last executing test programs: 8.551693032s ago: executing program 1 (id=675): syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x8, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) (async) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x8, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2d4}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40010}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2679}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, 'ib\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc090) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2679}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, 'ib\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc090) socket$netlink(0x10, 0x3, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00'}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r4) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xa1a}]}, 0x28}, 0x1, 0x0, 0x0, 0x44841}, 0x40001) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000005c0)={r4, 0xffffffffffffffff, 0x200, 0x8cb}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e21, @remote}, 0x4, 0x1, 0x0, 0x1}}, 0x26) (async) connect$pppl2tp(r7, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e21, @remote}, 0x4, 0x1, 0x0, 0x1}}, 0x26) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@local, @in=@empty, 0x4e23, 0x81, 0x4e22, 0x4, 0xa, 0x20, 0x20, 0x21, r9, r10}, {0x5, 0x8001, 0x4, 0x6, 0x1e9, 0x1, 0x8184, 0x4}, {0x8, 0x4, 0x4, 0x8}, 0x5ba3c0d2, 0x6e6bba, 0x2, 0x1, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x4d3, 0x6c}, 0xa, @in=@remote, 0x3504, 0x0, 0x3, 0x6, 0x9, 0xffffff01, 0xfff}}, 0xe8) sendto$inet6(r7, &(0x7f00000008c0)="168369095a0526167ca3f762b69f59639c3e6b28b5b5e95ef53e42c76eca4209268605548145db266e9cecebe4757f83f0af27497394e3bc", 0x38, 0x0, &(0x7f0000000900)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000940)={0x3a, @loopback, 0x4e23, 0x1, 'ovf\x00', 0x16, 0x200000, 0x6d}, 0x2c) socket$netlink(0x10, 0x3, 0x4) connect$inet6(r7, &(0x7f0000000980)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000980)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) close(r5) (async) close(r5) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r11, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r6, 0x120, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8800) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r11, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r6, 0x120, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8800) r12 = accept$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x2, 0x0, @multicast1}, &(0x7f0000000b00)=0x10) recvfrom$inet(r12, &(0x7f0000000b40)=""/128, 0x80, 0x20, &(0x7f0000000bc0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) write$cgroup_type(r7, &(0x7f0000000c00), 0x9) 8.224475053s ago: executing program 1 (id=680): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0xac}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d", 0xa0}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 7.980085434s ago: executing program 1 (id=686): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x90ff}]}, 0x10) 7.828215676s ago: executing program 1 (id=690): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x0, 0x40000000, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.596909499s ago: executing program 1 (id=695): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b000000000000000000000000000000000000000000000000000000000004", 0x3e1c, 0x0, 0x0, 0x100}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000240)=0xb, 0x4) 7.223848551s ago: executing program 1 (id=703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) unshare(0x22020600) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x80000006, 0x8, 0xb, 0x20000}]}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004000000000000000000bd5b7e165576ccf3000018200000", @ANYRES32=r3, @ANYBLOB="0000000002000000c3000200000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x802, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xaa, "b0ab7c815b4446d8c8daf085511c6ed7ede158164d7cd76751c957573819b76ed18d153eb5e2c259724e929c99b390a14fbc5e60ec2e06d4be635a6075e85c69c0a416b231a2b2c6608e0c5263953589d9f36cbbea3cd2d94968944d8a56d657531c7b00b123fa9c8808fe93645e450b2a43802cf6ba1bf103212adf7e76489534affadf921da0812053bb4616bf0d485382b38d6944f77fade96f1818842edb572c0904061599d279c5"}, &(0x7f0000000100)=0xb2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r6, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) recvmsg$qrtr(r1, &(0x7f00000008c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000800)=[{&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000400)=""/64, 0x40}, {&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/62, 0x3e}, {&(0x7f00000007c0)=""/55, 0x37}], 0x9, 0x0, 0x0, 0x2020}, 0x38, 0x40000120) 2.466594387s ago: executing program 0 (id=738): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x200000000000000}, 0x0) 2.29124325s ago: executing program 0 (id=742): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000014002101000000000100000002009100", @ANYRES32=r6, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 2.196483548s ago: executing program 4 (id=743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x301, 0xf5, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 2.142412666s ago: executing program 4 (id=745): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x7a, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e008000000008"], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 1.864469339s ago: executing program 4 (id=746): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0xac}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd", 0xa4}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.807296602s ago: executing program 4 (id=748): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf7fb0bb8fd18ca9b000000000000ac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d1d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b491", 0xd6}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3c", 0x75}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f", 0xa0}], 0x3}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) 1.735954987s ago: executing program 3 (id=749): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x24020400) r5 = epoll_create1(0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0xb0000003}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a20000000000a0101000000000000000005000000000040000000030a01030000000000000000050000000900010073797a30000000001c00030073797a30000000001400048008000240000000120800014000000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) unshare(0x62040200) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x6, 0x8af, 0x2}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9ffffc}) write$cgroup_subtree(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="2d63707561636f7adb376d696374202b63707561636374202d6e6574202d726c6920fecc2bfe9ff65b2d6d656d6f7279202d6e6574202d63c7b4a72b110e5347da628797f3f9c25966f43a34d7795aa52347c581bbf6290348ab37e5ed553eef20def3ea57a6f9c04dc4af0415c31c800caa31153ef639345e902d1aa1101a24dbfc94921b2fd3a5414d70e1c1a54e04ace63905ac02a2c9622e4e78a63887e52c0db0703022aca7f48b72c43a8b1216f900727d9491be6c1dce1fb2f7d0eb6ded567f31575229d9fc0030623e1bb43c88cbd577549c4dcda476388a694966eb88638c423a78da1169982618a5b41dc8090a00"], 0x34) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r8, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x47c4d615f2388bd) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x0, &(0x7f0000000180)=0x7ff57fc4, 0x4) 1.636759909s ago: executing program 0 (id=750): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xfff0}, 0x0) 1.582237111s ago: executing program 0 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0xfffffffffffffff0, 0x0, 0x8010}, 0x40) 1.488688915s ago: executing program 0 (id=752): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) unshare(0x400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001400000004000000", @ANYRES32=r1, @ANYBLOB="5003010230c11f84396b69ff1cbbf94230f90be7a0b94f89c81d0645889622e96278f4715a3c3e038fa65cabd00eff1d4678b7d17e7b04082995cdadb73a931cff13f3f6d7969746e94dfd58023d90cfafd81c14d11c69b9167281114fed9c", @ANYRES64=0x0], 0x20) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030006000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 1.368650587s ago: executing program 3 (id=753): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 1.32561359s ago: executing program 3 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x20000000, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x8, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 1.189201522s ago: executing program 3 (id=755): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001040), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0x4000, r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0xf, 0x7fffffff, 0x9, 0x10}}]}, 0x40}}, 0x0) socket$kcm(0x10, 0x2, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000180)="7f03d23e68576f85", &(0x7f00000002c0)=@tcp=r7, 0x2}, 0x20) close(0x3) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 826.825268ms ago: executing program 3 (id=756): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x80fe}}], 0x400000000000172, 0x4001c00) 824.993823ms ago: executing program 2 (id=757): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x6, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, 0x0, 0x0, 0x20000041) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r4 = socket(0x840000000002, 0x3, 0xfa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @empty}}, [0x0, 0x7ffffffffffffd, 0x72219, 0x0, 0x400000000000, 0x2, 0x5, 0x4c8, 0x0, 0x0, 0x10, 0x4, 0x0, 0xfffffffffffffffe, 0x9]}, &(0x7f0000000000)=0x100) r5 = accept$netrom(r4, &(0x7f0000000800)={{0x3, @rose}, [@netrom, @remote, @bcast, @netrom, @bcast, @null, @null, @netrom]}, &(0x7f0000000880)=0x48) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000001700)={{r2}, "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"}) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001, {[@ra={0x94, 0x4}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0xe000, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 824.583407ms ago: executing program 4 (id=758): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0xac}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd", 0xa4}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 695.724932ms ago: executing program 3 (id=759): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x24004800) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r2 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000003c0)={0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf34) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 695.228999ms ago: executing program 2 (id=760): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000014002101000000000100000002009100", @ANYRES32=r6, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 599.790058ms ago: executing program 4 (id=761): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x1020000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 447.652259ms ago: executing program 2 (id=762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0xfffffc00, 0xc080}, 0xe821651e0a1b45fc) 229.893437ms ago: executing program 2 (id=763): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000200000000000000022000009500000000000000d2c5896ff2b99d91c7c7bb49393106bbf1deb8537c1d4671befd"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x4c42ba4fc2, 0x0) shutdown(r0, 0x0) 168.362179ms ago: executing program 0 (id=764): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073133e000000000085100000eb9d25a3b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000b48000000060a0b040000000000000000020000001c0004801800018008000100647570000c00028008000140000000ff0916010073797a30000000000900020073797a32"], 0x70}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000081) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f00000000c0)={@local, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd14020000000000000022", 0x3, 0x1, 0x85}, 0x3c) bind$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) 98.812634ms ago: executing program 2 (id=765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x400000000000000}, 0x0) 0s ago: executing program 2 (id=766): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x400) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000280)=""/73, 0x49}], 0x4, &(0x7f0000000340)=""/132, 0x84}, 0x9}], 0x1, 0x2040, &(0x7f0000000440)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2204000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1cc, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xcc7c}, {0xc, 0x90, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x7af4}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x7fff}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x7fffffff}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) (async, rerun: 32) recvmsg(r1, &(0x7f0000000a40)={&(0x7f0000000780)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)=""/23, 0x17}, {&(0x7f0000000840)=""/196, 0xc4}], 0x2, &(0x7f0000000980)=""/179, 0xb3}, 0x40) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5005}, 0x20000081) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x224600, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000c40)={0x4, &(0x7f0000000c00)=[{0xfff, 0xfc, 0x6, 0x10000}, {0x9, 0x9, 0x7f, 0xff}, {0x800, 0x7, 0x4, 0x2}, {0x1, 0x3, 0x6, 0x4}]}) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000c80)={'team_slave_1\x00', @local}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000cc0)) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000d40), 0x8) bind$bt_sco(r6, &(0x7f0000000d80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e00)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)=@ipv6_getaddr={0x28, 0x16, 0x20e, 0x70bd28, 0x25dfdbfe, {0xa, 0x80, 0xa0, 0xff, r7}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_FLAGS={0x8, 0x8, 0x481}]}, 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000f00)={0xa, 0x4e24, 0x1, @local, 0x2}, 0x1c) sendmsg$nl_crypto(r6, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)=@alg={0xf0, 0x10, 0x8, 0x70bd27, 0x25dfdbfd, {{'blake2s-256\x00'}, '\x00', '\x00', 0x400, 0x2400}, [{0x8, 0x1, 0x7}, {0x8, 0x1, 0x9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x4001) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x40, 0x1404, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044101}, 0x20040040) (async, rerun: 64) bind$alg(r6, &(0x7f0000001200)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async, rerun: 64) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r9, &(0x7f0000001280)={0x1, @write_local_name={{0xc13, 0xf8}, {"ac531bccd726588e5843d60fb11a005535c25b825ec900bd1a8001efe0c324ec24dac85d836ae174ac8c17d2010ffcddbe85a726c1ed492e11552e83114a362bca42ddedd7af22fbd0290391db73bbf1f688f2bce8e85369c764a0d9924aadc9f89c2d1bbe7de4634bc046e7de3e6d09b16e124648f87ce973a92617e440619adfeecfb84eedd8cece081cb5aed51bfde75cdfd0dd6d6f1504dc945a37e850baf9b485ce27e0a0933b79f2b9fc06ea06b871e924565d4d1803d7439055773cab14c7854016604d0525a5a011c038664b11bc82a82965f4c36de2fc71c51f322637b5608c10547bf8d98d05b1d2294977ececf92020e525e0"}}}, 0xfc) (async, rerun: 32) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000001380)=0x1, 0x4) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4884) (async) unshare(0x20000000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0xa1, 0x80000000, 0x4, 0x1010, r6, 0x8, '\x00', r7, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002640)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb1, 0xb1, 0x5, [@const={0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4}]}, @datasec={0xb, 0x6, 0x0, 0xf, 0x1, [{0x5, 0x4, 0x14000000}, {0x1, 0x1, 0x4}, {0x5, 0x200, 0xbb}, {0x4, 0x3, 0xff}, {0x4, 0x10, 0x10000}, {0x4, 0xfffffffe, 0xa}], "f4"}, @enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x1}, {0x9, 0x2}, {0x7, 0x7}]}, @const={0xf, 0x0, 0x0, 0xa, 0x1}, @func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f, 0x71]}}, &(0x7f0000001640)=""/4096, 0xd1, 0x1000, 0x1, 0x6, 0x10000, @value=r10}, 0x28) kernel console output (not intermixed with test programs): Port device team_slave_1 added [ 90.899904][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.907583][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.934130][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.945992][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.956137][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.982446][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.013749][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.020727][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.046843][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.058612][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.069619][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.095960][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.319245][ T5841] hsr_slave_0: entered promiscuous mode [ 91.352186][ T5841] hsr_slave_1: entered promiscuous mode [ 91.358707][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.367878][ T5841] Cannot create hsr debugfs directory [ 91.427135][ T5833] hsr_slave_0: entered promiscuous mode [ 91.434171][ T5833] hsr_slave_1: entered promiscuous mode [ 91.440442][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.448205][ T5833] Cannot create hsr debugfs directory [ 91.716527][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.744334][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.778025][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.822710][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.868825][ T977] cfg80211: failed to load regulatory.db [ 91.918247][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.934566][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.955692][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.989447][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.046164][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.081116][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.106066][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.142285][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.183650][ T51] Bluetooth: hci1: command tx timeout [ 92.189316][ T5839] Bluetooth: hci4: command tx timeout [ 