last executing test programs: 5.576082942s ago: executing program 4 (id=2408): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$sock_int(r0, 0x1, 0x45, 0x0, &(0x7f0000000080)) (fail_nth: 1) 5.145856281s ago: executing program 4 (id=2412): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x4) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15", 0x9c}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d00010000000000000000000400008004"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) sendfile(r3, r5, &(0x7f0000000240)=0x6, 0x9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xfffffffffffffe5d, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x4040000) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x258, 0x19, 0x0, 0x0, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0x1f8, 0x258, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x3d40, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000001fff000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd00008e4100030006010000418e01400004fcff", 0x58}], 0x1) 4.21794016s ago: executing program 4 (id=2422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x8080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffff00, @local, 0x13}, 0x1c) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040844}, 0x4004040) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x7, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, 0x1, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xa, [@ptr={0xc, 0x0, 0x0, 0x2, 0x1}, @struct={0x3, 0x2, 0x0, 0x4, 0x1, 0x10, [{0x5, 0x7, 0x9}, {0xd, 0x3, 0x6}, {0x8, 0x4, 0x4}, {0x0, 0x0, 0x9}]}, @restrict={0x3}]}, {0x0, [0x0, 0x5f, 0x61, 0x2e, 0x5f, 0x2e, 0x5f, 0x0]}}, &(0x7f0000000180)=""/123, 0x76, 0x83, 0x0, 0x8af5, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r5, 0x20, &(0x7f00000003c0)={&(0x7f0000000240)=""/207, 0xcf, 0x0, &(0x7f0000000340)=""/107, 0x6b}}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="001cca0a45cbeb5bfbdc9786dbff03000400020001000000000000000000a3"], 0x20}}, 0x0) 3.048676629s ago: executing program 2 (id=2430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 2.842731743s ago: executing program 0 (id=2433): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.7521107s ago: executing program 0 (id=2434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg(r4, &(0x7f0000001500)={&(0x7f0000000140)=@ll={0x11, 0x1, r2, 0x1, 0x5, 0x6, @random="5a0a3b74104d"}, 0x80, &(0x7f0000001480)=[{&(0x7f00000001c0)="ea001feb636c3cc1e1f8e593e299fcd9fe45337dc3474bc202bc544e313df6a6cd5f16ec576465597748b6be8b0a28b22cfee8b802ea3f01b17866e11f504749d554461e11d5e8ae8c708ca970081dc6d0287b3330869a", 0x57}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000080)}, {&(0x7f0000001240)="291426f0469a96a3f33088aa2913445e96b6f4a22a95f093ad72033bf3b422f45f163a9792c273a442105eb3760b0139c534cbf623a70a4c595c73100dcffbabac2cdac951f7e0f6b38caa88cfdc82452dc9d0ff0be888f4cc5ee889c80d92f01d43497e65fa5aa71a381284b4852998687f6a9ceee4f42f0fd0222cc0c3953df1dad6128ef5d43db9a9e6fe786ecca258ca6d8e1710c9dc156cde1f58e80870d2719a7461e0a790599fab0636f383bfedbe35be6fd5f4a4faa89153c9cdb14f0feadf41a2a06ff5f632273fd57a87c18ddb759227a90abff79ce22af689b105f68cd619c23aa8accf8217adf498d9dd", 0xf0}, {&(0x7f0000001340)="53b99063532fdaf2cede694ff3d93683db5699ce7069f04ed5b4407ecb111f652cd19b7e6503dabf7d98790c1ad1fa8a5aeabda5cb706b7f32f439c21efa0f8e5142eaad6b3763f228b5766295afd2c5482d974e8f4eb4dfce7bafa5cac3c63c2737aaf25e1a2f8791722bdaedb4b31b37553ce41798a029327bae29974d34ebac9ea5db5cae8d50715089daa74f30adaaa684b279fe4aff93eac954a455e8cf811ad23af342ea30470d8c0d953447d41046174c4d822000de7948c59f85c4f139ba2ed6c2e6e4b91cf65bab", 0xcc}, {&(0x7f0000001440)="73939260450cc37caac56a92a3", 0xd}], 0x6, &(0x7f0000001580)=[{0x1010, 0x0, 0x8, "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"}, {0x1010, 0x0, 0x200, "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"}, {0x18, 0x116, 0x7f, "fbb4d509d7"}, {0x98, 0x10f, 0x1ff, "9a210d2fc6111eda98f2b1e1d37d049de7015c251872bea1b478e8b0d6b34ddf6e428dbc6413b907e7b3387adde4c002ae3ce7d5f006d813ad80a44d0883eb6bb89a98e7d37a7776fa0e64dd7173d4619b3cdca0485940c959b0b2f39912520fd2104f0f302351227cd74460db66440a31ef9b7f6ef5b83c758a47d76e27aaf6d462d84512771b09"}], 0x20d0}, 0x8890) (async) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=r2], 0x44}}, 0x0) 2.711728077s ago: executing program 2 (id=2435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002006c"], 0x30}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x65, 0x0, 0x1, 0x7}, 0x28) sendto$unix(r2, 0x0, 0x0, 0x404c880, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff003c3c00fe8000000000000000000000000000aaff0200000000000000000000000000010004000000000000c91000000000000000000000001b"], 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)="65687a2b658489f95c65083fdfca254257b5000de3a73cad5820d4c7ed9838298218d21d35c4827762a8ff818b8b9bcbb14918c976cd70c98f1f511cb99eb85588de82150d9975a307dfa90a46e172e24028489d07d781a16ce1de75be93b9278ba762728757aa07b0c6afb0efe510b4ac361189987220dc35795680ed182edc6a79987a0bb7e3c6dee447f59e2c7fb876dee53cedefa5c4c880c6b8de3ad33a7c78141ece19239049e6c785495ecc8f7dd8bdfab0130e95ee29cd4ae8f98e", 0xbf}, {0x0}], 0x3, 0x0, 0x0, 0x404c050}], 0x1, 0x0) r4 = socket$inet(0x2, 0xa, 0xfffffffe) getsockopt$inet_opts(r4, 0x0, 0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24d973c4c8c84f63}, 0x40080) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x540, 0x180, 0x180, 0x288, 0x98, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x61}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{}, {0xc}}]}, @TTL={0x28}}, {{@ip={@remote, @local, 0xffffff00, 0xffffff00, 'veth1_vlan\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0x0, 0x5c}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x6]}}}, @common=@addrtype={{}, {0x100, 0x900}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x9}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298b2d52f8acf654) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 2.684882289s ago: executing program 4 (id=2436): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x1200, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r8, &(0x7f00000002c0)="b47db2924076e75e", &(0x7f0000000080)=""/34}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd, '\x00', 0x0, r5, 0x0, 0x3}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000005680)={0x50, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x50}}, 0x40000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r11, r10, 0x0, r2}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno\x00', 0xb) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001086970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.616008353s ago: executing program 0 (id=2437): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000000206010200"/19], 0x4c}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x30, 0x61, 0x61, 0x4f]}}, &(0x7f00000001c0)=""/199, 0x1e, 0xc7, 0x1, 0x3, 0x10000}, 0x28) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000340)="ad4add7b05aa7618a9a6ca4ca0e606e6d7f26dd535c8e8d3e2c679285c6483da3d265ba2865c3891685846261c2611bd61f009cb159aafcd1f7b7d70cc8300dc6c4bfd3dff0a642b6d5bba1bd995597ac53cbbc238c1fc535c59c259b7e95745959beaa36b15d34ffe2eceb58857924b0d811d0d799b265f6f6ede5317a8d3cbdd771078913476167c094bc2e0c0f6fc35186e165a1e3dea326deffd", 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) 2.458146572s ago: executing program 2 (id=2440): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1805}, 0x20000080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f00000000c0)="20e1b5d4ca774ff66b795ea456d05ae0c6aa", 0x12) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) close(r6) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$SIOCSIFHWADDR(r4, 0xff01, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e22, 0x7, @loopback, 0x9}, {0xa, 0x4e21, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd0f2}, 0x1, {[0x4, 0x8bd52, 0x1000, 0x6, 0x9, 0x1, 0x0, 0x378daea3]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000007ef1e008100000005001100f5000000"], 0x30}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000001340)={0x40}, 0x10) sendmsg$tipc(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) shutdown(r11, 0x2) 1.940169765s ago: executing program 3 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0xfff0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) 1.852274824s ago: executing program 4 (id=2444): pipe(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) splice(r0, 0x0, r0, 0x0, 0x0, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x1800, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.691757107s ago: executing program 3 (id=2445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 1.596174669s ago: executing program 0 (id=2446): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @link_key_neg_reply={{0x40c, 0x6}}}, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="6100330080000000ffffffffffff080211"], 0x80}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.542731676s ago: executing program 3 (id=2447): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/7, 0x7}, {0x0}], 0x2}, 0x1}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x6, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$inet(0x2, 0xa, 0x7) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "aa77db7e6c78032f", "4f5601d1be7bb91c51f9476829711dd8", "1431717d", "497864fc1ccf0705"}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r4, 0x1, 0xc, &(0x7f0000001d00)=""/155, &(0x7f0000001dc0)=0x9b) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) 1.413168496s ago: executing program 1 (id=2448): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000001940)) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)}}], 0x2, 0x8000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, &(0x7f0000000340)={0x0}, &(0x7f0000000480)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r4, 0x0, 0x4, &(0x7f0000000040)="440910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000) (fail_nth: 9) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x4010, 0xffffffffffffffff, 0x60b98000) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r2, 0x4000}, 0x8) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 1.403545189s ago: executing program 4 (id=2449): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20048010) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040)) 1.398016045s ago: executing program 0 (id=2450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002006c"], 0x30}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x65, 0x0, 0x1, 0x7}, 0x28) sendto$unix(r2, 0x0, 0x0, 0x404c880, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff003c3c00fe8000000000000000000000000000aaff0200000000000000000000000000010004000000000000c91000000000000000000000001b"], 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)="65687a2b658489f95c65083fdfca254257b5000de3a73cad5820d4c7ed9838298218d21d35c4827762a8ff818b8b9bcbb14918c976cd70c98f1f511cb99eb85588de82150d9975a307dfa90a46e172e24028489d07d781a16ce1de75be93b9278ba762728757aa07b0c6afb0efe510b4ac361189987220dc35795680ed182edc6a79987a0bb7e3c6dee447f59e2c7fb876dee53cedefa5c4c880c6b8de3ad33a7c78141ece19239049e6c785495ecc8f7dd8bdfab0130e95ee29cd4ae8f98e", 0xbf}, {0x0}], 0x3, 0x0, 0x0, 0x404c050}], 0x1, 0x0) r4 = socket$inet(0x2, 0xa, 0xfffffffe) getsockopt$inet_opts(r4, 0x0, 0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24d973c4c8c84f63}, 0x40080) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x540, 0x180, 0x180, 0x288, 0x98, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x61}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{}, {0xc}}]}, @TTL={0x28}}, {{@ip={@remote, @local, 0xffffff00, 0xffffff00, 'veth1_vlan\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0x0, 0x5c}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x6]}}}, @common=@addrtype={{}, {0x100, 0x900}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x9}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298b2d52f8acf654) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 1.351100447s ago: executing program 2 (id=2451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) 1.220002729s ago: executing program 3 (id=2452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x0, 0x0}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newrule={0x34, 0x20, 0x301, 0x3, 0x25dfdbfc, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_DST={0x8, 0x1, @private=0xa010102}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2e}]}, 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000140)=""/170, &(0x7f0000000200)=0xaa) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 724.916939ms ago: executing program 0 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="840100001000010000000000000000000a010100000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d26c000000fc0200000000000000000000000000000000000002000000000000000000000000000000000000000100000000000000ed14a1831e02df70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a0001020000000000000000480003006465666c617465000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x184}}, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$kcm(0x2, 0xa, 0x2) sendmmsg(r5, &(0x7f0000002bc0)=[{{&(0x7f00000015c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @mcast1, 0x8}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001640)="c371e927ebe4c749fbe4afa1f51f570492a28e8806574a7159a8d42854d98c278f5f2c9f76e6770f0c58b8850f6f9a74843624cc3de432a794147c9b65327b27c5028e1a41db4ba2eac3ac50520f5e52849c3047e5b76e1dad4771fbfea7c341f9b4ca4402bf90fe92b6d4fd6ed263521ac93a0f90b063d71fd58b27204365ce6a8442ee65ae9f3dd6c6905ac12dcd8002ddb80f01222610cf3557c486ca8dd850b713eb41372c785b765e808ca5422dde625ceb8eb3d08c25dea823fbbfc54c602f4a18baaa245d39eed932f71429f66c71a40fca1cd66c142a2c8ffb1a718ad003e2e95a", 0xe5}, {&(0x7f0000001740)="f77d1d182025c48257183c595fee3ecf56d5e73bd8caa2c5643899fe98a3c8eb870b90584504c3aff97c8c49c1ea37c7d5a860e3da1b1299bce9d76b7cfcd47f61a4b99c016b47c90e6822da37b4ca7c3451d27de12b4c395960f90ed7fbba5bb9e528a5394922df766e4d68f36c6f9573770a12f1971a35add35e7bf58fa4c585caf3d60021e7883d5479f55a08a87a30ec083694d6386a545044ff2a3522c9d023a10cc83b88cb027837fde07044", 0xaf}, {&(0x7f0000001800)}, {&(0x7f0000001840)="b4686f60f0eb59cf4bc8d1634e7554d6c88efa677621e388fef991b7f647830e938bdf6be40258c4b2e1c01e67e390c881aadb4bec74a1196f2c8368b22d19ce2dca583552a6ae34b0b04e8f210e833de38cbc7fbdf67191c83a48cb9cee22878e50e71d197e9cfaa7b3ac429913c2a740850878126b19ac7b5926cb33e6f8d01abf2b22c67e7d5865441af8a74c1cad20e72354a91b4a4874d6969304b3313761b9d0ba8bbd6eaa0f8474509b1d72", 0xaf}, {&(0x7f0000001900)="f08b9ba1a833a77269bdba31f616af2fe5", 0x11}, {0x0}], 0x6}}, {{0x0, 0x0, &(0x7f0000002900)=[{0x0}], 0x1}}, {{&(0x7f0000002940)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000029c0)="34482b8f88b7fda5339c7d2bccf94ff26bcf7d", 0x13}], 0x1, &(0x7f0000002a40)=[{0x50, 0x10d, 0x6, "aeef3b3748dfd4f0adeb30aa15b6680de75e7056d8278c580e3ba81899a97ce56d3a79c2ce3b5018848e57a1581ead35d88d18d60b47d5b2e8869889afe467"}, {0x28, 0x1, 0x1, "69c4894068c78127aaf16d7d77173d19d68de4"}, {0xd0, 0x11, 0xe95, "255bf5a5db31ab8a4ad3a3810e9c34b5b93625e79064e58d2c79452ee12e295075508c90b2c2e59583a9ff39e173836012b5800a28694476914faebe20dbf7e306adfea34ce8b14c3793a7c356567419ed4f5a522f0e3cf6d32516da814ff566579ed6813eedd8d9b268ba74af3a7a60009d519cc021c6fccb20ca5083ea6916f15b29e97f445443fb03d86bdee6dc042cb280f791e40809d0abc79afbceba1e42d20037e00cb0389c21401fbc90fdaa50ff6698e8cc4577f9d475"}], 0x148}}], 0x3, 0x4000000) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x8, @mcast2, 0x6}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000340)={{0x0, 0x0, 0x566f, 0x10001, 0x0, 0x81, 0x3, 0xfffffffe, 0x63f2fbc8, 0x503, 0x5, 0x8000000000000001, 0x6, 0x1, 0xbbfa}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000e80)={{r7, 0xffffffff, 0xf, 0x8, 0x2, 0x3, 0x5, 0x6, 0x6c, 0xffffffff, 0x5, 0x7fffffff, 0x9, 0x2, 0x6}}) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r6, &(0x7f0000000200)="89", 0x3f80) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r3, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 693.200433ms ago: executing program 2 (id=2454): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x810) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007c4f418773797a320b"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r7], 0x50}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x80000) recvmmsg(r10, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x2, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}]}, 0x190) socket$nl_route(0x10, 0x3, 0x0) 540.154091ms ago: executing program 1 (id=2455): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bridge_slave_1\x00') r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r2, 0x891e, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00'}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 478.469348ms ago: executing program 3 (id=2456): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 425.147152ms ago: executing program 1 (id=2457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 276.192758ms ago: executing program 1 (id=2458): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82000, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) 221.799497ms ago: executing program 2 (id=2459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r6], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0xfffffffe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c0012800b00010062726964676500000c000280080005000100000008000a00", @ANYRES32=r8, @ANYBLOB="7951cbdfbeeb5abad1c9131b2901a3c89c243056a7e437a303d6bb0a388a1823252eee129c3e41b86f9cdc6058c4466cc07fe7fa9440f6276b2ae8d1a49e79437b"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xa0168000) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x2c060000) unshare(0x24020400) close(0x3) 176.741791ms ago: executing program 1 (id=2460): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x4, 0x4}, &(0x7f0000000840)=0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 109.61811ms ago: executing program 3 (id=2461): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1805}, 0x20000080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f00000000c0)="20e1b5d4ca774ff66b795ea456d05ae0c6aa", 0x12) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) close(r6) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$SIOCSIFHWADDR(r4, 0xff01, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e22, 0x7, @loopback, 0x9}, {0xa, 0x4e21, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd0f2}, 0x1, {[0x4, 0x8bd52, 0x1000, 0x6, 0x9, 0x1, 0x0, 0x378daea3]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000007ef1e008100000005001100f5000000"], 0x30}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000001340)={0x40}, 0x10) sendmsg$tipc(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) shutdown(r11, 0x2) 0s ago: executing program 1 (id=2462): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bridge_slave_1\x00') r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r2, 0x891e, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r3}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) kernel console output (not intermixed with test programs): 71847][T13234] bridge0: port 1(0!) entered disabled state [ 418.649300][T13234] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 418.674466][T13234] batman_adv: batadv0: Removing interface: virt_wifi0 [ 418.930850][T13253] netlink: 'syz.3.1628': attribute type 10 has an invalid length. [ 419.016746][T13253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1628'. [ 421.023993][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 425.237037][T13377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1641'. [ 426.425566][T13400] netlink: 'syz.1.1648': attribute type 10 has an invalid length. [ 426.524552][T13400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1648'. [ 426.713336][T13400] batman_adv: batadv0: Adding interface: virt_wifi0 [ 426.735790][T13400] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.839393][T13400] batman_adv: batadv0: Interface activated: virt_wifi0 [ 426.919625][T13409] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1650'. [ 427.306882][T13423] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 427.332932][T13423] batman_adv: batadv0: Removing interface: virt_wifi0 [ 430.099650][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 430.239880][T13471] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 430.289272][T13471] batman_adv: batadv0: Removing interface: virt_wifi0 [ 430.444988][T13479] netlink: 'syz.0.1658': attribute type 4 has an invalid length. [ 430.961010][T13492] netlink: 'syz.0.1665': attribute type 10 has an invalid length. [ 430.994249][T13492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1665'. [ 431.033999][T13492] bridge0: port 1(0!) entered blocking state [ 431.040513][T13492] bridge0: port 1(0!) entered disabled state [ 431.077781][T13492] !: entered allmulticast mode [ 431.096507][T13492] !: entered promiscuous mode [ 432.148958][T13524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1669'. [ 432.425056][T13533] syz_tun: left allmulticast mode [ 432.434073][T13533] syz_tun: left promiscuous mode [ 432.445349][T13533] bridge0: port 1(syz_tun) entered disabled state [ 432.490488][T13533] !: left allmulticast mode [ 432.512737][T13533] !: left promiscuous mode [ 432.521936][T13533] bridge0: port 2(0!) entered disabled state [ 432.573897][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 432.589277][T13533] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 432.624857][T13533] batman_adv: batadv0: Removing interface: virt_wifi0 [ 432.843319][T13540] netlink: 'syz.3.1674': attribute type 4 has an invalid length. [ 433.555596][T13561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1679'. [ 436.040646][T13590] netlink: 'syz.2.1683': attribute type 10 has an invalid length. [ 436.049704][T13590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1683'. [ 436.111833][T13590] bridge0: port 1(0!) entered blocking state [ 436.130960][T13590] bridge0: port 1(0!) entered disabled state [ 436.160045][T13590] !: entered allmulticast mode [ 436.206978][T13590] !: entered promiscuous mode [ 436.232183][T13590] bridge0: port 1(0!) entered blocking state [ 436.239885][T13590] bridge0: port 1(0!) entered forwarding state [ 440.150423][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.158188][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.396536][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 440.530136][T13659] SET target dimension over the limit! [ 440.819509][T13677] SET target dimension over the limit! [ 440.954951][T13681] netlink: 'syz.4.1695': attribute type 10 has an invalid length. [ 440.991800][T13681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1695'. [ 441.032336][T13681] bridge0: port 1(0!) entered blocking state [ 441.094602][T13681] bridge0: port 1(0!) entered disabled state [ 441.107786][T13681] !: entered allmulticast mode [ 441.148063][T13681] !: entered promiscuous mode [ 441.160465][T13681] bridge0: port 1(0!) entered blocking state [ 441.166932][T13681] bridge0: port 1(0!) entered forwarding state [ 443.011683][T13728] !: left allmulticast mode [ 443.018097][T13728] !: left promiscuous mode [ 443.023050][T13728] bridge0: port 1(0!) entered disabled state [ 444.324343][T13760] bridge0: port 1(syz_tun) entered blocking state [ 444.356496][T13760] bridge0: port 1(syz_tun) entered disabled state [ 444.379230][T13760] syz_tun: entered allmulticast mode [ 444.390520][T13760] bridge0: port 1(syz_tun) entered blocking state [ 444.397224][T13760] bridge0: port 1(syz_tun) entered forwarding state [ 444.793598][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 444.834527][T13779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1708'. [ 449.444283][T13853] SET target dimension over the limit! [ 450.153500][T13868] SET target dimension over the limit! [ 451.072945][T13876] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1727'. [ 451.107413][T13877] SET target dimension over the limit! [ 452.015491][T13897] SET target dimension over the limit! [ 456.035107][T13950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1736'. [ 457.767814][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1739'. [ 458.692782][T13998] netlink: 'syz.4.1741': attribute type 4 has an invalid length. [ 459.135992][T14013] SET target dimension over the limit! [ 464.404129][T14129] SET target dimension over the limit! [ 469.023241][T14203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1770'. [ 470.381745][T14229] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 470.558437][T14229] batman_adv: batadv0: Removing interface: virt_wifi0 [ 472.271583][T14279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1785'. [ 475.048717][T14329] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1792'. [ 476.801700][T14350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1796'. [ 477.554631][T14375] netlink: 'syz.0.1799': attribute type 10 has an invalid length. [ 477.563041][T14375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1799'. [ 477.640731][T14375] batman_adv: batadv0: Adding interface: virt_wifi0 [ 477.691546][T14375] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.698351][T14385] netlink: 'syz.3.1802': attribute type 10 has an invalid length. [ 477.788062][T14385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1802'. [ 477.834576][T14375] batman_adv: batadv0: Interface activated: virt_wifi0 [ 477.923286][T14385] batman_adv: batadv0: Adding interface: virt_wifi0 [ 477.984016][T14385] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.052940][T14385] batman_adv: batadv0: Interface activated: virt_wifi0 [ 480.025540][T14428] netlink: 'syz.1.1806': attribute type 10 has an invalid length. [ 480.043059][T14428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1806'. [ 480.122820][T14428] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 482.538383][T14471] SET target dimension over the limit! [ 482.791688][T14478] netlink: 'syz.1.1812': attribute type 10 has an invalid length. [ 482.829340][T14478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1812'. [ 483.679395][T14497] netlink: 'syz.2.1817': attribute type 10 has an invalid length. [ 483.718679][T14497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1817'. [ 486.595557][T14563] netlink: 'syz.1.1823': attribute type 10 has an invalid length. [ 486.605050][T14563] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1823'. [ 486.779501][T14563] bridge0: port 2(0!) entered blocking state [ 486.811128][T14563] bridge0: port 2(0!) entered disabled state [ 486.838042][T14563] !: entered allmulticast mode [ 486.862389][T14563] !: entered promiscuous mode [ 486.870674][T14563] bridge0: port 2(0!) entered blocking state [ 486.877249][T14563] bridge0: port 2(0!) entered forwarding state [ 490.239045][T14627] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1833'. [ 490.351941][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1834'. [ 491.323237][T14642] netlink: 'syz.0.1836': attribute type 4 has an invalid length. [ 492.010762][T14660] netlink: 'syz.4.1838': attribute type 10 has an invalid length. [ 492.035786][T14660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1838'. [ 497.136148][T14743] netlink: 'syz.3.1846': attribute type 10 has an invalid length. [ 497.175004][T14743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1846'. [ 497.255747][T14743] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 497.951565][T14757] netlink: 'syz.0.1847': attribute type 10 has an invalid length. [ 497.972479][T14757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1847'. [ 498.004297][T14757] bridge0: port 1(0!) entered blocking state [ 498.011201][T14757] bridge0: port 1(0!) entered disabled state [ 498.037735][T14757] !: entered allmulticast mode [ 498.086264][T14757] !: entered promiscuous mode [ 500.194981][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 501.602960][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.610447][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.139611][T14819] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1853'. [ 503.785168][T14851] netlink: 'syz.0.1857': attribute type 10 has an invalid length. [ 503.793568][T14851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1857'. [ 503.832914][T14851] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 506.842846][T14910] SET target dimension over the limit! [ 507.930858][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'. [ 507.941285][T14942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1864'. [ 508.314415][T14960] netlink: 'syz.2.1866': attribute type 10 has an invalid length. [ 508.349835][T14960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1866'. [ 508.450451][T14960] batman_adv: batadv0: Adding interface: virt_wifi0 [ 508.457298][T14960] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.508451][T14960] batman_adv: batadv0: Interface activated: virt_wifi0 [ 510.121325][T15004] netlink: 'syz.1.1872': attribute type 10 has an invalid length. [ 510.148133][T15004] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1872'. [ 515.944598][T15092] SET target dimension over the limit! [ 515.989750][T15105] netlink: 'syz.1.1876': attribute type 10 has an invalid length. [ 516.010295][T15105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1876'. [ 516.187444][T15108] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1877'. [ 516.461411][T15117] SET target dimension over the limit! [ 516.564771][T15120] netlink: 'syz.0.1880': attribute type 10 has an invalid length. [ 516.650514][T15120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1880'. [ 516.798540][T15128] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 516.842601][T15128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1882'. [ 517.631182][T15153] netlink: 'syz.4.1885': attribute type 10 has an invalid length. [ 517.650360][T15153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1885'. [ 521.471276][T15213] netlink: 'syz.3.1889': attribute type 10 has an invalid length. [ 521.493770][T15213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1889'. [ 521.658835][T15213] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 522.997465][T15233] netlink: 'syz.2.1891': attribute type 10 has an invalid length. [ 523.008925][T15233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1891'. [ 523.254111][T15233] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 523.625564][T15248] netlink: 'syz.4.1892': attribute type 10 has an invalid length. [ 523.646266][T15248] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1892'. [ 523.911785][T15253] netlink: 'syz.0.1893': attribute type 10 has an invalid length. [ 523.928009][T15253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1893'. [ 524.077063][T15253] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 525.202869][T15276] netlink: 'syz.3.1894': attribute type 10 has an invalid length. [ 525.228133][T15276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1894'. [ 525.260282][T15276] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 526.148523][T15291] netlink: 'syz.1.1896': attribute type 10 has an invalid length. [ 526.191498][T15291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1896'. [ 528.342677][T15322] !: left allmulticast mode [ 528.372820][T15322] !: left promiscuous mode [ 528.379637][T15322] bridge0: port 1(0!) entered disabled state [ 528.456183][T15322] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 528.487560][T15322] batman_adv: batadv0: Removing interface: virt_wifi0 [ 529.007476][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 529.043974][T15340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1904'. [ 529.584881][T15364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1907'. [ 529.870899][T15370] bridge0: port 2(syz_tun) entered blocking state [ 529.894809][T15370] bridge0: port 2(syz_tun) entered disabled state [ 529.914051][T15370] syz_tun: entered allmulticast mode [ 529.959148][T15370] syz_tun: entered promiscuous mode [ 530.887924][T15394] netlink: 'syz.1.1912': attribute type 10 has an invalid length. [ 530.930915][T15394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1912'. [ 533.388040][T15450] netlink: 'syz.2.1916': attribute type 10 has an invalid length. [ 533.421162][T15450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1916'. [ 533.450994][T15450] bridge0: port 1(0!) entered blocking state [ 533.458502][T15450] bridge0: port 1(0!) entered disabled state [ 533.478683][T15450] !: entered allmulticast mode [ 533.506898][T15450] !: entered promiscuous mode [ 533.561385][T15450] bridge0: port 1(0!) entered blocking state [ 533.568447][T15450] bridge0: port 1(0!) entered forwarding state [ 534.838357][T15475] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 534.848437][T15475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1918'. [ 535.017444][T15475] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 536.146978][T15484] bridge0: port 2(syz_tun) entered blocking state [ 536.173996][T15484] bridge0: port 2(syz_tun) entered disabled state [ 536.192775][T15484] syz_tun: entered allmulticast mode [ 536.224232][T15484] syz_tun: entered promiscuous mode [ 536.230565][T15484] bridge0: port 2(syz_tun) entered blocking state [ 536.239204][T15484] bridge0: port 2(syz_tun) entered forwarding state [ 536.437335][T15488] netlink: 'syz.4.1920': attribute type 10 has an invalid length. [ 536.451461][T15488] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1920'. [ 537.422222][T15509] netlink: 'syz.2.1924': attribute type 4 has an invalid length. [ 537.801661][T15515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1926'. [ 543.150400][T15593] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 543.166503][T15593] batman_adv: batadv0: Removing interface: virt_wifi0 [ 543.742733][T15599] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 543.778823][T15599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1937'. [ 544.224186][T15599] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 547.752079][T15669] netlink: 'syz.1.1952': attribute type 10 has an invalid length. [ 547.823045][T15669] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1952'. [ 554.551752][T15749] netlink: 'syz.2.1967': attribute type 10 has an invalid length. [ 554.573796][T15749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1967'. [ 555.399386][T15776] netlink: 'syz.4.1976': attribute type 10 has an invalid length. [ 555.431336][T15776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1976'. [ 557.284421][T15814] netlink: 'syz.3.1979': attribute type 10 has an invalid length. [ 557.376721][T15814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1979'. [ 557.458136][T15814] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 558.260072][T15830] netlink: 'syz.1.1983': attribute type 10 has an invalid length. [ 558.273979][T15830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1983'. [ 559.084853][T15845] netlink: 'syz.2.1987': attribute type 10 has an invalid length. [ 559.123931][T15845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1987'. [ 559.419853][T15853] netlink: 'syz.0.1990': attribute type 10 has an invalid length. [ 559.431526][T15853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1990'. [ 559.480755][T15854] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1989'. [ 560.542221][T15882] netlink: 'syz.3.1994': attribute type 10 has an invalid length. [ 560.607093][T15882] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1994'. [ 560.657711][T15882] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 563.059127][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.068756][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.454463][T15924] netlink: 'syz.2.2000': attribute type 10 has an