last executing test programs: 2m22.655509495s ago: executing program 2 (id=5843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101005, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6364, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x40000000, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m22.317034801s ago: executing program 2 (id=5847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000003600)={'wg1\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000004b00)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000009ac0)={@broadcast, @local}, &(0x7f0000009b00)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c23004923f7779ccd9606613089b740e01af8b422a04ea9e9c2e65e081c183f2283700c3bad0f9af818f4c6c2151fa1829480e9212644c17193f4e978c3c43133a3b29546754a2845fd8cc1b", 0x75, 0xe044, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m22.139501787s ago: executing program 2 (id=5849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x470bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m21.887526354s ago: executing program 2 (id=5855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e01051d6ff63"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 2m21.699984899s ago: executing program 2 (id=5859): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (fail_nth: 4) 2m21.303731525s ago: executing program 2 (id=5863): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9a, 0x7, 0x800, 0x1, 0x1, 0x4, 0x5}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6, 0x80000}}, {0x4}}]}]}, 0x7c}}, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r7, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) r9 = openat$cgroup_procs(r5, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) 2m6.191366263s ago: executing program 32 (id=5863): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9a, 0x7, 0x800, 0x1, 0x1, 0x4, 0x5}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6, 0x80000}}, {0x4}}]}]}, 0x7c}}, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r7, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) r9 = openat$cgroup_procs(r5, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) 2.423819536s ago: executing program 4 (id=7266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) (fail_nth: 4) 2.363939087s ago: executing program 5 (id=7267): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000340)={{}, "418a8a5aea16950c2b09a0e7f884c3ec4de4985d20a66e8d69c95250caff3894d4f36173065df534f076a28d2d48bb3a3bbe6013ca83e024a90541fcec834fac7fda9fed79c683f68917b4a9e05ac6b2f8ee192c8fe3194bf1c60a9f9253e732a933656d83b3810fc12e576993dcad0f730b945ca7cd393d281da10b7fe1787ce35934809222c8ed53c8bcacc38c21b8a29747c49474b0163f9ba127b3b194177236d9a72e8765ad1ec0ed91f0cdae7f2d04f6d5d75da0bd85ac1d1a793dc311dd3d3246ee7c97c51bc8533237839282186978fccfcb6d9175e0bdda0ba97dbcff6385d919ec164de86b7e5bface28c13704d11da9004e7e6eedb985fe57c31d6d4e9a8a27f2c07629ea961728b00ddff42136d3c1e478eeacdf0e3a9626d8bb7bdab09ee97ec2fdbe27ee85c3d824064abc9f3b6ec13fea50cf02f4514e1d4459adec21448e331d6f0291c8c52345d479d9d1140d55e088abcd9f03edacdcf0ecab8c6c5f2c9f629832052070dec37227ff4e223bd5fb301b06f9c9a1d7ec426c42bd7e149e559a4474b6f85ec212fda6e65deaa00297797f3282b5c54c0da227eb5bd069cbc67523e8c9fb4e9039a1d67cdbea2516fe40141c93eaa27a3a66e0e4e3574e567029f7dc582da4461e430b30d54e63df5067defc83bf5fb3caae2811fce97795adb16b2c5fa8e06c847496c74490f9c64290f676b86dcd06d29a6b0e1e9b537314c2b11ad4be402383419778e3c2d3bb897fd65f085a0af90d16d0ffef69724eacb5ccef760d6e014e18d85159cb16422f0d5c1449783b6c745489106e95146fc8f264bf5b8b0e10b87908d03fed990c42150ebddc26793acd875f0433bb2aa2620c914bb59787b19929d58408ac13ceb9082ceb82cf1fa972986688735480310aeca7bd9326125c122701cd558801f5c2fe9f8570a27bad6e91d846d4d7b023f8219034dc620f8cfe05904118eab38316b73b2d875b4e35c2e3d53ce95e9ea726bf6f6c8526c74f89ae7275408a258894984798e7d70f1dc3029d3fb168712bcda42f9ba9464b806c6c456fd6915e27abec4d0c53125a7584f6aa6f6f73175e736051e308a83a7b86009f62e4f6f9f430996fce344efc0434607ec9bfd23f6b80a4482a923fde9c7c257f48fcbf34dfdf21968ac981b7ebbe4d7b5d2b72b72c8f1779da6f4347632dac595a2e179562ed36e01e4459e2d12d26c7a25b67e05a826cffa4d404d68719c1a995d7f4a0a3910eeb9f864bbe606d14038522f22bd6cc77301a7045a844afbc5406c3e115bf1b5abba9b2e5752fa16cd5edee9a1635133101314e36c6c182e86ba95ae12c91aba3ee3037ca0feb7deab11dad771652e6aee9404ef83912a8eae2235f24349ad841c5683527feb392f6f02ff355287b22d80cfe904599211b69e8fb2a516a08a44cd7b1506f9258229457a040405c249dced41607a1a393175a73865a9489159f877de4ceaa2375e167e582ba334c691d2775c7fbd8941b474090531822b290d25fa1cbe9f1f3a84aa4367c327354e2914a4ef532aaed3b605415c0ed2439f9bd868e31473c4a1afd98ba78f6818aa9259f50b4dd847c6612c59fab642e2269da59cc08ffdffee39eeac098ff49434d585efd61adf44d0c7845665d5138355be4288b7993abb11c9838cdc39bd750ddb180191735c0f52ea8a93c14da88a6584a21eedd57c8709349e1ec9f6585848f9d3defa4c8be7ba815526fbac9c146d05b12996c106ea1acaa0f725578df563e867fff588f488411db93c345b7f44beb7ac25e7ca00cf308b3f3b0bcd2db7562293581b3145ffc915eb3d56f8bf3c372dbd8fc5c7256d76676ec975ce5f83cafd40ef3030b95faac2353dc260de0bbe00165c05c9e0bf5581de57f41bb894d7f3402fa4b1135725f1590140d0e909b00cede56a2088c2071320bc484330583ac5a0e6997da82b7d11b9dfb9e6eef75ba43946e8402da89b0c7918e5e7da499a30d22835e47de7b7a081e33bd573329236feee8c7e364e00b5af3a391d00865c4725d03fbbdda0fdfc9f293fbdb313a3e14929f5e7017922355704b987bbae229c54ac6c3e12d508a55f277c3940629169d89dc76ef861ee8bd19d892acf59712478c2c0ab1b8b25169ff1536368e9e72984129b13d0577257db081b1e0cd2a5f1c7bf3acb366ce75f01f9d0a9eff6d20061865b87e234b797b10d083e7a246a921c5194a54ac6980505810f681199214f19a76292a0a498ca21483cf7c365bddb90e6351a2382d10c106e0aa932692f2cc0bb44abaa48e95f36d31544d6ab538cfa3f55e43ab1f37cca5921e19bd1b2234d7f33841fdf799380020b5d1ba5993e2b85b6a5d97f6d0f057e5a78030346c03afed6d4f3b87c61f3f9a6530ac15ba6ebde41a71d0a041606fb491b60902224a018e4a3708f50d78836a897c65da60de65467ce3ec7ea5e8f41bb0c79e23bc839152c6a2e010ee75168b760dd75381749beb896a3d93972e237629cbe1507b3ad305bfb663d54b8936c3b10d876c50f2b1585e72333420cfbac55b3a862674810b584a7524fa1757dcbe0390238e0b5df6bc2d77f9cb61cceaca9a442d72a2bbbb3129b8f558138fc2ae89d5d7571894f0f20671af1b2420665a3ac4c821d59f178b045e9541e00472c3b3860889bc274dbfc8aab735ed48c9ddbd4810dd9110cbff67b51b11952463027717556df03028daffcd3ba91bed15262d968c9b5af9a315fa7552ef13b67099a131ceb0686efdfaffa2c19a9c57334ca8f6cbace499c55feda79142d24c24f3e89639b55c31b49869cdefd910aa7322d979f2201df44cea49576c9d453677539954604231df06ef9aa41e5a190ca8d3e2aa37fac3705c62ceee4b49ed8bd1b5463230a6c3d93ecec39ac5429f3d1d319ee248c680e39110c976045789901a5240161cb0ebbe47ce3a77c5af500acea05209b9392b953a6cacb496e2887aa57c7790dc40b92ee8c6e3e26a46c113a5f9e5177449ef5abda2300ce9d599d5a1183a08ee273d5093c43e6b2c0b3100a17c62b2f4298fd48d063debf631b1fd194cc45f8ebafe56291654131e9c61ee35598490aa695e8aa751050a17c84c2f71e5a363f16a54695cf4b733a262b11a971b2dc7c3c07c742248b5a331578e0989889a13ab037c878e23a398c6c90e78de430ca5b15bea3425ecda66c4891211ca29f493d28503d650b647e14d3d8e9d1b1fd4c989cd45e0cc743fd52be47a58a70e038fc0f268805577d49f8e8ca95c3f626b4f3453f1c4688906cb8fd2bb23a8a7ae04bda8a4e52a0ef3b5f4a9407eabcb19df3ad9337c110e701b88b424669545ae2a5d3badc680c3d7e9482d11acf1ce4759e0587b8d34a77c47b8b5d0f8d657066c83c53ca1b31b14634009a4549afd52c02e63a848a9dd39626644620ebfa40d8540ff878691bb7d36b757fd9cc7b491f2d13076ba8853ce4a6c312c249cbe2f5ce8c3fd4f7cadc3b4253be8b389aba96b84c60a6bf461524c74836623de4aa2355080e8ca33ebf36cd91e9f57e646d0aaf03d134787f5d9bfaa5ced727a565b6212a18b120e24ba1510df772738f8bf812f2d7fa6eb4b2b99d161f3ff37bd50a279f23b42dbcb160170c83caea55004ce3ca48b2de0421e66e161d9ce5027f9a4059184a55dd156f6a5a07d2e458120a124db9cf0cf73655f5339e0b7d144207a216cb83a6cacb28f76a1c1cd3978f0e62420ac0a294fb2223235b8e261370078ffa431b95bf742428a57f3ee29743a4f3303a9ceb17c9119baca9abfa7db136f711a22f017e455ff11b64e31af11aec7be6c94c1f23d70131940d2a2193e456e338b5e5e806c3639912e44d21d81d5a4a6d81ebbf1adbaac8abf118acbc3b39892c2169d3032cc7e57a68308a040fc965fe05476d070d7e99d8a1bb9a4aba55f65ef933d5ddb09f75b0c4a23ccfee705cb712b3263132ed1de5d0fe80cdb5bb0ec8396db9aa27ecefc837b8a1b64841463f6665e8b906e4758ffd1c5364063b0d1b82c1a5183dbe52fefd9b8115ccdaaffefc5a99237371a7fb7b247583a15f32628b1eda71655b29ce1d7fcd7a50ea947674d85aeab81de74f0fa69db3d07b0d98da10182fdee41afdc92f845cc8735cbf169994262c3d114457a9c95d878f8f7d7e9d3dda43285c3fa49468ac0ba4e48a59633fe87ffddb4361ce3775e3b0b026c331585c927b8402aecc371619826c6ae189306fdb3eeef62261a2924ee586ae279d1d60610fab62f13ab871d84e2fc3a0bc07b6a9532c3bab542acaec53d95e666e6324ea78e419b26e36e359e778fdba91c912c2675298831e7e1fb5bcfc8c9c1a8e026c8540cc7109894b647e077f6ef8b3dedeff35163a759d4bd9ad4944cc0994a7efd4866f856b80b07eb53ede500b40f2a4386411d61540e6cbee04c8b01d3cd4c4d48faf7dfeb3f17bb4520a6ce9d39d2b0261490e10eb92848879c83aa2850c5acf2a6b09ea0b9e00c445565bb8144a063cfa288aae2203e708cc64f97c66b985868729173c01eb6799dd394c8b946430486bfa4b21a8aab3bdcba01df03e0b016757e7503565b6744602cae775c6437ec5aeef90d4efa72d997caf867748a483f3d45e2504f8f6473215c13b12b4e671fcbc550eeba869b8cf6fc1e2b22a4d16aa6e811eb65545b7583a92aa75824a261c0cf133e4022b3a3d102ee392a88c765b7a36d5a4e69b6a001a7e784b3559ad353131d51db5c484fd9a28e9420bd096b479ad46b4899d153f9b5e9c2910a21689bd281b1fa63b167504281235d9019219f928c402d53f5718a5278bd65e7fc1d2ba509e0ecc79bc8a7c9b7826940b7a0acaa8f1afc733e3dab7d02e235b9bf0d05f17776d5e01c91defc817f0c051f8593bf7c40bb3fede9707c8bf929fda3b3d82025d9ccfa34a9a0c585816fd09cf6a06796a08ac09854834307868eaf628f8a6679dfdf9463171dedceaff95a53789b3780f1521b82a7a4893392aad64e1a5482c07fe627075c6af945e68fd081ece3c60e96797b41e9d59b935229aaa3af1edc05f463c38f6777f0dd402c224b5ba2ebbcd7afa1bad96a7f1b813f273bb55519c9888473570f0ae421b85bb96695898227c9d9f9e02a4b14ad4e108a533c2f014f1718f65f0ee9e01bd0f4e0b2b0a936f9641f300229f62bec9eb48ab68e4a27c3732129aec43a5413219e8cb0512af2b5a274a30e7c3f9eb942bf562fabf21051e9efb90d12d2f83e9c2cb3b60773fd483082ddcb707fc4fc358f3749a5c7b021d14f28fecd36fb7d5fc6764aebadcfff1019e3b679ca469422ba4280c30a3149a45ab20920f107ee2fd7545b54353b041998bfa0a76c82a850f499be231b24e16311918b0e6df420f9fd432eb68ce6f6819d9da1a52fffc1ff2dd2d407ac8779292124b71ea3d67a9632dac0192e94e05c50ca08f09326673aa4640ea6499cf80ad2217a52a362e7900c886679fb37691918e8e6796b1e954d07c2d9325ada71e1507485d6266a3fd0f3e1f4fa2540edb46b736ce3b7148774f49742727fbd743987d2d4d32be56516267bf06d32b88212ddd8caaf6c21d9c676395f0365484491febcf2e71fce32d900c8c27645c77b9983c00d07c7bcbad0a74e1c51daf4ae439433441bb301e75ac6a859e83854f14f24449a881faeb9e247c3947690b7afebd7b5ac5d4281c8fe6272e32d6d9a4b451798efb59df3ea23e896616146adb1daf9b5517ea3ee02b556131f51e298649da2ff7afc8af9ed49f7a0"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @remote, 0x0}, &(0x7f0000000180)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000100feffffff"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'gretap0\x00', r3, 0x20, 0x8, 0x4, 0x1, {{0x6, 0x4, 0x1, 0x35, 0x18, 0x64, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@noop, @noop]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x0, 0x0, 0x10000, {0x2}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.924116455s ago: executing program 4 (id=7271): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000240)={'wlan0\x00'}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd, 0x6}, {0xf, 0x5}, {0xfff3, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6f}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x1) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.500364989s ago: executing program 0 (id=7272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0xc00e, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 1.445222518s ago: executing program 5 (id=7275): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f}, 0xc) preadv(r0, &(0x7f00000005c0), 0x0, 0x8000, 0xf9b8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) 1.355959917s ago: executing program 4 (id=7276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x14) 1.34683655s ago: executing program 3 (id=7277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) 1.337323222s ago: executing program 0 (id=7278): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c040000000000200012800800010067747000140002800500050001000000080004000100000038af393c04b8a1550c44466fd6676b9526f9"], 0x40}}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 1.288126007s ago: executing program 1 (id=7279): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000001200010000000000a73f264c4e1b"], 0x28}], 0x1}, 0xf0) 1.287897537s ago: executing program 3 (id=7280): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) (fail_nth: 7) sendmmsg$alg(r1, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) sendmsg$kcm(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000480)="00e88a79f76008c77f19ee3a8a898217187ebc0aa050c397794998615839e716f8d25c5395c8156963ad36d87a63a54d23d4", 0x32}], 0x1}, 0x20000000) 1.241487563s ago: executing program 4 (id=7281): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.221643619s ago: executing program 1 (id=7282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.191663808s ago: executing program 5 (id=7283): r0 = socket$inet(0x2, 0x3, 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, @in6=@mcast2, 0x4e20, 0xb00, 0x4e24, 0x5, 0xa, 0x20, 0x60, 0x2b, r1, r2}, {0x0, 0xffffffff9d3dc286, 0x2, 0x1, 0x6, 0x8000000000000001, 0x9, 0x80000001}, {0x693, 0x2, 0xfffffffffffffe00, 0x8}, 0x8, 0x6e6bb4, 0x0, 0x0, 0x3, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x1, 0x2, 0x2, 0x3}}, 0xe8) r3 = socket$inet6(0xa, 0x80000, 0x19569373) sendto$inet6(r3, &(0x7f00000002c0)="c600aa4982c08b7542677dc2511886e211dbacbed04f5f406e4ebdcc706eb9b2c0238a667b6cbdc0e78e686177f8536242b44debe3f0a5b13022bf8ee2acf4a33fd803f31988bc946929341b7eefdfa7469ba50beafc8c0fa4d6015fcdc01bc7d85a58d6d9", 0x65, 0x40001, &(0x7f0000000340)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}, 0x1c) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000380)={@loopback, @local}, &(0x7f00000003c0)=0x8) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x4, 0x7, 0x5, 0x4, 0x7ff, 0x3ff, 0x3ff, {0x0, @in6={{0xa, 0x4e24, 0xffffff6c, @empty, 0x1}}, 0x6, 0x7, 0x60000, 0x8, 0x8000}}, &(0x7f00000004c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000500)={r4, @in={{0x2, 0x4e24, @local}}, 0xffff1d9b, 0x8ecc, 0x2, 0x5, 0x72, 0x1ff, 0x6}, &(0x7f00000005c0)=0x9c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000600)={0x6c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'sed\x00', 0x10, 0x7, 0x1a}, 0x2c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000640)={r5, 0xffff}, &(0x7f0000000680)=0x8) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000006c0)={{0xa, 0x4e20, 0x166, @remote, 0x7}, {0xa, 0x4e24, 0x1ff, @private0, 0xc}, 0x1, {[0x4, 0x0, 0xfffffff8, 0x7, 0xa6, 0x5, 0x8000]}}, 0x5c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000740)={0x500, 0x9, 0x8208, 0x5, 0x400, 0x0, 0xaa, 0x5, r4}, &(0x7f0000000780)=0x20) ioctl$sock_netdev_private(r3, 0x89ff, &(0x7f00000007c0)="9b7c176f18ee1fe87ada6827c9033c4d79bbee2ec90379aca4") r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000800)=0x1, 0x4) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000940)={r7, r0, 0x7, 0x8e, &(0x7f0000000880)="d9e82f3fb884b607c9b2944be5ce2bf2518dd074769eb0a083fef232d2fdd686be917472b9d94f42cb75324e89c5f8164900e4f0cec473d31dab0f27ab6b1be9f57a591b73c3a1e4ce4ec77281a87b1e70f9398ef37a110a8f899bffa9991af80dde49a331ee21d13858ce3d97d143b0b30b8f833fa76b75fc30ef4f374ed166c752545cd12f69f970bd6433af25", 0x4, 0x5, 0x8001, 0xfff9, 0x2, 0x3, 0x1, 'syz1\x00'}) setsockopt$inet_int(r8, 0x0, 0x5, &(0x7f0000000a00)=0xd, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r8) setsockopt$netrom_NETROM_T4(r8, 0x103, 0x6, &(0x7f0000000a80)=0x7, 0x4) r10 = socket(0x18, 0x4, 0x6) connect$unix(r9, &(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000000b80)={{r9}, 0x2, &(0x7f0000000b40)=[0x80, 0x0], 0x10000, 0x1}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000c00)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000d00)={{r10}, r11, 0x1a, @inherit={0x90, &(0x7f0000000c40)={0x0, 0x9, 0x2, 0x5, {0x21, 0x8, 0x9, 0x6, 0x26}, [0x9, 0x5, 0x5, 0x8, 0x4, 0xa52d, 0x3ff, 0x83, 0x1]}}, @subvolid=0xf}) r12 = socket(0x1d, 0x1, 0x3) sendmsg$NFT_MSG_GETOBJ(r12, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d40)={0xfc, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0xcf, 0x8, "12fa65e6e99cefb97b890c8ea07b8be70557917a1403b74f72b4d96837245ebf9eb62bbc7c7e7658d1411d4e3af19d66f2ef016e352bd9bd2ff8f726bc7ca348f482520bc0d439d1a6480b25ff2fdd171da87418a87503fce27cb86aab09ac30ffbe4c14f0e7b9a163a0bcdec5ad94514ef43fa4d7e8a3e21a1c0354e0ab74e692759aa004d3ebcac5e54e68f439d4431e59790442ff6d66c15c1489d243bf31dee56dd7053023aa763206f2b37752077fc57344dcdde018a65ad66698835d776c9b0bf0683a52f63f4b6c"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0xfc}}, 0xead15dbf93dea1b0) 1.091933528s ago: executing program 0 (id=7284): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pim6reg\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x98, r3, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x20000080) 1.091652211s ago: executing program 3 (id=7285): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000340)={{}, "418a8a5aea16950c2b09a0e7f884c3ec4de4985d20a66e8d69c95250caff3894d4f36173065df534f076a28d2d48bb3a3bbe6013ca83e024a90541fcec834fac7fda9fed79c683f68917b4a9e05ac6b2f8ee192c8fe3194bf1c60a9f9253e732a933656d83b3810fc12e576993dcad0f730b945ca7cd393d281da10b7fe1787ce35934809222c8ed53c8bcacc38c21b8a29747c49474b0163f9ba127b3b194177236d9a72e8765ad1ec0ed91f0cdae7f2d04f6d5d75da0bd85ac1d1a793dc311dd3d3246ee7c97c51bc8533237839282186978fccfcb6d9175e0bdda0ba97dbcff6385d919ec164de86b7e5bface28c13704d11da9004e7e6eedb985fe57c31d6d4e9a8a27f2c07629ea961728b00ddff42136d3c1e478eeacdf0e3a9626d8bb7bdab09ee97ec2fdbe27ee85c3d824064abc9f3b6ec13fea50cf02f4514e1d4459adec21448e331d6f0291c8c52345d479d9d1140d55e088abcd9f03edacdcf0ecab8c6c5f2c9f629832052070dec37227ff4e223bd5fb301b06f9c9a1d7ec426c42bd7e149e559a4474b6f85ec212fda6e65deaa00297797f3282b5c54c0da227eb5bd069cbc67523e8c9fb4e9039a1d67cdbea2516fe40141c93eaa27a3a66e0e4e3574e567029f7dc582da4461e430b30d54e63df5067defc83bf5fb3caae2811fce97795adb16b2c5fa8e06c847496c74490f9c64290f676b86dcd06d29a6b0e1e9b537314c2b11ad4be402383419778e3c2d3bb897fd65f085a0af90d16d0ffef69724eacb5ccef760d6e014e18d85159cb16422f0d5c1449783b6c745489106e95146fc8f264bf5b8b0e10b87908d03fed990c42150ebddc26793acd875f0433bb2aa2620c914bb59787b19929d58408ac13ceb9082ceb82cf1fa972986688735480310aeca7bd9326125c122701cd558801f5c2fe9f8570a27bad6e91d846d4d7b023f8219034dc620f8cfe05904118eab38316b73b2d875b4e35c2e3d53ce95e9ea726bf6f6c8526c74f89ae7275408a258894984798e7d70f1dc3029d3fb168712bcda42f9ba9464b806c6c456fd6915e27abec4d0c53125a7584f6aa6f6f73175e736051e308a83a7b86009f62e4f6f9f430996fce344efc0434607ec9bfd23f6b80a4482a923fde9c7c257f48fcbf34dfdf21968ac981b7ebbe4d7b5d2b72b72c8f1779da6f4347632dac595a2e179562ed36e01e4459e2d12d26c7a25b67e05a826cffa4d404d68719c1a995d7f4a0a3910eeb9f864bbe606d14038522f22bd6cc77301a7045a844afbc5406c3e115bf1b5abba9b2e5752fa16cd5edee9a1635133101314e36c6c182e86ba95ae12c91aba3ee3037ca0feb7deab11dad771652e6aee9404ef83912a8eae2235f24349ad841c5683527feb392f6f02ff355287b22d80cfe904599211b69e8fb2a516a08a44cd7b1506f9258229457a040405c249dced41607a1a393175a73865a9489159f877de4ceaa2375e167e582ba334c691d2775c7fbd8941b474090531822b290d25fa1cbe9f1f3a84aa4367c327354e2914a4ef532aaed3b605415c0ed2439f9bd868e31473c4a1afd98ba78f6818aa9259f50b4dd847c6612c59fab642e2269da59cc08ffdffee39eeac098ff49434d585efd61adf44d0c7845665d5138355be4288b7993abb11c9838cdc39bd750ddb180191735c0f52ea8a93c14da88a6584a21eedd57c8709349e1ec9f6585848f9d3defa4c8be7ba815526fbac9c146d05b12996c106ea1acaa0f725578df563e867fff588f488411db93c345b7f44beb7ac25e7ca00cf308b3f3b0bcd2db7562293581b3145ffc915eb3d56f8bf3c372dbd8fc5c7256d76676ec975ce5f83cafd40ef3030b95faac2353dc260de0bbe00165c05c9e0bf5581de57f41bb894d7f3402fa4b1135725f1590140d0e909b00cede56a2088c2071320bc484330583ac5a0e6997da82b7d11b9dfb9e6eef75ba43946e8402da89b0c7918e5e7da499a30d22835e47de7b7a081e33bd573329236feee8c7e364e00b5af3a391d00865c4725d03fbbdda0fdfc9f293fbdb313a3e14929f5e7017922355704b987bbae229c54ac6c3e12d508a55f277c3940629169d89dc76ef861ee8bd19d892acf59712478c2c0ab1b8b25169ff1536368e9e72984129b13d0577257db081b1e0cd2a5f1c7bf3acb366ce75f01f9d0a9eff6d20061865b87e234b797b10d083e7a246a921c5194a54ac6980505810f681199214f19a76292a0a498ca21483cf7c365bddb90e6351a2382d10c106e0aa932692f2cc0bb44abaa48e95f36d31544d6ab538cfa3f55e43ab1f37cca5921e19bd1b2234d7f33841fdf799380020b5d1ba5993e2b85b6a5d97f6d0f057e5a78030346c03afed6d4f3b87c61f3f9a6530ac15ba6ebde41a71d0a041606fb491b60902224a018e4a3708f50d78836a897c65da60de65467ce3ec7ea5e8f41bb0c79e23bc839152c6a2e010ee75168b760dd75381749beb896a3d93972e237629cbe1507b3ad305bfb663d54b8936c3b10d876c50f2b1585e72333420cfbac55b3a862674810b584a7524fa1757dcbe0390238e0b5df6bc2d77f9cb61cceaca9a442d72a2bbbb3129b8f558138fc2ae89d5d7571894f0f20671af1b2420665a3ac4c821d59f178b045e9541e00472c3b3860889bc274dbfc8aab735ed48c9ddbd4810dd9110cbff67b51b11952463027717556df03028daffcd3ba91bed15262d968c9b5af9a315fa7552ef13b67099a131ceb0686efdfaffa2c19a9c57334ca8f6cbace499c55feda79142d24c24f3e89639b55c31b49869cdefd910aa7322d979f2201df44cea49576c9d453677539954604231df06ef9aa41e5a190ca8d3e2aa37fac3705c62ceee4b49ed8bd1b5463230a6c3d93ecec39ac5429f3d1d319ee248c680e39110c976045789901a5240161cb0ebbe47ce3a77c5af500acea05209b9392b953a6cacb496e2887aa57c7790dc40b92ee8c6e3e26a46c113a5f9e5177449ef5abda2300ce9d599d5a1183a08ee273d5093c43e6b2c0b3100a17c62b2f4298fd48d063debf631b1fd194cc45f8ebafe56291654131e9c61ee35598490aa695e8aa751050a17c84c2f71e5a363f16a54695cf4b733a262b11a971b2dc7c3c07c742248b5a331578e0989889a13ab037c878e23a398c6c90e78de430ca5b15bea3425ecda66c4891211ca29f493d28503d650b647e14d3d8e9d1b1fd4c989cd45e0cc743fd52be47a58a70e038fc0f268805577d49f8e8ca95c3f626b4f3453f1c4688906cb8fd2bb23a8a7ae04bda8a4e52a0ef3b5f4a9407eabcb19df3ad9337c110e701b88b424669545ae2a5d3badc680c3d7e9482d11acf1ce4759e0587b8d34a77c47b8b5d0f8d657066c83c53ca1b31b14634009a4549afd52c02e63a848a9dd39626644620ebfa40d8540ff878691bb7d36b757fd9cc7b491f2d13076ba8853ce4a6c312c249cbe2f5ce8c3fd4f7cadc3b4253be8b389aba96b84c60a6bf461524c74836623de4aa2355080e8ca33ebf36cd91e9f57e646d0aaf03d134787f5d9bfaa5ced727a565b6212a18b120e24ba1510df772738f8bf812f2d7fa6eb4b2b99d161f3ff37bd50a279f23b42dbcb160170c83caea55004ce3ca48b2de0421e66e161d9ce5027f9a4059184a55dd156f6a5a07d2e458120a124db9cf0cf73655f5339e0b7d144207a216cb83a6cacb28f76a1c1cd3978f0e62420ac0a294fb2223235b8e261370078ffa431b95bf742428a57f3ee29743a4f3303a9ceb17c9119baca9abfa7db136f711a22f017e455ff11b64e31af11aec7be6c94c1f23d70131940d2a2193e456e338b5e5e806c3639912e44d21d81d5a4a6d81ebbf1adbaac8abf118acbc3b39892c2169d3032cc7e57a68308a040fc965fe05476d070d7e99d8a1bb9a4aba55f65ef933d5ddb09f75b0c4a23ccfee705cb712b3263132ed1de5d0fe80cdb5bb0ec8396db9aa27ecefc837b8a1b64841463f6665e8b906e4758ffd1c5364063b0d1b82c1a5183dbe52fefd9b8115ccdaaffefc5a99237371a7fb7b247583a15f32628b1eda71655b29ce1d7fcd7a50ea947674d85aeab81de74f0fa69db3d07b0d98da10182fdee41afdc92f845cc8735cbf169994262c3d114457a9c95d878f8f7d7e9d3dda43285c3fa49468ac0ba4e48a59633fe87ffddb4361ce3775e3b0b026c331585c927b8402aecc371619826c6ae189306fdb3eeef62261a2924ee586ae279d1d60610fab62f13ab871d84e2fc3a0bc07b6a9532c3bab542acaec53d95e666e6324ea78e419b26e36e359e778fdba91c912c2675298831e7e1fb5bcfc8c9c1a8e026c8540cc7109894b647e077f6ef8b3dedeff35163a759d4bd9ad4944cc0994a7efd4866f856b80b07eb53ede500b40f2a4386411d61540e6cbee04c8b01d3cd4c4d48faf7dfeb3f17bb4520a6ce9d39d2b0261490e10eb92848879c83aa2850c5acf2a6b09ea0b9e00c445565bb8144a063cfa288aae2203e708cc64f97c66b985868729173c01eb6799dd394c8b946430486bfa4b21a8aab3bdcba01df03e0b016757e7503565b6744602cae775c6437ec5aeef90d4efa72d997caf867748a483f3d45e2504f8f6473215c13b12b4e671fcbc550eeba869b8cf6fc1e2b22a4d16aa6e811eb65545b7583a92aa75824a261c0cf133e4022b3a3d102ee392a88c765b7a36d5a4e69b6a001a7e784b3559ad353131d51db5c484fd9a28e9420bd096b479ad46b4899d153f9b5e9c2910a21689bd281b1fa63b167504281235d9019219f928c402d53f5718a5278bd65e7fc1d2ba509e0ecc79bc8a7c9b7826940b7a0acaa8f1afc733e3dab7d02e235b9bf0d05f17776d5e01c91defc817f0c051f8593bf7c40bb3fede9707c8bf929fda3b3d82025d9ccfa34a9a0c585816fd09cf6a06796a08ac09854834307868eaf628f8a6679dfdf9463171dedceaff95a53789b3780f1521b82a7a4893392aad64e1a5482c07fe627075c6af945e68fd081ece3c60e96797b41e9d59b935229aaa3af1edc05f463c38f6777f0dd402c224b5ba2ebbcd7afa1bad96a7f1b813f273bb55519c9888473570f0ae421b85bb96695898227c9d9f9e02a4b14ad4e108a533c2f014f1718f65f0ee9e01bd0f4e0b2b0a936f9641f300229f62bec9eb48ab68e4a27c3732129aec43a5413219e8cb0512af2b5a274a30e7c3f9eb942bf562fabf21051e9efb90d12d2f83e9c2cb3b60773fd483082ddcb707fc4fc358f3749a5c7b021d14f28fecd36fb7d5fc6764aebadcfff1019e3b679ca469422ba4280c30a3149a45ab20920f107ee2fd7545b54353b041998bfa0a76c82a850f499be231b24e16311918b0e6df420f9fd432eb68ce6f6819d9da1a52fffc1ff2dd2d407ac8779292124b71ea3d67a9632dac0192e94e05c50ca08f09326673aa4640ea6499cf80ad2217a52a362e7900c886679fb37691918e8e6796b1e954d07c2d9325ada71e1507485d6266a3fd0f3e1f4fa2540edb46b736ce3b7148774f49742727fbd743987d2d4d32be56516267bf06d32b88212ddd8caaf6c21d9c676395f0365484491febcf2e71fce32d900c8c27645c77b9983c00d07c7bcbad0a74e1c51daf4ae439433441bb301e75ac6a859e83854f14f24449a881faeb9e247c3947690b7afebd7b5ac5d4281c8fe6272e32d6d9a4b451798efb59df3ea23e896616146adb1daf9b5517ea3ee02b556131f51e298649da2ff7afc8af9ed49f7a0"}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @remote, 0x0}, &(0x7f0000000180)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000100feffffff"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'gretap0\x00', r3, 0x20, 0x8, 0x4, 0x1, {{0x6, 0x4, 0x1, 0x35, 0x18, 0x64, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local, {[@noop, @noop]}}}}}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 849.883605ms ago: executing program 5 (id=7286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}}, 0x24}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 817.890142ms ago: executing program 4 (id=7287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 632.824852ms ago: executing program 1 (id=7288): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r0, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x700}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 539.361426ms ago: executing program 3 (id=7289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="5688bdfe4310cd879e3e5a6406d85480b77a6861d82270ed545d6f69eb196713fe0a797e8e1e7c664dbd2dc5730ec621e8cd015a94db88a8abbac060ae33e52843a0620cc074931463f8b637140054fa94e7fac6639cc5b587f0d26a0651258004888003f6e02e6d7aaa559ccbfce98d529673de9a8ef17dff9867aae83f22275468c44c834108924db3ea379628aa1b751eb82e776b92f8cd4db2e331f5a1fd9cc84dcafda85af033146c9f983b743afda8b2e37be380cfdeb2bba3674a35f2dfb53263507b3b5261af54cf5b80dd77e22504bd55401d7fa795d0f70031b62cfd1c8a5aeff5b00fde9b8b57577b3cb9bda5941e6b0d6b0943", 0xf9) 514.513855ms ago: executing program 1 (id=7290): socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) gettid() r2 = socket(0x10, 0x803, 0x0) unshare(0x28000600) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001380)=@ethtool_cmd={0xa, 0x8, 0x57f959ea, 0x8, 0x6, 0x3, 0xc0, 0x4, 0xca, 0x2, 0x0, 0x4, 0x3, 0x3, 0x7, 0x8, [0x8, 0x34]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="052de80dff00000002000000004000000000007348b0f9e97e9a231c4bbca6f1c65356f3857d50bc2dbe6651daa105edc7f99a028a35e5a25e75f487f1aa7ec864e5fd3e6903f7b5d06088d0f70b73592207b5930a7e2dfa5a17f168c2b90ca7884a64b39edb59873470405396c2b3ed0a25a95981020001a87622201a1f0e3e5d6330b454565dac06522b3ee080f753c61dde0113ccb2f114e72c23770a40a31360f97955056e9685d8e2db003dafa82fe5512b7600"/197, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x9, &(0x7f0000000080)=0x13, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRES32=r1, @ANYBLOB="049c170c28fdd8b237a0f40dc0d62e13142fecd7a1a77e436462c75d9f01000750050008001300", @ANYBLOB="17ed7fba7cdb232feff6403ac7225ae468dbf8af89193d1cce86e3e69d69408e2b01ef265a88aa", @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 513.322689ms ago: executing program 0 (id=7291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) 351.966438ms ago: executing program 3 (id=7292): syz_emit_ethernet(0x6a, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004503005c00650000002f907800d14fbe6d6fdadf1d1400000040efd90e92b9c0c544d143000000248088a8000000000088be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008006558fffffffd0000000000000000000000007b2aba1328b242c043bad205d56e0000000000"], 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00', @ANYBLOB="eb7a2bbd7000fcdbdf25210000000500200001000000050020000100"], 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x84) (rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 351.645377ms ago: executing program 0 (id=7293): r0 = socket(0x23, 0x5, 0x8000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtclass={0x40, 0x28, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0x9}, {0x0, 0xf}, {0x5, 0xc}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x10}}, @tclass_kind_options=@c_prio={0x9}]}, 0x40}}, 0x4080) 233.769474ms ago: executing program 1 (id=7294): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x22, 0x301, 0x0, 0x60, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 193.476616ms ago: executing program 5 (id=7295): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x127, 0x234, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x82}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x8000000}, 0x24000040) 62.835281ms ago: executing program 1 (id=7296): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x1, 0xc0}, 0x2) 62.426154ms ago: executing program 3 (id=7297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettfilter={0x64, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x6}, {0xfff2, 0x5}, {0x6, 0x1}}, [{0x8, 0xb, 0x8001}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1d}, {0x8, 0xb, 0x10000}]}, 0x64}}, 0x4000) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r6, &(0x7f0000001900)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x9) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r8, 0x3d, 0x0}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f00000013c0)={{r9}, 0x0, 0x12, @unused=[0x9, 0x101, 0x8, 0x8001], @subvolid=0xabaa}) bind$vsock_stream(r9, &(0x7f0000000440)={0x28, 0x0, 0xffffffff, @host}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r10, r10, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r11, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r12, r10, 0x4, r10}, 0x10) connect$vsock_stream(r9, &(0x7f0000000000), 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) listen(r9, 0x3) 62.177021ms ago: executing program 0 (id=7298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 61.300567ms ago: executing program 4 (id=7299): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000440)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYBLOB="000228bf7000fbdbdf25050000bc"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001214010008004b00130000000800010000000000080003000000000008004f0004000000"], 0x38}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r8 = socket$inet(0x2, 0x2, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x4) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 0s ago: executing program 5 (id=7300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x80000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): b5/0x230 [ 480.797342][T22624] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 480.797370][T22624] ? bpf_lsm_file_permission+0x9/0x20 [ 480.797391][T22624] ? security_file_permission+0x75/0x290 [ 480.797413][T22624] ? rw_verify_area+0x255/0x4d0 [ 480.797439][T22624] do_sendfile+0x4da/0x7e0 [ 480.797458][T22624] ? __pfx_vfs_write+0x10/0x10 [ 480.797486][T22624] ? __pfx_do_sendfile+0x10/0x10 [ 480.797504][T22624] ? __fget_files+0x3a0/0x420 [ 480.797546][T22624] __se_sys_sendfile64+0x13e/0x190 [ 480.797576][T22624] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 480.797608][T22624] ? do_syscall_64+0xbe/0x3b0 [ 480.797638][T22624] do_syscall_64+0xfa/0x3b0 [ 480.797658][T22624] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.797679][T22624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.797698][T22624] ? clear_bhb_loop+0x60/0xb0 [ 480.797720][T22624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.797739][T22624] RIP: 0033:0x7f13c498ebe9 [ 480.797755][T22624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.797771][T22624] RSP: 002b:00007f13c575e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 480.797791][T22624] RAX: ffffffffffffffda RBX: 00007f13c4bb6090 RCX: 00007f13c498ebe9 [ 480.797804][T22624] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 480.797815][T22624] RBP: 00007f13c575e090 R08: 0000000000000000 R09: 0000000000000000 [ 480.797834][T22624] R10: 00000ffffffff004 R11: 0000000000000246 R12: 0000000000000001 [ 480.797846][T22624] R13: 00007f13c4bb6128 R14: 00007f13c4bb6090 R15: 00007ffcc9665658 [ 480.797876][T22624] [ 481.062606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.100767][T22629] netlink: 'syz.5.6585': attribute type 21 has an invalid length. [ 481.253182][T22632] team0: No ports can be present during mode change [ 481.410571][T22636] tipc: Enabled bearer , priority 0 [ 481.428010][T22636] syzkaller0: entered promiscuous mode [ 481.443400][T22636] syzkaller0: entered allmulticast mode [ 481.517952][T22634] tipc: Resetting bearer [ 481.572448][T22634] tipc: Disabling bearer [ 481.739083][T22655] tipc: Enabling of bearer rejected, already enabled [ 482.033348][T22675] syzkaller0: entered promiscuous mode [ 482.050148][T22675] syzkaller0: entered allmulticast mode [ 482.056504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.115887][T22684] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 482.511904][T22707] tipc: Enabling of bearer rejected, already enabled [ 482.590756][T22714] tipc: Enabling of bearer rejected, already enabled [ 482.634717][T22714] netem: change failed [ 482.747796][ T30] audit: type=1804 audit(1754667532.526:7): pid=22723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6621" name="/newroot/1349/cgroup.controllers" dev="tmpfs" ino=6849 res=1 errno=0 [ 482.805690][ T30] audit: type=1800 audit(1754667532.526:8): pid=22723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6621" name="cgroup.controllers" dev="tmpfs" ino=6849 res=0 errno=0 [ 483.141443][T22746] tipc: Enabled bearer , priority 0 [ 483.153776][T22746] syzkaller0: entered promiscuous mode [ 483.159525][T22746] syzkaller0: entered allmulticast mode [ 483.201684][T22746] tipc: Resetting bearer [ 483.230170][T22745] tipc: Resetting bearer [ 483.242657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.272068][T22745] tipc: Disabling bearer [ 483.295151][T22755] tipc: Enabled bearer , priority 0 [ 483.306871][T22752] tipc: Resetting bearer [ 483.349267][T22751] tipc: Disabling bearer [ 483.708950][T22777] __nla_validate_parse: 10 callbacks suppressed [ 483.708968][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6641'. [ 483.868883][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 483.883652][T22786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.884132][T22793] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 483.899736][T22798] syzkaller0: entered promiscuous mode [ 483.958583][T22798] syzkaller0: entered allmulticast mode [ 484.070814][T22808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6649'. [ 484.162569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.281687][T22820] team0: No ports can be present during mode change [ 484.317096][T22820] team0: Port device vlan0 added [ 484.420147][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6656'. [ 484.507407][T22831] netlink: 300 bytes leftover after parsing attributes in process `syz.4.6657'. [ 485.023963][T22854] macsec0: entered promiscuous mode [ 485.165273][T22863] tipc: Enabled