last executing test programs: 41.412547529s ago: executing program 0 (id=4371): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000040)) (fail_nth: 6) 41.136502146s ago: executing program 0 (id=4376): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x13) write(0xffffffffffffffff, &(0x7f0000000040)="23000000010011", 0x7) 40.8764602s ago: executing program 0 (id=4379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x700, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.802541727s ago: executing program 0 (id=4381): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100fdffffff000000000800000008000300", @ANYRES32=r3], 0x1c}}, 0x44040) 40.492647673s ago: executing program 0 (id=4384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x8000000}, 0x38) 40.252354235s ago: executing program 0 (id=4389): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x40) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r5, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0xc834) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x2c, r8, 0x801, 0x70bd2e, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xba83542b86c80fd7}, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r11, r12, 0x0, 0x7feff000) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r13, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r14, 0x400448e0, &(0x7f0000000000)) 25.003861481s ago: executing program 32 (id=4389): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x40) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r5, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0xc834) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x2c, r8, 0x801, 0x70bd2e, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xba83542b86c80fd7}, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r11, r12, 0x0, 0x7feff000) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r13, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r14, 0x400448e0, &(0x7f0000000000)) 2.498460147s ago: executing program 5 (id=4905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xe4ff, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) 2.37099754s ago: executing program 5 (id=4907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) 2.279888533s ago: executing program 5 (id=4908): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) (fail_nth: 23) 1.762068593s ago: executing program 5 (id=4913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x2, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.76159255s ago: executing program 3 (id=4914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) (fail_nth: 13) 1.368404759s ago: executing program 3 (id=4916): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf254500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1.304984371s ago: executing program 2 (id=4918): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xf0ff, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) 1.216207926s ago: executing program 3 (id=4920): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 1.118964846s ago: executing program 2 (id=4921): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600eaff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x5d, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"/264], 0x108}}, 0x0) r2 = socket(0x15, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000040000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff0000400000000000000000000000000000000000ff00000015c115a896c4c3ced463afb37cc4ae80a7da89dbee59f43d44ceb7db9692c78eeef357a776848fc5f29b3b0e5b7dcc9ad2a1d3902b01d93f9da76ee9b38fbb00de3575779491aa08350effd7baf54f9fafdb298d6ca3405b639f2e31619114a1783dfc588b9d6079859534ba9e8f55f21d43a257f4b4b616ae1cf6a885c88a26fe2d642ee99125bb4dfc0e"], 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x1c, r5, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000800}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20) r6 = accept(r3, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000300)="9f797527ff6b85d124ab830d9cca7ae32938fa64b03d2f5d22c9200ae55671402c8cd83efa412a563ca5fb7e74fe6cccf85a3a309cf6e7f5db7a8b376e954cfe4f918aacdac0f30390cd265bbe276f3178651ee3af09090f855093d36b749933fa50bc68b7f6ab1a536d8c6f841de990b97706bea91063abd1bfb663eca9f93cbd9f68e3ddb456055ba1abb30a374f041aa1397a0df6e1b82943", &(0x7f0000000480)=@tcp6=r6, 0x2}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'sit0\x00', r7, 0x0, 0x7807, 0xee1e, 0x10000, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0xfa, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}}}}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0xa0304000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="f4000000130000022cbd7000fcdbdf25060701024e244e23020000000df8ffff01000000c409000005000000030000000100008003000000", @ANYRES32=r8, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000001) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r12, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r15, @ANYBLOB="250300000000000000000800"], 0x14}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000f003d37bfe76f4a152edec10100055f8790e00248ddebdc5d945b02a5506e3813a5c1417b50e7360f485c1c812cdd9678b40671dc3189ed34fa29686d1f0dccbe3fee90d7afd2cb391223be0ca83c71244b912b6e3d8a718d2d7a6b5879598d2914d948e152d579f9fe90ec7f0bd2845a8b366b646da4fb7502a9a10ad8a66eff913457033d66ed86f14c0a4afce5ebccbd45791c7f2e0a59612ee9b1f874e90eabed30e3f9cf8c1d2b66e3f140ecb9445205b0c17ba248f579137c0576a30a9fe14eaeb1f7c4f09004671357a4bb9e85cf8f658a359ba5ab5347fb40f5", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf250f0000000800270001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) 1.083333216s ago: executing program 1 (id=4922): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000540)={0x1, 0x7, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x40880) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0)="33429ab8305cafbec72631f9ed45fc4a6870c1d57385680943c2fd295ad08ad386bc9b68a134c98e329dc56f59738c8d9890657d8ead655581e674fa8136e62014101fe5e1a4476719d1b0bbca8ae23fd6697923bccb1947f2d77c213e262a8ad08715bc0dc07833666bb4", 0x0}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x140) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0xc, @empty, 0x4e22, 0x0, 'sed\x00', 0x0, 0x0, 0x11}, 0x2c) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) splice(r5, 0x0, r6, 0x0, 0x10500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x1c8, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x7}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0x3, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x2}}, {0x8, 0x2, [0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x0, 0x7fff}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x2, 0x5, 0x8000, 0x1, 0x7f, 0x3, 0x2}}, {0x8, 0x2, [0x7a9, 0x27]}}, {{0x1c, 0x1, {0x2c, 0x6, 0x8000, 0x9, 0x1, 0x5000000, 0x9, 0x6}}, {0x10, 0x2, [0x48c, 0x6ba, 0x0, 0x28, 0x78a7, 0x15]}}, {{0x1c, 0x1, {0x4, 0x10, 0x2, 0xb, 0x1, 0x3ff, 0x4691, 0x7}}, {0x12, 0x2, [0x2, 0xd5e6, 0x7f, 0x4, 0x95b3, 0x5, 0x2]}}]}]}, 0x1c8}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a000000979dab0ef376be1fb0cf2cd09d0000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 1.051707374s ago: executing program 4 (id=4923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'pim6reg\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x98, r4, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000040), 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x20000080) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1.020022998s ago: executing program 5 (id=4924): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) (async) listen(r0, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r3, 0x9}, 0x8) listen(r1, 0x2) 979.551435ms ago: executing program 3 (id=4925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200b11bd2dad148", @ANYRES32=r4, @ANYBLOB="08009f00070000000800260085160000"], 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20008001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000700bd00aa0a0000"], 0x38}}, 0x0) 800.360076ms ago: executing program 3 (id=4926): r0 = socket$inet6(0xa, 0x3, 0x2f) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x3, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) 768.138317ms ago: executing program 2 (id=4927): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000004c0), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f00000003c0)={0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000151080001006c6f67000c00028006000240290000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000c3ad100000000000000a"], 0x70}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYRESHEX=r2], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) recvfrom$unix(r0, &(0x7f0000000980)=""/4096, 0x1000, 0x21, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="318326bd7000a1ff000019ebf7c748c8db0000002b24018008000100e9ab29e6593dfca7677435aae6fe70dc4e70d1d27fcc00b142f9d2c29f12be9ffc2c4c7c43c29c19c482b91e2dce3e94faab91ac28037f22e852d86bed4436c9f144b16f4f8b068f8806dae7260f9dcab6aab201a48ba0f10656b272082a4c1b46cf45eea92c5235f21475514164307c02c0938ec018", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060ad19f00000000000000000200ffff0900020073797a32000000000900010073797a30000000000c0003400000000000000002140000001100010000000000000000000700000a"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x110}], 0x1}, 0x80) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r9, 0x1) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000280)=""/6, &(0x7f0000000300)=0x6) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) 716.509175ms ago: executing program 1 (id=4928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00030040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 653.383859ms ago: executing program 3 (id=4929): socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c060000) unshare(0x2c020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) pipe(&(0x7f0000002740)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 182.570098ms ago: executing program 4 (id=4930): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @default, @default, @null, @rose, @default, @rose, @default]}, &(0x7f0000000000)=0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x14, 0x34, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}}, 0x14}}, 0x8004) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x284e, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x10, 0x80800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da52deda337f8af0366be93702298a20b912b44091a10ec9d76ab09f3b44ee95c1de86a9fee94df8dc49001ce17774fea95cd2cbd5e662f1ea9d73351feabf5ef6f6bba0853c240188f92c5f4ae3c27038150a5c6ac31cb4545d6baabd07f705a1ea0e", &(0x7f0000000100), 0x1003, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r4, &(0x7f0000000180)="f85115", 0x0}, 0x20) sendto$llc(r3, &(0x7f00000002c0)="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", 0x1000, 0x41, &(0x7f00000012c0)={0x1a, 0x17, 0x6, 0x6, 0x2, 0xf9, @random="347a4197d486"}, 0x10) 182.031206ms ago: executing program 1 (id=4931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 181.81199ms ago: executing program 2 (id=4932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xffe4, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) 181.329754ms ago: executing program 4 (id=4933): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pim6reg\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x98, r3, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x4a, &(0x7f0000000040), 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x20000080) 181.203065ms ago: executing program 2 (id=4934): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1, 0xffff}]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x20) 178.746636ms ago: executing program 1 (id=4935): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 178.453768ms ago: executing program 4 (id=4936): socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) 178.080287ms ago: executing program 2 (id=4937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f00000006c0)={0xe0002004}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000500)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb8, r9, 0x2, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdff75bc8b6807947}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa2e45305f8fbb98}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48000}, 0x20000040) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 177.867821ms ago: executing program 4 (id=4938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x7ffffffe}]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x80) 177.424623ms ago: executing program 1 (id=4939): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900bb44fb8a11924f8f35799b2b8735d59a0000000000000001000000050007000000000008000900000000001400200000054600000000000000ffff5f00000108000a001c000000060002000100000014001f008a3d03736cfaf4a30f57081e10904694e23e3b344b8da56f267fca2cb9c672333a5824e4309293499c53dffb58cfc408e8109c08d4b18a4e75a08f81a30332b12ac436019c876901e77bafba8c6fd817bf0b45a6abf9b233e566f8487919d171986ba741ceafccf3b659d5565c017823f6bdd9eaec8718ab9516b308aefd54fe4ae9e14483f608a1e10b66739ba2bd61ad93fd4144fa14e5236444a4ce85e4f797bae83ac295f01081ceea7a5b34372468c59648ed7574468c1bbea6e4425bafe3e4d95265866908928792dc5d639aab0ce0ea280fcbef20f03dad954ad8ccb81a78bdc2c76157fcf582382f01b584c3d4dbdde8147cc1b7e66cf3b793b390ce5ad8a25cb1f1ff608dc93199"], 0x5c}, 0x1, 0x620b}, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000000c0)=0xf, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r10 = gettid() r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000010000304f9fffffffedbdf2500007400f011c41acd7a847ac5a355be55b75fb099", @ANYRES32=r9, @ANYBLOB="049c01000750050008001300", @ANYRES32=r10, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001cc0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000680)=0xe8) r13 = getgid() r14 = getpid() r15 = getgid() r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f"], 0x2c}}, 0x0) r17 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r17, 0x1, 0x31, 0x0, &(0x7f00000008c0)) sendmsg$netlink(r6, &(0x7f00000006c0)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)=[{&(0x7f00000007c0)={0x14dc, 0x18, 0x300, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x4, 0x110}, @nested={0x162, 0xfc, 0x0, 0x1, [@nested={0x4, 0x90}, @typed={0x8, 0x5f, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x10f}, @typed={0x53, 0x65, 0x0, 0x0, @binary="f817b65583f6ddee8a658c4cae43eb9dc3c3b3b45c289c4f577846c3d8c2ec740129fe76a2c6ab1e7771f1e1c0660314aab94a512ce77b6a1bedcb2fae7fbbf7ddbf873bedfa56694f232c6d36eaad"}, @typed={0xc, 0xe4, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x3a, 0x0, 0x0, @u32=0xa}, @generic="5021467a4e3f4a52d50f3b142ae3582032e5b68b418bece8fe81826c66ce5081456f00ffd1a2b549389baed1d18c7590f39425450f147c01343c2d1b20c7b8e29ddcee7a15d60df0c1599e0bb706fcbb8f3757d367dbf19b17320f17fb0a7a796a6f592086bc03a645144a318194869e2eb1b3deb95dc83bec6a331f7fc8c7d4649bbe9cb7796fe0e6e2635371bb9601391f32c183ab534ee398713187c71c6284305914593f649dc1f420c52cd753e6753a44005f6e6dd9a07daf275374edb08d63fb68f982a2726a88455b08b2d97a78ab5fe7e014d2e4009bab456b3384b53fa412b81d7d"]}, @nested={0x1004, 0xb3, 0x0, 0x1, [@generic="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"]}, @nested={0x2ac, 0x27, 0x0, 0x1, [@generic="91aee059d0a15f66f0d37b775dbcb5277183aeb5a37495102fc972d69dfd1898fe0568", @generic="258dd2ce91e374ddb6ddd03872866c03ed6ab67495e37f96ba5811d60112335f45e0744c5a04471d3acde2c6c9c986bef8f7b94b5545a149c13ba19c6b3f5081837a3b1f6413ff26d55668f4a7e6e8c5c75e279ca3d7eda9470cfd382e87", @generic="5890d6ec770bb22b13aa10449441914fb3c8f169f3bfd82b08460cc5ccb0055e52d876049982781dfd5b8fd0a1ffa15fe68eb9abf92cff09ca553d69ba3bfbedcbdd7994d6d17913c06136f9902e95121672be8d63518336b575973dbc74f079fa60ba56c5dcf14da72594eba68d7c418ff2135a2006beeb7704ab55f08a903079d5ed836a0e91084dcbf9b5310ee13d78ff58160d158befd426d481be8ab3d7bf6e236aa9f0057ab24699f96cb531641b70d98e5cd2d79316f76d097873d4ab4b01586a2287565ee8ceb782c3695ae6abb9fc756eac322a098d5ee1dc5674857b", @typed={0xbf, 0x78, 0x0, 0x0, @binary="989adc7be31640d1784bb9a51499c46b76dc73b261440f6ffbf0f85da1242e53eef09bf0703ce537340b1dc1201e1395727a9c28001b857ea73e0252a0bac3899a52d87626913b43503186f3b80094d96f83e1ee1943433a9d20416a95698667dfb4a89865766b503700e8bc37398f4903d70805a6bc57d988e8158c9e06295bbe9a6a5c51ad0f5efe5fe0b9de4832e93eebf2e56b0f7b77b7bc48079456b46e456ee6703a434b8a686fa833cfa5a1dbb82b926c321d90c15e0dac"}, @nested={0x4, 0x30}, @typed={0x14, 0xcc, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0xb0, 0x0, 0x0, @u32=0xa}, @nested={0x4, 0x83}, @generic="9c8c3b138550eb84b544e0392905f90d15e5eda8f4f90209b5e5d2b5ec286f83e4d136f2e3e0601c17b9a5537b87b3b6b2fb2f662250e0d0e588403c7c28578e03e5dc5ff8389520b967dbc44887c48e41562ec8ebd45bf162b0", @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @generic="b4ef0e7889f0f54c57c743b313d0e14ad4dd446857b86fadc1cc48c04195e513ee276ea0c8ae2a2414f781d7feb63ad7038a3d8c52cbf9c82771e3bb51d2e9941e29816ad43c18bce06139e9bbf331db9a6ce6c0a483a5db1d25af91e33b48dfb9c289b83e54da26d3e5f5be21dfd9674e586fe6fab8e45964d428071b6324f2f7a60d8499777bc2858caf492e7745e94cdf1e34a241bf2f9542895e1a3680710efa", @typed={0x5, 0x112, 0x0, 0x0, @str='\x00'}, @typed={0x5, 0x68, 0x0, 0x0, @str='\x00'}]}, 0x14dc}], 