92.232868][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.262143][ T51] Bluetooth: hci3: command tx timeout [ 92.267660][ T5839] Bluetooth: hci0: command tx timeout [ 92.271031][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.291570][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.312571][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.342165][ T5839] Bluetooth: hci2: command tx timeout [ 92.351613][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.437247][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.456648][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.487052][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.498624][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.510389][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.564014][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.571242][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.607206][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.628416][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.635598][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.691003][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.783230][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.790399][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.808421][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.815647][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.830476][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.850626][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.936886][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.946488][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.969468][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.996453][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.003735][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.057054][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.064263][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.087015][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.094272][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.120855][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.128064][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.168389][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.334272][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.431689][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.445483][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.452720][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.499186][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.506409][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.658306][ T5834] veth0_vlan: entered promiscuous mode [ 93.741513][ T5834] veth1_vlan: entered promiscuous mode [ 93.886113][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.927156][ T5834] veth0_macvtap: entered promiscuous mode [ 93.975849][ T5834] veth1_macvtap: entered promiscuous mode [ 94.053498][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.080435][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.130209][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.204677][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.217097][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.252858][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.263770][ T5839] Bluetooth: hci4: command tx timeout [ 94.270253][ T51] Bluetooth: hci1: command tx timeout [ 94.303070][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.313419][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.339741][ T5836] veth0_vlan: entered promiscuous mode [ 94.346688][ T51] Bluetooth: hci0: command tx timeout [ 94.352313][ T5839] Bluetooth: hci3: command tx timeout [ 94.423146][ T51] Bluetooth: hci2: command tx timeout [ 94.450639][ T5836] veth1_vlan: entered promiscuous mode [ 94.496034][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.554439][ T5841] veth0_vlan: entered promiscuous mode [ 94.568564][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.569715][ T5841] veth1_vlan: entered promiscuous mode [ 94.585662][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.678182][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.690011][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.698173][ T5836] veth0_macvtap: entered promiscuous mode [ 94.737169][ T5836] veth1_macvtap: entered promiscuous mode [ 94.749128][ T5841] veth0_macvtap: entered promiscuous mode [ 94.799806][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.831559][ T5841] veth1_macvtap: entered promiscuous mode [ 94.850028][ T5833] veth0_vlan: entered promiscuous mode [ 94.857961][ T5835] veth0_vlan: entered promiscuous mode [ 94.879660][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.950535][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.962143][ T5833] veth1_vlan: entered promiscuous mode [ 94.984115][ T5835] veth1_vlan: entered promiscuous mode [ 95.083643][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.097218][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.119755][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.134884][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.160017][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.188341][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.217626][ T1090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.238740][ T5833] veth0_macvtap: entered promiscuous mode [ 95.265875][ T1090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.275873][ T1090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.286601][ T1090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.313871][ T5833] veth1_macvtap: entered promiscuous mode [ 95.374609][ T5835] veth0_macvtap: entered promiscuous mode [ 95.400014][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.440502][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.456084][ T5835] veth1_macvtap: entered promiscuous mode [ 95.566194][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.569591][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.583264][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.600791][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.610938][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.644145][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8'. [ 95.644758][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.691655][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.706777][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.729119][ T5967] Zero length message leads to an empty skb [ 95.757021][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.763198][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.772241][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.810138][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.861035][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.879855][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.917124][ T1146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.954510][ T1146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.034227][ T1146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.061916][ T5971] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9'. [ 96.074623][ T1146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.120253][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.144087][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.318566][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.343502][ T51] Bluetooth: hci1: command tx timeout [ 96.349519][ T5839] Bluetooth: hci4: command tx timeout [ 96.379001][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.398310][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.425686][ T5839] Bluetooth: hci0: command tx timeout [ 96.431486][ T51] Bluetooth: hci3: command tx timeout [ 96.502590][ T5839] Bluetooth: hci2: command tx timeout [ 96.578024][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.631854][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.691596][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.701667][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.913769][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15'. [ 97.084693][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 97.161134][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 97.347500][ T6006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18'. [ 97.537692][ T6012] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 98.071578][ T6030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27'. [ 98.427284][ T6042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.32'. [ 98.478236][ T6044] FAULT_INJECTION: forcing a failure. [ 98.478236][ T6044] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.500872][ T6044] CPU: 0 UID: 0 PID: 6044 Comm: syz.0.34 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 98.500901][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.500921][ T6044] Call Trace: [ 98.500930][ T6044] [ 98.500938][ T6044] dump_stack_lvl+0x189/0x250 [ 98.500984][ T6044] ? __pfx____ratelimit+0x10/0x10 [ 98.501016][ T6044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.501048][ T6044] ? __pfx__printk+0x10/0x10 [ 98.501070][ T6044] ? __might_fault+0xb0/0x130 [ 98.501101][ T6044] should_fail_ex+0x414/0x560 [ 98.501133][ T6044] _copy_from_user+0x2d/0xb0 [ 98.501154][ T6044] ___sys_sendmsg+0x158/0x2a0 [ 98.501186][ T6044] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.501253][ T6044] ? __fget_files+0x2a/0x420 [ 98.501275][ T6044] ? __fget_files+0x3a0/0x420 [ 98.501308][ T6044] __x64_sys_sendmsg+0x19b/0x260 [ 98.501339][ T6044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.501389][ T6044] ? __pfx_ksys_write+0x10/0x10 [ 98.501406][ T6044] ? rcu_is_watching+0x15/0xb0 [ 98.501443][ T6044] ? do_syscall_64+0xbe/0x3b0 [ 98.501467][ T6044] do_syscall_64+0xfa/0x3b0 [ 98.501485][ T6044] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.501515][ T6044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.501535][ T6044] ? clear_bhb_loop+0x60/0xb0 [ 98.501560][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.501579][ T6044] RIP: 0033:0x7fb826f8e929 [ 98.501601][ T6044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.501618][ T6044] RSP: 002b:00007fb827e3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.501639][ T6044] RAX: ffffffffffffffda RBX: 00007fb8271b5fa0 RCX: 00007fb826f8e929 [ 98.501654][ T6044] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 98.501667][ T6044] RBP: 00007fb827e3a090 R08: 0000000000000000 R09: 0000000000000000 [ 98.501679][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.501690][ T6044] R13: 0000000000000000 R14: 00007fb8271b5fa0 R15: 00007ffcb6298e08 [ 98.501728][ T6044] [ 99.026317][ T6054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 99.099274][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 99.246114][ T6065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.345496][ T6071] syz.0.41 uses obsolete (PF_INET,SOCK_PACKET) [ 99.408548][ T6076] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.679635][ T6065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.764742][ T6071] syzkaller1: entered promiscuous mode [ 99.777983][ T6071] syzkaller1: entered allmulticast mode [ 99.925001][ T6065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.309043][ T6065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.596777][ T6110] FAULT_INJECTION: forcing a failure. [ 100.596777][ T6110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.645182][ T6110] CPU: 1 UID: 0 PID: 6110 Comm: syz.4.56 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 100.645213][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.645226][ T6110] Call Trace: [ 100.645234][ T6110] [ 100.645243][ T6110] dump_stack_lvl+0x189/0x250 [ 100.645283][ T6110] ? __pfx____ratelimit+0x10/0x10 [ 100.645317][ T6110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.645351][ T6110] ? __pfx__printk+0x10/0x10 [ 100.645375][ T6110] ? __might_fault+0xb0/0x130 [ 100.645408][ T6110] should_fail_ex+0x414/0x560 [ 100.645442][ T6110] _copy_from_user+0x2d/0xb0 [ 100.645464][ T6110] do_sock_getsockopt+0x1cd/0x650 [ 100.645498][ T6110] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 100.645528][ T6110] ? __fget_files+0x3a0/0x420 [ 100.645558][ T6110] ? __fget_files+0x2a/0x420 [ 100.645590][ T6110] __x64_sys_getsockopt+0x1a5/0x250 [ 100.645635][ T6110] do_syscall_64+0xfa/0x3b0 [ 100.645654][ T6110] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.645687][ T6110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.645708][ T6110] ? clear_bhb_loop+0x60/0xb0 [ 100.645734][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.645759][ T6110] RIP: 0033:0x7f31b398e929 [ 100.645777][ T6110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.645794][ T6110] RSP: 002b:00007f31b17f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 100.645815][ T6110] RAX: ffffffffffffffda RBX: 00007f31b3bb5fa0 RCX: 00007f31b398e929 [ 100.645830][ T6110] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 100.645842][ T6110] RBP: 00007f31b17f6090 R08: 0000200000000080 R09: 0000000000000000 [ 100.645855][ T6110] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 100.645867][ T6110] R13: 0000000000000000 R14: 00007f31b3bb5fa0 R15: 00007ffcd2859188 [ 100.645900][ T6110] [ 100.997208][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.043094][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.052030][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.060626][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.278890][ T6122] __nla_validate_parse: 4 callbacks suppressed [ 101.278910][ T6122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.62'. [ 101.307632][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 101.678541][ T6136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.68'. [ 102.226421][ T6155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 102.254293][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 102.424845][ T6161] syz_tun: entered allmulticast mode [ 102.455942][ T6161] syz_tun: left allmulticast mode [ 102.610219][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.80'. [ 103.033193][ T6182] can: request_module (can-proto-0) failed. [ 103.074164][ T6190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.87'. [ 103.109368][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 103.338225][ T6198] syz_tun: entered allmulticast mode [ 103.373272][ T6198] syz_tun: left allmulticast mode [ 103.485089][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'. [ 103.753900][ T6211] FAULT_INJECTION: forcing a failure. [ 103.753900][ T6211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.791616][ T6211] CPU: 0 UID: 0 PID: 6211 Comm: syz.1.99 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 103.791648][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.791661][ T6211] Call Trace: [ 103.791670][ T6211] [ 103.791679][ T6211] dump_stack_lvl+0x189/0x250 [ 103.791722][ T6211] ? __pfx____ratelimit+0x10/0x10 [ 103.791754][ T6211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.791787][ T6211] ? __pfx__printk+0x10/0x10 [ 103.791810][ T6211] ? __might_fault+0xb0/0x130 [ 103.791844][ T6211] should_fail_ex+0x414/0x560 [ 103.791885][ T6211] _copy_from_user+0x2d/0xb0 [ 103.791906][ T6211] ___sys_sendmsg+0x158/0x2a0 [ 103.791940][ T6211] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.791966][ T6211] ? kvm_sched_clock_read+0x11/0x20 [ 103.792048][ T6211] ? __might_fault+0xb0/0x130 [ 103.792071][ T6211] __sys_sendmmsg+0x227/0x430 [ 103.792108][ T6211] ? __pfx___sys_sendmmsg+0x10/0x10 [ 103.792136][ T6211] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 103.792195][ T6211] ? rcu_is_watching+0x15/0xb0 [ 103.792235][ T6211] __x64_sys_sendmmsg+0xa0/0xc0 [ 103.792268][ T6211] do_syscall_64+0xfa/0x3b0 [ 103.792290][ T6211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.792310][ T6211] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 103.792330][ T6211] ? clear_bhb_loop+0x60/0xb0 [ 103.792356][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.792376][ T6211] RIP: 0033:0x7fc7fe78e929 [ 103.792395][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.792413][ T6211] RSP: 002b:00007fc7ff617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.792434][ T6211] RAX: ffffffffffffffda RBX: 00007fc7fe9b5fa0 RCX: 00007fc7fe78e929 [ 103.792450][ T6211] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000006 [ 103.792464][ T6211] RBP: 00007fc7ff617090 R08: 0000000000000000 R09: 0000000000000000 [ 103.792476][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.792488][ T6211] R13: 0000000000000000 R14: 00007fc7fe9b5fa0 R15: 00007ffe37396628 [ 103.792522][ T6211] [ 104.013253][ T6215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.101'. [ 104.479381][ T6232] syz_tun: entered allmulticast mode [ 104.487737][ T6232] syz_tun: left allmulticast mode [ 104.701974][ T6238] openvswitch: netlink: Key type 88 is out of range max 32 [ 104.718173][ T5206] udevd[5206]: worker [5977] terminated by signal 33 (Unknown signal 33) [ 104.991659][ T6252] tipc: Started in network mode [ 105.029488][ T6252] tipc: Node identity ac14140f, cluster identity 4711 [ 105.043789][ T6252] tipc: New replicast peer: 255.255.255.255 [ 105.050805][ T6252] tipc: Enabled bearer , priority 10 [ 105.313145][ T6267] syz_tun: entered allmulticast mode [ 105.319884][ T6267] syz_tun: left allmulticast mode [ 105.515126][ T5906] IPVS: starting estimator thread 0... [ 105.632576][ T6279] IPVS: using max 25 ests per chain, 60000 per kthread [ 105.890112][ T6291] FAULT_INJECTION: forcing a failure. [ 105.890112][ T6291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.912684][ T6291] CPU: 0 UID: 0 PID: 6291 Comm: syz.0.132 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 105.912715][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.912728][ T6291] Call Trace: [ 105.912736][ T6291] [ 105.912746][ T6291] dump_stack_lvl+0x189/0x250 [ 105.912784][ T6291] ? __pfx____ratelimit+0x10/0x10 [ 105.912816][ T6291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.912859][ T6291] ? __pfx__printk+0x10/0x10 [ 105.912882][ T6291] ? __might_fault+0xb0/0x130 [ 105.912915][ T6291] should_fail_ex+0x414/0x560 [ 105.912946][ T6291] _copy_from_user+0x2d/0xb0 [ 105.912968][ T6291] ___sys_recvmsg+0x12e/0x510 [ 105.913005][ T6291] ? __pfx____sys_recvmsg+0x10/0x10 [ 105.913068][ T6291] ? __might_fault+0xb0/0x130 [ 105.913093][ T6291] do_recvmmsg+0x307/0x770 [ 105.913134][ T6291] ? __pfx_do_recvmmsg+0x10/0x10 [ 105.913177][ T6291] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.913219][ T6291] __x64_sys_recvmmsg+0x190/0x240 [ 105.913254][ T6291] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 105.913283][ T6291] ? rcu_is_watching+0x15/0xb0 [ 105.913321][ T6291] ? do_syscall_64+0xbe/0x3b0 [ 105.913346][ T6291] do_syscall_64+0xfa/0x3b0 [ 105.913365][ T6291] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.913397][ T6291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.913418][ T6291] ? clear_bhb_loop+0x60/0xb0 [ 105.913443][ T6291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.913463][ T6291] RIP: 0033:0x7fb826f8e929 [ 105.913481][ T6291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.913498][ T6291] RSP: 002b:00007fb827e3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 105.913520][ T6291] RAX: ffffffffffffffda RBX: 00007fb8271b5fa0 RCX: 00007fb826f8e929 [ 105.913535][ T6291] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 105.913548][ T6291] RBP: 00007fb827e3a090 R08: 0000000000000000 R09: 0000000000000000 [ 105.913560][ T6291] R10: 0000000040008062 R11: 0000000000000246 R12: 0000000000000001 [ 105.913572][ T6291] R13: 0000000000000000 R14: 00007fb8271b5fa0 R15: 00007ffcb6298e08 [ 105.913603][ T6291] [ 106.192614][ T5892] tipc: Node number set to 2886997007 [ 106.270898][ T6298] syz_tun: entered allmulticast mode [ 106.284039][ T6298] syz_tun: left allmulticast mode [ 106.505077][ T6303] __nla_validate_parse: 7 callbacks suppressed [ 106.505097][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 106.617307][ T6310] netlink: 11 bytes leftover after parsing attributes in process `syz.4.140'. [ 106.765709][ T6316] FAULT_INJECTION: forcing a failure. [ 106.765709][ T6316] name failslab, interval 1, probability 0, space 0, times 0 [ 106.808488][ T6316] CPU: 0 UID: 0 PID: 6316 Comm: syz.2.146 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 106.808518][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.808530][ T6316] Call Trace: [ 106.808538][ T6316] [ 106.808546][ T6316] dump_stack_lvl+0x189/0x250 [ 106.808583][ T6316] ? __pfx____ratelimit+0x10/0x10 [ 106.808614][ T6316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.808646][ T6316] ? __pfx__printk+0x10/0x10 [ 106.808674][ T6316] ? __pfx___might_resched+0x10/0x10 [ 106.808710][ T6316] should_fail_ex+0x414/0x560 [ 106.808739][ T6316] should_failslab+0xa8/0x100 [ 106.808762][ T6316] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 106.808782][ T6316] ? __alloc_skb+0x112/0x2d0 [ 106.808820][ T6316] __alloc_skb+0x112/0x2d0 [ 106.808849][ T6316] netlink_sendmsg+0x5c6/0xb30 [ 106.808885][ T6316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.808913][ T6316] ? aa_sock_msg_perm+0x94/0x160 [ 106.808944][ T6316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.808971][ T6316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.808997][ T6316] __sock_sendmsg+0x219/0x270 [ 106.809022][ T6316] ____sys_sendmsg+0x505/0x830 [ 106.809057][ T6316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.809096][ T6316] ? import_iovec+0x74/0xa0 [ 106.809121][ T6316] ___sys_sendmsg+0x21f/0x2a0 [ 106.809153][ T6316] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.809220][ T6316] ? __fget_files+0x2a/0x420 [ 106.809243][ T6316] ? __fget_files+0x3a0/0x420 [ 106.809277][ T6316] __x64_sys_sendmsg+0x19b/0x260 [ 106.809328][ T6316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.809368][ T6316] ? __pfx_ksys_write+0x10/0x10 [ 106.809384][ T6316] ? rcu_is_watching+0x15/0xb0 [ 106.809422][ T6316] ? do_syscall_64+0xbe/0x3b0 [ 106.809446][ T6316] do_syscall_64+0xfa/0x3b0 [ 106.809465][ T6316] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.809497][ T6316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.809517][ T6316] ? clear_bhb_loop+0x60/0xb0 [ 106.809541][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.809562][ T6316] RIP: 0033:0x7f26f018e929 [ 106.809580][ T6316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.809597][ T6316] RSP: 002b:00007f26edff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.809619][ T6316] RAX: ffffffffffffffda RBX: 00007f26f03b5fa0 RCX: 00007f26f018e929 [ 106.809634][ T6316] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 106.809651][ T6316] RBP: 00007f26edff6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.809663][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.809675][ T6316] R13: 0000000000000000 R14: 00007f26f03b5fa0 R15: 00007ffc38762988 [ 106.809705][ T6316] [ 107.116279][ T6323] syz_tun: entered allmulticast mode [ 107.123103][ T6323] syz_tun: left allmulticast mode [ 107.481493][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.153'. [ 107.580075][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 107.820648][ T6362] netlink: 'syz.4.158': attribute type 58 has an invalid length. [ 107.835902][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 108.017500][ T6369] syz_tun: entered allmulticast mode [ 108.025346][ T6369] syz_tun: left allmulticast mode [ 108.142995][ T6373] netlink: 32 bytes leftover after parsing attributes in process `syz.4.163'. [ 108.445804][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.172'. [ 108.590546][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.174'. [ 108.609527][ T6404] openvswitch: netlink: EtherType 0 is less than min 600 [ 108.796246][ T6414] syz_tun: entered allmulticast mode [ 108.837592][ T6412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.173'. [ 108.857929][ T6414] syz_tun: left allmulticast mode [ 108.973248][ T6426] FAULT_INJECTION: forcing a failure. [ 108.973248][ T6426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.989115][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: syz.1.179 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 108.989147][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.989159][ T6426] Call Trace: [ 108.989167][ T6426] [ 108.989176][ T6426] dump_stack_lvl+0x189/0x250 [ 108.989213][ T6426] ? __pfx____ratelimit+0x10/0x10 [ 108.989246][ T6426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.989279][ T6426] ? __pfx__printk+0x10/0x10 [ 108.989302][ T6426] ? __might_fault+0xb0/0x130 [ 108.989341][ T6426] should_fail_ex+0x414/0x560 [ 108.989373][ T6426] _copy_from_user+0x2d/0xb0 [ 108.989395][ T6426] ___sys_sendmsg+0x158/0x2a0 [ 108.989428][ T6426] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.989496][ T6426] ? __fget_files+0x2a/0x420 [ 108.989518][ T6426] ? __fget_files+0x3a0/0x420 [ 108.989553][ T6426] __x64_sys_sendmsg+0x19b/0x260 [ 108.989586][ T6426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.989628][ T6426] ? __pfx_ksys_write+0x10/0x10 [ 108.989645][ T6426] ? rcu_is_watching+0x15/0xb0 [ 108.989682][ T6426] ? do_syscall_64+0xbe/0x3b0 [ 108.989707][ T6426] do_syscall_64+0xfa/0x3b0 [ 108.989725][ T6426] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.989756][ T6426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.989776][ T6426] ? clear_bhb_loop+0x60/0xb0 [ 108.989799][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.989818][ T6426] RIP: 0033:0x7fc7fe78e929 [ 108.989837][ T6426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.989853][ T6426] RSP: 002b:00007fc7ff5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.989873][ T6426] RAX: ffffffffffffffda RBX: 00007fc7fe9b6080 RCX: 00007fc7fe78e929 [ 108.989887][ T6426] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000004 [ 108.989899][ T6426] RBP: 00007fc7ff5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.989911][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.989923][ T6426] R13: 0000000000000000 R14: 00007fc7fe9b6080 R15: 00007ffe37396628 [ 108.989953][ T6426] [ 109.545190][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 109.632693][ T6449] syz_tun: entered allmulticast mode [ 109.639459][ T6449] syz_tun: left allmulticast mode [ 109.789906][ T5920] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 110.080228][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.088700][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.341459][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.376587][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.944635][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.956988][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.980299][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.070259][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 111.084957][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 111.129505][ T6489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.137791][ T6489] batadv_slave_0: entered promiscuous mode [ 111.160798][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.240836][ T6497] syz_tun: entered allmulticast mode [ 111.260830][ T6497] syz_tun: left allmulticast mode [ 111.536067][ T6511] __nla_validate_parse: 2 callbacks suppressed [ 111.536087][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.211'. [ 111.774519][ T6527] FAULT_INJECTION: forcing a failure. [ 111.774519][ T6527] name failslab, interval 1, probability 0, space 0, times 0 [ 111.806260][ T6527] CPU: 0 UID: 0 PID: 6527 Comm: syz.1.217 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 111.806293][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.806306][ T6527] Call Trace: [ 111.806315][ T6527] [ 111.806325][ T6527] dump_stack_lvl+0x189/0x250 [ 111.806363][ T6527] ? __pfx____ratelimit+0x10/0x10 [ 111.806398][ T6527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.806430][ T6527] ? __pfx__printk+0x10/0x10 [ 111.806459][ T6527] ? __pfx___might_resched+0x10/0x10 [ 111.806496][ T6527] should_fail_ex+0x414/0x560 [ 111.806528][ T6527] should_failslab+0xa8/0x100 [ 111.806553][ T6527] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 111.806574][ T6527] ? __alloc_skb+0x112/0x2d0 [ 111.806606][ T6527] __alloc_skb+0x112/0x2d0 [ 111.806637][ T6527] netlink_sendmsg+0x5c6/0xb30 [ 111.806674][ T6527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.806704][ T6527] ? aa_sock_msg_perm+0x94/0x160 [ 111.806732][ T6527] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.806759][ T6527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.806786][ T6527] __sock_sendmsg+0x219/0x270 [ 111.806811][ T6527] ____sys_sendmsg+0x505/0x830 [ 111.806848][ T6527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.806888][ T6527] ? import_iovec+0x74/0xa0 [ 111.806913][ T6527] ___sys_sendmsg+0x21f/0x2a0 [ 111.806946][ T6527] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.807016][ T6527] ? __fget_files+0x2a/0x420 [ 111.807039][ T6527] ? __fget_files+0x3a0/0x420 [ 111.807074][ T6527] __x64_sys_sendmsg+0x19b/0x260 [ 111.807107][ T6527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.807156][ T6527] ? __pfx_ksys_write+0x10/0x10 [ 111.807174][ T6527] ? rcu_is_watching+0x15/0xb0 [ 111.807211][ T6527] ? do_syscall_64+0xbe/0x3b0 [ 111.807235][ T6527] do_syscall_64+0xfa/0x3b0 [ 111.807254][ T6527] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.807286][ T6527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.807307][ T6527] ? clear_bhb_loop+0x60/0xb0 [ 111.807331][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.807350][ T6527] RIP: 0033:0x7fc7fe78e929 [ 111.807369][ T6527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.807386][ T6527] RSP: 002b:00007fc7ff617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.807408][ T6527] RAX: ffffffffffffffda RBX: 00007fc7fe9b5fa0 RCX: 00007fc7fe78e929 [ 111.807424][ T6527] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 111.807437][ T6527] RBP: 00007fc7ff617090 R08: 0000000000000000 R09: 0000000000000000 [ 111.807450][ T6527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.807462][ T6527] R13: 0000000000000000 R14: 00007fc7fe9b5fa0 R15: 00007ffe37396628 [ 111.807494][ T6527] [ 112.097427][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.219'. [ 112.174883][ T6529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.218'. [ 112.186912][ T6538] netlink: 184 bytes leftover after parsing attributes in process `syz.1.222'. [ 112.193200][ T6533] syz_tun: entered allmulticast mode [ 112.197530][ T6538] xt_socket: unknown flags 0xd0 [ 112.211616][ T6533] syz_tun: left allmulticast mode [ 112.242079][ T6536] FAULT_INJECTION: forcing a failure. [ 112.242079][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 112.259003][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 112.282508][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.3.221 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 112.282539][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.282552][ T6536] Call Trace: [ 112.282560][ T6536] [ 112.282569][ T6536] dump_stack_lvl+0x189/0x250 [ 112.282608][ T6536] ? __pfx____ratelimit+0x10/0x10 [ 112.282642][ T6536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.282676][ T6536] ? __pfx__printk+0x10/0x10 [ 112.282706][ T6536] ? __pfx___might_resched+0x10/0x10 [ 112.282738][ T6536] ? fs_reclaim_acquire+0x7d/0x100 [ 112.282768][ T6536] should_fail_ex+0x414/0x560 [ 112.282800][ T6536] should_failslab+0xa8/0x100 [ 112.282826][ T6536] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 112.282847][ T6536] ? __alloc_skb+0x112/0x2d0 [ 112.282880][ T6536] __alloc_skb+0x112/0x2d0 [ 112.282911][ T6536] netlink_ack+0x146/0xa50 [ 112.282934][ T6536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.282963][ T6536] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 112.282995][ T6536] ? __pfx_nl802154_post_doit+0x10/0x10 [ 112.283040][ T6536] netlink_rcv_skb+0x28c/0x470 [ 112.283066][ T6536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.283098][ T6536] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.283162][ T6536] ? down_read+0x1ad/0x2e0 [ 112.283188][ T6536] genl_rcv+0x28/0x40 [ 112.283216][ T6536] netlink_unicast+0x758/0x8d0 [ 112.283248][ T6536] netlink_sendmsg+0x805/0xb30 [ 112.283284][ T6536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.283318][ T6536] ? aa_sock_msg_perm+0x94/0x160 [ 112.283347][ T6536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.283374][ T6536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.283402][ T6536] __sock_sendmsg+0x219/0x270 [ 112.283428][ T6536] ____sys_sendmsg+0x505/0x830 [ 112.283464][ T6536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.283505][ T6536] ? import_iovec+0x74/0xa0 [ 112.283530][ T6536] ___sys_sendmsg+0x21f/0x2a0 [ 112.283563][ T6536] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.283634][ T6536] ? __fget_files+0x2a/0x420 [ 112.283657][ T6536] ? __fget_files+0x3a0/0x420 [ 112.283693][ T6536] __x64_sys_sendmsg+0x19b/0x260 [ 112.283727][ T6536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.283768][ T6536] ? __pfx_ksys_write+0x10/0x10 [ 112.283784][ T6536] ? rcu_is_watching+0x15/0xb0 [ 112.283823][ T6536] ? do_syscall_64+0xbe/0x3b0 [ 112.283848][ T6536] do_syscall_64+0xfa/0x3b0 [ 112.283866][ T6536] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.283898][ T6536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.283918][ T6536] ? clear_bhb_loop+0x60/0xb0 [ 112.283944][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.283963][ T6536] RIP: 0033:0x7f0c3e18e929 [ 112.283981][ T6536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.284004][ T6536] RSP: 002b:00007f0c3efe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.284025][ T6536] RAX: ffffffffffffffda RBX: 00007f0c3e3b5fa0 RCX: 00007f0c3e18e929 [ 112.284039][ T6536] RDX: 0000000000000800 RSI: 00002000000003c0 RDI: 0000000000000004 [ 112.284052][ T6536] RBP: 00007f0c3efe6090 R08: 0000000000000000 R09: 0000000000000000 [ 112.284063][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.284075][ T6536] R13: 0000000000000000 R14: 00007f0c3e3b5fa0 R15: 00007ffedc45b6b8 [ 112.284107][ T6536] [ 112.766062][ T6552] FAULT_INJECTION: forcing a failure. [ 112.766062][ T6552] name failslab, interval 1, probability 0, space 0, times 0 [ 112.778922][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz.0.225 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 112.778952][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.778965][ T6552] Call Trace: [ 112.778974][ T6552] [ 112.778983][ T6552] dump_stack_lvl+0x189/0x250 [ 112.779022][ T6552] ? __pfx____ratelimit+0x10/0x10 [ 112.779084][ T6552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.779117][ T6552] ? __pfx__printk+0x10/0x10 [ 112.779156][ T6552] should_fail_ex+0x414/0x560 [ 112.779189][ T6552] should_failslab+0xa8/0x100 [ 112.779213][ T6552] kmem_cache_alloc_noprof+0x73/0x3c0 [ 112.779247][ T6552] ? skb_clone+0x212/0x3a0 [ 112.779284][ T6552] skb_clone+0x212/0x3a0 [ 112.779320][ T6552] __netlink_deliver_tap+0x404/0x850 [ 112.779360][ T6552] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.779387][ T6552] netlink_deliver_tap+0x19c/0x1b0 [ 112.779413][ T6552] netlink_dump+0x8e4/0xe20 [ 112.779451][ T6552] ? __pfx_netlink_dump+0x10/0x10 [ 112.779489][ T6552] ? netlink_lookup+0x30/0x200 [ 112.779512][ T6552] ? netlink_lookup+0x30/0x200 [ 112.779533][ T6552] ? netlink_lookup+0x30/0x200 [ 112.779563][ T6552] __netlink_dump_start+0x5cb/0x7e0 [ 112.779596][ T6552] unix_diag_handler_dump+0x199/0x900 [ 112.779634][ T6552] ? __pfx_unix_diag_handler_dump+0x10/0x10 [ 112.779654][ T6552] ? __pfx_unix_diag_dump+0x10/0x10 [ 112.779676][ T6552] ? sock_diag_lock_handler+0x19/0x290 [ 112.779700][ T6552] ? sock_diag_lock_handler+0x19/0x290 [ 112.779728][ T6552] sock_diag_rcv_msg+0x4c9/0x600 [ 112.779757][ T6552] netlink_rcv_skb+0x205/0x470 [ 112.779784][ T6552] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 112.779809][ T6552] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.779861][ T6552] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.779884][ T6552] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.779912][ T6552] netlink_unicast+0x758/0x8d0 [ 112.779943][ T6552] netlink_sendmsg+0x805/0xb30 [ 112.779972][ T6552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.779995][ T6552] ? aa_sock_msg_perm+0x94/0x160 [ 112.780019][ T6552] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.780054][ T6552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.780079][ T6552] __sock_sendmsg+0x219/0x270 [ 112.780122][ T6552] sock_write_iter+0x258/0x330 [ 112.780145][ T6552] ? __pfx_sock_write_iter+0x10/0x10 [ 112.780178][ T6552] ? bpf_lsm_file_permission+0x9/0x20 [ 112.780207][ T6552] ? security_file_permission+0x75/0x290 [ 112.780240][ T6552] vfs_write+0x548/0xa90 [ 112.780279][ T6552] ? __pfx_sock_write_iter+0x10/0x10 [ 112.780300][ T6552] ? __pfx_vfs_write+0x10/0x10 [ 112.780345][ T6552] ? __fget_files+0x2a/0x420 [ 112.780379][ T6552] ksys_write+0x145/0x250 [ 112.780401][ T6552] ? __pfx_ksys_write+0x10/0x10 [ 112.780418][ T6552] ? rcu_is_watching+0x15/0xb0 [ 112.780457][ T6552] ? do_syscall_64+0xbe/0x3b0 [ 112.780482][ T6552] do_syscall_64+0xfa/0x3b0 [ 112.780501][ T6552] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.780533][ T6552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.780554][ T6552] ? clear_bhb_loop+0x60/0xb0 [ 112.780580][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.780600][ T6552] RIP: 0033:0x7fb826f8e929 [ 112.780619][ T6552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.780636][ T6552] RSP: 002b:00007fb827e3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.780658][ T6552] RAX: ffffffffffffffda RBX: 00007fb8271b5fa0 RCX: 00007fb826f8e929 [ 112.780673][ T6552] RDX: 0000000000000029 RSI: 00002000000002c0 RDI: 0000000000000006 [ 112.780686][ T6552] RBP: 00007fb827e3a090 R08: 0000000000000000 R09: 0000000000000000 [ 112.780699][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.780711][ T6552] R13: 0000000000000000 R14: 00007fb8271b5fa0 R15: 00007ffcb6298e08 [ 112.780743][ T6552] [ 113.336745][ T6562] netlink: 184 bytes leftover after parsing attributes in process `syz.2.232'. [ 113.346507][ T6562] xt_socket: unknown flags 0xd0 [ 113.395122][ T6565] FAULT_INJECTION: forcing a failure. [ 113.395122][ T6565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.429558][ T6567] syz_tun: entered allmulticast mode [ 113.433473][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.0.233 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 113.433506][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.433519][ T6565] Call Trace: [ 113.433528][ T6565] [ 113.433538][ T6565] dump_stack_lvl+0x189/0x250 [ 113.433582][ T6565] ? __pfx____ratelimit+0x10/0x10 [ 113.433619][ T6565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.433656][ T6565] ? __pfx__printk+0x10/0x10 [ 113.433696][ T6565] should_fail_ex+0x414/0x560 [ 113.433733][ T6565] _copy_to_user+0x31/0xb0 [ 113.433759][ T6565] simple_read_from_buffer+0xe1/0x170 [ 113.433789][ T6565] proc_fail_nth_read+0x1df/0x250 [ 113.433822][ T6565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.433872][ T6565] ? rw_verify_area+0x258/0x650 [ 113.433910][ T6565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.433940][ T6565] vfs_read+0x200/0x980 [ 113.433985][ T6565] ? __pfx___mutex_lock+0x10/0x10 [ 113.434010][ T6565] ? __pfx_vfs_read+0x10/0x10 [ 113.434048][ T6565] ? __fget_files+0x2a/0x420 [ 113.434080][ T6565] ? __fget_files+0x3a0/0x420 [ 113.434105][ T6565] ? __fget_files+0x2a/0x420 [ 113.434143][ T6565] ksys_read+0x145/0x250 [ 113.434192][ T6565] ? __pfx_ksys_read+0x10/0x10 [ 113.434225][ T6565] ? rcu_is_watching+0x15/0xb0 [ 113.434270][ T6565] ? do_syscall_64+0xbe/0x3b0 [ 113.434300][ T6565] do_syscall_64+0xfa/0x3b0 [ 113.434321][ T6565] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.434357][ T6565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.434381][ T6565] ? clear_bhb_loop+0x60/0xb0 [ 113.434411][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.434433][ T6565] RIP: 0033:0x7fb826f8d33c [ 113.434460][ T6565] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.434481][ T6565] RSP: 002b:00007fb827e3a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.434504][ T6565] RAX: ffffffffffffffda RBX: 00007fb8271b5fa0 RCX: 00007fb826f8d33c [ 113.434523][ T6565] RDX: 000000000000000f RSI: 00007fb827e3a0a0 RDI: 0000000000000007 [ 113.434538][ T6565] RBP: 00007fb827e3a090 R08: 0000000000000000 R09: 0000000000000000 [ 113.434552][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.434566][ T6565] R13: 0000000000000000 R14: 00007fb8271b5fa0 R15: 00007ffcb6298e08 [ 113.434603][ T6565] [ 113.654328][ T6573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.235'. [ 113.741115][ T6571] syz_tun: left allmulticast mode [ 113.877707][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 114.017454][ T6589] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 114.054201][ T6589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.240'. [ 114.074153][ T6589] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 114.091888][ T6589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.240'. [ 114.125570][ T6589] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 114.150017][ T6589] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 114.210251][ T6589] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 114.221656][ T6589] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 114.234619][ T6589] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 114.249684][ T6589] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 114.260265][ T6589] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 114.284466][ T6589] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 114.520819][ T6607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.583576][ T6616] syz_tun: entered allmulticast mode [ 114.590141][ T6616] syz_tun: left allmulticast mode [ 115.125211][ T6648] xt_socket: unknown flags 0xd0 [ 115.250299][ T6653] syz_tun: entered allmulticast mode [ 115.261616][ T6653] syz_tun: left allmulticast mode [ 115.337947][ T6656] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 116.150599][ T6698] syz_tun: entered allmulticast mode [ 116.165278][ T6698] syz_tun: left allmulticast mode [ 116.223814][ T6702] FAULT_INJECTION: forcing a failure. [ 116.223814][ T6702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.282559][ T6702] CPU: 0 UID: 0 PID: 6702 Comm: syz.1.278 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 116.282591][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.282603][ T6702] Call Trace: [ 116.282612][ T6702] [ 116.282621][ T6702] dump_stack_lvl+0x189/0x250 [ 116.282660][ T6702] ? __pfx____ratelimit+0x10/0x10 [ 116.282693][ T6702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.282726][ T6702] ? __pfx__printk+0x10/0x10 [ 116.282749][ T6702] ? __might_fault+0xb0/0x130 [ 116.282782][ T6702] should_fail_ex+0x414/0x560 [ 116.282815][ T6702] _copy_from_iter+0x1db/0x16f0 [ 116.282849][ T6702] ? sctp_addto_chunk+0xf2/0x230 [ 116.282878][ T6702] ? __pfx__copy_from_iter+0x10/0x10 [ 116.282909][ T6702] ? __asan_memcpy+0x40/0x70 [ 116.282940][ T6702] ? sctp_make_datafrag_empty+0x17c/0x230 [ 116.282965][ T6702] ? skb_put+0x11b/0x210 [ 116.282997][ T6702] sctp_user_addto_chunk+0x87/0x240 [ 116.283036][ T6702] sctp_datamsg_from_user+0x748/0xef0 [ 116.283081][ T6702] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 116.283107][ T6702] ? __asan_memcpy+0x40/0x70 [ 116.283143][ T6702] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 116.283187][ T6702] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 116.283216][ T6702] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 116.283246][ T6702] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 116.283275][ T6702] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 116.283301][ T6702] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 116.283330][ T6702] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 116.283358][ T6702] ? security_sctp_bind_connect+0x7e/0x2e0 [ 116.283385][ T6702] sctp_sendmsg+0x1941/0x2810 [ 116.283426][ T6702] ? __pfx_sctp_sendmsg+0x10/0x10 [ 116.283458][ T6702] ? aa_sk_perm+0x81e/0x950 [ 116.283488][ T6702] ? __pfx_aa_sk_perm+0x10/0x10 [ 116.283516][ T6702] ? sock_rps_record_flow+0x19/0x410 [ 116.283541][ T6702] ? inet_sendmsg+0x2f4/0x370 [ 116.283559][ T6702] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.283590][ T6702] __sock_sendmsg+0x19c/0x270 [ 116.283616][ T6702] __sys_sendto+0x3bd/0x520 [ 116.283646][ T6702] ? __pfx___sys_sendto+0x10/0x10 [ 116.283669][ T6702] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 116.283705][ T6702] ? __fget_files+0x3a0/0x420 [ 116.283741][ T6702] ? ksys_write+0x22a/0x250 [ 116.283763][ T6702] ? __pfx_ksys_write+0x10/0x10 [ 116.283780][ T6702] ? rcu_is_watching+0x15/0xb0 [ 116.283818][ T6702] __x64_sys_sendto+0xde/0x100 [ 116.283849][ T6702] do_syscall_64+0xfa/0x3b0 [ 116.283869][ T6702] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.283900][ T6702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.283921][ T6702] ? clear_bhb_loop+0x60/0xb0 [ 116.283947][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.283967][ T6702] RIP: 0033:0x7fc7fe78e929 [ 116.283986][ T6702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.284010][ T6702] RSP: 002b:00007fc7ff617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 116.284032][ T6702] RAX: ffffffffffffffda RBX: 00007fc7fe9b5fa0 RCX: 00007fc7fe78e929 [ 116.284047][ T6702] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000005 [ 116.284060][ T6702] RBP: 00007fc7ff617090 R08: 000020000005ffe4 R09: 000000000000001c [ 116.284074][ T6702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.284086][ T6702] R13: 0000000000000000 R14: 00007fc7fe9b5fa0 R15: 00007ffe37396628 [ 116.284119][ T6702] [ 116.665871][ T6712] __nla_validate_parse: 81 callbacks suppressed [ 116.665891][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.280'. [ 116.778252][ T6714] batadv_slave_0: entered promiscuous mode [ 116.887321][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 117.072107][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 117.091535][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.169348][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 117.305893][ T6731] batadv_slave_0 (unregistering): left promiscuous mode [ 117.319332][ T6731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.465746][ T1146] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 117.515610][ T6759] FAULT_INJECTION: forcing a failure. [ 117.515610][ T6759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.548266][ T6759] CPU: 0 UID: 0 PID: 6759 Comm: syz.3.289 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 117.548298][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.548311][ T6759] Call Trace: [ 117.548317][ T6759] [ 117.548324][ T6759] dump_stack_lvl+0x189/0x250 [ 117.548352][ T6759] ? __pfx____ratelimit+0x10/0x10 [ 117.548376][ T6759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.548400][ T6759] ? __pfx__printk+0x10/0x10 [ 117.548416][ T6759] ? __might_fault+0xb0/0x130 [ 117.548438][ T6759] should_fail_ex+0x414/0x560 [ 117.548461][ T6759] _copy_from_user+0x2d/0xb0 [ 117.548477][ T6759] __sys_connect+0x123/0x440 [ 117.548496][ T6759] ? __fget_files+0x3a0/0x420 [ 117.548512][ T6759] ? __pfx___sys_connect+0x10/0x10 [ 117.548540][ T6759] ? __pfx_ksys_write+0x10/0x10 [ 117.548551][ T6759] ? rcu_is_watching+0x15/0xb0 [ 117.548588][ T6759] __x64_sys_connect+0x7a/0x90 [ 117.548607][ T6759] do_syscall_64+0xfa/0x3b0 [ 117.548621][ T6759] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.548644][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.548658][ T6759] ? clear_bhb_loop+0x60/0xb0 [ 117.548676][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.548691][ T6759] RIP: 0033:0x7f0c3e18e929 [ 117.548704][ T6759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.548716][ T6759] RSP: 002b:00007f0c3efe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 117.548732][ T6759] RAX: ffffffffffffffda RBX: 00007f0c3e3b5fa0 RCX: 00007f0c3e18e929 [ 117.548743][ T6759] RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000004 [ 117.548751][ T6759] RBP: 00007f0c3efe6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.548760][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.548768][ T6759] R13: 0000000000000000 R14: 00007f0c3e3b5fa0 R15: 00007ffedc45b6b8 [ 117.548792][ T6759] [ 117.838964][ T6762] syz_tun: entered allmulticast mode [ 117.846174][ T6762] syz_tun: left allmulticast mode [ 118.243905][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'. [ 118.395997][ T6790] syz_tun: entered allmulticast mode [ 118.414016][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 118.470689][ T6790] syz_tun: left allmulticast mode [ 118.546892][ T6797] Can't find ip_set type hash:ip$mec [ 118.985640][ T5839] Bluetooth: hci4: command tx timeout [ 119.146402][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.314'. [ 119.390762][ T6835] syz_tun: entered allmulticast mode [ 119.414236][ T6835] syz_tun: left allmulticast mode [ 119.484321][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'. [ 119.512053][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 119.530176][ T6837] FAULT_INJECTION: forcing a failure. [ 119.530176][ T6837] name failslab, interval 1, probability 0, space 0, times 0 [ 119.544556][ T6837] CPU: 1 UID: 0 PID: 6837 Comm: syz.0.319 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 119.544587][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.544600][ T6837] Call Trace: [ 119.544609][ T6837] [ 119.544618][ T6837] dump_stack_lvl+0x189/0x250 [ 119.544656][ T6837] ? __pfx____ratelimit+0x10/0x10 [ 119.544689][ T6837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.544722][ T6837] ? __pfx__printk+0x10/0x10 [ 119.544742][ T6837] ? irqentry_exit+0x74/0x90 [ 119.544771][ T6837] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 119.544796][ T6837] should_fail_ex+0x414/0x560 [ 119.544827][ T6837] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 119.544845][ T6837] should_failslab+0xa8/0x100 [ 119.544874][ T6837] __kvmalloc_node_noprof+0x161/0x5f0 [ 119.544897][ T6837] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 119.544923][ T6837] alloc_netdev_mqs+0x8e5/0x11e0 [ 119.544951][ T6837] rtnl_create_link+0x31f/0xd10 [ 119.544978][ T6837] rtnl_newlink_create+0x25c/0xb00 [ 119.545015][ T6837] ? __pfx_aa_get_newest_label+0x10/0x10 [ 119.545047][ T6837] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 119.545074][ T6837] ? rtnl_newlink+0x8db/0x1c70 [ 119.545101][ T6837] ? __pfx___mutex_lock+0x10/0x10 [ 119.545134][ T6837] ? ns_capable+0x8a/0xf0 [ 119.545171][ T6837] rtnl_newlink+0x16d6/0x1c70 [ 119.545198][ T6837] ? netlink_sendmsg+0x805/0xb30 [ 119.545256][ T6837] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.545308][ T6837] ? kasan_quarantine_put+0xdd/0x220 [ 119.545339][ T6837] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.545385][ T6837] ? nlmon_xmit+0xb0/0x100 [ 119.545402][ T6837] ? kmem_cache_free+0x18f/0x400 [ 119.545432][ T6837] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.545463][ T6837] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.545497][ T6837] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.545528][ T6837] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 119.545564][ T6837] ? __dev_queue_xmit+0x27e/0x3a70 [ 119.545611][ T6837] ? __lock_acquire+0xab9/0xd20 [ 119.545670][ T6837] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.545695][ T6837] rtnetlink_rcv_msg+0x7cf/0xb70 [ 119.545723][ T6837] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 119.545748][ T6837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.545770][ T6837] ? ref_tracker_free+0x63a/0x7d0 [ 119.545797][ T6837] ? __copy_skb_header+0xa7/0x550 [ 119.545830][ T6837] ? __pfx_ref_tracker_free+0x10/0x10 [ 119.545857][ T6837] ? __skb_clone+0x63/0x7a0 [ 119.545897][ T6837] netlink_rcv_skb+0x205/0x470 [ 119.545923][ T6837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.545950][ T6837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.545991][ T6837] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.546015][ T6837] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.546047][ T6837] netlink_unicast+0x758/0x8d0 [ 119.546083][ T6837] netlink_sendmsg+0x805/0xb30 [ 119.546120][ T6837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.546150][ T6837] ? aa_sock_msg_perm+0x94/0x160 [ 119.546179][ T6837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.546205][ T6837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.546233][ T6837] __sock_sendmsg+0x219/0x270 [ 119.546258][ T6837] ____sys_sendmsg+0x52d/0x830 [ 119.546295][ T6837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.546336][ T6837] ? import_iovec+0x74/0xa0 [ 119.546361][ T6837] ___sys_sendmsg+0x21f/0x2a0 [ 119.546401][ T6837] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.546484][ T6837] ? __fget_files+0x2a/0x420 [ 119.546506][ T6837] ? __fget_files+0x3a0/0x420 [ 119.546540][ T6837] __sys_sendmmsg+0x227/0x430 [ 119.546576][ T6837] ? __pfx___sys_sendmmsg+0x10/0x10 [ 119.546602][ T6837] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 119.546652][ T6837] ? ksys_write+0x22a/0x250 [ 119.546674][ T6837] ? __pfx_ksys_write+0x10/0x10 [ 119.546689][ T6837] ? rcu_is_watching+0x15/0xb0 [ 119.546729][ T6837] __x64_sys_sendmmsg+0xa0/0xc0 [ 119.546760][ T6837] do_syscall_64+0xfa/0x3b0 [ 119.546779][ T6837] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.546810][ T6837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.546830][ T6837] ? clear_bhb_loop+0x60/0xb0 [ 119.546855][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.546875][ T6837] RIP: 0033:0x7fb826f8e929 [ 119.546893][ T6837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.546916][ T6837] RSP: 002b:00007fb827e3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.546937][ T6837] RAX: ffffffffffffffda RBX: 00007fb8271b5fa0 RCX: 00007fb826f8e929 [ 119.546951][ T6837] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000003 [ 119.546964][ T6837] RBP: 00007fb827e3a090 R08: 0000000000000000 R09: 0000000000000000 [ 119.546976][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.546988][ T6837] R13: 0000000000000000 R14: 00007fb8271b5fa0 R15: 00007ffcb6298e08 [ 119.547019][ T6837] [ 120.366362][ T6857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.328'. [ 120.522355][ T6864] syz_tun: entered allmulticast mode [ 120.529032][ T6864] syz_tun: left allmulticast mode [ 120.632300][ T6870] validate_nla: 65 callbacks suppressed [ 120.632319][ T6870] netlink: 'syz.4.332': attribute type 58 has an invalid length. [ 121.087770][ T6896] syz_tun: entered allmulticast mode [ 121.095382][ T6896] syz_tun: left allmulticast mode [ 121.362554][ T6905] FAULT_INJECTION: forcing a failure. [ 121.362554][ T6905] name failslab, interval 1, probability 0, space 0, times 0 [ 121.417856][ T6905] CPU: 0 UID: 0 PID: 6905 Comm: syz.3.348 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 121.417888][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.417901][ T6905] Call Trace: [ 121.417909][ T6905] [ 121.417919][ T6905] dump_stack_lvl+0x189/0x250 [ 121.417956][ T6905] ? __pfx____ratelimit+0x10/0x10 [ 121.417990][ T6905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.418023][ T6905] ? __pfx__printk+0x10/0x10 [ 121.418054][ T6905] ? __pfx___might_resched+0x10/0x10 [ 121.418092][ T6905] should_fail_ex+0x414/0x560 [ 121.418125][ T6905] should_failslab+0xa8/0x100 [ 121.418150][ T6905] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 121.418172][ T6905] ? __alloc_skb+0x112/0x2d0 [ 121.418210][ T6905] __alloc_skb+0x112/0x2d0 [ 121.418242][ T6905] __ip6_append_data+0x2adb/0x3c50 [ 121.418296][ T6905] ? __pfx_raw6_getfrag+0x10/0x10 [ 121.418348][ T6905] ? ip6_mtu+0x7d/0x3f0 [ 121.418379][ T6905] ? __pfx___ip6_append_data+0x10/0x10 [ 121.418406][ T6905] ? __pfx_ip6_mtu+0x10/0x10 [ 121.418444][ T6905] ip6_append_data+0x1c4/0x380 [ 121.418480][ T6905] ? __pfx_raw6_getfrag+0x10/0x10 [ 121.418517][ T6905] rawv6_sendmsg+0x124b/0x17f0 [ 121.418565][ T6905] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 121.418594][ T6905] ? __lock_acquire+0xab9/0xd20 [ 121.418653][ T6905] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.418682][ T6905] ? sock_rps_record_flow+0x19/0x410 [ 121.418707][ T6905] ? inet_sendmsg+0x2f4/0x370 [ 121.418725][ T6905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.418757][ T6905] __sock_sendmsg+0x19c/0x270 [ 121.418782][ T6905] ____sys_sendmsg+0x505/0x830 [ 121.418818][ T6905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.418859][ T6905] ? import_iovec+0x74/0xa0 [ 121.418885][ T6905] ___sys_sendmsg+0x21f/0x2a0 [ 121.418918][ T6905] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.418991][ T6905] ? __fget_files+0x2a/0x420 [ 121.419015][ T6905] ? __fget_files+0x3a0/0x420 [ 121.419051][ T6905] __x64_sys_sendmsg+0x19b/0x260 [ 121.419085][ T6905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.419126][ T6905] ? __pfx_ksys_write+0x10/0x10 [ 121.419152][ T6905] ? do_syscall_64+0xbe/0x3b0 [ 121.419178][ T6905] do_syscall_64+0xfa/0x3b0 [ 121.419205][ T6905] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.419238][ T6905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.419259][ T6905] ? clear_bhb_loop+0x60/0xb0 [ 121.419285][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.419306][ T6905] RIP: 0033:0x7f0c3e18e929 [ 121.419324][ T6905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.419342][ T6905] RSP: 002b:00007f0c3efe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.419364][ T6905] RAX: ffffffffffffffda RBX: 00007f0c3e3b5fa0 RCX: 00007f0c3e18e929 [ 121.419379][ T6905] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 121.419392][ T6905] RBP: 00007f0c3efe6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.419404][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.419415][ T6905] R13: 0000000000000000 R14: 00007f0c3e3b5fa0 R15: 00007ffedc45b6b8 [ 121.419448][ T6905] [ 121.900996][ T6921] syz_tun: entered allmulticast mode [ 121.926798][ T6921] syz_tun: left allmulticast mode [ 122.022992][ T6929] __nla_validate_parse: 6 callbacks suppressed [ 122.023012][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 122.180128][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.361'. [ 122.254465][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 122.310013][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 122.399973][ T6742] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.452636][ T6742] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.462626][ T1146] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.493640][ T1146] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.500606][ T6952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.365'. [ 122.530128][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 122.664492][ T6964] syz_tun: entered allmulticast mode [ 122.679341][ T6964] syz_tun: left allmulticast mode [ 122.905813][ T6978] netlink: 'syz.4.372': attribute type 30 has an invalid length. [ 122.975890][ T6978] netlink: 'syz.4.372': attribute type 30 has an invalid length. [ 123.075615][ T6971] block nbd0: server does not support multiple connections per device. [ 123.085600][ T6971] block nbd0: shutting down sockets [ 123.233492][ T3902] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 123.337721][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.374'. [ 123.424243][ T7004] FAULT_INJECTION: forcing a failure. [ 123.424243][ T7004] name failslab, interval 1, probability 0, space 0, times 0 [ 123.475923][ T7004] CPU: 1 UID: 0 PID: 7004 Comm: syz.0.376 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 123.475954][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.475967][ T7004] Call Trace: [ 123.475975][ T7004] [ 123.475984][ T7004] dump_stack_lvl+0x189/0x250 [ 123.476021][ T7004] ? __pfx____ratelimit+0x10/0x10 [ 123.476060][ T7004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.476092][ T7004] ? __pfx__printk+0x10/0x10 [ 123.476121][ T7004] ? __pfx___might_resched+0x10/0x10 [ 123.476158][ T7004] should_fail_ex+0x414/0x560 [ 123.476190][ T7004] should_failslab+0xa8/0x100 [ 123.476233][ T7004] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 123.476255][ T7004] ? __alloc_skb+0x112/0x2d0 [ 123.476286][ T7004] __alloc_skb+0x112/0x2d0 [ 123.476329][ T7004] netlink_dump+0x22b/0xe20 [ 123.476367][ T7004] ? __pfx_netlink_dump+0x10/0x10 [ 123.476426][ T7004] ? kmem_cache_free+0x18f/0x400 [ 123.476452][ T7004] netlink_recvmsg+0x676/0xa30 [ 123.476489][ T7004] ? __pfx_netlink_recvmsg+0x10/0x10 [ 123.476520][ T7004] ? __lock_acquire+0xab9/0xd20 [ 123.476547][ T7004] ? aa_sock_msg_perm+0x94/0x160 [ 123.476576][ T7004] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 123.476606][ T7004] ? __pfx_netlink_recvmsg+0x10/0x10 [ 123.476633][ T7004] sock_recvmsg_nosec+0x186/0x1c0 [ 123.476661][ T7004] ____sys_recvmsg+0x3aa/0x460 [ 123.476703][ T7004] ? __pfx_____sys_recvmsg+0x10/0x10 [ 123.476751][ T7004] ? import_iovec+0x74/0xa0 [ 123.476777][ T7004] ___sys_recvmsg+0x1b5/0x510 [ 123.476814][ T7004] ? __pfx____sys_recvmsg+0x10/0x10 [ 123.476879][ T7004] ? __might_fault+0xb0/0x130 [ 123.476905][ T7004] do_recvmmsg+0x307/0x770 [ 123.476946][ T7004] ? __pfx_do_recvmmsg+0x10/0x10 [ 123.476995][ T7004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.477044][ T7004] __x64_sys_recvmmsg+0x190/0x240 [ 123.477080][ T7004] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 123.477109][ T7004] ? rcu_is_watching+0x15/0xb0 [ 123.477148][ T7004] ? do_syscall_64+0xbe/0x3b0 [ 123.477173][ T7004] do_syscall_64+0xfa/0x3b0 [ 123.477192][ T7004] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.477224][ T7004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.477245][ T7004] ? clear_bhb_loop+0x60/0xb0 [ 123.477270][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.477291][ T7004] RIP: 0033:0x7fb826f8e929 [ 123.477310][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.477327][ T7004] RSP: 002b:00007fb827e3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 123.477349][ T7004] RAX: ffffffffffffffda RBX: 00007fb8271b5fa0 RCX: 00007fb826f8e929 [ 123.477365][ T7004] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 123.477377][ T7004] RBP: 00007fb827e3a090 R08: 0000000000000000 R09: 0000000000000000 [ 123.477390][ T7004] R10: 0000000000000120 R11: 0000000000000246 R12: 0000000000000001 [ 123.477402][ T7004] R13: 0000000000000000 R14: 00007fb8271b5fa0 R15: 00007ffcb6298e08 [ 123.477445][ T7004] [ 124.098610][ T7021] FAULT_INJECTION: forcing a failure. [ 124.098610][ T7021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.114237][ T7021] CPU: 1 UID: 0 PID: 7021 Comm: syz.3.381 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 124.114268][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.114280][ T7021] Call Trace: [ 124.114288][ T7021] [ 124.114297][ T7021] dump_stack_lvl+0x189/0x250 [ 124.114336][ T7021] ? __pfx____ratelimit+0x10/0x10 [ 124.114369][ T7021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.114403][ T7021] ? __pfx__printk+0x10/0x10 [ 124.114426][ T7021] ? __might_fault+0xb0/0x130 [ 124.114457][ T7021] should_fail_ex+0x414/0x560 [ 124.114490][ T7021] _copy_to_iter+0x3f5/0x16f0 [ 124.114535][ T7021] ? __pfx__copy_to_iter+0x10/0x10 [ 124.114563][ T7021] ? __skb_try_recv_from_queue+0x58f/0x730 [ 124.114602][ T7021] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 124.114643][ T7021] __skb_datagram_iter+0xf8/0x990 [ 124.114677][ T7021] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 124.114719][ T7021] skb_copy_datagram_iter+0xc5/0x230 [ 124.114755][ T7021] netlink_recvmsg+0x2ab/0xa30 [ 124.114793][ T7021] ? __pfx_netlink_recvmsg+0x10/0x10 [ 124.114823][ T7021] ? __lock_acquire+0xab9/0xd20 [ 124.114850][ T7021] ? aa_sock_msg_perm+0x94/0x160 [ 124.114878][ T7021] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 124.114906][ T7021] ? __pfx_netlink_recvmsg+0x10/0x10 [ 124.114934][ T7021] sock_recvmsg_nosec+0x186/0x1c0 [ 124.114960][ T7021] ____sys_recvmsg+0x3aa/0x460 [ 124.115010][ T7021] ? __pfx_____sys_recvmsg+0x10/0x10 [ 124.115059][ T7021] ? import_iovec+0x74/0xa0 [ 124.115084][ T7021] ___sys_recvmsg+0x1b5/0x510 [ 124.115120][ T7021] ? __pfx____sys_recvmsg+0x10/0x10 [ 124.115184][ T7021] ? __might_fault+0xb0/0x130 [ 124.115208][ T7021] do_recvmmsg+0x307/0x770 [ 124.115247][ T7021] ? __pfx_do_recvmmsg+0x10/0x10 [ 124.115290][ T7021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.115330][ T7021] __x64_sys_recvmmsg+0x190/0x240 [ 124.115376][ T7021] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 124.115403][ T7021] ? rcu_is_watching+0x15/0xb0 [ 124.115440][ T7021] ? do_syscall_64+0xbe/0x3b0 [ 124.115464][ T7021] do_syscall_64+0xfa/0x3b0 [ 124.115482][ T7021] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.115510][ T7021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.115531][ T7021] ? clear_bhb_loop+0x60/0xb0 [ 124.115556][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.115575][ T7021] RIP: 0033:0x7f0c3e18e929 [ 124.115593][ T7021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.115609][ T7021] RSP: 002b:00007f0c3efe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 124.115630][ T7021] RAX: ffffffffffffffda RBX: 00007f0c3e3b5fa0 RCX: 00007f0c3e18e929 [ 124.115644][ T7021] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 124.115657][ T7021] RBP: 00007f0c3efe6090 R08: 0000000000000000 R09: 0000000000000000 [ 124.115669][ T7021] R10: 0000000040008062 R11: 0000000000000246 R12: 0000000000000001 [ 124.115680][ T7021] R13: 0000000000000000 R14: 00007f0c3e3b5fa0 R15: 00007ffedc45b6b8 [ 124.115711][ T7021] [ 124.460398][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 124.491285][ T7025] syz_tun: entered allmulticast mode [ 124.563400][ T7025] syz_tun: left allmulticast mode [ 124.629459][ T7028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.727468][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 124.814646][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.388'. [ 125.137030][ T7058] syz_tun: entered allmulticast mode [ 125.155095][ T3902] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 125.174373][ T7058] syz_tun: left allmulticast mode [ 125.791494][ T5920] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 126.164648][ T7103] syz_tun: entered allmulticast mode [ 126.173963][ T7103] syz_tun: left allmulticast mode [ 126.413975][ T7119] netlink: 'syz.2.415': attribute type 1 has an invalid length. [ 126.471621][ T7119] netlink: 'syz.2.415': attribute type 2 has an invalid length. [ 126.471863][ T7124] netlink: 'syz.0.413': attribute type 11 has an invalid length. [ 126.840648][ T7138] sctp: [Deprecated]: syz.2.420 (pid 7138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.840648][ T7138] Use struct sctp_sack_info instead [ 127.254480][ T7155] syz_tun: entered allmulticast mode [ 127.266322][ T7155] syz_tun: left allmulticast mode [ 127.325378][ T7157] xt_recent: Unsupported userspace flags (00000048) [ 127.669848][ T7172] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 127.860333][ T7181] __nla_validate_parse: 5 callbacks suppressed [ 127.860353][ T7181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.437'. [ 127.949306][ T7188] syz_tun: entered allmulticast mode [ 127.963341][ T7188] syz_tun: left allmulticast mode [ 128.350724][ T7209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 128.376826][ T7209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 128.393682][ T7209] ip6gretap0: entered promiscuous mode [ 128.400973][ T7209] syz_tun: entered promiscuous mode [ 128.590844][ T7213] netlink: 11 bytes leftover after parsing attributes in process `syz.0.449'. [ 128.896625][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.455'. [ 128.940481][ T7224] syz_tun: entered allmulticast mode [ 128.947259][ T7224] syz_tun: left allmulticast mode [ 128.983481][ T49] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 129.523944][ T7254] syz_tun: entered allmulticast mode [ 129.540402][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 129.556684][ T7254] syz_tun: left allmulticast mode [ 129.701958][ T5839] Bluetooth: hci0: command 0x0401 tx timeout [ 129.820717][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 129.846493][ T7269] netlink: 'syz.2.472': attribute type 9 has an invalid length. [ 129.908578][ T7269] macvlan2: entered allmulticast mode [ 129.914237][ T7269] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 130.128315][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 130.153743][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 130.196103][ T7292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 130.257804][ T7290] IPv4: Oversized IP packet from 127.202.26.0 [ 130.266607][ T5906] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 130.276914][ T3902] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 130.456136][ T7299] syz_tun: entered allmulticast mode [ 130.477996][ T7299] syz_tun: left allmulticast mode [ 130.581191][ T7307] FAULT_INJECTION: forcing a failure. [ 130.581191][ T7307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.602965][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.0.491 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 130.602998][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.603012][ T7307] Call Trace: [ 130.603031][ T7307] [ 130.603040][ T7307] dump_stack_lvl+0x189/0x250 [ 130.603078][ T7307] ? __pfx____ratelimit+0x10/0x10 [ 130.603111][ T7307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.603145][ T7307] ? __pfx__printk+0x10/0x10 [ 130.603168][ T7307] ? __might_fault+0xb0/0x130 [ 130.603201][ T7307] should_fail_ex+0x414/0x560 [ 130.603234][ T7307] _copy_from_user+0x2d/0xb0 [ 130.603263][ T7307] ___sys_sendmsg+0x158/0x2a0 [ 130.603298][ T7307] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.603369][ T7307] ? __fget_files+0x2a/0x420 [ 130.603391][ T7307] ? __fget_files+0x3a0/0x420 [ 130.603426][ T7307] __sys_sendmmsg+0x227/0x430 [ 130.603463][ T7307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 130.603490][ T7307] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 130.603541][ T7307] ? ksys_write+0x22a/0x250 [ 130.603564][ T7307] ? __pfx_ksys_write+0x10/0x10 [ 130.603580][ T7307] ? rcu_is_watching+0x15/0xb0 [ 130.603627][ T7307] __x64_sys_sendmmsg+0xa0/0xc0 [ 130.603660][ T7307] do_syscall_64+0xfa/0x3b0 [ 130.603682][ T7307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.603702][ T7307] ? asm_sysvec_call_function_single+0x1a/0x20 [ 130.603727][ T7307] ? clear_bhb_loop+0x60/0xb0 [ 130.603753][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.603774][ T7307] RIP: 0033:0x7fb826f8e929 [ 130.603793][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.603811][ T7307] RSP: 002b:00007fb827e3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 130.603832][ T7307] RAX: ffffffffffffffda RBX: 00007fb8271b5fa0 RCX: 00007fb826f8e929 [ 130.603847][ T7307] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000a [ 130.603860][ T7307] RBP: 00007fb827e3a090 R08: 0000000000000000 R09: 0000000000000000 [ 130.603872][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.603884][ T7307] R13: 0000000000000000 R14: 00007fb8271b5fa0 R15: 00007ffcb6298e08 [ 130.603916][ T7307] [ 130.930445][ T7315] FAULT_INJECTION: forcing a failure. [ 130.930445][ T7315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 130.946769][ T7315] CPU: 0 UID: 0 PID: 7315 Comm: syz.0.494 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 130.946801][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.946813][ T7315] Call Trace: [ 130.946822][ T7315] [ 130.946830][ T7315] dump_stack_lvl+0x189/0x250 [ 130.946869][ T7315] ? __pfx____ratelimit+0x10/0x10 [ 130.946903][ T7315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.946936][ T7315] ? __pfx__printk+0x10/0x10 [ 130.946962][ T7315] ? fs_reclaim_acquire+0x7d/0x100 [ 130.946997][ T7315] should_fail_ex+0x414/0x560 [ 130.947029][ T7315] prepare_alloc_pages+0x213/0x610 [ 130.947064][ T7315] __alloc_frozen_pages_noprof+0x123/0x370 [ 130.947096][ T7315] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 130.947134][ T7315] ? policy_nodemask+0x27c/0x720 [ 130.947152][ T7315] ? __lock_acquire+0xab9/0xd20 [ 130.947188][ T7315] alloc_pages_mpol+0x232/0x4a0 [ 130.947216][ T7315] vma_alloc_folio_noprof+0xe4/0x200 [ 130.947238][ T7315] ? page_table_check_set+0x18d/0x730 [ 130.947262][ T7315] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 130.947298][ T7315] folio_prealloc+0x30/0x180 [ 130.947322][ T7315] __handle_mm_fault+0x2c88/0x5620 [ 130.947377][ T7315] ? __pfx___handle_mm_fault+0x10/0x10 [ 130.947426][ T7315] ? follow_page_pte+0x8d6/0x14b0 [ 130.947469][ T7315] handle_mm_fault+0x40a/0x8e0 [ 130.947514][ T7315] __get_user_pages+0x1af4/0x30b0 [ 130.947584][ T7315] ? __pfx___get_user_pages+0x10/0x10 [ 130.947621][ T7315] ? __gup_longterm_locked+0x309/0x15b0 [ 130.947653][ T7315] ? down_read_killable+0x1d1/0x350 [ 130.947674][ T7315] ? try_get_folio+0x633/0x660 [ 130.947697][ T7315] __gup_longterm_locked+0x3e3/0x15b0 [ 130.947756][ T7315] gup_fast_fallback+0x1cd4/0x2260 [ 130.947827][ T7315] ? __pfx_gup_fast_fallback+0x10/0x10 [ 130.947861][ T7315] ? rcu_is_watching+0x15/0xb0 [ 130.947898][ T7315] ? is_valid_gup_args+0x11f/0x200 [ 130.947932][ T7315] ? pin_user_pages_fast+0x4d/0xb0 [ 130.947966][ T7315] rds_cmsg_rdma_args+0x8f4/0x1240 [ 130.948033][ T7315] rds_cmsg_send+0x33d/0x5c0 [ 130.948073][ T7315] rds_sendmsg+0x1129/0x1f00 [ 130.948116][ T7315] ? __pfx_rds_sendmsg+0x10/0x10 [ 130.948138][ T7315] ? aa_sk_perm+0x81e/0x950 [ 130.948168][ T7315] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.948190][ T7315] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 130.948228][ T7315] ? aa_sock_msg_perm+0x94/0x160 [ 130.948257][ T7315] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 