreclaimable:111481 [ 237.486357][T10539] mapped:30260 shmem:1372 pagetables:981 [ 237.486357][T10539] sec_pagetables:0 bounce:0 [ 237.486357][T10539] kernel_misc_reclaimable:0 [ 237.486357][T10539] free:1316201 free_pcp:12399 free_cma:0 [ 237.588938][T10539] Node 0 active_anon:29088kB inactive_anon:0kB active_file:5964kB inactive_file:159368kB unevictable:1836kB isolated(anon):0kB isolated(file):0kB mapped:121040kB dirty:1200kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12332kB pagetables:3792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 237.629653][T10539] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 237.736993][T10539] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.807800][T10539] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 237.813984][T10539] Node 0 DMA32 free:1363700kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17844kB inactive_anon:0kB active_file:5964kB inactive_file:157800kB unevictable:1636kB writepending:1200kB present:3129332kB managed:2557520kB mlocked:100kB bounce:0kB free_pcp:42788kB local_pcp:24724kB free_cma:0kB [ 237.851156][T10539] lowmem_reserve[]: 0 0 1 1 1 [ 237.860232][T10539] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 237.893558][T10564] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 237.911631][T10539] lowmem_reserve[]: 0 0 0 0 0 [ 237.953428][T10539] Node 1 Normal free:3885720kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19404kB local_pcp:11560kB free_cma:0kB [ 238.016061][T10539] lowmem_reserve[]: 0 0 0 0 0 [ 238.022477][T10539] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 238.054053][T10539] Node 0 DMA32: 1314*4kB (UM) 652*8kB (UME) 436*16kB (UM) 759*32kB (UM) 153*64kB (UM) 64*128kB (UME) 27*256kB (UM) 12*512kB (UME) 4*1024kB (UME) 5*2048kB (UME) 312*4096kB (M) = 1365064kB [ 238.080193][T10539] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 238.101009][T10539] Node 1 Normal: 198*4kB (UE) 44*8kB (UME) 38*16kB (UME) 106*32kB (UME) 34*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3885720kB [ 238.119880][T10539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.129502][T10539] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.139968][T10539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.149643][T10539] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.159348][T10539] 42805 total pagecache pages [ 238.164476][T10539] 0 pages in swap cache [ 238.169028][T10539] Free swap = 124996kB [ 238.173575][T10539] Total swap = 124996kB [ 238.177823][T10539] 2097051 pages RAM [ 238.181665][T10539] 0 pages HighMem/MovableOnly [ 238.187410][T10539] 425645 pages reserved [ 238.191612][T10539] 0 pages cma reserved [ 238.415328][T10585] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 239.152255][T10615] netlink: 'syz.4.1310': attribute type 4 has an invalid length. [ 239.602309][T10637] FAULT_INJECTION: forcing a failure. [ 239.602309][T10637] name failslab, interval 1, probability 0, space 0, times 0 [ 239.620421][T10637] CPU: 0 UID: 0 PID: 10637 Comm: syz.0.1316 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 239.620454][T10637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.620466][T10637] Call Trace: [ 239.620475][T10637] [ 239.620484][T10637] dump_stack_lvl+0x189/0x250 [ 239.620513][T10637] ? __pfx____ratelimit+0x10/0x10 [ 239.620538][T10637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.620574][T10637] ? __pfx__printk+0x10/0x10 [ 239.620609][T10637] ? __pfx___might_resched+0x10/0x10 [ 239.620635][T10637] should_fail_ex+0x414/0x560 [ 239.620664][T10637] should_failslab+0xa8/0x100 [ 239.620695][T10637] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 239.620724][T10637] ? __alloc_skb+0x112/0x2d0 [ 239.620747][T10637] ? __pfx___mutex_trylock_common+0x10/0x10 [ 239.620775][T10637] __alloc_skb+0x112/0x2d0 [ 239.620806][T10637] netlink_dump+0x1b7/0xe90 [ 239.620835][T10637] ? __netlink_lookup+0xbd/0x810 [ 239.620870][T10637] ? __pfx_netlink_dump+0x10/0x10 [ 239.620913][T10637] ? netlink_lookup+0x30/0x200 [ 239.620933][T10637] ? netlink_lookup+0x30/0x200 [ 239.620961][T10637] __netlink_dump_start+0x5cb/0x7e0 [ 239.620993][T10637] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 239.621015][T10637] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 239.621039][T10637] nf_tables_gettable+0x1fa/0x670 [ 239.621080][T10637] ? __pfx_nf_tables_gettable+0x10/0x10 [ 239.621108][T10637] ? __pfx_nf_tables_dump_tables+0x10/0x10 [ 239.621136][T10637] ? __nla_parse+0x40/0x60 [ 239.621160][T10637] ? __pfx_nf_tables_gettable+0x10/0x10 [ 239.621191][T10637] nfnetlink_rcv_msg+0x80e/0x1130 [ 239.621215][T10637] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 239.621260][T10637] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 239.621280][T10637] ? kasan_save_free_info+0x46/0x50 [ 239.621360][T10637] netlink_rcv_skb+0x208/0x470 [ 239.621388][T10637] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 239.621418][T10637] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 239.621458][T10637] ? bpf_lsm_capable+0x9/0x20 [ 239.621484][T10637] ? security_capable+0x7e/0x2e0 [ 239.621518][T10637] nfnetlink_rcv+0x26a/0x2520 [ 239.621553][T10637] ? __dev_queue_xmit+0x1d79/0x3b50 [ 239.621586][T10637] ? __dev_queue_xmit+0x27b/0x3b50 [ 239.621621][T10637] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 239.621652][T10637] ? __pfx___dev_queue_xmit+0x10/0x10 [ 239.621690][T10637] ? ref_tracker_free+0x63a/0x7d0 [ 239.621714][T10637] ? __asan_memcpy+0x40/0x70 [ 239.621736][T10637] ? __pfx_ref_tracker_free+0x10/0x10 [ 239.621780][T10637] ? skb_clone+0x246/0x3a0 [ 239.621802][T10637] ? __netlink_deliver_tap+0x807/0x850 [ 239.621826][T10637] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.621859][T10637] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.621894][T10637] netlink_unicast+0x82f/0x9e0 [ 239.621928][T10637] ? __pfx_netlink_unicast+0x10/0x10 [ 239.621954][T10637] ? netlink_sendmsg+0x642/0xb30 [ 239.621976][T10637] ? skb_put+0x11b/0x210 [ 239.622007][T10637] netlink_sendmsg+0x805/0xb30 [ 239.622045][T10637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.622075][T10637] ? aa_sock_msg_perm+0xf1/0x1d0 [ 239.622105][T10637] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.622127][T10637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.622154][T10637] __sock_sendmsg+0x219/0x270 [ 239.622180][T10637] ____sys_sendmsg+0x505/0x830 [ 239.622216][T10637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.622255][T10637] ? import_iovec+0x74/0xa0 [ 239.622279][T10637] ___sys_sendmsg+0x21f/0x2a0 [ 239.622311][T10637] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.622384][T10637] ? __fget_files+0x2a/0x420 [ 239.622413][T10637] ? __fget_files+0x3a0/0x420 [ 239.622454][T10637] __x64_sys_sendmsg+0x19b/0x260 [ 239.622487][T10637] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.622526][T10637] ? __pfx_ksys_write+0x10/0x10 [ 239.622559][T10637] ? rcu_is_watching+0x15/0xb0 [ 239.622586][T10637] ? do_syscall_64+0xbe/0x3b0 [ 239.622617][T10637] do_syscall_64+0xfa/0x3b0 [ 239.622639][T10637] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.622661][T10637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.622681][T10637] ? clear_bhb_loop+0x60/0xb0 [ 239.622706][T10637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.622725][T10637] RIP: 0033:0x7fbb1f98ebe9 [ 239.622744][T10637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.622762][T10637] RSP: 002b:00007fbb20861038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.622785][T10637] RAX: ffffffffffffffda RBX: 00007fbb1fbb6090 RCX: 00007fbb1f98ebe9 [ 239.622799][T10637] RDX: 000000000000c000 RSI: 0000200000000640 RDI: 0000000000000004 [ 239.622812][T10637] RBP: 00007fbb20861090 R08: 0000000000000000 R09: 0000000000000000 [ 239.622824][T10637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.622836][T10637] R13: 00007fbb1fbb6128 R14: 00007fbb1fbb6090 R15: 00007ffe310a43e8 [ 239.622872][T10637] [ 240.674890][T10673] __nla_validate_parse: 2 callbacks suppressed [ 240.674912][T10673] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1323'. [ 240.724029][T10673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.743371][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 240.867439][T10683] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1328'. [ 240.891064][T10683] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1328'. [ 240.930292][T10687] netlink: 'syz.4.1329': attribute type 3 has an invalid length. [ 240.945648][T10687] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1329'. [ 241.298320][T10706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1334'. [ 241.342268][T10706] netlink: 'syz.3.1334': attribute type 1 has an invalid length. [ 241.421299][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1336'. [ 241.489425][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1336'. [ 241.679715][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'. [ 241.703693][T10727] netlink: 'syz.2.1339': attribute type 4 has an invalid length. [ 242.132343][T10760] ip6erspan0: entered allmulticast mode [ 242.549953][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 243.288474][T10809] netlink: ct family unspecified [ 243.293996][T10809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.389014][T10822] dummy0: mtu less than device minimum [ 243.520642][T10826] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 243.670164][T10826] bond1: entered promiscuous mode [ 243.687025][T10826] bond1: entered allmulticast mode [ 243.697384][T10826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.863455][T10845] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 244.291835][T10859] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 244.299283][T10859] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 245.389799][T10904] netlink: 'syz.1.1393': attribute type 10 has an invalid length. [ 245.407016][T10909] netlink: 'syz.1.1393': attribute type 10 has an invalid length. [ 245.532266][T10897] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.549834][T10904] veth0_macvtap: left promiscuous mode [ 245.579411][T10904] team0: Device veth0_macvtap failed to register rx_handler [ 245.637654][T10909] team0: Device veth0_macvtap failed to register rx_handler [ 245.680106][T10914] syz_tun: left allmulticast mode [ 245.688999][T10914] pimreg: left allmulticast mode [ 245.773187][T10896] smc: net device bond0 applied user defined pnetid SYZ2 [ 245.841789][T10901] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.859411][T10901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.002283][T10901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.020867][T10901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.065521][T10901] veth1_vlan: left promiscuous mode [ 246.084222][T10901] veth0_vlan: left promiscuous mode [ 246.110978][T10901] veth0_vlan: entered promiscuous mode [ 246.147719][T10901] veth1_vlan: entered promiscuous mode [ 246.219049][T10901] veth1_macvtap: left promiscuous mode [ 246.231149][T10901] veth0_macvtap: left promiscuous mode [ 246.240722][T10901] veth0_macvtap: entered promiscuous mode [ 246.291370][T10901] veth1_macvtap: entered promiscuous mode [ 246.395362][T10901] geneve2: left promiscuous mode [ 246.400486][T10901] geneve2: left allmulticast mode [ 246.410708][T10901] ip6erspan0: left allmulticast mode [ 246.422279][T10901] bond1: left promiscuous mode [ 246.431227][T10901] bond1: left allmulticast mode [ 246.622655][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.709279][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.787461][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.812249][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.118168][T10951] syzkaller1: entered allmulticast mode [ 247.340708][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.384655][ T8513] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.395293][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.540569][ T8513] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.907709][T10972] __nla_validate_parse: 35 callbacks suppressed [ 247.907729][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1408'. [ 247.975016][ T8513] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.194960][T10978] netlink: 'syz.2.1409': attribute type 1 has an invalid length. [ 248.347108][T10978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.479619][T10987] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 248.772029][T10998] netlink: 'syz.0.1415': attribute type 7 has an invalid length. [ 248.807498][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 249.507307][T11008] veth0: entered promiscuous mode [ 249.523000][T11006] veth0: left promiscuous mode [ 249.797380][T11015] syzkaller0: entered promiscuous mode [ 249.803189][T11015] syzkaller0: entered allmulticast mode [ 249.939187][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 249.965877][T11020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1423'. [ 250.227759][T11026] netlink: 'syz.4.1425': attribute type 6 has an invalid length. [ 250.405691][T11033] netlink: 'syz.4.1427': attribute type 6 has an invalid length. [ 250.929180][T10843] Set syz1 is full, maxelem 65536 reached [ 