last executing test programs: 6.830239849s ago: executing program 0 (id=1256): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) 5.496039987s ago: executing program 0 (id=1273): r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000640), &(0x7f0000000680)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="8200000000000010c7b1e864cbd131e544cef1e400000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="310300000000000000000674fcb54f9d1f7ab8bc000000080003", @ANYRES32=r2, @ANYRESHEX=r5, @ANYRESHEX=0x0, @ANYBLOB="1580315518d32bc78bcf8f204879da33df193f7c4cfb90251a811a27ed93f36ca68878986afaac73b733971aa07cd9ba8b1a228f1c7f7fff0b833dfd10486dd1ceaf4cec2216271a4faf759c63d4f1a5fe980e5ec2f0337de409a0a17bf1f07a11318ed9790b234f530e2b595aa223a7c91e103963054a355ad1cb4493db4dc19f8c0b3ff8faa6e32c09a9c3cd9892f798cfc19e34fe676155b836393e0333c73b09369d85aaa38c1ca6a6ac7698ed076396bc180e917bdd6e70af82b38b5d1d1b0f63757fa4df923bed1a65330e5fd2cb7e95b7f9d9687f52afa3bf", @ANYRESHEX=r1, @ANYRES16, @ANYRESOCT=r5, @ANYRES8=r1, @ANYRES8=r4, @ANYRESHEX=r1, @ANYBLOB="3f117e4b402b43c19d66aba5e35bddadc3a7f773ee527ab523ffc16cf2277d6bd513ef04ff15c7bfbc57abf284a0f391190eb9745a58f4c509c0d34738e98b7f948cef2fbfddba0c1a9890d194a77a66fb9a283a17c81b6bd76edefe9bed"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2055a2e578ec14d09820975e9d000000000a03000000000000000000070000000900010073797a300000000048000000090a"], 0x90}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="3ac9a52f8d", 0x5}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="100000dfffffff804c538a000f0000001000000000000100010000000200"], 0x20}, 0x4004) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x44}}, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000004"], 0x114}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00', {}, 0x5}) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300030b00000000000000000000000100090000000000030006006c0000000a"], 0x58}, 0x1, 0x7}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) 4.198039926s ago: executing program 2 (id=1276): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x12, 0x0, 0x0, 0x10, 0x0, 0x70bd29, 0x0, [@sadb_ident={0x2, 0xa, 0x1000, 0x0, 0x6}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x8, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x9, @mcast1}}, @sadb_address={0x14, 0x7, 0x0, 0xa0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x80}}, 0x20000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x20000001, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.09919143s ago: executing program 1 (id=1278): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0x410}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000101586500"/20, @ANYRES32=r5], 0x20}}, 0x0) 4.069011712s ago: executing program 2 (id=1279): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xc}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x400c014) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a", 0x3b}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x28}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) 4.067635108s ago: executing program 0 (id=1280): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x80, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) 3.909618124s ago: executing program 0 (id=1283): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) 3.424811979s ago: executing program 1 (id=1285): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) 3.263838975s ago: executing program 1 (id=1287): socket$inet(0x2, 0xa, 0x8) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x5a0b, 0x0, 0x0, 0x2}, 0x48) 3.119893404s ago: executing program 1 (id=1288): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x7, 0x6}, {0x0, 0x2}, {0x10, 0xfff2}}}, 0x24}}, 0x40004) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r4, 0x9, '\x00', r6, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x30, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0xa, 0x1, 0x0, r9}, @alu={0x3, 0x1, 0x6, 0x5, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r12, @ANYBLOB="00000132ae57f60014001a"], 0x34}}, 0x0) r14 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r14, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.11879623s ago: executing program 2 (id=1289): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x2c8, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73416575}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a27919f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1781a1da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71741ca4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c0e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24a9dd0f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe93d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x697d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33a8d5b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8293}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca91}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b3c995f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78492a4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17e9b6f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4199fd85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbed4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdaad}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d5b6ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x354b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d8b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf854}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eb72276}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x728ce9e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f12e6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b212b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18ce85fb}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2471ae9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1feda43c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c7b3fd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11f32f86}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d7160e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d0a4b1f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d4e63d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x120e53b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30f4c582}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d2a13de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dd76429}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fcb3031}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb52fbbd}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000881}, 0x40) 2.760236135s ago: executing program 0 (id=1290): r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000640), &(0x7f0000000680)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="8200000000000010c7b1e864cbd131e544cef1e400000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="310300000000000000000674fcb54f9d1f7ab8bc000000080003", @ANYRES32=r2, @ANYRESHEX=r5, @ANYRESHEX=0x0, @ANYBLOB="1580315518d32bc78bcf8f204879da33df193f7c4cfb90251a811a27ed93f36ca68878986afaac73b733971aa07cd9ba8b1a228f1c7f7fff0b833dfd10486dd1ceaf4cec2216271a4faf759c63d4f1a5fe980e5ec2f0337de409a0a17bf1f07a11318ed9790b234f530e2b595aa223a7c91e103963054a355ad1cb4493db4dc19f8c0b3ff8faa6e32c09a9c3cd9892f798cfc19e34fe676155b836393e0333c73b09369d85aaa38c1ca6a6ac7698ed076396bc180e917bdd6e70af82b38b5d1d1b0f63757fa4df923bed1a65330e5fd2cb7e95b7f9d9687f52afa3bf", @ANYRESHEX=r1, @ANYRES16, @ANYRESOCT=r5, @ANYRES8=r1, @ANYRES8=r4, @ANYRESHEX=r1, @ANYBLOB="3f117e4b402b43c19d66aba5e35bddadc3a7f773ee527ab523ffc16cf2277d6bd513ef04ff15c7bfbc57abf284a0f391190eb9745a58f4c509c0d34738e98b7f948cef2fbfddba0c1a9890d194a77a66fb9a283a17c81b6bd76edefe9bed"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2055a2e578ec14d09820975e9d000000000a03000000000000000000070000000900010073797a300000000048000000090a"], 0x90}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="3ac9a52f8d", 0x5}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="100000dfffffff804c538a000f0000001000000000000100010000000200"], 0x20}, 0x4004) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x44}}, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000004"], 0x114}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x1, 'vlan0\x00', {}, 0x5}) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300030b00000000000000000000000100090000000000030006006c0000000a"], 0x58}, 0x1, 0x7}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) 2.527883491s ago: executing program 4 (id=1291): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x4004000) 2.328458939s ago: executing program 3 (id=1293): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x80, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) 2.26263585s ago: executing program 2 (id=1294): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20048000) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef", 0x8, 0x0, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x3, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x9, [{@multicast1, 0xb932}, {@private=0xa010101, 0x4000}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={'veth0_vlan\x00', {0x2, 0x4e24, @broadcast}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000500)="afe4d93a95c70e000000271db47b280b7ec52a9922aa3d3c7db102ed63f8313a31cf82d3caf8e57437a440dc2ecc2fbe4635b8ecf22dff4c08f6bafc19a5b3ed069967857afc0ada8e5aea6631b1", 0x800, r11}, 0x38) 2.174393621s ago: executing program 4 (id=1295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x2c8, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73416575}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a27919f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1781a1da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71741ca4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c0e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24a9dd0f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe93d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x697d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33a8d5b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8293}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca91}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b3c995f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78492a4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17e9b6f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4199fd85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbed4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdaad}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d5b6ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x354b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d8b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf854}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eb72276}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x728ce9e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f12e6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b212b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18ce85fb}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2471ae9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1feda43c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c7b3fd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11f32f86}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d7160e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d0a4b1f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d4e63d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x120e53b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30f4c582}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d2a13de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dd76429}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fcb3031}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb52fbbd}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000881}, 0x40) 2.096470402s ago: executing program 3 (id=1296): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.869748095s ago: executing program 3 (id=1297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x26e1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8b39}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.754996564s ago: executing program 3 (id=1298): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000003000000000000000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.612494861s ago: executing program 3 (id=1299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0xf00, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.428711365s ago: executing program 4 (id=1300): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) 726.74938ms ago: executing program 4 (id=1301): r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/3, 0x3}], 0x1}, 0x480000}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/197, 0xc5}, {&(0x7f0000000640)=""/18, 0x12}, {&(0x7f00000009c0)=""/192, 0xc0}, {&(0x7f0000000a80)=""/80, 0x50}, {&(0x7f0000000b00)=""/21, 0x15}, {&(0x7f0000000b40)=""/113, 0x71}, {&(0x7f0000000bc0)=""/177, 0xb1}, {&(0x7f0000000c80)=""/170, 0xaa}], 0x9}, 0x6}, {{&(0x7f0000000e00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/49, 0x31}], 0x1, &(0x7f0000000f00)=""/210, 0xd2}, 0xb0}], 0x3, 0x10000, &(0x7f00000010c0)={0x77359400}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) r6 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r6, 0x0, 0x0) 312.091809ms ago: executing program 0 (id=1302): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x7, 0x6}, {0x0, 0x2}, {0x10, 0xfff2}}}, 0x24}}, 0x40004) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r4, 0x9, '\x00', r6, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x30, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0xa, 0x1, 0x0, r9}, @alu={0x3, 0x1, 0x6, 0x5, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r12, @ANYBLOB="00000132ae57f60014001a"], 0x34}}, 0x0) r14 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r14, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 224.535862ms ago: executing program 2 (id=1303): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000002c40)="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", 0x18f}], 0x2, 0xa) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'devices'}, {0x2d, 'devices'}, {0x2d, 'io'}, {0x2b, 'cpu'}, {0x2b, 'rlimit'}]}, 0x23) r2 = openat$cgroup_devices(r0, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\twr'], 0xa) 224.024857ms ago: executing program 3 (id=1304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRESHEX=r1, @ANYRES16=r1], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x30044850) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf250100"], 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r6, 0x8b2c, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdcb) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSPGRP(r7, 0x8902, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) shutdown(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 208.881268ms ago: executing program 4 (id=1305): syz_emit_ethernet(0x68, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0xfffffffc, {{}, 0x2, {0x8}}}}}}}}, 0x0) 164.976504ms ago: executing program 1 (id=1306): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x80, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) 58.095693ms ago: executing program 4 (id=1307): close(0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000008c0), 0x0, 0x101, &(0x7f0000000940)={0x0, 0x3938700}) (async) recvmmsg(r0, &(0x7f00000008c0), 0x0, 0x101, &(0x7f0000000940)={0x0, 0x3938700}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) 264.502µs ago: executing program 2 (id=1308): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f0030670014fe8000000000000000000000000000aab1f42e3f40c41063beb6901e464bcf01d5d64b97cc7f75564ab922374db98550eeed4e56d118d05d67cc144db3c0de1700"/102], 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x1ac, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6}]}, @NFQA_CT={0x74, 0xb, 0x0, 0x1, [@CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x3, 0x2, 0x1, 0x9, 0x15ad, 0x0, 0x7fff, 0xfffffffb]}, @CTA_NAT_SRC={0x44, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, @NFQA_CT={0x5c, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xdaf9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xaf67}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffc01}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x56db}]}, @CTA_NAT_DST={0x4}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}]}}]}, @NFQA_CT={0x4}, @NFQA_CT={0x5c, 0xb, 0x0, 0x1, [@CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffbff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6205}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x128}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, @NFQA_CT={0x5c, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xd}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xef88}]}}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x6002}, 0x880) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000050000009500000000000000c3492895246348bf79855db116f785cc6b65"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x46) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a9050000000074640001", 0xa}, {0x0}], 0x2}}], 0x1, 0x24000004) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) (fail_nth: 6) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, 0xa, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x81}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb2}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 0s ago: executing program 1 (id=1309): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000000)=0x5, 0x12) sendfile(r3, r2, 0x0, 0x1) connect$inet(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000200)) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) accept$netrom(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="012000001400000000001b000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010000d0425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1000000001000400050011000c06755a"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x6}, @md5sig={0x1d, 0x12, "ac3272000000006f00"}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): x10 [ 97.846865][ T6619] ? __pfx_migrate_enable+0x10/0x10 [ 97.846890][ T6619] should_fail_ex+0x414/0x560 [ 97.846916][ T6619] _copy_to_user+0x31/0xb0 [ 97.846935][ T6619] generic_map_lookup_batch+0x8e8/0xcc0 [ 97.846969][ T6619] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 97.846986][ T6619] ? __fget_files+0x2a/0x420 [ 97.847008][ T6619] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 97.847027][ T6619] bpf_map_do_batch+0x25b/0x5f0 [ 97.847048][ T6619] ? security_bpf+0x7e/0x300 [ 97.847066][ T6619] __sys_bpf+0x70c/0x860 [ 97.847088][ T6619] ? __pfx___sys_bpf+0x10/0x10 [ 97.847106][ T6619] ? bpf_trace_run2+0x322/0x4b0 [ 97.847145][ T6619] ? rcu_is_watching+0x15/0xb0 [ 97.847172][ T6619] __x64_sys_bpf+0x7c/0x90 [ 97.847190][ T6619] do_syscall_64+0xfa/0x3b0 [ 97.847205][ T6619] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.847220][ T6619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.847242][ T6619] ? clear_bhb_loop+0x60/0xb0 [ 97.847262][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.847277][ T6619] RIP: 0033:0x7f7727d8e929 [ 97.847292][ T6619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.847304][ T6619] RSP: 002b:00007f7728bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.847322][ T6619] RAX: ffffffffffffffda RBX: 00007f7727fb5fa0 RCX: 00007f7727d8e929 [ 97.847333][ T6619] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 97.847344][ T6619] RBP: 00007f7728bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 97.847354][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.847364][ T6619] R13: 0000000000000000 R14: 00007f7727fb5fa0 R15: 00007ffda93c3758 [ 97.847391][ T6619] [ 98.066783][ T5849] Bluetooth: hci0: command 0x0401 tx timeout [ 98.073380][ T5843] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 98.637314][ T6637] tipc: Started in network mode [ 98.642231][ T6637] tipc: Node identity 2, cluster identity 5 [ 98.664904][ T6637] tipc: Node number set to 2 [ 98.670676][ T6637] tipc: Cannot configure node identity twice [ 99.299674][ T6667] FAULT_INJECTION: forcing a failure. [ 99.299674][ T6667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.406332][ T6667] CPU: 1 UID: 0 PID: 6667 Comm: syz.2.228 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 99.406359][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.406372][ T6667] Call Trace: [ 99.406379][ T6667] [ 99.406387][ T6667] dump_stack_lvl+0x189/0x250 [ 99.406415][ T6667] ? __pfx____ratelimit+0x10/0x10 [ 99.406431][ T6667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.406454][ T6667] ? __pfx__printk+0x10/0x10 [ 99.406471][ T6667] ? __might_fault+0xb0/0x130 [ 99.406497][ T6667] should_fail_ex+0x414/0x560 [ 99.406522][ T6667] _copy_from_iter+0x1db/0x16f0 [ 99.406548][ T6667] ? rcu_is_watching+0x15/0xb0 [ 99.406572][ T6667] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 99.406590][ T6667] ? __pfx__copy_from_iter+0x10/0x10 [ 99.406614][ T6667] ? __build_skb_around+0x257/0x3e0 [ 99.406638][ T6667] ? netlink_sendmsg+0x642/0xb30 [ 99.406656][ T6667] ? skb_put+0x11b/0x210 [ 99.406679][ T6667] netlink_sendmsg+0x6b2/0xb30 [ 99.406708][ T6667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.406729][ T6667] ? aa_sock_msg_perm+0x94/0x160 [ 99.406750][ T6667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.406778][ T6667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.406798][ T6667] __sock_sendmsg+0x21c/0x270 [ 99.406819][ T6667] __sys_sendto+0x3bd/0x520 [ 99.406841][ T6667] ? __pfx___sys_sendto+0x10/0x10 [ 99.406871][ T6667] ? count_memcg_event_mm+0x21/0x260 [ 99.406904][ T6667] ? exc_page_fault+0x76/0xf0 [ 99.406923][ T6667] ? do_user_addr_fault+0xc8a/0x1390 [ 99.406947][ T6667] __x64_sys_sendto+0xde/0x100 [ 99.406971][ T6667] do_syscall_64+0xfa/0x3b0 [ 99.406986][ T6667] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.407001][ T6667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.407016][ T6667] ? clear_bhb_loop+0x60/0xb0 [ 99.407035][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.407051][ T6667] RIP: 0033:0x7f1f53d907bc [ 99.407066][ T6667] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 99.407078][ T6667] RSP: 002b:00007f1f54b3bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 99.407096][ T6667] RAX: ffffffffffffffda RBX: 00007f1f54b3bfc0 RCX: 00007f1f53d907bc [ 99.407107][ T6667] RDX: 000000000000001c RSI: 00007f1f54b3c010 RDI: 0000000000000006 [ 99.407117][ T6667] RBP: 0000000000000000 R08: 00007f1f54b3bf14 R09: 000000000000000c [ 99.407128][ T6667] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 99.407138][ T6667] R13: 00007f1f54b3bf68 R14: 00007f1f54b3c010 R15: 0000000000000000 [ 99.407163][ T6667] [ 99.976979][ T6678] xt_HMARK: spi-set and port-set can't be combined [ 100.446488][ T5849] Bluetooth: hci0: command 0x0401 tx timeout [ 100.452615][ T5843] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 100.728700][ T6709] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 100.801713][ T6717] __nla_validate_parse: 7 callbacks suppressed [ 100.801732][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 100.843683][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 101.060737][ T6727] xt_HMARK: spi-set and port-set can't be combined [ 101.061151][ T6728] FAULT_INJECTION: forcing a failure. [ 101.061151][ T6728] name failslab, interval 1, probability 0, space 0, times 0 [ 101.108021][ T6728] CPU: 1 UID: 0 PID: 6728 Comm: syz.0.245 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 101.108046][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.108055][ T6728] Call Trace: [ 101.108062][ T6728] [ 101.108069][ T6728] dump_stack_lvl+0x189/0x250 [ 101.108095][ T6728] ? __pfx____ratelimit+0x10/0x10 [ 101.108113][ T6728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.108135][ T6728] ? __pfx__printk+0x10/0x10 [ 101.108156][ T6728] ? __pfx___might_resched+0x10/0x10 [ 101.108178][ T6728] ? fs_reclaim_acquire+0x7d/0x100 [ 101.108200][ T6728] should_fail_ex+0x414/0x560 [ 101.108225][ T6728] should_failslab+0xa8/0x100 [ 101.108244][ T6728] __kmalloc_noprof+0xcb/0x4f0 [ 101.108259][ T6728] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 101.108282][ T6728] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 101.108306][ T6728] genl_family_rcv_msg_doit+0xb8/0x300 [ 101.108329][ T6728] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 101.108355][ T6728] ? rcu_is_watching+0x15/0xb0 [ 101.108381][ T6728] ? apparmor_capable+0x137/0x1b0 [ 101.108399][ T6728] ? bpf_lsm_capable+0x9/0x20 [ 101.108412][ T6728] ? security_capable+0x7e/0x2e0 [ 101.108439][ T6728] genl_rcv_msg+0x60e/0x790 [ 101.108468][ T6728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.108488][ T6728] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 101.108508][ T6728] ? __pfx_nl802154_add_llsec_seclevel+0x10/0x10 [ 101.108525][ T6728] ? __pfx_nl802154_post_doit+0x10/0x10 [ 101.108563][ T6728] netlink_rcv_skb+0x205/0x470 [ 101.108584][ T6728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.108607][ T6728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.108644][ T6728] ? down_read+0x1ad/0x2e0 [ 101.108665][ T6728] genl_rcv+0x28/0x40 [ 101.108684][ T6728] netlink_unicast+0x758/0x8d0 [ 101.108724][ T6728] netlink_sendmsg+0x805/0xb30 [ 101.108753][ T6728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.108776][ T6728] ? aa_sock_msg_perm+0x94/0x160 [ 101.108795][ T6728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 101.108813][ T6728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.108833][ T6728] __sock_sendmsg+0x21c/0x270 [ 101.108854][ T6728] ____sys_sendmsg+0x505/0x830 [ 101.108880][ T6728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.108913][ T6728] ? import_iovec+0x74/0xa0 [ 101.108933][ T6728] ___sys_sendmsg+0x21f/0x2a0 [ 101.108956][ T6728] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.109011][ T6728] ? __fget_files+0x2a/0x420 [ 101.109028][ T6728] ? __fget_files+0x3a0/0x420 [ 101.109056][ T6728] __x64_sys_sendmsg+0x19b/0x260 [ 101.109080][ T6728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 101.109110][ T6728] ? __pfx_ksys_write+0x10/0x10 [ 101.109132][ T6728] ? do_syscall_64+0xbe/0x3b0 [ 101.109151][ T6728] do_syscall_64+0xfa/0x3b0 [ 101.109165][ T6728] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.109180][ T6728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.109196][ T6728] ? clear_bhb_loop+0x60/0xb0 [ 101.109215][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.109230][ T6728] RIP: 0033:0x7f7727d8e929 [ 101.109245][ T6728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.109257][ T6728] RSP: 002b:00007f7728bcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.109275][ T6728] RAX: ffffffffffffffda RBX: 00007f7727fb6080 RCX: 00007f7727d8e929 [ 101.109288][ T6728] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000004 [ 101.109298][ T6728] RBP: 00007f7728bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 101.109307][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.109317][ T6728] R13: 0000000000000001 R14: 00007f7727fb6080 R15: 00007ffda93c3758 [ 101.109345][ T6728] [ 101.115489][ T6732] Driver unsupported XDP return value 0 on prog (id 78) dev N/A, expect packet loss! [ 101.553322][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 102.059487][ T6765] FAULT_INJECTION: forcing a failure. [ 102.059487][ T6765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.137907][ T6765] CPU: 1 UID: 0 PID: 6765 Comm: syz.1.254 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 102.137935][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.137944][ T6765] Call Trace: [ 102.137950][ T6765] [ 102.137958][ T6765] dump_stack_lvl+0x189/0x250 [ 102.137986][ T6765] ? __pfx____ratelimit+0x10/0x10 [ 102.138003][ T6765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.138024][ T6765] ? __pfx__printk+0x10/0x10 [ 102.138050][ T6765] should_fail_ex+0x414/0x560 [ 102.138076][ T6765] _copy_to_user+0x31/0xb0 [ 102.138095][ T6765] simple_read_from_buffer+0xe1/0x170 [ 102.138115][ T6765] proc_fail_nth_read+0x1df/0x250 [ 102.138137][ T6765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.138159][ T6765] ? rw_verify_area+0x258/0x650 [ 102.138181][ T6765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.138201][ T6765] vfs_read+0x1fd/0x980 [ 102.138229][ T6765] ? __pfx___mutex_lock+0x10/0x10 [ 102.138247][ T6765] ? __pfx_vfs_read+0x10/0x10 [ 102.138271][ T6765] ? __fget_files+0x2a/0x420 [ 102.138290][ T6765] ? __fget_files+0x3a0/0x420 [ 102.138304][ T6765] ? __fget_files+0x2a/0x420 [ 102.138327][ T6765] ksys_read+0x145/0x250 [ 102.138344][ T6765] ? __pfx_ksys_read+0x10/0x10 [ 102.138361][ T6765] ? rcu_is_watching+0x15/0xb0 [ 102.138384][ T6765] ? do_syscall_64+0xbe/0x3b0 [ 102.138401][ T6765] do_syscall_64+0xfa/0x3b0 [ 102.138414][ T6765] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.138429][ T6765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.138444][ T6765] ? clear_bhb_loop+0x60/0xb0 [ 102.138461][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.138474][ T6765] RIP: 0033:0x7f2bc6f8d33c [ 102.138488][ T6765] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.138500][ T6765] RSP: 002b:00007f2bc7e81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.138517][ T6765] RAX: ffffffffffffffda RBX: 00007f2bc71b5fa0 RCX: 00007f2bc6f8d33c [ 102.138529][ T6765] RDX: 000000000000000f RSI: 00007f2bc7e810a0 RDI: 0000000000000005 [ 102.138539][ T6765] RBP: 00007f2bc7e81090 R08: 0000000000000000 R09: 0000000000000000 [ 102.138548][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.138556][ T6765] R13: 0000000000000000 R14: 00007f2bc71b5fa0 R15: 00007ffda8f74e98 [ 102.138579][ T6765] [ 102.535173][ T6779] xt_HMARK: spi-set and port-set can't be combined [ 102.643777][ T6772] FAULT_INJECTION: forcing a failure. [ 102.643777][ T6772] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.657086][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz.0.264 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 102.657110][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.657120][ T6772] Call Trace: [ 102.657127][ T6772] [ 102.657135][ T6772] dump_stack_lvl+0x189/0x250 [ 102.657162][ T6772] ? __pfx____ratelimit+0x10/0x10 [ 102.657179][ T6772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.657203][ T6772] ? __pfx__printk+0x10/0x10 [ 102.657223][ T6772] ? fs_reclaim_acquire+0x7d/0x100 [ 102.657250][ T6772] should_fail_ex+0x414/0x560 [ 102.657276][ T6772] prepare_alloc_pages+0x213/0x610 [ 102.657304][ T6772] __alloc_frozen_pages_noprof+0x123/0x370 [ 102.657328][ T6772] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.657366][ T6772] alloc_pages_mpol+0x232/0x4a0 [ 102.657390][ T6772] alloc_pages_noprof+0xa9/0x190 [ 102.657410][ T6772] pte_alloc_one+0x21/0x170 [ 102.657436][ T6772] __pte_alloc+0x25/0x1a0 [ 102.657456][ T6772] __handle_mm_fault+0x4b8a/0x5620 [ 102.657496][ T6772] ? __pfx___handle_mm_fault+0x10/0x10 [ 102.657535][ T6772] ? __pfx___might_resched+0x10/0x10 [ 102.657560][ T6772] handle_mm_fault+0x40a/0x8e0 [ 102.657590][ T6772] __get_user_pages+0x1af4/0x30b0 [ 102.657647][ T6772] ? __pfx___get_user_pages+0x10/0x10 [ 102.657667][ T6772] ? __gup_longterm_locked+0xbf7/0x15b0 [ 102.657688][ T6772] ? down_read_killable+0x1d1/0x350 [ 102.657718][ T6772] __gup_longterm_locked+0xd66/0x15b0 [ 102.657751][ T6772] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 102.657776][ T6772] ? gup_fast_fallback+0x1afc/0x2260 [ 102.657799][ T6772] gup_fast_fallback+0x1cd4/0x2260 [ 102.657817][ T6772] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 102.657867][ T6772] ? __pfx_gup_fast_fallback+0x10/0x10 [ 102.657885][ T6772] ? blake2b_compress_generic+0x20db/0x2110 [ 102.657921][ T6772] ? pin_user_pages_fast+0x4d/0xb0 [ 102.657945][ T6772] iov_iter_extract_pages+0x35a/0x5e0 [ 102.657972][ T6772] extract_iter_to_sg+0xe46/0x24e0 [ 102.658003][ T6772] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 102.658029][ T6772] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 102.658051][ T6772] ? unpin_user_page+0xc9/0x1d0 [ 102.658071][ T6772] ? __pfx_unpin_user_page+0x10/0x10 [ 102.658104][ T6772] ? __asan_memset+0x22/0x50 [ 102.658128][ T6772] hash_sendmsg+0x4f4/0x11d0 [ 102.658172][ T6772] ? __pfx_hash_sendmsg+0x10/0x10 [ 102.658193][ T6772] __sock_sendmsg+0x21c/0x270 [ 102.658215][ T6772] ____sys_sendmsg+0x52d/0x830 [ 102.658244][ T6772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.658277][ T6772] ? import_iovec+0x74/0xa0 [ 102.658298][ T6772] ___sys_sendmsg+0x21f/0x2a0 [ 102.658323][ T6772] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.658386][ T6772] ? __fget_files+0x2a/0x420 [ 102.658403][ T6772] ? __fget_files+0x3a0/0x420 [ 102.658432][ T6772] __sys_sendmmsg+0x227/0x430 [ 102.658460][ T6772] ? __pfx___sys_sendmmsg+0x10/0x10 [ 102.658480][ T6772] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 102.658526][ T6772] ? ksys_write+0x22a/0x250 [ 102.658544][ T6772] ? __pfx_ksys_write+0x10/0x10 [ 102.658558][ T6772] ? rcu_is_watching+0x15/0xb0 [ 102.658589][ T6772] __x64_sys_sendmmsg+0xa0/0xc0 [ 102.658612][ T6772] do_syscall_64+0xfa/0x3b0 [ 102.658628][ T6772] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.658643][ T6772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.658658][ T6772] ? clear_bhb_loop+0x60/0xb0 [ 102.658678][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.658693][ T6772] RIP: 0033:0x7f7727d8e929 [ 102.658708][ T6772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.658727][ T6772] RSP: 002b:00007f7728bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.658745][ T6772] RAX: ffffffffffffffda RBX: 00007f7727fb5fa0 RCX: 00007f7727d8e929 [ 102.658757][ T6772] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 102.658767][ T6772] RBP: 00007f7728bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 102.658777][ T6772] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 102.658787][ T6772] R13: 0000000000000000 R14: 00007f7727fb5fa0 R15: 00007ffda93c3758 [ 102.658815][ T6772] [ 103.352788][ T6800] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.636231][ T5849] Bluetooth: hci0: command 0x0401 tx timeout [ 103.642333][ T5843] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 103.710647][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 103.737598][ T6819] netlink: 'syz.1.279': attribute type 9 has an invalid length. [ 103.760408][ T5908] IPVS: starting estimator thread 0... [ 103.824011][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 103.873942][ T6819] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 103.888295][ T6822] IPVS: using max 27 ests per chain, 64800 per kthread [ 103.914985][ T6819] macvlan2: entered allmulticast mode [ 103.920598][ T6819] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 103.942292][ T6831] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 103.963000][ T6831] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 103.978712][ T6831] netlink: 192 bytes leftover after parsing attributes in process `syz.2.283'. [ 104.006502][ T6836] netlink: 132 bytes leftover after parsing attributes in process `syz.2.283'. [ 104.443766][ T6858] netlink: 172 bytes leftover after parsing attributes in process `syz.2.293'. [ 104.467584][ T6859] netlink: 56 bytes leftover after parsing attributes in process `syz.4.292'. [ 104.486171][ T6859] netlink: 56 bytes leftover after parsing attributes in process `syz.4.292'. [ 104.930168][ T6879] FAULT_INJECTION: forcing a failure. [ 104.930168][ T6879] name failslab, interval 1, probability 0, space 0, times 0 [ 104.948392][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.1.300 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 104.948420][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.948429][ T6879] Call Trace: [ 104.948436][ T6879] [ 104.948444][ T6879] dump_stack_lvl+0x189/0x250 [ 104.948472][ T6879] ? __pfx____ratelimit+0x10/0x10 [ 104.948489][ T6879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.948520][ T6879] ? __pfx__printk+0x10/0x10 [ 104.948544][ T6879] ? ref_tracker_alloc+0x318/0x460 [ 104.948568][ T6879] should_fail_ex+0x414/0x560 [ 104.948594][ T6879] should_failslab+0xa8/0x100 [ 104.948614][ T6879] kmem_cache_alloc_noprof+0x73/0x3c0 [ 104.948637][ T6879] ? skb_clone+0x212/0x3a0 [ 104.948657][ T6879] skb_clone+0x212/0x3a0 [ 104.948676][ T6879] __netlink_deliver_tap+0x404/0x850 [ 104.948709][ T6879] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.948730][ T6879] netlink_deliver_tap+0x19c/0x1b0 [ 104.948751][ T6879] netlink_unicast+0x72f/0x8d0 [ 104.948781][ T6879] netlink_sendmsg+0x805/0xb30 [ 104.948810][ T6879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.948834][ T6879] ? aa_sock_msg_perm+0x94/0x160 [ 104.948857][ T6879] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.948880][ T6879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.948901][ T6879] __sock_sendmsg+0x21c/0x270 [ 104.948922][ T6879] ____sys_sendmsg+0x505/0x830 [ 104.948950][ T6879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.948982][ T6879] ? import_iovec+0x74/0xa0 [ 104.949003][ T6879] ___sys_sendmsg+0x21f/0x2a0 [ 104.949027][ T6879] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.949085][ T6879] ? __fget_files+0x2a/0x420 [ 104.949102][ T6879] ? __fget_files+0x3a0/0x420 [ 104.949131][ T6879] __x64_sys_sendmsg+0x19b/0x260 [ 104.949155][ T6879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.949187][ T6879] ? __pfx_ksys_write+0x10/0x10 [ 104.949200][ T6879] ? rcu_is_watching+0x15/0xb0 [ 104.949228][ T6879] ? do_syscall_64+0xbe/0x3b0 [ 104.949249][ T6879] do_syscall_64+0xfa/0x3b0 [ 104.949265][ T6879] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.949281][ T6879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.949296][ T6879] ? clear_bhb_loop+0x60/0xb0 [ 104.949316][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.949331][ T6879] RIP: 