0x1, &(0x7f0000001dc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0x0, r15}}}, @rights={{0x28, 0x1, 0x1, [r3, r16, r1, r5, r4, r1]}}, @rights={{0x18, 0x1, 0x1, [r4, r17]}}], 0xa0, 0x1}, 0x880) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 139.699293ms ago: executing program 4 (id=4940): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40000100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 95.36711ms ago: executing program 5 (id=4941): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 1 (id=4942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'pim6reg\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x98, r4, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000040), 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x20000080) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): 5] FAULT_INJECTION: forcing a failure. [ 389.100110][T17825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.128771][T17825] CPU: 1 UID: 0 PID: 17825 Comm: syz.0.4275 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 389.128800][T17825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.128811][T17825] Call Trace: [ 389.128819][T17825] [ 389.128827][T17825] dump_stack_lvl+0x189/0x250 [ 389.128852][T17825] ? __pfx____ratelimit+0x10/0x10 [ 389.128877][T17825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.128896][T17825] ? __pfx__printk+0x10/0x10 [ 389.128931][T17825] should_fail_ex+0x414/0x560 [ 389.128963][T17825] _copy_to_user+0x31/0xb0 [ 389.128989][T17825] simple_read_from_buffer+0xe1/0x170 [ 389.129020][T17825] proc_fail_nth_read+0x1b3/0x220 [ 389.129044][T17825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.129067][T17825] ? rw_verify_area+0x258/0x650 [ 389.129089][T17825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.129110][T17825] vfs_read+0x1fd/0x980 [ 389.129132][T17825] ? fdget_pos+0x247/0x320 [ 389.129154][T17825] ? __pfx___mutex_lock+0x10/0x10 [ 389.129180][T17825] ? __pfx_vfs_read+0x10/0x10 [ 389.129204][T17825] ? __fget_files+0x2a/0x420 [ 389.129226][T17825] ? __fget_files+0x3a0/0x420 [ 389.129242][T17825] ? __fget_files+0x2a/0x420 [ 389.129268][T17825] ksys_read+0x145/0x250 [ 389.129294][T17825] ? __pfx_ksys_read+0x10/0x10 [ 389.129323][T17825] ? do_syscall_64+0xbe/0x3b0 [ 389.129351][T17825] do_syscall_64+0xfa/0x3b0 [ 389.129380][T17825] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.129402][T17825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.129420][T17825] ? clear_bhb_loop+0x60/0xb0 [ 389.129441][T17825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.129458][T17825] RIP: 0033:0x7f6e3fb8d57c [ 389.129474][T17825] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 389.129489][T17825] RSP: 002b:00007f6e3d9d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.129509][T17825] RAX: ffffffffffffffda RBX: 00007f6e3fdb6080 RCX: 00007f6e3fb8d57c [ 389.129523][T17825] RDX: 000000000000000f RSI: 00007f6e3d9d50a0 RDI: 0000000000000005 [ 389.129541][T17825] RBP: 00007f6e3d9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 389.129553][T17825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.129563][T17825] R13: 0000000000000001 R14: 00007f6e3fdb6080 R15: 00007fffb95cf568 [ 389.129594][T17825] [ 389.776938][T17841] FAULT_INJECTION: forcing a failure. [ 389.776938][T17841] name failslab, interval 1, probability 0, space 0, times 0 [ 389.802753][T17841] CPU: 0 UID: 0 PID: 17841 Comm: syz.1.4279 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 389.802781][T17841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.802792][T17841] Call Trace: [ 389.802799][T17841] [ 389.802807][T17841] dump_stack_lvl+0x189/0x250 [ 389.802831][T17841] ? __pfx____ratelimit+0x10/0x10 [ 389.802856][T17841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.802875][T17841] ? __pfx__printk+0x10/0x10 [ 389.802898][T17841] ? __pfx___might_resched+0x10/0x10 [ 389.802923][T17841] ? fs_reclaim_acquire+0x7d/0x100 [ 389.802946][T17841] should_fail_ex+0x414/0x560 [ 389.802978][T17841] should_failslab+0xa8/0x100 [ 389.802997][T17841] kmem_cache_alloc_noprof+0x73/0x3c0 [ 389.803020][T17841] ? getname_kernel+0x5a/0x2f0 [ 389.803043][T17841] getname_kernel+0x5a/0x2f0 [ 389.803065][T17841] kern_path+0x1d/0x50 [ 389.803084][T17841] unix_find_other+0x183/0xb40 [ 389.803113][T17841] ? __pfx_unix_find_other+0x10/0x10 [ 389.803131][T17841] ? __might_fault+0xb0/0x130 [ 389.803157][T17841] ? __pfx_aa_sk_perm+0x10/0x10 [ 389.803177][T17841] ? tomoyo_socket_connect_permission+0x1b2/0x290 [ 389.803205][T17841] unix_dgram_connect+0x2cf/0xc20 [ 389.803229][T17841] ? bpf_lsm_socket_connect+0x9/0x20 [ 389.803252][T17841] __sys_connect+0x316/0x440 [ 389.803277][T17841] ? __fget_files+0x3a0/0x420 [ 389.803294][T17841] ? __pfx___sys_connect+0x10/0x10 [ 389.803330][T17841] ? __pfx_ksys_write+0x10/0x10 [ 389.803361][T17841] __x64_sys_connect+0x7a/0x90 [ 389.803387][T17841] do_syscall_64+0xfa/0x3b0 [ 389.803409][T17841] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.803431][T17841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.803448][T17841] ? clear_bhb_loop+0x60/0xb0 [ 389.803468][T17841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.803485][T17841] RIP: 0033:0x7f45aed8eb69 [ 389.803501][T17841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.803516][T17841] RSP: 002b:00007f45acbb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 389.803537][T17841] RAX: ffffffffffffffda RBX: 00007f45aefb6160 RCX: 00007f45aed8eb69 [ 389.803550][T17841] RDX: 000000000000006e RSI: 0000200000000340 RDI: 0000000000000004 [ 389.803561][T17841] RBP: 00007f45acbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 389.803579][T17841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.803590][T17841] R13: 0000000000000001 R14: 00007f45aefb6160 R15: 00007ffe085718a8 [ 389.803620][T17841] [ 390.354903][T17849] syzkaller0: entered promiscuous mode [ 390.360992][T17849] syzkaller0: entered allmulticast mode [ 390.811236][T17877] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4296'. [ 390.865371][T17885] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4296'. [ 390.866987][T17877] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4296'. [ 390.893273][T17877] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 391.102758][T17898] tipc: Enabled bearer , priority 0 [ 391.115728][T17898] tipc: Resetting bearer [ 391.136221][T17897] tipc: Disabling bearer [ 391.163332][T17900] syzkaller0: entered promiscuous mode [ 391.173034][T17900] syzkaller0: entered allmulticast mode [ 391.430225][T17916] tipc: Enabled bearer , priority 0 [ 391.438802][T17916] syzkaller0: entered promiscuous mode [ 391.444310][T17916] syzkaller0: entered allmulticast mode [ 391.453737][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4311'. [ 391.480392][T17916] tipc: Resetting bearer [ 391.490672][T17914] tipc: Resetting bearer [ 391.512533][T17914] tipc: Disabling bearer [ 391.713904][T17926] tipc: Enabling of bearer rejected, failed to enable media [ 391.760374][T17928] tipc: Enabled bearer , priority 0 [ 391.799479][T17928] tipc: Resetting bearer [ 391.851644][T17927] tipc: Disabling bearer [ 392.077987][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 392.086375][ C1] lec:lec_tx_timeout: lec0 [ 392.091958][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 392.099276][T17951] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 392.123089][T17949] tipc: Enabled bearer , priority 0 [ 392.168943][T17949] syzkaller0: entered promiscuous mode [ 392.187110][T17949] syzkaller0: entered allmulticast mode [ 392.202172][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4325'. [ 392.223550][T17949] tipc: Resetting bearer [ 392.240286][T17947] tipc: Resetting bearer [ 392.279944][T17947] tipc: Disabling bearer [ 392.439096][T17965] tipc: Enabled bearer , priority 0 [ 392.446591][T17965] syzkaller0: entered promiscuous mode [ 392.469422][T17965] syzkaller0: entered allmulticast mode [ 392.536358][T17965] tipc: Resetting bearer [ 392.554804][T17975] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 392.567877][T17963] tipc: Resetting bearer [ 392.613642][T17963] tipc: Disabling bearer [ 392.842717][T17991] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.4343'. [ 393.081647][T18013] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 393.133101][T18016] veth0: entered promiscuous mode [ 393.156767][T18015] veth0: left promiscuous mode [ 393.814184][T18059] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 393.901165][T18065] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 394.119817][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4368'. [ 394.133162][T18075] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4368'. [ 394.182104][T18080] FAULT_INJECTION: forcing a failure. [ 394.182104][T18080] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 394.224192][T18082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4369'. [ 394.228966][T18080] CPU: 0 UID: 0 PID: 18080 Comm: syz.0.4371 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 394.229002][T18080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.229014][T18080] Call Trace: [ 394.229021][T18080] [ 394.229028][T18080] dump_stack_lvl+0x189/0x250 [ 394.229052][T18080] ? __pfx____ratelimit+0x10/0x10 [ 394.229076][T18080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.229094][T18080] ? __pfx__printk+0x10/0x10 [ 394.229116][T18080] ? fs_reclaim_acquire+0x7d/0x100 [ 394.229144][T18080] should_fail_ex+0x414/0x560 [ 394.229173][T18080] prepare_alloc_pages+0x213/0x610 [ 394.229199][T18080] __alloc_frozen_pages_noprof+0x123/0x370 [ 394.229222][T18080] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 394.229246][T18080] ? __lock_acquire+0xab9/0xd20 [ 394.229271][T18080] ? policy_nodemask+0x27c/0x720 [ 394.229301][T18080] alloc_pages_mpol+0x232/0x4a0 [ 394.229329][T18080] alloc_pages_noprof+0xa9/0x190 [ 394.229356][T18080] __pud_alloc+0x3a/0x260 [ 394.229384][T18080] __handle_mm_fault+0x3573/0x5620 [ 394.229410][T18080] ? mt_find+0x15c/0x5f0 [ 394.229435][T18080] ? mt_find+0x46f/0x5f0 [ 394.229463][T18080] ? __pfx___handle_mm_fault+0x10/0x10 [ 394.229507][T18080] ? find_vma+0xe7/0x160 [ 394.229528][T18080] ? __pfx_find_vma+0x10/0x10 [ 394.229553][T18080] handle_mm_fault+0x40a/0x8e0 [ 394.229586][T18080] do_user_addr_fault+0x764/0x1390 [ 394.229625][T18080] exc_page_fault+0x76/0xf0 [ 394.229651][T18080] asm_exc_page_fault+0x26/0x30 [ 394.229667][T18080] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 394.229688][T18080] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 394.229702][T18080] RSP: 0018:ffffc9001b477bb8 EFLAGS: 00050246 [ 394.229719][T18080] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 394.229732][T18080] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9001b477c20 [ 394.229743][T18080] RBP: ffffc9001b477cb0 R08: ffffc9001b477c27 R09: 1ffff9200368ef84 [ 394.229756][T18080] R10: dffffc0000000000 R11: fffff5200368ef85 R12: dffffc0000000000 [ 394.229769][T18080] R13: 1ffff9200368ef80 R14: ffffc9001b477c20 R15: 0000200000000040 [ 394.229800][T18080] _copy_from_user+0x7a/0xb0 [ 394.229825][T18080] hci_dev_cmd+0xa2/0x7b0 [ 394.229853][T18080] ? __pfx_hci_dev_cmd+0x10/0x10 [ 394.229878][T18080] ? proc_do_static_key+0xd0/0x2c0 [ 394.229903][T18080] ? hci_sock_ioctl+0x5e5/0x910 [ 394.229932][T18080] sock_do_ioctl+0xdc/0x300 [ 394.229957][T18080] ? __pfx_sock_do_ioctl+0x10/0x10 [ 394.229975][T18080] ? __lock_acquire+0xab9/0xd20 [ 394.230023][T18080] sock_ioctl+0x576/0x790 [ 394.230046][T18080] ? __pfx_sock_ioctl+0x10/0x10 [ 394.230066][T18080] ? __fget_files+0x2a/0x420 [ 394.230082][T18080] ? __fget_files+0x3a0/0x420 [ 394.230097][T18080] ? __fget_files+0x2a/0x420 [ 394.230115][T18080] ? bpf_lsm_file_ioctl+0x9/0x20 [ 394.230137][T18080] ? __pfx_sock_ioctl+0x10/0x10 [ 394.230157][T18080] __se_sys_ioctl+0xf9/0x170 [ 394.230181][T18080] do_syscall_64+0xfa/0x3b0 [ 394.230203][T18080] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.230224][T18080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.230240][T18080] ? clear_bhb_loop+0x60/0xb0 [ 394.230261][T18080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.230277][T18080] RIP: 0033:0x7f6e3fb8eb69 [ 394.230292][T18080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.230306][T18080] RSP: 002b:00007f6e3d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.230323][T18080] RAX: ffffffffffffffda RBX: 00007f6e3fdb5fa0 RCX: 00007f6e3fb8eb69 [ 394.230336][T18080] RDX: 0000200000000040 RSI: 00000000400448e0 RDI: 0000000000000004 [ 394.230347][T18080] RBP: 00007f6e3d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.230358][T18080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.230368][T18080] R13: 0000000000000000 R14: 00007f6e3fdb5fa0 R15: 00007fffb95cf568 [ 394.230397][T18080] [ 394.468379][T18096] netlink: 'syz.4.4373': attribute type 21 has an invalid length. [ 395.022373][T18123] tipc: Enabled bearer , priority 0 [ 395.054106][T18123] tipc: Resetting bearer [ 395.122057][T18122] tipc: Disabling bearer [ 395.208418][T18131] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 395.448598][T18146] FAULT_INJECTION: forcing a failure. [ 395.448598][T18146] name failslab, interval 1, probability 0, space 0, times 0 [ 395.477603][T18146] CPU: 1 UID: 0 PID: 18146 Comm: syz.1.4391 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 395.477632][T18146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.477643][T18146] Call Trace: [ 395.477651][T18146] [ 395.477659][T18146] dump_stack_lvl+0x189/0x250 [ 395.477683][T18146] ? __pfx____ratelimit+0x10/0x10 [ 395.477708][T18146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.477726][T18146] ? __pfx__printk+0x10/0x10 [ 395.477754][T18146] ? __pfx___might_resched+0x10/0x10 [ 395.477777][T18146] ? fs_reclaim_acquire+0x7d/0x100 [ 395.477800][T18146] should_fail_ex+0x414/0x560 [ 395.477831][T18146] should_failslab+0xa8/0x100 [ 395.477848][T18146] __kmalloc_noprof+0xcb/0x4f0 [ 395.477871][T18146] ? netlbl_mgmt_add_common+0x156/0x13b0 [ 395.477893][T18146] netlbl_mgmt_add_common+0x156/0x13b0 [ 395.477917][T18146] ? end_current_label_crit_section+0x152/0x180 [ 395.477953][T18146] netlbl_mgmt_add+0x2ae/0x340 [ 395.477981][T18146] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 395.478007][T18146] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 395.478031][T18146] genl_family_rcv_msg_doit+0x215/0x300 [ 395.478054][T18146] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 395.478081][T18146] ? bpf_lsm_capable+0x9/0x20 [ 395.478100][T18146] ? security_capable+0x7e/0x2e0 [ 395.478124][T18146] genl_rcv_msg+0x60e/0x790 [ 395.478146][T18146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.478161][T18146] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 395.478195][T18146] netlink_rcv_skb+0x208/0x470 [ 395.478214][T18146] ? __lock_acquire+0xab9/0xd20 [ 395.478233][T18146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.478250][T18146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.478285][T18146] ? down_read+0x1ad/0x2e0 [ 395.478302][T18146] genl_rcv+0x28/0x40 [ 395.478316][T18146] netlink_unicast+0x82c/0x9e0 [ 395.478341][T18146] ? __pfx_netlink_unicast+0x10/0x10 [ 395.478366][T18146] ? netlink_sendmsg+0x642/0xb30 [ 395.478384][T18146] ? skb_put+0x11b/0x210 [ 395.478400][T18146] netlink_sendmsg+0x805/0xb30 [ 395.478430][T18146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.478457][T18146] ? aa_sock_msg_perm+0x94/0x160 [ 395.478476][T18146] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.478491][T18146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.478512][T18146] __sock_sendmsg+0x21c/0x270 [ 395.478536][T18146] ____sys_sendmsg+0x505/0x830 [ 395.478557][T18146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.478580][T18146] ? import_iovec+0x74/0xa0 [ 395.478602][T18146] ___sys_sendmsg+0x21f/0x2a0 [ 395.478619][T18146] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.478665][T18146] ? __fget_files+0x2a/0x420 [ 395.478678][T18146] ? __fget_files+0x3a0/0x420 [ 395.478700][T18146] __x64_sys_sendmsg+0x19b/0x260 [ 395.478717][T18146] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.478741][T18146] ? __pfx_ksys_write+0x10/0x10 [ 395.478757][T18146] ? rcu_is_watching+0x15/0xb0 [ 395.478782][T18146] ? do_syscall_64+0xbe/0x3b0 [ 395.478805][T18146] do_syscall_64+0xfa/0x3b0 [ 395.478823][T18146] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.478842][T18146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.478856][T18146] ? clear_bhb_loop+0x60/0xb0 [ 395.478873][T18146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.478886][T18146] RIP: 0033:0x7f45aed8eb69 [ 395.478899][T18146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.478912][T18146] RSP: 002b:00007f45acbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.478935][T18146] RAX: ffffffffffffffda RBX: 00007f45aefb5fa0 RCX: 00007f45aed8eb69 [ 395.478946][T18146] RDX: 0000000000000080 RSI: 0000200000000740 RDI: 0000000000000005 [ 395.478956][T18146] RBP: 00007f45acbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.478965][T18146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.478973][T18146] R13: 0000000000000000 R14: 00007f45aefb5fa0 R15: 00007ffe085718a8 [ 395.478997][T18146] [ 396.145544][T18164] syzkaller0: entered promiscuous mode [ 396.168843][T18164] syzkaller0: entered allmulticast mode [ 396.223057][T18164] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4395'. [ 