251.040392][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 251.054836][T11042] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1430'. [ 251.095068][T11044] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 251.412846][T11057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1437'. [ 251.427090][T11060] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1439'. [ 251.614983][T11069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1440'. [ 251.624262][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.757230][T11074] netlink: 'syz.0.1440': attribute type 8 has an invalid length. [ 251.887190][T11077] netlink: 'syz.3.1441': attribute type 10 has an invalid length. [ 251.900529][T11077] team0: Port device dummy0 added [ 252.386953][T11082] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 253.005345][T11109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1452'. [ 253.049507][T11109] syz_tun: entered promiscuous mode [ 253.051852][T11111] netlink: 'syz.4.1453': attribute type 1 has an invalid length. [ 253.070008][T11109] syz_tun: left promiscuous mode [ 253.095652][T11112] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 253.168138][T11111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.274696][T11109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.282049][T11109] IPv6: NLM_F_CREATE should be set when creating new route [ 253.289625][T11109] IPv6: NLM_F_CREATE should be set when creating new route [ 253.304105][T11116] vlan2: entered allmulticast mode [ 253.324831][T11116] batadv0: entered allmulticast mode [ 253.352152][T11116] bond2: (slave vlan2): Opening slave failed [ 253.378537][T11109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.737820][T11133] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 254.580926][T11167] netlink: 'syz.2.1470': attribute type 39 has an invalid length. [ 254.668076][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 254.675627][T11175] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1473'. [ 254.687522][T11176] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1473'. [ 254.727828][T11173] sctp: [Deprecated]: syz.4.1472 (pid 11173) Use of int in maxseg socket option. [ 254.727828][T11173] Use struct sctp_assoc_value instead [ 254.829425][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1476'. [ 254.851508][T11179] openvswitch: netlink: Flow actions attr not present in new flow. [ 255.169270][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 255.577025][T11207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.791387][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.802809][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.857155][T11214] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1484'. [ 255.925077][T11214] netlink: 'syz.2.1484': attribute type 10 has an invalid length. [ 256.059699][T11225] IPVS: persistence engine module ip_vs_pe_ not found [ 256.090496][T11222] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1488'. [ 256.273330][T11235] team0: Port device dummy0 removed [ 256.287857][T11235] bond0: (slave bond_slave_0): Releasing backup interface [ 256.304731][T11235] bond0: (slave bond_slave_1): Releasing backup interface [ 256.315798][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 256.331619][T11235] team0: Port device team_slave_0 removed [ 256.341370][T11235] team0: Port device team_slave_1 removed [ 256.350256][T11235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.367380][T11235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.382966][T11235] bond1: (slave bridge2): Releasing active interface [ 256.398570][T11235] bond2: (slave geneve2): Releasing active interface [ 256.412084][T11235] bond3: (slave veth1): Releasing active interface [ 256.426478][ T55] block nbd1: Possible stuck request ffff88802501e000: control (read@0,4096B). Runtime 120 seconds [ 256.440425][T11235] batman_adv: batadv0: Removing interface: gretap1 [ 257.621777][T11278] tipc: Enabled bearer , priority 0 [ 257.656430][T11278] syzkaller0: entered promiscuous mode [ 257.661949][T11278] syzkaller0: entered allmulticast mode [ 258.016160][T11278] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 258.098763][T11285] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1505'. [ 258.208731][T11280] tipc: Resetting bearer [ 258.260482][T11280] tipc: Disabling bearer [ 258.270902][T11291] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1509'. [ 258.290366][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1507'. [ 258.299634][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'. [ 258.640075][T11314] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 258.672086][T11312] netlink: 'syz.1.1513': attribute type 4 has an invalid length. [ 258.790210][T11320] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1517'. [ 258.939846][T11325] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 259.019309][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 259.030111][T11332] sctp: [Deprecated]: syz.0.1521 (pid 11332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.030111][T11332] Use struct sctp_sack_info instead [ 259.108525][T11337] batman_adv: batadv0: Adding interface: ip6gretap1 [ 259.142824][T11337] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.206109][T11337] batman_adv: batadv0: Interface activated: ip6gretap1 [ 259.261066][T11337] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 259.278883][T11347] netlink: 'syz.1.1523': attribute type 3 has an invalid length. [ 259.288169][T11347] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 259.325789][T11347] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1523'. [ 259.446742][T11358] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1527'. [ 259.518857][T11365] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1528'. [ 259.702028][T11368] dvmrp0: entered allmulticast mode [ 259.725942][ T8507] IPVS: starting estimator thread 0... [ 259.792958][T11378] dvmrp0: left allmulticast mode [ 259.842362][T11376] IPVS: using max 22 ests per chain, 52800 per kthread [ 260.265232][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.609425][T11408] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1543'. [ 260.735461][T11410] dvmrp0: entered allmulticast mode [ 261.392302][T11442] bond0: (slave dummy0): Releasing backup interface [ 261.436382][T11442] bridge_slave_0: left allmulticast mode [ 261.458295][T11442] bridge_slave_0: left promiscuous mode [ 261.534594][T11442] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.569306][T11442] bridge_slave_1: left allmulticast mode [ 261.575685][T11442] bridge_slave_1: left promiscuous mode [ 