invalid length. [ 564.462464][T15924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2000'. [ 564.491172][T15927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2002'. [ 565.354061][T15955] SET target dimension over the limit! [ 566.211931][T15975] netlink: 'syz.1.2009': attribute type 10 has an invalid length. [ 566.242750][T15975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2009'. [ 567.203172][T16004] netlink: 'syz.3.2013': attribute type 10 has an invalid length. [ 567.284821][T16004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2013'. [ 567.362429][T16004] batman_adv: batadv0: Adding interface: virt_wifi0 [ 567.416295][T16004] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.506455][T16004] batman_adv: batadv0: Interface activated: virt_wifi0 [ 568.348490][T16032] netlink: 'syz.4.2016': attribute type 10 has an invalid length. [ 568.362765][T16032] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2016'. [ 572.254858][T16084] netlink: 'syz.3.2022': attribute type 10 has an invalid length. [ 572.284271][T16084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2022'. [ 572.303016][T16084] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 574.155140][T16115] netlink: 'syz.4.2027': attribute type 10 has an invalid length. [ 574.174558][T16115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2027'. [ 581.001322][T16241] netlink: 'syz.0.2044': attribute type 10 has an invalid length. [ 581.061070][T16241] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2044'. [ 586.184178][T16334] netlink: 'syz.2.2057': attribute type 10 has an invalid length. [ 586.302837][T16334] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2057'. [ 586.469766][T16334] batman_adv: batadv0: Adding interface: virt_wifi0 [ 586.499929][T16334] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.526881][T16342] netlink: 'syz.0.2059': attribute type 10 has an invalid length. [ 586.581792][T16342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2059'. [ 586.624152][T16334] batman_adv: batadv0: Interface activated: virt_wifi0 [ 589.138422][T16380] netlink: 'syz.1.2065': attribute type 10 has an invalid length. [ 589.163912][T16380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2065'. [ 592.710061][T16429] bridge0: port 2(syz_tun) entered blocking state [ 592.743799][T16429] bridge0: port 2(syz_tun) entered disabled state [ 592.750652][T16429] syz_tun: entered allmulticast mode [ 592.773871][T16429] syz_tun: entered promiscuous mode [ 592.783446][T16429] bridge0: port 2(syz_tun) entered blocking state [ 592.790242][T16429] bridge0: port 2(syz_tun) entered forwarding state [ 594.181754][T16474] netlink: 'syz.4.2083': attribute type 10 has an invalid length. [ 594.209123][T16474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2083'. [ 596.880291][T16529] SET target dimension over the limit! [ 597.038760][T16531] netlink: 'syz.0.2090': attribute type 10 has an invalid length. [ 597.054321][T16531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2090'. [ 598.300989][T16559] netlink: 'syz.3.2093': attribute type 10 has an invalid length. [ 598.342173][T16559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2093'. [ 598.401005][T16559] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 599.058477][T16576] syz_tun: left allmulticast mode [ 599.073043][T16576] syz_tun: left promiscuous mode [ 599.093951][T16576] bridge0: port 2(syz_tun) entered disabled state [ 599.133003][T16576] !: left allmulticast mode [ 599.154904][T16576] !: left promiscuous mode [ 599.159826][T16576] bridge0: port 1(0!) entered disabled state [ 599.306779][T16576] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 599.323727][T16576] batman_adv: batadv0: Removing interface: virt_wifi0 [ 599.697942][T16587] bridge0: port 1(syz_tun) entered blocking state [ 599.723843][T16587] bridge0: port 1(syz_tun) entered disabled state [ 599.768153][T16587] syz_tun: entered allmulticast mode [ 599.806892][T16587] syz_tun: entered promiscuous mode [ 599.830671][T16587] bridge0: port 1(syz_tun) entered blocking state [ 599.837739][T16587] bridge0: port 1(syz_tun) entered forwarding state [ 603.074328][T16676] netlink: 'syz.3.2108': attribute type 10 has an invalid length. [ 603.123053][T16676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2108'. [ 603.172317][T16676] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 604.266779][T16698] netlink: 'syz.2.2112': attribute type 10 has an invalid length. [ 604.294588][T16698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2112'. [ 604.319522][T16698] bridge0: port 2(0!) entered blocking state [ 604.374066][T16698] bridge0: port 2(0!) entered disabled state [ 604.404118][T16698] !: entered allmulticast mode [ 604.459940][T16698] !: entered promiscuous mode [ 604.477357][T16698] bridge0: port 2(0!) entered blocking state [ 604.485464][T16698] bridge0: port 2(0!) entered forwarding state [ 607.866443][T16758] netlink: 'syz.4.2121': attribute type 10 has an invalid length. [ 607.889691][T16758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2121'. [ 612.262491][T16800] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 612.335512][T16800] batman_adv: batadv0: Removing interface: virt_wifi0 [ 612.511379][T16812] syz_tun: left allmulticast mode [ 612.544659][T16812] syz_tun: left promiscuous mode [ 612.568186][T16812] bridge0: port 2(syz_tun) entered disabled state [ 612.653270][T16812] !: left allmulticast mode [ 612.692373][T16812] !: left promiscuous mode [ 612.729784][T16812] bridge0: port 1(0!) entered disabled state [ 612.775431][T16812] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 612.794856][T16812] batman_adv: batadv0: Removing interface: virt_wifi0 [ 612.919422][T16821] SET target dimension over the limit! [ 614.336469][T16854] SET target dimension over the limit! [ 615.661959][T16880] SET target dimension over the limit! [ 621.601520][T17057] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 624.007897][T17123] FAULT_INJECTION: forcing a failure. [ 624.007897][T17123] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 624.083773][T17123] CPU: 0 UID: 0 PID: 17123 Comm: syz.2.2172 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 624.083805][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 624.083823][T17123] Call Trace: [ 624.083835][T17123] [ 624.083844][T17123] dump_stack_lvl+0x189/0x250 [ 624.083886][T17123] ? __pfx____ratelimit+0x10/0x10 [ 624.083914][T17123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.083938][T17123] ? __pfx__printk+0x10/0x10 [ 624.083958][T17123] ? __might_fault+0xb0/0x130 [ 624.083985][T17123] should_fail_ex+0x414/0x560 [ 624.084013][T17123] _copy_from_user+0x2d/0xb0 [ 624.084033][T17123] do_sock_getsockopt+0x1cd/0x650 [ 624.084062][T17123] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 624.084086][T17123] ? do_syscall_64+0x80/0x3b0 [ 624.084102][T17123] ? __fget_files+0x3a0/0x420 [ 624.084118][T17123] ? __fget_files+0x2a/0x420 [ 624.084143][T17123] __x64_sys_getsockopt+0x1a5/0x250 [ 624.084165][T17123] ? do_syscall_64+0x80/0x3b0 [ 624.084192][T17123] ? do_syscall_64+0x80/0x3b0 [ 624.084216][T17123] do_syscall_64+0xfa/0x3b0 [ 624.084231][T17123] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.084249][T17123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.084266][T17123] ? clear_bhb_loop+0x60/0xb0 [ 624.084286][T17123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.084307][T17123] RIP: 0033:0x7ff85bf8e929 [ 624.084328][T17123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.084343][T17123] RSP: 002b:00007ff85cda0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 624.084366][T17123] RAX: ffffffffffffffda RBX: 00007ff85c1b5fa0 RCX: 00007ff85bf8e929 [ 624.084377][T17123] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 624.084388][T17123] RBP: 00007ff85cda0090 R08: 0000200000000180 R09: 0000000000000000 [ 624.084399][T17123] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.084410][T17123] R13: 0000000000000000 R14: 00007ff85c1b5fa0 R15: 00007ffce920ec68 [ 624.084433][T17123] [ 624.477216][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.494054][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.570562][T17138] FAULT_INJECTION: forcing a failure. [ 624.570562][T17138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.587158][T17138] CPU: 0 UID: 0 PID: 17138 Comm: syz.2.2176 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 624.587187][T17138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 624.587199][T17138] Call Trace: [ 624.587206][T17138] [ 624.587215][T17138] dump_stack_lvl+0x189/0x250 [ 624.587245][T17138] ? __pfx____ratelimit+0x10/0x10 [ 624.587265][T17138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.587289][T17138] ? __pfx__printk+0x10/0x10 [ 624.587309][T17138] ? __might_fault+0xb0/0x130 [ 624.587338][T17138] should_fail_ex+0x414/0x560 [ 624.587365][T17138] _copy_from_user+0x2d/0xb0 [ 624.587383][T17138] do_sock_getsockopt+0x1cd/0x650 [ 624.587410][T17138] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 624.587432][T17138] ? do_syscall_64+0x80/0x3b0 [ 624.587449][T17138] ? __fget_files+0x3a0/0x420 [ 624.587467][T17138] ? __fget_files+0x2a/0x420 [ 624.587493][T17138] __x64_sys_getsockopt+0x1a5/0x250 [ 624.587515][T17138] ? do_syscall_64+0x80/0x3b0 [ 624.587534][T17138] ? do_syscall_64+0x80/0x3b0 [ 624.587556][T17138] do_syscall_64+0xfa/0x3b0 [ 624.587573][T17138] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.587590][T17138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.587608][T17138] ? clear_bhb_loop+0x60/0xb0 [ 624.587629][T17138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.587646][T17138] RIP: 0033:0x7ff85bf8e929 [ 624.587663][T17138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.587678][T17138] RSP: 002b:00007ff85cda0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 624.587698][T17138] RAX: ffffffffffffffda RBX: 00007ff85c1b5fa0 RCX: 00007ff85bf8e929 [ 624.587712][T17138] RDX: 0000000000000003 RSI: 000000000000010e RDI: 0000000000000003 [ 624.587723][T17138] RBP: 00007ff85cda0090 R08: 0000200000000200 R09: 0000000000000000 [ 624.587735][T17138] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 624.587747][T17138] R13: 0000000000000000 R14: 00007ff85c1b5fa0 R15: 00007ffce920ec68 [ 624.587776][T17138] [ 625.013162][T17136] netlink: 'syz.4.2174': attribute type 4 has an invalid length. [ 625.544202][T17159] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 625.637729][T17159] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 625.731243][T17159] netlink: 'syz.4.2178': attribute type 9 has an invalid length. [ 625.743739][T17159] netlink: 'syz.4.2178': attribute type 6 has an invalid length. [ 626.350500][T17173] FAULT_INJECTION: forcing a failure. [ 626.350500][T17173] name failslab, interval 1, probability 0, space 0, times 1 [ 626.388429][T17173] CPU: 1 UID: 0 PID: 17173 Comm: syz.4.2182 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 626.388459][T17173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 626.388470][T17173] Call Trace: [ 626.388478][T17173] [ 626.388486][T17173] dump_stack_lvl+0x189/0x250 [ 626.388517][T17173] ? __pfx____ratelimit+0x10/0x10 [ 626.388536][T17173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.388560][T17173] ? __pfx__printk+0x10/0x10 [ 626.388586][T17173] ? __pfx___might_resched+0x10/0x10 [ 626.388614][T17173] should_fail_ex+0x414/0x560 [ 626.388640][T17173] should_failslab+0xa8/0x100 [ 626.388660][T17173] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 626.388679][T17173] ? __alloc_skb+0x112/0x2d0 [ 626.388706][T17173] __alloc_skb+0x112/0x2d0 [ 626.388737][T17173] netlink_sendmsg+0x5c6/0xb30 [ 626.388777][T17173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.388802][T17173] ? aa_sock_msg_perm+0x94/0x160 [ 626.388826][T17173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 626.388847][T17173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.388877][T17173] __sock_sendmsg+0x219/0x270 [ 626.388901][T17173] ____sys_sendmsg+0x505/0x830 [ 626.388930][T17173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.388963][T17173] ? import_iovec+0x74/0xa0 [ 626.388986][T17173] ___sys_sendmsg+0x21f/0x2a0 [ 626.389011][T17173] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.389070][T17173] ? __fget_files+0x2a/0x420 [ 626.389088][T17173] ? __fget_files+0x3a0/0x420 [ 626.389117][T17173] __x64_sys_sendmsg+0x19b/0x260 [ 626.389144][T17173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 626.389177][T17173] ? __pfx_ksys_write+0x10/0x10 [ 626.389191][T17173] ? rcu_is_watching+0x15/0xb0 [ 626.389221][T17173] ? do_syscall_64+0xbe/0x3b0 [ 626.389244][T17173] do_syscall_64+0xfa/0x3b0 [ 626.389260][T17173] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.389277][T17173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.389294][T17173] ? clear_bhb_loop+0x60/0xb0 [ 626.389315][T17173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.389332][T17173] RIP: 0033:0x7f398bb8e929 [ 626.389349][T17173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.389363][T17173] RSP: 002b:00007f398cacc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.389382][T17173] RAX: ffffffffffffffda RBX: 00007f398bdb5fa0 RCX: 00007f398bb8e929 [ 626.389395][T17173] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000003 [ 626.389407][T17173] RBP: 00007f398cacc090 R08: 0000000000000000 R09: 0000000000000000 [ 626.389418][T17173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.389428][T17173] R13: 0000000000000000 R14: 00007f398bdb5fa0 R15: 00007ffc4b7bf1e8 [ 626.389457][T17173] [ 626.922135][T17178] FAULT_INJECTION: forcing a failure. [ 626.922135][T17178] name failslab, interval 1, probability 0, space 0, times 0 [ 627.005820][T17187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2183'. [ 627.020206][T17178] CPU: 0 UID: 0 PID: 17178 Comm: syz.4.2184 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 627.020233][T17178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 627.020243][T17178] Call Trace: [ 627.020251][T17178] [ 627.020259][T17178] dump_stack_lvl+0x189/0x250 [ 627.020289][T17178] ? __pfx____ratelimit+0x10/0x10 [ 627.020332][T17178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.020368][T17178] ? __pfx__printk+0x10/0x10 [ 627.020392][T17178] ? __pfx___might_resched+0x10/0x10 [ 627.020420][T17178] should_fail_ex+0x414/0x560 [ 627.020447][T17178] should_failslab+0xa8/0x100 [ 627.020468][T17178] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 627.020487][T17178] ? __alloc_skb+0x112/0x2d0 [ 627.020513][T17178] __alloc_skb+0x112/0x2d0 [ 627.020536][T17178] netlink_sendmsg+0x5c6/0xb30 [ 627.020568][T17178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.020592][T17178] ? aa_sock_msg_perm+0x94/0x160 [ 627.020631][T17178] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 627.020653][T17178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.020675][T17178] __sock_sendmsg+0x219/0x270 [ 627.020697][T17178] ____sys_sendmsg+0x505/0x830 [ 627.020725][T17178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.020754][T17178] ? import_iovec+0x74/0xa0 [ 627.020789][T17178] ___sys_sendmsg+0x21f/0x2a0 [ 627.020814][T17178] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.020870][T17178] ? __fget_files+0x2a/0x420 [ 627.020888][T17178] ? __fget_files+0x3a0/0x420 [ 627.020915][T17178] __x64_sys_sendmsg+0x19b/0x260 [ 627.020941][T17178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.020984][T17178] ? __pfx_ksys_write+0x10/0x10 [ 627.020997][T17178] ? rcu_is_watching+0x15/0xb0 [ 627.021027][T17178] ? do_syscall_64+0xbe/0x3b0 [ 627.021049][T17178] do_syscall_64+0xfa/0x3b0 [ 627.021063][T17178] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.021079][T17178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.021096][T17178] ? clear_bhb_loop+0x60/0xb0 [ 627.021116][T17178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.021131][T17178] RIP: 0033:0x7f398bb8e929 [ 627.021146][T17178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.021160][T17178] RSP: 002b:00007f398cacc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.021179][T17178] RAX: ffffffffffffffda RBX: 00007f398bdb5fa0 RCX: 00007f398bb8e929 [ 627.021192][T17178] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 627.021202][T17178] RBP: 00007f398cacc090 R08: 0000000000000000 R09: 0000000000000000 [ 627.021213][T17178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.021222][T17178] R13: 0000000000000000 R14: 00007f398bdb5fa0 R15: 00007ffc4b7bf1e8 [ 627.021250][T17178] [ 627.770757][T16246] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.843421][T16246] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.867592][T16246] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.908299][ T7172] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.547924][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2190'. [ 629.880784][T17251] FAULT_INJECTION: forcing a failure. [ 629.880784][T17251] name failslab, interval 1, probability 0, space 0, times 0 [ 629.923957][T17251] CPU: 1 UID: 0 PID: 17251 Comm: syz.0.2201 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 629.923984][T17251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.923995][T17251] Call Trace: [ 629.924003][T17251] [ 629.924010][T17251] dump_stack_lvl+0x189/0x250 [ 629.924040][T17251] ? __pfx____ratelimit+0x10/0x10 [ 629.924058][T17251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.924078][T17251] ? __pfx__printk+0x10/0x10 [ 629.924101][T17251] ? __pfx___might_resched+0x10/0x10 [ 629.924123][T17251] ? fs_reclaim_acquire+0x7d/0x100 [ 629.924147][T17251] should_fail_ex+0x414/0x560 [ 629.924173][T17251] should_failslab+0xa8/0x100 [ 629.924193][T17251] kmem_cache_alloc_noprof+0x73/0x3c0 [ 629.924217][T17251] ? security_inode_alloc+0x39/0x330 [ 629.924244][T17251] security_inode_alloc+0x39/0x330 [ 629.924267][T17251] inode_init_always_gfp+0x9ed/0xdc0 [ 629.924291][T17251] ? __pfx_sock_alloc_inode+0x10/0x10 [ 629.924309][T17251] alloc_inode+0x82/0x1b0 [ 629.924327][T17251] __sock_create+0x12d/0x9f0 [ 629.924357][T17251] __sys_socket+0xd7/0x1b0 [ 629.924380][T17251] __x64_sys_socket+0x7a/0x90 [ 629.924401][T17251] do_syscall_64+0xfa/0x3b0 [ 629.924417][T17251] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.924446][T17251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.924461][T17251] ? clear_bhb_loop+0x60/0xb0 [ 629.924481][T17251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.924497][T17251] RIP: 0033:0x7f1c06390847 [ 629.924513][T17251] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.924527][T17251] RSP: 002b:00007f1c0720cfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 629.924545][T17251] RAX: ffffffffffffffda RBX: 00007f1c065b5fa0 RCX: 00007f1c06390847 [ 629.924557][T17251] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 629.924567][T17251] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 629.924577][T17251] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000001 [ 629.924588][T17251] R13: 0000000000000000 R14: 00007f1c065b5fa0 R15: 00007ffe1fb7cb78 [ 629.924615][T17251] [ 629.924643][T17251] socket: no more sockets [ 630.342872][T17263] FAULT_INJECTION: forcing a failure. [ 630.342872][T17263] name failslab, interval 1, probability 0, space 0, times 0 [ 630.412648][T17263] CPU: 1 UID: 0 PID: 17263 Comm: syz.0.2202 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 630.412676][T17263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.412687][T17263] Call Trace: [ 630.412698][T17263] [ 630.412708][T17263] dump_stack_lvl+0x189/0x250 [ 630.412738][T17263] ? __pfx____ratelimit+0x10/0x10 [ 630.412758][T17263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.412782][T17263] ? __pfx__printk+0x10/0x10 [ 630.412808][T17263] ? __pfx___might_resched+0x10/0x10 [ 630.412838][T17263] should_fail_ex+0x414/0x560 [ 630.412866][T17263] should_failslab+0xa8/0x100 [ 630.412888][T17263] __kmalloc_noprof+0xcb/0x4f0 [ 630.412905][T17263] ? sock_kmalloc+0xd6/0x160 [ 630.412927][T17263] sock_kmalloc+0xd6/0x160 [ 630.412948][T17263] af_alg_alloc_areq+0x8d/0x260 [ 630.412973][T17263] skcipher_recvmsg+0x356/0x11c0 [ 630.413000][T17263] ? aa_sk_perm+0x81e/0x950 [ 630.413033][T17263] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 630.413059][T17263] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 630.413080][T17263] ? security_socket_recvmsg+0x7e/0x2e0 [ 630.413105][T17263] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 630.413127][T17263] sock_recvmsg+0x229/0x270 [ 630.413151][T17263] ____sys_recvmsg+0x1c9/0x460 [ 630.413186][T17263] ? __pfx_____sys_recvmsg+0x10/0x10 [ 630.413228][T17263] ? import_iovec+0x74/0xa0 [ 630.413250][T17263] ___sys_recvmsg+0x1b5/0x510 [ 630.413280][T17263] ? __pfx____sys_recvmsg+0x10/0x10 [ 630.413333][T17263] ? __fget_files+0x3a0/0x420 [ 630.413364][T17263] __x64_sys_recvmsg+0x198/0x260 [ 630.413392][T17263] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 630.413532][T17263] ? __pfx_ksys_write+0x10/0x10 [ 630.413559][T17263] ? rcu_is_watching+0x15/0xb0 [ 630.413586][T17263] ? do_syscall_64+0xbe/0x3b0 [ 630.413606][T17263] do_syscall_64+0xfa/0x3b0 [ 630.413623][T17263] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.413640][T17263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.413655][T17263] ? clear_bhb_loop+0x60/0xb0 [ 630.413675][T17263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.413692][T17263] RIP: 0033:0x7f1c0638e929 [ 630.413709][T17263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.413724][T17263] RSP: 002b:00007f1c0720e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 630.413743][T17263] RAX: ffffffffffffffda RBX: 00007f1c065b5fa0 RCX: 00007f1c0638e929 [ 630.413755][T17263] RDX: 0000000000012060 RSI: 0000200000000540 RDI: 0000000000000004 [ 630.413763][T17263] RBP: 00007f1c0720e090 R08: 0000000000000000 R09: 0000000000000000 [ 630.413771][T17263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.413779][T17263] R13: 0000000000000000 R14: 00007f1c065b5fa0 R15: 00007ffe1fb7cb78 [ 630.413809][T17263] [ 630.784519][T17268] FAULT_INJECTION: forcing a failure. [ 630.784519][T17268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.799409][T17268] CPU: 1 UID: 0 PID: 17268 Comm: syz.3.2205 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 630.799437][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.799455][T17268] Call Trace: [ 630.799462][T17268] [ 630.799470][T17268] dump_stack_lvl+0x189/0x250 [ 630.799499][T17268] ? __pfx____ratelimit+0x10/0x10 [ 630.799517][T17268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.799540][T17268] ? __pfx__printk+0x10/0x10 [ 630.799572][T17268] should_fail_ex+0x414/0x560 [ 630.799597][T17268] _copy_to_user+0x31/0xb0 [ 630.799617][T17268] simple_read_from_buffer+0xe1/0x170 [ 630.799641][T17268] proc_fail_nth_read+0x1df/0x250 [ 630.799664][T17268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.799687][T17268] ? rw_verify_area+0x258/0x650 [ 630.799710][T17268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.799731][T17268] vfs_read+0x1fd/0x980 [ 630.799759][T17268] ? __pfx___mutex_lock+0x10/0x10 [ 630.799779][T17268] ? __pfx_vfs_read+0x10/0x10 [ 630.799803][T17268] ? __fget_files+0x2a/0x420 [ 630.799826][T17268] ? __fget_files+0x3a0/0x420 [ 630.799843][T17268] ? __fget_files+0x2a/0x420 [ 630.799870][T17268] ksys_read+0x145/0x250 [ 630.799884][T17268] ? __fget_files+0x2a/0x420 [ 630.799904][T17268] ? __pfx_ksys_read+0x10/0x10 [ 630.799932][T17268] ? do_syscall_64+0xbe/0x3b0 [ 630.799955][T17268] do_syscall_64+0xfa/0x3b0 [ 630.799970][T17268] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.799987][T17268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.800004][T17268] ? clear_bhb_loop+0x60/0xb0 [ 630.800024][T17268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.800040][T17268] RIP: 0033:0x7f6c14d8d33c [ 630.800058][T17268] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 630.800072][T17268] RSP: 002b:00007f6c15b64030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 630.800090][T17268] RAX: ffffffffffffffda RBX: 00007f6c14fb5fa0 RCX: 00007f6c14d8d33c [ 630.800103][T17268] RDX: 000000000000000f RSI: 00007f6c15b640a0 RDI: 0000000000000004 [ 630.800114][T17268] RBP: 00007f6c15b64090 R08: 0000000000000000 R09: 0000000000000000 [ 630.800124][T17268] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 630.800136][T17268] R13: 0000000000000000 R14: 00007f6c14fb5fa0 R15: 00007ffff96d9dd8 [ 630.800165][T17268] [ 631.299549][T17278] FAULT_INJECTION: forcing a failure. [ 631.299549][T17278] name failslab, interval 1, probability 0, space 0, times 0 [ 631.315613][T17278] CPU: 1 UID: 0 PID: 17278 Comm: syz.0.2209 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 631.315639][T17278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 631.315648][T17278] Call Trace: [ 631.315665][T17278] [ 631.315672][T17278] dump_stack_lvl+0x189/0x250 [ 631.315704][T17278] ? __pfx____ratelimit+0x10/0x10 [ 631.315722][T17278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.315743][T17278] ? __pfx__printk+0x10/0x10 [ 631.315767][T17278] ? __pfx___might_resched+0x10/0x10 [ 631.315786][T17278] ? fs_reclaim_acquire+0x7d/0x100 [ 631.315809][T17278] should_fail_ex+0x414/0x560 [ 631.315834][T17278] should_failslab+0xa8/0x100 [ 631.315851][T17278] __kmalloc_cache_noprof+0x70/0x3d0 [ 631.315867][T17278] ? bpf_raw_tp_link_attach+0x25f/0x6b0 [ 631.315888][T17278] bpf_raw_tp_link_attach+0x25f/0x6b0 [ 631.315908][T17278] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 631.315936][T17278] ? __fget_files+0x2a/0x420 [ 631.315964][T17278] bpf_raw_tracepoint_open+0x19b/0x1f0 [ 631.315989][T17278] __sys_bpf+0x3cd/0x860 [ 631.316009][T17278] ? __pfx___sys_bpf+0x10/0x10 [ 631.316042][T17278] ? ksys_write+0x22a/0x250 [ 631.316060][T17278] ? __pfx_ksys_write+0x10/0x10 [ 631.316073][T17278] ? rcu_is_watching+0x15/0xb0 [ 631.316103][T17278] __x64_sys_bpf+0x7c/0x90 [ 631.316121][T17278] do_syscall_64+0xfa/0x3b0 [ 631.316138][T17278] ? lockdep_hardirqs_on+0x9c/0x150 [ 631.316153][T17278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.316169][T17278] ? clear_bhb_loop+0x60/0xb0 [ 631.316188][T17278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.316202][T17278] RIP: 0033:0x7f1c0638e929 [ 631.316217][T17278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.316229][T17278] RSP: 002b:00007f1c0720e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 631.316247][T17278] RAX: ffffffffffffffda RBX: 00007f1c065b5fa0 RCX: 00007f1c0638e929 [ 631.316258][T17278] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 631.316258][T17279] FAULT_INJECTION: forcing a failure. [ 631.316258][T17279] name failslab, interval 1, probability 0, space 0, times 0 [ 631.316268][T17278] RBP: 00007f1c0720e090 R08: 0000000000000000 R09: 0000000000000000 [ 631.316279][T17278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.316288][T17278] R13: 0000000000000000 R14: 00007f1c065b5fa0 R15: 00007ffe1fb7cb78 [ 631.316309][T17278] [ 631.547870][T17284] sctp: [Deprecated]: syz.0.2212 (pid 17284) Use of int in max_burst socket option deprecated. [ 631.547870][T17284] Use struct sctp_assoc_value instead [ 631.594074][T17279] CPU: 0 UID: 0 PID: 17279 Comm: syz.2.2210 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 631.594105][T17279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 631.594116][T17279] Call Trace: [ 631.594128][T17279] [ 631.594137][T17279] dump_stack_lvl+0x189/0x250 [ 631.594168][T17279] ? __pfx____ratelimit+0x10/0x10 [ 631.594187][T17279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.594212][T17279] ? __pfx__printk+0x10/0x10 [ 631.594237][T17279] ? __pfx___might_resched+0x10/0x10 [ 631.594280][T17279] should_fail_ex+0x414/0x560 [ 631.594305][T17279] should_failslab+0xa8/0x100 [ 631.594323][T17279] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 631.594342][T17279] ? __alloc_skb+0x112/0x2d0 [ 631.594368][T17279] __alloc_skb+0x112/0x2d0 [ 631.594393][T17279] netlink_sendmsg+0x5c6/0xb30 [ 631.594479][T17279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.594503][T17279] ? aa_sock_msg_perm+0x94/0x160 [ 631.594527][T17279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.594547][T17279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.594585][T17279] __sock_sendmsg+0x219/0x270 [ 631.594608][T17279] ____sys_sendmsg+0x505/0x830 [ 631.594637][T17279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.594666][T17279] ? import_iovec+0x74/0xa0 [ 631.594683][T17279] ___sys_sendmsg+0x21f/0x2a0 [ 631.594705][T17279] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.594770][T17279] ? __fget_files+0x2a/0x420 [ 631.594787][T17279] ? __fget_files+0x3a0/0x420 [ 631.594816][T17279] __x64_sys_sendmsg+0x19b/0x260 [ 631.594840][T17279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.594872][T17279] ? __pfx_ksys_write+0x10/0x10 [ 631.594907][T17279] ? rcu_is_watching+0x15/0xb0 [ 631.594940][T17279] ? do_syscall_64+0xbe/0x3b0 [ 631.594962][T17279] do_syscall_64+0xfa/0x3b0 [ 631.594978][T17279] ? lockdep_hardirqs_on+0x9c/0x150 [ 631.594994][T17279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.595012][T17279] ? clear_bhb_loop+0x60/0xb0 [ 631.595031][T17279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.595048][T17279] RIP: 0033:0x7ff85bf8e929 [ 631.595066][T17279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.595081][T17279] RSP: 002b:00007ff85cda0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.595100][T17279] RAX: ffffffffffffffda RBX: 00007ff85c1b5fa0 RCX: 00007ff85bf8e929 [ 631.595113][T17279] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 631.595124][T17279] RBP: 00007ff85cda0090 R08: 0000000000000000 R09: 0000000000000000 [ 631.595134][T17279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.595144][T17279] R13: 0000000000000000 R14: 00007ff85c1b5fa0 R15: 00007ffce920ec68 [ 631.595172][T17279] [ 632.071178][T17284] sctp: [Deprecated]: syz.0.2212 (pid 17284) Use of int in maxseg socket option. [ 632.071178][T17284] Use struct sctp_assoc_value instead [ 632.115361][T17303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2215'. [ 632.358746][T17310] vlan2: entered promiscuous mode [ 632.376721][T17310] bond0: entered promiscuous mode [ 632.383254][T17310] bond0: (slave vlan2): Opening slave failed [ 632.642237][T17327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2225'. [ 632.690444][T17326] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2226'. [ 632.996207][T17343] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 633.048659][T17343] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 633.290036][T17353] bridge0: entered allmulticast mode [ 633.320467][T17356] xt_hashlimit: size too large, truncated to 1048576 [ 633.506109][T17362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2236'. [ 634.158875][T17393] FAULT_INJECTION: forcing a failure. [ 634.158875][T17393] name failslab, interval 1, probability 0, space 0, times 0 [ 634.172008][T17393] CPU: 1 UID: 0 PID: 17393 Comm: syz.3.2248 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 634.172036][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.172047][T17393] Call Trace: [ 634.172055][T17393] [ 634.172062][T17393] dump_stack_lvl+0x189/0x250 [ 634.172091][T17393] ? __pfx____ratelimit+0x10/0x10 [ 634.172109][T17393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.172132][T17393] ? __pfx__printk+0x10/0x10 [ 634.172167][T17393] ? __pfx___might_resched+0x10/0x10 [ 634.172195][T17393] should_fail_ex+0x414/0x560 [ 634.172220][T17393] should_failslab+0xa8/0x100 [ 634.172241][T17393] __kmalloc_node_noprof+0xd1/0x4e0 [ 634.172257][T17393] ? alloc_slab_obj_exts+0x39/0xa0 [ 634.172285][T17393] alloc_slab_obj_exts+0x39/0xa0 [ 634.172307][T17393] __memcg_slab_post_alloc_hook+0x31e/0x7f0 [ 634.172345][T17393] kmem_cache_alloc_node_noprof+0x2bd/0x3c0 [ 634.172361][T17393] ? __alloc_skb+0x112/0x2d0 [ 634.172385][T17393] __alloc_skb+0x112/0x2d0 [ 634.172407][T17393] alloc_skb_with_frags+0xca/0x890 [ 634.172434][T17393] ? page_table_check_set+0x18d/0x730 [ 634.172452][T17393] ? page_table_check_set+0x18d/0x730 [ 634.172475][T17393] sock_alloc_send_pskb+0x857/0x990 [ 634.172511][T17393] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 634.172539][T17393] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 634.172564][T17393] unix_dgram_sendmsg+0x4f6/0x1870 [ 634.172598][T17393] ? count_memcg_event_mm+0x21/0x260 [ 634.172625][T17393] ? aa_sk_perm+0x81e/0x950 [ 634.172650][T17393] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 634.172679][T17393] ? aa_sock_msg_perm+0x94/0x160 [ 634.172708][T17393] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.172727][T17393] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 634.172750][T17393] __sock_sendmsg+0x219/0x270 [ 634.172772][T17393] ____sys_sendmsg+0x52d/0x830 [ 634.172801][T17393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.172833][T17393] ? import_iovec+0x74/0xa0 [ 634.172855][T17393] ___sys_sendmsg+0x21f/0x2a0 [ 634.172879][T17393] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.172943][T17393] ? __fget_files+0x2a/0x420 [ 634.172961][T17393] ? __fget_files+0x3a0/0x420 [ 634.172989][T17393] __sys_sendmmsg+0x227/0x430 [ 634.173018][T17393] ? __pfx___sys_sendmmsg+0x10/0x10 [ 634.173038][T17393] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 634.173083][T17393] ? ksys_write+0x22a/0x250 [ 634.173102][T17393] ? __pfx_ksys_write+0x10/0x10 [ 634.173115][T17393] ? rcu_is_watching+0x15/0xb0 [ 634.173146][T17393] __x64_sys_sendmmsg+0xa0/0xc0 [ 634.173184][T17393] do_syscall_64+0xfa/0x3b0 [ 634.173201][T17393] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.173217][T17393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.173232][T17393] ? clear_bhb_loop+0x60/0xb0 [ 634.173251][T17393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.173266][T17393] RIP: 0033:0x7f6c14d8e929 [ 634.173281][T17393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.173294][T17393] RSP: 002b:00007f6c15b64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 634.173311][T17393] RAX: ffffffffffffffda RBX: 00007f6c14fb5fa0 RCX: 00007f6c14d8e929 [ 634.173323][T17393] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000006 [ 634.173332][T17393] RBP: 00007f6c15b64090 R08: 0000000000000000 R09: 0000000000000000 [ 634.173341][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.173351][T17393] R13: 0000000000000000 R14: 00007f6c14fb5fa0 R15: 00007ffff96d9dd8 [ 634.173374][T17393] [ 635.731920][T17419] FAULT_INJECTION: forcing a failure. [ 635.731920][T17419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.783103][T17419] CPU: 1 UID: 0 PID: 17419 Comm: syz.2.2254 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 635.783133][T17419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.783144][T17419] Call Trace: [ 635.783152][T17419] [ 635.783161][T17419] dump_stack_lvl+0x189/0x250 [ 635.783192][T17419] ? __pfx____ratelimit+0x10/0x10 [ 635.783212][T17419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.783236][T17419] ? __pfx__printk+0x10/0x10 [ 635.783255][T17419] ? __might_fault+0xb0/0x130 [ 635.783293][T17419] should_fail_ex+0x414/0x560 [ 635.783319][T17419] _copy_from_iter+0x1db/0x16f0 [ 635.783562][T17419] ? rcu_is_watching+0x15/0xb0 [ 635.783597][T17419] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 635.783615][T17419] ? __pfx__copy_from_iter+0x10/0x10 [ 635.783638][T17419] ? __build_skb_around+0x257/0x3e0 [ 635.783662][T17419] ? netlink_sendmsg+0x642/0xb30 [ 635.783680][T17419] ? skb_put+0x11b/0x210 [ 635.783702][T17419] netlink_sendmsg+0x6b2/0xb30 [ 635.783729][T17419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.783749][T17419] ? aa_sock_msg_perm+0x94/0x160 [ 635.783770][T17419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.783790][T17419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.783809][T17419] __sock_sendmsg+0x219/0x270 [ 635.783830][T17419] ____sys_sendmsg+0x505/0x830 [ 635.783857][T17419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.783887][T17419] ? import_iovec+0x74/0xa0 [ 635.783907][T17419] ___sys_sendmsg+0x21f/0x2a0 [ 635.783930][T17419] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.783998][T17419] ? __fget_files+0x2a/0x420 [ 635.784016][T17419] ? __fget_files+0x3a0/0x420 [ 635.784040][T17419] __x64_sys_sendmsg+0x19b/0x260 [ 635.784063][T17419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.784091][T17419] ? __pfx_ksys_write+0x10/0x10 [ 635.784103][T17419] ? rcu_is_watching+0x15/0xb0 [ 635.784298][T17419] ? do_syscall_64+0xbe/0x3b0 [ 635.784321][T17419] do_syscall_64+0xfa/0x3b0 [ 635.784336][T17419] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.784372][T17419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.784388][T17419] ? clear_bhb_loop+0x60/0xb0 [ 635.784407][T17419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.784422][T17419] RIP: 0033:0x7ff85bf8e929 [ 635.784437][T17419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.784450][T17419] RSP: 002b:00007ff85cda0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.784468][T17419] RAX: ffffffffffffffda RBX: 00007ff85c1b5fa0 RCX: 00007ff85bf8e929 [ 635.784479][T17419] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 635.784488][T17419] RBP: 00007ff85cda0090 R08: 0000000000000000 R09: 0000000000000000 [ 635.784499][T17419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.784508][T17419] R13: 0000000000000000 R14: 00007ff85c1b5fa0 R15: 00007ffce920ec68 [ 635.784533][T17419] [ 636.711790][T17448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 636.925394][T17460] FAULT_INJECTION: forcing a failure. [ 636.925394][T17460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.983729][T17460] CPU: 1 UID: 0 PID: 17460 Comm: syz.2.2267 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 636.983759][T17460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 636.983770][T17460] Call Trace: [ 636.983778][T17460] [ 636.983786][T17460] dump_stack_lvl+0x189/0x250 [ 636.983817][T17460] ? __pfx____ratelimit+0x10/0x10 [ 636.983836][T17460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.983860][T17460] ? __pfx__printk+0x10/0x10 [ 636.983878][T17460] ? __might_fault+0xb0/0x130 [ 636.983907][T17460] should_fail_ex+0x414/0x560 [ 636.983932][T17460] _copy_from_iter+0x1db/0x16f0 [ 636.983960][T17460] ? rcu_is_watching+0x15/0xb0 [ 636.983984][T17460] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 636.984001][T17460] ? __pfx__copy_from_iter+0x10/0x10 [ 636.984022][T17460] ? __build_skb_around+0x257/0x3e0 [ 636.984043][T17460] ? netlink_sendmsg+0x642/0xb30 [ 636.984060][T17460] ? skb_put+0x11b/0x210 [ 636.984082][T17460] netlink_sendmsg+0x6b2/0xb30 [ 636.984111][T17460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.984132][T17460] ? aa_sock_msg_perm+0x94/0x160 [ 636.984156][T17460] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 636.984177][T17460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.984197][T17460] __sock_sendmsg+0x219/0x270 [ 636.984217][T17460] ____sys_sendmsg+0x505/0x830 [ 636.984243][T17460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.984283][T17460] ? import_iovec+0x74/0xa0 [ 636.984303][T17460] ___sys_sendmsg+0x21f/0x2a0 [ 636.984328][T17460] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.984380][T17460] ? __fget_files+0x2a/0x420 [ 636.984398][T17460] ? __fget_files+0x3a0/0x420 [ 636.984427][T17460] __x64_sys_sendmsg+0x19b/0x260 [ 636.984454][T17460] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 636.984487][T17460] ? __pfx_ksys_write+0x10/0x10 [ 636.984502][T17460] ? rcu_is_watching+0x15/0xb0 [ 636.984531][T17460] ? do_syscall_64+0xbe/0x3b0 [ 636.984554][T17460] do_syscall_64+0xfa/0x3b0 [ 636.984571][T17460] ? lockdep_hardirqs_on+0x9c/0x150 [ 636.984588][T17460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.984605][T17460] ? clear_bhb_loop+0x60/0xb0 [ 636.984626][T17460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.984643][T17460] RIP: 0033:0x7ff85bf8e929 [ 636.984661][T17460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.984677][T17460] RSP: 002b:00007ff85cda0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.984698][T17460] RAX: ffffffffffffffda RBX: 00007ff85c1b5fa0 RCX: 00007ff85bf8e929 [ 636.984711][T17460] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 636.984722][T17460] RBP: 00007ff85cda0090 R08: 0000000000000000 R09: 0000000000000000 [ 636.984734][T17460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.984744][T17460] R13: 0000000000000000 R14: 00007ff85c1b5fa0 R15: 00007ffce920ec68 [ 636.984778][T17460] [ 637.353083][T17462] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 637.367305][T17462] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 637.576536][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 637.710049][T17483] openvswitch: netlink: IPv4 tun info is not correct [ 637.889707][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'. [ 637.890897][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'. [ 637.939603][T17488] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2274'. [ 639.503200][T17528] xt_hashlimit: size too large, truncated to 1048576 [ 639.698016][T17533] FAULT_INJECTION: forcing a failure. [ 639.698016][T17533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.765230][T17533] CPU: 1 UID: 0 PID: 17533 Comm: syz.4.2285 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 639.765259][T17533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 639.765271][T17533] Call Trace: [ 639.765279][T17533] [ 639.765287][T17533] dump_stack_lvl+0x189/0x250 [ 639.765317][T17533] ? __pfx____ratelimit+0x10/0x10 [ 639.765336][T17533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.765359][T17533] ? __pfx__printk+0x10/0x10 [ 639.765379][T17533] ? __might_fault+0xb0/0x130 [ 639.765408][T17533] should_fail_ex+0x414/0x560 [ 639.765436][T17533] _copy_from_iter+0x1db/0x16f0 [ 639.765464][T17533] ? rcu_is_watching+0x15/0xb0 [ 639.765489][T17533] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 639.765508][T17533] ? __pfx__copy_from_iter+0x10/0x10 [ 639.765532][T17533] ? __build_skb_around+0x257/0x3e0 [ 639.765558][T17533] ? netlink_sendmsg+0x642/0xb30 [ 639.765577][T17533] ? skb_put+0x11b/0x210 [ 639.765602][T17533] netlink_sendmsg+0x6b2/0xb30 [ 639.765633][T17533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.765657][T17533] ? aa_sock_msg_perm+0x94/0x160 [ 639.765679][T17533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 639.765699][T17533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.765721][T17533] __sock_sendmsg+0x219/0x270 [ 639.765743][T17533] ____sys_sendmsg+0x505/0x830 [ 639.765772][T17533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.765803][T17533] ? import_iovec+0x74/0xa0 [ 639.765830][T17533] ___sys_sendmsg+0x21f/0x2a0 [ 639.765855][T17533] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.765914][T17533] ? __fget_files+0x2a/0x420 [ 639.765932][T17533] ? __fget_files+0x3a0/0x420 [ 639.765959][T17533] __x64_sys_sendmsg+0x19b/0x260 [ 639.765984][T17533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.766017][T17533] ? __pfx_ksys_write+0x10/0x10 [ 639.766031][T17533] ? rcu_is_watching+0x15/0xb0 [ 639.766059][T17533] ? do_syscall_64+0xbe/0x3b0 [ 639.766080][T17533] do_syscall_64+0xfa/0x3b0 [ 639.766096][T17533] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.766113][T17533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.766130][T17533] ? clear_bhb_loop+0x60/0xb0 [ 639.766149][T17533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.766165][T17533] RIP: 0033:0x7f398bb8e929 [ 639.766182][T17533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.766195][T17533] RSP: 002b:00007f398cacc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.766215][T17533] RAX: ffffffffffffffda RBX: 00007f398bdb5fa0 RCX: 00007f398bb8e929 [ 639.766227][T17533] RDX: 0000000024008084 RSI: 0000200000000200 RDI: 0000000000000004 [ 639.766238][T17533] RBP: 00007f398cacc090 R08: 0000000000000000 R09: 0000000000000000 [ 639.766249][T17533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.766259][T17533] R13: 0000000000000000 R14: 00007f398bdb5fa0 R15: 00007ffc4b7bf1e8 [ 639.766287][T17533] [ 640.166156][T17535] netlink: 'syz.1.2286': attribute type 1 has an invalid length. [ 640.196800][T17535] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2286'. [ 640.356679][T17541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2286'. [ 640.370125][T17541] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 640.443172][T17535] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 641.113173][T17573] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 641.149422][T17570] xt_hashlimit: size too large, truncated to 1048576 [ 641.225905][T17573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.289183][T17580] bond1: entered promiscuous mode [ 641.319283][T17568] xt_CT: No such helper "snmp" [ 641.348499][T17586] veth0: entered promiscuous mode [ 641.375803][T17582] veth0: left promiscuous mode [ 641.983309][T17610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2303'. [ 642.137934][T17609] FAULT_INJECTION: forcing a failure. [ 642.137934][T17609] name failslab, interval 1, probability 0, space 0, times 0 [ 642.180493][T17609] CPU: 1 UID: 0 PID: 17609 Comm: syz.0.2304 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 642.180525][T17609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 642.180536][T17609] Call Trace: [ 642.180544][T17609] [ 642.180553][T17609] dump_stack_lvl+0x189/0x250 [ 642.180586][T17609] ? __pfx____ratelimit+0x10/0x10 [ 642.180606][T17609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.180631][T17609] ? __pfx__printk+0x10/0x10 [ 642.180667][T17609] ? __pfx___might_resched+0x10/0x10 [ 642.180692][T17609] ? fs_reclaim_acquire+0x7d/0x100 [ 642.180716][T17609] should_fail_ex+0x414/0x560 [ 642.180744][T17609] should_failslab+0xa8/0x100 [ 642.180767][T17609] __kmalloc_node_noprof+0xd1/0x4e0 [ 642.180785][T17609] ? qdisc_alloc+0x97/0xaa0 [ 642.180813][T17609] qdisc_alloc+0x97/0xaa0 [ 642.180843][T17609] qdisc_create+0x12c/0xea0 [ 642.180867][T17609] ? qdisc_lookup+0x36d/0x6d0 [ 642.180892][T17609] tc_modify_qdisc+0x1426/0x2010 [ 642.180934][T17609] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 642.180986][T17609] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 642.181003][T17609] rtnetlink_rcv_msg+0x77c/0xb70 [ 642.181030][T17609] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 642.181050][T17609] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.181088][T17609] netlink_rcv_skb+0x205/0x470 [ 642.181113][T17609] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.181136][T17609] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 642.181171][T17609] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.181192][T17609] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.181219][T17609] netlink_unicast+0x758/0x8d0 [ 642.181252][T17609] netlink_sendmsg+0x805/0xb30 [ 642.181282][T17609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.181309][T17609] ? aa_sock_msg_perm+0x94/0x160 [ 642.181335][T17609] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 642.181355][T17609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.181377][T17609] __sock_sendmsg+0x219/0x270 [ 642.181402][T17609] ____sys_sendmsg+0x505/0x830 [ 642.181433][T17609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.181465][T17609] ? import_iovec+0x74/0xa0 [ 642.181488][T17609] ___sys_sendmsg+0x21f/0x2a0 [ 642.181513][T17609] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.181574][T17609] ? __fget_files+0x2a/0x420 [ 642.181591][T17609] ? __fget_files+0x3a0/0x420 [ 642.181622][T17609] __x64_sys_sendmsg+0x19b/0x260 [ 642.181962][T17609] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.181997][T17609] ? __pfx_ksys_write+0x10/0x10 [ 642.182010][T17609] ? rcu_is_watching+0x15/0xb0 [ 642.182039][T17609] ? do_syscall_64+0xbe/0x3b0 [ 642.182061][T17609] do_syscall_64+0xfa/0x3b0 [ 642.182076][T17609] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.182092][T17609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.182110][T17609] ? clear_bhb_loop+0x60/0xb0 [ 642.182133][T17609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.182149][T17609] RIP: 0033:0x7f1c0638e929 [ 642.182166][T17609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.182182][T17609] RSP: 002b:00007f1c0720e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.182199][T17609] RAX: ffffffffffffffda RBX: 00007f1c065b5fa0 RCX: 00007f1c0638e929 [ 642.182211][T17609] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 642.182222][T17609] RBP: 00007f1c0720e090 R08: 0000000000000000 R09: 0000000000000000 [ 642.182233][T17609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.182243][T17609] R13: 0000000000000000 R14: 00007f1c065b5fa0 R15: 00007ffe1fb7cb78 [ 642.182274][T17609] [ 643.657997][T17658] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 643.795236][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2317'. [ 643.823362][T17658] bond2: (slave gretap1): making interface the new active one [ 643.842084][T17658] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 644.074933][T17687] FAULT_INJECTION: forcing a failure. [ 644.074933][T17687] name failslab, interval 1, probability 0, space 0, times 0 [ 644.154349][T17687] CPU: 0 UID: 0 PID: 17687 Comm: syz.3.2321 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 644.154380][T17687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 644.154392][T17687] Call Trace: [ 644.154400][T17687] [ 644.154409][T17687] dump_stack_lvl+0x189/0x250 [ 644.154441][T17687] ? __pfx____ratelimit+0x10/0x10 [ 644.154460][T17687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.154485][T17687] ? __pfx__printk+0x10/0x10 [ 644.154530][T17687] ? ref_tracker_alloc+0x318/0x460 [ 644.154555][T17687] should_fail_ex+0x414/0x560 [ 644.154581][T17687] should_failslab+0xa8/0x100 [ 644.154602][T17687] kmem_cache_alloc_noprof+0x73/0x3c0 [ 644.154627][T17687] ? skb_clone+0x212/0x3a0 [ 644.154650][T17687] skb_clone+0x212/0x3a0 [ 644.154671][T17687] __netlink_deliver_tap+0x404/0x850 [ 644.154708][T17687] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.154731][T17687] netlink_deliver_tap+0x19c/0x1b0 [ 644.154754][T17687] netlink_unicast+0x72f/0x8d0 [ 644.154784][T17687] netlink_sendmsg+0x805/0xb30 [ 644.154815][T17687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.154841][T17687] ? aa_sock_msg_perm+0x94/0x160 [ 644.154866][T17687] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 644.154889][T17687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.154912][T17687] __sock_sendmsg+0x219/0x270 [ 644.154935][T17687] ____sys_sendmsg+0x505/0x830 [ 644.154966][T17687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.155000][T17687] ? import_iovec+0x74/0xa0 [ 644.155023][T17687] ___sys_sendmsg+0x21f/0x2a0 [ 644.155048][T17687] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.155109][T17687] ? __fget_files+0x2a/0x420 [ 644.155127][T17687] ? __fget_files+0x3a0/0x420 [ 644.155157][T17687] __x64_sys_sendmsg+0x19b/0x260 [ 644.155185][T17687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.155218][T17687] ? __pfx_ksys_write+0x10/0x10 [ 644.155234][T17687] ? rcu_is_watching+0x15/0xb0 [ 644.155265][T17687] ? do_syscall_64+0xbe/0x3b0 [ 644.155293][T17687] do_syscall_64+0xfa/0x3b0 [ 644.155310][T17687] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.155328][T17687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.155365][T17687] ? clear_bhb_loop+0x60/0xb0 [ 644.155385][T17687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.155402][T17687] RIP: 0033:0x7f6c14d8e929 [ 644.155419][T17687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.155434][T17687] RSP: 002b:00007f6c15b64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.155453][T17687] RAX: ffffffffffffffda RBX: 00007f6c14fb5fa0 RCX: 00007f6c14d8e929 [ 644.155466][T17687] RDX: 0000000024008084 RSI: 0000200000000200 RDI: 0000000000000004 [ 644.155478][T17687] RBP: 00007f6c15b64090 R08: 0000000000000000 R09: 0000000000000000 [ 644.155488][T17687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.155498][T17687] R13: 0000000000000000 R14: 00007f6c14fb5fa0 R15: 00007ffff96d9dd8 [ 644.155538][T17687] [ 644.721685][T17697] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 644.722280][T17694] IPVS: stopping master sync thread 17697 ... [ 645.207689][T17714] FAULT_INJECTION: forcing a failure. [ 645.207689][T17714] name failslab, interval 1, probability 0, space 0, times 0 [ 645.274396][T17714] CPU: 0 UID: 0 PID: 17714 Comm: syz.2.2326 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 645.274435][T17714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 645.274446][T17714] Call Trace: [ 645.274453][T17714] [ 645.274461][T17714] dump_stack_lvl+0x189/0x250 [ 645.274492][T17714] ? __pfx____ratelimit+0x10/0x10 [ 645.274510][T17714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.274533][T17714] ? __pfx__printk+0x10/0x10 [ 645.274557][T17714] ? __pfx___might_resched+0x10/0x10 [ 645.274580][T17714] ? fs_reclaim_acquire+0x7d/0x100 [ 645.274604][T17714] should_fail_ex+0x414/0x560 [ 645.274627][T17714] should_failslab+0xa8/0x100 [ 645.274645][T17714] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 645.274661][T17714] ? __alloc_skb+0x112/0x2d0 [ 645.274683][T17714] __alloc_skb+0x112/0x2d0 [ 645.274707][T17714] netlink_ack+0x146/0xa50 [ 645.274725][T17714] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.274743][T17714] ? ref_tracker_free+0x63a/0x7d0 [ 645.274762][T17714] ? __copy_skb_header+0xa7/0x550 [ 645.274786][T17714] ? __pfx_ref_tracker_free+0x10/0x10 [ 645.274806][T17714] ? __skb_clone+0x63/0x7a0 [ 645.274835][T17714] netlink_rcv_skb+0x28c/0x470 [ 645.274856][T17714] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.274876][T17714] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.274909][T17714] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.274927][T17714] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.274952][T17714] netlink_unicast+0x758/0x8d0 [ 