396.250126][T18173] syzkaller0: entered promiscuous mode [ 396.257447][T18173] syzkaller0: entered allmulticast mode [ 396.304731][T18171] tipc: Enabled bearer , priority 0 [ 396.355126][T18171] tipc: Resetting bearer [ 396.423696][T18169] tipc: Disabling bearer [ 396.783632][T18200] tipc: Enabled bearer , priority 0 [ 396.807177][T18200] tipc: Resetting bearer [ 396.844470][T18199] tipc: Disabling bearer [ 396.970884][T12644] page_pool_release_retry() stalled pool shutdown: id 46, 1 inflight 181 sec [ 397.003543][T18211] syzkaller0: entered promiscuous mode [ 397.017978][T18211] syzkaller0: entered allmulticast mode [ 397.082622][T18211] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4410'. [ 397.104186][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4412'. [ 397.113767][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 397.113799][ C1] lec:lec_tx_timeout: lec0 [ 397.122534][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 397.238859][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4415'. [ 397.262346][T18233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4415'. [ 397.541519][T18243] syzkaller0: entered promiscuous mode [ 397.547149][T18243] syzkaller0: entered allmulticast mode [ 397.564242][T18243] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 397.743542][T18249] tipc: Disabling bearer [ 397.786055][T18251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4423'. [ 397.824308][T18255] tipc: Enabled bearer , priority 0 [ 397.845909][T18255] tipc: Resetting bearer [ 397.889959][T18254] tipc: Disabling bearer [ 397.943533][T18261] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 398.015894][T18263] lo: left allmulticast mode [ 398.026722][T18263] tunl0: left allmulticast mode [ 398.038492][T18263] gre0: left allmulticast mode [ 398.050206][T18263] 0ªî{X¹¦: left allmulticast mode [ 398.059691][T18263] erspan0: left allmulticast mode [ 398.068953][T18263] ip_vti0: left allmulticast mode [ 398.075343][T18263] ip6_vti0: left allmulticast mode [ 398.082895][T18263] sit0: left allmulticast mode [ 398.093646][T18263] ip6tnl0: left allmulticast mode [ 398.101095][T18263] ip6gre0: left allmulticast mode [ 398.109403][T18263] ip6gretap0: left allmulticast mode [ 398.116162][T18269] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4429'. [ 398.120015][T18263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.133237][T18263] nlmon0: left allmulticast mode [ 398.138851][T12067] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.147118][T18263] caif0: left allmulticast mode [ 398.152851][T18263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.170221][T18267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.497565][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.624720][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4435'. [ 398.706264][ T3558] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.761855][T18297] syzkaller0: entered promiscuous mode [ 398.777934][T18297] syzkaller0: entered allmulticast mode [ 398.811877][T18297] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 398.846108][T18308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.916391][T18305] tipc: Enabled bearer , priority 0 [ 398.940525][T18305] tipc: Resetting bearer [ 398.968883][ T55] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.979784][T18304] tipc: Disabling bearer [ 399.169073][T18325] tipc: Enabled bearer , priority 0 [ 399.181350][T18325] tipc: Resetting bearer [ 399.199605][T18321] tipc: Disabling bearer [ 399.221800][T18328] tipc: Enabling of bearer rejected, failed to enable media [ 399.455328][T18341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4450'. [ 399.768747][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.786971][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.917960][T18365] tipc: Enabling of bearer rejected, failed to enable media [ 400.121011][T18378] tipc: Enabling of bearer rejected, failed to enable media [ 400.349549][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'. [ 400.425661][T18394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.503840][T18400] sctp: [Deprecated]: syz.3.4467 (pid 18400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.503840][T18400] Use struct sctp_sack_info instead [ 400.695585][T18413] Unsupported ieee802154 address type: 0 [ 400.741849][T12644] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 400.836678][T18423] tipc: Enabling of bearer rejected, failed to enable media [ 401.271418][T18449] netlink: 'syz.2.4481': attribute type 11 has an invalid length. [ 401.291417][T18449] __nla_validate_parse: 5 callbacks suppressed [ 401.291435][T18449] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4481'. [ 401.372078][T18456] FAULT_INJECTION: forcing a failure. [ 401.372078][T18456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.388485][T18456] CPU: 0 UID: 0 PID: 18456 Comm: syz.1.4485 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 401.388511][T18456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.388523][T18456] Call Trace: [ 401.388530][T18456] [ 401.388538][T18456] dump_stack_lvl+0x189/0x250 [ 401.388562][T18456] ? __pfx____ratelimit+0x10/0x10 [ 401.388586][T18456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.388604][T18456] ? __pfx__printk+0x10/0x10 [ 401.388636][T18456] should_fail_ex+0x414/0x560 [ 401.388666][T18456] _copy_to_user+0x31/0xb0 [ 401.388690][T18456] simple_read_from_buffer+0xe1/0x170 [ 401.388719][T18456] proc_fail_nth_read+0x1b3/0x220 [ 401.388751][T18456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 401.388775][T18456] ? rw_verify_area+0x258/0x650 [ 401.388796][T18456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 401.388817][T18456] vfs_read+0x1fd/0x980 [ 401.388838][T18456] ? fdget_pos+0x247/0x320 [ 401.388869][T18456] ? __pfx___mutex_lock+0x10/0x10 [ 401.388895][T18456] ? __pfx_vfs_read+0x10/0x10 [ 401.388920][T18456] ? __fget_files+0x2a/0x420 [ 401.388941][T18456] ? __fget_files+0x3a0/0x420 [ 401.388957][T18456] ? __fget_files+0x2a/0x420 [ 401.388983][T18456] ksys_read+0x145/0x250 [ 401.389008][T18456] ? __pfx_ksys_read+0x10/0x10 [ 401.389028][T18456] ? rcu_is_watching+0x15/0xb0 [ 401.389059][T18456] ? do_syscall_64+0xbe/0x3b0 [ 401.389087][T18456] do_syscall_64+0xfa/0x3b0 [ 401.389109][T18456] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.389131][T18456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.389149][T18456] ? clear_bhb_loop+0x60/0xb0 [ 401.389170][T18456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.389187][T18456] RIP: 0033:0x7f45aed8d57c [ 401.389205][T18456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 401.389218][T18456] RSP: 002b:00007f45acbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 401.389239][T18456] RAX: ffffffffffffffda RBX: 00007f45aefb5fa0 RCX: 00007f45aed8d57c [ 401.389252][T18456] RDX: 000000000000000f RSI: 00007f45acbf60a0 RDI: 0000000000000003 [ 401.389263][T18456] RBP: 00007f45acbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 401.389274][T18456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.389285][T18456] R13: 0000000000000000 R14: 00007f45aefb5fa0 R15: 00007ffe085718a8 [ 401.389316][T18456] [ 401.648384][T18457] netlink: 'syz.2.4481': attribute type 11 has an invalid length. [ 401.754488][T18466] lo speed is unknown, defaulting to 1000 [ 401.921502][T18473] macsec0: entered promiscuous mode [ 401.954946][T18473] macsec0: left promiscuous mode [ 401.969175][T18473] macsec0: left allmulticast mode [ 402.113187][T18484] FAULT_INJECTION: forcing a failure. [ 402.113187][T18484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.170723][T18484] CPU: 1 UID: 0 PID: 18484 Comm: syz.4.4495 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 402.170753][T18484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.170764][T18484] Call Trace: [ 402.170771][T18484] [ 402.170780][T18484] dump_stack_lvl+0x189/0x250 [ 402.170803][T18484] ? __pfx____ratelimit+0x10/0x10 [ 402.170827][T18484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.170845][T18484] ? __pfx__printk+0x10/0x10 [ 402.170878][T18484] should_fail_ex+0x414/0x560 [ 402.170907][T18484] _copy_to_user+0x31/0xb0 [ 402.170934][T18484] finalize_log+0xe1/0x160 [ 402.170956][T18484] ? __pfx_finalize_log+0x10/0x10 [ 402.170974][T18484] ? btf_check_type_tags+0x679/0x680 [ 402.171002][T18484] btf_new_fd+0x6fa/0xc90 [ 402.171021][T18484] ? apparmor_capable+0x137/0x1b0 [ 402.171047][T18484] ? __pfx_btf_new_fd+0x10/0x10 [ 402.171069][T18484] ? bpf_token_put+0x143/0x160 [ 402.171093][T18484] ? bpf_btf_load+0x126/0x190 [ 402.171119][T18484] __sys_bpf+0x406/0x870 [ 402.171144][T18484] ? __pfx___sys_bpf+0x10/0x10 [ 402.171180][T18484] ? ksys_write+0x22a/0x250 [ 402.171207][T18484] ? __pfx_ksys_write+0x10/0x10 [ 402.171226][T18484] ? rcu_is_watching+0x15/0xb0 [ 402.171258][T18484] __x64_sys_bpf+0x7c/0x90 [ 402.171280][T18484] do_syscall_64+0xfa/0x3b0 [ 402.171302][T18484] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.171323][T18484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.171340][T18484] ? clear_bhb_loop+0x60/0xb0 [ 402.171360][T18484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.171376][T18484] RIP: 0033:0x7f0b3c78eb69 [ 402.171392][T18484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.171407][T18484] RSP: 002b:00007f0b3d61f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.171429][T18484] RAX: ffffffffffffffda RBX: 00007f0b3c9b5fa0 RCX: 00007f0b3c78eb69 [ 402.171442][T18484] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000012 [ 402.171454][T18484] RBP: 00007f0b3d61f090 R08: 0000000000000000 R09: 0000000000000000 [ 402.171465][T18484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.171476][T18484] R13: 0000000000000001 R14: 00007f0b3c9b5fa0 R15: 00007fff6de13a48 [ 402.171506][T18484] [ 402.547122][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4497'. [ 402.564547][T18493] FAULT_INJECTION: forcing a failure. [ 402.564547][T18493] name failslab, interval 1, probability 0, space 0, times 0 [ 402.568603][T18488] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4486'. [ 402.584256][T18492] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4497'. [ 402.591963][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4486'. [ 402.598932][T18493] CPU: 0 UID: 0 PID: 18493 Comm: syz.1.4498 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 402.598959][T18493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.598970][T18493] Call Trace: [ 402.598978][T18493] [ 402.598986][T18493] dump_stack_lvl+0x189/0x250 [ 402.599010][T18493] ? __pfx____ratelimit+0x10/0x10 [ 402.599035][T18493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.599052][T18493] ? __pfx__printk+0x10/0x10 [ 402.599079][T18493] ? __pfx___might_resched+0x10/0x10 [ 402.599108][T18493] should_fail_ex+0x414/0x560 [ 402.599139][T18493] should_failslab+0xa8/0x100 [ 402.599158][T18493] kmem_cache_alloc_noprof+0x73/0x3c0 [ 402.599181][T18493] ? ptlock_alloc+0x20/0x70 [ 402.599208][T18493] ptlock_alloc+0x20/0x70 [ 402.599231][T18493] pte_alloc_one+0x7d/0x170 [ 402.599251][T18493] __pte_alloc+0x25/0x1a0 [ 402.599273][T18493] __handle_mm_fault+0x4b8a/0x5620 [ 402.599316][T18493] ? __pfx___handle_mm_fault+0x10/0x10 [ 402.599367][T18493] ? find_vma+0xe7/0x160 [ 402.599389][T18493] ? __pfx_find_vma+0x10/0x10 [ 402.599414][T18493] handle_mm_fault+0x40a/0x8e0 [ 402.599447][T18493] do_user_addr_fault+0x764/0x1390 [ 402.599487][T18493] exc_page_fault+0x76/0xf0 [ 402.599514][T18493] asm_exc_page_fault+0x26/0x30 [ 402.599531][T18493] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 402.599550][T18493] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 402.599565][T18493] RSP: 0018:ffffc9000c387bb8 EFLAGS: 00050246 [ 402.599583][T18493] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 402.599595][T18493] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9000c387c20 [ 402.599607][T18493] RBP: ffffc9000c387cb0 R08: ffffc9000c387c27 R09: 1ffff92001870f84 [ 402.599619][T18493] R10: dffffc0000000000 R11: fffff52001870f85 R12: dffffc0000000000 [ 402.599632][T18493] R13: 1ffff92001870f80 R14: ffffc9000c387c20 R15: 0000200000000040 [ 402.599664][T18493] _copy_from_user+0x7a/0xb0 [ 402.599689][T18493] hci_dev_cmd+0xa2/0x7b0 [ 402.599717][T18493] ? __pfx_hci_dev_cmd+0x10/0x10 [ 402.599742][T18493] ? proc_do_static_key+0xd0/0x2c0 [ 402.599767][T18493] ? hci_sock_ioctl+0x5e5/0x910 [ 402.599797][T18493] sock_do_ioctl+0xdc/0x300 [ 402.599821][T18493] ? __pfx_sock_do_ioctl+0x10/0x10 [ 402.599839][T18493] ? __lock_acquire+0xab9/0xd20 [ 402.599878][T18493] sock_ioctl+0x576/0x790 [ 402.599901][T18493] ? __pfx_sock_ioctl+0x10/0x10 [ 402.599921][T18493] ? __fget_files+0x2a/0x420 [ 402.599936][T18493] ? __fget_files+0x3a0/0x420 [ 402.599951][T18493] ? __fget_files+0x2a/0x420 [ 402.599971][T18493] ? bpf_lsm_file_ioctl+0x9/0x20 [ 402.599993][T18493] ? __pfx_sock_ioctl+0x10/0x10 [ 402.600012][T18493] __se_sys_ioctl+0xf9/0x170 [ 402.600037][T18493] do_syscall_64+0xfa/0x3b0 [ 402.600058][T18493] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.600080][T18493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.600097][T18493] ? clear_bhb_loop+0x60/0xb0 [ 402.600117][T18493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.600133][T18493] RIP: 0033:0x7f45aed8eb69 [ 402.600148][T18493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.600162][T18493] RSP: 002b:00007f45acbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.600179][T18493] RAX: ffffffffffffffda RBX: 00007f45aefb5fa0 RCX: 00007f45aed8eb69 [ 402.600191][T18493] RDX: 0000200000000040 RSI: 00000000400448e0 RDI: 0000000000000004 [ 402.600202][T18493] RBP: 00007f45acbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.600212][T18493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.600223][T18493] R13: 0000000000000000 R14: 00007f45aefb5fa0 R15: 00007ffe085718a8 [ 402.600252][T18493] [ 402.617404][T18492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4497'. [ 402.811332][T18502] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4486'. [ 402.974548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 402.974581][ C1] lec:lec_tx_timeout: lec0 [ 402.983873][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 403.085996][T18496] ip6gre2: entered allmulticast mode [ 403.202760][T18510] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 403.238515][T18512] FAULT_INJECTION: forcing a failure. [ 403.238515][T18512] name failslab, interval 1, probability 0, space 0, times 0 [ 403.294859][T18512] CPU: 0 UID: 0 PID: 18512 Comm: syz.4.4501 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 403.294887][T18512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 403.294897][T18512] Call Trace: [ 403.294903][T18512] [ 403.294910][T18512] dump_stack_lvl+0x189/0x250 [ 403.294933][T18512] ? __pfx____ratelimit+0x10/0x10 [ 403.294956][T18512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.294974][T18512] ? __pfx__printk+0x10/0x10 [ 403.295001][T18512] ? __pfx___might_resched+0x10/0x10 [ 403.295029][T18512] should_fail_ex+0x414/0x560 [ 403.295059][T18512] should_failslab+0xa8/0x100 [ 403.295078][T18512] __kmalloc_cache_noprof+0x70/0x3d0 [ 403.295101][T18512] ? sctp_endpoint_new+0x86/0xa20 [ 403.295123][T18512] sctp_endpoint_new+0x86/0xa20 [ 403.295144][T18512] ? __raw_spin_lock_init+0x45/0x100 [ 403.295167][T18512] sctp_init_sock+0x960/0x11f0 [ 403.295195][T18512] sctp_v4_create_accept_sk+0x137/0x1c0 [ 403.295223][T18512] sctp_accept+0x55f/0x780 [ 403.295258][T18512] ? __pfx_sctp_accept+0x10/0x10 [ 403.295279][T18512] ? aa_sk_perm+0x81e/0x950 [ 403.295320][T18512] ? __pfx_autoremove_wake_function+0x10/0x10 [ 403.295344][T18512] ? __pfx_aa_sk_perm+0x10/0x10 [ 403.295372][T18512] inet_accept+0xaf/0x150 [ 403.295398][T18512] do_accept+0x48c/0x680 [ 403.295428][T18512] ? __pfx_do_accept+0x10/0x10 [ 403.295477][T18512] __sys_accept4+0x11c/0x1c0 [ 403.295504][T18512] ? __pfx___sys_accept4+0x10/0x10 [ 403.295528][T18512] ? __pfx_ksys_write+0x10/0x10 [ 403.295548][T18512] ? rcu_is_watching+0x15/0xb0 [ 403.295580][T18512] __x64_sys_accept4+0x9a/0xb0 [ 403.295606][T18512] do_syscall_64+0xfa/0x3b0 [ 403.295629][T18512] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.295652][T18512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.295669][T18512] ? clear_bhb_loop+0x60/0xb0 [ 403.295690][T18512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.295706][T18512] RIP: 0033:0x7f0b3c78eb69 [ 403.295722][T18512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.295736][T18512] RSP: 002b:00007f0b3d5fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 403.295756][T18512] RAX: ffffffffffffffda RBX: 00007f0b3c9b6080 RCX: 00007f0b3c78eb69 [ 403.295768][T18512] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 403.295779][T18512] RBP: 00007f0b3d5fe090 R08: 0000000000000000 R09: 0000000000000000 [ 403.295790][T18512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.295799][T18512] R13: 0000000000000000 R14: 00007f0b3c9b6080 R15: 00007fff6de13a48 [ 403.295830][T18512] [ 403.555538][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 403.719454][T18523] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4505'. [ 403.816913][T18525] syzkaller0: entered promiscuous mode [ 403.828144][T18525] syzkaller0: entered allmulticast mode [ 403.846215][T18525] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 