0033:0x7f2bc6f8e929 [ 104.949347][ T6879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.949360][ T6879] RSP: 002b:00007f2bc7e81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.949378][ T6879] RAX: ffffffffffffffda RBX: 00007f2bc71b5fa0 RCX: 00007f2bc6f8e929 [ 104.949390][ T6879] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 104.949400][ T6879] RBP: 00007f2bc7e81090 R08: 0000000000000000 R09: 0000000000000000 [ 104.949410][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.949419][ T6879] R13: 0000000000000000 R14: 00007f2bc71b5fa0 R15: 00007ffda8f74e98 [ 104.949447][ T6879] [ 105.333138][ T6887] xt_HMARK: spi-set and port-set can't be combined [ 105.882195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 106.204565][ T6932] xt_HMARK: spi-set and port-set can't be combined [ 106.348940][ T6937] __nla_validate_parse: 4 callbacks suppressed [ 106.348958][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 106.427053][ T6937] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 106.828023][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 106.849380][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 106.870105][ T6952] netlink: 388 bytes leftover after parsing attributes in process `syz.3.325'. [ 106.880991][ T6955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.127191][ T6969] $Hÿ: renamed from bond0 (while UP) [ 107.170187][ T6969] $Hÿ: entered promiscuous mode [ 107.181005][ T6969] bond_slave_0: entered promiscuous mode [ 107.187536][ T6969] bond_slave_1: entered promiscuous mode [ 107.210733][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.332'. [ 107.227210][ T6973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.333'. [ 107.249846][ T6977] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 107.919939][ T7011] IPVS: length: 187 != 24 [ 108.549644][ T7035] xt_HMARK: spi-set and port-set can't be combined [ 108.617283][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 108.626970][ T7042] FAULT_INJECTION: forcing a failure. [ 108.626970][ T7042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.666430][ T7042] CPU: 0 UID: 0 PID: 7042 Comm: syz.2.362 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 108.666457][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.666467][ T7042] Call Trace: [ 108.666474][ T7042] [ 108.666482][ T7042] dump_stack_lvl+0x189/0x250 [ 108.666510][ T7042] ? __pfx____ratelimit+0x10/0x10 [ 108.666528][ T7042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.666550][ T7042] ? __pfx__printk+0x10/0x10 [ 108.666571][ T7042] ? __pfx_migrate_enable+0x10/0x10 [ 108.666596][ T7042] should_fail_ex+0x414/0x560 [ 108.666621][ T7042] _copy_to_user+0x31/0xb0 [ 108.666640][ T7042] generic_map_lookup_batch+0x896/0xcc0 [ 108.666674][ T7042] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 108.666693][ T7042] ? __fget_files+0x2a/0x420 [ 108.666715][ T7042] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 108.666735][ T7042] bpf_map_do_batch+0x25b/0x5f0 [ 108.666757][ T7042] ? security_bpf+0x7e/0x300 [ 108.666778][ T7042] __sys_bpf+0x70c/0x860 [ 108.666799][ T7042] ? __pfx___sys_bpf+0x10/0x10 [ 108.666830][ T7042] ? ksys_write+0x22a/0x250 [ 108.666848][ T7042] ? __pfx_ksys_write+0x10/0x10 [ 108.666862][ T7042] ? rcu_is_watching+0x15/0xb0 [ 108.666897][ T7042] __x64_sys_bpf+0x7c/0x90 [ 108.666917][ T7042] do_syscall_64+0xfa/0x3b0 [ 108.666933][ T7042] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.666949][ T7042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.666965][ T7042] ? clear_bhb_loop+0x60/0xb0 [ 108.666985][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.667001][ T7042] RIP: 0033:0x7f1f53d8e929 [ 108.667016][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.667029][ T7042] RSP: 002b:00007f1f54b3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.667047][ T7042] RAX: ffffffffffffffda RBX: 00007f1f53fb5fa0 RCX: 00007f1f53d8e929 [ 108.667059][ T7042] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 108.667070][ T7042] RBP: 00007f1f54b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 108.667080][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.667090][ T7042] R13: 0000000000000000 R14: 00007f1f53fb5fa0 R15: 00007fff173d3858 [ 108.667117][ T7042] [ 108.958336][ T7047] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.020695][ T7053] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 109.422792][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 109.447439][ T7072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.373'. [ 109.563963][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 109.643050][ T7082] smc: net device bond0 applied user defined pnetid SYZ2 [ 109.696621][ T7085] smc: net device bond0 erased user defined pnetid SYZ2 [ 109.796555][ T5843] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 109.799407][ T5849] Bluetooth: hci0: command 0x0401 tx timeout [ 110.226243][ T7116] FAULT_INJECTION: forcing a failure. [ 110.226243][ T7116] name failslab, interval 1, probability 0, space 0, times 0 [ 110.309333][ T7116] CPU: 1 UID: 0 PID: 7116 Comm: syz.2.386 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 110.309359][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.309369][ T7116] Call Trace: [ 110.309376][ T7116] [ 110.309384][ T7116] dump_stack_lvl+0x189/0x250 [ 110.309413][ T7116] ? __pfx____ratelimit+0x10/0x10 [ 110.309430][ T7116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.309457][ T7116] ? __pfx__printk+0x10/0x10 [ 110.309481][ T7116] ? __pfx___might_resched+0x10/0x10 [ 110.309503][ T7116] ? fs_reclaim_acquire+0x7d/0x100 [ 110.309527][ T7116] should_fail_ex+0x414/0x560 [ 110.309554][ T7116] should_failslab+0xa8/0x100 [ 110.309574][ T7116] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 110.309591][ T7116] ? __alloc_skb+0x112/0x2d0 [ 110.309616][ T7116] __alloc_skb+0x112/0x2d0 [ 110.309640][ T7116] netlink_ack+0x146/0xa50 [ 110.309658][ T7116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.309678][ T7116] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 110.309708][ T7116] ? __pfx_nl802154_post_doit+0x10/0x10 [ 110.309744][ T7116] netlink_rcv_skb+0x28c/0x470 [ 110.309765][ T7116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.309790][ T7116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.309827][ T7116] ? down_read+0x1ad/0x2e0 [ 110.309847][ T7116] genl_rcv+0x28/0x40 [ 110.309865][ T7116] netlink_unicast+0x758/0x8d0 [ 110.309894][ T7116] netlink_sendmsg+0x805/0xb30 [ 110.309922][ T7116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.309945][ T7116] ? aa_sock_msg_perm+0x94/0x160 [ 110.309967][ T7116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.309986][ T7116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.310007][ T7116] __sock_sendmsg+0x21c/0x270 [ 110.310030][ T7116] ____sys_sendmsg+0x505/0x830 [ 110.310057][ T7116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.310089][ T7116] ? import_iovec+0x74/0xa0 [ 110.310111][ T7116] ___sys_sendmsg+0x21f/0x2a0 [ 110.310136][ T7116] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.310193][ T7116] ? __fget_files+0x2a/0x420 [ 110.310209][ T7116] ? __fget_files+0x3a0/0x420 [ 110.310237][ T7116] __x64_sys_sendmsg+0x19b/0x260 [ 110.310261][ T7116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.310289][ T7116] ? __pfx_ksys_write+0x10/0x10 [ 110.310310][ T7116] ? do_syscall_64+0xbe/0x3b0 [ 110.310331][ T7116] do_syscall_64+0xfa/0x3b0 [ 110.310346][ T7116] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.310359][ T7116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.310373][ T7116] ? clear_bhb_loop+0x60/0xb0 [ 110.310393][ T7116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.310409][ T7116] RIP: 0033:0x7f1f53d8e929 [ 110.310422][ T7116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.310434][ T7116] RSP: 002b:00007f1f54b1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.310451][ T7116] RAX: ffffffffffffffda RBX: 00007f1f53fb6080 RCX: 00007f1f53d8e929 [ 110.310461][ T7116] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000004 [ 110.310471][ T7116] RBP: 00007f1f54b1c090 R08: 0000000000000000 R09: 0000000000000000 [ 110.310481][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.310491][ T7116] R13: 0000000000000001 R14: 00007f1f53fb6080 R15: 00007fff173d3858 [ 110.310520][ T7116] [ 111.022452][ T7145] netlink: 'syz.1.398': attribute type 9 has an invalid length. [ 111.073615][ T7145] macvlan3: entered allmulticast mode [ 111.323255][ T7160] netlink: 'syz.0.406': attribute type 11 has an invalid length. [ 111.605405][ T7175] __nla_validate_parse: 12 callbacks suppressed [ 111.605424][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 111.642337][ T7165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.407'. [ 111.662743][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 111.673485][ T7177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.411'. [ 111.916752][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.414'. [ 111.925812][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.414'. [ 111.967634][ T7189] pim6reg9: entered allmulticast mode [ 112.318944][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 112.368607][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 112.473198][ T7217] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 112.489796][ T7208] syzkaller0: entered promiscuous mode [ 112.503598][ T7208] syzkaller0: entered allmulticast mode [ 112.511104][ T7220] syzkaller0: refused to change device tx_queue_len [ 112.733879][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 112.929234][ T7242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.996147][ T5849] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 113.000550][ T5843] Bluetooth: hci0: command 0x0401 tx timeout [ 114.164671][ T7256] FAULT_INJECTION: forcing a failure. [ 114.164671][ T7256] name failslab, interval 1, probability 0, space 0, times 0 [ 114.185557][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.3.436 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 114.185583][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.185599][ T7256] Call Trace: [ 114.185607][ T7256] [ 114.185614][ T7256] dump_stack_lvl+0x189/0x250 [ 114.185641][ T7256] ? __pfx____ratelimit+0x10/0x10 [ 114.185658][ T7256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.185679][ T7256] ? __pfx__printk+0x10/0x10 [ 114.185702][ T7256] ? __pfx___might_resched+0x10/0x10 [ 114.185723][ T7256] ? fs_reclaim_acquire+0x7d/0x100 [ 114.185747][ T7256] should_fail_ex+0x414/0x560 [ 114.185772][ T7256] should_failslab+0xa8/0x100 [ 114.185791][ T7256] __kmalloc_noprof+0xcb/0x4f0 [ 114.185807][ T7256] ? bpf_test_init+0xc2/0x170 [ 114.185829][ T7256] bpf_test_init+0xc2/0x170 [ 114.185868][ T7256] bpf_prog_test_run_xdp+0x37c/0x1000 [ 114.185903][ T7256] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.185927][ T7256] ? __fget_files+0x2a/0x420 [ 114.185949][ T7256] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.185968][ T7256] bpf_prog_test_run+0x2c4/0x340 [ 114.185993][ T7256] __sys_bpf+0x4a4/0x860 [ 114.186015][ T7256] ? __pfx___sys_bpf+0x10/0x10 [ 114.186047][ T7256] ? ksys_write+0x22a/0x250 [ 114.186063][ T7256] ? __pfx_ksys_write+0x10/0x10 [ 114.186074][ T7256] ? rcu_is_watching+0x15/0xb0 [ 114.186103][ T7256] __x64_sys_bpf+0x7c/0x90 [ 114.186122][ T7256] do_syscall_64+0xfa/0x3b0 [ 114.186138][ T7256] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.186154][ T7256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.186170][ T7256] ? clear_bhb_loop+0x60/0xb0 [ 114.186189][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.186204][ T7256] RIP: 0033:0x7f4a3df8e929 [ 114.186219][ T7256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.186232][ T7256] RSP: 002b:00007f4a3ed28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.186250][ T7256] RAX: ffffffffffffffda RBX: 00007f4a3e1b5fa0 RCX: 00007f4a3df8e929 [ 114.186262][ T7256] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 114.186273][ T7256] RBP: 00007f4a3ed28090 R08: 0000000000000000 R09: 0000000000000000 [ 114.186283][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.186292][ T7256] R13: 0000000000000000 R14: 00007f4a3e1b5fa0 R15: 00007fff05272da8 [ 114.186320][ T7256] [ 114.507778][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 114.737357][ T7276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 114.911811][ T7286] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 114.994923][ T7290] xt_HMARK: spi-set and port-set can't be combined [ 115.705478][ T7304] netlink: 'syz.4.456': attribute type 18 has an invalid length. [ 116.541954][ T7333] xt_HMARK: spi-set and port-set can't be combined [ 116.601560][ T5849] Bluetooth: hci0: command 0x0401 tx timeout [ 116.608761][ T5843] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 116.627739][ T7337] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 116.938595][ T7354] __nla_validate_parse: 9 callbacks suppressed [ 116.938614][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 116.949468][ T7351] syzkaller0: entered promiscuous mode [ 116.960054][ T7351] syzkaller0: entered allmulticast mode [ 116.989627][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 118.081150][ T5843] Bluetooth: hci4: link tx timeout [ 118.091723][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.109169][ T7380] xt_HMARK: spi-set and port-set can't be combined [ 118.162311][ T7382] sctp: [Deprecated]: syz.0.479 (pid 7382) Use of int in maxseg socket option. [ 118.162311][ T7382] Use struct sctp_assoc_value instead [ 118.197886][ T7383] sctp: [Deprecated]: syz.0.479 (pid 7383) Use of int in maxseg socket option. [ 118.197886][ T7383] Use struct sctp_assoc_value instead [ 118.676840][ T5849] Bluetooth: hci0: command 0x0401 tx timeout [ 118.812027][ T7395] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 118.841428][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 118.852697][ T7398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.483'. [ 118.970726][ T7405] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 119.534802][ T7418] xt_HMARK: spi-set and port-set can't be combined [ 119.727256][ T7422] FAULT_INJECTION: forcing a failure. [ 119.727256][ T7422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.745000][ T7422] CPU: 1 UID: 0 PID: 7422 Comm: syz.0.492 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 119.745028][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.745037][ T7422] Call Trace: [ 119.745045][ T7422] [ 119.745053][ T7422] dump_stack_lvl+0x189/0x250 [ 119.745081][ T7422] ? __pfx____ratelimit+0x10/0x10 [ 119.745099][ T7422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.745122][ T7422] ? __pfx__printk+0x10/0x10 [ 119.745142][ T7422] ? __pfx_migrate_enable+0x10/0x10 [ 119.745166][ T7422] should_fail_ex+0x414/0x560 [ 119.745192][ T7422] _copy_to_user+0x31/0xb0 [ 119.745212][ T7422] generic_map_lookup_batch+0x896/0xcc0 [ 119.745246][ T7422] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 119.745265][ T7422] ? __fget_files+0x2a/0x420 [ 119.745287][ T7422] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 119.745306][ T7422] bpf_map_do_batch+0x25b/0x5f0 [ 119.745332][ T7422] ? security_bpf+0x7e/0x300 [ 119.745353][ T7422] __sys_bpf+0x70c/0x860 [ 119.745376][ T7422] ? __pfx___sys_bpf+0x10/0x10 [ 119.745407][ T7422] ? ksys_write+0x22a/0x250 [ 119.745423][ T7422] ? __pfx_ksys_write+0x10/0x10 [ 119.745436][ T7422] ? rcu_is_watching+0x15/0xb0 [ 119.745466][ T7422] __x64_sys_bpf+0x7c/0x90 [ 119.745486][ T7422] do_syscall_64+0xfa/0x3b0 [ 119.745501][ T7422] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.745517][ T7422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.745533][ T7422] ? clear_bhb_loop+0x60/0xb0 [ 119.745552][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.745568][ T7422] RIP: 0033:0x7f7727d8e929 [ 119.745583][ T7422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.745596][ T7422] RSP: 002b:00007f7728bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.745613][ T7422] RAX: ffffffffffffffda RBX: 00007f7727fb5fa0 RCX: 00007f7727d8e929 [ 119.745624][ T7422] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 119.745631][ T7422] RBP: 00007f7728bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 119.745640][ T7422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.745649][ T7422] R13: 0000000000000000 R14: 00007f7727fb5fa0 R15: 00007ffda93c3758 [ 119.745677][ T7422] [ 120.071351][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 120.116483][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 120.132136][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.494'. [ 120.721082][ T7437] syzkaller0: entered promiscuous mode [ 120.727237][ T7437] syzkaller0: entered allmulticast mode [ 120.764251][ T7448] netlink: 'syz.4.496': attribute type 1 has an invalid length. [ 120.776132][ T7448] netlink: 'syz.4.496': attribute type 1 has an invalid length. [ 120.804234][ T7448] netlink: 192 bytes leftover after parsing attributes in process `syz.4.496'. [ 122.168860][ T7448] netlink: 132 bytes leftover after parsing attributes in process `syz.4.496'. [ 122.401740][ T7483] xt_HMARK: spi-set and port-set can't be combined [ 122.411040][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 122.433212][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 124.691861][ T7518] FAULT_INJECTION: forcing a failure. [ 124.691861][ T7518] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.739996][ T7518] CPU: 1 UID: 0 PID: 7518 Comm: syz.3.516 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 124.740024][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.740033][ T7518] Call Trace: [ 124.740041][ T7518] [ 124.740048][ T7518] dump_stack_lvl+0x189/0x250 [ 124.740076][ T7518] ? __pfx____ratelimit+0x10/0x10 [ 124.740092][ T7518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.740115][ T7518] ? __pfx__printk+0x10/0x10 [ 124.740134][ T7518] ? fs_reclaim_acquire+0x7d/0x100 [ 124.740161][ T7518] should_fail_ex+0x414/0x560 [ 124.740187][ T7518] prepare_alloc_pages+0x213/0x610 [ 124.740214][ T7518] __alloc_frozen_pages_noprof+0x123/0x370 [ 124.740238][ T7518] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 124.740277][ T7518] alloc_pages_mpol+0x232/0x4a0 [ 124.740312][ T7518] alloc_pages_noprof+0xa9/0x190 [ 124.740332][ T7518] pte_alloc_one+0x21/0x170 [ 124.740357][ T7518] __pte_alloc+0x25/0x1a0 [ 124.740381][ T7518] __handle_mm_fault+0x4b8a/0x5620 [ 124.740424][ T7518] ? __pfx___handle_mm_fault+0x10/0x10 [ 124.740467][ T7518] ? __pfx___might_resched+0x10/0x10 [ 124.740493][ T7518] handle_mm_fault+0x40a/0x8e0 [ 124.740527][ T7518] __get_user_pages+0x1af4/0x30b0 [ 124.740586][ T7518] ? __pfx___get_user_pages+0x10/0x10 [ 124.740607][ T7518] ? __gup_longterm_locked+0xbf7/0x15b0 [ 124.740629][ T7518] ? down_read_killable+0x1d1/0x350 [ 124.740652][ T7518] __gup_longterm_locked+0xd66/0x15b0 [ 124.740687][ T7518] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 124.740711][ T7518] ? gup_fast_fallback+0x1afc/0x2260 [ 124.740737][ T7518] gup_fast_fallback+0x1cd4/0x2260 [ 124.740756][ T7518] ? trace_irq_disable+0x37/0x110 [ 124.740813][ T7518] ? __pfx_gup_fast_fallback+0x10/0x10 [ 124.740832][ T7518] ? blake2b_compress_generic+0x20db/0x2110 [ 124.740868][ T7518] ? pin_user_pages_fast+0x4d/0xb0 [ 124.740892][ T7518] iov_iter_extract_pages+0x35a/0x5e0 [ 124.740918][ T7518] extract_iter_to_sg+0xe46/0x24e0 [ 124.740949][ T7518] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 124.740975][ T7518] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 124.740997][ T7518] ? unpin_user_page+0xc9/0x1d0 [ 124.741016][ T7518] ? __pfx_unpin_user_page+0x10/0x10 [ 124.741048][ T7518] ? __asan_memset+0x22/0x50 [ 124.741072][ T7518] hash_sendmsg+0x4f4/0x11d0 [ 124.741117][ T7518] ? __pfx_hash_sendmsg+0x10/0x10 [ 124.741138][ T7518] __sock_sendmsg+0x21c/0x270 [ 124.741160][ T7518] ____sys_sendmsg+0x52d/0x830 [ 124.741189][ T7518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.741220][ T7518] ? import_iovec+0x74/0xa0 [ 124.741240][ T7518] ___sys_sendmsg+0x21f/0x2a0 [ 124.741264][ T7518] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.741327][ T7518] ? __fget_files+0x2a/0x420 [ 124.741344][ T7518] ? __fget_files+0x3a0/0x420 [ 124.741371][ T7518] __sys_sendmmsg+0x227/0x430 [ 124.741400][ T7518] ? __pfx___sys_sendmmsg+0x10/0x10 [ 124.741419][ T7518] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 124.741464][ T7518] ? ksys_write+0x22a/0x250 [ 124.741483][ T7518] ? __pfx_ksys_write+0x10/0x10 [ 124.741496][ T7518] ? rcu_is_watching+0x15/0xb0 [ 124.741527][ T7518] __x64_sys_sendmmsg+0xa0/0xc0 [ 124.741550][ T7518] do_syscall_64+0xfa/0x3b0 [ 124.741566][ T7518] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.741581][ T7518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.741596][ T7518] ? clear_bhb_loop+0x60/0xb0 [ 124.741616][ T7518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.741630][ T7518] RIP: 0033:0x7f4a3df8e929 [ 124.741652][ T7518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.741669][ T7518] RSP: 002b:00007f4a3ed28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.741687][ T7518] RAX: ffffffffffffffda RBX: 00007f4a3e1b5fa0 RCX: 00007f4a3df8e929 [ 124.741698][ T7518] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 124.741706][ T7518] RBP: 00007f4a3ed28090 R08: 0000000000000000 R09: 0000000000000000 [ 124.741716][ T7518] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 124.741726][ T7518] R13: 0000000000000000 R14: 00007f4a3e1b5fa0 R15: 00007fff05272da8 [ 124.741753][ T7518] [ 124.790956][ T7522] syzkaller0: entered promiscuous mode [ 124.809805][ T7532] xt_HMARK: spi-set and port-set can't be combined [ 124.848030][ T7522] syzkaller0: entered allmulticast mode [ 125.185414][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 125.199308][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.522'. [ 126.844011][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 126.846269][ T7576] xt_HMARK: spi-set and port-set can't be combined [ 126.873169][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 127.192411][ T7595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.541'. [ 127.340590][ T7592] syzkaller0: entered promiscuous mode [ 127.368562][ T7605] netlink: 428 bytes leftover after parsing attributes in process `syz.2.543'. [ 127.419498][ T7592] syzkaller0: entered allmulticast mode [ 127.446657][ T7607] x_tables: duplicate underflow at hook 1 [ 127.477883][ T7605] netlink: 32 bytes leftover after parsing attributes in process `syz.2.543'. [ 127.689408][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 127.699017][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 127.716315][ T7609] netlink: 'syz.4.544': attribute type 18 has an invalid length. [ 127.732045][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 127.833098][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 127.890977][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 127.967911][ T7623] xt_HMARK: spi-set and port-set can't be combined [ 129.150703][ T7636] netlink: 44 bytes leftover after parsing attributes in process `syz.1.553'. [ 129.425425][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'. [ 129.784434][ T7665] xt_HMARK: spi-set and port-set can't be combined [ 130.330674][ T7691] netlink: 'syz.3.572': attribute type 4 has an invalid length. [ 130.618012][ T7710] xt_HMARK: spi-set and port-set can't be combined [ 130.691515][ T7715] syzkaller1: entered promiscuous mode [ 130.708254][ T7715] syzkaller1: entered allmulticast mode [ 131.070524][ T7731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.333822][ T7731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.410774][ T7752] netlink: 'syz.4.593': attribute type 6 has an invalid length. [ 131.426200][ T7752] netlink: 'syz.4.593': attribute type 7 has an invalid length. [ 131.444483][ T7752] netlink: 'syz.4.593': attribute type 8 has an invalid length. [ 131.545271][ T7731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.556302][ T5849] Bluetooth: hci0: command 0x0401 tx timeout [ 131.556372][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 131.607132][ T7757] xt_HMARK: spi-set and port-set can't be combined [ 131.683185][ T7761] netlink: 'syz.3.597': attribute type 2 has an invalid length. [ 131.869600][ T7731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.150633][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.193932][ T3477] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.229696][ T3477] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.289090][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.403490][ T7777] __nla_validate_parse: 1 callbacks suppressed [ 132.403955][ T7777] netlink: 48 bytes leftover after parsing attributes in process `syz.0.603'. [ 132.743889][ T7794] xt_HMARK: spi-set and port-set can't be combined [ 132.932177][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 132.942901][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.610'. [ 133.272243][ T7805] syzkaller0: entered promiscuous mode [ 133.286209][ T7805] syzkaller0: entered allmulticast mode [ 133.393760][ T7813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.957439][ T7827] FAULT_INJECTION: forcing a failure. [ 133.957439][ T7827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.976311][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.1.616 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 133.976337][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.976346][ T7827] Call Trace: [ 133.976353][ T7827] [ 133.976360][ T7827] dump_stack_lvl+0x189/0x250 [ 133.976388][ T7827] ? __pfx____ratelimit+0x10/0x10 [ 133.976405][ T7827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.976426][ T7827] ? __pfx__printk+0x10/0x10 [ 133.976444][ T7827] ? __might_fault+0xb0/0x130 [ 133.976468][ T7827] should_fail_ex+0x414/0x560 [ 133.976491][ T7827] _copy_from_user+0x2d/0xb0 [ 133.976506][ T7827] ___sys_sendmsg+0x158/0x2a0 [ 133.976529][ T7827] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.976582][ T7827] ? __fget_files+0x2a/0x420 [ 133.976597][ T7827] ? __fget_files+0x3a0/0x420 [ 133.976622][ T7827] __sys_sendmmsg+0x227/0x430 [ 133.976646][ T7827] ? __pfx___sys_sendmmsg+0x10/0x10 [ 133.976674][ T7827] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 133.976715][ T7827] ? ksys_write+0x22a/0x250 [ 133.976733][ T7827] ? __pfx_ksys_write+0x10/0x10 [ 133.976744][ T7827] ? rcu_is_watching+0x15/0xb0 [ 133.976772][ T7827] __x64_sys_sendmmsg+0xa0/0xc0 [ 133.976795][ T7827] do_syscall_64+0xfa/0x3b0 [ 133.976809][ T7827] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.976823][ T7827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.976838][ T7827] ? clear_bhb_loop+0x60/0xb0 [ 133.976857][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.976871][ T7827] RIP: 0033:0x7f2bc6f8e929 [ 133.976886][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.976899][ T7827] RSP: 002b:00007f2bc7e81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.976917][ T7827] RAX: ffffffffffffffda RBX: 00007f2bc71b5fa0 RCX: 00007f2bc6f8e929 [ 133.976945][ T7827] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 133.976956][ T7827] RBP: 00007f2bc7e81090 R08: 0000000000000000 R09: 0000000000000000 [ 133.976965][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.976973][ T7827] R13: 0000000000000000 R14: 00007f2bc71b5fa0 R15: 00007ffda8f74e98 [ 133.976998][ T7827] [ 135.302974][ T7815] syzkaller0: entered promiscuous mode [ 135.309586][ T7815] syzkaller0: entered allmulticast mode [ 135.350238][ T7848] xt_HMARK: spi-set and port-set can't be combined [ 135.407361][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 135.467422][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 136.594264][ T7861] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 136.637119][ T7861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.760800][ T7874] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.891355][ T7881] netlink: 48 bytes leftover after parsing attributes in process `syz.4.629'. [ 136.987143][ T7861] bond1 (unregistering): Released all slaves [ 137.260089][ T7889] netlink: 40 bytes leftover after parsing attributes in process `syz.3.632'. [ 137.439324][ T7900] xt_HMARK: spi-set and port-set can't be combined [ 137.641750][ T7902] syzkaller0: entered promiscuous mode [ 137.642139][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 137.652883][ T7902] syzkaller0: entered allmulticast mode [ 137.670107][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'. [ 138.109927][ T7922] FAULT_INJECTION: forcing a failure. [ 138.109927][ T7922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.123920][ T7922] CPU: 1 UID: 0 PID: 7922 Comm: syz.0.643 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 138.123944][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.123954][ T7922] Call Trace: [ 138.123961][ T7922] [ 138.123968][ T7922] dump_stack_lvl+0x189/0x250 [ 138.123996][ T7922] ? __pfx____ratelimit+0x10/0x10 [ 138.124013][ T7922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.124035][ T7922] ? __pfx__printk+0x10/0x10 [ 138.124053][ T7922] ? __might_fault+0xb0/0x130 [ 138.124080][ T7922] should_fail_ex+0x414/0x560 [ 138.124106][ T7922] _copy_from_iter+0x1db/0x16f0 [ 138.124137][ T7922] ? policy_nodemask+0x27c/0x720 [ 138.124154][ T7922] ? __pfx__copy_from_iter+0x10/0x10 [ 138.124182][ T7922] ? set_page_refcounted+0xa0/0x1e0 [ 138.124198][ T7922] ? page_copy_sane+0x4e/0x280 [ 138.124229][ T7922] copy_page_from_iter+0xdd/0x170 [ 138.124255][ T7922] tun_get_user+0x1c4d/0x3ce0 [ 138.124275][ T7922] ? tun_get_user+0x693/0x3ce0 [ 138.124307][ T7922] ? aa_file_perm+0x11f/0xed0 [ 138.124330][ T7922] ? __pfx_tun_get_user+0x10/0x10 [ 138.124344][ T7922] ? aa_file_perm+0x11f/0xed0 [ 138.124363][ T7922] ? aa_file_perm+0x3e7/0xed0 [ 138.124396][ T7922] ? ref_tracker_alloc+0x318/0x460 [ 138.124415][ T7922] ? __lock_acquire+0xab9/0xd20 [ 138.124438][ T7922] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 138.124464][ T7922] ? tun_get+0x1c/0x2f0 [ 138.124485][ T7922] ? tun_get+0x1c/0x2f0 [ 138.124500][ T7922] ? tun_get+0x1c/0x2f0 [ 138.124522][ T7922] tun_chr_write_iter+0x113/0x200 [ 138.124541][ T7922] vfs_write+0x548/0xa90 [ 138.124569][ T7922] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 138.124585][ T7922] ? __pfx_vfs_write+0x10/0x10 [ 138.124618][ T7922] ? __fget_files+0x2a/0x420 [ 138.124644][ T7922] ksys_write+0x145/0x250 [ 138.124661][ T7922] ? __pfx_ksys_write+0x10/0x10 [ 138.124674][ T7922] ? rcu_is_watching+0x15/0xb0 [ 138.124702][ T7922] ? do_syscall_64+0xbe/0x3b0 [ 138.124723][ T7922] do_syscall_64+0xfa/0x3b0 [ 138.124738][ T7922] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.124754][ T7922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.124769][ T7922] ? clear_bhb_loop+0x60/0xb0 [ 138.124788][ T7922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.124804][ T7922] RIP: 0033:0x7f7727d8d3df [ 138.124819][ T7922] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 138.124833][ T7922] RSP: 002b:00007f7728bf0000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 138.124850][ T7922] RAX: ffffffffffffffda RBX: 00007f7727fb5fa0 RCX: 00007f7727d8d3df [ 138.124863][ T7922] RDX: 0000000000000042 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 138.124873][ T7922] RBP: 00007f7728bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 138.124883][ T7922] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 138.124892][ T7922] R13: 0000000000000001 R14: 00007f7727fb5fa0 R15: 00007ffda93c3758 [ 138.124919][ T7922] [ 138.604029][ T7932] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 138.618380][ T7932] netlink: 224 bytes leftover after parsing attributes in process `syz.4.646'. [ 139.107169][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 139.174444][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 140.181188][ T7963] netlink: 44 bytes leftover after parsing attributes in process `syz.3.655'. [ 140.366833][ T7972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 140.676063][ T5849] Bluetooth: hci0: command 0x0401 tx timeout [ 140.682209][ T5843] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 140.883265][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 140.936981][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 141.208806][ T7999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.668'. [ 141.282024][ T7998] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 141.410417][ T8002] FAULT_INJECTION: forcing a failure. [ 141.410417][ T8002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.445762][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 141.471637][ T8002] CPU: 0 UID: 0 PID: 8002 Comm: syz.0.669 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 141.471673][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.471683][ T8002] Call Trace: [ 141.471690][ T8002] [ 141.471698][ T8002] dump_stack_lvl+0x189/0x250 [ 141.471728][ T8002] ? __pfx____ratelimit+0x10/0x10 [ 141.471744][ T8002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.471767][ T8002] ? __pfx__printk+0x10/0x10 [ 141.471786][ T8002] ? __might_fault+0xb0/0x130 [ 141.471812][ T8002] should_fail_ex+0x414/0x560 [ 141.471838][ T8002] _copy_from_user+0x2d/0xb0 [ 141.471856][ T8002] ___sys_sendmsg+0x158/0x2a0 [ 141.471881][ T8002] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.471939][ T8002] ? __fget_files+0x2a/0x420 [ 141.471956][ T8002] ? __fget_files+0x3a0/0x420 [ 141.471983][ T8002] __x64_sys_sendmsg+0x19b/0x260 [ 141.472008][ T8002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.472038][ T8002] ? __pfx_ksys_write+0x10/0x10 [ 141.472052][ T8002] ? rcu_is_watching+0x15/0xb0 [ 141.472079][ T8002] ? do_syscall_64+0xbe/0x3b0 [ 141.472100][ T8002] do_syscall_64+0xfa/0x3b0 [ 141.472115][ T8002] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.472131][ T8002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.472147][ T8002] ? clear_bhb_loop+0x60/0xb0 [ 141.472167][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.472182][ T8002] RIP: 0033:0x7f7727d8e929 [ 141.472197][ T8002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.472210][ T8002] RSP: 002b:00007f7728bf0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.472229][ T8002] RAX: ffffffffffffffda RBX: 00007f7727fb5fa0 RCX: 00007f7727d8e929 [ 141.472242][ T8002] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 141.472252][ T8002] RBP: 00007f7728bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 141.472261][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.472270][ T8002] R13: 0000000000000000 R14: 00007f7727fb5fa0 R15: 00007ffda93c3758 [ 141.472299][ T8002] [ 142.096291][ T8023] tipc: Started in network mode [ 142.101173][ T8023] tipc: Node identity c, cluster identity 4711 [ 142.108492][ T8023] tipc: Node number set to 12 [ 142.343928][ T8045] IPVS: stopping backup sync thread 6977 ... [ 142.451798][ T8047] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 142.687436][ T8061] netlink: 'syz.3.693': attribute type 2 has an invalid length. [ 142.823640][ T8065] FAULT_INJECTION: forcing a failure. [ 142.823640][ T8065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.857797][ T8065] CPU: 0 UID: 0 PID: 8065 Comm: syz.4.694 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 142.857824][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.857833][ T8065] Call Trace: [ 142.857839][ T8065] [ 142.857847][ T8065] dump_stack_lvl+0x189/0x250 [ 142.857875][ T8065] ? __pfx____ratelimit+0x10/0x10 [ 142.857892][ T8065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.857914][ T8065] ? __pfx__printk+0x10/0x10 [ 142.857936][ T8065] ? __pfx_migrate_enable+0x10/0x10 [ 142.857958][ T8065] should_fail_ex+0x414/0x560 [ 142.857984][ T8065] _copy_to_user+0x31/0xb0 [ 142.858003][ T8065] generic_map_lookup_batch+0x8e8/0xcc0 [ 142.858038][ T8065] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 142.858056][ T8065] ? __fget_files+0x2a/0x420 [ 142.858079][ T8065] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 142.858099][ T8065] bpf_map_do_batch+0x25b/0x5f0 [ 142.858121][ T8065] ? security_bpf+0x7e/0x300 [ 142.858142][ T8065] __sys_bpf+0x70c/0x860 [ 142.858164][ T8065] ? __pfx___sys_bpf+0x10/0x10 [ 142.858198][ T8065] ? ksys_write+0x22a/0x250 [ 142.858216][ T8065] ? __pfx_ksys_write+0x10/0x10 [ 142.858229][ T8065] ? rcu_is_watching+0x15/0xb0 [ 142.858259][ T8065] __x64_sys_bpf+0x7c/0x90 [ 142.858279][ T8065] do_syscall_64+0xfa/0x3b0 [ 142.858295][ T8065] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.858311][ T8065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.858327][ T8065] ? clear_bhb_loop+0x60/0xb0 [ 142.858347][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.858362][ T8065] RIP: 0033:0x7f6b5ef8e929 [ 142.858377][ T8065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.858390][ T8065] RSP: 002b:00007f6b5fd1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.858408][ T8065] RAX: ffffffffffffffda RBX: 00007f6b5f1b5fa0 RCX: 00007f6b5ef8e929 [ 142.858420][ T8065] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 142.858431][ T8065] RBP: 00007f6b5fd1b090 R08: 0000000000000000 R09: 0000000000000000 [ 142.858441][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.858451][ T8065] R13: 0000000000000000 R14: 00007f6b5f1b5fa0 R15: 00007ffeb6197ad8 [ 142.858479][ T8065] [ 143.112980][ T8069] __nla_validate_parse: 14 callbacks suppressed [ 143.112999][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 143.212764][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 143.371000][ T8085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 143.435254][ T8085] netlink: 'syz.3.700': attribute type 21 has an invalid length. [ 143.498493][ T8085] netlink: 128 bytes leftover after parsing attributes in process `syz.3.700'. [ 143.522365][ T8093] netlink: 'syz.4.703': attribute type 10 has an invalid length. [ 143.530657][ T8093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.703'. [ 143.536082][ T8085] netlink: 'syz.3.700': attribute type 4 has an invalid length. [ 143.548583][ T8094] FAULT_INJECTION: forcing a failure. [ 143.548583][ T8094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.576272][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.2.705 