261.663068][T11442] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.786912][T11442] bond0: (slave bond_slave_0): Releasing backup interface [ 261.800025][T11442] bond0: (slave bond_slave_1): Releasing backup interface [ 261.855461][T11442] team0: Port device team_slave_0 removed [ 261.870519][T11445] netlink: 'syz.3.1551': attribute type 6 has an invalid length. [ 261.879522][T11442] team0: Port device team_slave_1 removed [ 261.898591][T11442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.928980][T11442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.939058][T11442] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 261.966513][T11442] batman_adv: batadv0: Removing interface: ip6gretap1 [ 262.777778][T11495] macsec1: entered allmulticast mode [ 262.790192][T11495] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 262.808606][T11495] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 262.851306][T11498] tipc: Enabled bearer , priority 0 [ 262.876078][T11498] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 262.892296][T11498] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 262.908922][T11498] tipc: Resetting bearer [ 262.965091][T11498] tipc: Resetting bearer [ 263.185766][T11522] __nla_validate_parse: 37 callbacks suppressed [ 263.185786][T11522] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1574'. [ 263.241098][T11522] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 263.261568][T11525] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1576'. [ 263.368420][T11516] bond0: (slave wlan1): Releasing backup interface [ 263.453341][T11516] team0: Port device batadv1 removed [ 263.461235][T11516] tipc: Resetting bearer [ 263.741318][T11535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'. [ 263.820205][T11535] netlink: 'syz.0.1579': attribute type 7 has an invalid length. [ 263.843502][T11535] netlink: 'syz.0.1579': attribute type 8 has an invalid length. [ 263.882801][ T8507] tipc: Node number set to 840455313 [ 263.903348][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1579'. [ 263.969231][T11535] ip6gretap0: entered promiscuous mode [ 264.021780][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 264.028816][T11535] syz_tun: entered promiscuous mode [ 264.038761][T11535] ip6gretap0: left promiscuous mode [ 264.051279][T11544] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1583'. [ 264.067613][T11535] syz_tun: left promiscuous mode [ 264.266855][T11551] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1586'. [ 264.504141][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1591'. [ 264.517305][T11560] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1589'. [ 264.947981][T11574] pim6reg1: entered promiscuous mode [ 264.968966][T11574] pim6reg1: entered allmulticast mode [ 265.174404][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1598'. [ 266.040369][T11605] syzkaller0: entered allmulticast mode [ 266.132082][T11612] batadv1: entered promiscuous mode [ 266.172834][T11612] batadv1: entered allmulticast mode [ 267.190243][T11644] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 267.412065][T11653] tipc: Enabled bearer , priority 0 [ 267.433338][T11650] syzkaller0: entered promiscuous mode [ 267.462439][T11650] syzkaller0: entered allmulticast mode [ 267.585008][T11650] tipc: Resetting bearer [ 267.641926][T11646] tipc: Resetting bearer [ 267.690287][T11646] tipc: Disabling bearer [ 267.817154][T11661] veth0_to_bridge: entered promiscuous mode [ 267.840436][T11661] veth0_to_bridge: left promiscuous mode [ 267.998556][T11670] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 268.068572][T11670] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.357914][T11682] __nla_validate_parse: 14 callbacks suppressed [ 268.357938][T11682] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1629'. [ 269.128968][T11710] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1639'. [ 269.284711][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 269.294128][T11718] netlink: 'syz.1.1643': attribute type 29 has an invalid length. [ 269.302264][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 269.350775][T11720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.387822][T11722] tipc: Enabling of bearer rejected, already enabled [ 269.964220][T11752] IPVS: set_ctl: invalid protocol: 13663 172.30.1.2:19999 [ 270.492877][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 270.575173][T11775] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1660'. [ 270.585023][T11775] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1660'. [ 270.610040][T11775] lo speed is unknown, defaulting to 1000 [ 270.630416][T11775] lo speed is unknown, defaulting to 1000 [ 270.640709][T11775] lo speed is unknown, defaulting to 1000 [ 270.674125][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'. [ 270.797604][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 271.442674][T11792] netlink: 'syz.3.1666': attribute type 12 has an invalid length. [ 271.601373][ T8522] lo speed is unknown, defaulting to 1000 [ 271.610997][T11775] infiniband syz0: set down [ 271.630385][T11775] infiniband syz0: added lo [ 271.677350][T11775] syz0: rxe_create_cq: returned err = -12 [ 271.696618][T11775] infiniband syz0: Couldn't create ib_mad CQ [ 271.722362][T11775] infiniband syz0: Couldn't open port 1 [ 271.834014][T11775] RDS/IB: syz0: added [ 271.838828][T11775] smc: adding ib device syz0 with port count 1 [ 271.860054][T11775] smc: ib device syz0 port 1 has pnetid [ 271.883126][ T8522] lo speed is unknown, defaulting to 1000 [ 271.916036][T11775] lo speed is unknown, defaulting to 1000 [ 272.053816][T11806] netlink: 'syz.4.1669': attribute type 2 has an invalid length. [ 272.579018][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 272.753930][T11775] lo speed is unknown, defaulting to 1000 [ 273.373254][T11852] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 273.389641][T11853] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 273.405853][T11811] lo speed is unknown, defaulting to 1000 [ 273.970314][T11775] lo speed is unknown, defaulting to 1000 [ 274.007561][T11869] __nla_validate_parse: 1 callbacks suppressed [ 274.007606][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 274.577021][T11775] lo speed is unknown, defaulting to 1000 [ 274.578902][T11885] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1693'. [ 274.601293][T11885] netlink: zone id is out of range [ 274.607620][T11885] netlink: get zone limit has 8 unknown bytes [ 274.645991][T11885] tipc: Enabled bearer , priority 0 [ 274.663665][T11885] syzkaller0: entered promiscuous mode [ 