404.025072][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4509'. [ 404.259939][T18543] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 404.283698][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 404.351661][T18550] team0: No ports can be present during mode change [ 404.372372][T18554] FAULT_INJECTION: forcing a failure. [ 404.372372][T18554] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 404.462322][T18554] CPU: 0 UID: 0 PID: 18554 Comm: syz.4.4516 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 404.462349][T18554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.462359][T18554] Call Trace: [ 404.462366][T18554] [ 404.462373][T18554] dump_stack_lvl+0x189/0x250 [ 404.462396][T18554] ? __pfx____ratelimit+0x10/0x10 [ 404.462420][T18554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.462438][T18554] ? __pfx__printk+0x10/0x10 [ 404.462459][T18554] ? fs_reclaim_acquire+0x7d/0x100 [ 404.462485][T18554] should_fail_ex+0x414/0x560 [ 404.462515][T18554] prepare_alloc_pages+0x213/0x610 [ 404.462541][T18554] __alloc_frozen_pages_noprof+0x123/0x370 [ 404.462564][T18554] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 404.462593][T18554] ? policy_nodemask+0x27c/0x720 [ 404.462614][T18554] ? __lock_acquire+0xab9/0xd20 [ 404.462643][T18554] alloc_pages_mpol+0x232/0x4a0 [ 404.462674][T18554] vma_alloc_folio_noprof+0xe4/0x200 [ 404.462702][T18554] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 404.462739][T18554] folio_prealloc+0x30/0x180 [ 404.462766][T18554] __handle_mm_fault+0x2c88/0x5620 [ 404.462810][T18554] ? __pfx___handle_mm_fault+0x10/0x10 [ 404.462847][T18554] ? follow_page_pte+0x8d6/0x14b0 [ 404.462880][T18554] handle_mm_fault+0x40a/0x8e0 [ 404.462912][T18554] __get_user_pages+0x1af4/0x30b0 [ 404.462969][T18554] ? __pfx___get_user_pages+0x10/0x10 [ 404.462990][T18554] ? __gup_longterm_locked+0xbf7/0x15b0 [ 404.463013][T18554] ? down_read_killable+0x1d1/0x350 [ 404.463029][T18554] ? try_get_folio+0x633/0x660 [ 404.463055][T18554] __gup_longterm_locked+0xd66/0x15b0 [ 404.463082][T18554] ? try_grab_folio_fast+0x35b/0x4f0 [ 404.463110][T18554] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 404.463142][T18554] gup_fast_fallback+0x1cd4/0x2260 [ 404.463204][T18554] ? __pfx_gup_fast_fallback+0x10/0x10 [ 404.463233][T18554] ? rcu_is_watching+0x15/0xb0 [ 404.463256][T18554] ? is_valid_gup_args+0x11f/0x200 [ 404.463289][T18554] ? pin_user_pages_fast+0x4d/0xb0 [ 404.463318][T18554] rds_info_getsockopt+0x1fb/0x470 [ 404.463347][T18554] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 404.463373][T18554] ? __might_fault+0xb0/0x130 [ 404.463401][T18554] ? rds_getsockopt+0x31d/0x500 [ 404.463416][T18554] ? __pfx_rds_getsockopt+0x10/0x10 [ 404.463434][T18554] do_sock_getsockopt+0x36f/0x450 [ 404.463456][T18554] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 404.463472][T18554] ? do_syscall_64+0x20/0x3b0 [ 404.463493][T18554] ? __fget_files+0x3a0/0x420 [ 404.463510][T18554] ? __fget_files+0x2a/0x420 [ 404.463533][T18554] __x64_sys_getsockopt+0x1a5/0x250 [ 404.463551][T18554] ? do_syscall_64+0x20/0x3b0 [ 404.463575][T18554] ? do_syscall_64+0x20/0x3b0 [ 404.463602][T18554] do_syscall_64+0xfa/0x3b0 [ 404.463624][T18554] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.463646][T18554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.463664][T18554] ? clear_bhb_loop+0x60/0xb0 [ 404.463682][T18554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.463699][T18554] RIP: 0033:0x7f0b3c78eb69 [ 404.463714][T18554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.463729][T18554] RSP: 002b:00007f0b3d61f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 404.463749][T18554] RAX: ffffffffffffffda RBX: 00007f0b3c9b5fa0 RCX: 00007f0b3c78eb69 [ 404.463762][T18554] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 404.463773][T18554] RBP: 00007f0b3d61f090 R08: 0000200000000280 R09: 0000000000000000 [ 404.463785][T18554] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 404.463797][T18554] R13: 0000000000000000 R14: 00007f0b3c9b5fa0 R15: 00007fff6de13a48 [ 404.463826][T18554] [ 404.862697][T18563] syzkaller0: entered promiscuous mode [ 404.868741][T18563] syzkaller0: entered allmulticast mode [ 404.881070][T18563] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 405.016198][T18568] tipc: Enabled bearer , priority 0 [ 405.035827][T18568] syzkaller0: entered promiscuous mode [ 405.047092][T18568] syzkaller0: entered allmulticast mode [ 405.128104][T18568] tipc: Resetting bearer [ 405.156036][T18567] tipc: Resetting bearer [ 405.210891][T18567] tipc: Disabling bearer [ 405.481277][T18597] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 405.579905][T18600] syzkaller0: entered promiscuous mode [ 405.585448][T18600] syzkaller0: entered allmulticast mode [ 405.595333][T18604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.875417][T18618] syzkaller0: entered promiscuous mode [ 405.888250][T18618] syzkaller0: entered allmulticast mode [ 405.930493][T18618] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 406.064114][T18627] tipc: Enabled bearer , priority 0 [ 406.075491][T18627] syzkaller0: entered promiscuous mode [ 406.082299][T18627] syzkaller0: entered allmulticast mode [ 406.108681][T18627] tipc: Resetting bearer [ 406.128265][T18625] tipc: Resetting bearer [ 406.162687][T18625] tipc: Disabling bearer [ 406.185778][T18632] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 406.650475][T18665] syzkaller0: entered promiscuous mode [ 406.656206][T18665] syzkaller0: entered allmulticast mode [ 406.710843][T18668] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 406.986622][T18686] tipc: Enabled bearer , priority 0 [ 406.994903][T18686] syzkaller0: entered promiscuous mode [ 407.004760][T18686] syzkaller0: entered allmulticast mode [ 407.017199][T18686] __nla_validate_parse: 6 callbacks suppressed [ 407.017215][T18686] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4560'. [ 407.043421][T18684] netlink: 'syz.1.4559': attribute type 1 has an invalid length. [ 407.043885][T18686] tipc: Resetting bearer [ 407.065325][T18685] tipc: Resetting bearer [ 407.084501][T18685] tipc: Disabling bearer [ 407.266592][T18697] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 407.524017][T18715] syzkaller0: entered promiscuous mode [ 407.530300][T18715] syzkaller0: entered allmulticast mode [ 407.576762][T18715] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4571'. [ 407.634597][T18720] tipc: Enabled bearer , priority 0 [ 407.656275][T18720] syzkaller0: entered promiscuous mode [ 407.668002][T18720] syzkaller0: entered allmulticast mode [ 407.743465][T18720] tipc: Resetting bearer [ 407.757125][T18719] tipc: Resetting bearer [ 407.789412][T18719] tipc: Disabling bearer [ 407.809818][T18728] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4577'. [ 407.863522][T18728] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 407.959858][T18740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4582'. [ 407.987296][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 407.995371][ C1] lec:lec_tx_timeout: lec0 [ 408.001430][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 408.096001][T18746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4584'. [ 408.162063][T18750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4585'. [ 408.185358][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4582'. [ 408.195295][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4585'. [ 408.242849][T18753] syzkaller0: entered promiscuous mode [ 408.251127][T18753] syzkaller0: entered allmulticast mode [ 408.261685][T18755] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4588'. [ 408.283968][T18753] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4587'. [ 408.425511][T18764] tipc: Enabled bearer , priority 0 [ 408.436224][T18764] syzkaller0: entered promiscuous mode [ 408.442320][T18764] syzkaller0: entered allmulticast mode [ 408.493771][T18764] tipc: Resetting bearer [ 408.502133][T18763] tipc: Resetting bearer [ 408.523925][T18763] tipc: Disabling bearer [ 408.536371][T18767] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 408.636350][T18770] tipc: Enabled bearer , priority 0 [ 408.654027][T18770] syzkaller0: entered promiscuous mode [ 408.660667][T18770] syzkaller0: entered allmulticast mode [ 408.698547][T18770] tipc: Resetting bearer [ 408.706990][T18769] tipc: Resetting bearer [ 408.735737][T18769] tipc: Disabling bearer [ 408.890059][T18788] tipc: Resetting bearer [ 409.021904][T18788] tipc: Disabling bearer [ 409.165233][T18795] syzkaller0: entered promiscuous mode [ 409.178948][T18795] syzkaller0: entered allmulticast mode [ 409.279307][T18806] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 409.651942][T18829] team0: Unable to change to the same mode the team is in [ 409.685023][T18832] FAULT_INJECTION: forcing a failure. [ 409.685023][T18832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.709548][T18832] CPU: 1 UID: 0 PID: 18832 Comm: syz.2.4615 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 409.709577][T18832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.709588][T18832] Call Trace: [ 409.709595][T18832] [ 409.709603][T18832] dump_stack_lvl+0x189/0x250 [ 409.709628][T18832] ? __pfx____ratelimit+0x10/0x10 [ 409.709651][T18832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.709669][T18832] ? __pfx__printk+0x10/0x10 [ 409.709703][T18832] should_fail_ex+0x414/0x560 [ 409.709735][T18832] _copy_to_user+0x31/0xb0 [ 409.709761][T18832] simple_read_from_buffer+0xe1/0x170 [ 409.709793][T18832] proc_fail_nth_read+0x1b3/0x220 [ 409.709817][T18832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.709841][T18832] ? rw_verify_area+0x258/0x650 [ 409.709863][T18832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.709885][T18832] vfs_read+0x1fd/0x980 [ 409.709907][T18832] ? fdget_pos+0x247/0x320 [ 409.709928][T18832] ? __pfx___mutex_lock+0x10/0x10 [ 409.709952][T18832] ? __pfx_vfs_read+0x10/0x10 [ 409.709977][T18832] ? __fget_files+0x2a/0x420 [ 409.709999][T18832] ? __fget_files+0x3a0/0x420 [ 409.710015][T18832] ? __fget_files+0x2a/0x420 [ 409.710042][T18832] ksys_read+0x145/0x250 [ 409.710068][T18832] ? __pfx_ksys_read+0x10/0x10 [ 409.710097][T18832] ? do_syscall_64+0xbe/0x3b0 [ 409.710124][T18832] do_syscall_64+0xfa/0x3b0 [ 409.710154][T18832] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.710178][T18832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.710194][T18832] ? clear_bhb_loop+0x60/0xb0 [ 409.710215][T18832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.710231][T18832] RIP: 0033:0x7f278078d57c [ 409.710248][T18832] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 409.710263][T18832] RSP: 002b:00007f278157b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.710284][T18832] RAX: ffffffffffffffda RBX: 00007f27809b5fa0 RCX: 00007f278078d57c [ 409.710297][T18832] RDX: 000000000000000f RSI: 00007f278157b0a0 RDI: 0000000000000003 [ 409.710308][T18832] RBP: 00007f278157b090 R08: 0000000000000000 R09: 0000000000000000 [ 409.710320][T18832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.710330][T18832] R13: 0000000000000001 R14: 00007f27809b5fa0 R15: 00007fffa0a69198 [ 409.710359][T18832] [ 409.726618][T18823] tipc: Enabling of bearer rejected, already enabled [ 409.835152][T18835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.027186][T18838] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 410.073052][T18840] FAULT_INJECTION: forcing a failure. [ 410.073052][T18840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 410.094745][T18840] CPU: 0 UID: 0 PID: 18840 Comm: syz.2.4618 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 410.094773][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.094784][T18840] Call Trace: [ 410.094791][T18840] [ 410.094797][T18840] dump_stack_lvl+0x189/0x250 [ 410.094821][T18840] ? __pfx____ratelimit+0x10/0x10 [ 410.094841][T18840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.094855][T18840] ? __pfx__printk+0x10/0x10 [ 410.094873][T18840] ? fs_reclaim_acquire+0x7d/0x100 [ 410.094897][T18840] should_fail_ex+0x414/0x560 [ 410.094927][T18840] prepare_alloc_pages+0x213/0x610 [ 410.094954][T18840] __alloc_frozen_pages_noprof+0x123/0x370 [ 410.094979][T18840] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 410.095003][T18840] ? __lock_acquire+0xab9/0xd20 [ 410.095038][T18840] alloc_pages_mpol+0x232/0x4a0 [ 410.095077][T18840] alloc_pages_noprof+0xa9/0x190 [ 410.095105][T18840] pte_alloc_one+0x21/0x170 [ 410.095124][T18840] __pte_alloc+0x25/0x1a0 [ 410.095146][T18840] __handle_mm_fault+0x4b8a/0x5620 [ 410.095190][T18840] ? __pfx___handle_mm_fault+0x10/0x10 [ 410.095228][T18840] ? find_vma+0xe7/0x160 [ 410.095249][T18840] ? __pfx_find_vma+0x10/0x10 [ 410.095272][T18840] handle_mm_fault+0x40a/0x8e0 [ 410.095304][T18840] do_user_addr_fault+0x764/0x1390 [ 410.095342][T18840] exc_page_fault+0x76/0xf0 [ 410.095367][T18840] asm_exc_page_fault+0x26/0x30 [ 410.095383][T18840] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 410.095402][T18840] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 410.095416][T18840] RSP: 0018:ffffc9000bf17bb8 EFLAGS: 00050246 [ 410.095434][T18840] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 410.095445][T18840] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9000bf17c20 [ 410.095456][T18840] RBP: ffffc9000bf17cb0 R08: ffffc9000bf17c27 R09: 1ffff920017e2f84 [ 410.095468][T18840] R10: dffffc0000000000 R11: fffff520017e2f85 R12: dffffc0000000000 [ 410.095481][T18840] R13: 1ffff920017e2f80 R14: ffffc9000bf17c20 R15: 0000200000000040 [ 410.095515][T18840] _copy_from_user+0x7a/0xb0 [ 410.095538][T18840] hci_dev_cmd+0xa2/0x7b0 [ 410.095565][T18840] ? __pfx_hci_dev_cmd+0x10/0x10 [ 410.095589][T18840] ? proc_do_static_key+0xd0/0x2c0 [ 410.095614][T18840] ? hci_sock_ioctl+0x5e5/0x910 [ 410.095645][T18840] sock_do_ioctl+0xdc/0x300 [ 410.095670][T18840] ? __pfx_sock_do_ioctl+0x10/0x10 [ 410.095689][T18840] ? __lock_acquire+0xab9/0xd20 [ 410.095729][T18840] sock_ioctl+0x576/0x790 [ 410.095751][T18840] ? __pfx_sock_ioctl+0x10/0x10 [ 410.095790][T18840] ? __fget_files+0x2a/0x420 [ 410.095806][T18840] ? __fget_files+0x3a0/0x420 [ 410.095821][T18840] ? __fget_files+0x2a/0x420 [ 410.095841][T18840] ? bpf_lsm_file_ioctl+0x9/0x20 [ 410.095861][T18840] ? __pfx_sock_ioctl+0x10/0x10 [ 410.095880][T18840] __se_sys_ioctl+0xf9/0x170 [ 410.095904][T18840] do_syscall_64+0xfa/0x3b0 [ 410.095926][T18840] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.095948][T18840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.095965][T18840] ? clear_bhb_loop+0x60/0xb0 [ 410.095986][T18840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.096003][T18840] RIP: 0033:0x7f278078eb69 [ 410.096018][T18840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.096033][T18840] RSP: 002b:00007f278157b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.096051][T18840] RAX: ffffffffffffffda RBX: 00007f27809b5fa0 RCX: 00007f278078eb69 [ 410.096064][T18840] RDX: 0000200000000040 RSI: 00000000400448e0 RDI: 0000000000000004 [ 410.096082][T18840] RBP: 00007f278157b090 R08: 0000000000000000 R09: 0000000000000000 [ 410.096092][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.096103][T18840] R13: 0000000000000000 R14: 00007f27809b5fa0 R15: 00007fffa0a69198 [ 410.096133][T18840] [ 410.501541][T18842] tipc: Enabling of bearer rejected, already enabled [ 410.961525][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.974060][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.986157][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.006334][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.016597][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.053843][T18869] tipc: Enabling of bearer rejected, failed to enable media [ 411.103221][T18861] lo speed is unknown, defaulting to 1000 [ 411.285289][T18885] tipc: Enabling of bearer rejected, failed to enable media [ 411.293936][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 411.772463][T18894] veth0_to_team: entered promiscuous mode [ 411.781287][T18894] veth0_to_team: entered allmulticast mode [ 411.792027][T18892] netlink: 'syz.4.4629': attribute type 7 has an invalid length. [ 411.908021][T18900] tipc: Enabling of bearer rejected, failed to enable media [ 411.934021][T18896] tipc: Enabled bearer , priority 0 [ 412.034645][T18896] tipc: Resetting bearer [ 412.103311][T18895] tipc: Disabling bearer [ 412.159387][T18915] tipc: Enabling of bearer rejected, failed to enable media [ 412.300480][T18920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.326360][T18920] __nla_validate_parse: 11 callbacks suppressed [ 412.326378][T18920] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4636'. [ 412.552982][T18861] chnl_net:caif_netlink_parms(): no params data found [ 412.561986][T18938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4639'. [ 412.790147][T18861] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.834552][T18861] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.879709][T18861] bridge_slave_0: entered allmulticast mode [ 412.904330][T18861] bridge_slave_0: entered promiscuous mode [ 412.953684][T18861] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.988364][T18861] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.014082][T18861] bridge_slave_1: entered allmulticast mode [ 413.017829][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 