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 143.576299][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.576309][ T8094] Call Trace: [ 143.576316][ T8094] [ 143.576323][ T8094] dump_stack_lvl+0x189/0x250 [ 143.576351][ T8094] ? __pfx____ratelimit+0x10/0x10 [ 143.576368][ T8094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.576391][ T8094] ? __pfx__printk+0x10/0x10 [ 143.576411][ T8094] ? __pfx_migrate_enable+0x10/0x10 [ 143.576436][ T8094] should_fail_ex+0x414/0x560 [ 143.576469][ T8094] _copy_to_user+0x31/0xb0 [ 143.576489][ T8094] generic_map_lookup_batch+0x896/0xcc0 [ 143.576522][ T8094] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 143.576540][ T8094] ? __fget_files+0x2a/0x420 [ 143.576562][ T8094] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 143.576581][ T8094] bpf_map_do_batch+0x25b/0x5f0 [ 143.576602][ T8094] ? security_bpf+0x7e/0x300 [ 143.576624][ T8094] __sys_bpf+0x70c/0x860 [ 143.576647][ T8094] ? __pfx___sys_bpf+0x10/0x10 [ 143.576679][ T8094] ? ksys_write+0x22a/0x250 [ 143.576696][ T8094] ? __pfx_ksys_write+0x10/0x10 [ 143.576709][ T8094] ? rcu_is_watching+0x15/0xb0 [ 143.576740][ T8094] __x64_sys_bpf+0x7c/0x90 [ 143.576758][ T8094] do_syscall_64+0xfa/0x3b0 [ 143.576775][ T8094] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.576789][ T8094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.576804][ T8094] ? clear_bhb_loop+0x60/0xb0 [ 143.576824][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.576840][ T8094] RIP: 0033:0x7f1f53d8e929 [ 143.576856][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.576869][ T8094] RSP: 002b:00007f1f54b3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.576887][ T8094] RAX: ffffffffffffffda RBX: 00007f1f53fb5fa0 RCX: 00007f1f53d8e929 [ 143.576899][ T8094] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 143.576910][ T8094] RBP: 00007f1f54b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 143.576920][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.576930][ T8094] R13: 0000000000000000 R14: 00007f1f53fb5fa0 R15: 00007fff173d3858 [ 143.576957][ T8094] [ 143.592868][ T8085] netlink: 3 bytes leftover after parsing attributes in process `syz.3.700'. [ 143.717337][ T8100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.746589][ T8093] batadv0: entered promiscuous mode [ 143.918533][ T8093] batadv0: entered allmulticast mode [ 143.937441][ T8093] bridge0: port 3(batadv0) entered blocking state [ 143.965651][ T8093] bridge0: port 3(batadv0) entered disabled state [ 144.006942][ T8093] bridge0: port 3(batadv0) entered blocking state [ 144.014311][ T8093] bridge0: port 3(batadv0) entered forwarding state [ 144.078325][ T8114] netlink: 'syz.3.709': attribute type 22 has an invalid length. [ 144.098661][ T8115] netlink: 96 bytes leftover after parsing attributes in process `syz.2.711'. [ 144.275236][ T8111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.296372][ T3562] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 144.305859][ T3562] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 144.361016][ T8128] FAULT_INJECTION: forcing a failure. [ 144.361016][ T8128] name failslab, interval 1, probability 0, space 0, times 0 [ 144.373969][ T8128] CPU: 1 UID: 0 PID: 8128 Comm: syz.3.714 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 144.373993][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.374002][ T8128] Call Trace: [ 144.374008][ T8128] [ 144.374015][ T8128] dump_stack_lvl+0x189/0x250 [ 144.374042][ T8128] ? __pfx____ratelimit+0x10/0x10 [ 144.374059][ T8128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.374082][ T8128] ? __pfx__printk+0x10/0x10 [ 144.374105][ T8128] ? __lock_acquire+0xab9/0xd20 [ 144.374128][ T8128] should_fail_ex+0x414/0x560 [ 144.374152][ T8128] should_failslab+0xa8/0x100 [ 144.374172][ T8128] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 144.374192][ T8128] ? pfn_valid+0x125/0x4d0 [ 144.374211][ T8128] ? pfn_valid+0x125/0x4d0 [ 144.374230][ T8128] ? pfn_valid+0x125/0x4d0 [ 144.374252][ T8128] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 144.374282][ T8128] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 144.374311][ T8128] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 144.374329][ T8128] ? 0xffffffffa0205640 [ 144.374344][ T8128] ? 0xffffffffa0205640 [ 144.374401][ T8128] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 144.374426][ T8128] ? _copy_from_user+0x94/0xb0 [ 144.374440][ T8128] ? bpf_test_init+0x133/0x170 [ 144.374455][ T8128] ? xdp_convert_md_to_buff+0x5b/0x330 [ 144.374475][ T8128] bpf_prog_test_run_xdp+0x713/0x1000 [ 144.374510][ T8128] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 144.374535][ T8128] ? __fget_files+0x2a/0x420 [ 144.374555][ T8128] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 144.374574][ T8128] bpf_prog_test_run+0x2c4/0x340 [ 144.374599][ T8128] __sys_bpf+0x4a4/0x860 [ 144.374622][ T8128] ? __pfx___sys_bpf+0x10/0x10 [ 144.374654][ T8128] ? ksys_write+0x22a/0x250 [ 144.374672][ T8128] ? __pfx_ksys_write+0x10/0x10 [ 144.374684][ T8128] ? rcu_is_watching+0x15/0xb0 [ 144.374723][ T8128] __x64_sys_bpf+0x7c/0x90 [ 144.374743][ T8128] do_syscall_64+0xfa/0x3b0 [ 144.374759][ T8128] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.374774][ T8128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.374790][ T8128] ? clear_bhb_loop+0x60/0xb0 [ 144.374810][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.374825][ T8128] RIP: 0033:0x7f4a3df8e929 [ 144.374839][ T8128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.374852][ T8128] RSP: 002b:00007f4a3ed28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.374870][ T8128] RAX: ffffffffffffffda RBX: 00007f4a3e1b5fa0 RCX: 00007f4a3df8e929 [ 144.374881][ T8128] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 144.374891][ T8128] RBP: 00007f4a3ed28090 R08: 0000000000000000 R09: 0000000000000000 [ 144.374900][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.374909][ T8128] R13: 0000000000000000 R14: 00007f4a3e1b5fa0 R15: 00007fff05272da8 [ 144.374932][ T8128] [ 144.754906][ T8132] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 144.771544][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 144.784664][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 144.982179][ T8150] FAULT_INJECTION: forcing a failure. [ 144.982179][ T8150] name failslab, interval 1, probability 0, space 0, times 0 [ 145.002495][ T8150] CPU: 1 UID: 0 PID: 8150 Comm: syz.4.721 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 145.002521][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.002531][ T8150] Call Trace: [ 145.002538][ T8150] [ 145.002546][ T8150] dump_stack_lvl+0x189/0x250 [ 145.002573][ T8150] ? __pfx____ratelimit+0x10/0x10 [ 145.002599][ T8150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.002626][ T8150] ? __pfx__printk+0x10/0x10 [ 145.002650][ T8150] ? __pfx___might_resched+0x10/0x10 [ 145.002675][ T8150] should_fail_ex+0x414/0x560 [ 145.002699][ T8150] should_failslab+0xa8/0x100 [ 145.002718][ T8150] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 145.002734][ T8150] ? __alloc_skb+0x112/0x2d0 [ 145.002760][ T8150] __alloc_skb+0x112/0x2d0 [ 145.002784][ T8150] netlink_sendmsg+0x5c6/0xb30 [ 145.002812][ T8150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.002835][ T8150] ? aa_sock_msg_perm+0x94/0x160 [ 145.002857][ T8150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.002876][ T8150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.002897][ T8150] __sock_sendmsg+0x21c/0x270 [ 145.002918][ T8150] ____sys_sendmsg+0x52d/0x830 [ 145.002946][ T8150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.002976][ T8150] ? import_iovec+0x74/0xa0 [ 145.002996][ T8150] ___sys_sendmsg+0x21f/0x2a0 [ 145.003022][ T8150] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.003079][ T8150] ? __fget_files+0x2a/0x420 [ 145.003096][ T8150] ? __fget_files+0x3a0/0x420 [ 145.003123][ T8150] __sys_sendmmsg+0x227/0x430 [ 145.003151][ T8150] ? __pfx___sys_sendmmsg+0x10/0x10 [ 145.003170][ T8150] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 145.003215][ T8150] ? ksys_write+0x22a/0x250 [ 145.003233][ T8150] ? __pfx_ksys_write+0x10/0x10 [ 145.003245][ T8150] ? rcu_is_watching+0x15/0xb0 [ 145.003274][ T8150] __x64_sys_sendmmsg+0xa0/0xc0 [ 145.003299][ T8150] do_syscall_64+0xfa/0x3b0 [ 145.003315][ T8150] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.003330][ T8150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.003346][ T8150] ? clear_bhb_loop+0x60/0xb0 [ 145.003366][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.003381][ T8150] RIP: 0033:0x7f6b5ef8e929 [ 145.003397][ T8150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.003410][ T8150] RSP: 002b:00007f6b5fd1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 145.003428][ T8150] RAX: ffffffffffffffda RBX: 00007f6b5f1b5fa0 RCX: 00007f6b5ef8e929 [ 145.003440][ T8150] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 145.003452][ T8150] RBP: 00007f6b5fd1b090 R08: 0000000000000000 R09: 0000000000000000 [ 145.003462][ T8150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.003472][ T8150] R13: 0000000000000000 R14: 00007f6b5f1b5fa0 R15: 00007ffeb6197ad8 [ 145.003498][ T8150] [ 145.675681][ T8169] netlink: 9 bytes leftover after parsing attributes in process `syz.1.731'. [ 145.696372][ T8169] 0·: renamed from hsr0 (while UP) [ 145.721343][ T8169] 0·: entered allmulticast mode [ 145.727481][ T8169] hsr_slave_0: entered allmulticast mode [ 145.758899][ T8169] hsr_slave_1: entered allmulticast mode [ 145.765084][ T8169] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 145.780648][ T8176] netlink: 272 bytes leftover after parsing attributes in process `syz.2.732'. [ 145.990867][ T8189] syzkaller1: entered promiscuous mode [ 146.016003][ T8189] syzkaller1: entered allmulticast mode [ 146.563215][ T8217] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 147.369886][ T8248] tipc: Enabled bearer , priority 14 [ 147.381700][ T8248] netlink: 'syz.3.761': attribute type 2 has an invalid length. [ 147.574951][ T8250] netlink: 'syz.0.762': attribute type 15 has an invalid length. [ 147.608988][ T8255] x_tables: duplicate underflow at hook 1 [ 147.841321][ T8268] tap0: tun_chr_ioctl cmd 2147767507 [ 148.264957][ T8279] dvmrp0: entered allmulticast mode [ 148.632824][ T8287] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 148.677311][ T8297] __nla_validate_parse: 14 callbacks suppressed [ 148.677330][ T8297] netlink: 44 bytes leftover after parsing attributes in process `syz.2.777'. [ 148.731051][ T8287] batadv1: entered promiscuous mode [ 148.859423][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 148.912045][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 149.794891][ T8342] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 149.827422][ T8342] netlink: 208 bytes leftover after parsing attributes in process `syz.3.793'. [ 149.848356][ T8342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.793'. [ 149.982256][ T8347] vxcan3: entered allmulticast mode [ 150.260725][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'. [ 150.347501][ T8367] netlink: 'syz.4.799': attribute type 2 has an invalid length. [ 151.064674][ T8395] FAULT_INJECTION: forcing a failure. [ 151.064674][ T8395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.098278][ T8395] CPU: 1 UID: 0 PID: 8395 Comm: syz.2.809 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 151.098305][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.098316][ T8395] Call Trace: [ 151.098324][ T8395] [ 151.098331][ T8395] dump_stack_lvl+0x189/0x250 [ 151.098360][ T8395] ? __pfx____ratelimit+0x10/0x10 [ 151.098378][ T8395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.098401][ T8395] ? __pfx__printk+0x10/0x10 [ 151.098421][ T8395] ? __pfx_migrate_enable+0x10/0x10 [ 151.098447][ T8395] should_fail_ex+0x414/0x560 [ 151.098474][ T8395] _copy_to_user+0x31/0xb0 [ 151.098494][ T8395] generic_map_lookup_batch+0x896/0xcc0 [ 151.098529][ T8395] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 151.098547][ T8395] ? __fget_files+0x2a/0x420 [ 151.098569][ T8395] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 151.098589][ T8395] bpf_map_do_batch+0x25b/0x5f0 [ 151.098611][ T8395] ? security_bpf+0x7e/0x300 [ 151.098633][ T8395] __sys_bpf+0x70c/0x860 [ 151.098660][ T8395] ? __pfx___sys_bpf+0x10/0x10 [ 151.098694][ T8395] ? ksys_write+0x22a/0x250 [ 151.098713][ T8395] ? __pfx_ksys_write+0x10/0x10 [ 151.098726][ T8395] ? rcu_is_watching+0x15/0xb0 [ 151.098756][ T8395] __x64_sys_bpf+0x7c/0x90 [ 151.098776][ T8395] do_syscall_64+0xfa/0x3b0 [ 151.098792][ T8395] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.098808][ T8395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.098825][ T8395] ? clear_bhb_loop+0x60/0xb0 [ 151.098845][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.098861][ T8395] RIP: 0033:0x7f1f53d8e929 [ 151.098876][ T8395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.098891][ T8395] RSP: 002b:00007f1f54b3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.098909][ T8395] RAX: ffffffffffffffda RBX: 00007f1f53fb5fa0 RCX: 00007f1f53d8e929 [ 151.098920][ T8395] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 151.098930][ T8395] RBP: 00007f1f54b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 151.098939][ T8395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.098948][ T8395] R13: 0000000000000000 R14: 00007f1f53fb5fa0 R15: 00007fff173d3858 [ 151.098978][ T8395] [ 151.325592][ T8377] nbd: must specify at least one socket [ 151.382493][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 151.846671][ T8414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 151.889869][ T8415] syzkaller1: entered promiscuous mode [ 151.895371][ T8415] syzkaller1: entered allmulticast mode [ 151.921333][ T8417] batadv_slave_1: entered promiscuous mode [ 152.027527][ T8412] batadv_slave_1: left promiscuous mode [ 152.051130][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.819'. [ 152.125881][ T8425] FAULT_INJECTION: forcing a failure. [ 152.125881][ T8425] name failslab, interval 1, probability 0, space 0, times 0 [ 152.152903][ T8425] CPU: 1 UID: 0 PID: 8425 Comm: syz.4.820 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 152.152930][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.152940][ T8425] Call Trace: [ 152.152948][ T8425] [ 152.152955][ T8425] dump_stack_lvl+0x189/0x250 [ 152.152981][ T8425] ? __pfx____ratelimit+0x10/0x10 [ 152.152998][ T8425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.153020][ T8425] ? __pfx__printk+0x10/0x10 [ 152.153043][ T8425] ? __pfx___might_resched+0x10/0x10 [ 152.153070][ T8425] should_fail_ex+0x414/0x560 [ 152.153095][ T8425] should_failslab+0xa8/0x100 [ 152.153114][ T8425] __kmalloc_cache_noprof+0x70/0x3d0 [ 152.153131][ T8425] ? call_usermodehelper_setup+0x8e/0x270 [ 152.153151][ T8425] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 152.153171][ T8425] call_usermodehelper_setup+0x8e/0x270 [ 152.153191][ T8425] ? __pfx_free_modprobe_argv+0x10/0x10 [ 152.153217][ T8425] __request_module+0x39f/0x5e0 [ 152.153245][ T8425] ? __pfx___request_module+0x10/0x10 [ 152.153270][ T8425] ? __up_read+0x280/0x680 [ 152.153302][ T8425] ctrl_getfamily+0x217/0x590 [ 152.153326][ T8425] ? __nla_parse+0x40/0x60 [ 152.153347][ T8425] ? __pfx_ctrl_getfamily+0x10/0x10 [ 152.153370][ T8425] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 152.153395][ T8425] genl_family_rcv_msg_doit+0x212/0x300 [ 152.153418][ T8425] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 152.153459][ T8425] genl_rcv_msg+0x60e/0x790 [ 152.153485][ T8425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.153503][ T8425] ? ref_tracker_free+0x63a/0x7d0 [ 152.153523][ T8425] ? __pfx_ctrl_getfamily+0x10/0x10 [ 152.153546][ T8425] ? __pfx_ref_tracker_free+0x10/0x10 [ 152.153578][ T8425] netlink_rcv_skb+0x205/0x470 [ 152.153598][ T8425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.153622][ T8425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.153659][ T8425] ? down_read+0x1ad/0x2e0 [ 152.153715][ T8425] genl_rcv+0x28/0x40 [ 152.153736][ T8425] netlink_unicast+0x758/0x8d0 [ 152.153765][ T8425] netlink_sendmsg+0x805/0xb30 [ 152.153795][ T8425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.153818][ T8425] ? aa_sock_msg_perm+0x94/0x160 [ 152.153845][ T8425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.153864][ T8425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.153885][ T8425] __sock_sendmsg+0x21c/0x270 [ 152.153906][ T8425] __sys_sendto+0x3bd/0x520 [ 152.153929][ T8425] ? __pfx___sys_sendto+0x10/0x10 [ 152.153961][ T8425] ? count_memcg_event_mm+0x21/0x260 [ 152.153994][ T8425] ? exc_page_fault+0x76/0xf0 [ 152.154013][ T8425] ? do_user_addr_fault+0xc8a/0x1390 [ 152.154038][ T8425] __x64_sys_sendto+0xde/0x100 [ 152.154061][ T8425] do_syscall_64+0xfa/0x3b0 [ 152.154076][ T8425] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.154091][ T8425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.154107][ T8425] ? clear_bhb_loop+0x60/0xb0 [ 152.154126][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.154142][ T8425] RIP: 0033:0x7f6b5ef907bc [ 152.154157][ T8425] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 152.154171][ T8425] RSP: 002b:00007f6b5fd19ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 152.154190][ T8425] RAX: ffffffffffffffda RBX: 00007f6b5fd19fc0 RCX: 00007f6b5ef907bc [ 152.154203][ T8425] RDX: 000000000000001c RSI: 00007f6b5fd1a010 RDI: 0000000000000006 [ 152.154213][ T8425] RBP: 0000000000000000 R08: 00007f6b5fd19f14 R09: 000000000000000c [ 152.154224][ T8425] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 152.154234][ T8425] R13: 00007f6b5fd19f68 R14: 00007f6b5fd1a010 R15: 0000000000000000 [ 152.154262][ T8425] [ 152.574493][ T8431] netlink: 'syz.0.823': attribute type 11 has an invalid length. [ 152.734324][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 152.743751][ T8438] netlink: 'syz.0.827': attribute type 30 has an invalid length. [ 152.763450][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 152.769339][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.772513][ T8438] netlink: 'syz.0.827': attribute type 30 has an invalid length. [ 152.795756][ T44] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.869448][ T8440] ip6gretap1: entered promiscuous mode [ 152.909824][ T44] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.929661][ T44] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.128672][ T8461] syzkaller1: entered promiscuous mode [ 153.137047][ T8461] syzkaller1: entered allmulticast mode [ 153.724144][ T8486] netlink: 'syz.3.843': attribute type 2 has an invalid length. [ 153.821064][ T30] audit: type=1800 audit(1750471801.555:4): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.845" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1026 res=0 errno=0 [ 154.082437][ T8501] syzkaller1: entered promiscuous mode [ 154.088225][ T8501] syzkaller1: entered allmulticast mode [ 154.093243][ T8503] netlink: 272 bytes leftover after parsing attributes in process `syz.2.848'. [ 155.498083][ T8549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.862'. [ 155.543128][ T8551] syzkaller1: entered promiscuous mode [ 155.552103][ T8551] syzkaller1: entered allmulticast mode [ 155.779726][ T8558] netlink: 'syz.0.863': attribute type 11 has an invalid length. [ 155.798953][ T8558] netlink: 224 bytes leftover after parsing attributes in process `syz.0.863'. [ 155.826364][ T8562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.867'. [ 155.831676][ T8564] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 155.845695][ T8564] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 155.867494][ T8562] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 155.982920][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.868'. [ 156.188537][ T8577] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 156.243820][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 156.303390][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'. [ 156.350408][ T8577] netlink: 'syz.3.872': attribute type 3 has an invalid length. [ 156.412716][ T8585] syzkaller1: entered promiscuous mode [ 156.446009][ T8585] syzkaller1: entered allmulticast mode [ 157.070526][ T8621] syzkaller0: entered promiscuous mode [ 157.099071][ T8621] syzkaller0: entered allmulticast mode [ 157.245122][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.888'. [ 157.300301][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 157.855339][ T8647] trusted_key: syz.0.890 sent an empty control message without MSG_MORE. [ 157.910109][ T8647] delete_channel: no stack [ 157.939808][ T8647] delete_channel: no stack [ 158.721332][ T8642] syzkaller1: entered promiscuous mode [ 158.735017][ T8642] syzkaller1: entered allmulticast mode [ 158.891151][ T8668] netlink: 44 bytes leftover after parsing attributes in process `syz.1.898'. [ 159.183336][ T8685] netlink: 'syz.0.904': attribute type 2 has an invalid length. [ 159.403054][ T8693] __nla_validate_parse: 1 callbacks suppressed [ 159.403073][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'. [ 159.422939][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'. [ 159.695196][ T8704] syzkaller1: entered promiscuous mode [ 159.704300][ T8704] syzkaller1: entered allmulticast mode [ 160.214806][ T8715] netlink: 1 bytes leftover after parsing attributes in process `syz.2.916'. [ 160.311611][ T8715] vti0: entered promiscuous mode [ 160.346737][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 160.365808][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.916'. [ 160.475026][ T8725] netlink: 'syz.1.919': attribute type 30 has an invalid length. [ 160.778463][ T8734] syzkaller1: entered promiscuous mode [ 160.796105][ T8734] syzkaller1: entered allmulticast mode [ 161.014336][ T8739] syzkaller0: entered promiscuous mode [ 161.056441][ T8739] syzkaller0: entered allmulticast mode [ 161.516834][ T8761] IPVS: stopping backup sync thread 6152 ... [ 161.623074][ T8765] FAULT_INJECTION: forcing a failure. [ 161.623074][ T8765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.636853][ T8765] CPU: 1 UID: 0 PID: 8765 Comm: syz.0.934 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 161.636882][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.636893][ T8765] Call Trace: [ 161.636900][ T8765] [ 161.636908][ T8765] dump_stack_lvl+0x189/0x250 [ 161.636936][ T8765] ? __pfx____ratelimit+0x10/0x10 [ 161.636954][ T8765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.636985][ T8765] ? __pfx__printk+0x10/0x10 [ 161.637006][ T8765] ? __pfx_migrate_enable+0x10/0x10 [ 161.637031][ T8765] should_fail_ex+0x414/0x560 [ 161.637057][ T8765] _copy_to_user+0x31/0xb0 [ 161.637077][ T8765] generic_map_lookup_batch+0x896/0xcc0 [ 161.637111][ T8765] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 161.637129][ T8765] ? __fget_files+0x2a/0x420 [ 161.637150][ T8765] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 161.637169][ T8765] bpf_map_do_batch+0x25b/0x5f0 [ 161.637190][ T8765] ? security_bpf+0x7e/0x300 [ 161.637212][ T8765] __sys_bpf+0x70c/0x860 [ 161.637235][ T8765] ? __pfx___sys_bpf+0x10/0x10 [ 161.637268][ T8765] ? ksys_write+0x22a/0x250 [ 161.637286][ T8765] ? __pfx_ksys_write+0x10/0x10 [ 161.637299][ T8765] ? rcu_is_watching+0x15/0xb0 [ 161.637330][ T8765] __x64_sys_bpf+0x7c/0x90 [ 161.637349][ T8765] do_syscall_64+0xfa/0x3b0 [ 161.637366][ T8765] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.637381][ T8765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.637397][ T8765] ? clear_bhb_loop+0x60/0xb0 [ 161.637417][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.637433][ T8765] RIP: 0033:0x7f7727d8e929 [ 161.637449][ T8765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.637463][ T8765] RSP: 002b:00007f7728bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.637483][ T8765] RAX: ffffffffffffffda RBX: 00007f7727fb5fa0 RCX: 00007f7727d8e929 [ 161.637496][ T8765] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 161.637507][ T8765] RBP: 00007f7728bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 161.637519][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.637529][ T8765] R13: 0000000000000000 R14: 00007f7727fb5fa0 R15: 00007ffda93c3758 [ 161.637558][ T8765] [ 161.879555][ T3562] wlan1: Trigger new scan to find an IBSS to join [ 162.475951][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 163.172688][ T8779] pim6reg: entered allmulticast mode [ 163.185227][ T8782] pim6reg: left allmulticast mode [ 163.462956][ T8799] tap0: tun_chr_ioctl cmd 1074025680 [ 163.477516][ T8799] tap0: tun_chr_ioctl cmd 1074025678 [ 163.487902][ T8799] tap0: group set to 0 [ 163.531699][ T8808] netlink: 'syz.3.947': attribute type 23 has an invalid length. [ 163.548729][ T8808] netlink: 'syz.3.947': attribute type 11 has an invalid length. [ 163.564706][ T8808] netlink: 224 bytes leftover after parsing attributes in process `syz.3.947'. [ 163.625529][ T8813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 163.814429][ T8821] syzkaller0: entered promiscuous mode [ 163.820518][ T8821] syzkaller0: entered allmulticast mode [ 164.605102][ T8838] x_tables: duplicate underflow at hook 1 [ 165.527601][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 165.533688][ T8855] xt_HMARK: spi-set and port-set can't be combined [ 165.881030][ T8870] netlink: 'syz.2.965': attribute type 3 has an invalid length. [ 165.899928][ T8870] netlink: 638 bytes leftover after parsing attributes in process `syz.2.965'. [ 166.003772][ T8872] syzkaller0: entered promiscuous mode [ 166.009830][ T8872] syzkaller0: entered allmulticast mode [ 166.839372][ T44] wlan1: Trigger new scan to find an IBSS to join [ 166.921952][ T8903] xt_HMARK: spi-set and port-set can't be combined [ 166.986593][ T8905] netlink: 56 bytes leftover after parsing attributes in process `syz.3.978'. [ 166.998136][ T8905] netlink: 56 bytes leftover after parsing attributes in process `syz.3.978'. [ 167.710685][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 167.791102][ T3528] wlan1: Creating new IBSS network, BSSID ba:99:fb:f3:93:1f [ 168.426158][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 168.454216][ T8935] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 168.575296][ T8943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 168.888246][ T8953] xt_HMARK: spi-set and port-set can't be combined [ 169.181852][ T8959] syzkaller0: entered promiscuous mode [ 169.194239][ T8959] syzkaller0: entered allmulticast mode [ 169.524334][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 170.926361][ T8999] xt_HMARK: spi-set and port-set can't be combined [ 171.181885][ T9019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.660946][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 171.687485][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 171.877197][ T9037] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1017'. [ 171.908643][ T9039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.135485][ T9041] syzkaller0: entered promiscuous mode [ 172.158234][ T9041] syzkaller0: entered allmulticast mode [ 172.437627][ T9058] xt_HMARK: spi-set and port-set can't be combined [ 173.860794][ T9052] syzkaller0: entered promiscuous mode [ 173.866413][ T9052] syzkaller0: entered allmulticast mode [ 174.059606][ T9082] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1029'. [ 174.111766][ T9085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.224743][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 175.486113][ T9103] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 175.523408][ T9103] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1035'. [ 175.533420][ T9103] tc_dump_action: action bad kind [ 175.737033][ T9113] xt_HMARK: spi-set and port-set can't be combined [ 175.746834][ T9114] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1036'. [ 176.124819][ T9122] syzkaller0: entered promiscuous mode [ 176.145453][ T9122] syzkaller0: entered allmulticast mode [ 177.880444][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 177.934439][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 177.958666][ T9169] xt_HMARK: spi-set and port-set can't be combined [ 178.204717][ T9177] netlink: 'syz.1.1054': attribute type 11 has an invalid length. [ 178.257350][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 178.286158][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 178.675210][ T9204] xt_TPROXY: Can be used only with -p tcp or -p udp [ 178.741389][ T9202] syzkaller0: entered promiscuous mode [ 178.747300][ T9202] syzkaller0: entered allmulticast mode [ 179.266423][ T9212] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1065'. [ 179.275680][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'. [ 179.342307][ T9218] netlink: 'syz.3.1065': attribute type 10 has an invalid length. [ 179.594408][ T9225] xt_HMARK: spi-set and port-set can't be combined [ 180.662921][ T9218] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 180.765813][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'. [ 180.808669][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1068'. [ 180.839488][ T9237] SET target dimension over the limit! [ 181.586514][ T9265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1078'. [ 181.899010][ T9269] syzkaller0: entered promiscuous mode [ 181.929030][ T9269] syzkaller0: entered allmulticast mode [ 182.199052][ T9277] xt_HMARK: spi-set and port-set can't be combined [ 182.549010][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'. [ 183.870975][ T9316] tipc: Enabling of bearer rejected, failed to enable media [ 183.890336][ T9315] tipc: Enabling of bearer rejected, failed to enable media [ 184.280948][ T9334] xt_HMARK: spi-set and port-set can't be combined [ 184.773750][ T30] audit: type=1800 audit(1750471832.505:5): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1096" name="memory.events" dev="tmpfs" ino=1057 res=0 errno=0 [ 184.805563][ T9351] __nla_validate_parse: 1 callbacks suppressed [ 184.805583][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 184.874808][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1102'. [ 184.893958][ T9352] syzkaller0: entered promiscuous mode [ 184.943044][ T9352] syzkaller0: entered allmulticast mode [ 185.472866][ T9373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.521303][ T9375] xt_HMARK: spi-set and port-set can't be combined [ 185.955047][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'. [ 185.971707][ T9393] netlink: 'syz.0.1113': attribute type 9 has an invalid length. [ 187.412429][ T30] audit: type=1800 audit(1750471835.145:6): pid=9418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1118" name="memory.events" dev="tmpfs" ino=1095 res=0 errno=0 [ 187.592047][ T9427] netlink: 'syz.2.1122': attribute type 6 has an invalid length. [ 187.613791][ T9427] veth0_macvtap: left promiscuous mode [ 187.622468][ T9427] macvtap0: entered promiscuous mode [ 187.629732][ T9427] macvtap0: entered allmulticast mode [ 188.154771][ T9435] xt_HMARK: spi-set and port-set can't be combined [ 188.245167][ T9438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.365375][ T9444] FAULT_INJECTION: forcing a failure. [ 188.365375][ T9444] name failslab, interval 1, probability 0, space 0, times 0 [ 188.392634][ T9444] CPU: 1 UID: 0 PID: 9444 Comm: syz.4.1128 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 188.392663][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.392674][ T9444] Call Trace: [ 188.392681][ T9444] [ 188.392689][ T9444] dump_stack_lvl+0x189/0x250 [ 188.392729][ T9444] ? __pfx____ratelimit+0x10/0x10 [ 188.392747][ T9444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.392769][ T9444] ? __pfx__printk+0x10/0x10 [ 188.392792][ T9444] ? __pfx___might_resched+0x10/0x10 [ 188.392814][ T9444] ? fs_reclaim_acquire+0x7d/0x100 [ 188.392838][ T9444] should_fail_ex+0x414/0x560 [ 188.392863][ T9444] should_failslab+0xa8/0x100 [ 188.392884][ T9444] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 188.392900][ T9444] ? __d_alloc+0x31/0x6f0 [ 188.392922][ T9444] __d_alloc+0x31/0x6f0 [ 188.392948][ T9444] d_alloc_pseudo+0x1f/0xb0 [ 188.392968][ T9444] alloc_file_pseudo+0xcc/0x210 [ 188.392991][ T9444] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 188.393022][ T9444] anon_inode_getfd+0xca/0x1b0 [ 188.393045][ T9444] map_create+0xdb6/0x1150 [ 188.393071][ T9444] ? security_bpf+0x7e/0x300 [ 188.393093][ T9444] __sys_bpf+0x67e/0x860 [ 188.393115][ T9444] ? __pfx___sys_bpf+0x10/0x10 [ 188.393148][ T9444] ? ksys_write+0x22a/0x250 [ 188.393166][ T9444] ? __pfx_ksys_write+0x10/0x10 [ 188.393189][ T9444] __x64_sys_bpf+0x7c/0x90 [ 188.393209][ T9444] do_syscall_64+0xfa/0x3b0 [ 188.393226][ T9444] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.393241][ T9444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.393258][ T9444] ? clear_bhb_loop+0x60/0xb0 [ 188.393278][ T9444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.393294][ T9444] RIP: 0033:0x7f6b5ef8e929 [ 188.393324][ T9444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.393338][ T9444] RSP: 002b:00007f6b5fd1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.393361][ T9444] RAX: ffffffffffffffda RBX: 00007f6b5f1b5fa0 RCX: 00007f6b5ef8e929 [ 188.393372][ T9444] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 188.393383][ T9444] RBP: 00007f6b5fd1b090 R08: 0000000000000000 R09: 0000000000000000 [ 188.393393][ T9444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.393404][ T9444] R13: 0000000000000001 R14: 00007f6b5f1b5fa0 R15: 00007ffeb6197ad8 [ 188.393433][ T9444] [ 188.404399][ T9442] syzkaller0: entered promiscuous mode [ 188.656189][ T9442] syzkaller0: entered allmulticast mode [ 188.777295][ T9455] sctp: [Deprecated]: syz.4.1132 (pid 9455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.777295][ T9455] Use struct sctp_sack_info instead [ 188.894946][ T9462] netlink: 'syz.2.1133': attribute type 39 has an invalid length. [ 189.942000][ T9487] FAULT_INJECTION: forcing a failure. [ 189.942000][ T9487] name failslab, interval 1, probability 0, space 0, times 0 [ 189.960249][ T9487] CPU: 0 UID: 0 PID: 9487 Comm: syz.1.1136 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 189.960268][ T9487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.960275][ T9487] Call Trace: [ 189.960280][ T9487] [ 189.960284][ T9487] dump_stack_lvl+0x189/0x250 [ 189.960304][ T9487] ? __pfx____ratelimit+0x10/0x10 [ 189.960315][ T9487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.960330][ T9487] ? __pfx__printk+0x10/0x10 [ 189.960344][ T9487] ? ref_tracker_alloc+0x318/0x460 [ 189.960359][ T9487] should_fail_ex+0x414/0x560 [ 189.960374][ T9487] should_failslab+0xa8/0x100 [ 189.960386][ T9487] kmem_cache_alloc_noprof+0x73/0x3c0 [ 189.960402][ T9487] ? skb_clone+0x212/0x3a0 [ 189.960413][ T9487] skb_clone+0x212/0x3a0 [ 189.960424][ T9487] __netlink_deliver_tap+0x404/0x850 [ 189.960443][ T9487] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.960455][ T9487] netlink_deliver_tap+0x19c/0x1b0 [ 189.960468][ T9487] netlink_unicast+0x72f/0x8d0 [ 189.960485][ T9487] netlink_sendmsg+0x805/0xb30 [ 189.960502][ T9487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.960516][ T9487] ? aa_sock_msg_perm+0x94/0x160 [ 189.960530][ T9487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.960543][ T9487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.960555][ T9487] __sock_sendmsg+0x21c/0x270 [ 189.960567][ T9487] ____sys_sendmsg+0x505/0x830 [ 189.960585][ T9487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.960603][ T9487] ? import_iovec+0x74/0xa0 [ 189.960616][ T9487] ___sys_sendmsg+0x21f/0x2a0 [ 189.960631][ T9487] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.960664][ T9487] ? __fget_files+0x2a/0x420 [ 189.960675][ T9487] ? __fget_files+0x3a0/0x420 [ 189.960690][ T9487] __x64_sys_sendmsg+0x19b/0x260 [ 189.960706][ T9487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.960725][ T9487] ? __pfx_ksys_write+0x10/0x10 [ 189.960732][ T9487] ? rcu_is_watching+0x15/0xb0 [ 189.960750][ T9487] ? do_syscall_64+0xbe/0x3b0 [ 189.960763][ T9487] do_syscall_64+0xfa/0x3b0 [ 189.960772][ T9487] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.960781][ T9487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.960790][ T9487] ? clear_bhb_loop+0x60/0xb0 [ 189.960801][ T9487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.960810][ T9487] RIP: 0033:0x7f2bc6f8e929 [ 189.960820][ T9487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.960828][ T9487] RSP: 002b:00007f2bc7e81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.960839][ T9487] RAX: ffffffffffffffda RBX: 00007f2bc71b5fa0 RCX: 00007f2bc6f8e929 [ 189.960846][ T9487] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 189.960852][ T9487] RBP: 00007f2bc7e81090 R08: 0000000000000000 R09: 0000000000000000 [ 189.960858][ T9487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.960864][ T9487] R13: 0000000000000000 R14: 00007f2bc71b5fa0 R15: 00007ffda8f74e98 [ 189.960879][ T9487] [ 190.944529][ T9493] xt_HMARK: spi-set and port-set can't be combined [ 191.173746][ T9505] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1143'. [ 191.194256][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1144'. [ 191.210017][ T9508] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 191.262638][ T9510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.530633][ T9524] netlink: 'syz.0.1150': attribute type 1 has an invalid length. [ 191.549315][ T9524] netlink: 'syz.0.1150': attribute type 1 has an invalid length. [ 191.558330][ T9524] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1150'. [ 191.581268][ T9524] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1150'. [ 191.826332][ T30] audit: type=1800 audit(1750471839.545:7): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1148" name="memory.events" dev="tmpfs" ino=1131 res=0 errno=0 [ 192.114892][ T9536] xt_HMARK: spi-set and port-set can't be combined [ 192.245330][ T30] audit: type=1800 