130.948283][ T7315] ? __pfx_rds_sendmsg+0x10/0x10 [ 130.948309][ T7315] __sock_sendmsg+0x219/0x270 [ 130.948335][ T7315] ____sys_sendmsg+0x505/0x830 [ 130.948372][ T7315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.948413][ T7315] ? import_iovec+0x74/0xa0 [ 130.948438][ T7315] ___sys_sendmsg+0x21f/0x2a0 [ 130.948471][ T7315] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.948543][ T7315] ? __fget_files+0x2a/0x420 [ 130.948565][ T7315] ? __fget_files+0x3a0/0x420 [ 130.948607][ T7315] __x64_sys_sendmsg+0x19b/0x260 [ 130.948641][ T7315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.948695][ T7315] ? __pfx_ksys_write+0x10/0x10 [ 130.948711][ T7315] ? rcu_is_watching+0x15/0xb0 [ 130.948748][ T7315] ? do_syscall_64+0xbe/0x3b0 [ 130.948772][ T7315] do_syscall_64+0xfa/0x3b0 [ 130.948790][ T7315] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.948821][ T7315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.948841][ T7315] ? clear_bhb_loop+0x60/0xb0 [ 130.948866][ T7315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.948885][ T7315] RIP: 0033:0x7fb826f8e929 [ 130.948903][ T7315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.948920][ T7315] RSP: 002b:00007fb827e3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.948942][ T7315] RAX: ffffffffffffffda RBX: 00007fb8271b5fa0 RCX: 00007fb826f8e929 [ 130.948956][ T7315] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 130.948969][ T7315] RBP: 00007fb827e3a090 R08: 0000000000000000 R09: 0000000000000000 [ 130.948999][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.949011][ T7315] R13: 0000000000000000 R14: 00007fb8271b5fa0 R15: 00007ffcb6298e08 [ 130.949043][ T7315] [ 131.688107][ T7334] syz_tun: entered allmulticast mode [ 131.738656][ T7334] syz_tun: left allmulticast mode [ 132.116812][ T7352] macvtap0: entered promiscuous mode [ 132.125940][ T7352] macvtap0: entered allmulticast mode [ 132.384780][ T7363] netpci0: tun_chr_ioctl cmd 1074025681 [ 132.438298][ T7372] syz_tun: entered allmulticast mode [ 132.449511][ T7372] syz_tun: left allmulticast mode [ 132.754137][ T7387] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 132.827104][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.839657][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.906499][ T7399] syz_tun: entered allmulticast mode [ 132.916527][ T7399] syz_tun: left allmulticast mode [ 132.957893][ T7403] netlink: 'syz.4.531': attribute type 3 has an invalid length. [ 132.966148][ T7402] __nla_validate_parse: 10 callbacks suppressed [ 132.966166][ T7402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 133.034765][ T7403] gretap1: entered promiscuous mode [ 133.042603][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 133.043621][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 133.327204][ T7418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 133.350218][ T7418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.538'. [ 133.383104][ T7418] FAULT_INJECTION: forcing a failure. [ 133.383104][ T7418] name failslab, interval 1, probability 0, space 0, times 0 [ 133.418597][ T7418] CPU: 1 UID: 0 PID: 7418 Comm: syz.0.538 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 133.418629][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.418641][ T7418] Call Trace: [ 133.418649][ T7418] [ 133.418659][ T7418] dump_stack_lvl+0x189/0x250 [ 133.418699][ T7418] ? __pfx____ratelimit+0x10/0x10 [ 133.418734][ T7418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.418767][ T7418] ? __pfx__printk+0x10/0x10 [ 133.418798][ T7418] ? __pfx___might_resched+0x10/0x10 [ 133.418830][ T7418] ? fs_reclaim_acquire+0x7d/0x100 [ 133.418861][ T7418] should_fail_ex+0x414/0x560 [ 133.418893][ T7418] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 133.418923][ T7418] should_failslab+0xa8/0x100 [ 133.418948][ T7418] __kvmalloc_node_noprof+0x161/0x5f0 [ 133.418971][ T7418] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 133.419030][ T7418] rhashtable_init_noprof+0x4ee/0xbb0 [ 133.419070][ T7418] br_dev_init+0x29/0x490 [ 133.419107][ T7418] register_netdevice+0x6bf/0x1ae0 [ 133.419148][ T7418] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 133.419170][ T7418] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 133.419189][ T7418] ? trace_kmalloc+0x1f/0xd0 [ 133.419208][ T7418] ? __pfx_register_netdevice+0x10/0x10 [ 133.419246][ T7418] ? validate_linkmsg+0x765/0x950 [ 133.419277][ T7418] br_dev_newlink+0x6a/0x140 [ 133.419308][ T7418] ? rtnl_newlink_create+0x2fd/0xb00 [ 133.419335][ T7418] ? __pfx_br_dev_newlink+0x10/0x10 [ 133.419370][ T7418] rtnl_newlink_create+0x310/0xb00 [ 133.419412][ T7418] ? __pfx_aa_get_newest_label+0x10/0x10 [ 133.419444][ T7418] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 133.419470][ T7418] ? rtnl_newlink+0x8db/0x1c70 [ 133.419498][ T7418] ? __pfx___mutex_lock+0x10/0x10 [ 133.419531][ T7418] ? ns_capable+0x8a/0xf0 [ 133.419568][ T7418] rtnl_newlink+0x16d6/0x1c70 [ 133.419601][ T7418] ? netlink_sendmsg+0x805/0xb30 [ 133.419641][ T7418] ? __pfx_rtnl_newlink+0x10/0x10 [ 133.419695][ T7418] ? kasan_quarantine_put+0xdd/0x220 [ 133.419726][ T7418] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.419765][ T7418] ? nlmon_xmit+0xb0/0x100 [ 133.419783][ T7418] ? kmem_cache_free+0x18f/0x400 [ 133.419812][ T7418] ? __local_bh_enable_ip+0x12d/0x1c0 [ 133.419844][ T7418] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.419877][ T7418] ? __local_bh_enable_ip+0x12d/0x1c0 [ 133.419908][ T7418] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 133.419945][ T7418] ? __dev_queue_xmit+0x27e/0x3a70 [ 133.419990][ T7418] ? __lock_acquire+0xab9/0xd20 [ 133.420044][ T7418] ? __pfx_rtnl_newlink+0x10/0x10 [ 133.420069][ T7418] rtnetlink_rcv_msg+0x7cf/0xb70 [ 133.420099][ T7418] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 133.420124][ T7418] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.420147][ T7418] ? ref_tracker_free+0x63a/0x7d0 [ 133.420173][ T7418] ? __copy_skb_header+0xa7/0x550 [ 133.420207][ T7418] ? __pfx_ref_tracker_free+0x10/0x10 [ 133.420235][ T7418] ? __skb_clone+0x63/0x7a0 [ 133.420274][ T7418] netlink_rcv_skb+0x205/0x470 [ 133.420301][ T7418] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.420329][ T7418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.420369][ T7418] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.420400][ T7418] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.420432][ T7418] netlink_unicast+0x758/0x8d0 [ 133.420468][ T7418] netlink_sendmsg+0x805/0xb30 [ 133.420505][ T7418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.420536][ T7418] ? aa_sock_msg_perm+0x94/0x160 [ 133.420565][ T7418] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.420592][ T7418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.420619][ T7418] __sock_sendmsg+0x219/0x270 [ 133.420645][ T7418] ____sys_sendmsg+0x52d/0x830 [ 133.420682][ T7418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.420724][ T7418] ? import_iovec+0x74/0xa0 [ 133.420749][ T7418] ___sys_sendmsg+0x21f/0x2a0 [ 133.420783][ T7418] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.420856][ T7418] ? __fget_files+0x2a/0x420 [ 133.420878][ T7418] ? __fget_files+0x3a0/0x420 [ 133.420914][ T7418] __sys_sendmmsg+0x227/0x430 [ 133.420952][ T7418] ? __pfx___sys_sendmmsg+0x10/0x10 [ 133.420979][ T7418] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 133.421031][ T7418] ? ksys_write+0x22a/0x250 [ 133.421054][ T7418] ? __pfx_ksys_write+0x10/0x10 [ 133.421070][ T7418] ? rcu_is_watching+0x15/0xb0 [ 133.421111][ T7418] __x64_sys_sendmmsg+0xa0/0xc0 [ 133.421144][ T7418] do_syscall_64+0xfa/0x3b0 [ 133.421164][ T7418] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.421196][ T7418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.421217][ T7418] ? clear_bhb_loop+0x60/0xb0 [ 133.421243][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.421263][ T7418] RIP: 0033:0x7fb826f8e929 [ 133.421282][ T7418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.421300][ T7418] RSP: 002b:00007fb827e3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.421322][ T7418] RAX: ffffffffffffffda RBX: 00007fb8271b5fa0 RCX: 00007fb826f8e929 [ 133.421338][ T7418] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000003 [ 133.421351][ T7418] RBP: 00007fb827e3a090 R08: 0000000000000000 R09: 0000000000000000 [ 133.421364][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.421376][ T7418] R13: 0000000000000000 R14: 00007fb8271b5fa0 R15: 00007ffcb6298e08 [ 133.421417][ T7418] [ 133.566068][ T7401] infiniband syz0: set down [ 133.742007][ T7422] warning: `syz.3.537' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.764180][ T7401] infiniband syz0: added bond_slave_1 [ 133.962208][ T7401] syz0: rxe_create_cq: returned err = -12 [ 133.968375][ T7401] infiniband syz0: Couldn't create ib_mad CQ [ 133.976305][ T7401] infiniband syz0: Couldn't open port 1 [ 134.067242][ T7401] RDS/IB: syz0: added [ 134.083398][ T7401] smc: adding ib device syz0 with port count 1 [ 134.089839][ T7401] smc: ib device syz0 port 1 has pnetid [ 134.149732][ T7432] syz_tun: entered allmulticast mode [ 134.174457][ T7432] syz_tun: left allmulticast mode [ 134.300381][ T7438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.547'. [ 134.377501][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 134.569147][ T7446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.550'. [ 134.756330][ T3902] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 135.079271][ T7443] syz.0.549 (7443) used greatest stack depth: 17992 bytes left [ 135.223222][ T7463] Bluetooth: MGMT ver 1.23 [ 135.325788][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 135.346508][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 135.374461][ T7469] bridge0: port 3(veth0_to_bridge) entered blocking state [ 135.411515][ T7469] bridge0: port 3(veth0_to_bridge) entered disabled state [ 135.439780][ T7469] veth0_to_bridge: entered allmulticast mode [ 135.479556][ T7469] veth0_to_bridge: entered promiscuous mode [ 135.500631][ T7469] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.536606][ T7469] bridge0: port 3(veth0_to_bridge) entered blocking state [ 135.543938][ T7469] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 135.561976][ T7476] netlink: 'syz.3.558': attribute type 6 has an invalid length. [ 135.571099][ T7475] syz_tun: entered allmulticast mode [ 135.587809][ T7475] syz_tun: left allmulticast mode [ 136.024135][ T3902] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 136.354448][ T7505] syz_tun: entered allmulticast mode [ 136.361401][ T7505] syz_tun: left allmulticast mode [ 136.849940][ T7522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.107789][ T7531] Cannot find add_set index 4 as target [ 137.113571][ T7532] syz_tun: entered allmulticast mode [ 137.115028][ T7532] syz_tun: left allmulticast mode [ 137.277732][ T7537] FAULT_INJECTION: forcing a failure. [ 137.277732][ T7537] name failslab, interval 1, probability 0, space 0, times 0 [ 137.297491][ T7537] CPU: 1 UID: 0 PID: 7537 Comm: syz.3.586 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 137.297522][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.297534][ T7537] Call Trace: [ 137.297543][ T7537] [ 137.297551][ T7537] dump_stack_lvl+0x189/0x250 [ 137.297590][ T7537] ? __pfx____ratelimit+0x10/0x10 [ 137.297623][ T7537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.297655][ T7537] ? __pfx__printk+0x10/0x10 [ 137.297681][ T7537] ? __pfx___might_resched+0x10/0x10 [ 137.297713][ T7537] ? fs_reclaim_acquire+0x7d/0x100 [ 137.297743][ T7537] should_fail_ex+0x414/0x560 [ 137.297775][ T7537] should_failslab+0xa8/0x100 [ 137.297799][ T7537] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 137.297821][ T7537] ? page_pool_create_percpu+0x76/0xbe0 [ 137.297860][ T7537] page_pool_create_percpu+0x76/0xbe0 [ 137.297903][ T7537] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 137.297923][ T7537] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 137.297954][ T7537] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 137.297984][ T7537] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 137.298011][ T7537] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.298043][ T7537] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 137.298066][ T7537] ? 0xffffffffa0205540 [ 137.298092][ T7537] ? 0xffffffffa0205540 [ 137.298161][ T7537] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 137.298195][ T7537] ? _copy_from_user+0x94/0xb0 [ 137.298215][ T7537] ? bpf_test_init+0x133/0x170 [ 137.298235][ T7537] ? xdp_convert_md_to_buff+0x5b/0x330 [ 137.298262][ T7537] bpf_prog_test_run_xdp+0x713/0x1000 [ 137.298305][ T7537] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 137.298335][ T7537] ? __fget_files+0x2a/0x420 [ 137.298363][ T7537] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 137.298389][ T7537] bpf_prog_test_run+0x2c7/0x340 [ 137.298422][ T7537] __sys_bpf+0x4a4/0x860 [ 137.298454][ T7537] ? __pfx___sys_bpf+0x10/0x10 [ 137.298495][ T7537] ? ksys_write+0x22a/0x250 [ 137.298516][ T7537] ? __pfx_ksys_write+0x10/0x10 [ 137.298531][ T7537] ? rcu_is_watching+0x15/0xb0 [ 137.298571][ T7537] __x64_sys_bpf+0x7c/0x90 [ 137.298595][ T7537] do_syscall_64+0xfa/0x3b0 [ 137.298614][ T7537] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.298644][ T7537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.298664][ T7537] ? clear_bhb_loop+0x60/0xb0 [ 137.298688][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.298708][ T7537] RIP: 0033:0x7f0c3e18e929 [ 137.298724][ T7537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.298741][ T7537] RSP: 002b:00007f0c3efe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.298762][ T7537] RAX: ffffffffffffffda RBX: 00007f0c3e3b5fa0 RCX: 00007f0c3e18e929 [ 137.298776][ T7537] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 137.298788][ T7537] RBP: 00007f0c3efe6090 R08: 0000000000000000 R09: 0000000000000000 [ 137.298800][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.298811][ T7537] R13: 0000000000000000 R14: 00007f0c3e3b5fa0 R15: 00007ffedc45b6b8 [ 137.298843][ T7537] [ 138.164484][ T7565] __nla_validate_parse: 10 callbacks suppressed [ 138.164504][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.595'. [ 138.201108][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 138.276747][ T7577] syz_tun: entered allmulticast mode [ 138.306338][ T7577] syz_tun: left allmulticast mode [ 138.587021][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.602'. [ 139.034344][ T7609] syz_tun: entered allmulticast mode [ 139.071606][ T7609] syz_tun: left allmulticast mode [ 139.126502][ T7611] netlink: 3 bytes leftover after parsing attributes in process `syz.1.612'. [ 139.162903][ T7611] 0ªX¹¦À: renamed from caif0 [ 139.189594][ T7611] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 139.260239][ T7652] FAULT_INJECTION: forcing a failure. [ 139.260239][ T7652] name failslab, interval 1, probability 0, space 0, times 0 [ 139.274917][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.3.613 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 139.274947][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.274960][ T7652] Call Trace: [ 139.274968][ T7652] [ 139.274977][ T7652] dump_stack_lvl+0x189/0x250 [ 139.275016][ T7652] ? __pfx____ratelimit+0x10/0x10 [ 139.275050][ T7652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.275083][ T7652] ? __pfx__printk+0x10/0x10 [ 139.275114][ T7652] ? __pfx___might_resched+0x10/0x10 [ 139.275145][ T7652] ? fs_reclaim_acquire+0x7d/0x100 [ 139.275175][ T7652] should_fail_ex+0x414/0x560 [ 139.275208][ T7652] should_failslab+0xa8/0x100 [ 139.275233][ T7652] __kmalloc_cache_noprof+0x70/0x3d0 [ 139.275264][ T7652] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 139.275292][ T7652] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 139.275322][ T7652] mptcp_sendmsg_fastopen+0x17d/0x580 [ 139.275353][ T7652] mptcp_sendmsg+0x176c/0x1970 [ 139.275373][ T7652] ? __pfx___might_resched+0x10/0x10 [ 139.275402][ T7652] ? __lock_acquire+0xab9/0xd20 [ 139.275450][ T7652] ? aa_sk_perm+0x81e/0x950 [ 139.275474][ T7652] ? is_bpf_text_address+0x26/0x2b0 [ 139.275508][ T7652] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.275531][ T7652] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 139.275552][ T7652] ? sock_rps_record_flow+0x19/0x410 [ 139.275577][ T7652] ? inet_sendmsg+0x2f4/0x370 [ 139.275602][ T7652] __sock_sendmsg+0x19c/0x270 [ 139.275628][ T7652] ____sys_sendmsg+0x505/0x830 [ 139.275664][ T7652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.275704][ T7652] ? import_iovec+0x74/0xa0 [ 139.275729][ T7652] ___sys_sendmsg+0x21f/0x2a0 [ 139.275761][ T7652] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.275838][ T7652] ? __fget_files+0x2a/0x420 [ 139.275860][ T7652] ? __fget_files+0x3a0/0x420 [ 139.275895][ T7652] __x64_sys_sendmsg+0x19b/0x260 [ 139.275928][ T7652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.275969][ T7652] ? __pfx_ksys_write+0x10/0x10 [ 139.275986][ T7652] ? rcu_is_watching+0x15/0xb0 [ 139.276023][ T7652] ? do_syscall_64+0xbe/0x3b0 [ 139.276048][ T7652] do_syscall_64+0xfa/0x3b0 [ 139.276066][ T7652] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.276097][ T7652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.276117][ T7652] ? clear_bhb_loop+0x60/0xb0 [ 139.276143][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.276162][ T7652] RIP: 0033:0x7f0c3e18e929 [ 139.276181][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.276198][ T7652] RSP: 002b:00007f0c3efe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.276219][ T7652] RAX: ffffffffffffffda RBX: 00007f0c3e3b5fa0 RCX: 00007f0c3e18e929 [ 139.276233][ T7652] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000005 [ 139.276246][ T7652] RBP: 00007f0c3efe6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.276258][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.276270][ T7652] R13: 0000000000000000 R14: 00007f0c3e3b5fa0 R15: 00007ffedc45b6b8 [ 139.276302][ T7652] [ 139.616488][ T7656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.617'. [ 139.751172][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 140.089414][ T7689] syz_tun: entered allmulticast mode [ 140.097346][ T7689] syz_tun: left allmulticast mode [ 140.113073][ T7691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.625'. [ 140.503288][ T7671] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 140.735746][ T7708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 