bearer , priority 0 [ 485.193042][T22863] syzkaller0: entered promiscuous mode [ 485.198559][T22863] syzkaller0: entered allmulticast mode [ 485.242564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.258840][T22863] tipc: Resetting bearer [ 485.311162][T22862] tipc: Resetting bearer [ 485.329498][T22867] netlink: 'syz.1.6670': attribute type 1 has an invalid length. [ 485.346852][T22867] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6670'. [ 485.393353][T22862] tipc: Disabling bearer [ 485.587777][T22880] netlink: 248 bytes leftover after parsing attributes in process `syz.5.6674'. [ 485.641028][T22888] tipc: Enabling of bearer rejected, already enabled [ 485.927247][T22898] veth1_macvtap: left promiscuous mode [ 485.933462][T22898] macsec0: entered promiscuous mode [ 486.040447][T22909] FAULT_INJECTION: forcing a failure. [ 486.040447][T22909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.062064][T22909] CPU: 1 UID: 0 PID: 22909 Comm: syz.1.6685 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 486.062090][T22909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.062101][T22909] Call Trace: [ 486.062108][T22909] [ 486.062116][T22909] dump_stack_lvl+0x189/0x250 [ 486.062143][T22909] ? __pfx____ratelimit+0x10/0x10 [ 486.062165][T22909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.062186][T22909] ? __pfx__printk+0x10/0x10 [ 486.062229][T22909] should_fail_ex+0x414/0x560 [ 486.062255][T22909] _copy_to_user+0x31/0xb0 [ 486.062275][T22909] simple_read_from_buffer+0xe1/0x170 [ 486.062306][T22909] proc_fail_nth_read+0x1b3/0x220 [ 486.062330][T22909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.062354][T22909] ? rw_verify_area+0x2a6/0x4d0 [ 486.062375][T22909] ? __lock_acquire+0xab9/0xd20 [ 486.062398][T22909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.062420][T22909] vfs_read+0x200/0x980 [ 486.062441][T22909] ? fdget_pos+0x247/0x320 [ 486.062464][T22909] ? __pfx___mutex_lock+0x10/0x10 [ 486.062486][T22909] ? __pfx_vfs_read+0x10/0x10 [ 486.062508][T22909] ? __fget_files+0x2a/0x420 [ 486.062534][T22909] ? __fget_files+0x3a0/0x420 [ 486.062556][T22909] ? __fget_files+0x2a/0x420 [ 486.062589][T22909] ksys_read+0x145/0x250 [ 486.062614][T22909] ? __pfx_ksys_read+0x10/0x10 [ 486.062633][T22909] ? rcu_is_watching+0x15/0xb0 [ 486.062657][T22909] ? do_syscall_64+0xbe/0x3b0 [ 486.062681][T22909] do_syscall_64+0xfa/0x3b0 [ 486.062701][T22909] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.062729][T22909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.062748][T22909] ? clear_bhb_loop+0x60/0xb0 [ 486.062770][T22909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.062788][T22909] RIP: 0033:0x7f7a1898d5fc [ 486.062805][T22909] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 486.062820][T22909] RSP: 002b:00007f7a19772030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 486.062839][T22909] RAX: ffffffffffffffda RBX: 00007f7a18bb6090 RCX: 00007f7a1898d5fc [ 486.062852][T22909] RDX: 000000000000000f RSI: 00007f7a197720a0 RDI: 0000000000000005 [ 486.062863][T22909] RBP: 00007f7a19772090 R08: 0000000000000000 R09: 0000000000000000 [ 486.062874][T22909] R10: 00000ffffffff004 R11: 0000000000000246 R12: 0000000000000001 [ 486.062885][T22909] R13: 00007f7a18bb6128 R14: 00007f7a18bb6090 R15: 00007ffe7c245f08 [ 486.062915][T22909] [ 486.372571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.418485][T22915] tipc: Enabling of bearer rejected, already enabled [ 486.478227][T22917] tipc: Enabled bearer , priority 0 [ 486.488055][T22917] syzkaller0: entered promiscuous mode [ 486.493640][T22917] syzkaller0: entered allmulticast mode [ 486.510078][T22917] tipc: Resetting bearer [ 486.520839][T22916] tipc: Resetting bearer [ 486.574302][T22916] tipc: Disabling bearer [ 486.583094][T22923] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6694'. [ 486.748970][T22935] tipc: Enabled bearer , priority 0 [ 486.911483][T22935] syzkaller0: entered promiscuous mode [ 486.931539][T22935] syzkaller0: entered allmulticast mode [ 486.961492][T22935] tipc: Resetting bearer [ 486.999164][T22927] tipc: Resetting bearer [ 487.075539][T22953] FAULT_INJECTION: forcing a failure. [ 487.075539][T22953] name failslab, interval 1, probability 0, space 0, times 0 [ 487.109054][T22953] CPU: 0 UID: 0 PID: 22953 Comm: syz.5.6702 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 487.109081][T22953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 487.109093][T22953] Call Trace: [ 487.109100][T22953] [ 487.109108][T22953] dump_stack_lvl+0x189/0x250 [ 487.109134][T22953] ? __pfx____ratelimit+0x10/0x10 [ 487.109157][T22953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.109178][T22953] ? __pfx__printk+0x10/0x10 [ 487.109208][T22953] ? __pfx___might_resched+0x10/0x10 [ 487.109231][T22953] should_fail_ex+0x414/0x560 [ 487.109255][T22953] should_failslab+0xa8/0x100 [ 487.109282][T22953] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 487.109307][T22953] ? __alloc_skb+0x112/0x2d0 [ 487.109334][T22953] __alloc_skb+0x112/0x2d0 [ 487.109360][T22953] netlink_sendmsg+0x5c6/0xb30 [ 487.109393][T22953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.109418][T22953] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.109444][T22953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.109463][T22953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.109486][T22953] __sock_sendmsg+0x21c/0x270 [ 487.109509][T22953] ____sys_sendmsg+0x505/0x830 [ 487.109539][T22953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.109578][T22953] ? import_iovec+0x74/0xa0 [ 487.109600][T22953] ___sys_sendmsg+0x21f/0x2a0 [ 487.109626][T22953] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.109689][T22953] ? __fget_files+0x2a/0x420 [ 487.109714][T22953] ? __fget_files+0x3a0/0x420 [ 487.109749][T22953] __x64_sys_sendmsg+0x19b/0x260 [ 487.109777][T22953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.109812][T22953] ? __pfx_ksys_write+0x10/0x10 [ 487.109833][T22953] ? rcu_is_watching+0x15/0xb0 [ 487.109856][T22953] ? do_syscall_64+0xbe/0x3b0 [ 487.109889][T22953] do_syscall_64+0xfa/0x3b0 [ 487.109909][T22953] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.109930][T22953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.109949][T22953] ? clear_bhb_loop+0x60/0xb0 [ 487.109971][T22953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.109989][T22953] RIP: 0033:0x7f1563d8ebe9 [ 487.110006][T22953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.110022][T22953] RSP: 002b:00007f1564b26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.110041][T22953] RAX: ffffffffffffffda RBX: 00007f1563fb5fa0 RCX: 00007f1563d8ebe9 [ 487.110054][T22953] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 487.110065][T22953] RBP: 00007f1564b26090 R08: 0000000000000000 R09: 0000000000000000 [ 487.110076][T22953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.110087][T22953] R13: 00007f1563fb6038 R14: 00007f1563fb5fa0 R15: 00007fffaff92c48 [ 487.110116][T22953] [ 487.478210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.442569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.514324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.655603][T22927] tipc: Disabling bearer [ 489.681082][T22986] tipc: Enabling of bearer rejected, failed to enable media [ 490.024168][T23028] netlink: 'syz.0.6717': attribute type 1 has an invalid length. [ 490.049452][T23028] netlink: 'syz.0.6717': attribute type 1 has an invalid length. [ 490.080686][T23028] netlink: 'syz.0.6717': attribute type 1 has an invalid length. [ 490.112963][T23028] netlink: 'syz.0.6717': attribute type 2 has an invalid length. [ 490.141931][T23028] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6717'. [ 490.394018][T23050] team0: Unable to change to the same mode the team is in [ 490.519890][T23026] netlink: 'syz.1.6715': attribute type 10 has an invalid length. [ 490.568347][T23026] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 490.612954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.632706][T23062] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6728'. [ 490.648413][T23062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6728'. [ 490.658350][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6728'. [ 490.667429][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6728'. [ 490.676869][T23062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6728'. [ 491.132148][T23085] FAULT_INJECTION: forcing a failure. [ 491.132148][T23085] name failslab, interval 1, probability 0, space 0, times 0 [ 491.153337][T23085] CPU: 1 UID: 0 PID: 23085 Comm: syz.3.6734 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 491.153363][T23085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.153375][T23085] Call Trace: [ 491.153382][T23085] [ 491.153391][T23085] dump_stack_lvl+0x189/0x250 [ 491.153418][T23085] ? __pfx____ratelimit+0x10/0x10 [ 491.153440][T23085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.153462][T23085] ? __pfx__printk+0x10/0x10 [ 491.153492][T23085] ? __pfx___might_resched+0x10/0x10 [ 491.153516][T23085] ? fs_reclaim_acquire+0x7d/0x100 [ 491.153548][T23085] should_fail_ex+0x414/0x560 [ 491.153575][T23085] should_failslab+0xa8/0x100 [ 491.153602][T23085] __kmalloc_noprof+0xcb/0x4f0 [ 491.153623][T23085] ? kfree+0x4d/0x440 [ 491.153642][T23085] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 491.153673][T23085] tomoyo_realpath_from_path+0xe3/0x5d0 [ 491.153699][T23085] ? tomoyo_domain+0xd9/0x130 [ 491.153730][T23085] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 491.153752][T23085] tomoyo_path_number_perm+0x1e8/0x5a0 [ 491.153777][T23085] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 491.153818][T23085] ? __lock_acquire+0xab9/0xd20 [ 491.153865][T23085] ? __fget_files+0x2a/0x420 [ 491.153893][T23085] ? __fget_files+0x2a/0x420 [ 491.153916][T23085] ? __fget_files+0x3a0/0x420 [ 491.153939][T23085] ? __fget_files+0x2a/0x420 [ 491.153968][T23085] security_file_ioctl+0xcb/0x2d0 [ 491.153992][T23085] __se_sys_ioctl+0x47/0x170 [ 491.154016][T23085] do_syscall_64+0xfa/0x3b0 [ 491.154038][T23085] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.154059][T23085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.154078][T23085] ? clear_bhb_loop+0x60/0xb0 [ 491.154100][T23085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.154119][T23085] RIP: 0033:0x7f510bf8ebe9 [ 491.154137][T23085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.154153][T23085] RSP: 002b:00007f510cd7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.154173][T23085] RAX: ffffffffffffffda RBX: 00007f510c1b5fa0 RCX: 00007f510bf8ebe9 [ 491.154186][T23085] RDX: 0000200000000380 RSI: 00000000800448d2 RDI: 0000000000000004 [ 491.154198][T23085] RBP: 00007f510cd7b090 R08: 0000000000000000 R09: 0000000000000000 [ 491.154210][T23085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.154221][T23085] R13: 00007f510c1b6038 R14: 00007f510c1b5fa0 R15: 00007ffecec226f8 [ 491.154252][T23085] [ 491.154259][T23085] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.407114][T23095] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.6739'. [ 491.440690][T23099] netlink: 'syz.0.6740': attribute type 75 has an invalid length. [ 491.457338][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6736'. [ 491.479749][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6736'. [ 491.493172][T23099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6740'. [ 491.512676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.765509][T23118] FAULT_INJECTION: forcing a failure. [ 491.765509][T23118] name failslab, interval 1, probability 0, space 0, times 0 [ 491.779218][T23118] CPU: 0 UID: 0 PID: 23118 Comm: syz.4.6748 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 491.779243][T23118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.779253][T23118] Call Trace: [ 491.779260][T23118] [ 491.779267][T23118] dump_stack_lvl+0x189/0x250 [ 491.779293][T23118] ? __pfx____ratelimit+0x10/0x10 [ 491.779315][T23118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.779334][T23118] ? __pfx__printk+0x10/0x10 [ 491.779364][T23118] ? __pfx___might_resched+0x10/0x10 [ 491.779381][T23118] ? fs_reclaim_acquire+0x7d/0x100 [ 491.779411][T23118] should_fail_ex+0x414/0x560 [ 491.779437][T23118] should_failslab+0xa8/0x100 [ 491.779463][T23118] __kmalloc_noprof+0xcb/0x4f0 [ 491.779485][T23118] ? rds_info_getsockopt+0x1db/0x470 [ 491.779512][T23118] rds_info_getsockopt+0x1db/0x470 [ 491.779538][T23118] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 491.779562][T23118] ? __might_fault+0xb0/0x130 [ 491.779589][T23118] ? rds_getsockopt+0x31d/0x500 [ 491.779613][T23118] ? __pfx_rds_getsockopt+0x10/0x10 [ 491.779639][T23118] do_sock_getsockopt+0x36f/0x450 [ 491.779667][T23118] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 491.779691][T23118] ? write_ibpb+0x30/0x40 [ 491.779712][T23118] ? __fget_files+0x3a0/0x420 [ 491.779736][T23118] ? __fget_files+0x2a/0x420 [ 491.779768][T23118] __x64_sys_getsockopt+0x1a5/0x250 [ 491.779792][T23118] ? write_ibpb+0x30/0x40 [ 491.779814][T23118] ? write_ibpb+0x30/0x40 [ 491.779839][T23118] do_syscall_64+0xfa/0x3b0 [ 491.779859][T23118] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.779880][T23118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.779900][T23118] ? clear_bhb_loop+0x60/0xb0 [ 491.779922][T23118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.779940][T23118] RIP: 0033:0x7ff88018ebe9 [ 491.779957][T23118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.779973][T23118] RSP: 002b:00007ff881039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 491.779992][T23118] RAX: ffffffffffffffda RBX: 00007ff8803b5fa0 RCX: 00007ff88018ebe9 [ 491.780005][T23118] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 491.780017][T23118] RBP: 00007ff881039090 R08: 0000200000000280 R09: 0000000000000000 [ 491.780028][T23118] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 491.780040][T23118] R13: 00007ff8803b6038 R14: 00007ff8803b5fa0 R15: 00007ffefafe2b38 [ 491.780070][T23118] [ 492.296911][T23135] syzkaller0: entered promiscuous mode [ 492.308973][T23135] syzkaller0: entered allmulticast mode [ 492.320071][T23135] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 492.532899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.589973][T23163] team0: No ports can be present during mode change [ 492.629160][T23168] FAULT_INJECTION: forcing a failure. [ 492.629160][T23168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 492.662617][T23168] CPU: 0 UID: 0 PID: 23168 Comm: syz.3.6762 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 492.662643][T23168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.662654][T23168] Call Trace: [ 492.662661][T23168] [ 492.662669][T23168] dump_stack_lvl+0x189/0x250 [ 492.662696][T23168] ? __pfx____ratelimit+0x10/0x10 [ 492.662717][T23168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.662737][T23168] ? __pfx__printk+0x10/0x10 [ 492.662761][T23168] ? fs_reclaim_acquire+0x7d/0x100 [ 492.662796][T23168] should_fail_ex+0x414/0x560 [ 492.662823][T23168] prepare_alloc_pages+0x213/0x610 [ 492.662850][T23168] __alloc_frozen_pages_noprof+0x123/0x370 [ 492.662874][T23168] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 492.662904][T23168] ? policy_nodemask+0x27c/0x720 [ 492.662925][T23168] ? __lock_acquire+0xab9/0xd20 [ 492.662955][T23168] alloc_pages_mpol+0x232/0x4a0 [ 492.662985][T23168] vma_alloc_folio_noprof+0xe4/0x200 [ 492.663014][T23168] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 492.663052][T23168] folio_prealloc+0x30/0x180 [ 492.663078][T23168] __handle_mm_fault+0x2ab9/0x5440 [ 492.663119][T23168] ? __pfx___handle_mm_fault+0x10/0x10 [ 492.663165][T23168] ? follow_page_pte+0x7ef/0x13e0 [ 492.663200][T23168] handle_mm_fault+0x40a/0x8e0 [ 492.663233][T23168] __get_user_pages+0x1699/0x2ce0 [ 492.663253][T23168] ? __lock_acquire+0xab9/0xd20 [ 492.663313][T23168] __gup_longterm_locked+0xde9/0x1660 [ 492.663350][T23168] ? sanity_check_pinned_pages+0x123a/0x1300 [ 492.663382][T23168] gup_fast_fallback+0x1e6a/0x2010 [ 492.663436][T23168] ? __pfx_gup_fast_fallback+0x10/0x10 [ 492.663466][T23168] ? rcu_is_watching+0x15/0xb0 [ 492.663481][T23168] ? is_valid_gup_args+0x11f/0x200 [ 492.663503][T23168] ? pin_user_pages_fast+0x4d/0xb0 [ 492.663526][T23168] rds_info_getsockopt+0x1fb/0x470 [ 492.663553][T23168] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 492.663576][T23168] ? __might_fault+0xb0/0x130 [ 492.663599][T23168] ? rds_getsockopt+0x31d/0x500 [ 492.663623][T23168] ? __pfx_rds_getsockopt+0x10/0x10 [ 492.663647][T23168] do_sock_getsockopt+0x36f/0x450 [ 492.663671][T23168] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 492.663690][T23168] ? write_ibpb+0x30/0x40 [ 492.663710][T23168] ? __fget_files+0x3a0/0x420 [ 492.663731][T23168] ? __fget_files+0x2a/0x420 [ 492.663761][T23168] __x64_sys_getsockopt+0x1a5/0x250 [ 492.663783][T23168] ? write_ibpb+0x30/0x40 [ 492.663803][T23168] ? write_ibpb+0x30/0x40 [ 492.663827][T23168] do_syscall_64+0xfa/0x3b0 [ 492.663845][T23168] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.663866][T23168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.663884][T23168] ? clear_bhb_loop+0x60/0xb0 [ 492.663906][T23168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.663929][T23168] RIP: 0033:0x7f510bf8ebe9 [ 492.663947][T23168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.663966][T23168] RSP: 002b:00007f510cd7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 492.663984][T23168] RAX: ffffffffffffffda RBX: 00007f510c1b5fa0 RCX: 00007f510bf8ebe9 [ 492.663995][T23168] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 492.664006][T23168] RBP: 00007f510cd7b090 R08: 0000200000000280 R09: 0000000000000000 [ 492.664017][T23168] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 492.664028][T23168] R13: 00007f510c1b6038 R14: 00007f510c1b5fa0 R15: 00007ffecec226f8 [ 492.664057][T23168] [ 