274.669186][T11885] syzkaller0: entered allmulticast mode [ 274.696900][T11885] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 274.737802][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 274.771793][T11885] tipc: Resetting bearer [ 274.819443][T11882] tipc: Resetting bearer [ 274.862809][T11882] tipc: Disabling bearer [ 274.998223][T11775] lo speed is unknown, defaulting to 1000 [ 275.042189][T11893] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1695'. [ 275.461250][T11912] netlink: 'syz.4.1701': attribute type 1 has an invalid length. [ 275.471323][T11910] syzkaller1: entered promiscuous mode [ 275.482652][T11910] syzkaller1: entered allmulticast mode [ 275.537549][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1699'. [ 275.966869][T11931] netlink: 'syz.2.1706': attribute type 10 has an invalid length. [ 276.115845][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1705'. [ 276.185432][T11938] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 276.419567][T11944] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.429552][T11944] bond0: (slave bond4): Enslaving as an active interface with a down link [ 276.616606][T11963] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1715'. [ 276.815282][T11971] veth0_to_hsr: left allmulticast mode [ 276.839547][T11976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1720'. [ 276.866032][T11971] sit2: left allmulticast mode [ 276.867680][T11976] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1720'. [ 276.910769][T11974] syzkaller0: entered promiscuous mode [ 276.924329][T11974] syzkaller0: entered allmulticast mode [ 277.543733][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 277.663668][T11994] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1726'. [ 278.373892][T12022] tipc: Enabled bearer , priority 0 [ 278.403990][T12022] syzkaller0: entered promiscuous mode [ 278.409812][T12022] syzkaller0: entered allmulticast mode [ 278.543974][T12022] tipc: Resetting bearer [ 278.575425][T12020] tipc: Resetting bearer [ 278.598437][T12020] tipc: Disabling bearer [ 278.810606][T12044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.864794][T12046] raw_sendmsg: syz.2.1746 forgot to set AF_INET. Fix it! [ 278.906417][T12048] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 279.183127][T12065] netlink: 'syz.2.1751': attribute type 1 has an invalid length. [ 279.228291][T12065] __nla_validate_parse: 7 callbacks suppressed [ 279.228313][T12065] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1751'. [ 279.359986][T12078] tipc: Enabled bearer , priority 0 [ 279.373430][T12078] syzkaller0: entered promiscuous mode [ 279.388367][T12078] syzkaller0: entered allmulticast mode [ 279.430381][T12078] tipc: Resetting bearer [ 279.445813][T12076] tipc: Resetting bearer [ 279.457585][T12085] netlink: 'syz.1.1757': attribute type 6 has an invalid length. [ 279.489930][T12076] tipc: Disabling bearer [ 279.918407][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 280.075304][T12124] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1768'. [ 281.124706][T12156] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1779'. [ 281.634704][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 282.298511][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1794'. [ 282.384239][ C1] vcan0: j1939_session_tx_dat: 0xffff888057e88c00: queue data error: -100 [ 282.418279][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'. [ 282.448092][T12206] veth0_to_bond: entered allmulticast mode [ 282.489758][T12193] syzkaller0: entered promiscuous mode [ 282.504352][T12193] syzkaller0: entered allmulticast mode [ 282.604582][T12213] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.764413][T12226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1799'. [ 282.823593][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 283.118305][T12231] lo speed is unknown, defaulting to 1000 [ 283.163935][T12245] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 283.211639][T12246] netlink: 'syz.4.1806': attribute type 10 has an invalid length. [ 284.014468][T12257] lo speed is unknown, defaulting to 1000 [ 284.059403][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 285.215260][T12301] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1824'. [ 285.232625][T12301] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1824'. [ 285.293792][T12301] rdma_rxe: rxe_newlink: failed to add lo [ 285.460405][T12301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.487473][T12301] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.549346][T12301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.837594][T12327] FAULT_INJECTION: forcing a failure. [ 285.837594][T12327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.853885][T12327] CPU: 0 UID: 0 PID: 12327 Comm: syz.0.1831 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 285.853916][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.853928][T12327] Call Trace: [ 285.853937][T12327] [ 285.853945][T12327] dump_stack_lvl+0x189/0x250 [ 285.853977][T12327] ? __pfx____ratelimit+0x10/0x10 [ 285.854002][T12327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.854026][T12327] ? __pfx__printk+0x10/0x10 [ 285.854055][T12327] ? __might_fault+0xb0/0x130 [ 285.854095][T12327] should_fail_ex+0x414/0x560 [ 285.854124][T12327] _copy_from_user+0x2d/0xb0 [ 285.854145][T12327] core_sys_select+0x604/0xa20 [ 285.854188][T12327] ? __pfx_core_sys_select+0x10/0x10 [ 285.854246][T12327] ? __pfx_set_user_sigmask+0x10/0x10 [ 285.854281][T12327] __se_sys_pselect6+0x27a/0x300 [ 285.854317][T12327] ? __pfx___se_sys_pselect6+0x10/0x10 [ 285.854354][T12327] ? __pfx_ksys_write+0x10/0x10 [ 285.854387][T12327] ? __x64_sys_pselect6+0x21/0xf0 [ 285.854417][T12327] do_syscall_64+0xfa/0x3b0 [ 285.854441][T12327] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.854464][T12327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.854484][T12327] ? clear_bhb_loop+0x60/0xb0 [ 285.854509][T12327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.854528][T12327] RIP: 0033:0x7fbb1f98ebe9 [ 285.854546][T12327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.854563][T12327] RSP: 002b:00007fbb20861038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 285.854586][T12327] RAX: ffffffffffffffda RBX: 00007fbb1fbb6090 RCX: 00007fbb1f98ebe9 [ 285.854600][T12327] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 285.854612][T12327] RBP: 00007fbb20861090 R08: 0000000000000000 R09: 0000000000000000 [ 285.854625][T12327] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 285.854638][T12327] R13: 00007fbb1fbb6128 R14: 