413.028073][ C1] lec:lec_tx_timeout: lec0 [ 413.033488][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 413.036057][T18861] bridge_slave_1: entered promiscuous mode [ 413.048348][ T50] Bluetooth: hci5: command tx timeout [ 413.076373][T18938] tipc: Enabling of bearer rejected, failed to enable media [ 413.214174][T18861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.248208][T18861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.434967][T18861] team0: Port device team_slave_0 added [ 413.452415][T18861] team0: Port device team_slave_1 added [ 413.501366][T18983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.517452][T18982] tipc: Enabling of bearer rejected, failed to enable media [ 413.555883][T18983] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4649'. [ 413.586864][T18861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.601826][T18861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.673956][T18861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.784209][T18861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.809280][T18861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.893813][T18861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.953289][T19003] tipc: Enabled bearer , priority 0 [ 413.993005][T19003] syzkaller0: entered promiscuous mode [ 414.002842][T19003] syzkaller0: entered allmulticast mode [ 414.063533][T19003] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4655'. [ 414.121756][T18861] hsr_slave_0: entered promiscuous mode [ 414.130111][T18861] hsr_slave_1: entered promiscuous mode [ 414.136875][T18861] debugfs: 'hsr0' already exists in 'hsr' [ 414.146313][T18861] Cannot create hsr debugfs directory [ 414.154071][T19002] tipc: Resetting bearer [ 414.181745][T19002] tipc: Disabling bearer [ 414.366326][T19032] tipc: Enabled bearer , priority 0 [ 414.392683][T19032] syzkaller0: entered promiscuous mode [ 414.402328][T19032] syzkaller0: entered allmulticast mode [ 414.451891][T19032] tipc: Resetting bearer [ 414.493762][T19031] tipc: Resetting bearer [ 414.515665][T19031] tipc: Disabling bearer [ 414.551551][T19041] tipc: Enabled bearer , priority 0 [ 414.596125][T19041] syzkaller0: entered promiscuous mode [ 414.602414][T19041] syzkaller0: entered allmulticast mode [ 414.629460][T19043] tipc: Enabling of bearer rejected, failed to enable media [ 414.642277][T19041] tipc: Resetting bearer [ 414.672496][T19040] tipc: Resetting bearer [ 414.696756][T19040] tipc: Disabling bearer [ 414.735785][T18861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 414.775330][T18861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 414.824864][T18861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 414.885734][T18861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 414.899004][T19050] openvswitch: netlink: IP tunnel dst address not specified [ 414.931080][T19052] openvswitch: netlink: IP tunnel dst address not specified [ 415.015785][T19052] netlink: 'syz.3.4669': attribute type 3 has an invalid length. [ 415.090877][T19068] FAULT_INJECTION: forcing a failure. [ 415.090877][T19068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.116362][T19068] CPU: 0 UID: 0 PID: 19068 Comm: syz.4.4671 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 415.116388][T19068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.116397][T19068] Call Trace: [ 415.116404][T19068] [ 415.116411][T19068] dump_stack_lvl+0x189/0x250 [ 415.116435][T19068] ? __pfx____ratelimit+0x10/0x10 [ 415.116457][T19068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.116474][T19068] ? __pfx__printk+0x10/0x10 [ 415.116503][T19068] ? __might_fault+0xb0/0x130 [ 415.116535][T19068] should_fail_ex+0x414/0x560 [ 415.116569][T19068] _copy_to_iter+0x1db/0x16f0 [ 415.116589][T19068] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 415.116611][T19068] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.116638][T19068] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 415.116659][T19068] ? __pfx__copy_to_iter+0x10/0x10 [ 415.116677][T19068] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 415.116703][T19068] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 415.116727][T19068] __skb_datagram_iter+0xf8/0x990 [ 415.116747][T19068] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 415.116773][T19068] skb_copy_datagram_iter+0xc5/0x230 [ 415.116796][T19068] netlink_recvmsg+0x2ab/0xa30 [ 415.116830][T19068] ? __pfx_netlink_recvmsg+0x10/0x10 [ 415.116857][T19068] ? aa_sock_msg_perm+0x94/0x160 [ 415.116881][T19068] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 415.116898][T19068] ? security_socket_recvmsg+0x7e/0x2e0 [ 415.116916][T19068] ? __pfx_netlink_recvmsg+0x10/0x10 [ 415.116940][T19068] sock_recvmsg+0x22c/0x270 [ 415.116966][T19068] __sys_recvfrom+0x1f6/0x340 [ 415.116986][T19068] ? __pfx___sys_recvfrom+0x10/0x10 [ 415.117013][T19068] ? count_memcg_event_mm+0x21/0x260 [ 415.117046][T19068] ? exc_page_fault+0x76/0xf0 [ 415.117073][T19068] ? do_user_addr_fault+0xc8a/0x1390 [ 415.117101][T19068] __x64_sys_recvfrom+0xde/0x100 [ 415.117123][T19068] do_syscall_64+0xfa/0x3b0 [ 415.117145][T19068] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.117167][T19068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.117184][T19068] ? clear_bhb_loop+0x60/0xb0 [ 415.117205][T19068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.117222][T19068] RIP: 0033:0x7f0b3c790934 [ 415.117238][T19068] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 415.117251][T19068] RSP: 002b:00007f0b3d61df30 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 415.117270][T19068] RAX: ffffffffffffffda RBX: 0000000000000023 RCX: 00007f0b3c790934 [ 415.117282][T19068] RDX: 0000000000001000 RSI: 00007f0b3d61e010 RDI: 0000000000000004 [ 415.117293][T19068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.117303][T19068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000740 [ 415.117314][T19068] R13: 00007f0b3d61dfc0 R14: 000000000000000d R15: 0000000000000000 [ 415.117343][T19068] [ 415.131822][ T50] Bluetooth: hci5: command tx timeout [ 415.215091][T19073] syzkaller0: entered promiscuous mode [ 415.332335][T19052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.338502][T19073] syzkaller0: entered allmulticast mode [ 415.460962][T19078] openvswitch: netlink: Tunnel attr 10 has unexpected len 1 expected 2 [ 415.531063][T19080] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4672'. [ 415.555233][T18861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.587655][T19087] FAULT_INJECTION: forcing a failure. [ 415.587655][T19087] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 415.608890][T19087] CPU: 1 UID: 0 PID: 19087 Comm: syz.2.4676 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 415.608919][T19087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.608929][T19087] Call Trace: [ 415.608937][T19087] [ 415.608945][T19087] dump_stack_lvl+0x189/0x250 [ 415.608971][T19087] ? __pfx____ratelimit+0x10/0x10 [ 415.608996][T19087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.609015][T19087] ? __pfx__printk+0x10/0x10 [ 415.609038][T19087] ? fs_reclaim_acquire+0x7d/0x100 [ 415.609067][T19087] should_fail_ex+0x414/0x560 [ 415.609098][T19087] prepare_alloc_pages+0x213/0x610 [ 415.609127][T19087] __alloc_frozen_pages_noprof+0x123/0x370 [ 415.609151][T19087] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 415.609182][T19087] ? policy_nodemask+0x27c/0x720 [ 415.609204][T19087] ? __lock_acquire+0xab9/0xd20 [ 415.609233][T19087] alloc_pages_mpol+0x232/0x4a0 [ 415.609264][T19087] vma_alloc_folio_noprof+0xe4/0x200 [ 415.609289][T19087] ? page_table_check_set+0x18d/0x730 [ 415.609307][T19087] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 415.609347][T19087] folio_prealloc+0x30/0x180 [ 415.609374][T19087] __handle_mm_fault+0x2c88/0x5620 [ 415.609419][T19087] ? __pfx___handle_mm_fault+0x10/0x10 [ 415.609457][T19087] ? follow_page_pte+0x8d6/0x14b0 [ 415.609491][T19087] handle_mm_fault+0x40a/0x8e0 [ 415.609526][T19087] __get_user_pages+0x1af4/0x30b0 [ 415.609588][T19087] ? __pfx___get_user_pages+0x10/0x10 [ 415.609609][T19087] ? __gup_longterm_locked+0xbf7/0x15b0 [ 415.609631][T19087] ? down_read_killable+0x1d1/0x350 [ 415.609647][T19087] ? try_get_folio+0x633/0x660 [ 415.609674][T19087] __gup_longterm_locked+0xd66/0x15b0 [ 415.609709][T19087] ? try_grab_folio_fast+0x35b/0x4f0 [ 415.609738][T19087] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 415.609769][T19087] gup_fast_fallback+0x1cd4/0x2260 [ 415.609831][T19087] ? __pfx_gup_fast_fallback+0x10/0x10 [ 415.609862][T19087] ? rcu_is_watching+0x15/0xb0 [ 415.609886][T19087] ? is_valid_gup_args+0x11f/0x200 [ 415.609911][T19087] ? pin_user_pages_fast+0x4d/0xb0 [ 415.609936][T19087] rds_info_getsockopt+0x1fb/0x470 [ 415.609966][T19087] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 415.609992][T19087] ? __might_fault+0xb0/0x130 [ 415.610020][T19087] ? rds_getsockopt+0x31d/0x500 [ 415.610037][T19087] ? __pfx_rds_getsockopt+0x10/0x10 [ 415.610057][T19087] do_sock_getsockopt+0x36f/0x450 [ 415.610080][T19087] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 415.610097][T19087] ? do_syscall_64+0x20/0x3b0 [ 415.610120][T19087] ? __fget_files+0x3a0/0x420 [ 415.610136][T19087] ? __fget_files+0x2a/0x420 [ 415.610162][T19087] __x64_sys_getsockopt+0x1a5/0x250 [ 415.610178][T19087] ? do_syscall_64+0x20/0x3b0 [ 415.610203][T19087] ? do_syscall_64+0x20/0x3b0 [ 415.610231][T19087] do_syscall_64+0xfa/0x3b0 [ 415.610256][T19087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.610272][T19087] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.610289][T19087] ? clear_bhb_loop+0x60/0xb0 [ 415.610311][T19087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.610328][T19087] RIP: 0033:0x7f278078eb69 [ 415.610345][T19087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.610360][T19087] RSP: 002b:00007f278157b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 415.610382][T19087] RAX: ffffffffffffffda RBX: 00007f27809b5fa0 RCX: 00007f278078eb69 [ 415.610395][T19087] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 415.610407][T19087] RBP: 00007f278157b090 R08: 0000200000000280 R09: 0000000000000000 [ 415.610419][T19087] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 415.610430][T19087] R13: 0000000000000000 R14: 00007f27809b5fa0 R15: 00007fffa0a69198 [ 415.610459][T19087] [ 416.096675][T18861] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.139521][T19097] tipc: Enabling of bearer rejected, failed to enable media [ 416.160763][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.167956][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.183933][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.191208][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.266246][T19104] tipc: Enabling of bearer rejected, failed to enable media [ 416.321461][T18861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.036043][T18861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.059995][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4686'. [ 417.079918][T19146] FAULT_INJECTION: forcing a failure. [ 417.079918][T19146] name failslab, interval 1, probability 0, space 0, times 0 [ 417.136420][T19146] CPU: 0 UID: 0 PID: 19146 Comm: syz.1.4688 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 417.136448][T19146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.136459][T19146] Call Trace: [ 417.136466][T19146] [ 417.136474][T19146] dump_stack_lvl+0x189/0x250 [ 417.136498][T19146] ? __pfx____ratelimit+0x10/0x10 [ 417.136523][T19146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.136541][T19146] ? __pfx__printk+0x10/0x10 [ 417.136559][T19146] ? genl_rcv+0x28/0x40 [ 417.136605][T19146] ? __sys_sendto+0x3bd/0x520 [ 417.136627][T19146] ? do_syscall_64+0xfa/0x3b0 [ 417.136663][T19146] should_fail_ex+0x414/0x560 [ 417.136695][T19146] should_failslab+0xa8/0x100 [ 417.136716][T19146] kmem_cache_alloc_noprof+0x73/0x3c0 [ 417.136739][T19146] ? skb_clone+0x212/0x3a0 [ 417.136762][T19146] skb_clone+0x212/0x3a0 [ 417.136786][T19146] __netlink_deliver_tap+0x404/0x850 [ 417.136824][T19146] ? netlink_deliver_tap+0x2e/0x1b0 [ 417.136849][T19146] netlink_deliver_tap+0x19c/0x1b0 [ 417.136874][T19146] netlink_sendskb+0x68/0x140 [ 417.136899][T19146] netlink_unicast+0x397/0x9e0 [ 417.136918][T19146] ? __asan_memcpy+0x40/0x70 [ 417.136949][T19146] ? __pfx_netlink_unicast+0x10/0x10 [ 417.136982][T19146] netlink_rcv_skb+0x28c/0x470 [ 417.137005][T19146] ? __lock_acquire+0xab9/0xd20 [ 417.137028][T19146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.137049][T19146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.137090][T19146] ? down_read+0x1ad/0x2e0 [ 417.137110][T19146] genl_rcv+0x28/0x40 [ 417.137127][T19146] netlink_unicast+0x82c/0x9e0 [ 417.137158][T19146] ? __pfx_netlink_unicast+0x10/0x10 [ 417.137183][T19146] ? netlink_sendmsg+0x642/0xb30 [ 417.137204][T19146] ? skb_put+0x11b/0x210 [ 417.137225][T19146] netlink_sendmsg+0x805/0xb30 [ 417.137260][T19146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.137286][T19146] ? aa_sock_msg_perm+0x94/0x160 [ 417.137311][T19146] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.137329][T19146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.137353][T19146] __sock_sendmsg+0x21c/0x270 [ 417.137379][T19146] __sys_sendto+0x3bd/0x520 [ 417.137406][T19146] ? __pfx___sys_sendto+0x10/0x10 [ 417.137443][T19146] ? count_memcg_event_mm+0x21/0x260 [ 417.137479][T19146] ? exc_page_fault+0x76/0xf0 [ 417.137507][T19146] ? do_user_addr_fault+0xc8a/0x1390 [ 417.137535][T19146] __x64_sys_sendto+0xde/0x100 [ 417.137571][T19146] do_syscall_64+0xfa/0x3b0 [ 417.137593][T19146] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.137616][T19146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.137633][T19146] ? clear_bhb_loop+0x60/0xb0 [ 417.137656][T19146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.137672][T19146] RIP: 0033:0x7f45aed909fc [ 417.137689][T19146] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 417.137704][T19146] RSP: 002b:00007f45acbf4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 417.137726][T19146] RAX: ffffffffffffffda RBX: 00007f45acbf4fc0 RCX: 00007f45aed909fc [ 417.137740][T19146] RDX: 0000000000000024 RSI: 00007f45acbf5010 RDI: 0000000000000004 [ 417.137751][T19146] RBP: 0000000000000000 R08: 00007f45acbf4f14 R09: 000000000000000c [ 417.137763][T19146] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 417.137773][T19146] R13: 00007f45acbf4f68 R14: 00007f45acbf5010 R15: 0000000000000000 [ 417.137805][T19146] [ 417.469770][ T50] Bluetooth: hci5: command tx timeout [ 417.559510][T19152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4689'. [ 417.619140][T19156] tipc: Enabled bearer , priority 0 [ 417.626759][T19156] syzkaller0: entered promiscuous mode [ 417.633536][T19156] syzkaller0: entered allmulticast mode [ 417.658300][T19156] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4690'. [ 417.682332][T19156] tipc: Resetting bearer [ 417.719733][T19155] tipc: Resetting bearer [ 417.742040][T19155] tipc: Disabling bearer [ 417.834158][T18861] veth0_vlan: entered promiscuous mode [ 417.842398][T19160] tipc: Enabling of bearer rejected, failed to enable media [ 417.856555][T19160] syzkaller0: entered promiscuous mode [ 417.867188][T19160] syzkaller0: entered allmulticast mode [ 417.880713][T19162] tipc: Enabled bearer , priority 0 [ 417.888889][T19162] syzkaller0: entered promiscuous mode [ 417.894512][T19162] syzkaller0: entered allmulticast mode [ 417.913989][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4693'. [ 417.985775][T18861] veth1_vlan: entered promiscuous mode [ 417.995160][T19162] tipc: Resetting bearer [ 418.016447][T19161] tipc: Resetting bearer [ 418.047882][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 418.055994][ C1] lec:lec_tx_timeout: lec0 [ 418.061798][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 418.103304][T19161] tipc: Disabling bearer [ 418.135369][T19171] syzkaller0: entered promiscuous mode [ 418.152957][T19171] syzkaller0: entered allmulticast mode [ 418.189417][T19167] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 418.305987][T18861] veth0_macvtap: entered promiscuous mode [ 418.338657][T18861] veth1_macvtap: entered promiscuous mode [ 418.392725][T18861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.433227][T18861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.465547][ T3511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.494172][ T3511] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.504558][ T3511] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.535158][ T3511] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.645508][T19197] tipc: Enabled bearer , priority 0 [ 418.658879][T19197] syzkaller0: entered promiscuous mode [ 418.664551][T19197] syzkaller0: entered allmulticast mode [ 418.664599][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.685650][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.715430][T19197] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4702'. [ 418.740585][T19197] tipc: Resetting bearer [ 418.750462][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.763847][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.775881][T19196] tipc: Resetting bearer [ 418.784107][T19201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4704'. [ 418.820016][T19196] tipc: Disabling bearer [ 418.835356][T19201] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 419.052960][T19212] sch_fq: defrate 1 ignored. [ 419.220562][T19221] syzkaller0: entered promiscuous mode [ 419.240612][T19221] syzkaller0: entered allmulticast mode [ 419.250089][T19221] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 419.538289][ T50] Bluetooth: hci5: command tx timeout [ 419.643037][T19230] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4711'. [ 419.811191][T19238] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4712'. [ 419.899761][T19239] tipc: Enabled bearer , priority 0 [ 419.911690][T19242] tipc: Enabled bearer , priority 0 [ 419.918625][T19244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4715'. [ 419.937145][T19239] syzkaller0: entered promiscuous mode [ 419.943535][T19239] syzkaller0: entered allmulticast mode [ 419.965372][T19242] syzkaller0: entered promiscuous mode [ 419.988069][T19242] syzkaller0: entered allmulticast mode [ 420.028342][T19245] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 420.082983][T19239] tipc: Resetting bearer [ 420.121187][T19237] tipc: Resetting bearer [ 420.146712][T19237] tipc: Disabling bearer [ 420.181813][T19242] tipc: Resetting bearer [ 420.191419][T19240] tipc: Resetting bearer [ 420.208943][T19240] tipc: Disabling bearer [ 420.229690][T19256] tipc: Enabled bearer , priority 0 [ 420.246847][T19255] tipc: Enabled bearer , priority 0 [ 420.255589][T19255] syzkaller0: entered promiscuous mode [ 420.261847][T19255] syzkaller0: entered allmulticast mode [ 420.289779][T19247] syzkaller0: entered promiscuous mode [ 420.298123][T19247] syzkaller0: entered allmulticast mode [ 420.304718][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4719'. [ 420.328338][T19255] tipc: Resetting bearer [ 420.371918][T19247] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4716'. [ 420.399936][T19253] tipc: Resetting bearer [ 420.432284][T19253] tipc: Disabling bearer [ 420.478319][T19247] tipc: Resetting bearer [ 420.508596][T19246] tipc: Resetting bearer [ 420.612487][T19246] tipc: Disabling bearer [ 420.915635][T19289] tipc: Enabling of bearer rejected, failed to enable media [ 420.939604][T19289] syzkaller0: entered promiscuous mode [ 420.945201][T19289] syzkaller0: entered allmulticast mode [ 420.993311][T19294] tipc: Started in network mode [ 421.000617][T19294] tipc: Node identity 16d8945173bc, cluster identity 4711 [ 421.009810][T19294] tipc: Enabled bearer , priority 0 [ 421.054379][T19294] syzkaller0: entered promiscuous mode [ 421.060824][T19294] syzkaller0: entered allmulticast mode [ 421.094296][T19294] tipc: Resetting bearer [ 421.166076][T19291] tipc: Resetting bearer [ 421.249804][T19291] tipc: Disabling bearer [ 421.291993][T19307] delete_channel: no stack [ 421.296109][T19311] tipc: Enabling of bearer rejected, failed to enable media [ 421.332961][T19311] syzkaller0: entered promiscuous mode [ 421.339495][T19311] syzkaller0: entered allmulticast mode [ 421.381767][T19313] netlink: 'syz.3.4735': attribute type 2 has an invalid length. [ 421.444432][T19313] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 421.461588][T19317] netlink: 'syz.5.4737': attribute type 10 has an invalid length. [ 421.474325][T19317] bridge0: port 3(team0) entered blocking state [ 421.484401][T19317] bridge0: port 3(team0) entered disabled state [ 421.501029][T19317] team0: entered allmulticast mode [ 421.506313][T19317] team_slave_0: entered allmulticast mode [ 421.529368][T19317] team_slave_1: entered allmulticast mode [ 421.571770][T19317] team0: entered promiscuous mode [ 421.601680][T19317] team_slave_0: entered promiscuous mode [ 421.633324][T19317] team_slave_1: entered promiscuous mode [ 421.662814][T19317] bridge0: port 3(team0) entered blocking state [ 421.669394][T19317] bridge0: port 3(team0) entered forwarding state [ 421.709473][T19320] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 421.730576][T19326] syzkaller0: entered promiscuous mode [ 421.736077][T19326] syzkaller0: entered allmulticast mode [ 421.879103][T19336] FAULT_INJECTION: forcing a failure. [ 421.879103][T19336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 421.904151][T19336] CPU: 0 UID: 0 PID: 19336 Comm: syz.2.4744 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 421.904178][T19336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.904189][T19336] Call Trace: [ 421.904196][T19336] [ 421.904203][T19336] dump_stack_lvl+0x189/0x250 [ 421.904226][T19336] ? __pfx____ratelimit+0x10/0x10 [ 421.904249][T19336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.904265][T19336] ? __pfx__printk+0x10/0x10 [ 421.904286][T19336] ? fs_reclaim_acquire+0x7d/0x100 [ 421.904313][T19336] should_fail_ex+0x414/0x560 [ 421.904345][T19336] prepare_alloc_pages+0x213/0x610 [ 421.904372][T19336] __alloc_frozen_pages_noprof+0x123/0x370 [ 421.904396][T19336] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 421.904425][T19336] ? policy_nodemask+0x27c/0x720 [ 421.904447][T19336] ? __lock_acquire+0xab9/0xd20 [ 421.904475][T19336] alloc_pages_mpol+0x232/0x4a0 [ 421.904506][T19336] vma_alloc_folio_noprof+0xe4/0x200 [ 421.904530][T19336] ? page_table_check_set+0x18d/0x730 [ 421.904548][T19336] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 421.904585][T19336] folio_prealloc+0x30/0x180 [ 421.904612][T19336] __handle_mm_fault+0x2c88/0x5620 [ 421.904656][T19336] ? __pfx___handle_mm_fault+0x10/0x10 [ 421.904694][T19336] ? follow_page_pte+0x8d6/0x14b0 [ 421.904726][T19336] handle_mm_fault+0x40a/0x8e0 [ 421.904760][T19336] __get_user_pages+0x1af4/0x30b0 [ 421.904816][T19336] ? __pfx___get_user_pages+0x10/0x10 [ 421.904838][T19336] ? __gup_longterm_locked+0xbf7/0x15b0 [ 421.904860][T19336] ? down_read_killable+0x1d1/0x350 [ 421.904875][T19336] ? try_get_folio+0x633/0x660 [ 421.904901][T19336] __gup_longterm_locked+0xd66/0x15b0 [ 421.904929][T19336] ? try_grab_folio_fast+0x35b/0x4f0 [ 421.904967][T19336] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 421.904999][T19336] gup_fast_fallback+0x1cd4/0x2260 [ 421.905060][T19336] ? __pfx_gup_fast_fallback+0x10/0x10 [ 421.905084][T19336] ? rds_info_getsockopt+0x1db/0x470 [ 421.905109][T19336] ? rcu_is_watching+0x15/0xb0 [ 421.905132][T19336] ? is_valid_gup_args+0x11f/0x200 [ 421.905157][T19336] ? pin_user_pages_fast+0x4d/0xb0 [ 421.905182][T19336] rds_info_getsockopt+0x1fb/0x470 [ 421.905210][T19336] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 421.905235][T19336] ? __might_fault+0xb0/0x130 [ 421.905263][T19336] ? rds_getsockopt+0x31d/0x500 [ 421.905279][T19336] ? __pfx_rds_getsockopt+0x10/0x10 [ 421.905299][T19336] do_sock_getsockopt+0x36f/0x450 [ 421.905322][T19336] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 421.905339][T19336] ? do_syscall_64+0x20/0x3b0 [ 421.905361][T19336] ? __fget_files+0x3a0/0x420 [ 421.905377][T19336] ? __fget_files+0x2a/0x420 [ 421.905402][T19336] __x64_sys_getsockopt+0x1a5/0x250 [ 421.905419][T19336] ? do_syscall_64+0x20/0x3b0 [ 421.905443][T19336] ? do_syscall_64+0x20/0x3b0 [ 421.905471][T19336] do_syscall_64+0xfa/0x3b0 [ 421.905492][T19336] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.905514][T19336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.905532][T19336] ? clear_bhb_loop+0x60/0xb0 [ 421.905553][T19336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.905569][T19336] RIP: 0033:0x7f278078eb69 [ 421.905586][T19336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.905601][T19336] RSP: 002b:00007f278157b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 421.905621][T19336] RAX: ffffffffffffffda RBX: 00007f27809b5fa0 RCX: 00007f278078eb69 [ 421.905634][T19336] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 421.905646][T19336] RBP: 00007f278157b090 R08: 0000200000000280 R09: 0000000000000000 [ 421.905658][T19336] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 421.905669][T19336] R13: 0000000000000000 R14: 00007f27809b5fa0 R15: 00007fffa0a69198 [ 421.905700][T19336] [ 422.334885][T19319] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 422.368708][T19319] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 422.394798][T19319] gretap1: entered promiscuous mode [ 422.400818][T19319] gretap1: entered allmulticast mode [ 422.615547][T19360] tipc: Enabling of bearer rejected, failed to enable media [ 422.686359][T19364] FAULT_INJECTION: forcing a failure. [ 422.686359][T19364] name failslab, interval 1, probability 0, space 0, times 0 [ 422.700270][T19364] CPU: 0 UID: 0 PID: 19364 Comm: syz.1.4754 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 422.700298][T19364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.700309][T19364] Call Trace: [ 422.700317][T19364] [ 422.700324][T19364] dump_stack_lvl+0x189/0x250 [ 422.700345][T19364] ? __pfx____ratelimit+0x10/0x10 [ 422.700367][T19364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.700384][T19364] ? __pfx__printk+0x10/0x10 [ 422.700406][T19364] ? __lock_acquire+0xab9/0xd20 [ 422.700437][T19364] should_fail_ex+0x414/0x560 [ 422.700465][T19364] should_failslab+0xa8/0x100 [ 422.700481][T19364] kmem_cache_alloc_noprof+0x73/0x3c0 [ 422.700503][T19364] ? skb_clone+0x212/0x3a0 [ 422.700525][T19364] skb_clone+0x212/0x3a0 [ 422.700546][T19364] __netlink_deliver_tap+0x404/0x850 [ 422.700581][T19364] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.700604][T19364] netlink_deliver_tap+0x19c/0x1b0 [ 422.700628][T19364] netlink_unicast+0x7fa/0x9e0 [ 422.700658][T19364] ? __pfx_netlink_unicast+0x10/0x10 [ 422.700682][T19364] ? netlink_sendmsg+0x642/0xb30 [ 422.700702][T19364] ? skb_put+0x11b/0x210 [ 422.700722][T19364] netlink_sendmsg+0x805/0xb30 [ 422.700756][T19364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.700782][T19364] ? aa_sock_msg_perm+0x94/0x160 [ 422.700804][T19364] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.700823][T19364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.700859][T19364] __sock_sendmsg+0x21c/0x270 [ 422.700882][T19364] ____sys_sendmsg+0x505/0x830 [ 422.700907][T19364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.700935][T19364] ? import_iovec+0x74/0xa0 [ 422.700962][T19364] ___sys_sendmsg+0x21f/0x2a0 [ 422.700982][T19364] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.701035][T19364] ? __fget_files+0x2a/0x420 [ 422.701051][T19364] ? __fget_files+0x3a0/0x420 [ 422.701078][T19364] __x64_sys_sendmsg+0x19b/0x260 [ 422.701098][T19364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.701126][T19364] ? __pfx_ksys_write+0x10/0x10 [ 422.701146][T19364] ? rcu_is_watching+0x15/0xb0 [ 422.701173][T19364] ? do_syscall_64+0xbe/0x3b0 [ 422.701199][T19364] do_syscall_64+0xfa/0x3b0 [ 422.701221][T19364] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.701242][T19364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.701256][T19364] ? clear_bhb_loop+0x60/0xb0 [ 422.701274][T19364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.701288][T19364] RIP: 0033:0x7f45aed8eb69 [ 422.701304][T19364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.701319][T19364] RSP: 002b:00007f45acbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.701337][T19364] RAX: ffffffffffffffda RBX: 00007f45aefb5fa0 RCX: 00007f45aed8eb69 [ 422.701350][T19364] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 422.701361][T19364] RBP: 00007f45acbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.701372][T19364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.701382][T19364] R13: 0000000000000000 R14: 00007f45aefb5fa0 R15: 00007ffe085718a8 [ 422.701411][T19364] [ 423.077841][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 423.085940][ C1] lec:lec_tx_timeout: lec0 [ 423.091968][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 423.095083][T19372] syzkaller0: entered promiscuous mode [ 423.104184][T19372] syzkaller0: entered allmulticast mode [ 423.115886][ T50] Bluetooth: hci5: command tx timeout [ 423.408318][T19386] __nla_validate_parse: 6 callbacks suppressed [ 423.408337][T19386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4760'. [ 423.445932][T19386] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 423.476502][T19386] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 423.796509][T19404] syzkaller0: entered promiscuous mode [ 423.811521][T19404] syzkaller0: entered allmulticast mode [ 423.919990][T19416] tipc: Enabling of bearer rejected, failed to enable media [ 424.067420][T19425] syzkaller0: entered promiscuous mode [ 424.073032][T19425] syzkaller0: entered allmulticast mode [ 424.192631][T19430] FAULT_INJECTION: forcing a failure. [ 424.192631][T19430] name failslab, interval 1, probability 0, space 0, times 0 [ 424.206056][T19430] CPU: 1 UID: 0 PID: 19430 Comm: syz.1.4773 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 424.206082][T19430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 424.206092][T19430] Call Trace: [ 424.206100][T19430] [ 424.206108][T19430] dump_stack_lvl+0x189/0x250 [ 424.206132][T19430] ? __pfx____ratelimit+0x10/0x10 [ 424.206155][T19430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.206174][T19430] ? __pfx__printk+0x10/0x10 [ 424.206201][T19430] ? __pfx___might_resched+0x10/0x10 [ 424.206225][T19430] ? fs_reclaim_acquire+0x7d/0x100 [ 424.206249][T19430] should_fail_ex+0x414/0x560 [ 424.206280][T19430] should_failslab+0xa8/0x100 [ 424.206299][T19430] __kmalloc_cache_noprof+0x70/0x3d0 [ 424.206322][T19430] ? tcf_action_init_1+0x19f/0x6d0 [ 424.206347][T19430] tcf_action_init_1+0x19f/0x6d0 [ 424.206373][T19430] ? __pfx_tcf_action_init_1+0x10/0x10 [ 424.206393][T19430] ? _raw_read_unlock+0x28/0x50 [ 424.206413][T19430] ? tc_action_load_ops+0x214/0x4e0 [ 424.206448][T19430] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 424.206472][T19430] ? __nla_parse+0x40/0x60 [ 424.206494][T19430] tcf_action_init+0x2cf/0xab0 [ 424.206526][T19430] ? __pfx_tcf_action_init+0x10/0x10 [ 424.206574][T19430] ? __pfx___nla_validate_parse+0x10/0x10 [ 424.206633][T19430] tc_ctl_action+0x430/0xbd0 [ 424.206665][T19430] ? __pfx_tc_ctl_action+0x10/0x10 [ 424.206691][T19430] ? rcu_is_watching+0x15/0xb0 [ 424.206716][T19430] ? trace_contention_end+0x39/0x120 [ 424.206778][T19430] ? __pfx_tc_ctl_action+0x10/0x10 [ 424.206798][T19430] rtnetlink_rcv_msg+0x77c/0xb70 [ 424.206826][T19430] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 424.206848][T19430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.206870][T19430] ? ref_tracker_free+0x63a/0x7d0 [ 424.206888][T19430] ? __asan_memcpy+0x40/0x70 [ 424.206908][T19430] ? __pfx_ref_tracker_free+0x10/0x10 [ 424.206937][T19430] netlink_rcv_skb+0x208/0x470 [ 424.206964][T19430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.207003][T19430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.207039][T19430] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.207072][T19430] netlink_unicast+0x82c/0x9e0 [ 424.207105][T19430] ? __pfx_netlink_unicast+0x10/0x10 [ 424.207129][T19430] ? netlink_sendmsg+0x642/0xb30 [ 424.207150][T19430] ? skb_put+0x11b/0x210 [ 424.207170][T19430] netlink_sendmsg+0x805/0xb30 [ 424.207204][T19430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.207230][T19430] ? aa_sock_msg_perm+0x94/0x160 [ 424.207253][T19430] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.207272][T19430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.207297][T19430] __sock_sendmsg+0x21c/0x270 [ 424.207323][T19430] ____sys_sendmsg+0x505/0x830 [ 424.207348][T19430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.207376][T19430] ? import_iovec+0x74/0xa0 [ 424.207403][T19430] ___sys_sendmsg+0x21f/0x2a0 [ 424.207424][T19430] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.207482][T19430] ? __fget_files+0x2a/0x420 [ 424.207498][T19430] ? __fget_files+0x3a0/0x420 [ 424.207527][T19430] __x64_sys_sendmsg+0x19b/0x260 [ 424.207548][T19430] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.207577][T19430] ? __pfx_ksys_write+0x10/0x10 [ 424.207598][T19430] ? rcu_is_watching+0x15/0xb0 [ 424.207628][T19430] ? do_syscall_64+0xbe/0x3b0 [ 424.207657][T19430] do_syscall_64+0xfa/0x3b0 [ 424.207679][T19430] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.207701][T19430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.207718][T19430] ? clear_bhb_loop+0x60/0xb0 [ 424.207740][T19430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.207756][T19430] RIP: 0033:0x7f45aed8eb69 [ 424.207773][T19430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.207788][T19430] RSP: 002b:00007f45acbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.207809][T19430] RAX: ffffffffffffffda RBX: 00007f45aefb5fa0 RCX: 00007f45aed8eb69 [ 424.207820][T19430] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 424.207831][T19430] RBP: 00007f45acbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 424.207841][T19430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.207851][T19430] R13: 0000000000000000 R14: 00007f45aefb5fa0 R15: 00007ffe085718a8 [ 424.207880][T19430] [ 424.764184][T19440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.820075][T19445] team0: No ports can be present during mode change [ 424.901543][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4776'. [ 424.937901][T19452] tipc: Enabled bearer , priority 0 [ 424.945571][T19452] syzkaller0: entered promiscuous mode [ 424.951732][T19452] syzkaller0: entered allmulticast mode [ 424.961494][T19452] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4781'. [ 