audit(1750471839.975:8): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1154" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1137 res=0 errno=0 [ 192.506313][ T9552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1159'. [ 192.912233][ T9569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.179185][ T9581] xt_HMARK: spi-set and port-set can't be combined [ 193.291134][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 193.664102][ T30] audit: type=1800 audit(1750471841.395:9): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1172" name="memory.events" dev="tmpfs" ino=1148 res=0 errno=0 [ 194.017312][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 194.032999][ T9608] netlink: 'syz.4.1178': attribute type 2 has an invalid length. [ 194.042394][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1177'. [ 194.173700][ T9615] xt_HMARK: spi-set and port-set can't be combined [ 194.204945][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 194.256378][ T9619] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1184'. [ 194.281160][ T9619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1184'. [ 194.419640][ T9623] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.427545][ T9626] netlink: 'syz.1.1185': attribute type 10 has an invalid length. [ 194.585600][ T9627] syzkaller0: entered promiscuous mode [ 194.607172][ T9627] syzkaller0: entered allmulticast mode [ 195.122909][ T30] audit: type=1800 audit(1750471842.855:10): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1194" name="memory.events" dev="tmpfs" ino=1158 res=0 errno=0 [ 196.281823][ T5847] Bluetooth: hci0: command 0x0401 tx timeout [ 196.282414][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 196.293021][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 196.294563][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 196.361810][ T9658] smc: net device bond0 applied user defined pnetid SYZ2 [ 196.372226][ T9660] smc: net device bond0 erased user defined pnetid SYZ2 [ 196.431886][ T9666] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 196.563788][ T9670] xt_HMARK: spi-set and port-set can't be combined [ 196.882195][ T9685] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.968345][ T9687] __nla_validate_parse: 3 callbacks suppressed [ 196.968372][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 197.277057][ T9699] FAULT_INJECTION: forcing a failure. [ 197.277057][ T9699] name failslab, interval 1, probability 0, space 0, times 0 [ 197.291791][ T9699] CPU: 0 UID: 0 PID: 9699 Comm: syz.1.1210 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 197.291809][ T9699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.291815][ T9699] Call Trace: [ 197.291820][ T9699] [ 197.291825][ T9699] dump_stack_lvl+0x189/0x250 [ 197.291845][ T9699] ? __pfx____ratelimit+0x10/0x10 [ 197.291856][ T9699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.291871][ T9699] ? __pfx__printk+0x10/0x10 [ 197.291889][ T9699] should_fail_ex+0x414/0x560 [ 197.291905][ T9699] should_failslab+0xa8/0x100 [ 197.291916][ T9699] kmem_cache_alloc_noprof+0x73/0x3c0 [ 197.291932][ T9699] ? skb_clone+0x212/0x3a0 [ 197.291944][ T9699] skb_clone+0x212/0x3a0 [ 197.291954][ T9699] __netlink_deliver_tap+0x404/0x850 [ 197.291974][ T9699] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.291987][ T9699] netlink_deliver_tap+0x19c/0x1b0 [ 197.291999][ T9699] netlink_sendskb+0x68/0x140 [ 197.292011][ T9699] netlink_rcv_skb+0x28c/0x470 [ 197.292023][ T9699] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.292038][ T9699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.292059][ T9699] ? down_read+0x1ad/0x2e0 [ 197.292072][ T9699] genl_rcv+0x28/0x40 [ 197.292085][ T9699] netlink_unicast+0x758/0x8d0 [ 197.292107][ T9699] netlink_sendmsg+0x805/0xb30 [ 197.292124][ T9699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.292144][ T9699] ? aa_sock_msg_perm+0x94/0x160 [ 197.292167][ T9699] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.292187][ T9699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.292208][ T9699] __sock_sendmsg+0x21c/0x270 [ 197.292236][ T9699] __sys_sendto+0x3bd/0x520 [ 197.292253][ T9699] ? __pfx___sys_sendto+0x10/0x10 [ 197.292271][ T9699] ? count_memcg_event_mm+0x21/0x260 [ 197.292293][ T9699] ? exc_page_fault+0x76/0xf0 [ 197.292305][ T9699] ? do_user_addr_fault+0xc8a/0x1390 [ 197.292319][ T9699] __x64_sys_sendto+0xde/0x100 [ 197.292334][ T9699] do_syscall_64+0xfa/0x3b0 [ 197.292344][ T9699] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.292353][ T9699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.292362][ T9699] ? clear_bhb_loop+0x60/0xb0 [ 197.292374][ T9699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.292383][ T9699] RIP: 0033:0x7f2bc6f907bc [ 197.292393][ T9699] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 197.292401][ T9699] RSP: 002b:00007f2bc7e7fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 197.292413][ T9699] RAX: ffffffffffffffda RBX: 00007f2bc7e7ffc0 RCX: 00007f2bc6f907bc [ 197.292420][ T9699] RDX: 000000000000001c RSI: 00007f2bc7e80010 RDI: 0000000000000006 [ 197.292426][ T9699] RBP: 0000000000000000 R08: 00007f2bc7e7ff14 R09: 000000000000000c [ 197.292432][ T9699] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 197.292438][ T9699] R13: 00007f2bc7e7ff68 R14: 00007f2bc7e80010 R15: 0000000000000000 [ 197.292453][ T9699] [ 197.706061][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'. [ 197.721943][ T9707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1213'. [ 197.734742][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1212'. [ 197.848770][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 197.928693][ T9716] xt_HMARK: spi-set and port-set can't be combined [ 198.198373][ T9731] FAULT_INJECTION: forcing a failure. [ 198.198373][ T9731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.216574][ T9731] CPU: 0 UID: 0 PID: 9731 Comm: syz.4.1221 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 198.216601][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.216613][ T9731] Call Trace: [ 198.216620][ T9731] [ 198.216627][ T9731] dump_stack_lvl+0x189/0x250 [ 198.216656][ T9731] ? __pfx____ratelimit+0x10/0x10 [ 198.216675][ T9731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.216697][ T9731] ? __pfx__printk+0x10/0x10 [ 198.216716][ T9731] ? __might_fault+0xb0/0x130 [ 198.216744][ T9731] should_fail_ex+0x414/0x560 [ 198.216770][ T9731] _copy_from_user+0x2d/0xb0 [ 198.216789][ T9731] ___sys_sendmsg+0x158/0x2a0 [ 198.216814][ T9731] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.216882][ T9731] ? __might_fault+0xb0/0x130 [ 198.216902][ T9731] __sys_sendmmsg+0x227/0x430 [ 198.216930][ T9731] ? __pfx___sys_sendmmsg+0x10/0x10 [ 198.216950][ T9731] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 198.216995][ T9731] ? ksys_write+0x22a/0x250 [ 198.217014][ T9731] ? __pfx_ksys_write+0x10/0x10 [ 198.217027][ T9731] ? rcu_is_watching+0x15/0xb0 [ 198.217058][ T9731] __x64_sys_sendmmsg+0xa0/0xc0 [ 198.217082][ T9731] do_syscall_64+0xfa/0x3b0 [ 198.217098][ T9731] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.217114][ T9731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.217131][ T9731] ? clear_bhb_loop+0x60/0xb0 [ 198.217151][ T9731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.217167][ T9731] RIP: 0033:0x7f6b5ef8e929 [ 198.217183][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.217197][ T9731] RSP: 002b:00007f6b5fd1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 198.217216][ T9731] RAX: ffffffffffffffda RBX: 00007f6b5f1b5fa0 RCX: 00007f6b5ef8e929 [ 198.217229][ T9731] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 198.217240][ T9731] RBP: 00007f6b5fd1b090 R08: 0000000000000000 R09: 0000000000000000 [ 198.217252][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.217262][ T9731] R13: 0000000000000000 R14: 00007f6b5f1b5fa0 R15: 00007ffeb6197ad8 [ 198.217291][ T9731] [ 198.492793][ T9738] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.567807][ T9745] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1222'. [ 198.624684][ T9747] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 198.632819][ T9747] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 198.640806][ T9747] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1227'. [ 198.652912][ T9747] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1227'. [ 198.815460][ T9755] xt_HMARK: spi-set and port-set can't be combined [ 198.834369][ T9757] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.099807][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 199.305476][ T9781] netlink: 'syz.3.1239': attribute type 1 has an invalid length. [ 199.349182][ T9781] netlink: 'syz.3.1239': attribute type 1 has an invalid length. [ 199.363337][ T9781] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1239'. [ 199.413448][ T9785] FAULT_INJECTION: forcing a failure. [ 199.413448][ T9785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.433800][ T9787] xt_HMARK: spi-set and port-set can't be combined [ 199.451833][ T9785] CPU: 0 UID: 0 PID: 9785 Comm: syz.1.1243 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 199.451860][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.451870][ T9785] Call Trace: [ 199.451878][ T9785] [ 199.451885][ T9785] dump_stack_lvl+0x189/0x250 [ 199.451914][ T9785] ? __pfx____ratelimit+0x10/0x10 [ 199.451932][ T9785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.451955][ T9785] ? __pfx__printk+0x10/0x10 [ 199.451973][ T9785] ? __might_fault+0xb0/0x130 [ 199.452008][ T9785] should_fail_ex+0x414/0x560 [ 199.452030][ T9785] _copy_from_user+0x2d/0xb0 [ 199.452047][ T9785] ___sys_sendmsg+0x158/0x2a0 [ 199.452074][ T9785] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.452131][ T9785] ? __fget_files+0x2a/0x420 [ 199.452148][ T9785] ? __fget_files+0x3a0/0x420 [ 199.452176][ T9785] __x64_sys_sendmsg+0x19b/0x260 [ 199.452201][ T9785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.452233][ T9785] ? __pfx_ksys_write+0x10/0x10 [ 199.452246][ T9785] ? rcu_is_watching+0x15/0xb0 [ 199.452274][ T9785] ? do_syscall_64+0xbe/0x3b0 [ 199.452295][ T9785] do_syscall_64+0xfa/0x3b0 [ 199.452311][ T9785] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.452327][ T9785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.452344][ T9785] ? clear_bhb_loop+0x60/0xb0 [ 199.452364][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.452380][ T9785] RIP: 0033:0x7f2bc6f8e929 [ 199.452396][ T9785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.452410][ T9785] RSP: 002b:00007f2bc7e81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.452428][ T9785] RAX: ffffffffffffffda RBX: 00007f2bc71b5fa0 RCX: 00007f2bc6f8e929 [ 199.452441][ T9785] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 199.452452][ T9785] RBP: 00007f2bc7e81090 R08: 0000000000000000 R09: 0000000000000000 [ 199.452462][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.452473][ T9785] R13: 0000000000000000 R14: 00007f2bc71b5fa0 R15: 00007ffda8f74e98 [ 199.452501][ T9785] [ 199.856525][ T9800] netlink: 'syz.2.1249': attribute type 1 has an invalid length. [ 199.901701][ T9804] netlink: 'syz.1.1250': attribute type 17 has an invalid length. [ 199.985122][ T9808] ip6t_REJECT: ECHOREPLY is not supported [ 200.071883][ T9813] FAULT_INJECTION: forcing a failure. [ 200.071883][ T9813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.095603][ T9813] CPU: 1 UID: 0 PID: 9813 Comm: syz.4.1252 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 200.095630][ T9813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.095641][ T9813] Call Trace: [ 200.095648][ T9813] [ 200.095654][ T9813] dump_stack_lvl+0x189/0x250 [ 200.095683][ T9813] ? __pfx____ratelimit+0x10/0x10 [ 200.095700][ T9813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.095722][ T9813] ? __pfx__printk+0x10/0x10 [ 200.095742][ T9813] ? __pfx_migrate_enable+0x10/0x10 [ 200.095768][ T9813] should_fail_ex+0x414/0x560 [ 200.095793][ T9813] _copy_to_user+0x31/0xb0 [ 200.095813][ T9813] generic_map_lookup_batch+0x8e8/0xcc0 [ 200.095847][ T9813] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 200.095866][ T9813] ? __fget_files+0x2a/0x420 [ 200.095891][ T9813] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 200.095908][ T9813] bpf_map_do_batch+0x25b/0x5f0 [ 200.095929][ T9813] ? security_bpf+0x7e/0x300 [ 200.095950][ T9813] __sys_bpf+0x70c/0x860 [ 200.095972][ T9813] ? __pfx___sys_bpf+0x10/0x10 [ 200.096006][ T9813] ? ksys_write+0x22a/0x250 [ 200.096023][ T9813] ? __pfx_ksys_write+0x10/0x10 [ 200.096034][ T9813] ? rcu_is_watching+0x15/0xb0 [ 200.096065][ T9813] __x64_sys_bpf+0x7c/0x90 [ 200.096084][ T9813] do_syscall_64+0xfa/0x3b0 [ 200.096100][ T9813] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.096115][ T9813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.096132][ T9813] ? clear_bhb_loop+0x60/0xb0 [ 200.096148][ T9813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.096163][ T9813] RIP: 0033:0x7f6b5ef8e929 [ 200.096184][ T9813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.096197][ T9813] RSP: 002b:00007f6b5fd1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.096215][ T9813] RAX: ffffffffffffffda RBX: 00007f6b5f1b5fa0 RCX: 00007f6b5ef8e929 [ 200.096228][ T9813] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 200.096238][ T9813] RBP: 00007f6b5fd1b090 R08: 0000000000000000 R09: 0000000000000000 [ 200.096247][ T9813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.096257][ T9813] R13: 0000000000000000 R14: 00007f6b5f1b5fa0 R15: 00007ffeb6197ad8 [ 200.096284][ T9813] [ 200.096508][ T9819] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.478046][ T9833] netlink: 'syz.1.1261': attribute type 1 has an invalid length. [ 200.488186][ T9833] netlink: 'syz.1.1261': attribute type 1 has an invalid length. [ 201.127548][ T9851] syzkaller0: entered promiscuous mode [ 201.146341][ T9851] syzkaller0: entered allmulticast mode [ 201.453488][ T9872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.631084][ T9876] netlink: 'syz.0.1273': attribute type 1 has an invalid length. [ 202.655822][ T9878] __nla_validate_parse: 8 callbacks suppressed [ 202.655841][ T9878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1273'. [ 202.679734][ T9876] netlink: 'syz.0.1273': attribute type 1 has an invalid length. [ 202.699500][ T9876] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1273'. [ 202.859392][ T9896] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.897976][ T9899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.958393][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 202.967998][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 202.988953][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 203.004737][ T9906] FAULT_INJECTION: forcing a failure. [ 203.004737][ T9906] name failslab, interval 1, probability 0, space 0, times 0 [ 203.020647][ T9906] CPU: 1 UID: 0 PID: 9906 Comm: syz.4.1282 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 203.020683][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.020693][ T9906] Call Trace: [ 203.020700][ T9906] [ 203.020708][ T9906] dump_stack_lvl+0x189/0x250 [ 203.020736][ T9906] ? __pfx____ratelimit+0x10/0x10 [ 203.020753][ T9906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.020775][ T9906] ? __pfx__printk+0x10/0x10 [ 203.020798][ T9906] ? __pfx___might_resched+0x10/0x10 [ 203.020823][ T9906] should_fail_ex+0x414/0x560 [ 203.020846][ T9906] should_failslab+0xa8/0x100 [ 203.020864][ T9906] __kmalloc_cache_noprof+0x70/0x3d0 [ 203.020879][ T9906] ? sctp_association_new+0x89/0x25f0 [ 203.020905][ T9906] sctp_association_new+0x89/0x25f0 [ 203.020929][ T9906] ? sctp_has_association+0x1cd/0x1f0 [ 203.020943][ T9906] ? sctp_has_association+0x2f/0x1f0 [ 203.020957][ T9906] ? __ipv6_addr_type+0x247/0x2f0 [ 203.020978][ T9906] sctp_connect_new_asoc+0x2c5/0x690 [ 203.021002][ T9906] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 203.021024][ T9906] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 203.021043][ T9906] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 203.021060][ T9906] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 203.021080][ T9906] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 203.021099][ T9906] ? security_sctp_bind_connect+0x7e/0x2e0 [ 203.021121][ T9906] sctp_sendmsg+0x155c/0x2810 [ 203.021155][ T9906] ? __pfx_sctp_sendmsg+0x10/0x10 [ 203.021179][ T9906] ? aa_sk_perm+0x81e/0x950 [ 203.021203][ T9906] ? __pfx_aa_sk_perm+0x10/0x10 [ 203.021224][ T9906] ? sock_rps_record_flow+0x19/0x410 [ 203.021244][ T9906] ? inet_sendmsg+0x2f4/0x370 [ 203.021258][ T9906] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.021278][ T9906] __sock_sendmsg+0x19c/0x270 [ 203.021301][ T9906] __sys_sendto+0x3bd/0x520 [ 203.021323][ T9906] ? __pfx___sys_sendto+0x10/0x10 [ 203.021340][ T9906] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 203.021370][ T9906] ? __fget_files+0x3a0/0x420 [ 203.021398][ T9906] ? ksys_write+0x22a/0x250 [ 203.021415][ T9906] ? __pfx_ksys_write+0x10/0x10 [ 203.021428][ T9906] ? rcu_is_watching+0x15/0xb0 [ 203.021455][ T9906] __x64_sys_sendto+0xde/0x100 [ 203.021476][ T9906] do_syscall_64+0xfa/0x3b0 [ 203.021492][ T9906] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.021505][ T9906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.021518][ T9906] ? clear_bhb_loop+0x60/0xb0 [ 203.021533][ T9906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.021545][ T9906] RIP: 0033:0x7f6b5ef8e929 [ 203.021557][ T9906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.021568][ T9906] RSP: 002b:00007f6b5fd1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 203.021582][ T9906] RAX: ffffffffffffffda RBX: 00007f6b5f1b5fa0 RCX: 00007f6b5ef8e929 [ 203.021591][ T9906] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 203.021599][ T9906] RBP: 00007f6b5fd1b090 R08: 000020000005ffe4 R09: 000000000000001c [ 203.021608][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.021616][ T9906] R13: 0000000000000000 R14: 00007f6b5f1b5fa0 R15: 00007ffeb6197ad8 [ 203.021636][ T9906] [ 203.470197][ T9914] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1285'. [ 204.251532][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.266069][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.290030][ T9935] validate_nla: 2 callbacks suppressed [ 204.290047][ T9935] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 204.326710][ T9935] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 204.336100][ T9935] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1290'. [ 204.385095][ T9929] syzkaller0: entered promiscuous mode [ 204.393407][ T9929] syzkaller0: entered allmulticast mode [ 204.412162][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.463471][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.500954][ T9938] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1290'. [ 204.800794][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1294'. [ 204.878307][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1294'. [ 206.712114][ T9976] syzkaller0: entered promiscuous mode [ 206.745556][ T9976] syzkaller0: entered allmulticast mode [ 206.875086][ T9987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.911019][ T9991] FAULT_INJECTION: forcing a failure. [ 206.911019][ T9991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.911956][ T9991] [ 206.911964][ T9991] ====================================================== [ 206.911969][ T9991] WARNING: possible circular locking dependency detected [ 206.911979][ T9991] 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 Not tainted [ 206.911987][ T9991] ------------------------------------------------------ [ 206.911993][ T9991] syz.2.1308/9991 is trying to acquire lock: [ 206.912000][ T9991] ffffffff8e132fc0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 206.912035][ T9991] [ 206.912035][ T9991] but task is already holding lock: [ 206.912039][ T9991] ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 206.912071][ T9991] [ 206.912071][ T9991] which lock already depends on the new lock. [ 206.912071][ T9991] [ 206.912075][ T9991] [ 206.912075][ T9991] the existing dependency chain (in reverse order) is: [ 206.912080][ T9991] [ 206.912080][ T9991] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 206.912101][ T9991] lock_acquire+0x120/0x360 [ 206.912116][ T9991] _raw_spin_lock_nested+0x32/0x50 [ 206.912127][ T9991] raw_spin_rq_lock_nested+0x2a/0x140 [ 206.912143][ T9991] task_rq_lock+0xbc/0x470 [ 206.912158][ T9991] cgroup_move_task+0x9a/0x590 [ 206.912168][ T9991] css_set_move_task+0x658/0x9e0 [ 206.912180][ T9991] cgroup_post_fork+0x1ef/0x790 [ 206.912190][ T9991] copy_process+0x3862/0x3c00 [ 206.912201][ T9991] kernel_clone+0x21e/0x870 [ 206.912212][ T9991] user_mode_thread+0xdd/0x140 [ 206.912222][ T9991] rest_init+0x23/0x300 [ 206.912235][ T9991] start_kernel+0x47d/0x500 [ 206.912248][ T9991] x86_64_start_reservations+0x24/0x30 [ 206.912265][ T9991] x86_64_start_kernel+0x143/0x1c0 [ 206.912280][ T9991] common_startup_64+0x13e/0x147 [ 206.912292][ T9991] [ 206.912292][ T9991] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 206.912315][ T9991] lock_acquire+0x120/0x360 [ 206.912329][ T9991] _raw_spin_lock_irqsave+0xa7/0xf0 [ 206.912346][ T9991] try_to_wake_up+0x6e/0x1290 [ 206.912358][ T9991] create_worker+0x503/0x720 [ 206.912371][ T9991] workqueue_init+0x503/0x8a0 [ 206.912381][ T9991] kernel_init_freeable+0x3a7/0x570 [ 206.912394][ T9991] kernel_init+0x1d/0x1d0 [ 206.912407][ T9991] ret_from_fork+0x3f9/0x770 [ 206.912422][ T9991] ret_from_fork_asm+0x1a/0x30 [ 206.912434][ T9991] [ 206.912434][ T9991] -> #3 (&pool->lock){-.