140.887935][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 140.981307][ T7711] FAULT_INJECTION: forcing a failure. [ 140.981307][ T7711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.019748][ T7711] CPU: 0 UID: 0 PID: 7711 Comm: syz.3.635 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 141.019779][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.019792][ T7711] Call Trace: [ 141.019801][ T7711] [ 141.019809][ T7711] dump_stack_lvl+0x189/0x250 [ 141.019847][ T7711] ? __pfx____ratelimit+0x10/0x10 [ 141.019880][ T7711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.019913][ T7711] ? __pfx__printk+0x10/0x10 [ 141.019936][ T7711] ? __might_fault+0xb0/0x130 [ 141.019968][ T7711] should_fail_ex+0x414/0x560 [ 141.020000][ T7711] _copy_from_user+0x2d/0xb0 [ 141.020022][ T7711] ___sys_sendmsg+0x158/0x2a0 [ 141.020056][ T7711] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.020127][ T7711] ? __fget_files+0x2a/0x420 [ 141.020149][ T7711] ? __fget_files+0x3a0/0x420 [ 141.020184][ T7711] __sys_sendmmsg+0x227/0x430 [ 141.020221][ T7711] ? __pfx___sys_sendmmsg+0x10/0x10 [ 141.020248][ T7711] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 141.020299][ T7711] ? ksys_write+0x22a/0x250 [ 141.020320][ T7711] ? __pfx_ksys_write+0x10/0x10 [ 141.020337][ T7711] ? rcu_is_watching+0x15/0xb0 [ 141.020377][ T7711] __x64_sys_sendmmsg+0xa0/0xc0 [ 141.020409][ T7711] do_syscall_64+0xfa/0x3b0 [ 141.020428][ T7711] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.020460][ T7711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.020480][ T7711] ? clear_bhb_loop+0x60/0xb0 [ 141.020506][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.020526][ T7711] RIP: 0033:0x7f0c3e18e929 [ 141.020544][ T7711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.020561][ T7711] RSP: 002b:00007f0c3efe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.020583][ T7711] RAX: ffffffffffffffda RBX: 00007f0c3e3b5fa0 RCX: 00007f0c3e18e929 [ 141.020597][ T7711] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000a [ 141.020610][ T7711] RBP: 00007f0c3efe6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.020623][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.020634][ T7711] R13: 0000000000000000 R14: 00007f0c3e3b5fa0 R15: 00007ffedc45b6b8 [ 141.020666][ T7711] [ 141.242311][ T7666] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 141.337888][ T7719] syz_tun: entered allmulticast mode [ 141.349891][ T7719] syz_tun: left allmulticast mode [ 141.703292][ T7736] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 141.735529][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 141.776852][ T7741] FAULT_INJECTION: forcing a failure. [ 141.776852][ T7741] name failslab, interval 1, probability 0, space 0, times 0 [ 141.847760][ T7741] CPU: 0 UID: 0 PID: 7741 Comm: syz.1.649 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 141.847792][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.847805][ T7741] Call Trace: [ 141.847813][ T7741] [ 141.847823][ T7741] dump_stack_lvl+0x189/0x250 [ 141.847863][ T7741] ? __pfx____ratelimit+0x10/0x10 [ 141.847897][ T7741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.847931][ T7741] ? __pfx__printk+0x10/0x10 [ 141.847961][ T7741] ? __pfx___might_resched+0x10/0x10 [ 141.847992][ T7741] ? fs_reclaim_acquire+0x7d/0x100 [ 141.848023][ T7741] should_fail_ex+0x414/0x560 [ 141.848056][ T7741] should_failslab+0xa8/0x100 [ 141.848081][ T7741] __kmalloc_node_noprof+0xd1/0x4e0 [ 141.848100][ T7741] ? alloc_pages_mpol+0x3cd/0x4a0 [ 141.848119][ T7741] ? allocate_slab+0x17c/0x3b0 [ 141.848157][ T7741] allocate_slab+0x17c/0x3b0 [ 141.848188][ T7741] ___slab_alloc+0xbfc/0x1480 [ 141.848218][ T7741] ? alloc_netdev_mqs+0xa6/0x11e0 [ 141.848246][ T7741] __kvmalloc_node_noprof+0x429/0x5f0 [ 141.848268][ T7741] ? alloc_netdev_mqs+0xa6/0x11e0 [ 141.848291][ T7741] ? __pfx_veth_setup+0x10/0x10 [ 141.848319][ T7741] alloc_netdev_mqs+0xa6/0x11e0 [ 141.848353][ T7741] ? __pfx_veth_setup+0x10/0x10 [ 141.848377][ T7741] ? __pfx_snprintf+0x10/0x10 [ 141.848410][ T7741] rtnl_create_link+0x31f/0xd10 [ 141.848439][ T7741] rtnl_newlink_create+0x25c/0xb00 [ 141.848473][ T7741] ? __mutex_lock+0x51b/0xe80 [ 141.848500][ T7741] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 141.848526][ T7741] ? rtnl_newlink+0x8db/0x1c70 [ 141.848554][ T7741] ? __pfx___mutex_lock+0x10/0x10 [ 141.848586][ T7741] ? ns_capable+0x8a/0xf0 [ 141.848623][ T7741] rtnl_newlink+0x16d6/0x1c70 [ 141.848650][ T7741] ? netlink_sendmsg+0x805/0xb30 [ 141.848690][ T7741] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.848803][ T7741] ? __lock_acquire+0xab9/0xd20 [ 141.848862][ T7741] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.848887][ T7741] rtnetlink_rcv_msg+0x7cf/0xb70 [ 141.848917][ T7741] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 141.848941][ T7741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.848964][ T7741] ? ref_tracker_free+0x63a/0x7d0 [ 141.848990][ T7741] ? __copy_skb_header+0xa7/0x550 [ 141.849024][ T7741] ? __pfx_ref_tracker_free+0x10/0x10 [ 141.849052][ T7741] ? __skb_clone+0x63/0x7a0 [ 141.849091][ T7741] netlink_rcv_skb+0x205/0x470 [ 141.849118][ T7741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.849145][ T7741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.849186][ T7741] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.849211][ T7741] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.849243][ T7741] netlink_unicast+0x758/0x8d0 [ 141.849278][ T7741] netlink_sendmsg+0x805/0xb30 [ 141.849315][ T7741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.849354][ T7741] ? aa_sock_msg_perm+0x94/0x160 [ 141.849384][ T7741] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.849411][ T7741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.849438][ T7741] __sock_sendmsg+0x219/0x270 [ 141.849464][ T7741] ____sys_sendmsg+0x505/0x830 [ 141.849501][ T7741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.849543][ T7741] ? import_iovec+0x74/0xa0 [ 141.849568][ T7741] ___sys_sendmsg+0x21f/0x2a0 [ 141.849602][ T7741] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.849675][ T7741] ? __fget_files+0x2a/0x420 [ 141.849698][ T7741] ? __fget_files+0x3a0/0x420 [ 141.849735][ T7741] __x64_sys_sendmsg+0x19b/0x260 [ 141.849780][ T7741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.849821][ T7741] ? __pfx_ksys_write+0x10/0x10 [ 141.849846][ T7741] ? do_syscall_64+0xbe/0x3b0 [ 141.849871][ T7741] do_syscall_64+0xfa/0x3b0 [ 141.849889][ T7741] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.849920][ T7741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.849940][ T7741] ? clear_bhb_loop+0x60/0xb0 [ 141.849965][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.849985][ T7741] RIP: 0033:0x7fc7fe78e929 [ 141.850003][ T7741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.850020][ T7741] RSP: 002b:00007fc7ff617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.850041][ T7741] RAX: ffffffffffffffda RBX: 00007fc7fe9b5fa0 RCX: 00007fc7fe78e929 [ 141.850056][ T7741] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 141.850068][ T7741] RBP: 00007fc7ff617090 R08: 0000000000000000 R09: 0000000000000000 [ 141.850081][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.850092][ T7741] R13: 0000000000000000 R14: 00007fc7fe9b5fa0 R15: 00007ffe37396628 [ 141.850124][ T7741] [ 142.663738][ T7762] syz_tun: entered allmulticast mode [ 142.671429][ T7762] syz_tun: left allmulticast mode [ 142.808995][ T7767] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 142.961077][ T7778] FAULT_INJECTION: forcing a failure. [ 142.961077][ T7778] name failslab, interval 1, probability 0, space 0, times 0 [ 143.000050][ T7778] CPU: 0 UID: 0 PID: 7778 Comm: syz.1.662 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 143.000081][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.000094][ T7778] Call Trace: [ 143.000102][ T7778] [ 143.000111][ T7778] dump_stack_lvl+0x189/0x250 [ 143.000149][ T7778] ? __pfx____ratelimit+0x10/0x10 [ 143.000182][ T7778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.000215][ T7778] ? __pfx__printk+0x10/0x10 [ 143.000242][ T7778] ? __pfx___might_resched+0x10/0x10 [ 143.000282][ T7778] ? fs_reclaim_acquire+0x7d/0x100 [ 143.000313][ T7778] should_fail_ex+0x414/0x560 [ 143.000346][ T7778] should_failslab+0xa8/0x100 [ 143.000372][ T7778] __kmalloc_noprof+0xcb/0x4f0 [ 143.000391][ T7778] ? tomoyo_encode+0x28b/0x550 [ 143.000427][ T7778] tomoyo_encode+0x28b/0x550 [ 143.000463][ T7778] tomoyo_realpath_from_path+0x58d/0x5d0 [ 143.000495][ T7778] ? tomoyo_domain+0xd9/0x130 [ 143.000532][ T7778] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 143.000557][ T7778] tomoyo_path_number_perm+0x1e8/0x5a0 [ 143.000585][ T7778] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 143.000629][ T7778] ? __lock_acquire+0xab9/0xd20 [ 143.000680][ T7778] ? __fget_files+0x2a/0x420 [ 143.000707][ T7778] ? __fget_files+0x2a/0x420 [ 143.000728][ T7778] ? __fget_files+0x3a0/0x420 [ 143.000749][ T7778] ? __fget_files+0x2a/0x420 [ 143.000778][ T7778] security_file_ioctl+0xcb/0x2d0 [ 143.000808][ T7778] __se_sys_ioctl+0x47/0x170 [ 143.000843][ T7778] do_syscall_64+0xfa/0x3b0 [ 143.000863][ T7778] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.000895][ T7778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.000917][ T7778] ? clear_bhb_loop+0x60/0xb0 [ 143.000942][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.000962][ T7778] RIP: 0033:0x7fc7fe78e929 [ 143.000981][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.000998][ T7778] RSP: 002b:00007fc7ff617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.001020][ T7778] RAX: ffffffffffffffda RBX: 00007fc7fe9b5fa0 RCX: 00007fc7fe78e929 [ 143.001036][ T7778] RDX: 0000200000000000 RSI: 0000000000008983 RDI: 0000000000000004 [ 143.001049][ T7778] RBP: 00007fc7ff617090 R08: 0000000000000000 R09: 0000000000000000 [ 143.001061][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.001073][ T7778] R13: 0000000000000000 R14: 00007fc7fe9b5fa0 R15: 00007ffe37396628 [ 143.001103][ T7778] [ 143.001198][ T7778] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.279008][ T7779] __nla_validate_parse: 5 callbacks suppressed [ 143.279028][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 143.472589][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 143.531131][ T7799] FAULT_INJECTION: forcing a failure. [ 143.531131][ T7799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.544588][ T7799] CPU: 1 UID: 0 PID: 7799 Comm: syz.1.669 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 143.544619][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.544632][ T7799] Call Trace: [ 143.544640][ T7799] [ 143.544649][ T7799] dump_stack_lvl+0x189/0x250 [ 143.544687][ T7799] ? __pfx____ratelimit+0x10/0x10 [ 143.544720][ T7799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.544753][ T7799] ? __pfx__printk+0x10/0x10 [ 143.544776][ T7799] ? __might_fault+0xb0/0x130 [ 143.544809][ T7799] should_fail_ex+0x414/0x560 [ 143.544841][ T7799] _copy_from_user+0x2d/0xb0 [ 143.544863][ T7799] ___sys_sendmsg+0x158/0x2a0 [ 143.544898][ T7799] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.544969][ T7799] ? __fget_files+0x2a/0x420 [ 143.544991][ T7799] ? __fget_files+0x3a0/0x420 [ 143.545026][ T7799] __x64_sys_sendmsg+0x19b/0x260 [ 143.545059][ T7799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.545101][ T7799] ? __pfx_ksys_write+0x10/0x10 [ 143.545118][ T7799] ? rcu_is_watching+0x15/0xb0 [ 143.545156][ T7799] ? do_syscall_64+0xbe/0x3b0 [ 143.545181][ T7799] do_syscall_64+0xfa/0x3b0 [ 143.545200][ T7799] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.545233][ T7799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.545253][ T7799] ? clear_bhb_loop+0x60/0xb0 [ 143.545279][ T7799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.545299][ T7799] RIP: 0033:0x7fc7fe78e929 [ 143.545318][ T7799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.545335][ T7799] RSP: 002b:00007fc7ff5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.545356][ T7799] RAX: ffffffffffffffda RBX: 00007fc7fe9b6080 RCX: 00007fc7fe78e929 [ 143.545371][ T7799] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 143.545384][ T7799] RBP: 00007fc7ff5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 143.545396][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.545408][ T7799] R13: 0000000000000000 R14: 00007fc7fe9b6080 R15: 00007ffe37396628 [ 143.545441][ T7799] [ 143.774772][ T7801] syz_tun: entered allmulticast mode [ 143.781690][ T7801] syz_tun: left allmulticast mode [ 143.870017][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 144.151599][ T7818] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 144.235303][ T7822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'. [ 144.317287][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 144.376231][ T7826] x_tables: duplicate underflow at hook 4 [ 144.388624][ T7832] syz_tun: entered allmulticast mode [ 144.395467][ T7832] syz_tun: left allmulticast mode [ 144.695231][ T7849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.688'. [ 144.726559][ T7845] netlink: 68 bytes leftover after parsing attributes in process `syz.2.689'. [ 144.844873][ T7858] netlink: 'syz.4.694': attribute type 2 has an invalid length. [ 144.906345][ T7860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.693'. [ 144.920959][ T7844] delete_channel: no stack [ 144.998169][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 145.075415][ T5841] syz_tun (unregistering): left promiscuous mode [ 145.188283][ T7871] netlink: 'syz.0.701': attribute type 10 has an invalid length. [ 145.240981][ T7871] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 145.319450][ T6748] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.331691][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 145.455063][ T6748] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.527780][ T6748] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.623402][ T7671] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 145.662518][ T6748] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.738880][ T7885] : entered promiscuous mode [ 145.824066][ T7888] netlink: 'syz.0.708': attribute type 11 has an invalid length. [ 146.028032][ T6748] veth0_to_bridge: left allmulticast mode [ 146.039863][ T6748] veth0_to_bridge: left promiscuous mode [ 146.046984][ T6748] bridge0: port 3(veth0_to_bridge) entered disabled state [ 146.123115][ T6748] bridge_slave_1: left allmulticast mode [ 146.128904][ T6748] bridge_slave_1: left promiscuous mode [ 146.162498][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.183995][ T6748] bridge_slave_0: left allmulticast mode [ 146.189778][ T6748] bridge_slave_0: left promiscuous mode [ 146.217020][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.276035][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.288795][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.313049][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.333391][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.342305][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.441922][ T6748] ip6gretap0 (unregistering): left promiscuous mode [ 146.776491][ T6748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.788564][ T6748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.798810][ T6748] bond0 (unregistering): Released all slaves [ 146.817323][ T6748] bond1 (unregistering): Released all slaves [ 146.922250][ T7671] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 147.008724][ T6748] tipc: Disabling bearer [ 147.020358][ T6748] tipc: Left network mode [ 147.027577][ T7918] netlink: 'syz.2.715': attribute type 10 has an invalid length. [ 147.059642][ T7918] team0: Port device geneve1 added [ 147.072141][ T7665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.093050][ T7665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.132691][ T7665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.141570][ T7665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.334292][ T7927] tipc: Started in network mode [ 147.353054][ T7927] tipc: Node identity fe800000000000000000000000000026, cluster identity 4711 [ 147.385964][ T7927] tipc: Enabling of bearer rejected, failed to enable media [ 148.126244][ T7945] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 148.134376][ T6748] hsr_slave_0: left promiscuous mode [ 148.139801][ T7945] netlink: 'syz.0.725': attribute type 2 has an invalid length. [ 148.148470][ T6748] hsr_slave_1: left promiscuous mode [ 148.157182][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.167430][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.178758][ T6748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.186962][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.220842][ T6748] veth1_macvtap: left promiscuous mode [ 148.229073][ T6748] veth0_macvtap: left promiscuous mode [ 148.235089][ T6748] veth1_vlan: left promiscuous mode [ 148.240777][ T6748] veth0_vlan: left promiscuous mode [ 148.430929][ T5839] Bluetooth: hci4: command tx timeout [ 148.554957][ T7952] __nla_validate_parse: 5 callbacks suppressed [ 148.554978][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.728'. [ 148.899299][ T6748] team0 (unregistering): Port device team_slave_1 removed [ 148.941517][ T6748] team0 (unregistering): Port device team_slave_0 removed [ 149.200081][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 149.753217][ T7905] chnl_net:caif_netlink_parms(): no params data found [ 150.054398][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.066680][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.080306][ T7989] netlink: 44 bytes leftover after parsing attributes in process `syz.4.740'. [ 150.100978][ T7905] bridge_slave_0: entered allmulticast mode [ 150.135771][ T7905] bridge_slave_0: entered promiscuous mode [ 150.184865][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.202010][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.219501][ T7905] bridge_slave_1: entered allmulticast mode [ 150.231667][ T7905] bridge_slave_1: entered promiscuous mode [ 150.277198][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.742'. [ 150.341299][ T8005] x_tables: ip_tables: osf match: only valid for protocol 6 [ 150.462583][ T8013] netlink: 27 bytes leftover after parsing attributes in process `syz.3.744'. [ 150.501993][ T5839] Bluetooth: hci4: command tx timeout [ 150.632355][ T8005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'. [ 