00007fbb1fbb6090 R15: 00007ffe310a43e8 [ 285.854672][T12327] [ 286.508584][ T55] block nbd1: Possible stuck request ffff88802501e000: control (read@0,4096B). Runtime 150 seconds [ 286.559601][T12346] netlink: 'syz.3.1837': attribute type 5 has an invalid length. [ 286.569222][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 287.421812][T12382] netlink: 'syz.2.1850': attribute type 5 has an invalid length. [ 287.430518][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 287.878060][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'. [ 287.921551][T12396] vlan2: entered promiscuous mode [ 287.927245][T12396] macvtap0: entered promiscuous mode [ 287.985012][T12396] macvtap1: entered allmulticast mode [ 288.010900][T12396] veth0_macvtap: entered allmulticast mode [ 288.186481][T12405] lo speed is unknown, defaulting to 1000 [ 288.237112][T12390] FAULT_INJECTION: forcing a failure. [ 288.237112][T12390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.238186][T12390] [ 288.238194][T12390] ====================================================== [ 288.238201][T12390] WARNING: possible circular locking dependency detected [ 288.238211][T12390] 6.16.0-syzkaller-12128-g875c541ea680 #0 Not tainted [ 288.238221][T12390] ------------------------------------------------------ [ 288.238228][T12390] syz.0.1852/12390 is trying to acquire lock: [ 288.238238][T12390] ffffffff8e12e120 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 288.238285][T12390] [ 288.238285][T12390] but task is already holding lock: [ 288.238292][T12390] ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 288.238341][T12390] [ 288.238341][T12390] which lock already depends on the new lock. [ 288.238341][T12390] [ 288.238348][T12390] [ 288.238348][T12390] the existing dependency chain (in reverse order) is: [ 288.238354][T12390] [ 288.238354][T12390] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 288.238379][T12390] lock_acquire+0x120/0x360 [ 288.238403][T12390] _raw_spin_lock_nested+0x32/0x50 [ 288.238425][T12390] raw_spin_rq_lock_nested+0x2a/0x140 [ 288.238450][T12390] task_rq_lock+0xbc/0x470 [ 288.238473][T12390] cgroup_move_task+0x92/0x2a0 [ 288.238506][T12390] css_set_move_task+0x658/0x9e0 [ 288.238526][T12390] cgroup_post_fork+0x1ef/0x790 [ 288.238544][T12390] copy_process+0x3862/0x3c00 [ 288.238561][T12390] kernel_clone+0x21e/0x840 [ 288.238579][T12390] user_mode_thread+0xdd/0x140 [ 288.238596][T12390] rest_init+0x23/0x300 [ 288.238621][T12390] start_kernel+0x3a9/0x410 [ 288.238638][T12390] x86_64_start_reservations+0x24/0x30 [ 288.238663][T12390] x86_64_start_kernel+0x143/0x1c0 [ 288.238685][T12390] common_startup_64+0x13e/0x147 [ 288.238707][T12390] [ 288.238707][T12390] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 288.238731][T12390] lock_acquire+0x120/0x360 [ 288.238754][T12390] _raw_spin_lock_irqsave+0xa7/0xf0 [ 288.238772][T12390] try_to_wake_up+0x67/0x12b0 [ 288.238791][T12390] __wake_up_common_lock+0x134/0x1f0 [ 288.238813][T12390] tty_port_default_wakeup+0xa2/0xf0 [ 288.238837][T12390] serial8250_tx_chars+0x72e/0x970 [ 288.238860][T12390] serial8250_handle_irq+0x633/0xbb0 [ 288.238881][T12390] serial8250_default_handle_irq+0xbf/0x1e0 [ 288.238907][T12390] serial8250_interrupt+0x8d/0x160 [ 288.238924][T12390] __handle_irq_event_percpu+0x28c/0x980 [ 288.238945][T12390] handle_irq_event+0x8b/0x1e0 [ 288.238963][T12390] handle_edge_irq+0x23b/0xa10 [ 288.238982][T12390] __common_interrupt+0x143/0x250 [ 288.239006][T12390] common_interrupt+0xb6/0xe0 [ 288.239031][T12390] asm_common_interrupt+0x26/0x40 [ 288.239049][T12390] pv_native_safe_halt+0x13/0x20 [ 288.239068][T12390] default_idle+0x13/0x20 [ 288.239089][T12390] default_idle_call+0x74/0xb0 [ 288.239113][T12390] do_idle+0x1e8/0x510 [ 288.239127][T12390] cpu_startup_entry+0x44/0x60 [ 288.239143][T12390] rest_init+0x2de/0x300 [ 288.239166][T12390] start_kernel+0x3a9/0x410 [ 288.239184][T12390] x86_64_start_reservations+0x24/0x30 [ 288.239207][T12390] x86_64_start_kernel+0x143/0x1c0 [ 288.239231][T12390] common_startup_64+0x13e/0x147 [ 288.239252][T12390] [ 288.239252][T12390] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 288.239277][T12390] lock_acquire+0x120/0x360 [ 288.239300][T12390] _raw_spin_lock_irqsave+0xa7/0xf0 [ 288.239318][T12390] __wake_up_common_lock+0x2f/0x1f0 [ 288.239338][T12390] tty_port_default_wakeup+0xa2/0xf0 [ 288.239362][T12390] serial8250_tx_chars+0x72e/0x970 [ 288.239383][T12390] serial8250_handle_irq+0x633/0xbb0 [ 288.239405][T12390] serial8250_default_handle_irq+0xbf/0x1e0 [ 288.239431][T12390] serial8250_interrupt+0x8d/0x160 [ 288.239449][T12390] __handle_irq_event_percpu+0x28c/0x980 [ 288.239469][T12390] handle_irq_event+0x8b/0x1e0 [ 288.239495][T12390] handle_edge_irq+0x23b/0xa10 [ 288.239512][T12390] __common_interrupt+0x143/0x250 [ 288.239536][T12390] common_interrupt+0xb6/0xe0 [ 288.239560][T12390] asm_common_interrupt+0x26/0x40 [ 288.239576][T12390] pv_native_safe_halt+0x13/0x20 [ 288.239602][T12390] default_idle+0x13/0x20 [ 288.239623][T12390] default_idle_call+0x74/0xb0 [ 288.239647][T12390] do_idle+0x1e8/0x510 [ 288.239661][T12390] cpu_startup_entry+0x44/0x60 [ 288.239677][T12390] rest_init+0x2de/0x300 [ 288.239699][T12390] start_kernel+0x3a9/0x410 [ 288.239717][T12390] x86_64_start_reservations+0x24/0x30 [ 288.239741][T12390] x86_64_start_kernel+0x143/0x1c0 [ 288.239763][T12390] common_startup_64+0x13e/0x147 [ 288.239785][T12390] [ 288.239785][T12390] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 288.239809][T12390] lock_acquire+0x120/0x360 [ 288.239833][T12390] _raw_spin_lock_irqsave+0xa7/0xf0 [ 288.239849][T12390] serial8250_console_write+0x17e/0x1ba0 [ 288.239874][T12390] console_flush_all+0x728/0xc40 [ 288.239892][T12390] console_unlock+0xc4/0x270 [ 288.239909][T12390] vprintk_emit+0x5b7/0x7a0 [ 288.239925][T12390] _printk+0xcf/0x120 [ 288.239947][T12390] register_console+0xa8b/0xf90 [ 288.239967][T12390] univ8250_console_init+0x3a/0x70 [ 288.239990][T12390] console_init+0x10e/0x430 [ 288.240013][T12390] start_kernel+0x254/0x410 [ 288.240029][T12390] x86_64_start_reservations+0x24/0x30 [ 288.240053][T12390] x86_64_start_kernel+0x143/0x1c0 [ 288.240076][T12390] common_startup_64+0x13e/0x147 [ 288.240098][T12390] [ 288.240098][T12390] -> #0 (console_owner){-.-.