-.}-{2:2}: [ 206.912450][ T9991] lock_acquire+0x120/0x360 [ 206.912464][ T9991] _raw_spin_lock+0x2e/0x40 [ 206.912478][ T9991] __queue_work+0x7b0/0xfe0 [ 206.912488][ T9991] queue_work_on+0x181/0x270 [ 206.912497][ T9991] rpm_suspend+0xe54/0x1720 [ 206.912509][ T9991] __pm_runtime_idle+0x12f/0x1a0 [ 206.912520][ T9991] __device_attach+0x342/0x400 [ 206.912532][ T9991] bus_probe_device+0x185/0x260 [ 206.912548][ T9991] device_add+0x7b6/0xb50 [ 206.912559][ T9991] serial_base_port_add+0x2f2/0x430 [ 206.912573][ T9991] serial_core_register_port+0x367/0x2700 [ 206.912584][ T9991] serial8250_register_8250_port+0x16db/0x2050 [ 206.912600][ T9991] serial_pnp_probe+0x527/0x790 [ 206.912615][ T9991] pnp_device_probe+0x308/0x4c0 [ 206.912625][ T9991] really_probe+0x26d/0x9a0 [ 206.912637][ T9991] __driver_probe_device+0x18c/0x2f0 [ 206.912650][ T9991] driver_probe_device+0x4f/0x430 [ 206.912662][ T9991] __driver_attach+0x452/0x700 [ 206.912674][ T9991] bus_for_each_dev+0x233/0x2b0 [ 206.912689][ T9991] bus_add_driver+0x345/0x640 [ 206.912705][ T9991] driver_register+0x23a/0x320 [ 206.912719][ T9991] serial8250_init+0xc2/0x1c0 [ 206.912734][ T9991] do_one_initcall+0x233/0x820 [ 206.912742][ T9991] do_initcall_level+0x137/0x1f0 [ 206.912752][ T9991] do_initcalls+0x69/0xd0 [ 206.912762][ T9991] kernel_init_freeable+0x3d9/0x570 [ 206.912772][ T9991] kernel_init+0x1d/0x1d0 [ 206.912781][ T9991] ret_from_fork+0x3f9/0x770 [ 206.912792][ T9991] ret_from_fork_asm+0x1a/0x30 [ 206.912801][ T9991] [ 206.912801][ T9991] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 206.912813][ T9991] lock_acquire+0x120/0x360 [ 206.912823][ T9991] _raw_spin_lock_irqsave+0xa7/0xf0 [ 206.912835][ T9991] __pm_runtime_resume+0x10f/0x180 [ 206.912844][ T9991] __uart_start+0x171/0x440 [ 206.912850][ T9991] uart_write+0xdc/0x130 [ 206.912858][ T9991] n_tty_write+0xd32/0x11d0 [ 206.912869][ T9991] file_tty_write+0x503/0x990 [ 206.912876][ T9991] vfs_write+0x548/0xa90 [ 206.912889][ T9991] ksys_write+0x145/0x250 [ 206.912896][ T9991] do_syscall_64+0xfa/0x3b0 [ 206.912905][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.912913][ T9991] [ 206.912913][ T9991] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 206.912925][ T9991] lock_acquire+0x120/0x360 [ 206.912936][ T9991] _raw_spin_lock_irqsave+0xa7/0xf0 [ 206.912947][ T9991] serial8250_console_write+0x17e/0x1ba0 [ 206.912956][ T9991] console_flush_all+0x728/0xc40 [ 206.912965][ T9991] console_unlock+0xc4/0x270 [ 206.912973][ T9991] vprintk_emit+0x5b7/0x7a0 [ 206.912979][ T9991] _printk+0xcf/0x120 [ 206.912988][ T9991] register_console+0xa8b/0xf90 [ 206.912996][ T9991] univ8250_console_init+0x52/0x90 [ 206.913008][ T9991] console_init+0x1a1/0x670 [ 206.913019][ T9991] start_kernel+0x2cc/0x500 [ 206.913028][ T9991] x86_64_start_reservations+0x24/0x30 [ 206.913041][ T9991] x86_64_start_kernel+0x143/0x1c0 [ 206.913053][ T9991] common_startup_64+0x13e/0x147 [ 206.913062][ T9991] [ 206.913062][ T9991] -> #0 (console_owner){-.-.}-{0:0}: [ 206.913073][ T9991] validate_chain+0xb9b/0x2140 [ 206.913081][ T9991] __lock_acquire+0xab9/0xd20 [ 206.913091][ T9991] lock_acquire+0x120/0x360 [ 206.913102][ T9991] console_flush_all+0x6d2/0xc40 [ 206.913110][ T9991] console_unlock+0xc4/0x270 [ 206.913117][ T9991] vprintk_emit+0x5b7/0x7a0 [ 206.913125][ T9991] _printk+0xcf/0x120 [ 206.913132][ T9991] should_fail_ex+0x3f5/0x560 [ 206.913142][ T9991] strncpy_from_user+0x36/0x290 [ 206.913152][ T9991] strncpy_from_user_nofault+0x72/0x150 [ 206.913163][ T9991] bpf_probe_read_user_str+0x2a/0x70 [ 206.913176][ T9991] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 206.913183][ T9991] bpf_trace_run2+0x284/0x4b0 [ 206.913193][ T9991] __bpf_trace_tlb_flush+0xf5/0x150 [ 206.913201][ T9991] trace_tlb_flush+0x115/0x140 [ 206.913209][ T9991] switch_mm_irqs_off+0x53e/0x7a0 [ 206.913218][ T9991] __schedule+0x106c/0x4d00 [ 206.913230][ T9991] schedule+0x165/0x360 [ 206.913242][ T9991] schedule_preempt_disabled+0x13/0x30 [ 206.913254][ T9991] __mutex_lock+0x3ce/0xe80 [ 206.913262][ T9991] rtnetlink_rcv_msg+0x71c/0xb70 [ 206.913273][ T9991] netlink_rcv_skb+0x205/0x470 [ 206.913283][ T9991] netlink_unicast+0x758/0x8d0 [ 206.913292][ T9991] netlink_sendmsg+0x805/0xb30 [ 206.913306][ T9991] __sock_sendmsg+0x21c/0x270 [ 206.913315][ T9991] ____sys_sendmsg+0x505/0x830 [ 206.913327][ T9991] ___sys_sendmsg+0x21f/0x2a0 [ 206.913338][ T9991] __x64_sys_sendmsg+0x19b/0x260 [ 206.913350][ T9991] do_syscall_64+0xfa/0x3b0 [ 206.913358][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.913367][ T9991] [ 206.913367][ T9991] other info that might help us debug this: [ 206.913367][ T9991] [ 206.913370][ T9991] Chain exists of: [ 206.913370][ T9991] console_owner --> &p->pi_lock --> &rq->__lock [ 206.913370][ T9991] [ 206.913384][ T9991] Possible unsafe locking scenario: [ 206.913384][ T9991] [ 206.913387][ T9991] CPU0 CPU1 [ 206.913390][ T9991] ---- ---- [ 206.913393][ T9991] lock(&rq->__lock); [ 206.913398][ T9991] lock(&p->pi_lock); [ 206.913405][ T9991] lock(&rq->__lock); [ 206.913411][ T9991] lock(console_owner); [ 206.913417][ T9991] [ 206.913417][ T9991] *** DEADLOCK *** [ 206.913417][ T9991] [ 206.913420][ T9991] 5 locks held by syz.2.1308/9991: [ 206.913425][ T9991] #0: ffffffff8f512a88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 206.913448][ T9991] #1: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 206.913473][ T9991] #2: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 206.913494][ T9991] #3: ffffffff8e133020 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 206.913514][ T9991] #4: ffffffff8e01a8f0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 206.913535][ T9991] [ 206.913535][ T9991] stack backtrace: [ 206.913541][ T9991] CPU: 1 UID: 0 PID: 9991 Comm: syz.2.1308 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 206.913552][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.913559][ T9991] Call Trace: [ 206.913563][ T9991] [ 206.913567][ T9991] dump_stack_lvl+0x189/0x250 [ 206.913582][ T9991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.913596][ T9991] ? __pfx__printk+0x10/0x10 [ 206.913605][ T9991] ? print_lock_name+0xde/0x100 [ 206.913615][ T9991] print_circular_bug+0x2ee/0x310 [ 206.913625][ T9991] check_noncircular+0x134/0x160 [ 206.913635][ T9991] validate_chain+0xb9b/0x2140 [ 206.913648][ T9991] __lock_acquire+0xab9/0xd20 [ 206.913661][ T9991] ? console_flush_all+0x13a/0xc40 [ 206.913670][ T9991] lock_acquire+0x120/0x360 [ 206.913682][ T9991] ? console_flush_all+0x13a/0xc40 [ 206.913693][ T9991] ? do_raw_spin_unlock+0x122/0x240 [ 206.913703][ T9991] ? console_flush_all+0x13a/0xc40 [ 206.913713][ T9991] console_flush_all+0x6d2/0xc40 [ 206.913722][ T9991] ? console_flush_all+0x13a/0xc40 [ 206.913731][ T9991] ? console_flush_all+0x13a/0xc40 [ 206.913742][ T9991] ? __pfx_console_flush_all+0x10/0x10 [ 206.913753][ T9991] ? is_printk_cpu_sync_owner+0x32/0x40 [ 206.913765][ T9991] console_unlock+0xc4/0x270 [ 206.913774][ T9991] ? __pfx_console_unlock+0x10/0x10 [ 206.913783][ T9991] ? is_printk_cpu_sync_owner+0x32/0x40 [ 206.913795][ T9991] vprintk_emit+0x5b7/0x7a0 [ 206.913803][ T9991] ? __pfx_vprintk_emit+0x10/0x10 [ 206.913813][ T9991] ? unwind_next_frame+0xa5/0x2390 [ 206.913828][ T9991] _printk+0xcf/0x120 [ 206.913837][ T9991] ? __pfx____ratelimit+0x10/0x10 [ 206.913846][ T9991] ? __pfx__printk+0x10/0x10 [ 206.913858][ T9991] should_fail_ex+0x3f5/0x560 [ 206.913869][ T9991] strncpy_from_user+0x36/0x290 [ 206.913881][ T9991] strncpy_from_user_nofault+0x72/0x150 [ 206.913893][ T9991] bpf_probe_read_user_str+0x2a/0x70 [ 206.913907][ T9991] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 206.913914][ T9991] bpf_trace_run2+0x284/0x4b0 [ 206.913925][ T9991] ? bpf_trace_run2+0x186/0x4b0 [ 206.913935][ T9991] ? __pfx_bpf_trace_run2+0x10/0x10 [ 206.913946][ T9991] ? kvm_sched_clock_read+0x11/0x20 [ 206.913960][ T9991] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 206.913970][ T9991] __bpf_trace_tlb_flush+0xf5/0x150 [ 206.913979][ T9991] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 206.913989][ T9991] ? psi_group_change+0xbc7/0x1210 [ 206.913998][ T9991] ? rcu_read_lock_sched_held+0x89/0x100 [ 206.914013][ T9991] trace_tlb_flush+0x115/0x140 [ 206.914022][ T9991] switch_mm_irqs_off+0x53e/0x7a0 [ 206.914033][ T9991] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 206.914042][ T9991] ? psi_task_switch+0x314/0x6d0 [ 206.914052][ T9991] __schedule+0x106c/0x4d00 [ 206.914068][ T9991] ? schedule+0x165/0x360 [ 206.914080][ T9991] ? irqentry_exit+0x74/0x90 [ 206.914089][ T9991] ? __pfx___schedule+0x10/0x10 [ 206.914106][ T9991] ? __pfx_osq_unlock+0x10/0x10 [ 206.914115][ T9991] schedule+0x165/0x360 [ 206.914129][ T9991] schedule_preempt_disabled+0x13/0x30 [ 206.914142][ T9991] __mutex_lock+0x3ce/0xe80 [ 206.914153][ T9991] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 206.914164][ T9991] ? __pfx___mutex_lock+0x10/0x10 [ 206.914177][ T9991] rtnetlink_rcv_msg+0x71c/0xb70 [ 206.914188][ T9991] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 206.914198][ T9991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.914209][ T9991] ? ref_tracker_free+0x63a/0x7d0 [ 206.914220][ T9991] ? __copy_skb_header+0xa7/0x550 [ 206.914234][ T9991] ? __pfx_ref_tracker_free+0x10/0x10 [ 206.914247][ T9991] netlink_rcv_skb+0x205/0x470 [ 206.914258][ T9991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.914269][ T9991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.914282][ T9991] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.914292][ T9991] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.914309][ T9991] netlink_unicast+0x758/0x8d0 [ 206.914321][ T9991] netlink_sendmsg+0x805/0xb30 [ 206.914334][ T9991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.914346][ T9991] ? aa_sock_msg_perm+0x94/0x160 [ 206.914358][ T9991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.914370][ T9991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.914381][ T9991] __sock_sendmsg+0x21c/0x270 [ 206.914391][ T9991] ____sys_sendmsg+0x505/0x830 [ 206.914405][ T9991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.914420][ T9991] ? import_iovec+0x74/0xa0 [ 206.914429][ T9991] ___sys_sendmsg+0x21f/0x2a0 [ 206.914442][ T9991] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.914462][ T9991] ? __fget_files+0x2a/0x420 [ 206.914472][ T9991] ? __fget_files+0x3a0/0x420 [ 206.914483][ T9991] __x64_sys_sendmsg+0x19b/0x260 [ 206.914496][ T9991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.914511][ T9991] ? __pfx_ksys_write+0x10/0x10 [ 206.914518][ T9991] ? rcu_is_watching+0x15/0xb0 [ 206.914533][ T9991] ? do_syscall_64+0xbe/0x3b0 [ 206.914543][ T9991] do_syscall_64+0xfa/0x3b0 [ 206.914552][ T9991] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.914559][ T9991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.914568][ T9991] ? clear_bhb_loop+0x60/0xb0 [ 206.914578][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.914587][ T9991] RIP: 0033:0x7f1f53d8e929 [ 206.914595][ T9991] Code: Unable to access opcode bytes at 0x7f1f53d8e8ff. [ 206.914599][ T9991] RSP: 002b:00007f1f54b3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.914609][ T9991] RAX: ffffffffffffffda RBX: 00007f1f53fb5fa0 RCX: 00007f1f53d8e929 [ 206.914616][ T9991] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 206.914622][ T9991] RBP: 00007f1f54b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 206.914627][ T9991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.914633][ T9991] R13: 0000000000000000 R14: 00007f1f53fb5fa0 R15: 00007fff173d3858 [ 206.914642][ T9991] [ 208.290339][ T9991] CPU: 1 UID: 0 PID: 9991 Comm: syz.2.1308 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 208.290355][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.290362][ T9991] Call Trace: [ 208.290369][ T9991] [ 208.290376][ T9991] dump_stack_lvl+0x189/0x250 [ 208.290395][ T9991] ? __pfx____ratelimit+0x10/0x10 [ 208.290404][ T9991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.290418][ T9991] ? __pfx__printk+0x10/0x10 [ 208.290430][ T9991] should_fail_ex+0x414/0x560 [ 208.290443][ T9991] strncpy_from_user+0x36/0x290 [ 208.290456][ T9991] strncpy_from_user_nofault+0x72/0x150 [ 208.290470][ T9991] bpf_probe_read_user_str+0x2a/0x70 [ 208.290485][ T9991] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 208.290493][ T9991] bpf_trace_run2+0x284/0x4b0 [ 208.290505][ T9991] ? bpf_trace_run2+0x186/0x4b0 [ 208.290515][ T9991] ? __pfx_bpf_trace_run2+0x10/0x10 [ 208.290527][ T9991] ? kvm_sched_clock_read+0x11/0x20 [ 208.290540][ T9991] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 208.290550][ T9991] __bpf_trace_tlb_flush+0xf5/0x150 [ 208.290560][ T9991] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 208.290570][ T9991] ? psi_group_change+0xbc7/0x1210 [ 208.290579][ T9991] ? rcu_read_lock_sched_held+0x89/0x100 [ 208.290594][ T9991] trace_tlb_flush+0x115/0x140 [ 208.290605][ T9991] switch_mm_irqs_off+0x53e/0x7a0 [ 208.290616][ T9991] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 208.290625][ T9991] ? psi_task_switch+0x314/0x6d0 [ 208.290635][ T9991] __schedule+0x106c/0x4d00 [ 208.290653][ T9991] ? schedule+0x165/0x360 [ 208.290665][ T9991] ? irqentry_exit+0x74/0x90 [ 208.290675][ T9991] ? __pfx___schedule+0x10/0x10 [ 208.290691][ T9991] ? __pfx_osq_unlock+0x10/0x10 [ 208.290700][ T9991] schedule+0x165/0x360 [ 208.290714][ T9991] schedule_preempt_disabled+0x13/0x30 [ 208.290727][ T9991] __mutex_lock+0x3ce/0xe80 [ 208.290738][ T9991] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 208.290751][ T9991] ? __pfx___mutex_lock+0x10/0x10 [ 208.290764][ T9991] rtnetlink_rcv_msg+0x71c/0xb70 [ 208.290775][ T9991] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 208.290786][ T9991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.290796][ T9991] ? ref_tracker_free+0x63a/0x7d0 [ 208.290807][ T9991] ? __copy_skb_header+0xa7/0x550 [ 208.290821][ T9991] ? __pfx_ref_tracker_free+0x10/0x10 [ 208.290835][ T9991] netlink_rcv_skb+0x205/0x470 [ 208.290847][ T9991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.290858][ T9991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.290871][ T9991] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.290881][ T9991] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.290893][ T9991] netlink_unicast+0x758/0x8d0 [ 208.290905][ T9991] netlink_sendmsg+0x805/0xb30 [ 208.290918][ T9991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.290930][ T9991] ? aa_sock_msg_perm+0x94/0x160 [ 208.290943][ T9991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.290955][ T9991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.290966][ T9991] __sock_sendmsg+0x21c/0x270 [ 208.290976][ T9991] ____sys_sendmsg+0x505/0x830 [ 208.290991][ T9991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.291006][ T9991] ? import_iovec+0x74/0xa0 [ 208.291015][ T9991] ___sys_sendmsg+0x21f/0x2a0 [ 208.291029][ T9991] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.291048][ T9991] ? __fget_files+0x2a/0x420 [ 208.291058][ T9991] ? __fget_files+0x3a0/0x420 [ 208.291070][ T9991] __x64_sys_sendmsg+0x19b/0x260 [ 208.291083][ T9991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.291098][ T9991] ? __pfx_ksys_write+0x10/0x10 [ 208.291106][ T9991] ? rcu_is_watching+0x15/0xb0 [ 208.291126][ T9991] ? do_syscall_64+0xbe/0x3b0 [ 208.291136][ T9991] do_syscall_64+0xfa/0x3b0 [ 208.291145][ T9991] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.291154][ T9991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.291163][ T9991] ? clear_bhb_loop+0x60/0xb0 [ 208.291173][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.291182][ T9991] RIP: 0033:0x7f1f53d8e929 [ 208.291191][ T9991] Code: Unable to access opcode bytes at 0x7f1f53d8e8ff. [ 208.291195][ T9991] RSP: 002b:00007f1f54b3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.291207][ T9991] RAX: ffffffffffffffda RBX: 00007f1f53fb5fa0 RCX: 00007f1f53d8e929 [ 208.291213][ T9991] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 208.291219][ T9991] RBP: 00007f1f54b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 208.291225][ T9991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.291231][ T9991] R13: 0000000000000000 R14: 00007f1f53fb5fa0 R15: 00007fff173d3858 [ 208.291240][ T9991] [ 208.821211][ T9995] __nla_validate_parse: 2 callbacks suppressed [ 208.821226][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 208.853754][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1307'. [ 208.867686][ T9995] netlink: 'syz.4.1307': attribute type 19 has an invalid length.