424.971186][T19451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4776'. [ 424.989355][T19451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4776'. [ 425.001866][T19452] tipc: Resetting bearer [ 425.012835][T19448] tipc: Resetting bearer [ 425.071867][T19448] tipc: Disabling bearer [ 425.108748][T19458] syzkaller0: entered promiscuous mode [ 425.132702][T19458] syzkaller0: entered allmulticast mode [ 425.163301][T19462] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4786'. [ 425.297195][T19469] team0: No ports can be present during mode change [ 425.318778][T19472] vlan0: entered promiscuous mode [ 425.331583][T19472] vlan0: entered allmulticast mode [ 425.347337][T19472] veth0_vlan: entered allmulticast mode [ 425.366888][T19472] team0: Port device vlan0 added [ 425.372212][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 425.436582][T19469] tipc: Enabled bearer , priority 0 [ 425.652788][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4790'. [ 425.799347][T19495] tipc: Enabled bearer , priority 0 [ 425.822356][T19495] syzkaller0: entered promiscuous mode [ 425.843148][T19495] syzkaller0: entered allmulticast mode [ 425.913269][T19501] netlink: 'syz.1.4797': attribute type 1 has an invalid length. [ 425.915060][T19495] tipc: Resetting bearer [ 425.933004][T19499] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 425.946925][T19493] tipc: Resetting bearer [ 426.014347][T19493] tipc: Disabling bearer [ 426.209514][T19508] syzkaller0: entered promiscuous mode [ 426.217977][T19508] syzkaller0: entered allmulticast mode [ 426.225839][T19512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4802'. [ 426.253048][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4803'. [ 426.438453][T12646] tipc: Node number set to 1701090385 [ 426.594910][T19538] netlink: 'syz.4.4810': attribute type 10 has an invalid length. [ 426.601031][T19541] netlink: 'syz.3.4807': attribute type 58 has an invalid length. [ 426.611355][T19541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4807'. [ 427.015914][T19557] syzkaller0: entered promiscuous mode [ 427.023086][T19557] syzkaller0: entered allmulticast mode [ 427.196007][T19566] syzkaller0: entered promiscuous mode [ 427.208617][T19566] syzkaller0: entered allmulticast mode [ 427.532463][T19585] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 427.601708][T19591] FAULT_INJECTION: forcing a failure. [ 427.601708][T19591] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.605151][T19592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.632127][T19591] CPU: 0 UID: 0 PID: 19591 Comm: syz.3.4825 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 427.632154][T19591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.632165][T19591] Call Trace: [ 427.632172][T19591] [ 427.632179][T19591] dump_stack_lvl+0x189/0x250 [ 427.632203][T19591] ? __pfx____ratelimit+0x10/0x10 [ 427.632226][T19591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.632244][T19591] ? __pfx__printk+0x10/0x10 [ 427.632267][T19591] ? fs_reclaim_acquire+0x7d/0x100 [ 427.632295][T19591] should_fail_ex+0x414/0x560 [ 427.632326][T19591] prepare_alloc_pages+0x213/0x610 [ 427.632352][T19591] __alloc_frozen_pages_noprof+0x123/0x370 [ 427.632373][T19591] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 427.632400][T19591] ? policy_nodemask+0x27c/0x720 [ 427.632422][T19591] ? __lock_acquire+0xab9/0xd20 [ 427.632449][T19591] alloc_pages_mpol+0x232/0x4a0 [ 427.632479][T19591] vma_alloc_folio_noprof+0xe4/0x200 [ 427.632503][T19591] ? page_table_check_set+0x18d/0x730 [ 427.632520][T19591] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 427.632557][T19591] folio_prealloc+0x30/0x180 [ 427.632584][T19591] __handle_mm_fault+0x2c88/0x5620 [ 427.632627][T19591] ? __pfx___handle_mm_fault+0x10/0x10 [ 427.632664][T19591] ? follow_page_pte+0x8d6/0x14b0 [ 427.632696][T19591] handle_mm_fault+0x40a/0x8e0 [ 427.632735][T19591] __get_user_pages+0x1af4/0x30b0 [ 427.632794][T19591] ? __pfx___get_user_pages+0x10/0x10 [ 427.632815][T19591] ? __gup_longterm_locked+0xbf7/0x15b0 [ 427.632836][T19591] ? down_read_killable+0x1d1/0x350 [ 427.632852][T19591] ? try_get_folio+0x633/0x660 [ 427.632878][T19591] __gup_longterm_locked+0xd66/0x15b0 [ 427.632906][T19591] ? try_grab_folio_fast+0x35b/0x4f0 [ 427.632933][T19591] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 427.632964][T19591] gup_fast_fallback+0x1cd4/0x2260 [ 427.633023][T19591] ? __pfx_gup_fast_fallback+0x10/0x10 [ 427.633053][T19591] ? rcu_is_watching+0x15/0xb0 [ 427.633076][T19591] ? is_valid_gup_args+0x11f/0x200 [ 427.633100][T19591] ? pin_user_pages_fast+0x4d/0xb0 [ 427.633128][T19591] rds_info_getsockopt+0x1fb/0x470 [ 427.633157][T19591] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 427.633182][T19591] ? __might_fault+0xb0/0x130 [ 427.633208][T19591] ? rds_getsockopt+0x31d/0x500 [ 427.633225][T19591] ? __pfx_rds_getsockopt+0x10/0x10 [ 427.633244][T19591] do_sock_getsockopt+0x36f/0x450 [ 427.633267][T19591] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 427.633283][T19591] ? do_syscall_64+0x20/0x3b0 [ 427.633306][T19591] ? __fget_files+0x3a0/0x420 [ 427.633322][T19591] ? __fget_files+0x2a/0x420 [ 427.633346][T19591] __x64_sys_getsockopt+0x1a5/0x250 [ 427.633363][T19591] ? do_syscall_64+0x20/0x3b0 [ 427.633387][T19591] ? do_syscall_64+0x20/0x3b0 [ 427.633413][T19591] do_syscall_64+0xfa/0x3b0 [ 427.633435][T19591] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.633456][T19591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.633473][T19591] ? clear_bhb_loop+0x60/0xb0 [ 427.633493][T19591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.633510][T19591] RIP: 0033:0x7f191a18eb69 [ 427.633527][T19591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.633541][T19591] RSP: 002b:00007f191b058038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 427.633562][T19591] RAX: ffffffffffffffda RBX: 00007f191a3b5fa0 RCX: 00007f191a18eb69 [ 427.633575][T19591] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 427.633586][T19591] RBP: 00007f191b058090 R08: 0000200000000280 R09: 0000000000000000 [ 427.633597][T19591] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 427.633608][T19591] R13: 0000000000000000 R14: 00007f191a3b5fa0 R15: 00007ffc5d5cc938 [ 427.633637][T19591] [ 428.107958][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 428.116003][ C1] lec:lec_tx_timeout: lec0 [ 428.121441][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 428.258114][T19616] syzkaller0: entered promiscuous mode [ 428.277847][T19616] syzkaller0: entered allmulticast mode [ 428.408316][T19626] netlink: 'syz.3.4835': attribute type 13 has an invalid length. [ 428.449058][T19628] __nla_validate_parse: 2 callbacks suppressed [ 428.449076][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4836'. [ 428.486685][T19628] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 428.498063][T19632] FAULT_INJECTION: forcing a failure. [ 428.498063][T19632] name failslab, interval 1, probability 0, space 0, times 0 [ 428.511167][T19632] CPU: 0 UID: 0 PID: 19632 Comm: syz.3.4838 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 428.511192][T19632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.511201][T19632] Call Trace: [ 428.511208][T19632] [ 428.511214][T19632] dump_stack_lvl+0x189/0x250 [ 428.511234][T19632] ? __pfx____ratelimit+0x10/0x10 [ 428.511254][T19632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.511269][T19632] ? __pfx__printk+0x10/0x10 [ 428.511283][T19632] ? __kasan_kmalloc+0x93/0xb0 [ 428.511310][T19632] ? __lock_acquire+0xab9/0xd20 [ 428.511332][T19632] should_fail_ex+0x414/0x560 [ 428.511358][T19632] should_failslab+0xa8/0x100 [ 428.511373][T19632] __kmalloc_noprof+0xcb/0x4f0 [ 428.511392][T19632] ? flow_action_cookie_create+0x26/0x90 [ 428.511417][T19632] flow_action_cookie_create+0x26/0x90 [ 428.511434][T19632] ? tc_setup_action+0x1b6/0xad0 [ 428.511455][T19632] tc_setup_action+0x32b/0xad0 [ 428.511489][T19632] ? __local_bh_enable_ip+0x12d/0x1c0 [ 428.511509][T19632] ? __pfx_tc_setup_action+0x10/0x10 [ 428.511538][T19632] tcf_action_offload_add_ex+0x580/0x870 [ 428.511561][T19632] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 428.511602][T19632] ? tcf_action_fill_size+0x1c/0x2e0 [ 428.511621][T19632] ? tcf_action_fill_size+0x1c/0x2e0 [ 428.511641][T19632] tcf_action_init+0x341/0xab0 [ 428.511673][T19632] ? __pfx_tcf_action_init+0x10/0x10 [ 428.511712][T19632] ? trace_sched_exit_tp+0x38/0x120 [ 428.511729][T19632] ? __pfx___nla_validate_parse+0x10/0x10 [ 428.511776][T19632] tc_ctl_action+0x430/0xbd0 [ 428.511801][T19632] ? __pfx_tc_ctl_action+0x10/0x10 [ 428.511821][T19632] ? rcu_is_watching+0x15/0xb0 [ 428.511881][T19632] ? __pfx_tc_ctl_action+0x10/0x10 [ 428.511897][T19632] rtnetlink_rcv_msg+0x77c/0xb70 [ 428.511916][T19632] ? __lock_acquire+0xab9/0xd20 [ 428.511936][T19632] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 428.511955][T19632] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 428.511989][T19632] netlink_rcv_skb+0x208/0x470 [ 428.512007][T19632] ? __lock_acquire+0xab9/0xd20 [ 428.512025][T19632] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 428.512046][T19632] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.512075][T19632] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.512102][T19632] netlink_unicast+0x82c/0x9e0 [ 428.512127][T19632] ? __pfx_netlink_unicast+0x10/0x10 [ 428.512149][T19632] ? netlink_sendmsg+0x642/0xb30 [ 428.512169][T19632] ? skb_put+0x11b/0x210 [ 428.512186][T19632] netlink_sendmsg+0x805/0xb30 [ 428.512213][T19632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.512236][T19632] ? aa_sock_msg_perm+0x94/0x160 [ 428.512256][T19632] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.512272][T19632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.512293][T19632] __sock_sendmsg+0x21c/0x270 [ 428.512314][T19632] ____sys_sendmsg+0x505/0x830 [ 428.512333][T19632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.512356][T19632] ? import_iovec+0x74/0xa0 [ 428.512378][T19632] ___sys_sendmsg+0x21f/0x2a0 [ 428.512395][T19632] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.512441][T19632] ? __fget_files+0x2a/0x420 [ 428.512454][T19632] ? __fget_files+0x3a0/0x420 [ 428.512476][T19632] __x64_sys_sendmsg+0x19b/0x260 [ 428.512493][T19632] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.512516][T19632] ? __pfx_ksys_write+0x10/0x10 [ 428.512534][T19632] ? rcu_is_watching+0x15/0xb0 [ 428.512558][T19632] ? do_syscall_64+0xbe/0x3b0 [ 428.512582][T19632] do_syscall_64+0xfa/0x3b0 [ 428.512601][T19632] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.512619][T19632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.512633][T19632] ? clear_bhb_loop+0x60/0xb0 [ 428.512650][T19632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.512668][T19632] RIP: 0033:0x7f191a18eb69 [ 428.512682][T19632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.512694][T19632] RSP: 002b:00007f191b058038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.512712][T19632] RAX: ffffffffffffffda RBX: 00007f191a3b5fa0 RCX: 00007f191a18eb69 [ 428.512722][T19632] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 428.512732][T19632] RBP: 00007f191b058090 R08: 0000000000000000 R09: 0000000000000000 [ 428.512740][T19632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.512749][T19632] R13: 0000000000000000 R14: 00007f191a3b5fa0 R15: 00007ffc5d5cc938 [ 428.512773][T19632] [ 429.096875][T19642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.155816][T19647] tipc: Enabling of bearer rejected, failed to enable media [ 429.309473][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4843'. [ 429.374797][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4843'. [ 429.657100][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 429.727617][T19673] syzkaller0: entered promiscuous mode [ 429.750077][T19673] syzkaller0: entered allmulticast mode [ 429.889916][T19684] syzkaller0: entered promiscuous mode [ 429.895434][T19684] syzkaller0: entered allmulticast mode [ 429.946054][T19685] tipc: Enabling of bearer rejected, failed to enable media [ 430.358193][T19721] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4860'. [ 430.368618][T19722] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 430.614156][T19736] netlink: 'syz.4.4863': attribute type 21 has an invalid length. [ 430.643663][T19738] FAULT_INJECTION: forcing a failure. [ 430.643663][T19738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.669070][T19738] CPU: 1 UID: 0 PID: 19738 Comm: syz.5.4866 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 430.669098][T19738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.669108][T19738] Call Trace: [ 430.669116][T19738] [ 430.669125][T19738] dump_stack_lvl+0x189/0x250 [ 430.669149][T19738] ? __pfx____ratelimit+0x10/0x10 [ 430.669187][T19738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.669206][T19738] ? __pfx__printk+0x10/0x10 [ 430.669230][T19738] ? fs_reclaim_acquire+0x7d/0x100 [ 430.669259][T19738] should_fail_ex+0x414/0x560 [ 430.669295][T19738] prepare_alloc_pages+0x213/0x610 [ 430.669322][T19738] __alloc_frozen_pages_noprof+0x123/0x370 [ 430.669347][T19738] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 430.669377][T19738] ? policy_nodemask+0x27c/0x720 [ 430.669399][T19738] ? __lock_acquire+0xab9/0xd20 [ 430.669429][T19738] alloc_pages_mpol+0x232/0x4a0 [ 430.669460][T19738] vma_alloc_folio_noprof+0xe4/0x200 [ 430.669485][T19738] ? page_table_check_set+0x18d/0x730 [ 430.669503][T19738] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 430.669542][T19738] folio_prealloc+0x30/0x180 [ 430.669583][T19738] __handle_mm_fault+0x2c88/0x5620 [ 430.669628][T19738] ? __pfx___handle_mm_fault+0x10/0x10 [ 430.669667][T19738] ? follow_page_pte+0x8d6/0x14b0 [ 430.669701][T19738] handle_mm_fault+0x40a/0x8e0 [ 430.669737][T19738] __get_user_pages+0x1af4/0x30b0 [ 430.669798][T19738] ? __pfx___get_user_pages+0x10/0x10 [ 430.669820][T19738] ? __gup_longterm_locked+0xbf7/0x15b0 [ 430.669842][T19738] ? down_read_killable+0x1d1/0x350 [ 430.669859][T19738] ? try_get_folio+0x633/0x660 [ 430.669885][T19738] __gup_longterm_locked+0xd66/0x15b0 [ 430.669930][T19738] ? try_grab_folio_fast+0x35b/0x4f0 [ 430.669959][T19738] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 430.669991][T19738] gup_fast_fallback+0x1cd4/0x2260 [ 430.670053][T19738] ? __pfx_gup_fast_fallback+0x10/0x10 [ 430.670078][T19738] ? rds_info_getsockopt+0x1db/0x470 [ 430.670104][T19738] ? rcu_is_watching+0x15/0xb0 [ 430.670127][T19738] ? is_valid_gup_args+0x11f/0x200 [ 430.670152][T19738] ? pin_user_pages_fast+0x4d/0xb0 [ 430.670177][T19738] rds_info_getsockopt+0x1fb/0x470 [ 430.670206][T19738] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 430.670231][T19738] ? __might_fault+0xb0/0x130 [ 430.670259][T19738] ? rds_getsockopt+0x31d/0x500 [ 430.670277][T19738] ? __pfx_rds_getsockopt+0x10/0x10 [ 430.670296][T19738] do_sock_getsockopt+0x36f/0x450 [ 430.670318][T19738] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 430.670335][T19738] ? do_syscall_64+0x20/0x3b0 [ 430.670358][T19738] ? __fget_files+0x3a0/0x420 [ 430.670374][T19738] ? __fget_files+0x2a/0x420 [ 430.670400][T19738] __x64_sys_getsockopt+0x1a5/0x250 [ 430.670418][T19738] ? do_syscall_64+0x20/0x3b0 [ 430.670443][T19738] ? do_syscall_64+0x20/0x3b0 [ 430.670471][T19738] do_syscall_64+0xfa/0x3b0 [ 430.670493][T19738] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.670516][T19738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.670555][T19738] ? clear_bhb_loop+0x60/0xb0 [ 430.670582][T19738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.670599][T19738] RIP: 0033:0x7fda47f8eb69 [ 430.670621][T19738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.670641][T19738] RSP: 002b:00007fda48ddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 430.670669][T19738] RAX: ffffffffffffffda RBX: 00007fda481b5fa0 RCX: 00007fda47f8eb69 [ 430.670687][T19738] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 430.670699][T19738] RBP: 00007fda48ddb090 R08: 0000200000000280 R09: 0000000000000000 [ 430.670711][T19738] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 430.670723][T19738] R13: 0000000000000000 R14: 00007fda481b5fa0 R15: 00007ffd5f1e2218 [ 430.670754][T19738] [ 430.706301][T19736] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4863'. [ 430.731207][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4867'. [ 431.094142][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4863'. [ 431.104062][T19736] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4863'. [ 431.227806][T19760] tipc: Enabling of bearer rejected, failed to enable media [ 431.358914][T19766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.464301][T19770] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4875'. [ 431.644678][T19781] pim6reg1: entered promiscuous mode [ 431.672159][T19781] pim6reg1: entered allmulticast mode [ 431.704911][T19787] syzkaller0: entered promiscuous mode [ 431.722195][T19787] syzkaller0: entered allmulticast mode [ 431.762730][T19782] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 431.882740][T19793] tipc: Enabled bearer , priority 0 [ 431.891738][T19793] syzkaller0: entered promiscuous mode [ 431.898202][T19793] syzkaller0: entered allmulticast mode [ 431.950612][T19793] tipc: Resetting bearer [ 432.004237][T19792] tipc: Resetting bearer [ 432.036461][T19792] tipc: Disabling bearer [ 432.064669][T19802] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 432.116332][T19798] team0: Unable to change to the same mode the team is in [ 432.184153][T19809] tipc: Enabling of bearer rejected, already enabled [ 432.651911][T19835] syzkaller0: entered promiscuous mode [ 432.671223][T19835] syzkaller0: entered allmulticast mode [ 432.804975][T19849] netlink: 'syz.4.4898': attribute type 32 has an invalid length. [ 432.861593][T19847] team0: No ports can be present during mode change [ 432.964728][T19856] netlink: 'syz.3.4901': attribute type 1 has an invalid length. [ 433.064738][T19858] syzkaller0: entered promiscuous mode [ 433.079405][T19858] syzkaller0: entered allmulticast mode [ 433.198501][T19867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.343343][T19876] FAULT_INJECTION: forcing a failure. [ 433.343343][T19876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 433.391958][T19876] CPU: 1 UID: 0 PID: 19876 Comm: syz.5.4908 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 433.391986][T19876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.391997][T19876] Call Trace: [ 433.392005][T19876] [ 433.392016][T19876] dump_stack_lvl+0x189/0x250 [ 433.392041][T19876] ? __pfx____ratelimit+0x10/0x10 [ 433.392074][T19876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.392092][T19876] ? __pfx__printk+0x10/0x10 [ 433.392116][T19876] ? fs_reclaim_acquire+0x7d/0x100 [ 433.392144][T19876] should_fail_ex+0x414/0x560 [ 433.392176][T19876] prepare_alloc_pages+0x213/0x610 [ 433.392203][T19876] __alloc_frozen_pages_noprof+0x123/0x370 [ 433.392228][T19876] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 433.392259][T19876] ? policy_nodemask+0x27c/0x720 [ 433.392281][T19876] ? __lock_acquire+0xab9/0xd20 [ 433.392309][T19876] alloc_pages_mpol+0x232/0x4a0 [ 433.392340][T19876] vma_alloc_folio_noprof+0xe4/0x200 [ 433.392364][T19876] ? page_table_check_set+0x18d/0x730 [ 433.392382][T19876] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 433.392421][T19876] folio_prealloc+0x30/0x180 [ 433.392448][T19876] __handle_mm_fault+0x2c88/0x5620 [ 433.392489][T19876] ? __pfx___handle_mm_fault+0x10/0x10 [ 433.392526][T19876] ? follow_page_pte+0x8d6/0x14b0 [ 433.392556][T19876] handle_mm_fault+0x40a/0x8e0 [ 433.392588][T19876] __get_user_pages+0x1af4/0x30b0 [ 433.392643][T19876] ? __pfx___get_user_pages+0x10/0x10 [ 433.392664][T19876] ? __gup_longterm_locked+0xbf7/0x15b0 [ 433.392685][T19876] ? down_read_killable+0x1d1/0x350 [ 433.392700][T19876] ? try_get_folio+0x633/0x660 [ 433.392726][T19876] __gup_longterm_locked+0xd66/0x15b0 [ 433.392763][T19876] ? try_grab_folio_fast+0x35b/0x4f0 [ 433.392791][T19876] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 433.392823][T19876] gup_fast_fallback+0x1cd4/0x2260 [ 433.392885][T19876] ? __pfx_gup_fast_fallback+0x10/0x10 [ 433.392909][T19876] ? rds_info_getsockopt+0x1db/0x470 [ 433.392931][T19876] ? rcu_is_watching+0x15/0xb0 [ 433.392954][T19876] ? is_valid_gup_args+0x11f/0x200 [ 433.392976][T19876] ? pin_user_pages_fast+0x4d/0xb0 [ 433.393000][T19876] rds_info_getsockopt+0x1fb/0x470 [ 433.393028][T19876] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 433.393144][T19876] ? __might_fault+0xb0/0x130 [ 433.393171][T19876] ? rds_getsockopt+0x31d/0x500 [ 433.393187][T19876] ? __pfx_rds_getsockopt+0x10/0x10 [ 433.393206][T19876] do_sock_getsockopt+0x36f/0x450 [ 433.393227][T19876] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 433.393244][T19876] ? do_syscall_64+0x20/0x3b0 [ 433.393266][T19876] ? __fget_files+0x3a0/0x420 [ 433.393283][T19876] ? __fget_files+0x2a/0x420 [ 433.393306][T19876] __x64_sys_getsockopt+0x1a5/0x250 [ 433.393323][T19876] ? do_syscall_64+0x20/0x3b0 [ 433.393347][T19876] ? do_syscall_64+0x20/0x3b0 [ 433.393374][T19876] do_syscall_64+0xfa/0x3b0 [ 433.393395][T19876] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.393418][T19876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.393435][T19876] ? clear_bhb_loop+0x60/0xb0 [ 433.393457][T19876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.393473][T19876] RIP: 0033:0x7fda47f8eb69 [ 433.393490][T19876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.393505][T19876] RSP: 002b:00007fda48ddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 433.393525][T19876] RAX: ffffffffffffffda RBX: 00007fda481b5fa0 RCX: 00007fda47f8eb69 [ 433.393537][T19876] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 433.393548][T19876] RBP: 00007fda48ddb090 R08: 0000200000000280 R09: 0000000000000000 [ 433.393559][T19876] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 433.393569][T19876] R13: 0000000000000000 R14: 00007fda481b5fa0 R15: 00007ffd5f1e2218 [ 433.393595][T19876] [ 433.829398][T19890] FAULT_INJECTION: forcing a failure. [ 433.829398][T19890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.843344][T19890] CPU: 1 UID: 0 PID: 19890 Comm: syz.3.4914 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 433.843371][T19890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.843381][T19890] Call Trace: [ 433.843389][T19890] [ 433.843397][T19890] dump_stack_lvl+0x189/0x250 [ 433.843420][T19890] ? __pfx____ratelimit+0x10/0x10 [ 433.843444][T19890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.843463][T19890] ? __pfx__printk+0x10/0x10 [ 433.843497][T19890] should_fail_ex+0x414/0x560 [ 433.843529][T19890] _copy_to_user+0x31/0xb0 [ 433.843553][T19890] simple_read_from_buffer+0xe1/0x170 [ 433.843582][T19890] proc_fail_nth_read+0x1b3/0x220 [ 433.843606][T19890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.843630][T19890] ? rw_verify_area+0x258/0x650 [ 433.843651][T19890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.843673][T19890] vfs_read+0x1fd/0x980 [ 433.843694][T19890] ? fdget_pos+0x247/0x320 [ 433.843716][T19890] ? __pfx___mutex_lock+0x10/0x10 [ 433.843740][T19890] ? __pfx_vfs_read+0x10/0x10 [ 433.843765][T19890] ? __fget_files+0x2a/0x420 [ 433.843787][T19890] ? __fget_files+0x3a0/0x420 [ 433.843802][T19890] ? __fget_files+0x2a/0x420 [ 433.843830][T19890] ksys_read+0x145/0x250 [ 433.843855][T19890] ? __pfx_ksys_read+0x10/0x10 [ 433.843875][T19890] ? rcu_is_watching+0x15/0xb0 [ 433.843904][T19890] ? do_syscall_64+0xbe/0x3b0 [ 433.843931][T19890] do_syscall_64+0xfa/0x3b0 [ 433.843953][T19890] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.843975][T19890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.843992][T19890] ? clear_bhb_loop+0x60/0xb0 [ 433.844019][T19890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.844035][T19890] RIP: 0033:0x7f191a18d57c [ 433.844052][T19890] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 433.844068][T19890] RSP: 002b:00007f191b058030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.844093][T19890] RAX: ffffffffffffffda RBX: 00007f191a3b5fa0 RCX: 00007f191a18d57c [ 433.844106][T19890] RDX: 000000000000000f RSI: 00007f191b0580a0 RDI: 0000000000000004 [ 433.844117][T19890] RBP: 00007f191b058090 R08: 0000000000000000 R09: 0000000000000000 [ 433.844129][T19890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 433.844139][T19890] R13: 0000000000000000 R14: 00007f191a3b5fa0 R15: 00007ffc5d5cc938 [ 433.844169][T19890] [ 434.123007][T19892] syzkaller0: entered promiscuous mode [ 434.137883][T19892] syzkaller0: entered allmulticast mode [ 434.283830][T19901] team0: Unable to change to the same mode the team is in [ 434.327307][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6200 ms [ 434.335423][ C1] lec:lec_tx_timeout: lec0 [ 434.341841][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 434.584937][T19920] __nla_validate_parse: 6 callbacks suppressed [ 434.584956][T19920] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4921'. [ 434.614640][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4923'. [ 434.622909][T19926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4925'. [ 434.642573][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4925'. [ 434.665448][T19931] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4921'. [ 434.703613][T19934] team0: Unable to change to the same mode the team is in [ 434.770044][T19937] tipc: Enabling of bearer rejected, already enabled [ 434.932621][T19942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4927'. [ 434.942771][T19944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4928'. [ 434.955034][T19942] netlink: 'syz.2.4927': attribute type 1 has an invalid length. [ 434.956143][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4928'. [ 434.964450][T19942] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4927'. [ 435.065340][T19950] tipc: Enabled bearer , priority 0 [ 435.085319][T19950] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 435.102930][T19950] tipc: Resetting bearer [ 435.131845][T19949] tipc: Disabling bearer [ 435.168592][T19955] team0: Unable to change to the same mode the team is in [ 435.281407][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4935'. [ 435.404317][T19969] tipc: Enabled bearer , priority 0 [ 435.429309][T19969] syzkaller0: entered promiscuous mode [ 435.437177][T19969] syzkaller0: entered allmulticast mode [ 435.478259][T19969] tipc: Resetting bearer [ 435.571294][T19968] tipc: Resetting bearer [ 435.594725][T19968] tipc: Disabling bearer [ 435.614004][T19983] tipc: Enabling of bearer rejected, failed to enable media [ 435.714848][T19986] tipc: Enabling of bearer rejected, failed to enable media [ 438.164932][ T1154] bond0 (unregistering): Released all slaves [ 438.267962][ T1154] bond1 (unregistering): Released all slaves [ 438.281073][ T1154] bond2 (unregistering): Released all slaves [ 438.391514][ T1154] bond3 (unregistering): Released all slaves [ 438.510153][ T1154] bond4 (unregistering): Released all slaves [ 438.524703][ T1154] bond5 (unregistering): Released all slaves [ 438.641753][ T1154] bond6 (unregistering): Released all slaves [ 438.773286][ T1154] tipc: Left network mode [ 440.086503][ T1154] IPVS: stop unused estimator thread 0... [ 440.092591][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 440.100874][ C1] lec:lec_tx_timeout: lec0 [ 440.106707][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 440.214592][ T1154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.334068][ T1154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.443164][ T1154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.531301][ T1154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.724215][ T1154] team0: left allmulticast mode [ 440.730285][ T1154] team_slave_0: left allmulticast mode [ 440.735778][ T1154] team_slave_1: left allmulticast mode [ 440.742561][ T1154] vlan0: left allmulticast mode [ 440.748691][ T1154] veth0_vlan: left allmulticast mode [ 440.754125][ T1154] team0: left promiscuous mode [ 440.760708][ T1154] team_slave_0: left promiscuous mode [ 440.766496][ T1154] team_slave_1: left promiscuous mode [ 440.775514][ T1154] bridge0: port 3(team0) entered disabled state [ 440.791183][ T1154] bridge_slave_1: left allmulticast mode [ 440.797065][ T1154] bridge_slave_1: left promiscuous mode [ 440.806303][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.823136][ T1154] bridge_slave_0: left allmulticast mode [ 440.829423][ T1154] bridge_slave_0: left promiscuous mode [ 440.835193][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.166255][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.179381][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.190240][ T1154] bond0 (unregistering): Released all slaves [ 441.255240][ T1154] tipc: Disabling bearer [ 441.269748][ T1154] tipc: Left network mode [ 441.711914][ T1154] hsr_slave_0: left promiscuous mode [ 441.721739][ T1154] hsr_slave_1: left promiscuous mode [ 441.731309][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.743609][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.752713][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.764499][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.800274][ T1154] veth1_macvtap: left promiscuous mode [ 441.806217][ T1154] veth0_macvtap: left promiscuous mode [ 441.812552][ T1154] veth1_vlan: left promiscuous mode [ 441.883044][ T1154] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 441.895038][ T1154] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 441.904582][ T1154] CPU: 1 UID: 0 PID: 1154 Comm: kworker/u8:6 Not tainted 6.16.0-syzkaller-06590-gf8fded7536a9 #0 PREEMPT(full) [ 441.916377][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.926433][ T1154] Workqueue: netns cleanup_net [ 441.931218][ T1154] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 441.936968][ T1154] Code: 99 e8 c4 f7 c6 05 23 96 8f 05 01 48 c7 c7 a0 f7 9b 8c be 97 05 00 00 48 c7 c2 20 f8 9b 8c e8 ea d2 a2 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 54 0b 28 f8 4d 8b 2c 24 4d 39 f5 [ 441.956567][ T1154] RSP: 0018:ffffc900041ef3d8 EFLAGS: 00010206 [ 441.963061][ T1154] RAX: ffffffff89fac7de RBX: 000000001fffe1ac RCX: ffff888027171e00 [ 441.971023][ T1154] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 441.979085][ T1154] RBP: ffff888058c40820 R08: ffffffff8f508fa7 R09: 1ffffffff1ea11f4 [ 441.987138][ T1154] R10: dffffc0000000000 R11: fffffbfff1ea11f5 R12: 00000000ffff0d60 [ 441.995276][ T1154] R13: dffffc0000000000 R14: ffff888028ba3a00 R15: 1ffff1100b188104 [ 442.003276][ T1154] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 442.012192][ T1154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.018764][ T1154] CR2: 00007f76e11b5e9c CR3: 000000000df38000 CR4: 00000000003526f0 [ 442.026730][ T1154] Call Trace: [ 442.029999][ T1154] [ 442.032925][ T1154] inetdev_event+0x2a7/0x15b0 [ 442.037637][ T1154] ? __pfx_inetdev_event+0x10/0x10 [ 442.042853][ T1154] notifier_call_chain+0x1b3/0x3e0 [ 442.047954][ T1154] netif_close_many+0x29c/0x410 [ 442.052851][ T1154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 442.058834][ T1154] ? __pfx_netif_close_many+0x10/0x10 [ 442.064374][ T1154] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 442.069918][ T1154] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 442.076257][ T1154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 442.081684][ T1154] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 442.087525][ T1154] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 442.094455][ T1154] ? unregister_netdevice_queue+0x1b3/0x380 [ 442.100496][ T1154] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 442.106732][ T1154] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 442.112906][ T1154] default_device_exit_batch+0x819/0x890 [ 442.118541][ T1154] ? __pfx___might_resched+0x10/0x10 [ 442.124027][ T1154] ? __pfx_default_device_exit_batch+0x10/0x10 [ 442.130460][ T1154] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 442.135929][ T1154] ? net_generic+0x1e/0x240 [ 442.140528][ T1154] ? __pfx_default_device_exit_batch+0x10/0x10 [ 442.146784][ T1154] ops_undo_list+0x525/0x990 [ 442.151375][ T1154] ? __pfx_ops_undo_list+0x10/0x10 [ 442.156546][ T1154] ? do_raw_spin_unlock+0x122/0x240 [ 442.161826][ T1154] cleanup_net+0x4c5/0x800 [ 442.166257][ T1154] ? __pfx_cleanup_net+0x10/0x10 [ 442.171195][ T1154] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.176605][ T1154] ? process_scheduled_works+0x9ef/0x17b0 [ 442.182436][ T1154] ? process_scheduled_works+0x9ef/0x17b0 [ 442.188156][ T1154] process_scheduled_works+0xae1/0x17b0 [ 442.193707][ T1154] ? __pfx_process_scheduled_works+0x10/0x10 [ 442.199774][ T1154] worker_thread+0x8a0/0xda0 [ 442.204370][ T1154] kthread+0x70e/0x8a0 [ 442.208479][ T1154] ? __pfx_worker_thread+0x10/0x10 [ 442.213599][ T1154] ? __pfx_kthread+0x10/0x10 [ 442.218182][ T1154] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.223898][ T1154] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.229091][ T1154] ? __pfx_kthread+0x10/0x10 [ 442.233706][ T1154] ret_from_fork+0x3fc/0x770 [ 442.238642][ T1154] ? __pfx_ret_from_fork+0x10/0x10 [ 442.243837][ T1154] ? __switch_to_asm+0x39/0x70 [ 442.248594][ T1154] ? __switch_to_asm+0x33/0x70 [ 442.253521][ T1154] ? __pfx_kthread+0x10/0x10 [ 442.258201][ T1154] ret_from_fork_asm+0x1a/0x30 [ 442.262975][ T1154] [ 442.266018][ T1154] Modules linked in: [ 442.270737][ T1154] ---[ end trace 0000000000000000 ]--- [ 442.276586][ T1154] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 442.282478][ T1154] Code: 99 e8 c4 f7 c6 05 23 96 8f 05 01 48 c7 c7 a0 f7 9b 8c be 97 05 00 00 48 c7 c2 20 f8 9b 8c e8 ea d2 a2 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 54 0b 28 f8 4d 8b 2c 24 4d 39 f5 [ 442.302606][ T1154] RSP: 0018:ffffc900041ef3d8 EFLAGS: 00010206 [ 442.308726][ T1154] RAX: ffffffff89fac7de RBX: 000000001fffe1ac RCX: ffff888027171e00 [ 442.316730][ T1154] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 442.324769][ T1154] RBP: ffff888058c40820 R08: ffffffff8f508fa7 R09: 1ffffffff1ea11f4 [ 442.332808][ T1154] R10: dffffc0000000000 R11: fffffbfff1ea11f5 R12: 00000000ffff0d60 [ 442.340850][ T1154] R13: dffffc0000000000 R14: ffff888028ba3a00 R15: 1ffff1100b188104 [ 442.348876][ T1154] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 442.358029][ T1154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.364726][ T1154] CR2: 0000563c8c8ef138 CR3: 000000000df38000 CR4: 00000000003526f0 [ 442.372927][ T1154] Kernel panic - not syncing: Fatal exception [ 442.379346][ T1154] Kernel Offset: disabled [ 442.383866][ T1154] Rebooting in 86400 seconds..