150.654398][ T8005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'. [ 150.693170][ T7905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.717068][ T7905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.747192][ T7666] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 150.838149][ T7905] team0: Port device team_slave_0 added [ 150.855083][ T8029] netlink: 32 bytes leftover after parsing attributes in process `syz.3.749'. [ 150.872920][ T7905] team0: Port device team_slave_1 added [ 150.894720][ T8025] xt_CT: No such helper "snmp" [ 150.902903][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 150.945892][ T7905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.962175][ T7905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.990462][ T7905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.004757][ T7905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.013507][ T7905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.046664][ T7905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.179593][ T7905] hsr_slave_0: entered promiscuous mode [ 151.187431][ T7905] hsr_slave_1: entered promiscuous mode [ 151.194228][ T7905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.202236][ T7905] Cannot create hsr debugfs directory [ 151.375789][ T8040] bridge2: entered allmulticast mode [ 151.859434][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.760'. [ 152.383221][ T7905] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.416276][ T7905] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.439379][ T7905] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.469026][ T7905] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.520109][ T8063] syz_tun: entered allmulticast mode [ 152.540382][ T8063] dvmrp1: entered allmulticast mode [ 152.553155][ C1] ------------[ cut here ]------------ [ 152.559075][ C1] WARNING: CPU: 1 PID: 2 at net/ipv4/ipmr.c:2302 ip_mr_output+0xbb1/0xe70 [ 152.567689][ C1] Modules linked in: [ 152.571857][ C1] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 152.583503][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.593602][ C1] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 152.598937][ C1] Code: df e9 63 f6 ff ff e8 fe 71 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 3a 11 4c ff e9 45 f6 ff ff e8 e0 71 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 d2 71 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 152.618621][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010246 [ 152.624787][ C1] RAX: ffffffff89f9ed10 RBX: ffff888027dde640 RCX: ffff8881404d9e00 [ 152.632983][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.640965][ C1] RBP: ffffc90000a08a10 R08: ffff8881404d9e00 R09: 0000000000000004 [ 152.649009][ C1] R10: 0000000000000003 R11: ffffffff89f9e160 R12: 0000000000000010 [ 152.657031][ C1] R13: dffffc0000000000 R14: ffff888078be9d00 R15: 0000000000000000 [ 152.665055][ C1] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 152.674035][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.680652][ C1] CR2: 00007f26edfb4d58 CR3: 0000000075626000 CR4: 00000000003526f0 [ 152.688687][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.696720][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.704768][ C1] Call Trace: [ 152.708072][ C1] [ 152.710942][ C1] ? __pfx_dst_output+0x10/0x10 [ 152.715881][ C1] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 152.721303][ C1] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 152.727465][ C1] ? __pfx_ip_mr_output+0x10/0x10 [ 152.732570][ C1] ? skb_dst+0x4f/0xd0 [ 152.736703][ C1] ? dst_output+0x177/0x1c0 [ 152.741253][ C1] igmp_send_report+0x89e/0xdb0 [ 152.746190][ C1] ? __pfx_igmp_send_report+0x10/0x10 [ 152.751622][ C1] ? igmp_start_timer+0x211/0x2b0 [ 152.756752][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 152.762021][ C1] igmp_timer_expire+0x204/0x510 [ 152.766997][ C1] call_timer_fn+0x17e/0x5f0 [ 152.771599][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 152.777132][ C1] ? call_timer_fn+0xbe/0x5f0 [ 152.781884][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.787048][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.792321][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.797567][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 152.803117][ C1] __run_timer_base+0x61a/0x860 [ 152.808011][ C1] ? ktime_get+0x3e/0x1f0 [ 152.812421][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.817803][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 152.824114][ C1] run_timer_softirq+0xb7/0x180 [ 152.828999][ C1] handle_softirqs+0x286/0x870 [ 152.833852][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 152.838641][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 152.843969][ C1] __irq_exit_rcu+0xca/0x1f0 [ 152.848576][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 152.853844][ C1] irq_exit_rcu+0x9/0x30 [ 152.858125][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 152.863843][ C1] [ 152.866794][ C1] [ 152.869726][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 152.875738][ C1] RIP: 0010:lock_acquire+0x94/0x360 [ 152.880974][ C1] Code: 0f 84 d7 01 00 00 83 3d 49 0c 03 0e 00 0f 84 f0 00 00 00 48 8b b4 24 90 00 00 00 4c 89 ef e8 33 77 85 00 83 3d 2c 0c 03 0e 00 <0f> 84 fa 00 00 00 65 8b 05 2f eb fe 10 85 c0 0f 85 eb 00 00 00 65 [ 152.900621][ C1] RSP: 0018:ffffc90000076d98 EFLAGS: 00000202 [ 152.906744][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4142d4f5c364fe00 [ 152.914770][ C1] RDX: 0000000000000000 RSI: ffffffff81729e02 RDI: 1ffffffff1c27db4 [ 152.922820][ C1] RBP: ffffffff81729de5 R08: 0000000000000000 R09: 0000000000000000 [ 152.930815][ C1] R10: ffffc90000076f58 R11: ffffffff81acf990 R12: 0000000000000002 [ 152.938823][ C1] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000000 [ 152.946831][ C1] ? unwind_next_frame+0xa5/0x2390 [ 152.951988][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 152.958175][ C1] ? unwind_next_frame+0xc2/0x2390 [ 152.963335][ C1] ? lock_acquire+0x8d/0x360 [ 152.967951][ C1] ? unwind_next_frame+0xa5/0x2390 [ 152.973147][ C1] ? copy_process+0x54b/0x3c00 [ 152.977943][ C1] ? unwind_next_frame+0xa5/0x2390 [ 152.983114][ C1] unwind_next_frame+0xc2/0x2390 [ 152.988174][ C1] ? unwind_next_frame+0xa5/0x2390 [ 152.993337][ C1] ? unwind_next_frame+0xa5/0x2390 [ 152.998474][ C1] ? dup_task_struct+0x3e7/0x860 [ 153.003455][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 153.009617][ C1] arch_stack_walk+0x11c/0x150 [ 153.014438][ C1] ? copy_process+0x54b/0x3c00 [ 153.019231][ C1] stack_trace_save+0x9c/0xe0 [ 153.023950][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 153.029351][ C1] save_stack+0xf5/0x1f0 [ 153.033672][ C1] ? __pfx_save_stack+0x10/0x10 [ 153.038549][ C1] ? post_alloc_hook+0x240/0x2a0 [ 153.043635][ C1] ? get_page_from_freelist+0x21e4/0x22c0 [ 153.049386][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 153.055403][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 153.060431][ C1] ? alloc_pages_noprof+0xa9/0x190 [ 153.065579][ C1] ? __vmalloc_node_range_noprof+0x97d/0x12f0 [ 153.071661][ C1] ? __vmalloc_node_noprof+0xc2/0x110 [ 153.077083][ C1] ? dup_task_struct+0x3e7/0x860 [ 153.082053][ C1] ? copy_process+0x54b/0x3c00 [ 153.086840][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 153.093125][ C1] __set_page_owner+0x8d/0x4a0 [ 153.097905][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 153.103321][ C1] post_alloc_hook+0x240/0x2a0 [ 153.108123][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 153.113834][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 153.119788][ C1] ? prepare_alloc_pages+0x213/0x610 [ 153.125135][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 153.130971][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 153.137383][ C1] ? policy_nodemask+0x27c/0x720 [ 153.142375][ C1] ? __pfx___might_resched+0x10/0x10 [ 153.147703][ C1] alloc_pages_mpol+0x232/0x4a0 [ 153.152609][ C1] alloc_pages_noprof+0xa9/0x190 [ 153.157576][ C1] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 153.163533][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 153.169875][ C1] ? dup_task_struct+0x52/0x860 [ 153.174756][ C1] ? memcpy_and_pad+0x48/0x80 [ 153.179448][ C1] __vmalloc_node_noprof+0xc2/0x110 [ 153.184704][ C1] ? copy_process+0x54b/0x3c00 [ 153.189473][ C1] ? copy_process+0x54b/0x3c00 [ 153.194289][ C1] dup_task_struct+0x3e7/0x860 [ 153.199093][ C1] copy_process+0x54b/0x3c00 [ 153.203773][ C1] ? psi_task_switch+0x39a/0x6d0 [ 153.208719][ C1] ? __switch_to+0xd74/0x1600 [ 153.213461][ C1] ? __lock_acquire+0xab9/0xd20 [ 153.218354][ C1] ? finish_task_switch+0x18b/0x950 [ 153.223603][ C1] ? __pfx_copy_process+0x10/0x10 [ 153.228660][ C1] ? __pfx_kthread+0x10/0x10 [ 153.233281][ C1] kernel_clone+0x21e/0x870 [ 153.237808][ C1] ? rcu_is_watching+0x15/0xb0 [ 153.242656][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 153.247830][ C1] ? __schedule+0x1713/0x4d00 [ 153.252586][ C1] ? __pfx_kthread+0x10/0x10 [ 153.257210][ C1] kernel_thread+0x10c/0x160 [ 153.261864][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 153.267075][ C1] ? __lock_acquire+0xab9/0xd20 [ 153.271988][ C1] ? __pfx_kthread+0x10/0x10 [ 153.276631][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 153.281887][ C1] kthreadd+0x575/0x770 [ 153.286082][ C1] ? kthreadd+0x30b/0x770 [ 153.290513][ C1] ? __pfx_kthreadd+0x10/0x10 [ 153.295256][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.300470][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.305759][ C1] ? __pfx_kthreadd+0x10/0x10 [ 153.310462][ C1] ret_from_fork+0x3fc/0x770 [ 153.315103][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 153.320286][ C1] ? __switch_to_asm+0x39/0x70 [ 153.325097][ C1] ? __switch_to_asm+0x33/0x70 [ 153.329890][ C1] ? __pfx_kthreadd+0x10/0x10 [ 153.334600][ C1] ret_from_fork_asm+0x1a/0x30 [ 153.339398][ C1] [ 153.342462][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.349764][ C1] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 153.361316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.371583][ C1] Call Trace: [ 153.374887][ C1] [ 153.377752][ C1] dump_stack_lvl+0x99/0x250 [ 153.382364][ C1] ? __asan_memcpy+0x40/0x70 [ 153.386988][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.392213][ C1] ? __pfx__printk+0x10/0x10 [ 153.396839][ C1] panic+0x2db/0x790 [ 153.400752][ C1] ? __pfx_panic+0x10/0x10 [ 153.405189][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 153.410436][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 153.415414][ C1] __warn+0x31b/0x4b0 [ 153.419410][ C1] ? ip_mr_output+0xbb1/0xe70 [ 153.424100][ C1] ? ip_mr_output+0xbb1/0xe70 [ 153.428787][ C1] report_bug+0x2be/0x4f0 [ 153.433129][ C1] ? ip_mr_output+0xbb1/0xe70 [ 153.437830][ C1] ? ip_mr_output+0xbb1/0xe70 [ 153.442537][ C1] ? ip_mr_output+0xbb3/0xe70 [ 153.447219][ C1] handle_bug+0x84/0x160 [ 153.451466][ C1] exc_invalid_op+0x1a/0x50 [ 153.455991][ C1] asm_exc_invalid_op+0x1a/0x20 [ 153.460885][ C1] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 153.466188][ C1] Code: df e9 63 f6 ff ff e8 fe 71 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 3a 11 4c ff e9 45 f6 ff ff e8 e0 71 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 d2 71 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 153.485798][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010246 [ 153.491874][ C1] RAX: ffffffff89f9ed10 RBX: ffff888027dde640 RCX: ffff8881404d9e00 [ 153.499846][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.507837][ C1] RBP: ffffc90000a08a10 R08: ffff8881404d9e00 R09: 0000000000000004 [ 153.515836][ C1] R10: 0000000000000003 R11: ffffffff89f9e160 R12: 0000000000000010 [ 153.523822][ C1] R13: dffffc0000000000 R14: ffff888078be9d00 R15: 0000000000000000 [ 153.531819][ C1] ? __pfx_ip_mr_output+0x10/0x10 [ 153.536878][ C1] ? ip_mr_output+0xbb0/0xe70 [ 153.541577][ C1] ? __pfx_dst_output+0x10/0x10 [ 153.546439][ C1] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 153.551831][ C1] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 153.557943][ C1] ? __pfx_ip_mr_output+0x10/0x10 [ 153.562989][ C1] ? skb_dst+0x4f/0xd0 [ 153.567082][ C1] ? dst_output+0x177/0x1c0 [ 153.571627][ C1] igmp_send_report+0x89e/0xdb0 [ 153.576495][ C1] ? __pfx_igmp_send_report+0x10/0x10 [ 153.581883][ C1] ? igmp_start_timer+0x211/0x2b0 [ 153.586930][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 153.592139][ C1] igmp_timer_expire+0x204/0x510 [ 153.597093][ C1] call_timer_fn+0x17e/0x5f0 [ 153.601789][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 153.607278][ C1] ? call_timer_fn+0xbe/0x5f0 [ 153.611974][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 153.617191][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.622399][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.627618][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 153.633087][ C1] __run_timer_base+0x61a/0x860 [ 153.637948][ C1] ? ktime_get+0x3e/0x1f0 [ 153.642299][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 153.647674][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 153.653944][ C1] run_timer_softirq+0xb7/0x180 [ 153.658832][ C1] handle_softirqs+0x286/0x870 [ 153.663610][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 153.668389][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 153.673692][ C1] __irq_exit_rcu+0xca/0x1f0 [ 153.678296][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 153.683508][ C1] irq_exit_rcu+0x9/0x30 [ 153.687759][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 153.693401][ C1] [ 153.696338][ C1] [ 153.699264][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.705257][ C1] RIP: 0010:lock_acquire+0x94/0x360 [ 153.710531][ C1] Code: 0f 84 d7 01 00 00 83 3d 49 0c 03 0e 00 0f 84 f0 00 00 00 48 8b b4 24 90 00 00 00 4c 89 ef e8 33 77 85 00 83 3d 2c 0c 03 0e 00 <0f> 84 fa 00 00 00 65 8b 05 2f eb fe 10 85 c0 0f 85 eb 00 00 00 65 [ 153.730142][ C1] RSP: 0018:ffffc90000076d98 EFLAGS: 00000202 [ 153.736218][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4142d4f5c364fe00 [ 153.744192][ C1] RDX: 0000000000000000 RSI: ffffffff81729e02 RDI: 1ffffffff1c27db4 [ 153.752177][ C1] RBP: ffffffff81729de5 R08: 0000000000000000 R09: 0000000000000000 [ 153.760171][ C1] R10: ffffc90000076f58 R11: ffffffff81acf990 R12: 0000000000000002 [ 153.768151][ C1] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000000 [ 153.776233][ C1] ? unwind_next_frame+0xa5/0x2390 [ 153.781377][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 153.787555][ C1] ? unwind_next_frame+0xc2/0x2390 [ 153.792692][ C1] ? lock_acquire+0x8d/0x360 [ 153.797296][ C1] ? unwind_next_frame+0xa5/0x2390 [ 153.802430][ C1] ? copy_process+0x54b/0x3c00 [ 153.807225][ C1] ? unwind_next_frame+0xa5/0x2390 [ 153.812374][ C1] unwind_next_frame+0xc2/0x2390 [ 153.817327][ C1] ? unwind_next_frame+0xa5/0x2390 [ 153.822449][ C1] ? unwind_next_frame+0xa5/0x2390 [ 153.827570][ C1] ? dup_task_struct+0x3e7/0x860 [ 153.832512][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 153.838669][ C1] arch_stack_walk+0x11c/0x150 [ 153.843439][ C1] ? copy_process+0x54b/0x3c00 [ 153.848204][ C1] stack_trace_save+0x9c/0xe0 [ 153.852888][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 153.858294][ C1] save_stack+0xf5/0x1f0 [ 153.862545][ C1] ? __pfx_save_stack+0x10/0x10 [ 153.867397][ C1] ? post_alloc_hook+0x240/0x2a0 [ 153.872333][ C1] ? get_page_from_freelist+0x21e4/0x22c0 [ 153.878058][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 153.884041][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 153.889065][ C1] ? alloc_pages_noprof+0xa9/0x190 [ 153.894172][ C1] ? __vmalloc_node_range_noprof+0x97d/0x12f0 [ 153.900237][ C1] ? __vmalloc_node_noprof+0xc2/0x110 [ 153.905612][ C1] ? dup_task_struct+0x3e7/0x860 [ 153.910571][ C1] ? copy_process+0x54b/0x3c00 [ 153.915338][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 153.921596][ C1] __set_page_owner+0x8d/0x4a0 [ 153.926366][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 153.931763][ C1] post_alloc_hook+0x240/0x2a0 [ 153.936532][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 153.942134][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 153.948032][ C1] ? prepare_alloc_pages+0x213/0x610 [ 153.953342][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 153.959180][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 153.965521][ C1] ? policy_nodemask+0x27c/0x720 [ 153.970460][ C1] ? __pfx___might_resched+0x10/0x10 [ 153.975760][ C1] alloc_pages_mpol+0x232/0x4a0 [ 153.980619][ C1] alloc_pages_noprof+0xa9/0x190 [ 153.985562][ C1] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 153.991574][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 153.997903][ C1] ? dup_task_struct+0x52/0x860 [ 154.002759][ C1] ? memcpy_and_pad+0x48/0x80 [ 154.007501][ C1] __vmalloc_node_noprof+0xc2/0x110 [ 154.012786][ C1] ? copy_process+0x54b/0x3c00 [ 154.017557][ C1] ? copy_process+0x54b/0x3c00 [ 154.022323][ C1] dup_task_struct+0x3e7/0x860 [ 154.027092][ C1] copy_process+0x54b/0x3c00 [ 154.031701][ C1] ? psi_task_switch+0x39a/0x6d0 [ 154.036653][ C1] ? __switch_to+0xd74/0x1600 [ 154.041333][ C1] ? __lock_acquire+0xab9/0xd20 [ 154.046192][ C1] ? finish_task_switch+0x18b/0x950 [ 154.051394][ C1] ? __pfx_copy_process+0x10/0x10 [ 154.056441][ C1] ? __pfx_kthread+0x10/0x10 [ 154.061143][ C1] kernel_clone+0x21e/0x870 [ 154.065651][ C1] ? rcu_is_watching+0x15/0xb0 [ 154.070428][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 154.075451][ C1] ? __schedule+0x1713/0x4d00 [ 154.080153][ C1] ? __pfx_kthread+0x10/0x10 [ 154.084753][ C1] kernel_thread+0x10c/0x160 [ 154.089366][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 154.094499][ C1] ? __lock_acquire+0xab9/0xd20 [ 154.099370][ C1] ? __pfx_kthread+0x10/0x10 [ 154.103995][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 154.109230][ C1] kthreadd+0x575/0x770 [ 154.113393][ C1] ? kthreadd+0x30b/0x770 [ 154.117722][ C1] ? __pfx_kthreadd+0x10/0x10 [ 154.122405][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.127616][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.132819][ C1] ? __pfx_kthreadd+0x10/0x10 [ 154.137496][ C1] ret_from_fork+0x3fc/0x770 [ 154.142106][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 154.147230][ C1] ? __switch_to_asm+0x39/0x70 [ 154.152005][ C1] ? __switch_to_asm+0x33/0x70 [ 154.156789][ C1] ? __pfx_kthreadd+0x10/0x10 [ 154.161476][ C1] ret_from_fork_asm+0x1a/0x30 [ 154.166263][ C1] [ 154.169611][ C1] Kernel Offset: disabled [ 154.173941][ C1] Rebooting in 86400 seconds..