}-{0:0}: [ 288.240121][T12390] validate_chain+0xb9b/0x2140 [ 288.240138][T12390] __lock_acquire+0xab9/0xd20 [ 288.240162][T12390] lock_acquire+0x120/0x360 [ 288.240184][T12390] console_flush_all+0x6d2/0xc40 [ 288.240203][T12390] console_unlock+0xc4/0x270 [ 288.240218][T12390] vprintk_emit+0x5b7/0x7a0 [ 288.240235][T12390] _printk+0xcf/0x120 [ 288.240256][T12390] should_fail_ex+0x3f5/0x560 [ 288.240272][T12390] strncpy_from_user+0x36/0x290 [ 288.240289][T12390] strncpy_from_user_nofault+0x72/0x150 [ 288.240308][T12390] bpf_bprintf_prepare+0xbbc/0x13d0 [ 288.240329][T12390] bpf_trace_printk+0xdb/0x190 [ 288.240344][T12390] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 288.240359][T12390] bpf_trace_run2+0x284/0x4b0 [ 288.240378][T12390] __bpf_trace_contention_begin+0xdc/0x130 [ 288.240395][T12390] trace_contention_begin+0x114/0x140 [ 288.240415][T12390] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 288.240435][T12390] queued_spin_lock_slowpath+0x43/0x50 [ 288.240457][T12390] do_raw_spin_lock+0x21f/0x290 [ 288.240476][T12390] raw_spin_rq_lock_nested+0x2a/0x140 [ 288.240510][T12390] __schedule+0x36b/0x4cc0 [ 288.240527][T12390] schedule+0x165/0x360 [ 288.240544][T12390] schedule_hrtimeout_range_clock+0x1c5/0x2f0 [ 288.240561][T12390] poll_schedule_timeout+0xd1/0x1b0 [ 288.240586][T12390] do_select+0xc47/0x17e0 [ 288.240609][T12390] core_sys_select+0x6dd/0xa20 [ 288.240630][T12390] __se_sys_pselect6+0x27a/0x300 [ 288.240653][T12390] do_syscall_64+0xfa/0x3b0 [ 288.240672][T12390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.240690][T12390] [ 288.240690][T12390] other info that might help us debug this: [ 288.240690][T12390] [ 288.240697][T12390] Chain exists of: [ 288.240697][T12390] console_owner --> &p->pi_lock --> &rq->__lock [ 288.240697][T12390] [ 288.240725][T12390] Possible unsafe locking scenario: [ 288.240725][T12390] [ 288.240732][T12390] CPU0 CPU1 [ 288.240738][T12390] ---- ---- [ 288.240743][T12390] lock(&rq->__lock); [ 288.240756][T12390] lock(&p->pi_lock); [ 288.240769][T12390] lock(&rq->__lock); [ 288.240782][T12390] lock(console_owner); [ 288.240794][T12390] [ 288.240794][T12390] *** DEADLOCK *** [ 288.240794][T12390] [ 288.240800][T12390] 4 locks held by syz.0.1852/12390: [ 288.240812][T12390] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 288.240863][T12390] #1: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 288.240909][T12390] #2: ffffffff8e12e180 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 288.240957][T12390] #3: ffffffff8e015a50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 288.241002][T12390] [ 288.241002][T12390] stack backtrace: [ 288.241011][T12390] CPU: 0 UID: 0 PID: 12390 Comm: syz.0.1852 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 288.241033][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.241045][T12390] Call Trace: [ 288.241052][T12390] [ 288.241060][T12390] dump_stack_lvl+0x189/0x250 [ 288.241085][T12390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.241106][T12390] ? __pfx__printk+0x10/0x10 [ 288.241132][T12390] ? print_lock_name+0xde/0x100 [ 288.241159][T12390] print_circular_bug+0x2ee/0x310 [ 288.241181][T12390] check_noncircular+0x134/0x160 [ 288.241202][T12390] validate_chain+0xb9b/0x2140 [ 288.241233][T12390] __lock_acquire+0xab9/0xd20 [ 288.241260][T12390] ? console_flush_all+0x13a/0xc40 [ 288.241280][T12390] lock_acquire+0x120/0x360 [ 288.241304][T12390] ? console_flush_all+0x13a/0xc40 [ 288.241329][T12390] ? do_raw_spin_unlock+0x122/0x240 [ 288.241351][T12390] ? console_flush_all+0x13a/0xc40 [ 288.241372][T12390] console_flush_all+0x6d2/0xc40 [ 288.241393][T12390] ? console_flush_all+0x13a/0xc40 [ 288.241413][T12390] ? console_flush_all+0x13a/0xc40 [ 288.241439][T12390] ? __pfx_console_flush_all+0x10/0x10 [ 288.241464][T12390] ? is_printk_cpu_sync_owner+0x32/0x40 [ 288.241498][T12390] console_unlock+0xc4/0x270 [ 288.241517][T12390] ? __pfx_console_unlock+0x10/0x10 [ 288.241538][T12390] ? is_printk_cpu_sync_owner+0x32/0x40 [ 288.241563][T12390] vprintk_emit+0x5b7/0x7a0 [ 288.241582][T12390] ? __pfx_vprintk_emit+0x10/0x10 [ 288.241611][T12390] _printk+0xcf/0x120 [ 288.241634][T12390] ? __pfx____ratelimit+0x10/0x10 [ 288.241656][T12390] ? __pfx__printk+0x10/0x10 [ 288.241686][T12390] should_fail_ex+0x3f5/0x560 [ 288.241708][T12390] strncpy_from_user+0x36/0x290 [ 288.241729][T12390] strncpy_from_user_nofault+0x72/0x150 [ 288.241750][T12390] bpf_bprintf_prepare+0xbbc/0x13d0 [ 288.241781][T12390] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 288.241806][T12390] ? bpf_trace_printk+0xc1/0x190 [ 288.241827][T12390] bpf_trace_printk+0xdb/0x190 [ 288.241843][T12390] ? __lock_acquire+0xab9/0xd20 [ 288.241868][T12390] ? __pfx_bpf_trace_printk+0x10/0x10 [ 288.241887][T12390] ? bpf_trace_run2+0x186/0x4b0 [ 288.241915][T12390] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 288.241931][T12390] bpf_trace_run2+0x284/0x4b0 [ 288.241954][T12390] ? bpf_trace_run2+0x186/0x4b0 [ 288.241975][T12390] ? __pfx_bpf_trace_run2+0x10/0x10 [ 288.242000][T12390] ? css_rstat_updated+0x23a/0x4f0 [ 288.242017][T12390] ? __bpf_trace_contention_begin+0xcd/0x130 [ 288.242038][T12390] __bpf_trace_contention_begin+0xdc/0x130 [ 288.242057][T12390] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 288.242075][T12390] ? rcu_read_lock_sched_held+0x89/0x100 [ 288.242093][T12390] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 288.242119][T12390] trace_contention_begin+0x114/0x140 [ 288.242140][T12390] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 288.242170][T12390] ? rcu_qs+0xc4/0x170 [ 288.242185][T12390] ? __pfx_rcu_qs+0x10/0x10 [ 288.242199][T12390] ? rcu_is_watching+0x15/0xb0 [ 288.242218][T12390] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 288.242248][T12390] queued_spin_lock_slowpath+0x43/0x50 [ 288.242270][T12390] do_raw_spin_lock+0x21f/0x290 [ 288.242294][T12390] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 288.242316][T12390] ? finish_task_switch+0x266/0x950 [ 288.242343][T12390] raw_spin_rq_lock_nested+0x2a/0x140 [ 288.242372][T12390] __schedule+0x36b/0x4cc0 [ 288.242397][T12390] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 288.242426][T12390] ? __lock_acquire+0xab9/0xd20 [ 288.242451][T12390] ? __pfx___schedule+0x10/0x10 [ 288.242477][T12390] ? schedule+0x91/0x360 [ 288.242504][T12390] schedule+0x165/0x360 [ 288.242523][T12390] schedule_hrtimeout_range_clock+0x1c5/0x2f0 [ 288.242542][T12390] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 288.242563][T12390] ? __pfx___might_resched+0x10/0x10 [ 288.242582][T12390] ? __fget_files+0x3a0/0x420 [ 288.242611][T12390] ? poll_schedule_timeout+0x30/0x1b0 [ 288.242634][T12390] poll_schedule_timeout+0xd1/0x1b0 [ 288.242663][T12390] do_select+0xc47/0x17e0 [ 288.242687][T12390] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 288.242713][T12390] ? do_select+0xc21/0x17e0 [ 288.242747][T12390] ? __pfx_do_select+0x10/0x10 [ 288.242770][T12390] ? __lock_acquire+0xab9/0xd20 [ 288.242802][T12390] ? __pfx_pollwake+0x10/0x10 [ 288.242828][T12390] ? __pfx_pollwake+0x10/0x10 [ 288.242855][T12390] ? __pfx_pollwake+0x10/0x10 [ 288.242880][T12390] ? __pfx_pollwake+0x10/0x10 [ 288.242907][T12390] ? __pfx_pollwake+0x10/0x10 [ 288.242932][T12390] ? __pfx_pollwake+0x10/0x10 [ 288.242958][T12390] ? __pfx_pollwake+0x10/0x10 [ 288.242985][T12390] ? __pfx_pollwake+0x10/0x10 [ 288.243023][T12390] core_sys_select+0x6dd/0xa20 [ 288.243052][T12390] ? __pfx_core_sys_select+0x10/0x10 [ 288.243089][T12390] ? __pfx_set_user_sigmask+0x10/0x10 [ 288.243112][T12390] __se_sys_pselect6+0x27a/0x300 [ 288.243140][T12390] ? __pfx___se_sys_pselect6+0x10/0x10 [ 288.243166][T12390] ? __pfx_ksys_write+0x10/0x10 [ 288.243192][T12390] ? __x64_sys_pselect6+0x21/0xf0 [ 288.243218][T12390] do_syscall_64+0xfa/0x3b0 [ 288.243239][T12390] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.243260][T12390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.243279][T12390] ? clear_bhb_loop+0x60/0xb0 [ 288.243299][T12390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.243316][T12390] RIP: 0033:0x7fbb1f98ebe9 [ 288.243333][T12390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.243350][T12390] RSP: 002b:00007fbb20861038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 288.243370][T12390] RAX: ffffffffffffffda RBX: 00007fbb1fbb6090 RCX: 00007fbb1f98ebe9 [ 288.243384][T12390] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 288.243398][T12390] RBP: 00007fbb20861090 R08: 0000000000000000 R09: 0000000000000000 [ 288.243410][T12390] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 288.243421][T12390] R13: 00007fbb1fbb6128 R14: 00007fbb1fbb6090 R15: 00007ffe310a43e8 [ 288.243442][T12390] [ 289.657326][T12390] CPU: 0 UID: 0 PID: 12390 Comm: syz.0.1852 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 289.657352][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.657364][T12390] Call Trace: [ 289.657370][T12390] [ 289.657377][T12390] dump_stack_lvl+0x189/0x250 [ 289.657400][T12390] ? __pfx____ratelimit+0x10/0x10 [ 289.657419][T12390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.657436][T12390] ? __pfx__printk+0x10/0x10 [ 289.657462][T12390] should_fail_ex+0x414/0x560 [ 289.657480][T12390] strncpy_from_user+0x36/0x290 [ 289.657497][T12390] strncpy_from_user_nofault+0x72/0x150 [ 289.657517][T12390] bpf_bprintf_prepare+0xbbc/0x13d0 [ 289.657541][T12390] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 289.657563][T12390] ? bpf_trace_printk+0xc1/0x190 [ 289.657578][T12390] bpf_trace_printk+0xdb/0x190 [ 289.657591][T12390] ? __lock_acquire+0xab9/0xd20 [ 289.657613][T12390] ? __pfx_bpf_trace_printk+0x10/0x10 [ 289.657628][T12390] ? bpf_trace_run2+0x186/0x4b0 [ 289.657652][T12390] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 289.657666][T12390] bpf_trace_run2+0x284/0x4b0 [ 289.657685][T12390] ? bpf_trace_run2+0x186/0x4b0 [ 289.657703][T12390] ? __pfx_bpf_trace_run2+0x10/0x10 [ 289.657723][T12390] ? css_rstat_updated+0x23a/0x4f0 [ 289.657737][T12390] ? __bpf_trace_contention_begin+0xcd/0x130 [ 289.657754][T12390] __bpf_trace_contention_begin+0xdc/0x130 [ 289.657770][T12390] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 289.657784][T12390] ? rcu_read_lock_sched_held+0x89/0x100 [ 289.657799][T12390] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 289.657819][T12390] trace_contention_begin+0x114/0x140 [ 289.657837][T12390] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 289.657858][T12390] ? rcu_qs+0xc4/0x170 [ 289.657871][T12390] ? __pfx_rcu_qs+0x10/0x10 [ 289.657883][T12390] ? rcu_is_watching+0x15/0xb0 [ 289.657898][T12390] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 289.657922][T12390] queued_spin_lock_slowpath+0x43/0x50 [ 289.657942][T12390] do_raw_spin_lock+0x21f/0x290 [ 289.657960][T12390] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 289.657978][T12390] ? finish_task_switch+0x266/0x950 [ 289.658002][T12390] raw_spin_rq_lock_nested+0x2a/0x140 [ 289.658026][T12390] __schedule+0x36b/0x4cc0 [ 289.658047][T12390] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 289.658070][T12390] ? __lock_acquire+0xab9/0xd20 [ 289.658091][T12390] ? __pfx___schedule+0x10/0x10 [ 289.658113][T12390] ? schedule+0x91/0x360 [ 289.658129][T12390] schedule+0x165/0x360 [ 289.658145][T12390] schedule_hrtimeout_range_clock+0x1c5/0x2f0 [ 289.658163][T12390] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 289.658181][T12390] ? __pfx___might_resched+0x10/0x10 [ 289.658196][T12390] ? __fget_files+0x3a0/0x420 [ 289.658219][T12390] ? poll_schedule_timeout+0x30/0x1b0 [ 289.658242][T12390] poll_schedule_timeout+0xd1/0x1b0 [ 289.658265][T12390] do_select+0xc47/0x17e0 [ 289.658284][T12390] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 289.658313][T12390] ? do_select+0xc21/0x17e0 [ 289.658340][T12390] ? __pfx_do_select+0x10/0x10 [ 289.658359][T12390] ? __lock_acquire+0xab9/0xd20 [ 289.658384][T12390] ? __pfx_pollwake+0x10/0x10 [ 289.658406][T12390] ? __pfx_pollwake+0x10/0x10 [ 289.658427][T12390] ? __pfx_pollwake+0x10/0x10 [ 289.658449][T12390] ? __pfx_pollwake+0x10/0x10 [ 289.658470][T12390] ? __pfx_pollwake+0x10/0x10 [ 289.658492][T12390] ? __pfx_pollwake+0x10/0x10 [ 289.658513][T12390] ? __pfx_pollwake+0x10/0x10 [ 289.658535][T12390] ? __pfx_pollwake+0x10/0x10 [ 289.658566][T12390] core_sys_select+0x6dd/0xa20 [ 289.658590][T12390] ? __pfx_core_sys_select+0x10/0x10 [ 289.658619][T12390] ? __pfx_set_user_sigmask+0x10/0x10 [ 289.658637][T12390] __se_sys_pselect6+0x27a/0x300 [ 289.658660][T12390] ? __pfx___se_sys_pselect6+0x10/0x10 [ 289.658680][T12390] ? __pfx_ksys_write+0x10/0x10 [ 289.658702][T12390] ? __x64_sys_pselect6+0x21/0xf0 [ 289.658723][T12390] do_syscall_64+0xfa/0x3b0 [ 289.658742][T12390] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.658760][T12390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.658775][T12390] ? clear_bhb_loop+0x60/0xb0 [ 289.658792][T12390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.658806][T12390] RIP: 0033:0x7fbb1f98ebe9 [ 289.658820][T12390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.658834][T12390] RSP: 002b:00007fbb20861038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 289.658852][T12390] RAX: ffffffffffffffda RBX: 00007fbb1fbb6090 RCX: 00007fbb1f98ebe9 [ 289.658864][T12390] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 289.658875][T12390] RBP: 00007fbb20861090 R08: 0000000000000000 R09: 0000000000000000 [ 289.658885][T12390] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 289.658895][T12390] R13: 00007fbb1fbb6128 R14: 00007fbb1fbb6090 R15: 00007ffe310a43e8 [ 289.658912][T12390]