645.274982][T17714] netlink_sendmsg+0x805/0xb30 [ 645.275012][T17714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.275034][T17714] ? aa_sock_msg_perm+0x94/0x160 [ 645.275058][T17714] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.275078][T17714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.275099][T17714] __sock_sendmsg+0x219/0x270 [ 645.275121][T17714] ____sys_sendmsg+0x505/0x830 [ 645.275149][T17714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.275177][T17714] ? import_iovec+0x74/0xa0 [ 645.275197][T17714] ___sys_sendmsg+0x21f/0x2a0 [ 645.275221][T17714] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.275279][T17714] ? __fget_files+0x2a/0x420 [ 645.275296][T17714] ? __fget_files+0x3a0/0x420 [ 645.275324][T17714] __x64_sys_sendmsg+0x19b/0x260 [ 645.275349][T17714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.275381][T17714] ? __pfx_ksys_write+0x10/0x10 [ 645.275395][T17714] ? rcu_is_watching+0x15/0xb0 [ 645.275435][T17714] ? do_syscall_64+0xbe/0x3b0 [ 645.275459][T17714] do_syscall_64+0xfa/0x3b0 [ 645.275475][T17714] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.275492][T17714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.275508][T17714] ? clear_bhb_loop+0x60/0xb0 [ 645.275528][T17714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.275544][T17714] RIP: 0033:0x7ff85bf8e929 [ 645.275561][T17714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.275575][T17714] RSP: 002b:00007ff85cda0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.275595][T17714] RAX: ffffffffffffffda RBX: 00007ff85c1b5fa0 RCX: 00007ff85bf8e929 [ 645.275607][T17714] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 645.275618][T17714] RBP: 00007ff85cda0090 R08: 0000000000000000 R09: 0000000000000000 [ 645.275629][T17714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.275639][T17714] R13: 0000000000000000 R14: 00007ff85c1b5fa0 R15: 00007ffce920ec68 [ 645.275667][T17714] [ 645.753378][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'. [ 645.861656][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'. [ 645.945444][T17718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2327'. [ 646.531706][T17763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2336'. [ 646.684709][T17763] bond1: entered promiscuous mode [ 646.724213][T17763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 647.272084][T17763] bond1 (unregistering): Released all slaves [ 647.859303][T17812] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 647.880563][T17812] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 648.376448][T17818] netlink: 'syz.1.2348': attribute type 303 has an invalid length. [ 648.473774][T17824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2348'. [ 648.520242][T17840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2355'. [ 648.563509][T17840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2355'. [ 648.588250][T17843] netlink: 'syz.4.2357': attribute type 1 has an invalid length. [ 648.598808][T17843] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.2357'. [ 648.644248][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'. [ 648.695935][T17851] netlink: 'syz.3.2358': attribute type 11 has an invalid length. [ 648.825981][T17856] FAULT_INJECTION: forcing a failure. [ 648.825981][T17856] name failslab, interval 1, probability 0, space 0, times 0 [ 648.903699][T17856] CPU: 0 UID: 0 PID: 17856 Comm: syz.2.2362 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 648.903730][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.903741][T17856] Call Trace: [ 648.903749][T17856] [ 648.903758][T17856] dump_stack_lvl+0x189/0x250 [ 648.903789][T17856] ? __pfx____ratelimit+0x10/0x10 [ 648.903808][T17856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.903830][T17856] ? __pfx__printk+0x10/0x10 [ 648.903858][T17856] ? __pfx___might_resched+0x10/0x10 [ 648.903881][T17856] ? fs_reclaim_acquire+0x7d/0x100 [ 648.903905][T17856] should_fail_ex+0x414/0x560 [ 648.903931][T17856] should_failslab+0xa8/0x100 [ 648.903952][T17856] __kmalloc_noprof+0xcb/0x4f0 [ 648.903969][T17856] ? tcf_idr_create+0x5d/0x6c0 [ 648.903992][T17856] tcf_idr_create+0x5d/0x6c0 [ 648.904018][T17856] tcf_idr_create_from_flags+0x60/0x80 [ 648.904042][T17856] tcf_mirred_init+0x55c/0xd20 [ 648.904079][T17856] ? __pfx_tcf_mirred_init+0x10/0x10 [ 648.904108][T17856] ? nla_memcpy+0x5b/0xc0 [ 648.904140][T17856] tcf_action_init_1+0x460/0x6d0 [ 648.904165][T17856] ? __pfx_tcf_action_init_1+0x10/0x10 [ 648.904182][T17856] ? _raw_read_unlock+0x28/0x50 [ 648.904204][T17856] ? tc_action_load_ops+0x214/0x4e0 [ 648.904246][T17856] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 648.904270][T17856] ? __nla_parse+0x40/0x60 [ 648.904296][T17856] tcf_action_init+0x2cf/0xab0 [ 648.904327][T17856] ? __pfx_tcf_action_init+0x10/0x10 [ 648.904378][T17856] ? __pfx___nla_validate_parse+0x10/0x10 [ 648.904456][T17856] tc_ctl_action+0x430/0xbd0 [ 648.904487][T17856] ? __pfx_tc_ctl_action+0x10/0x10 [ 648.904515][T17856] ? rcu_is_watching+0x15/0xb0 [ 648.904587][T17856] ? __pfx_tc_ctl_action+0x10/0x10 [ 648.904606][T17856] rtnetlink_rcv_msg+0x77c/0xb70 [ 648.904633][T17856] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 648.904653][T17856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 648.904672][T17856] ? ref_tracker_free+0x63a/0x7d0 [ 648.904692][T17856] ? __copy_skb_header+0xa7/0x550 [ 648.904720][T17856] ? __pfx_ref_tracker_free+0x10/0x10 [ 648.904755][T17856] netlink_rcv_skb+0x205/0x470 [ 648.904779][T17856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 648.904802][T17856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 648.904839][T17856] ? netlink_deliver_tap+0x2e/0x1b0 [ 648.904859][T17856] ? netlink_deliver_tap+0x2e/0x1b0 [ 648.904887][T17856] netlink_unicast+0x758/0x8d0 [ 648.904921][T17856] netlink_sendmsg+0x805/0xb30 [ 648.904953][T17856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.904979][T17856] ? aa_sock_msg_perm+0x94/0x160 [ 648.905004][T17856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 648.905026][T17856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.905048][T17856] __sock_sendmsg+0x219/0x270 [ 648.905073][T17856] ____sys_sendmsg+0x505/0x830 [ 648.905104][T17856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.905139][T17856] ? import_iovec+0x74/0xa0 [ 648.905161][T17856] ___sys_sendmsg+0x21f/0x2a0 [ 648.905188][T17856] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.905253][T17856] ? __fget_files+0x2a/0x420 [ 648.905272][T17856] ? __fget_files+0x3a0/0x420 [ 648.905304][T17856] __x64_sys_sendmsg+0x19b/0x260 [ 648.905331][T17856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 648.905366][T17856] ? __pfx_ksys_write+0x10/0x10 [ 648.905394][T17856] ? rcu_is_watching+0x15/0xb0 [ 648.905429][T17856] ? do_syscall_64+0xbe/0x3b0 [ 648.905451][T17856] do_syscall_64+0xfa/0x3b0 [ 648.905468][T17856] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.905486][T17856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.905503][T17856] ? clear_bhb_loop+0x60/0xb0 [ 648.905523][T17856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.905540][T17856] RIP: 0033:0x7ff85bf8e929 [ 648.905558][T17856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.905573][T17856] RSP: 002b:00007ff85cda0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.905611][T17856] RAX: ffffffffffffffda RBX: 00007ff85c1b5fa0 RCX: 00007ff85bf8e929 [ 648.905624][T17856] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000003 [ 648.905635][T17856] RBP: 00007ff85cda0090 R08: 0000000000000000 R09: 0000000000000000 [ 648.905646][T17856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.905657][T17856] R13: 0000000000000000 R14: 00007ff85c1b5fa0 R15: 00007ffce920ec68 [ 648.905687][T17856] [ 650.814448][T17908] FAULT_INJECTION: forcing a failure. [ 650.814448][T17908] name failslab, interval 1, probability 0, space 0, times 0 [ 650.821014][T17910] __nla_validate_parse: 6 callbacks suppressed [ 650.821040][T17910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2380'. [ 650.829687][T17908] CPU: 0 UID: 0 PID: 17908 Comm: syz.1.2379 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 650.829716][T17908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 650.829726][T17908] Call Trace: [ 650.829733][T17908] [ 650.829739][T17908] dump_stack_lvl+0x189/0x250 [ 650.829769][T17908] ? __pfx____ratelimit+0x10/0x10 [ 650.829788][T17908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.829810][T17908] ? __pfx__printk+0x10/0x10 [ 650.829840][T17908] ? __lock_acquire+0xab9/0xd20 [ 650.829875][T17908] should_fail_ex+0x414/0x560 [ 650.829903][T17908] should_failslab+0xa8/0x100 [ 650.829923][T17908] kmem_cache_alloc_noprof+0x73/0x3c0 [ 650.829961][T17908] ? skb_clone+0x212/0x3a0 [ 650.829975][T17908] ? __pfx_skb_network_protocol+0x10/0x10 [ 650.830003][T17908] skb_clone+0x212/0x3a0 [ 650.830016][T17908] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 650.830038][T17908] dev_queue_xmit_nit+0x416/0xcc0 [ 650.830081][T17908] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 650.830112][T17908] dev_hard_start_xmit+0x1be/0x830 [ 650.830153][T17908] __dev_queue_xmit+0x1adf/0x3a70 [ 650.830174][T17908] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 650.830200][T17908] ? __dev_queue_xmit+0x27e/0x3a70 [ 650.830216][T17908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.830247][T17908] ? __pfx___dev_queue_xmit+0x10/0x10 [ 650.830301][T17908] ? __copy_skb_header+0xa7/0x550 [ 650.830326][T17908] ? __asan_memcpy+0x40/0x70 [ 650.830366][T17908] ? skb_clone+0x246/0x3a0 [ 650.830385][T17908] __netlink_deliver_tap+0x5ad/0x850 [ 650.830431][T17908] ? netlink_deliver_tap+0x2e/0x1b0 [ 650.830453][T17908] netlink_deliver_tap+0x19c/0x1b0 [ 650.830475][T17908] netlink_unicast+0x72f/0x8d0 [ 650.830505][T17908] netlink_sendmsg+0x805/0xb30 [ 650.830535][T17908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.830559][T17908] ? aa_sock_msg_perm+0x94/0x160 [ 650.830583][T17908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 650.830603][T17908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.830624][T17908] __sock_sendmsg+0x219/0x270 [ 650.830647][T17908] ____sys_sendmsg+0x505/0x830 [ 650.830676][T17908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.830709][T17908] ? import_iovec+0x74/0xa0 [ 650.830730][T17908] ___sys_sendmsg+0x21f/0x2a0 [ 650.830755][T17908] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.830815][T17908] ? __fget_files+0x2a/0x420 [ 650.830832][T17908] ? __fget_files+0x3a0/0x420 [ 650.830862][T17908] __x64_sys_sendmsg+0x19b/0x260 [ 650.830888][T17908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 650.830921][T17908] ? __pfx_ksys_write+0x10/0x10 [ 650.830935][T17908] ? rcu_is_watching+0x15/0xb0 [ 650.830966][T17908] ? do_syscall_64+0xbe/0x3b0 [ 650.830993][T17908] do_syscall_64+0xfa/0x3b0 [ 650.831009][T17908] ? lockdep_hardirqs_on+0x9c/0x150 [ 650.831025][T17908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.831040][T17908] ? clear_bhb_loop+0x60/0xb0 [ 650.831061][T17908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.831077][T17908] RIP: 0033:0x7f647178e929 [ 650.831094][T17908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.831109][T17908] RSP: 002b:00007f64726d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.831129][T17908] RAX: ffffffffffffffda RBX: 00007f64719b5fa0 RCX: 00007f647178e929 [ 650.831141][T17908] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000014 [ 650.831152][T17908] RBP: 00007f64726d3090 R08: 0000000000000000 R09: 0000000000000000 [ 650.831163][T17908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.831173][T17908] R13: 0000000000000000 R14: 00007f64719b5fa0 R15: 00007ffd9cdff808 [ 650.831201][T17908] [ 651.396510][T17924] FAULT_INJECTION: forcing a failure. [ 651.396510][T17924] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 651.412343][T17924] CPU: 0 UID: 0 PID: 17924 Comm: syz.0.2386 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 651.412371][T17924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 651.412382][T17924] Call Trace: [ 651.412389][T17924] [ 651.412399][T17924] dump_stack_lvl+0x189/0x250 [ 651.412429][T17924] ? __pfx____ratelimit+0x10/0x10 [ 651.412447][T17924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.412470][T17924] ? __pfx__printk+0x10/0x10 [ 651.412490][T17924] ? fs_reclaim_acquire+0x7d/0x100 [ 651.412519][T17924] should_fail_ex+0x414/0x560 [ 651.412545][T17924] prepare_alloc_pages+0x213/0x610 [ 651.412572][T17924] __alloc_frozen_pages_noprof+0x123/0x370 [ 651.412596][T17924] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 651.412627][T17924] ? policy_nodemask+0x27c/0x720 [ 651.412642][T17924] ? __lock_acquire+0xab9/0xd20 [ 651.412670][T17924] alloc_pages_mpol+0x232/0x4a0 [ 651.412693][T17924] alloc_pages_noprof+0xa9/0x190 [ 651.412712][T17924] get_free_pages_noprof+0xf/0x80 [ 651.412732][T17924] kasan_populate_vmalloc+0x33/0x1a0 [ 651.412753][T17924] ? do_raw_spin_unlock+0x122/0x240 [ 651.412776][T17924] alloc_vmap_area+0xd51/0x1490 [ 651.412808][T17924] ? __pfx_alloc_vmap_area+0x10/0x10 [ 651.412823][T17924] ? __kasan_kmalloc+0x93/0xb0 [ 651.412839][T17924] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 651.412856][T17924] ? __sys_bpf+0x67e/0x860 [ 651.412874][T17924] ? __get_vm_area_node+0x13f/0x300 [ 651.412890][T17924] ? dev_map_alloc+0x1c9/0x540 [ 651.412914][T17924] __get_vm_area_node+0x1f8/0x300 [ 651.412937][T17924] __vmalloc_node_range_noprof+0x301/0x12f0 [ 651.412955][T17924] ? dev_map_alloc+0x1c9/0x540 [ 651.413004][T17924] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 651.413023][T17924] ? rcu_is_watching+0x15/0xb0 [ 651.413046][T17924] ? trace_kmalloc+0x1f/0xd0 [ 651.413059][T17924] ? __kmalloc_node_noprof+0x293/0x4e0 [ 651.413074][T17924] ? bpf_map_area_alloc+0x64/0x180 [ 651.413099][T17924] bpf_map_area_alloc+0x12d/0x180 [ 651.413120][T17924] ? dev_map_alloc+0x1c9/0x540 [ 651.413145][T17924] dev_map_alloc+0x1c9/0x540 [ 651.413173][T17924] map_create+0x900/0x1150 [ 651.413198][T17924] ? security_bpf+0x7e/0x300 [ 651.413221][T17924] __sys_bpf+0x67e/0x860 [ 651.413309][T17924] ? __pfx___sys_bpf+0x10/0x10 [ 651.413341][T17924] ? ksys_write+0x22a/0x250 [ 651.413360][T17924] ? __pfx_ksys_write+0x10/0x10 [ 651.413374][T17924] ? rcu_is_watching+0x15/0xb0 [ 651.413403][T17924] __x64_sys_bpf+0x7c/0x90 [ 651.413423][T17924] do_syscall_64+0xfa/0x3b0 [ 651.413440][T17924] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.413456][T17924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.413472][T17924] ? clear_bhb_loop+0x60/0xb0 [ 651.413492][T17924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.413509][T17924] RIP: 0033:0x7f1c0638e929 [ 651.413528][T17924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.413540][T17924] RSP: 002b:00007f1c0720e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 651.413558][T17924] RAX: ffffffffffffffda RBX: 00007f1c065b5fa0 RCX: 00007f1c0638e929 [ 651.413570][T17924] RDX: 0000000000000048 RSI: 0000200000000240 RDI: 0000000000000000 [ 651.413581][T17924] RBP: 00007f1c0720e090 R08: 0000000000000000 R09: 0000000000000000 [ 651.413592][T17924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.413602][T17924] R13: 0000000000000000 R14: 00007f1c065b5fa0 R15: 00007ffe1fb7cb78 [ 651.413630][T17924] [ 652.397571][T17937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 652.462913][T17937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 652.483130][T17941] FAULT_INJECTION: forcing a failure. [ 652.483130][T17941] name failslab, interval 1, probability 0, space 0, times 0 [ 652.534922][T17941] CPU: 0 UID: 0 PID: 17941 Comm: syz.0.2390 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 652.534949][T17941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 652.534960][T17941] Call Trace: [ 652.534968][T17941] [ 652.534977][T17941] dump_stack_lvl+0x189/0x250 [ 652.535006][T17941] ? __pfx____ratelimit+0x10/0x10 [ 652.535025][T17941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.535048][T17941] ? __pfx__printk+0x10/0x10 [ 652.535074][T17941] ? __pfx___might_resched+0x10/0x10 [ 652.535098][T17941] ? fs_reclaim_acquire+0x7d/0x100 [ 652.535137][T17941] should_fail_ex+0x414/0x560 [ 652.535165][T17941] should_failslab+0xa8/0x100 [ 652.535187][T17941] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 652.535204][T17941] ? __d_alloc+0x31/0x6f0 [ 652.535232][T17941] __d_alloc+0x31/0x6f0 [ 652.535260][T17941] d_alloc_parallel+0xe0/0x14e0 [ 652.535298][T17941] ? __lock_acquire+0xab9/0xd20 [ 652.535328][T17941] ? __pfx_d_alloc_parallel+0x10/0x10 [ 652.535356][T17941] ? __raw_spin_lock_init+0x45/0x100 [ 652.535377][T17941] ? __init_waitqueue_head+0xa9/0x150 [ 652.535403][T17941] __lookup_slow+0x116/0x3d0 [ 652.535430][T17941] ? __pfx___lookup_slow+0x10/0x10 [ 652.535463][T17941] ? d_lookup+0x8a/0xa0 [ 652.535485][T17941] ? lookup_noperm+0x112/0x220 [ 652.535511][T17941] start_creating+0x22e/0x3c0 [ 652.535539][T17941] ? __pfx_start_creating+0x10/0x10 [ 652.535564][T17941] ? snprintf+0xda/0x120 [ 652.535595][T17941] __debugfs_create_file+0x79/0x4f0 [ 652.535626][T17941] debugfs_create_file_full+0x3f/0x60 [ 652.535654][T17941] ref_tracker_dir_debugfs+0x14e/0x270 [ 652.535678][T17941] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 652.535731][T17941] ? rcu_is_watching+0x15/0xb0 [ 652.535755][T17941] ? alloc_netdev_mqs+0xa3/0x1170 [ 652.535780][T17941] ? __raw_spin_lock_init+0x45/0x100 [ 652.535802][T17941] alloc_netdev_mqs+0x26f/0x1170 [ 652.535818][T17941] ? __pfx_veth_setup+0x10/0x10 [ 652.535848][T17941] rtnl_create_link+0x31f/0xd10 [ 652.535874][T17941] rtnl_newlink_create+0x25c/0xb00 [ 652.535906][T17941] ? __pfx_aa_get_newest_label+0x10/0x10 [ 652.535933][T17941] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 652.535953][T17941] ? rtnl_newlink+0x8db/0x1c70 [ 652.535976][T17941] ? __pfx___mutex_lock+0x10/0x10 [ 652.536007][T17941] ? ns_capable+0x8a/0xf0 [ 652.536035][T17941] rtnl_newlink+0x16d6/0x1c70 [ 652.536075][T17941] ? __pfx_rtnl_newlink+0x10/0x10 [ 652.536093][T17941] ? is_bpf_text_address+0x26/0x2b0 [ 652.536129][T17941] ? __lock_acquire+0xab9/0xd20 [ 652.536223][T17941] ? __lock_acquire+0xab9/0xd20 [ 652.536274][T17941] ? __pfx_rtnl_newlink+0x10/0x10 [ 652.536295][T17941] rtnetlink_rcv_msg+0x7cc/0xb70 [ 652.536319][T17941] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 652.536340][T17941] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 652.536380][T17941] netlink_rcv_skb+0x205/0x470 [ 652.536402][T17941] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 652.536423][T17941] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 652.536459][T17941] ? netlink_deliver_tap+0x2e/0x1b0 [ 652.536479][T17941] ? netlink_deliver_tap+0x2e/0x1b0 [ 652.536507][T17941] netlink_unicast+0x758/0x8d0 [ 652.536538][T17941] netlink_sendmsg+0x805/0xb30 [ 652.536569][T17941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.536593][T17941] ? aa_sock_msg_perm+0x94/0x160 [ 652.536620][T17941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 652.536640][T17941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.536661][T17941] __sock_sendmsg+0x219/0x270 [ 652.536684][T17941] ____sys_sendmsg+0x505/0x830 [ 652.536714][T17941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.536748][T17941] ? import_iovec+0x74/0xa0 [ 652.536770][T17941] ___sys_sendmsg+0x21f/0x2a0 [ 652.536796][T17941] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.536860][T17941] ? __fget_files+0x2a/0x420 [ 652.536876][T17941] ? __fget_files+0x3a0/0x420 [ 652.536906][T17941] __x64_sys_sendmsg+0x19b/0x260 [ 652.536932][T17941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.536965][T17941] ? __pfx_ksys_write+0x10/0x10 [ 652.536979][T17941] ? rcu_is_watching+0x15/0xb0 [ 652.537007][T17941] ? do_syscall_64+0xbe/0x3b0 [ 652.537031][T17941] do_syscall_64+0xfa/0x3b0 [ 652.537047][T17941] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.537064][T17941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.537080][T17941] ? clear_bhb_loop+0x60/0xb0 [ 652.537108][T17941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.537124][T17941] RIP: 0033:0x7f1c0638e929 [ 652.537141][T17941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.537155][T17941] RSP: 002b:00007f1c0720e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.537175][T17941] RAX: ffffffffffffffda RBX: 00007f1c065b5fa0 RCX: 00007f1c0638e929 [ 652.537189][T17941] RDX: 0000000024008000 RSI: 0000200000000140 RDI: 0000000000000005 [ 652.537199][T17941] RBP: 00007f1c0720e090 R08: 0000000000000000 R09: 0000000000000000 [ 652.537209][T17941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.537219][T17941] R13: 0000000000000000 R14: 00007f1c065b5fa0 R15: 00007ffe1fb7cb78 [ 652.537248][T17941] [ 653.231429][T17937] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453) [ 653.318043][T17937] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 653.548570][T17911] syz.3.2382: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 653.567347][T17911] CPU: 0 UID: 0 PID: 17911 Comm: syz.3.2382 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 653.567373][T17911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 653.567383][T17911] Call Trace: [ 653.567389][T17911] [ 653.567396][T17911] dump_stack_lvl+0x189/0x250 [ 653.567430][T17911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.567454][T17911] ? __pfx__printk+0x10/0x10 [ 653.567472][T17911] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 653.567490][T17911] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 653.567512][T17911] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 653.567536][T17911] warn_alloc+0x214/0x310 [ 653.567564][T17911] ? __pfx_warn_alloc+0x10/0x10 [ 653.567595][T17911] ? __get_vm_area_node+0x28f/0x300 [ 653.567616][T17911] ? translate_table+0x19b/0x2040 [ 653.567645][T17911] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 653.567696][T17911] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 653.567723][T17911] ? rcu_is_watching+0x15/0xb0 [ 653.567750][T17911] ? translate_table+0x19b/0x2040 [ 653.567773][T17911] ? translate_table+0x19b/0x2040 [ 653.567794][T17911] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 653.567814][T17911] ? translate_table+0x19b/0x2040 [ 653.567845][T17911] ? xt_alloc_table_info+0x3b/0xa0 [ 653.567879][T17911] translate_table+0x19b/0x2040 [ 653.567914][T17911] ? __lock_acquire+0xab9/0xd20 [ 653.567942][T17911] ? __pfx_translate_table+0x10/0x10 [ 653.567967][T17911] ? __might_fault+0xb0/0x130 [ 653.568006][T17911] ? _copy_from_user+0x94/0xb0 [ 653.568031][T17911] do_ip6t_set_ctl+0x970/0xce0 [ 653.568063][T17911] ? rcu_is_watching+0x15/0xb0 [ 653.568087][T17911] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 653.568131][T17911] ? __pfx___mutex_lock+0x10/0x10 [ 653.568149][T17911] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 653.568165][T17911] ? aa_sk_perm+0x81e/0x950 [ 653.568190][T17911] ? __pfx_aa_sk_perm+0x10/0x10 [ 653.568214][T17911] nf_setsockopt+0x26f/0x290 [ 653.568237][T17911] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 653.568262][T17911] do_sock_setsockopt+0x25a/0x3e0 [ 653.568292][T17911] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 653.568322][T17911] ? __fget_files+0x2a/0x420 [ 653.568352][T17911] __x64_sys_setsockopt+0x18b/0x220 [ 653.568384][T17911] do_syscall_64+0xfa/0x3b0 [ 653.568403][T17911] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.568421][T17911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.568440][T17911] ? clear_bhb_loop+0x60/0xb0 [ 653.568463][T17911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.568480][T17911] RIP: 0033:0x7f6c14d8e929 [ 653.568498][T17911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.568513][T17911] RSP: 002b:00007f6c15b64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 653.568534][T17911] RAX: ffffffffffffffda RBX: 00007f6c14fb5fa0 RCX: 00007f6c14d8e929 [ 653.568547][T17911] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 653.568559][T17911] RBP: 00007f6c14e10b39 R08: 00000000000005f0 R09: 0000000000000000 [ 653.568571][T17911] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 653.568582][T17911] R13: 0000000000000000 R14: 00007f6c14fb5fa0 R15: 00007ffff96d9dd8 [ 653.568613][T17911] [ 653.568637][T17911] Mem-Info: [ 653.928288][T17911] active_anon:7090 inactive_anon:0 isolated_anon:0 [ 653.928288][T17911] active_file:1823 inactive_file:40052 isolated_file:0 [ 653.928288][T17911] unevictable:768 dirty:402 writeback:0 [ 653.928288][T17911] slab_reclaimable:13488 slab_unreclaimable:183723 [ 653.928288][T17911] mapped:32689 shmem:1490 pagetables:1318 [ 653.928288][T17911] sec_pagetables:0 bounce:0 [ 653.928288][T17911] kernel_misc_reclaimable:0 [ 653.928288][T17911] free:1212466 free_pcp:20782 free_cma:0 [ 653.974076][T17911] Node 0 active_anon:28560kB inactive_anon:0kB active_file:7292kB inactive_file:160012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130756kB dirty:1604kB writeback:0kB shmem:4424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11944kB pagetables:5140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 654.058600][T17911] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 654.123881][T17911] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.173174][T17911] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 654.208154][T17911] Node 0 DMA32 free:915856kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28216kB inactive_anon:0kB active_file:7292kB inactive_file:158196kB unevictable:1536kB writepending:1660kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:87000kB local_pcp:49776kB free_cma:0kB [ 654.257625][T17911] lowmem_reserve[]: 0 0 1 1 1 [ 654.269245][T17911] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 654.310119][T17911] lowmem_reserve[]: 0 0 0 0 0 [ 654.315910][T17911] Node 1 Normal free:3918616kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4704kB local_pcp:0kB free_cma:0kB [ 654.348224][T17911] lowmem_reserve[]: 0 0 0 0 0 [ 654.353447][T17911] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 654.401669][T17911] Node 0 DMA32: 834*4kB (UM) 349*8kB (M) 238*16kB (ME) 202*32kB (M) 99*64kB (UM) 38*128kB (ME) 23*256kB (UM) 15*512kB (UM) 10*1024kB (UME) 6*2048kB (UM) 208*4096kB (UM) = 915664kB [ 654.450987][T17911] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 654.477273][T17911] Node 1 Normal: 178*4kB (UM) 50*8kB (UME) 40*16kB (UME) 224*32kB (UME) 95*64kB (UME) 27*128kB (UME) 9*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3918616kB [ 654.512089][T17911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 654.544226][T17911] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 654.569750][T17911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 654.594319][T17911] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 654.612623][T17911] 43362 total pagecache pages [ 654.712980][T17911] 0 pages in swap cache [ 654.717970][T17911] Free swap = 124996kB [ 654.722282][T17911] Total swap = 124996kB [ 654.735734][T17911] 2097051 pages RAM [ 654.743892][T17911] 0 pages HighMem/MovableOnly [ 654.770940][T17911] 424693 pages reserved [ 654.786470][T17911] 0 pages cma reserved [ 655.203574][T17990] FAULT_INJECTION: forcing a failure. [ 655.203574][T17990] name failslab, interval 1, probability 0, space 0, times 0 [ 655.224972][T17990] CPU: 1 UID: 0 PID: 17990 Comm: syz.4.2404 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 655.225002][T17990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.225013][T17990] Call Trace: [ 655.225021][T17990] [ 655.225029][T17990] dump_stack_lvl+0x189/0x250 [ 655.225061][T17990] ? __pfx____ratelimit+0x10/0x10 [ 655.225081][T17990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.225105][T17990] ? __pfx__printk+0x10/0x10 [ 655.225131][T17990] ? __pfx___might_resched+0x10/0x10 [ 655.225154][T17990] ? fs_reclaim_acquire+0x7d/0x100 [ 655.225181][T17990] should_fail_ex+0x414/0x560 [ 655.225207][T17990] should_failslab+0xa8/0x100 [ 655.225228][T17990] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 655.225247][T17990] ? __alloc_skb+0x112/0x2d0 [ 655.225274][T17990] __alloc_skb+0x112/0x2d0 [ 655.225300][T17990] netlink_ack+0x146/0xa50 [ 655.225319][T17990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.225333][T17990] ? ref_tracker_free+0x63a/0x7d0 [ 655.225355][T17990] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 655.225378][T17990] ? __pfx_nl80211_post_doit+0x10/0x10 [ 655.225403][T17990] ? __pfx_ref_tracker_free+0x10/0x10 [ 655.225438][T17990] netlink_rcv_skb+0x28c/0x470 [ 655.225457][T17990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.225473][T17990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.225513][T17990] ? down_read+0x1ad/0x2e0 [ 655.225537][T17990] genl_rcv+0x28/0x40 [ 655.225558][T17990] netlink_unicast+0x758/0x8d0 [ 655.225591][T17990] netlink_sendmsg+0x805/0xb30 [ 655.225623][T17990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.225648][T17990] ? aa_sock_msg_perm+0x94/0x160 [ 655.225673][T17990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 655.225693][T17990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.225714][T17990] __sock_sendmsg+0x219/0x270 [ 655.225738][T17990] ____sys_sendmsg+0x505/0x830 [ 655.225767][T17990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.225801][T17990] ? import_iovec+0x74/0xa0 [ 655.225823][T17990] ___sys_sendmsg+0x21f/0x2a0 [ 655.225849][T17990] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.225914][T17990] ? __fget_files+0x2a/0x420 [ 655.225932][T17990] ? __fget_files+0x3a0/0x420 [ 655.225971][T17990] __x64_sys_sendmsg+0x19b/0x260 [ 655.225997][T17990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 655.226032][T17990] ? __pfx_ksys_write+0x10/0x10 [ 655.226046][T17990] ? rcu_is_watching+0x15/0xb0 [ 655.226078][T17990] ? do_syscall_64+0xbe/0x3b0 [ 655.226101][T17990] do_syscall_64+0xfa/0x3b0 [ 655.226117][T17990] ? lockdep_hardirqs_on+0x9c/0x150 [ 655.226134][T17990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.226152][T17990] ? clear_bhb_loop+0x60/0xb0 [ 655.226174][T17990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.226191][T17990] RIP: 0033:0x7f398bb8e929 [ 655.226207][T17990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.226223][T17990] RSP: 002b:00007f398cacc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.226242][T17990] RAX: ffffffffffffffda RBX: 00007f398bdb5fa0 RCX: 00007f398bb8e929 [ 655.226255][T17990] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 655.226267][T17990] RBP: 00007f398cacc090 R08: 0000000000000000 R09: 0000000000000000 [ 655.226278][T17990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.226289][T17990] R13: 0000000000000000 R14: 00007f398bdb5fa0 R15: 00007ffc4b7bf1e8 [ 655.226320][T17990] [ 655.805800][T17999] FAULT_INJECTION: forcing a failure. [ 655.805800][T17999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.833801][T17999] CPU: 0 UID: 0 PID: 17999 Comm: syz.4.2408 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 655.833830][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.833842][T17999] Call Trace: [ 655.833849][T17999] [ 655.833858][T17999] dump_stack_lvl+0x189/0x250 [ 655.833888][T17999] ? __pfx____ratelimit+0x10/0x10 [ 655.833907][T17999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.833930][T17999] ? __pfx__printk+0x10/0x10 [ 655.833947][T17999] ? __might_fault+0xb0/0x130 [ 655.833976][T17999] should_fail_ex+0x414/0x560 [ 655.834003][T17999] _copy_from_user+0x2d/0xb0 [ 655.834022][T17999] do_sock_getsockopt+0x1cd/0x650 [ 655.834050][T17999] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 655.834072][T17999] ? do_syscall_64+0x80/0x3b0 [ 655.834090][T17999] ? __fget_files+0x3a0/0x420 [ 655.834107][T17999] ? __fget_files+0x2a/0x420 [ 655.834133][T17999] __x64_sys_getsockopt+0x1a5/0x250 [ 655.834154][T17999] ? do_syscall_64+0x80/0x3b0 [ 655.834173][T17999] ? do_syscall_64+0x80/0x3b0 [ 655.834194][T17999] do_syscall_64+0xfa/0x3b0 [ 655.834211][T17999] ? lockdep_hardirqs_on+0x9c/0x150 [ 655.834228][T17999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.834245][T17999] ? clear_bhb_loop+0x60/0xb0 [ 655.834265][T17999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.834277][T17999] RIP: 0033:0x7f398bb8e929 [ 655.834292][T17999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.834307][T17999] RSP: 002b:00007f398cacc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 655.834326][T17999] RAX: ffffffffffffffda RBX: 00007f398bdb5fa0 RCX: 00007f398bb8e929 [ 655.834339][T17999] RDX: 0000000000000045 RSI: 0000000000000001 RDI: 0000000000000003 [ 655.834351][T17999] RBP: 00007f398cacc090 R08: 0000200000000080 R09: 0000000000000000 [ 655.834362][T17999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.834372][T17999] R13: 0000000000000000 R14: 00007f398bdb5fa0 R15: 00007ffc4b7bf1e8 [ 655.834401][T17999] [ 656.356489][T18013] FAULT_INJECTION: forcing a failure. [ 656.356489][T18013] name failslab, interval 1, probability 0, space 0, times 0 [ 656.375045][T18013] CPU: 0 UID: 0 PID: 18013 Comm: syz.2.2413 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 656.375073][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 656.375084][T18013] Call Trace: [ 656.375091][T18013] [ 656.375099][T18013] dump_stack_lvl+0x189/0x250 [ 656.375129][T18013] ? __pfx____ratelimit+0x10/0x10 [ 656.375147][T18013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.375170][T18013] ? __pfx__printk+0x10/0x10 [ 656.375193][T18013] ? __pfx___might_resched+0x10/0x10 [ 656.375217][T18013] ? fs_reclaim_acquire+0x7d/0x100 [ 656.375250][T18013] should_fail_ex+0x414/0x560 [ 656.375276][T18013] should_failslab+0xa8/0x100 [ 656.375297][T18013] kmem_cache_alloc_noprof+0x73/0x3c0 [ 656.375321][T18013] ? skb_clone+0x212/0x3a0 [ 656.375342][T18013] skb_clone+0x212/0x3a0 [ 656.375356][T18013] ? nfnetlink_rcv+0x486/0x2520 [ 656.375375][T18013] nfnetlink_rcv+0x4b4/0x2520 [ 656.375396][T18013] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 656.375417][T18013] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 656.375442][T18013] ? __dev_queue_xmit+0x27e/0x3a70 [ 656.375459][T18013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.375486][T18013] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 656.375520][T18013] ? ref_tracker_free+0x63a/0x7d0 [ 656.375539][T18013] ? __copy_skb_header+0xa7/0x550 [ 656.375563][T18013] ? __pfx_ref_tracker_free+0x10/0x10 [ 656.375601][T18013] ? skb_clone+0x246/0x3a0 [ 656.375620][T18013] ? __netlink_deliver_tap+0x807/0x850 [ 656.375640][T18013] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.375666][T18013] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.375684][T18013] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.375710][T18013] netlink_unicast+0x758/0x8d0 [ 656.375740][T18013] netlink_sendmsg+0x805/0xb30 [ 656.375770][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.375793][T18013] ? aa_sock_msg_perm+0x94/0x160 [ 656.375816][T18013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.375836][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.375856][T18013] __sock_sendmsg+0x219/0x270 [ 656.375875][T18013] ____sys_sendmsg+0x505/0x830 [ 656.375906][T18013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.375934][T18013] ? import_iovec+0x74/0xa0 [ 656.375951][T18013] ___sys_sendmsg+0x21f/0x2a0 [ 656.375974][T18013] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.376023][T18013] ? __fget_files+0x2a/0x420 [ 656.376040][T18013] ? __fget_files+0x3a0/0x420 [ 656.376066][T18013] __x64_sys_sendmsg+0x19b/0x260 [ 656.376092][T18013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.376123][T18013] ? __pfx_ksys_write+0x10/0x10 [ 656.376136][T18013] ? rcu_is_watching+0x15/0xb0 [ 656.376171][T18013] ? do_syscall_64+0xbe/0x3b0 [ 656.376192][T18013] do_syscall_64+0xfa/0x3b0 [ 656.376208][T18013] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.376224][T18013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.376240][T18013] ? clear_bhb_loop+0x60/0xb0 [ 656.376260][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.376276][T18013] RIP: 0033:0x7ff85bf8e929 [ 656.376292][T18013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.376306][T18013] RSP: 002b:00007ff85cda0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.376325][T18013] RAX: ffffffffffffffda RBX: 00007ff85c1b5fa0 RCX: 00007ff85bf8e929 [ 656.376338][T18013] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000014 [ 656.376349][T18013] RBP: 00007ff85cda0090 R08: 0000000000000000 R09: 0000000000000000 [ 656.376360][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.376370][T18013] R13: 0000000000000000 R14: 00007ff85c1b5fa0 R15: 00007ffce920ec68 [ 656.376397][T18013] [ 656.413184][T18014] SET target dimension over the limit! [ 656.725438][T18023] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 657.033084][T18033] netlink: 'syz.2.2419': attribute type 4 has an invalid length. [ 657.334276][T18046] netlink: 'syz.0.2424': attribute type 32 has an invalid length. [ 657.368193][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'. [ 657.416384][T18046] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 657.489172][T18053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2425'. [ 657.927110][T18070] FAULT_INJECTION: forcing a failure. [ 657.927110][T18070] name failslab, interval 1, probability 0, space 0, times 0 [ 657.945762][T18070] CPU: 0 UID: 0 PID: 18070 Comm: syz.3.2428 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 657.945800][T18070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 657.945811][T18070] Call Trace: [ 657.945819][T18070] [ 657.945827][T18070] dump_stack_lvl+0x189/0x250 [ 657.945858][T18070] ? __pfx____ratelimit+0x10/0x10 [ 657.945876][T18070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.945899][T18070] ? __pfx__printk+0x10/0x10 [ 657.945921][T18070] ? __pfx___might_resched+0x10/0x10 [ 657.945945][T18070] ? fs_reclaim_acquire+0x7d/0x100 [ 657.945969][T18070] should_fail_ex+0x414/0x560 [ 657.945994][T18070] should_failslab+0xa8/0x100 [ 657.946014][T18070] kmem_cache_alloc_noprof+0x73/0x3c0 [ 657.946037][T18070] ? security_file_alloc+0x34/0x330 [ 657.946060][T18070] security_file_alloc+0x34/0x330 [ 657.946079][T18070] init_file+0x93/0x2f0 [ 657.946102][T18070] alloc_empty_file+0x6e/0x1d0 [ 657.946122][T18070] alloc_file_pseudo+0x13d/0x210 [ 657.946144][T18070] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 657.946162][T18070] ? __local_bh_enable_ip+0x12d/0x1c0 [ 657.946195][T18070] anon_inode_getfile+0xc5/0x1a0 [ 657.946217][T18070] bpf_link_prime+0xfc/0x220 [ 657.946237][T18070] bpf_raw_tp_link_attach+0x4a5/0x6b0 [ 657.946257][T18070] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 657.946282][T18070] ? __fget_files+0x2a/0x420 [ 657.946306][T18070] bpf_raw_tracepoint_open+0x19b/0x1f0 [ 657.946330][T18070] __sys_bpf+0x3cd/0x860 [ 657.946353][T18070] ? __pfx___sys_bpf+0x10/0x10 [ 657.946387][T18070] ? ksys_write+0x22a/0x250 [ 657.946405][T18070] ? __pfx_ksys_write+0x10/0x10 [ 657.946419][T18070] ? rcu_is_watching+0x15/0xb0 [ 657.946450][T18070] __x64_sys_bpf+0x7c/0x90 [ 657.946470][T18070] do_syscall_64+0xfa/0x3b0 [ 657.946487][T18070] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.946504][T18070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.946519][T18070] ? clear_bhb_loop+0x60/0xb0 [ 657.946541][T18070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.946557][T18070] RIP: 0033:0x7f6c14d8e929 [ 657.946573][T18070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.946588][T18070] RSP: 002b:00007f6c15b64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 657.946607][T18070] RAX: ffffffffffffffda RBX: 00007f6c14fb5fa0 RCX: 00007f6c14d8e929 [ 657.946620][T18070] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 657.946632][T18070] RBP: 00007f6c15b64090 R08: 0000000000000000 R09: 0000000000000000 [ 657.946643][T18070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.946654][T18070] R13: 0000000000000000 R14: 00007f6c14fb5fa0 R15: 00007ffff96d9dd8 [ 657.946683][T18070] [ 658.752559][T18092] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2437'. [ 658.756943][T18094] netlink: 'syz.4.2436': attribute type 10 has an invalid length. [ 658.833794][T18094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2436'. [ 658.862517][T18094] team0: entered promiscuous mode [ 658.993706][T18094] team0: entered allmulticast mode [ 659.078959][T18094] bridge0: port 3(team0) entered blocking state [ 659.090403][T18094] bridge0: port 3(team0) entered disabled state [ 659.178246][T18109] netlink: 'syz.4.2436': attribute type 2 has an invalid length. [ 659.294978][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2440'. [ 659.306236][T18116] netlink: 'syz.1.2441': attribute type 10 has an invalid length. [ 659.326991][T18116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2441'. [ 659.707413][T18125] SET target dimension over the limit! [ 660.057036][T18149] FAULT_INJECTION: forcing a failure. [ 660.057036][T18149] name failslab, interval 1, probability 0, space 0, times 0 [ 660.092963][T18149] CPU: 0 UID: 0 PID: 18149 Comm: syz.1.2448 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 660.092994][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 660.093007][T18149] Call Trace: [ 660.093015][T18149] [ 660.093023][T18149] dump_stack_lvl+0x189/0x250 [ 660.093054][T18149] ? __pfx____ratelimit+0x10/0x10 [ 660.093073][T18149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.093098][T18149] ? __pfx__printk+0x10/0x10 [ 660.093125][T18149] ? __pfx___might_resched+0x10/0x10 [ 660.093149][T18149] ? fs_reclaim_acquire+0x7d/0x100 [ 660.093173][T18149] should_fail_ex+0x414/0x560 [ 660.093201][T18149] ? hash_ipportip_create+0x3a9/0xfe0 [ 660.093224][T18149] should_failslab+0xa8/0x100 [ 660.093246][T18149] __kvmalloc_node_noprof+0x161/0x5f0 [ 660.093266][T18149] ? hash_ipportip_create+0x3a9/0xfe0 [ 660.093287][T18149] ? hash_ipportip_create+0x2fe/0xfe0 [ 660.093314][T18149] hash_ipportip_create+0x3a9/0xfe0 [ 660.093353][T18149] ? __nla_parse+0x40/0x60 [ 660.093375][T18149] ? __pfx_hash_ipportip_create+0x10/0x10 [ 660.093401][T18149] ip_set_create+0xa94/0x1940 [ 660.093422][T18149] ? ip_set_create+0x4a2/0x1940 [ 660.093453][T18149] ? __pfx_ip_set_create+0x10/0x10 [ 660.093507][T18149] nfnetlink_rcv_msg+0xb4d/0x1130 [ 660.093525][T18149] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 660.093558][T18149] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 660.093572][T18149] ? kasan_save_free_info+0x46/0x50 [ 660.093657][T18149] netlink_rcv_skb+0x205/0x470 [ 660.093682][T18149] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 660.093702][T18149] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 660.093737][T18149] ? bpf_lsm_capable+0x9/0x20 [ 660.093754][T18149] ? security_capable+0x7e/0x2e0 [ 660.093785][T18149] nfnetlink_rcv+0x26a/0x2520 [ 660.093808][T18149] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 660.093829][T18149] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 660.093857][T18149] ? __dev_queue_xmit+0x27e/0x3a70 [ 660.093874][T18149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.093904][T18149] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 660.093922][T18149] ? __pfx___dev_queue_xmit+0x10/0x10 [ 660.093955][T18149] ? ref_tracker_free+0x63a/0x7d0 [ 660.093976][T18149] ? __copy_skb_header+0xa7/0x550 [ 660.094003][T18149] ? __pfx_ref_tracker_free+0x10/0x10 [ 660.094046][T18149] ? skb_clone+0x246/0x3a0 [ 660.094067][T18149] ? __netlink_deliver_tap+0x807/0x850 [ 660.094088][T18149] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.094118][T18149] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.094138][T18149] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.094166][T18149] netlink_unicast+0x758/0x8d0 [ 660.094198][T18149] netlink_sendmsg+0x805/0xb30 [ 660.094231][T18149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.094256][T18149] ? aa_sock_msg_perm+0x94/0x160 [ 660.094279][T18149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.094299][T18149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.094320][T18149] __sock_sendmsg+0x219/0x270 [ 660.094344][T18149] ____sys_sendmsg+0x505/0x830 [ 660.094373][T18149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.094407][T18149] ? import_iovec+0x74/0xa0 [ 660.094429][T18149] ___sys_sendmsg+0x21f/0x2a0 [ 660.094456][T18149] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.094520][T18149] ? __fget_files+0x2a/0x420 [ 660.094535][T18149] ? __fget_files+0x3a0/0x420 [ 660.094565][T18149] __x64_sys_sendmsg+0x19b/0x260 [ 660.094592][T18149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.094633][T18149] ? __pfx_ksys_write+0x10/0x10 [ 660.094647][T18149] ? rcu_is_watching+0x15/0xb0 [ 660.094678][T18149] ? do_syscall_64+0xbe/0x3b0 [ 660.094701][T18149] do_syscall_64+0xfa/0x3b0 [ 660.094718][T18149] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.094736][T18149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.094753][T18149] ? clear_bhb_loop+0x60/0xb0 [ 660.094776][T18149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.094793][T18149] RIP: 0033:0x7f647178e929 [ 660.094812][T18149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.094828][T18149] RSP: 002b:00007f64726d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.094848][T18149] RAX: ffffffffffffffda RBX: 00007f64719b5fa0 RCX: 00007f647178e929 [ 660.094861][T18149] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000004 [ 660.094873][T18149] RBP: 00007f64726d3090 R08: 0000000000000000 R09: 0000000000000000 [ 660.094885][T18149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.094896][T18149] R13: 0000000000000000 R14: 00007f64719b5fa0 R15: 00007ffd9cdff808 [ 660.094926][T18149] [ 660.805527][T18164] vlan2: entered promiscuous mode [ 660.817491][T18164] vlan2: entered allmulticast mode [ 660.823046][T18164] hsr_slave_1: entered allmulticast mode [ 661.006640][T18174] netlink: 'syz.3.2456': attribute type 1 has an invalid length. [ 661.278367][T18182] bpq0: entered promiscuous mode [ 661.298498][T18182] bpq0: entered allmulticast mode [ 661.313406][T18182] [ 661.317362][T18182] ====================================================== [ 661.326325][T18182] WARNING: possible circular locking dependency detected [ 661.336938][T18182] 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 Not tainted [ 661.345272][T18182] ------------------------------------------------------ [ 661.352850][T18182] syz.2.2459/18182 is trying to acquire lock: [ 661.361278][T18182] ffff888055acc870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_device_down+0x12a/0x720 [ 661.372543][T18182] [ 661.372543][T18182] but task is already holding lock: [ 661.380018][T18182] ffffffff8f66a678 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 661.390321][T18182] [ 661.390321][T18182] which lock already depends on the new lock. [ 661.390321][T18182] [ 661.401178][T18182] [ 661.401178][T18182] the existing dependency chain (in reverse order) is: [ 661.410727][T18182] [ 661.410727][T18182] -> #2 (nr_node_list_lock){+...}-{3:3}: [ 661.418829][T18182] lock_acquire+0x120/0x360 [ 661.424048][T18182] _raw_spin_lock_bh+0x36/0x50 [ 661.429874][T18182] nr_rt_device_down+0xa9/0x720 [ 661.436466][T18182] nr_device_event+0x137/0x150 [ 661.442731][T18182] notifier_call_chain+0x1b3/0x3e0 [ 661.450530][T18182] __dev_notify_flags+0x18d/0x2e0 [ 661.456545][T18182] netif_change_flags+0xe8/0x1a0 [ 661.462029][T18182] dev_change_flags+0x130/0x260 [ 661.467536][T18182] dev_ioctl+0x7b4/0x1150 [ 661.473034][T18182] sock_do_ioctl+0x22c/0x300 [ 661.478429][T18182] sock_ioctl+0x576/0x790 [ 661.484713][T18182] __se_sys_ioctl+0xfc/0x170 [ 661.490115][T18182] do_syscall_64+0xfa/0x3b0 [ 661.495319][T18182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.502057][T18182] [ 661.502057][T18182] -> #1 (nr_neigh_list_lock){+...}-{3:3}: [ 661.510756][T18182] lock_acquire+0x120/0x360 [ 661.515985][T18182] _raw_spin_lock_bh+0x36/0x50 [ 661.521756][T18182] nr_remove_neigh+0x25/0xe0 [ 661.527541][T18182] nr_add_node+0x1d9f/0x2570 [ 661.532772][T18182] nr_rt_ioctl+0xc12/0xd50 [ 661.540737][T18182] sock_do_ioctl+0xd9/0x300 [ 661.547094][T18182] sock_ioctl+0x576/0x790 [ 661.553055][T18182] __se_sys_ioctl+0xfc/0x170 [ 661.558809][T18182] do_syscall_64+0xfa/0x3b0 [ 661.566382][T18182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.573077][T18182] [ 661.573077][T18182] -> #0 (&nr_node->node_lock){+...}-{3:3}: [ 661.581609][T18182] validate_chain+0xb9b/0x2140 [ 661.587741][T18182] __lock_acquire+0xab9/0xd20 [ 661.593521][T18182] lock_acquire+0x120/0x360 [ 661.599802][T18182] _raw_spin_lock_bh+0x36/0x50 [ 661.605735][T18182] nr_rt_device_down+0x12a/0x720 [ 661.611953][T18182] nr_device_event+0x137/0x150 [ 661.617339][T18182] notifier_call_chain+0x1b3/0x3e0 [ 661.623411][T18182] __dev_notify_flags+0x18d/0x2e0 [ 661.629319][T18182] netif_change_flags+0xe8/0x1a0 [ 661.634875][T18182] dev_change_flags+0x130/0x260 [ 661.640354][T18182] dev_ioctl+0x7b4/0x1150 [ 661.645559][T18182] sock_do_ioctl+0x22c/0x300 [ 661.651205][T18182] sock_ioctl+0x576/0x790 [ 661.656487][T18182] __se_sys_ioctl+0xfc/0x170 [ 661.663618][T18182] do_syscall_64+0xfa/0x3b0 [ 661.670647][T18182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.678814][T18182] [ 661.678814][T18182] other info that might help us debug this: [ 661.678814][T18182] [ 661.689907][T18182] Chain exists of: [ 661.689907][T18182] &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock [ 661.689907][T18182] [ 661.705060][T18182] Possible unsafe locking scenario: [ 661.705060][T18182] [ 661.712716][T18182] CPU0 CPU1 [ 661.718189][T18182] ---- ---- [ 661.724258][T18182] lock(nr_node_list_lock); [ 661.729368][T18182] lock(nr_neigh_list_lock); [ 661.737407][T18182] lock(nr_node_list_lock); [ 661.745567][T18182] lock(&nr_node->node_lock); [ 661.750632][T18182] [ 661.750632][T18182] *** DEADLOCK *** [ 661.750632][T18182] [ 661.759740][T18182] 3 locks held by syz.2.2459/18182: [ 661.765471][T18182] #0: ffffffff8f512e88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 661.774956][T18182] #1: ffffffff8f66a618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 661.787121][T18182] #2: ffffffff8f66a678 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 661.799067][T18182] [ 661.799067][T18182] stack backtrace: [ 661.806111][T18182] CPU: 0 UID: 0 PID: 18182 Comm: syz.2.2459 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 661.806150][T18182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 661.806160][T18182] Call Trace: [ 661.806166][T18182] [ 661.806173][T18182] dump_stack_lvl+0x189/0x250 [ 661.806224][T18182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.806249][T18182] ? __pfx__printk+0x10/0x10 [ 661.806270][T18182] ? print_lock_name+0xde/0x100 [ 661.806290][T18182] print_circular_bug+0x2ee/0x310 [ 661.806306][T18182] check_noncircular+0x134/0x160 [ 661.806322][T18182] validate_chain+0xb9b/0x2140 [ 661.806341][T18182] ? irqentry_exit+0x74/0x90 [ 661.806355][T18182] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.806370][T18182] __lock_acquire+0xab9/0xd20 [ 661.806391][T18182] ? nr_rt_device_down+0x12a/0x720 [ 661.806406][T18182] lock_acquire+0x120/0x360 [ 661.806424][T18182] ? nr_rt_device_down+0x12a/0x720 [ 661.806441][T18182] ? nr_rt_device_down+0x12a/0x720 [ 661.806455][T18182] _raw_spin_lock_bh+0x36/0x50 [ 661.806474][T18182] ? nr_rt_device_down+0x12a/0x720 [ 661.806487][T18182] nr_rt_device_down+0x12a/0x720 [ 661.806512][T18182] nr_device_event+0x137/0x150 [ 661.806526][T18182] notifier_call_chain+0x1b3/0x3e0 [ 661.806550][T18182] __dev_notify_flags+0x18d/0x2e0 [ 661.806571][T18182] ? __pfx___dev_notify_flags+0x10/0x10 [ 661.806588][T18182] ? __dev_change_flags+0x52e/0x6d0 [ 661.806608][T18182] ? __pfx___dev_change_flags+0x10/0x10 [ 661.806625][T18182] ? dev_ioctl+0x7a4/0x1150 [ 661.806640][T18182] ? full_name_hash+0x92/0xe0 [ 661.806660][T18182] netif_change_flags+0xe8/0x1a0 [ 661.806680][T18182] dev_change_flags+0x130/0x260 [ 661.806700][T18182] dev_ioctl+0x7b4/0x1150 [ 661.806717][T18182] sock_do_ioctl+0x22c/0x300 [ 661.806733][T18182] ? __pfx_sock_do_ioctl+0x10/0x10 [ 661.806746][T18182] ? __lock_acquire+0xab9/0xd20 [ 661.806770][T18182] sock_ioctl+0x576/0x790 [ 661.806784][T18182] ? __pfx_sock_ioctl+0x10/0x10 [ 661.806798][T18182] ? __fget_files+0x2a/0x420 [ 661.806812][T18182] ? __fget_files+0x3a0/0x420 [ 661.806826][T18182] ? __fget_files+0x2a/0x420 [ 661.806841][T18182] ? bpf_lsm_file_ioctl+0x9/0x20 [ 661.806860][T18182] ? __pfx_sock_ioctl+0x10/0x10 [ 661.806874][T18182] __se_sys_ioctl+0xfc/0x170 [ 661.806893][T18182] do_syscall_64+0xfa/0x3b0 [ 661.806907][T18182] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.806920][T18182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.806934][T18182] ? clear_bhb_loop+0x60/0xb0 [ 661.806950][T18182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.806963][T18182] RIP: 0033:0x7ff85bf8e929 [ 661.806978][T18182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.806991][T18182] RSP: 002b:00007ff85cda0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.807008][T18182] RAX: ffffffffffffffda RBX: 00007ff85c1b5fa0 RCX: 00007ff85bf8e929 [ 661.807020][T18182] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000010 [ 661.807029][T18182] RBP: 00007ff85c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 661.807039][T18182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.807048][T18182] R13: 0000000000000000 R14: 00007ff85c1b5fa0 R15: 00007ffce920ec68 [ 661.807063][T18182] [ 662.098184][T18201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2461'. [ 662.259387][T18182] netlink: 'syz.2.2459': attribute type 1 has an invalid length. [ 662.312705][T18182] bond4: entered promiscuous mode [ 662.319376][T18182] 8021q: adding VLAN 0 to HW filter on device bond4 [ 662.354089][T18209] bond4: (slave bridge2): making interface the new active one [ 662.370351][T18209] bridge2: entered promiscuous mode [ 662.378540][T18209] bond4: (slave bridge2): Enslaving as an active interface with an up link