493.146593][T23177] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 493.453419][T23197] openvswitch: netlink: Flow actions attr not present in new flow. [ 493.512537][T23201] digital: digital_start_poll: Unknown protocol [ 493.603173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.849481][T23227] syzkaller0: entered promiscuous mode [ 493.855346][T23227] syzkaller0: entered allmulticast mode [ 493.890201][T23232] FAULT_INJECTION: forcing a failure. [ 493.890201][T23232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.894801][T23222] netlink: zone id is out of range [ 493.912011][T23222] netlink: zone id is out of range [ 493.918167][T23222] netlink: zone id is out of range [ 493.923794][T23222] netlink: zone id is out of range [ 493.931505][T23222] netlink: zone id is out of range [ 493.937466][T23222] netlink: zone id is out of range [ 493.943755][T23222] netlink: zone id is out of range [ 493.951560][T23222] netlink: zone id is out of range [ 493.974796][T23232] CPU: 0 UID: 0 PID: 23232 Comm: syz.0.6784 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 493.974821][T23232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.974832][T23232] Call Trace: [ 493.974843][T23232] [ 493.974851][T23232] dump_stack_lvl+0x189/0x250 [ 493.974878][T23232] ? __pfx____ratelimit+0x10/0x10 [ 493.974900][T23232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.974921][T23232] ? __pfx__printk+0x10/0x10 [ 493.974959][T23232] should_fail_ex+0x414/0x560 [ 493.974986][T23232] _copy_to_user+0x31/0xb0 [ 493.975007][T23232] simple_read_from_buffer+0xe1/0x170 [ 493.975046][T23232] proc_fail_nth_read+0x1b3/0x220 [ 493.975070][T23232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.975095][T23232] ? rw_verify_area+0x2a6/0x4d0 [ 493.975115][T23232] ? __lock_acquire+0xab9/0xd20 [ 493.975138][T23232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.975160][T23232] vfs_read+0x200/0x980 [ 493.975182][T23232] ? fdget_pos+0x247/0x320 [ 493.975202][T23232] ? __pfx___mutex_lock+0x10/0x10 [ 493.975225][T23232] ? __pfx_vfs_read+0x10/0x10 [ 493.975249][T23232] ? __fget_files+0x2a/0x420 [ 493.975279][T23232] ? __fget_files+0x3a0/0x420 [ 493.975300][T23232] ? __fget_files+0x2a/0x420 [ 493.975335][T23232] ksys_read+0x145/0x250 [ 493.975360][T23232] ? __pfx_ksys_read+0x10/0x10 [ 493.975380][T23232] ? rcu_is_watching+0x15/0xb0 [ 493.975404][T23232] ? do_syscall_64+0xbe/0x3b0 [ 493.975431][T23232] do_syscall_64+0xfa/0x3b0 [ 493.975452][T23232] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.975472][T23232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.975491][T23232] ? clear_bhb_loop+0x60/0xb0 [ 493.975514][T23232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.975532][T23232] RIP: 0033:0x7f13c498d5fc [ 493.975549][T23232] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 493.975565][T23232] RSP: 002b:00007f13c577f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 493.975584][T23232] RAX: ffffffffffffffda RBX: 00007f13c4bb5fa0 RCX: 00007f13c498d5fc [ 493.975597][T23232] RDX: 000000000000000f RSI: 00007f13c577f0a0 RDI: 0000000000000004 [ 493.975608][T23232] RBP: 00007f13c577f090 R08: 0000000000000000 R09: 0000000000000000 [ 493.975620][T23232] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000001 [ 493.975630][T23232] R13: 00007f13c4bb6038 R14: 00007f13c4bb5fa0 R15: 00007ffcc9665658 [ 493.975661][T23232] [ 494.249614][T23227] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 494.347173][T23243] netlink: 'syz.1.6788': attribute type 32 has an invalid length. [ 494.395235][T23247] FAULT_INJECTION: forcing a failure. [ 494.395235][T23247] name failslab, interval 1, probability 0, space 0, times 0 [ 494.407965][T23247] CPU: 0 UID: 0 PID: 23247 Comm: syz.4.6790 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 494.407989][T23247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.407999][T23247] Call Trace: [ 494.408006][T23247] [ 494.408014][T23247] dump_stack_lvl+0x189/0x250 [ 494.408041][T23247] ? __pfx____ratelimit+0x10/0x10 [ 494.408064][T23247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.408085][T23247] ? __pfx__printk+0x10/0x10 [ 494.408116][T23247] ? __pfx___might_resched+0x10/0x10 [ 494.408133][T23247] ? fs_reclaim_acquire+0x7d/0x100 [ 494.408165][T23247] should_fail_ex+0x414/0x560 [ 494.408190][T23247] should_failslab+0xa8/0x100 [ 494.408218][T23247] __kmalloc_cache_noprof+0x70/0x3d0 [ 494.408241][T23247] ? nfnetlink_rcv+0xeff/0x2520 [ 494.408266][T23247] nfnetlink_rcv+0xeff/0x2520 [ 494.408320][T23247] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 494.408394][T23247] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.408436][T23247] netlink_unicast+0x82c/0x9e0 [ 494.408465][T23247] ? __pfx_netlink_unicast+0x10/0x10 [ 494.408487][T23247] ? netlink_sendmsg+0x642/0xb30 [ 494.408507][T23247] ? skb_put+0x11b/0x210 [ 494.408534][T23247] netlink_sendmsg+0x805/0xb30 [ 494.408567][T23247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.408593][T23247] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.408619][T23247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.408638][T23247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.408662][T23247] __sock_sendmsg+0x21c/0x270 [ 494.408686][T23247] ____sys_sendmsg+0x505/0x830 [ 494.408717][T23247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.408753][T23247] ? import_iovec+0x74/0xa0 [ 494.408774][T23247] ___sys_sendmsg+0x21f/0x2a0 [ 494.408802][T23247] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.408866][T23247] ? __fget_files+0x2a/0x420 [ 494.408889][T23247] ? __fget_files+0x3a0/0x420 [ 494.408926][T23247] __x64_sys_sendmsg+0x19b/0x260 [ 494.408960][T23247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.408996][T23247] ? __pfx_ksys_write+0x10/0x10 [ 494.409016][T23247] ? rcu_is_watching+0x15/0xb0 [ 494.409041][T23247] ? do_syscall_64+0xbe/0x3b0 [ 494.409068][T23247] do_syscall_64+0xfa/0x3b0 [ 494.409088][T23247] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.409109][T23247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.409128][T23247] ? clear_bhb_loop+0x60/0xb0 [ 494.409150][T23247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.409166][T23247] RIP: 0033:0x7ff88018ebe9 [ 494.409182][T23247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.409197][T23247] RSP: 002b:00007ff881039038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.409214][T23247] RAX: ffffffffffffffda RBX: 00007ff8803b5fa0 RCX: 00007ff88018ebe9 [ 494.409226][T23247] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000000000000003 [ 494.409237][T23247] RBP: 00007ff881039090 R08: 0000000000000000 R09: 0000000000000000 [ 494.409247][T23247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.409257][T23247] R13: 00007ff8803b6038 R14: 00007ff8803b5fa0 R15: 00007ffefafe2b38 [ 494.409284][T23247] [ 494.768103][T23243] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 495.177391][T23279] tipc: Enabled bearer , priority 0 [ 495.185474][T23279] syzkaller0: entered promiscuous mode [ 495.190968][T23279] syzkaller0: entered allmulticast mode [ 495.205594][T23279] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 495.366345][T23278] tipc: Resetting bearer [ 495.454148][T23278] tipc: Disabling bearer [ 495.721522][T23314] tipc: Enabling of bearer rejected, already enabled [ 495.900070][T23328] netlink: 'syz.1.6816': attribute type 6 has an invalid length. [ 495.935516][T23328] netlink: 'syz.1.6816': attribute type 1 has an invalid length. [ 496.036151][T23336] syzkaller0: entered promiscuous mode [ 496.041786][T23336] syzkaller0: entered allmulticast mode [ 496.053898][T23336] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 496.402822][T23353] pim6reg: entered allmulticast mode [ 496.848838][T23385] netlink: 'syz.0.6835': attribute type 33 has an invalid length. [ 496.913853][T23385] __nla_validate_parse: 14 callbacks suppressed [ 496.913872][T23385] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6835'. [ 497.267227][T23421] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6847'. [ 497.277804][T23421] netlink: 5996 bytes leftover after parsing attributes in process `syz.5.6847'. [ 497.394307][T23427] tipc: Enabled bearer , priority 0 [ 497.414097][T23427] tipc: Resetting bearer [ 497.445983][T23425] tipc: Disabling bearer [ 498.612962][ T56] block nbd0: Possible stuck request ffff888025325080: control (read@0,1024B). Runtime 180 seconds [ 498.623823][ T56] block nbd0: Possible stuck request ffff888025325240: control (read@1024,1024B). Runtime 180 seconds [ 498.634903][ T56] block nbd0: Possible stuck request ffff888025325400: control (read@2048,1024B). Runtime 180 seconds [ 498.645985][ T56] block nbd0: Possible stuck request ffff8880253255c0: control (read@3072,1024B). Runtime 180 seconds [ 498.872699][ C1] net_ratelimit: 10 callbacks suppressed [ 498.872718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.832622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.453726][ T5233] udevd[5233]: worker [12802] /devices/virtual/block/nbd0 timeout; kill it [ 500.463142][ T5233] udevd[5233]: seq 17628 '/devices/virtual/block/nbd0' killed [ 500.892786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.923352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.933041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.042873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.162637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.062669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.193031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.162768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.272629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.242672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.392888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.462697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.352657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.442630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.503095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.453112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.522608][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.623209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.612722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.703331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.653192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.803261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.743131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.932653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.912736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.912611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.952626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.693608][ T56] block nbd0: Possible stuck request ffff888025325080: control (read@0,1024B). Runtime 210 seconds [ 528.704475][ T56] block nbd0: Possible stuck request ffff888025325240: control (read@1024,1024B). Runtime 210 seconds [ 528.715580][ T56] block nbd0: Possible stuck request ffff888025325400: control (read@2048,1024B). Runtime 210 seconds [ 528.726647][ T56] block nbd0: Possible stuck request ffff8880253255c0: control (read@3072,1024B). Runtime 210 seconds [ 528.962886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.002682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.132742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.092683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.192579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.142797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.182959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.213232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.282712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.392692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.342800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.462789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.422600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.502779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.492745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.542638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.265029][T23453] tipc: Enabled bearer , priority 0 [ 545.287440][T23453] syzkaller0: entered promiscuous mode [ 545.294145][T23455] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6861'. [ 545.302191][T23453] syzkaller0: entered allmulticast mode [ 545.314437][T23455] netlink: 5996 bytes leftover after parsing attributes in process `syz.5.6861'. [ 545.324875][T23459] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 545.338279][T23459] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 545.349218][T23459] tipc: Resetting bearer [ 545.395506][T23452] tipc: Resetting bearer [ 545.403656][T23461] netlink: 'syz.1.6866': attribute type 13 has an invalid length. [ 545.540526][T23475] netlink: 'syz.0.6869': attribute type 1 has an invalid length. [ 545.552213][T23477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6870'. [ 545.559286][T23452] tipc: Disabling bearer [ 545.573948][T23461] veth0_macvtap: left promiscuous mode [ 545.579506][T23461] macvtap0: entered allmulticast mode [ 545.599748][T23461] macvtap0: refused to change device tx_queue_len [ 545.622667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.671855][T23475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.719988][T23470] vlan1: entered allmulticast mode [ 545.729049][T23470] veth1: entered allmulticast mode [ 545.749354][T23470] bond0: (slave vlan1): making interface the new active one [ 545.772006][T23470] bond0: (slave vlan1): Enslaving as an active interface with an up link [ 545.894917][T23494] syzkaller1: entered promiscuous mode [ 545.900611][T23494] syzkaller1: entered allmulticast mode [ 545.909429][T23494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6874'. [ 546.188755][T23505] tipc: Enabled bearer , priority 0 [ 546.221739][T23505] syzkaller0: entered promiscuous mode [ 546.237277][T23505] syzkaller0: entered allmulticast mode [ 546.261158][T23515] openvswitch: netlink: IP tunnel dst address not specified [ 546.269242][T23502] tipc: Resetting bearer [ 546.331652][T23502] tipc: Disabling bearer [ 546.493157][T23522] digital: digital_start_poll: Unknown protocol [ 546.504273][T23525] macsec0: entered promiscuous mode [ 546.587828][T23530] sctp: [Deprecated]: syz.0.6884 (pid 23530) Use of int in max_burst socket option deprecated. [ 546.587828][T23530] Use struct sctp_assoc_value instead [ 546.667253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.695580][T23533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6888'. [ 546.806429][T23530] veth13: entered allmulticast mode [ 546.874224][T23536] tipc: Enabled bearer , priority 0 [ 546.901131][T23543] tipc: Enabled bearer , priority 0 [ 546.919726][T23536] syzkaller0: entered promiscuous mode [ 546.952876][T23536] syzkaller0: entered allmulticast mode [ 546.971534][T23543] syzkaller0: entered promiscuous mode [ 546.982945][T23543] syzkaller0: entered allmulticast mode [ 547.030206][T23536] tipc: Resetting bearer [ 547.041017][T23543] tipc: Resetting bearer [ 547.054841][T23550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6895'. [ 547.067415][T23542] tipc: Resetting bearer [ 547.093845][T23542] tipc: Disabling bearer [ 547.109567][T23535] tipc: Resetting bearer [ 547.129738][T23558] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.6899'. [ 547.139533][T23535] tipc: Disabling bearer [ 547.163376][T23555] syzkaller1: entered promiscuous mode [ 547.174682][T23555] syzkaller1: entered allmulticast mode [ 547.285909][T23563] digital: digital_start_poll: Unknown protocol [ 547.440887][T23570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6904'. [ 547.752535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.793210][T23590] netlink: 788 bytes leftover after parsing attributes in process `syz.3.6910'. [ 547.861075][T23589] syzkaller0: entered promiscuous mode [ 547.887104][T23589] syzkaller0: entered allmulticast mode [ 547.937184][T23599] digital: digital_start_poll: Unknown protocol [ 548.213462][T23614] tipc: Enabling of bearer rejected, already enabled [ 548.565394][T23643] openvswitch: netlink: Flow actions attr not present in new flow. [ 548.772920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.927116][T23660] digital: digital_start_poll: Unknown protocol [ 549.124642][T23670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6936'. [ 549.813353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.916251][T23726] FAULT_INJECTION: forcing a failure. [ 549.916251][T23726] name failslab, interval 1, probability 0, space 0, times 0 [ 549.952595][T23726] CPU: 1 UID: 0 PID: 23726 Comm: syz.5.6954 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 549.952622][T23726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.952633][T23726] Call Trace: [ 549.952640][T23726] [ 549.952648][T23726] dump_stack_lvl+0x189/0x250 [ 549.952684][T23726] ? __pfx____ratelimit+0x10/0x10 [ 549.952707][T23726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.952727][T23726] ? __pfx__printk+0x10/0x10 [ 549.952753][T23726] ? __lock_acquire+0xab9/0xd20 [ 549.952787][T23726] should_fail_ex+0x414/0x560 [ 549.952814][T23726] should_failslab+0xa8/0x100 [ 549.952840][T23726] kmem_cache_alloc_noprof+0x73/0x3c0 [ 549.952864][T23726] ? skb_clone+0x212/0x3a0 [ 549.952886][T23726] skb_clone+0x212/0x3a0 [ 549.952907][T23726] __netlink_deliver_tap+0x404/0x850 [ 549.952942][T23726] ? netlink_deliver_tap+0x2e/0x1b0 [ 549.952967][T23726] netlink_deliver_tap+0x19c/0x1b0 [ 549.952990][T23726] netlink_unicast+0x7fa/0x9e0 [ 549.953021][T23726] ? __pfx_netlink_unicast+0x10/0x10 [ 549.953044][T23726] ? netlink_sendmsg+0x642/0xb30 [ 549.953063][T23726] ? skb_put+0x11b/0x210 [ 549.953090][T23726] netlink_sendmsg+0x805/0xb30 [ 549.953123][T23726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.953150][T23726] ? aa_sock_msg_perm+0xf1/0x1d0 [ 549.953176][T23726] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 549.953196][T23726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.953220][T23726] __sock_sendmsg+0x21c/0x270 [ 549.953244][T23726] ____sys_sendmsg+0x505/0x830 [ 549.953276][T23726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.953309][T23726] ? import_iovec+0x74/0xa0 [ 549.953329][T23726] ___sys_sendmsg+0x21f/0x2a0 [ 549.953356][T23726] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.953420][T23726] ? __fget_files+0x2a/0x420 [ 549.953444][T23726] ? __fget_files+0x3a0/0x420 [ 549.953480][T23726] __x64_sys_sendmsg+0x19b/0x260 [ 549.953508][T23726] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 549.953545][T23726] ? __pfx_ksys_write+0x10/0x10 [ 549.953569][T23726] ? rcu_is_watching+0x15/0xb0 [ 549.953593][T23726] ? do_syscall_64+0xbe/0x3b0 [ 549.953619][T23726] do_syscall_64+0xfa/0x3b0 [ 549.953640][T23726] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.953659][T23726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.953685][T23726] ? clear_bhb_loop+0x60/0xb0 [ 549.953707][T23726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.953724][T23726] RIP: 0033:0x7f1563d8ebe9 [ 549.953741][T23726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.953756][T23726] RSP: 002b:00007f1564b26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.953776][T23726] RAX: ffffffffffffffda RBX: 00007f1563fb5fa0 RCX: 00007f1563d8ebe9 [ 549.953789][T23726] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 549.953800][T23726] RBP: 00007f1564b26090 R08: 0000000000000000 R09: 0000000000000000 [ 549.953811][T23726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.953822][T23726] R13: 00007f1563fb6038 R14: 00007f1563fb5fa0 R15: 00007fffaff92c48 [ 549.953853][T23726] [ 550.368067][T23712] netlink: 'syz.4.6952': attribute type 1 has an invalid length. [ 550.785097][T23757] netlink: 'syz.3.6966': attribute type 2 has an invalid length. [ 550.794605][T23757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6966'. [ 550.893166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.920010][T23763] FAULT_INJECTION: forcing a failure. [ 550.920010][T23763] name failslab, interval 1, probability 0, space 0, times 0 [ 550.927603][T23765] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 550.956403][T23763] CPU: 1 UID: 0 PID: 23763 Comm: syz.0.6967 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 550.956429][T23763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 550.956439][T23763] Call Trace: [ 550.956447][T23763] [ 550.956455][T23763] dump_stack_lvl+0x189/0x250 [ 550.956481][T23763] ? __pfx____ratelimit+0x10/0x10 [ 550.956503][T23763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.956524][T23763] ? __pfx__printk+0x10/0x10 [ 550.956554][T23763] ? __pfx___might_resched+0x10/0x10 [ 550.956577][T23763] should_fail_ex+0x414/0x560 [ 550.956606][T23763] should_failslab+0xa8/0x100 [ 550.956632][T23763] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 550.956654][T23763] ? xfrm_add_sa+0x1cc6/0x4070 [ 550.956672][T23763] kmemdup_noprof+0x2b/0x70 [ 550.956687][T23763] xfrm_add_sa+0x1cc6/0x4070 [ 550.956711][T23763] ? __pfx_xfrm_add_sa+0x10/0x10 [ 550.956726][T23763] ? apparmor_capable+0x137/0x1b0 [ 550.956748][T23763] ? __nla_parse+0x40/0x60 [ 550.956774][T23763] xfrm_user_rcv_msg+0x7a0/0xab0 [ 550.956799][T23763] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 550.956854][T23763] ? __pfx___mutex_trylock_common+0x10/0x10 [ 550.956880][T23763] ? rcu_is_watching+0x15/0xb0 [ 550.956899][T23763] ? trace_contention_end+0x39/0x120 [ 550.956917][T23763] ? __mutex_lock+0x335/0x1360 [ 550.956946][T23763] netlink_rcv_skb+0x208/0x470 [ 550.956968][T23763] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 550.956989][T23763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 550.957027][T23763] ? netlink_deliver_tap+0x2e/0x1b0 [ 550.957045][T23763] ? netlink_deliver_tap+0x2e/0x1b0 [ 550.957067][T23763] xfrm_netlink_rcv+0x79/0x90 [ 550.957083][T23763] netlink_unicast+0x82c/0x9e0 [ 550.957110][T23763] ? __pfx_netlink_unicast+0x10/0x10 [ 550.957131][T23763] ? netlink_sendmsg+0x642/0xb30 [ 550.957149][T23763] ? skb_put+0x11b/0x210 [ 550.957173][T23763] netlink_sendmsg+0x805/0xb30 [ 550.957205][T23763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.957229][T23763] ? aa_sock_msg_perm+0xf1/0x1d0 [ 550.957256][T23763] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 550.957275][T23763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.957298][T23763] __sock_sendmsg+0x21c/0x270 [ 550.957321][T23763] ____sys_sendmsg+0x505/0x830 [ 550.957352][T23763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.957397][T23763] ? import_iovec+0x74/0xa0 [ 550.957418][T23763] ___sys_sendmsg+0x21f/0x2a0 [ 550.957445][T23763] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.957507][T23763] ? __fget_files+0x2a/0x420 [ 550.957531][T23763] ? __fget_files+0x3a0/0x420 [ 550.957567][T23763] __x64_sys_sendmsg+0x19b/0x260 [ 550.957595][T23763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.957630][T23763] ? __pfx_ksys_write+0x10/0x10 [ 550.957650][T23763] ? rcu_is_watching+0x15/0xb0 [ 550.957672][T23763] ? do_syscall_64+0xbe/0x3b0 [ 550.957698][T23763] do_syscall_64+0xfa/0x3b0 [ 550.957719][T23763] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.957740][T23763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.957759][T23763] ? clear_bhb_loop+0x60/0xb0 [ 550.957781][T23763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.957799][T23763] RIP: 0033:0x7f13c498ebe9 [ 550.957816][T23763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.957832][T23763] RSP: 002b:00007f13c577f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.957850][T23763] RAX: ffffffffffffffda RBX: 00007f13c4bb5fa0 RCX: 00007f13c498ebe9 [ 550.957860][T23763] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 550.957870][T23763] RBP: 00007f13c577f090 R08: 0000000000000000 R09: 0000000000000000 [ 550.957880][T23763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.957889][T23763] R13: 00007f13c4bb6038 R14: 00007f13c4bb5fa0 R15: 00007ffcc9665658 [ 550.957920][T23763] [ 551.418221][T23771] team_slave_0: mtu greater than device maximum [ 551.703658][T23791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6976'. [ 551.729253][T23791] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6976'. [ 551.796741][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6976'. [ 551.812722][T23797] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6976'. [ 551.877770][T23799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.964449][T23803] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6981'. [ 552.005303][T23803] netlink: 5996 bytes leftover after parsing attributes in process `syz.5.6981'. [ 552.031309][T23806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6982'. [ 552.062666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.083228][T23810] syzkaller0: entered promiscuous mode [ 552.088746][T23810] syzkaller0: entered allmulticast mode [ 552.184440][T23817] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 552.275948][T23825] team_slave_0: mtu greater than device maximum [ 552.295228][T23813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6986'. [ 552.426626][T23835] FAULT_INJECTION: forcing a failure. [ 552.426626][T23835] name failslab, interval 1, probability 0, space 0, times 0 [ 552.446263][T23835] CPU: 0 UID: 0 PID: 23835 Comm: syz.3.6992 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 552.446289][T23835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.446299][T23835] Call Trace: [ 552.446307][T23835] [ 552.446315][T23835] dump_stack_lvl+0x189/0x250 [ 552.446342][T23835] ? __pfx____ratelimit+0x10/0x10 [ 552.446365][T23835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.446386][T23835] ? __pfx__printk+0x10/0x10 [ 552.446424][T23835] ? __pfx___might_resched+0x10/0x10 [ 552.446442][T23835] ? fs_reclaim_acquire+0x7d/0x100 [ 552.446471][T23835] should_fail_ex+0x414/0x560 [ 552.446495][T23835] should_failslab+0xa8/0x100 [ 552.446522][T23835] __kmalloc_cache_noprof+0x70/0x3d0 [ 552.446543][T23835] ? ip_set_create+0x348/0x1940 [ 552.446565][T23835] ip_set_create+0x348/0x1940 [ 552.446595][T23835] ? __mutex_lock+0x335/0x1360 [ 552.446619][T23835] ? __pfx_ip_set_create+0x10/0x10 [ 552.446674][T23835] nfnetlink_rcv_msg+0xb4d/0x1130 [ 552.446696][T23835] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 552.446734][T23835] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 552.446788][T23835] ? is_bpf_text_address+0x26/0x2b0 [ 552.446829][T23835] netlink_rcv_skb+0x208/0x470 [ 552.446852][T23835] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 552.446874][T23835] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.446908][T23835] ? bpf_lsm_capable+0x9/0x20 [ 552.446929][T23835] ? security_capable+0x7e/0x2e0 [ 552.446959][T23835] nfnetlink_rcv+0x26a/0x2520 [ 552.446979][T23835] ? is_bpf_text_address+0x26/0x2b0 [ 552.447006][T23835] ? kernel_text_address+0xa5/0xe0 [ 552.447031][T23835] ? __kernel_text_address+0xd/0x40 [ 552.447053][T23835] ? unwind_get_return_address+0x4d/0x90 [ 552.447074][T23835] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.447095][T23835] ? arch_stack_walk+0xfc/0x150 [ 552.447132][T23835] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 552.447153][T23835] ? stack_depot_save_flags+0x40/0x860 [ 552.447178][T23835] ? __lock_acquire+0xab9/0xd20 [ 552.447229][T23835] ? __lock_acquire+0xab9/0xd20 [ 552.447264][T23835] ? netlink_deliver_tap+0x2e/0x1b0 [ 552.447293][T23835] ? netlink_deliver_tap+0x2e/0x1b0 [ 552.447324][T23835] netlink_unicast+0x82c/0x9e0 [ 552.447354][T23835] ? __pfx_netlink_unicast+0x10/0x10 [ 552.447377][T23835] ? netlink_sendmsg+0x642/0xb30 [ 552.447397][T23835] ? skb_put+0x11b/0x210 [ 552.447431][T23835] netlink_sendmsg+0x805/0xb30 [ 552.447468][T23835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.447495][T23835] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.447521][T23835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.447540][T23835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.447563][T23835] __sock_sendmsg+0x21c/0x270 [ 552.447586][T23835] ____sys_sendmsg+0x505/0x830 [ 552.447617][T23835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.447654][T23835] ? import_iovec+0x74/0xa0 [ 552.447674][T23835] ___sys_sendmsg+0x21f/0x2a0 [ 552.447702][T23835] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.447765][T23835] ? __fget_files+0x2a/0x420 [ 552.447789][T23835] ? __fget_files+0x3a0/0x420 [ 552.447822][T23835] __x64_sys_sendmsg+0x19b/0x260 [ 552.447850][T23835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.447886][T23835] ? __pfx_ksys_write+0x10/0x10 [ 552.447906][T23835] ? rcu_is_watching+0x15/0xb0 [ 552.447930][T23835] ? do_syscall_64+0xbe/0x3b0 [ 552.447956][T23835] do_syscall_64+0xfa/0x3b0 [ 552.447976][T23835] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.447996][T23835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.448015][T23835] ? clear_bhb_loop+0x60/0xb0 [ 552.448037][T23835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.448056][T23835] RIP: 0033:0x7f510bf8ebe9 [ 552.448073][T23835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.448088][T23835] RSP: 002b:00007f510cd7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.448106][T23835] RAX: ffffffffffffffda RBX: 00007f510c1b5fa0 RCX: 00007f510bf8ebe9 [ 552.448119][T23835] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 552.448128][T23835] RBP: 00007f510cd7b090 R08: 0000000000000000 R09: 0000000000000000 [ 552.448139][T23835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.448148][T23835] R13: 00007f510c1b6038 R14: 00007f510c1b5fa0 R15: 00007ffecec226f8 [ 552.448176][T23835] [ 552.925618][T23830] lo speed is unknown, defaulting to 1000 [ 552.962671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.000502][T23842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6996'. [ 553.043963][T23840] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 553.118729][T23840] netdevsim netdevsim5: Falling back to sysfs fallback for: [ 553.396737][T23845] netlink: 'syz.1.6997': attribute type 10 has an invalid length. [ 553.474887][T23861] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 553.485282][T23861] team_slave_0: mtu greater than device maximum [ 553.583937][T23863] syzkaller0: entered promiscuous mode [ 553.595320][T23863] syzkaller0: entered allmulticast mode [ 553.997195][T23875] tipc: Enabled bearer , priority 0 [ 554.015731][T23875] syzkaller0: entered promiscuous mode [ 554.021240][T23875] syzkaller0: entered allmulticast mode [ 554.057252][T23875] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 554.094512][T23875] tipc: Resetting bearer [ 554.167828][T23874] tipc: Resetting bearer [ 554.244454][T23874] tipc: Disabling bearer [ 554.624963][T23909] syzkaller0: entered promiscuous mode [ 554.630828][T23909] syzkaller0: entered allmulticast mode [ 554.729660][T23892] netlink: 'syz.0.7015': attribute type 10 has an invalid length. [ 555.201820][T23946] tipc: Enabled bearer , priority 0 [ 555.226234][T23946] syzkaller0: entered promiscuous mode [ 555.247083][T23946] syzkaller0: entered allmulticast mode [ 555.274875][T23946] tipc: Resetting bearer [ 555.288120][T23945] tipc: Resetting bearer [ 555.317044][T23945] tipc: Disabling bearer [ 555.350110][T23960] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 555.381397][T23960] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 555.407504][T23960] tipc: Resetting bearer [ 555.979927][T23970] netlink: 'syz.4.7042': attribute type 10 has an invalid length. [ 556.063098][ C1] net_ratelimit: 4 callbacks suppressed [ 556.063116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.254703][T24004] syzkaller0: entered promiscuous mode [ 556.264847][T24004] syzkaller0: entered allmulticast mode [ 556.308033][T24007] __nla_validate_parse: 6 callbacks suppressed [ 556.308051][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7054'. [ 556.445812][T24015] netlink: 'syz.1.7057': attribute type 1 has an invalid length. [ 556.723143][T24032] FAULT_INJECTION: forcing a failure. [ 556.723143][T24032] name failslab, interval 1, probability 0, space 0, times 0 [ 556.770456][T24032] CPU: 1 UID: 0 PID: 24032 Comm: syz.3.7064 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 556.770482][T24032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.770491][T24032] Call Trace: [ 556.770499][T24032] [ 556.770507][T24032] dump_stack_lvl+0x189/0x250 [ 556.770534][T24032] ? __pfx____ratelimit+0x10/0x10 [ 556.770556][T24032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.770577][T24032] ? __pfx__printk+0x10/0x10 [ 556.770607][T24032] ? __pfx___might_resched+0x10/0x10 [ 556.770624][T24032] ? fs_reclaim_acquire+0x7d/0x100 [ 556.770655][T24032] should_fail_ex+0x414/0x560 [ 556.770681][T24032] should_failslab+0xa8/0x100 [ 556.770708][T24032] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 556.770733][T24032] ? __alloc_skb+0x112/0x2d0 [ 556.770758][T24032] __alloc_skb+0x112/0x2d0 [ 556.770783][T24032] netlink_ack+0x146/0xa50 [ 556.770803][T24032] ? is_bpf_text_address+0x26/0x2b0 [ 556.770843][T24032] netlink_rcv_skb+0x28c/0x470 [ 556.770865][T24032] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 556.770887][T24032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 556.770917][T24032] ? bpf_lsm_capable+0x9/0x20 [ 556.770937][T24032] ? security_capable+0x7e/0x2e0 [ 556.770965][T24032] nfnetlink_rcv+0x26a/0x2520 [ 556.770984][T24032] ? is_bpf_text_address+0x26/0x2b0 [ 556.771010][T24032] ? kernel_text_address+0xa5/0xe0 [ 556.771034][T24032] ? __kernel_text_address+0xd/0x40 [ 556.771064][T24032] ? unwind_get_return_address+0x4d/0x90 [ 556.771085][T24032] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 556.771106][T24032] ? arch_stack_walk+0xfc/0x150 [ 556.771141][T24032] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 556.771161][T24032] ? stack_depot_save_flags+0x40/0x860 [ 556.771190][T24032] ? __lock_acquire+0xab9/0xd20 [ 556.771239][T24032] ? __lock_acquire+0xab9/0xd20 [ 556.771274][T24032] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.771304][T24032] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.771334][T24032] netlink_unicast+0x82c/0x9e0 [ 556.771364][T24032] ? __pfx_netlink_unicast+0x10/0x10 [ 556.771386][T24032] ? netlink_sendmsg+0x642/0xb30 [ 556.771406][T24032] ? skb_put+0x11b/0x210 [ 556.771433][T24032] netlink_sendmsg+0x805/0xb30 [ 556.771466][T24032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.771492][T24032] ? aa_sock_msg_perm+0xf1/0x1d0 [ 556.771518][T24032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 556.771537][T24032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.771562][T24032] __sock_sendmsg+0x21c/0x270 [ 556.771584][T24032] ____sys_sendmsg+0x505/0x830 [ 556.771614][T24032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.771647][T24032] ? import_iovec+0x74/0xa0 [ 556.771666][T24032] ___sys_sendmsg+0x21f/0x2a0 [ 556.771693][T24032] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.771753][T24032] ? __fget_files+0x2a/0x420 [ 556.771777][T24032] ? __fget_files+0x3a0/0x420 [ 556.771811][T24032] __x64_sys_sendmsg+0x19b/0x260 [ 556.771839][T24032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 556.771870][T24032] ? __pfx_ksys_write+0x10/0x10 [ 556.771899][T24032] ? do_syscall_64+0xbe/0x3b0 [ 556.771924][T24032] do_syscall_64+0xfa/0x3b0 [ 556.771945][T24032] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.771966][T24032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.771985][T24032] ? clear_bhb_loop+0x60/0xb0 [ 556.772006][T24032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.772022][T24032] RIP: 0033:0x7f510bf8ebe9 [ 556.772039][T24032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.772070][T24032] RSP: 002b:00007f510cd7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.772090][T24032] RAX: ffffffffffffffda RBX: 00007f510c1b5fa0 RCX: 00007f510bf8ebe9 [ 556.772103][T24032] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 556.772113][T24032] RBP: 00007f510cd7b090 R08: 0000000000000000 R09: 0000000000000000 [ 556.772124][T24032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.772134][T24032] R13: 00007f510c1b6038 R14: 00007f510c1b5fa0 R15: 00007ffecec226f8 [ 556.772163][T24032] [ 557.288574][T24041] syzkaller0: entered promiscuous mode [ 557.294345][T24041] syzkaller0: entered allmulticast mode [ 557.352585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.387753][T24049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7068'. [ 557.608209][T24066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7075'. [ 557.639190][T24065] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7077'. [ 557.669136][T24060] lo speed is unknown, defaulting to 1000 [ 557.800974][T24073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7080'. [ 557.813120][T24073] netlink: 5996 bytes leftover after parsing attributes in process `syz.3.7080'. [ 558.058504][T24087] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7083'. [ 558.142731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.152656][T24094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7085'. [ 558.233083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.292314][T24098] tipc: Enabled bearer , priority 0 [ 558.331990][T24098] syzkaller0: entered promiscuous mode [ 558.345549][T24098] syzkaller0: entered allmulticast mode [ 558.366323][T24101] macsec0: entered promiscuous mode [ 558.406117][T24098] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 558.439478][T24098] tipc: Resetting bearer [ 558.576904][T24097] tipc: Resetting bearer [ 558.661827][T24097] tipc: Disabling bearer [ 558.774188][ T56] block nbd0: Possible stuck request ffff888025325080: control (read@0,1024B). Runtime 240 seconds [ 558.785099][ T56] block nbd0: Possible stuck request ffff888025325240: control (read@1024,1024B). Runtime 240 seconds [ 558.796813][ T56] block nbd0: Possible stuck request ffff888025325400: control (read@2048,1024B). Runtime 240 seconds [ 558.808195][ T56] block nbd0: Possible stuck request ffff8880253255c0: control (read@3072,1024B). Runtime 240 seconds [ 558.938712][T24127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7097'. [ 559.031590][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7095'. [ 559.187794][T24135] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 559.216613][T24135] team_slave_0: mtu greater than device maximum [ 559.295876][T24141] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 559.348423][T24141] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 559.385186][T24141] gretap4: entered promiscuous mode [ 559.390872][T24141] gretap4: entered allmulticast mode [ 559.391336][T24152] FAULT_INJECTION: forcing a failure. [ 559.391336][T24152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.396461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.434567][T24152] CPU: 0 UID: 0 PID: 24152 Comm: syz.3.7106 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 559.434592][T24152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.434602][T24152] Call Trace: [ 559.434609][T24152] [ 559.434617][T24152] dump_stack_lvl+0x189/0x250 [ 559.434644][T24152] ? __pfx____ratelimit+0x10/0x10 [ 559.434667][T24152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.434688][T24152] ? __pfx__printk+0x10/0x10 [ 559.434712][T24152] ? __might_fault+0xb0/0x130 [ 559.434746][T24152] should_fail_ex+0x414/0x560 [ 559.434771][T24152] _copy_from_iter+0x1db/0x16f0 [ 559.434798][T24152] ? rcu_is_watching+0x15/0xb0 [ 559.434818][T24152] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 559.434844][T24152] ? __pfx__copy_from_iter+0x10/0x10 [ 559.434870][T24152] ? __build_skb_around+0x257/0x3e0 [ 559.434897][T24152] ? netlink_sendmsg+0x642/0xb30 [ 559.434918][T24152] ? skb_put+0x11b/0x210 [ 559.434945][T24152] netlink_sendmsg+0x6b2/0xb30 [ 559.434978][T24152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.435004][T24152] ? aa_sock_msg_perm+0xf1/0x1d0 [ 559.435030][T24152] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.435049][T24152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.435073][T24152] __sock_sendmsg+0x21c/0x270 [ 559.435097][T24152] ____sys_sendmsg+0x505/0x830 [ 559.435127][T24152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.435162][T24152] ? import_iovec+0x74/0xa0 [ 559.435184][T24152] ___sys_sendmsg+0x21f/0x2a0 [ 559.435211][T24152] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.435273][T24152] ? __fget_files+0x2a/0x420 [ 559.435297][T24152] ? __fget_files+0x3a0/0x420 [ 559.435333][T24152] __x64_sys_sendmsg+0x19b/0x260 [ 559.435361][T24152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.435396][T24152] ? __pfx_ksys_write+0x10/0x10 [ 559.435416][T24152] ? rcu_is_watching+0x15/0xb0 [ 559.435438][T24152] ? do_syscall_64+0xbe/0x3b0 [ 559.435464][T24152] do_syscall_64+0xfa/0x3b0 [ 559.435484][T24152] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.435505][T24152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.435523][T24152] ? clear_bhb_loop+0x60/0xb0 [ 559.435551][T24152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.435570][T24152] RIP: 0033:0x7f510bf8ebe9 [ 559.435586][T24152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.435601][T24152] RSP: 002b:00007f510cd7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.435620][T24152] RAX: ffffffffffffffda RBX: 00007f510c1b5fa0 RCX: 00007f510bf8ebe9 [ 559.435633][T24152] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 559.435644][T24152] RBP: 00007f510cd7b090 R08: 0000000000000000 R09: 0000000000000000 [ 559.435655][T24152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.435666][T24152] R13: 00007f510c1b6038 R14: 00007f510c1b5fa0 R15: 00007ffecec226f8 [ 559.435696][T24152] [ 559.990689][T24167] digital: digital_start_poll: Unknown protocol [ 560.134428][T24177] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 560.151617][T24178] bridge_slave_0: left allmulticast mode [ 560.164633][T24178] bridge_slave_0: left promiscuous mode [ 560.177469][T24178] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.194428][T24178] bridge_slave_1: left allmulticast mode [ 560.200342][T24178] bridge_slave_1: left promiscuous mode [ 560.211264][T24178] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.240525][T24178] bond0: (slave bond_slave_0): Releasing backup interface [ 560.265243][T24178] team0: Port device team_slave_0 removed [ 560.306318][T24178] team0: Port device team_slave_1 removed [ 560.324646][T24178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.344414][T24178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.356795][T24178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.362541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.365077][T24178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.397402][T24183] team_slave_0: mtu greater than device maximum [ 560.460665][T24193] tipc: Enabled bearer , priority 0 [ 560.479043][T24193] syzkaller0: entered promiscuous mode [ 560.488168][T24193] syzkaller0: entered allmulticast mode [ 560.502386][T24193] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 560.522835][T24193] tipc: Resetting bearer [ 560.530601][T24192] tipc: Resetting bearer [ 560.549461][T24192] tipc: Disabling bearer [ 560.871757][T24216] syzkaller0: entered promiscuous mode [ 560.885418][T24216] syzkaller0: entered allmulticast mode [ 561.362543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.490529][T24254] netlink: 'syz.3.7138': attribute type 10 has an invalid length. [ 562.256135][T24246] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 562.279335][T24289] netlink: 'syz.4.7145': attribute type 39 has an invalid length. [ 562.289023][T24254] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 562.448639][T24296] __nla_validate_parse: 4 callbacks suppressed [ 562.448657][T24296] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7149'. [ 562.478919][T24296] netlink: 5996 bytes leftover after parsing attributes in process `syz.5.7149'. [ 562.508924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.561251][T24302] FAULT_INJECTION: forcing a failure. [ 562.561251][T24302] name failslab, interval 1, probability 0, space 0, times 0 [ 562.580556][T24302] CPU: 0 UID: 0 PID: 24302 Comm: syz.0.7150 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 562.580583][T24302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.580593][T24302] Call Trace: [ 562.580600][T24302] [ 562.580608][T24302] dump_stack_lvl+0x189/0x250 [ 562.580636][T24302] ? __pfx____ratelimit+0x10/0x10 [ 562.580658][T24302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.580679][T24302] ? __pfx__printk+0x10/0x10 [ 562.580709][T24302] ? __pfx___might_resched+0x10/0x10 [ 562.580727][T24302] ? fs_reclaim_acquire+0x7d/0x100 [ 562.580758][T24302] should_fail_ex+0x414/0x560 [ 562.580785][T24302] should_failslab+0xa8/0x100 [ 562.580811][T24302] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 562.580835][T24302] ? __alloc_skb+0x112/0x2d0 [ 562.580864][T24302] __alloc_skb+0x112/0x2d0 [ 562.580891][T24302] netlink_ack+0x146/0xa50 [ 562.580930][T24302] netlink_rcv_skb+0x28c/0x470 [ 562.580954][T24302] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 562.580977][T24302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 562.581012][T24302] ? bpf_lsm_capable+0x9/0x20 [ 562.581034][T24302] ? security_capable+0x7e/0x2e0 [ 562.581064][T24302] nfnetlink_rcv+0x26a/0x2520 [ 562.581088][T24302] ? __dev_queue_xmit+0x1d79/0x3b50 [ 562.581117][T24302] ? __dev_queue_xmit+0x27b/0x3b50 [ 562.581145][T24302] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 562.581165][T24302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 562.581206][T24302] ? ref_tracker_free+0x63a/0x7d0 [ 562.581228][T24302] ? __asan_memcpy+0x40/0x70 [ 562.581248][T24302] ? __pfx_ref_tracker_free+0x10/0x10 [ 562.581286][T24302] ? skb_clone+0x246/0x3a0 [ 562.581307][T24302] ? __netlink_deliver_tap+0x807/0x850 [ 562.581333][T24302] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.581362][T24302] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.581393][T24302] netlink_unicast+0x82c/0x9e0 [ 562.581422][T24302] ? __pfx_netlink_unicast+0x10/0x10 [ 562.581445][T24302] ? netlink_sendmsg+0x642/0xb30 [ 562.581465][T24302] ? skb_put+0x11b/0x210 [ 562.581492][T24302] netlink_sendmsg+0x805/0xb30 [ 562.581524][T24302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.581550][T24302] ? aa_sock_msg_perm+0xf1/0x1d0 [ 562.581576][T24302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 562.581595][T24302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.581619][T24302] __sock_sendmsg+0x21c/0x270 [ 562.581643][T24302] ____sys_sendmsg+0x505/0x830 [ 562.581675][T24302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.581710][T24302] ? import_iovec+0x74/0xa0 [ 562.581733][T24302] ___sys_sendmsg+0x21f/0x2a0 [ 562.581761][T24302] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.581824][T24302] ? __fget_files+0x2a/0x420 [ 562.581849][T24302] ? __fget_files+0x3a0/0x420 [ 562.581885][T24302] __x64_sys_sendmsg+0x19b/0x260 [ 562.581913][T24302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 562.581950][T24302] ? __pfx_ksys_write+0x10/0x10 [ 562.581971][T24302] ? rcu_is_watching+0x15/0xb0 [ 562.581996][T24302] ? do_syscall_64+0xbe/0x3b0 [ 562.582023][T24302] do_syscall_64+0xfa/0x3b0 [ 562.582044][T24302] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.582066][T24302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.582086][T24302] ? clear_bhb_loop+0x60/0xb0 [ 562.582109][T24302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.582128][T24302] RIP: 0033:0x7f13c498ebe9 [ 562.582146][T24302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.582163][T24302] RSP: 002b:00007f13c577f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.582192][T24302] RAX: ffffffffffffffda RBX: 00007f13c4bb5fa0 RCX: 00007f13c498ebe9 [ 562.582206][T24302] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 562.582218][T24302] RBP: 00007f13c577f090 R08: 0000000000000000 R09: 0000000000000000 [ 562.582230][T24302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.582242][T24302] R13: 00007f13c4bb6038 R14: 00007f13c4bb5fa0 R15: 00007ffcc9665658 [ 562.582273][T24302] [ 563.201783][T24322] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 563.423117][T24333] FAULT_INJECTION: forcing a failure. [ 563.423117][T24333] name failslab, interval 1, probability 0, space 0, times 0 [ 563.439001][T24333] CPU: 1 UID: 0 PID: 24333 Comm: syz.5.7162 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 563.439027][T24333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.439038][T24333] Call Trace: [ 563.439046][T24333] [ 563.439054][T24333] dump_stack_lvl+0x189/0x250 [ 563.439083][T24333] ? __pfx____ratelimit+0x10/0x10 [ 563.439105][T24333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.439127][T24333] ? __pfx__printk+0x10/0x10 [ 563.439158][T24333] ? __pfx___might_resched+0x10/0x10 [ 563.439194][T24333] should_fail_ex+0x414/0x560 [ 563.439222][T24333] should_failslab+0xa8/0x100 [ 563.439250][T24333] __kmalloc_noprof+0xcb/0x4f0 [ 563.439274][T24333] ? ieee80211_key_alloc+0x52/0x24a0 [ 563.439303][T24333] ieee80211_key_alloc+0x52/0x24a0 [ 563.439332][T24333] ieee80211_add_key+0x347/0xbd0 [ 563.439361][T24333] rdev_add_key+0x141/0x300 [ 563.439390][T24333] nl80211_new_key+0x754/0x890 [ 563.439418][T24333] ? __pfx_nl80211_new_key+0x10/0x10 [ 563.439446][T24333] ? nl80211_pre_doit+0x4f1/0x930 [ 563.439482][T24333] genl_family_rcv_msg_doit+0x215/0x300 [ 563.439511][T24333] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 563.439545][T24333] ? bpf_lsm_capable+0x9/0x20 [ 563.439568][T24333] ? security_capable+0x7e/0x2e0 [ 563.439600][T24333] genl_rcv_msg+0x60e/0x790 [ 563.439625][T24333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.439642][T24333] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 563.439666][T24333] ? __pfx_nl80211_new_key+0x10/0x10 [ 563.439684][T24333] ? __pfx_nl80211_post_doit+0x10/0x10 [ 563.439726][T24333] netlink_rcv_skb+0x208/0x470 [ 563.439747][T24333] ? __lock_acquire+0xab9/0xd20 [ 563.439773][T24333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.439794][T24333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.439838][T24333] ? down_read+0x1ad/0x2e0 [ 563.439865][T24333] genl_rcv+0x28/0x40 [ 563.439890][T24333] netlink_unicast+0x82c/0x9e0 [ 563.439922][T24333] ? __pfx_netlink_unicast+0x10/0x10 [ 563.439946][T24333] ? netlink_sendmsg+0x642/0xb30 [ 563.439966][T24333] ? skb_put+0x11b/0x210 [ 563.439995][T24333] netlink_sendmsg+0x805/0xb30 [ 563.440029][T24333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.440057][T24333] ? aa_sock_msg_perm+0xf1/0x1d0 [ 563.440084][T24333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 563.440104][T24333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.440129][T24333] __sock_sendmsg+0x21c/0x270 [ 563.440154][T24333] ____sys_sendmsg+0x505/0x830 [ 563.440192][T24333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.440229][T24333] ? import_iovec+0x74/0xa0 [ 563.440252][T24333] ___sys_sendmsg+0x21f/0x2a0 [ 563.440281][T24333] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.440348][T24333] ? __fget_files+0x2a/0x420 [ 563.440373][T24333] ? __fget_files+0x3a0/0x420 [ 563.440411][T24333] __x64_sys_sendmsg+0x19b/0x260 [ 563.440440][T24333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.440477][T24333] ? __pfx_ksys_write+0x10/0x10 [ 563.440499][T24333] ? rcu_is_watching+0x15/0xb0 [ 563.440525][T24333] ? do_syscall_64+0xbe/0x3b0 [ 563.440552][T24333] do_syscall_64+0xfa/0x3b0 [ 563.440573][T24333] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.440595][T24333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.440615][T24333] ? clear_bhb_loop+0x60/0xb0 [ 563.440634][T24333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.440654][T24333] RIP: 0033:0x7f1563d8ebe9 [ 563.440673][T24333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.440691][T24333] RSP: 002b:00007f1564b26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.440711][T24333] RAX: ffffffffffffffda RBX: 00007f1563fb5fa0 RCX: 00007f1563d8ebe9 [ 563.440725][T24333] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 563.440738][T24333] RBP: 00007f1564b26090 R08: 0000000000000000 R09: 0000000000000000 [ 563.440749][T24333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.440761][T24333] R13: 00007f1563fb6038 R14: 00007f1563fb5fa0 R15: 00007fffaff92c48 [ 563.440793][T24333] [ 563.833325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.950691][T24350] FAULT_INJECTION: forcing a failure. [ 563.950691][T24350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.992130][T24350] CPU: 1 UID: 0 PID: 24350 Comm: syz.4.7168 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 563.992155][T24350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.992166][T24350] Call Trace: [ 563.992173][T24350] [ 563.992182][T24350] dump_stack_lvl+0x189/0x250 [ 563.992210][T24350] ? __pfx____ratelimit+0x10/0x10 [ 563.992233][T24350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.992252][T24350] ? __pfx__printk+0x10/0x10 [ 563.992296][T24350] should_fail_ex+0x414/0x560 [ 563.992322][T24350] _copy_to_user+0x31/0xb0 [ 563.992343][T24350] simple_read_from_buffer+0xe1/0x170 [ 563.992374][T24350] proc_fail_nth_read+0x1b3/0x220 [ 563.992399][T24350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.992425][T24350] ? rw_verify_area+0x2a6/0x4d0 [ 563.992445][T24350] ? __lock_acquire+0xab9/0xd20 [ 563.992467][T24350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.992489][T24350] vfs_read+0x200/0x980 [ 563.992511][T24350] ? fdget_pos+0x247/0x320 [ 563.992532][T24350] ? __pfx___mutex_lock+0x10/0x10 [ 563.992556][T24350] ? __pfx_vfs_read+0x10/0x10 [ 563.992580][T24350] ? __fget_files+0x2a/0x420 [ 563.992610][T24350] ? __fget_files+0x3a0/0x420 [ 563.992632][T24350] ? __fget_files+0x2a/0x420 [ 563.992665][T24350] ksys_read+0x145/0x250 [ 563.992689][T24350] ? __pfx_ksys_read+0x10/0x10 [ 563.992709][T24350] ? rcu_is_watching+0x15/0xb0 [ 563.992733][T24350] ? do_syscall_64+0xbe/0x3b0 [ 563.992760][T24350] do_syscall_64+0xfa/0x3b0 [ 563.992779][T24350] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.992801][T24350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.992821][T24350] ? clear_bhb_loop+0x60/0xb0 [ 563.992843][T24350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.992862][T24350] RIP: 0033:0x7ff88018d5fc [ 563.992881][T24350] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 563.992897][T24350] RSP: 002b:00007ff881039030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.992915][T24350] RAX: ffffffffffffffda RBX: 00007ff8803b5fa0 RCX: 00007ff88018d5fc [ 563.992929][T24350] RDX: 000000000000000f RSI: 00007ff8810390a0 RDI: 0000000000000005 [ 563.992941][T24350] RBP: 00007ff881039090 R08: 0000000000000000 R09: 0000000000000000 [ 563.992952][T24350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.992963][T24350] R13: 00007ff8803b6038 R14: 00007ff8803b5fa0 R15: 00007ffefafe2b38 [ 563.992995][T24350] [ 564.275399][T24354] tipc: Enabled bearer , priority 0 [ 564.283050][T24354] syzkaller0: entered promiscuous mode [ 564.288568][T24354] syzkaller0: entered allmulticast mode [ 564.298150][T24354] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 564.355388][T24354] tipc: Resetting bearer [ 564.392811][T24352] tipc: Resetting bearer [ 564.446511][T24352] tipc: Disabling bearer [ 564.512559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.519575][T24362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7173'. [ 564.564568][T24347] netlink: 'syz.3.7166': attribute type 10 has an invalid length. [ 564.645728][T24372] ip6gre2: entered allmulticast mode [ 564.675685][T24372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7176'. [ 564.708781][T24379] FAULT_INJECTION: forcing a failure. [ 564.708781][T24379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.725333][T24379] CPU: 0 UID: 0 PID: 24379 Comm: syz.1.7178 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 564.725360][T24379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.725372][T24379] Call Trace: [ 564.725381][T24379] [ 564.725390][T24379] dump_stack_lvl+0x189/0x250 [ 564.725418][T24379] ? __pfx____ratelimit+0x10/0x10 [ 564.725448][T24379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.725474][T24379] ? __pfx__printk+0x10/0x10 [ 564.725504][T24379] ? __might_fault+0xb0/0x130 [ 564.725540][T24379] should_fail_ex+0x414/0x560 [ 564.725568][T24379] _copy_from_iter+0x1db/0x16f0 [ 564.725598][T24379] ? rcu_is_watching+0x15/0xb0 [ 564.725619][T24379] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 564.725647][T24379] ? __pfx__copy_from_iter+0x10/0x10 [ 564.725674][T24379] ? __build_skb_around+0x257/0x3e0 [ 564.725702][T24379] ? netlink_sendmsg+0x642/0xb30 [ 564.725723][T24379] ? skb_put+0x11b/0x210 [ 564.725751][T24379] netlink_sendmsg+0x6b2/0xb30 [ 564.725784][T24379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.725811][T24379] ? aa_sock_msg_perm+0xf1/0x1d0 [ 564.725839][T24379] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.725859][T24379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.725883][T24379] __sock_sendmsg+0x21c/0x270 [ 564.725908][T24379] ____sys_sendmsg+0x505/0x830 [ 564.725940][T24379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.725982][T24379] ? import_iovec+0x74/0xa0 [ 564.726004][T24379] ___sys_sendmsg+0x21f/0x2a0 [ 564.726032][T24379] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.726096][T24379] ? __fget_files+0x2a/0x420 [ 564.726119][T24379] ? __fget_files+0x3a0/0x420 [ 564.726152][T24379] __x64_sys_sendmsg+0x19b/0x260 [ 564.726180][T24379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.726215][T24379] ? __pfx_ksys_write+0x10/0x10 [ 564.726235][T24379] ? rcu_is_watching+0x15/0xb0 [ 564.726260][T24379] ? do_syscall_64+0xbe/0x3b0 [ 564.726287][T24379] do_syscall_64+0xfa/0x3b0 [ 564.726308][T24379] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.726330][T24379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.726349][T24379] ? clear_bhb_loop+0x60/0xb0 [ 564.726372][T24379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.726391][T24379] RIP: 0033:0x7f7a1898ebe9 [ 564.726407][T24379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.726424][T24379] RSP: 002b:00007f7a19793038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.726444][T24379] RAX: ffffffffffffffda RBX: 00007f7a18bb5fa0 RCX: 00007f7a1898ebe9 [ 564.726458][T24379] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 564.726470][T24379] RBP: 00007f7a19793090 R08: 0000000000000000 R09: 0000000000000000 [ 564.726482][T24379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.726493][T24379] R13: 00007f7a18bb6038 R14: 00007f7a18bb5fa0 R15: 00007ffe7c245f08 [ 564.726524][T24379] [ 564.815932][T24384] FAULT_INJECTION: forcing a failure. [ 564.815932][T24384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.049383][T24384] CPU: 1 UID: 0 PID: 24384 Comm: syz.5.7180 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 565.049412][T24384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.049422][T24384] Call Trace: [ 565.049430][T24384] [ 565.049440][T24384] dump_stack_lvl+0x189/0x250 [ 565.049468][T24384] ? __pfx____ratelimit+0x10/0x10 [ 565.049492][T24384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.049514][T24384] ? __pfx__printk+0x10/0x10 [ 565.049552][T24384] should_fail_ex+0x414/0x560 [ 565.049580][T24384] _copy_to_user+0x31/0xb0 [ 565.049601][T24384] simple_read_from_buffer+0xe1/0x170 [ 565.049632][T24384] proc_fail_nth_read+0x1b3/0x220 [ 565.049658][T24384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.049684][T24384] ? rw_verify_area+0x2a6/0x4d0 [ 565.049706][T24384] ? __lock_acquire+0xab9/0xd20 [ 565.049729][T24384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.049751][T24384] vfs_read+0x200/0x980 [ 565.049771][T24384] ? fdget_pos+0x247/0x320 [ 565.049791][T24384] ? __pfx___mutex_lock+0x10/0x10 [ 565.049814][T24384] ? __pfx_vfs_read+0x10/0x10 [ 565.049835][T24384] ? __fget_files+0x2a/0x420 [ 565.049859][T24384] ? __fget_files+0x3a0/0x420 [ 565.049878][T24384] ? __fget_files+0x2a/0x420 [ 565.049905][T24384] ksys_read+0x145/0x250 [ 565.049925][T24384] ? __pfx_ksys_read+0x10/0x10 [ 565.049941][T24384] ? rcu_is_watching+0x15/0xb0 [ 565.049961][T24384] ? do_syscall_64+0xbe/0x3b0 [ 565.049983][T24384] do_syscall_64+0xfa/0x3b0 [ 565.050001][T24384] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.050018][T24384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.050033][T24384] ? clear_bhb_loop+0x60/0xb0 [ 565.050051][T24384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.050066][T24384] RIP: 0033:0x7f1563d8d5fc [ 565.050080][T24384] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 565.050094][T24384] RSP: 002b:00007f1564b26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 565.050109][T24384] RAX: ffffffffffffffda RBX: 00007f1563fb5fa0 RCX: 00007f1563d8d5fc [ 565.050120][T24384] RDX: 000000000000000f RSI: 00007f1564b260a0 RDI: 0000000000000004 [ 565.050129][T24384] RBP: 00007f1564b26090 R08: 0000000000000000 R09: 0000000000000000 [ 565.050138][T24384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.050146][T24384] R13: 00007f1563fb6038 R14: 00007f1563fb5fa0 R15: 00007fffaff92c48 [ 565.050170][T24384] [ 565.401192][T24391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7182'. [ 565.412837][T24391] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 565.423164][T24391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.461684][T24393] tipc: Enabled bearer , priority 0 [ 565.509687][T24393] syzkaller0: entered promiscuous mode [ 565.520509][T24393] syzkaller0: entered allmulticast mode [ 565.526238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.571631][T24393] tipc: Resetting bearer [ 565.719621][T24413] netlink: 3576 bytes leftover after parsing attributes in process `syz.4.7189'. [ 565.766591][T24392] tipc: Resetting bearer [ 565.783955][T24420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7192'. [ 565.828376][T24392] tipc: Disabling bearer [ 565.841471][T24422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7191'. [ 565.861359][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7191'. [ 565.989277][T24430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7196'. [ 566.065806][T24438] bond0: (slave bridge0): Releasing backup interface [ 566.074211][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.210286][T24447] FAULT_INJECTION: forcing a failure. [ 566.210286][T24447] name failslab, interval 1, probability 0, space 0, times 0 [ 566.227998][T24438] team0: Port device vlan0 removed [ 566.275757][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.297921][T24447] CPU: 0 UID: 0 PID: 24447 Comm: syz.3.7199 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 566.297943][T24447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 566.297954][T24447] Call Trace: [ 566.297963][T24447] [ 566.297971][T24447] dump_stack_lvl+0x189/0x250 [ 566.297998][T24447] ? __pfx____ratelimit+0x10/0x10 [ 566.298021][T24447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.298043][T24447] ? __pfx__printk+0x10/0x10 [ 566.298068][T24447] ? __pfx___might_resched+0x10/0x10 [ 566.298097][T24447] ? fs_reclaim_acquire+0x7d/0x100 [ 566.298129][T24447] should_fail_ex+0x414/0x560 [ 566.298158][T24447] should_failslab+0xa8/0x100 [ 566.298184][T24447] __kmalloc_noprof+0xcb/0x4f0 [ 566.298204][T24447] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 566.298219][T24447] ? sock_kmalloc+0xd6/0x160 [ 566.298239][T24447] sock_kmalloc+0xd6/0x160 [ 566.298259][T24447] af_alg_sendmsg+0x109c/0x22e0 [ 566.298278][T24447] ? __pfx___might_resched+0x10/0x10 [ 566.298319][T24447] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 566.298339][T24447] ? __pfx_aa_sk_perm+0x10/0x10 [ 566.298361][T24447] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 566.298392][T24447] ? aa_sock_msg_perm+0xf1/0x1d0 [ 566.298419][T24447] ? skcipher_sendmsg+0x26/0xf0 [ 566.298438][T24447] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 566.298461][T24447] __sock_sendmsg+0x21c/0x270 [ 566.298486][T24447] __sys_sendto+0x3bd/0x520 [ 566.298511][T24447] ? __pfx___sys_sendto+0x10/0x10 [ 566.298546][T24447] ? count_memcg_event_mm+0x21/0x260 [ 566.298581][T24447] ? exc_page_fault+0x76/0xf0 [ 566.298605][T24447] ? do_user_addr_fault+0xc8a/0x1390 [ 566.298634][T24447] __x64_sys_sendto+0xde/0x100 [ 566.298662][T24447] do_syscall_64+0xfa/0x3b0 [ 566.298683][T24447] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.298703][T24447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.298722][T24447] ? clear_bhb_loop+0x60/0xb0 [ 566.298743][T24447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.298761][T24447] RIP: 0033:0x7f510bf90a7c [ 566.298779][T24447] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 566.298794][T24447] RSP: 002b:00007f510cd79ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 566.298813][T24447] RAX: ffffffffffffffda RBX: 00007f510cd79fc0 RCX: 00007f510bf90a7c [ 566.298828][T24447] RDX: 0000000000000020 RSI: 00007f510cd7a010 RDI: 0000000000000004 [ 566.298839][T24447] RBP: 0000000000000000 R08: 00007f510cd79f14 R09: 000000000000000c [ 566.298851][T24447] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 566.298862][T24447] R13: 00007f510cd79f68 R14: 00007f510cd7a010 R15: 0000000000000000 [ 566.298894][T24447] [ 566.308895][T24439] team0: Unable to change to the same mode the team is in [ 566.414833][T24457] FAULT_INJECTION: forcing a failure. [ 566.414833][T24457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.446491][T24444] team0: Port device vlan0 added [ 566.467995][T24457] CPU: 0 UID: 0 PID: 24457 Comm: syz.5.7204 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 566.468021][T24457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 566.468033][T24457] Call Trace: [ 566.468041][T24457] [ 566.468049][T24457] dump_stack_lvl+0x189/0x250 [ 566.468077][T24457] ? __pfx____ratelimit+0x10/0x10 [ 566.468100][T24457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.468129][T24457] ? __pfx__printk+0x10/0x10 [ 566.468154][T24457] ? __might_fault+0xb0/0x130 [ 566.468188][T24457] should_fail_ex+0x414/0x560 [ 566.468215][T24457] _copy_from_user+0x2d/0xb0 [ 566.468235][T24457] sock_do_ioctl+0x182/0x300 [ 566.468259][T24457] ? __pfx_sock_do_ioctl+0x10/0x10 [ 566.468276][T24457] ? __lock_acquire+0xab9/0xd20 [ 566.468318][T24457] sock_ioctl+0x576/0x790 [ 566.468339][T24457] ? __pfx_sock_ioctl+0x10/0x10 [ 566.468358][T24457] ? __fget_files+0x2a/0x420 [ 566.468383][T24457] ? __fget_files+0x3a0/0x420 [ 566.468406][T24457] ? __fget_files+0x2a/0x420 [ 566.468434][T24457] ? bpf_lsm_file_ioctl+0x9/0x20 [ 566.468456][T24457] ? __pfx_sock_ioctl+0x10/0x10 [ 566.468475][T24457] __se_sys_ioctl+0xfc/0x170 [ 566.468500][T24457] do_syscall_64+0xfa/0x3b0 [ 566.468521][T24457] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.468542][T24457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.468560][T24457] ? clear_bhb_loop+0x60/0xb0 [ 566.468582][T24457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.468600][T24457] RIP: 0033:0x7f1563d8ebe9 [ 566.468617][T24457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.468634][T24457] RSP: 002b:00007f1564b26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.468653][T24457] RAX: ffffffffffffffda RBX: 00007f1563fb5fa0 RCX: 00007f1563d8ebe9 [ 566.468666][T24457] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000004 [ 566.468678][T24457] RBP: 00007f1564b26090 R08: 0000000000000000 R09: 0000000000000000 [ 566.468689][T24457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.468701][T24457] R13: 00007f1563fb6038 R14: 00007f1563fb5fa0 R15: 00007fffaff92c48 [ 566.468731][T24457] [ 566.532799][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.826894][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.938306][T24470] netlink: 'syz.0.7206': attribute type 1 has an invalid length. [ 566.941574][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.326195][T24496] FAULT_INJECTION: forcing a failure. [ 567.326195][T24496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 567.366805][T24496] CPU: 1 UID: 0 PID: 24496 Comm: syz.5.7218 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 567.366832][T24496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.366843][T24496] Call Trace: [ 567.366851][T24496] [ 567.366860][T24496] dump_stack_lvl+0x189/0x250 [ 567.366888][T24496] ? __pfx____ratelimit+0x10/0x10 [ 567.366911][T24496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.366933][T24496] ? __pfx__printk+0x10/0x10 [ 567.366959][T24496] ? fs_reclaim_acquire+0x7d/0x100 [ 567.366995][T24496] should_fail_ex+0x414/0x560 [ 567.367024][T24496] prepare_alloc_pages+0x213/0x610 [ 567.367059][T24496] __alloc_frozen_pages_noprof+0x123/0x370 [ 567.367084][T24496] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 567.367113][T24496] ? policy_nodemask+0x27c/0x720 [ 567.367143][T24496] alloc_pages_mpol+0x232/0x4a0 [ 567.367174][T24496] alloc_pages_noprof+0xa9/0x190 [ 567.367201][T24496] af_alg_sendmsg+0x133a/0x22e0 [ 567.367220][T24496] ? __pfx___might_resched+0x10/0x10 [ 567.367264][T24496] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 567.367283][T24496] ? __pfx_aa_sk_perm+0x10/0x10 [ 567.367304][T24496] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 567.367337][T24496] ? aa_sock_msg_perm+0xf1/0x1d0 [ 567.367363][T24496] ? skcipher_sendmsg+0x26/0xf0 [ 567.367384][T24496] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 567.367406][T24496] __sock_sendmsg+0x21c/0x270 [ 567.367430][T24496] __sys_sendto+0x3bd/0x520 [ 567.367453][T24496] ? __pfx___sys_sendto+0x10/0x10 [ 567.367487][T24496] ? count_memcg_event_mm+0x21/0x260 [ 567.367524][T24496] ? exc_page_fault+0x76/0xf0 [ 567.367550][T24496] ? do_user_addr_fault+0xc8a/0x1390 [ 567.367582][T24496] __x64_sys_sendto+0xde/0x100 [ 567.367610][T24496] do_syscall_64+0xfa/0x3b0 [ 567.367632][T24496] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.367654][T24496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.367674][T24496] ? clear_bhb_loop+0x60/0xb0 [ 567.367698][T24496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.367717][T24496] RIP: 0033:0x7f1563d90a7c [ 567.367735][T24496] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 567.367751][T24496] RSP: 002b:00007f1564b24ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 567.367771][T24496] RAX: ffffffffffffffda RBX: 00007f1564b24fc0 RCX: 00007f1563d90a7c [ 567.367785][T24496] RDX: 0000000000000020 RSI: 00007f1564b25010 RDI: 0000000000000004 [ 567.367799][T24496] RBP: 0000000000000000 R08: 00007f1564b24f14 R09: 000000000000000c [ 567.367810][T24496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 567.367820][T24496] R13: 00007f1564b24f68 R14: 00007f1564b25010 R15: 0000000000000000 [ 567.367851][T24496] [ 567.782832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.796317][T24499] __nla_validate_parse: 1 callbacks suppressed [ 567.796335][T24499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7220'. [ 567.798129][T24505] FAULT_INJECTION: forcing a failure. [ 567.798129][T24505] name failslab, interval 1, probability 0, space 0, times 0 [ 567.841603][T24509] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7226'. [ 567.859007][T24509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7226'. [ 567.877711][T24505] CPU: 1 UID: 0 PID: 24505 Comm: syz.0.7223 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 567.877739][T24505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.877750][T24505] Call Trace: [ 567.877759][T24505] [ 567.877768][T24505] dump_stack_lvl+0x189/0x250 [ 567.877796][T24505] ? __pfx____ratelimit+0x10/0x10 [ 567.877819][T24505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.877841][T24505] ? __pfx__printk+0x10/0x10 [ 567.877872][T24505] ? __pfx___might_resched+0x10/0x10 [ 567.877896][T24505] should_fail_ex+0x414/0x560 [ 567.877923][T24505] should_failslab+0xa8/0x100 [ 567.877950][T24505] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 567.877976][T24505] ? __alloc_skb+0x112/0x2d0 [ 567.878003][T24505] __alloc_skb+0x112/0x2d0 [ 567.878031][T24505] netlink_sendmsg+0x5c6/0xb30 [ 567.878067][T24505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.878094][T24505] ? aa_sock_msg_perm+0xf1/0x1d0 [ 567.878120][T24505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 567.878141][T24505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.878166][T24505] __sock_sendmsg+0x21c/0x270 [ 567.878190][T24505] ____sys_sendmsg+0x505/0x830 [ 567.878221][T24505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.878255][T24505] ? import_iovec+0x74/0xa0 [ 567.878278][T24505] ___sys_sendmsg+0x21f/0x2a0 [ 567.878305][T24505] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.878369][T24505] ? __fget_files+0x2a/0x420 [ 567.878395][T24505] ? __fget_files+0x3a0/0x420 [ 567.878431][T24505] __x64_sys_sendmsg+0x19b/0x260 [ 567.878460][T24505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.878497][T24505] ? __pfx_ksys_write+0x10/0x10 [ 567.878518][T24505] ? rcu_is_watching+0x15/0xb0 [ 567.878543][T24505] ? do_syscall_64+0xbe/0x3b0 [ 567.878570][T24505] do_syscall_64+0xfa/0x3b0 [ 567.878591][T24505] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.878613][T24505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.878633][T24505] ? clear_bhb_loop+0x60/0xb0 [ 567.878664][T24505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.878683][T24505] RIP: 0033:0x7f13c498ebe9 [ 567.878700][T24505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.878717][T24505] RSP: 002b:00007f13c577f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.878737][T24505] RAX: ffffffffffffffda RBX: 00007f13c4bb5fa0 RCX: 00007f13c498ebe9 [ 567.878751][T24505] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 567.878763][T24505] RBP: 00007f13c577f090 R08: 0000000000000000 R09: 0000000000000000 [ 567.878775][T24505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.878787][T24505] R13: 00007f13c4bb6038 R14: 00007f13c4bb5fa0 R15: 00007ffcc9665658 [ 567.878818][T24505] [ 568.410329][T24526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7233'. [ 568.529156][T24532] tipc: Enabled bearer , priority 0 [ 568.540044][T24532] syzkaller0: entered promiscuous mode [ 568.549198][T24532] syzkaller0: entered allmulticast mode [ 568.573101][T24532] tipc: Resetting bearer [ 568.642115][T24539] FAULT_INJECTION: forcing a failure. [ 568.642115][T24539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.658783][T24539] CPU: 0 UID: 0 PID: 24539 Comm: syz.0.7239 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 568.658811][T24539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.658823][T24539] Call Trace: [ 568.658833][T24539] [ 568.658843][T24539] dump_stack_lvl+0x189/0x250 [ 568.658872][T24539] ? __pfx____ratelimit+0x10/0x10 [ 568.658896][T24539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.658918][T24539] ? __pfx__printk+0x10/0x10 [ 568.658944][T24539] ? __might_fault+0xb0/0x130 [ 568.658980][T24539] should_fail_ex+0x414/0x560 [ 568.659009][T24539] _copy_from_iter+0x1db/0x16f0 [ 568.659046][T24539] ? policy_nodemask+0x27c/0x720 [ 568.659070][T24539] ? __pfx__copy_from_iter+0x10/0x10 [ 568.659103][T24539] ? set_page_refcounted+0xa0/0x1e0 [ 568.659135][T24539] af_alg_sendmsg+0x1436/0x22e0 [ 568.659156][T24539] ? __pfx___might_resched+0x10/0x10 [ 568.659200][T24539] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 568.659219][T24539] ? __pfx_aa_sk_perm+0x10/0x10 [ 568.659241][T24539] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 568.659275][T24539] ? aa_sock_msg_perm+0xf1/0x1d0 [ 568.659301][T24539] ? skcipher_sendmsg+0x26/0xf0 [ 568.659321][T24539] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 568.659343][T24539] __sock_sendmsg+0x21c/0x270 [ 568.659369][T24539] __sys_sendto+0x3bd/0x520 [ 568.659396][T24539] ? __pfx___sys_sendto+0x10/0x10 [ 568.659432][T24539] ? count_memcg_event_mm+0x21/0x260 [ 568.659469][T24539] ? exc_page_fault+0x76/0xf0 [ 568.659496][T24539] ? do_user_addr_fault+0xc8a/0x1390 [ 568.659534][T24539] __x64_sys_sendto+0xde/0x100 [ 568.659568][T24539] do_syscall_64+0xfa/0x3b0 [ 568.659591][T24539] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.659613][T24539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.659632][T24539] ? clear_bhb_loop+0x60/0xb0 [ 568.659656][T24539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.659676][T24539] RIP: 0033:0x7f13c4990a7c [ 568.659694][T24539] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 568.659711][T24539] RSP: 002b:00007f13c577dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 568.659732][T24539] RAX: ffffffffffffffda RBX: 00007f13c577dfc0 RCX: 00007f13c4990a7c [ 568.659747][T24539] RDX: 0000000000000020 RSI: 00007f13c577e010 RDI: 0000000000000004 [ 568.659760][T24539] RBP: 0000000000000000 R08: 00007f13c577df14 R09: 000000000000000c [ 568.659775][T24539] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 568.659787][T24539] R13: 00007f13c577df68 R14: 00007f13c577e010 R15: 0000000000000000 [ 568.659817][T24539] [ 568.751807][T24536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7237'. [ 568.776884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.941528][T24530] tipc: Resetting bearer [ 568.993449][T24530] tipc: Disabling bearer [ 569.462129][T24575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7252'. [ 569.516548][T24578] FAULT_INJECTION: forcing a failure. [ 569.516548][T24578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.561820][T24578] CPU: 1 UID: 0 PID: 24578 Comm: syz.1.7253 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 569.561857][T24578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.561868][T24578] Call Trace: [ 569.561876][T24578] [ 569.561886][T24578] dump_stack_lvl+0x189/0x250 [ 569.561916][T24578] ? __pfx____ratelimit+0x10/0x10 [ 569.561940][T24578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.561963][T24578] ? __pfx__printk+0x10/0x10 [ 569.562003][T24578] should_fail_ex+0x414/0x560 [ 569.562032][T24578] _copy_to_user+0x31/0xb0 [ 569.562054][T24578] simple_read_from_buffer+0xe1/0x170 [ 569.562086][T24578] proc_fail_nth_read+0x1b3/0x220 [ 569.562112][T24578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 569.562135][T24578] ? rw_verify_area+0x2a6/0x4d0 [ 569.562156][T24578] ? __lock_acquire+0xab9/0xd20 [ 569.562180][T24578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 569.562204][T24578] vfs_read+0x200/0x980 [ 569.562227][T24578] ? fdget_pos+0x247/0x320 [ 569.562248][T24578] ? __pfx___mutex_lock+0x10/0x10 [ 569.562273][T24578] ? __pfx_vfs_read+0x10/0x10 [ 569.562299][T24578] ? __fget_files+0x2a/0x420 [ 569.562331][T24578] ? __fget_files+0x3a0/0x420 [ 569.562355][T24578] ? __fget_files+0x2a/0x420 [ 569.562391][T24578] ksys_read+0x145/0x250 [ 569.562421][T24578] ? __pfx_ksys_read+0x10/0x10 [ 569.562440][T24578] ? rcu_is_watching+0x15/0xb0 [ 569.562466][T24578] ? do_syscall_64+0xbe/0x3b0 [ 569.562502][T24578] do_syscall_64+0xfa/0x3b0 [ 569.562524][T24578] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.562546][T24578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.562566][T24578] ? clear_bhb_loop+0x60/0xb0 [ 569.562591][T24578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.562611][T24578] RIP: 0033:0x7f7a1898d5fc [ 569.562629][T24578] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 569.562647][T24578] RSP: 002b:00007f7a19793030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 569.562668][T24578] RAX: ffffffffffffffda RBX: 00007f7a18bb5fa0 RCX: 00007f7a1898d5fc [ 569.562683][T24578] RDX: 000000000000000f RSI: 00007f7a197930a0 RDI: 0000000000000004 [ 569.562695][T24578] RBP: 00007f7a19793090 R08: 0000000000000000 R09: 0000000000000000 [ 569.562708][T24578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.562720][T24578] R13: 00007f7a18bb6038 R14: 00007f7a18bb5fa0 R15: 00007ffe7c245f08 [ 569.562752][T24578] [ 569.916280][T24588] FAULT_INJECTION: forcing a failure. [ 569.916280][T24588] name failslab, interval 1, probability 0, space 0, times 0 [ 569.930311][T24588] CPU: 1 UID: 0 PID: 24588 Comm: syz.3.7257 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 569.930338][T24588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.930349][T24588] Call Trace: [ 569.930357][T24588] [ 569.930366][T24588] dump_stack_lvl+0x189/0x250 [ 569.930393][T24588] ? __pfx____ratelimit+0x10/0x10 [ 569.930417][T24588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.930438][T24588] ? __pfx__printk+0x10/0x10 [ 569.930470][T24588] ? __pfx___might_resched+0x10/0x10 [ 569.930488][T24588] ? fs_reclaim_acquire+0x7d/0x100 [ 569.930529][T24588] should_fail_ex+0x414/0x560 [ 569.930557][T24588] should_failslab+0xa8/0x100 [ 569.930582][T24588] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 569.930608][T24588] ? __alloc_skb+0x112/0x2d0 [ 569.930636][T24588] __alloc_skb+0x112/0x2d0 [ 569.930663][T24588] netlink_ack+0x146/0xa50 [ 569.930685][T24588] ? is_bpf_text_address+0x26/0x2b0 [ 569.930726][T24588] netlink_rcv_skb+0x28c/0x470 [ 569.930749][T24588] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 569.930773][T24588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 569.930808][T24588] ? bpf_lsm_capable+0x9/0x20 [ 569.930831][T24588] ? security_capable+0x7e/0x2e0 [ 569.930862][T24588] nfnetlink_rcv+0x26a/0x2520 [ 569.930883][T24588] ? is_bpf_text_address+0x26/0x2b0 [ 569.930912][T24588] ? kernel_text_address+0xa5/0xe0 [ 569.930940][T24588] ? __kernel_text_address+0xd/0x40 [ 569.930963][T24588] ? unwind_get_return_address+0x4d/0x90 [ 569.930985][T24588] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 569.931007][T24588] ? arch_stack_walk+0xfc/0x150 [ 569.931044][T24588] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 569.931066][T24588] ? stack_depot_save_flags+0x40/0x860 [ 569.931092][T24588] ? __lock_acquire+0xab9/0xd20 [ 569.931144][T24588] ? __lock_acquire+0xab9/0xd20 [ 569.931180][T24588] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.931209][T24588] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.931241][T24588] netlink_unicast+0x82c/0x9e0 [ 569.931271][T24588] ? __pfx_netlink_unicast+0x10/0x10 [ 569.931294][T24588] ? netlink_sendmsg+0x642/0xb30 [ 569.931315][T24588] ? skb_put+0x11b/0x210 [ 569.931342][T24588] netlink_sendmsg+0x805/0xb30 [ 569.931374][T24588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.931401][T24588] ? aa_sock_msg_perm+0xf1/0x1d0 [ 569.931427][T24588] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.931445][T24588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.931469][T24588] __sock_sendmsg+0x21c/0x270 [ 569.931494][T24588] ____sys_sendmsg+0x505/0x830 [ 569.931576][T24588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.931611][T24588] ? import_iovec+0x74/0xa0 [ 569.931633][T24588] ___sys_sendmsg+0x21f/0x2a0 [ 569.931662][T24588] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.931726][T24588] ? __fget_files+0x2a/0x420 [ 569.931750][T24588] ? __fget_files+0x3a0/0x420 [ 569.931786][T24588] __x64_sys_sendmsg+0x19b/0x260 [ 569.931815][T24588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.931847][T24588] ? __pfx_ksys_write+0x10/0x10 [ 569.931866][T24588] ? rcu_is_watching+0x15/0xb0 [ 569.931890][T24588] ? do_syscall_64+0xbe/0x3b0 [ 569.931914][T24588] do_syscall_64+0xfa/0x3b0 [ 569.931933][T24588] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.931953][T24588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.931969][T24588] ? clear_bhb_loop+0x60/0xb0 [ 569.931990][T24588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.932007][T24588] RIP: 0033:0x7f510bf8ebe9 [ 569.932025][T24588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.932041][T24588] RSP: 002b:00007f510cd7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.932061][T24588] RAX: ffffffffffffffda RBX: 00007f510c1b5fa0 RCX: 00007f510bf8ebe9 [ 569.932075][T24588] RDX: 0000000000000014 RSI: 0000200000000280 RDI: 0000000000000003 [ 569.932086][T24588] RBP: 00007f510cd7b090 R08: 0000000000000000 R09: 0000000000000000 [ 569.932098][T24588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.932109][T24588] R13: 00007f510c1b6038 R14: 00007f510c1b5fa0 R15: 00007ffecec226f8 [ 569.932137][T24588] [ 569.961859][T24592] tipc: Enabled bearer , priority 0 [ 569.972556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.995141][T24593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7256'. [ 570.357525][T24592] syzkaller0: entered promiscuous mode [ 570.367899][T24592] syzkaller0: entered allmulticast mode [ 570.381946][T24601] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 570.433288][T24604] tipc: Resetting bearer [ 570.445648][T24591] tipc: Resetting bearer [ 570.495111][T24591] tipc: Disabling bearer [ 570.654023][T24616] FAULT_INJECTION: forcing a failure. [ 570.654023][T24616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.676308][T24610] team0: Port device geneve0 removed [ 570.711115][T24610] tipc: Resetting bearer [ 570.723022][T24616] CPU: 1 UID: 0 PID: 24616 Comm: syz.4.7266 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 570.723050][T24616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.723062][T24616] Call Trace: [ 570.723070][T24616] [ 570.723078][T24616] dump_stack_lvl+0x189/0x250 [ 570.723106][T24616] ? __pfx____ratelimit+0x10/0x10 [ 570.723128][T24616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.723150][T24616] ? __pfx__printk+0x10/0x10 [ 570.723174][T24616] ? __might_fault+0xb0/0x130 [ 570.723206][T24616] should_fail_ex+0x414/0x560 [ 570.723231][T24616] _copy_from_iter+0x1db/0x16f0 [ 570.723259][T24616] ? rcu_is_watching+0x15/0xb0 [ 570.723278][T24616] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 570.723302][T24616] ? __pfx__copy_from_iter+0x10/0x10 [ 570.723328][T24616] ? __build_skb_around+0x257/0x3e0 [ 570.723381][T24616] ? netlink_sendmsg+0x642/0xb30 [ 570.723406][T24616] ? skb_put+0x11b/0x210 [ 570.723431][T24616] netlink_sendmsg+0x6b2/0xb30 [ 570.723463][T24616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.723489][T24616] ? aa_sock_msg_perm+0xf1/0x1d0 [ 570.723515][T24616] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 570.723535][T24616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.723558][T24616] __sock_sendmsg+0x21c/0x270 [ 570.723581][T24616] ____sys_sendmsg+0x505/0x830 [ 570.723618][T24616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.723652][T24616] ? import_iovec+0x74/0xa0 [ 570.723674][T24616] ___sys_sendmsg+0x21f/0x2a0 [ 570.723701][T24616] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.723759][T24616] ? __fget_files+0x2a/0x420 [ 570.723783][T24616] ? __fget_files+0x3a0/0x420 [ 570.723819][T24616] __x64_sys_sendmsg+0x19b/0x260 [ 570.723848][T24616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 570.723883][T24616] ? __pfx_ksys_write+0x10/0x10 [ 570.723904][T24616] ? rcu_is_watching+0x15/0xb0 [ 570.723928][T24616] ? do_syscall_64+0xbe/0x3b0 [ 570.723955][T24616] do_syscall_64+0xfa/0x3b0 [ 570.723976][T24616] ? lockdep_hardirqs_on+0x9c/0x150 [ 570.723997][T24616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.724017][T24616] ? clear_bhb_loop+0x60/0xb0 [ 570.724040][T24616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.724059][T24616] RIP: 0033:0x7ff88018ebe9 [ 570.724077][T24616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.724094][T24616] RSP: 002b:00007ff881039038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.724114][T24616] RAX: ffffffffffffffda RBX: 00007ff8803b5fa0 RCX: 00007ff88018ebe9 [ 570.724128][T24616] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 570.724140][T24616] RBP: 00007ff881039090 R08: 0000000000000000 R09: 0000000000000000 [ 570.724151][T24616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.724162][T24616] R13: 00007ff8803b6038 R14: 00007ff8803b5fa0 R15: 00007ffefafe2b38 [ 570.724192][T24616] [ 571.044166][T24610] team0: Port device vlan0 removed [ 571.093612][T24610] bond0: (slave vlan1): Releasing active interface [ 571.120423][T24633] netlink: 'syz.3.7269': attribute type 12 has an invalid length. [ 571.122623][T24634] netlink: 'syz.4.7271': attribute type 9 has an invalid length. [ 571.153325][T24617] team0: Unable to change to the same mode the team is in [ 571.172564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.177711][T24621] team0: Port device vlan0 added [ 571.190030][T24625] FAULT_INJECTION: forcing a failure. [ 571.190030][T24625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.215780][T24625] CPU: 0 UID: 0 PID: 24625 Comm: syz.1.7270 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 571.215803][T24625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.215814][T24625] Call Trace: [ 571.215822][T24625] [ 571.215831][T24625] dump_stack_lvl+0x189/0x250 [ 571.215858][T24625] ? __pfx____ratelimit+0x10/0x10 [ 571.215881][T24625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.215902][T24625] ? __pfx__printk+0x10/0x10 [ 571.215926][T24625] ? __might_fault+0xb0/0x130 [ 571.215962][T24625] should_fail_ex+0x414/0x560 [ 571.215989][T24625] _copy_from_user+0x2d/0xb0 [ 571.216006][T24625] br_dev_siocdevprivate+0xf5/0x1580 [ 571.216032][T24625] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 571.216058][T24625] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 571.216080][T24625] ? rcu_is_watching+0x15/0xb0 [ 571.216110][T24625] ? __mutex_lock+0x5b6/0x1360 [ 571.216139][T24625] ? dev_ioctl+0x83c/0x1150 [ 571.216162][T24625] ? full_name_hash+0x92/0xe0 [ 571.216184][T24625] ? netdev_name_node_lookup+0xdf/0x120 [ 571.216209][T24625] dev_ifsioc+0xb57/0xf00 [ 571.216241][T24625] dev_ioctl+0x84c/0x1150 [ 571.216267][T24625] sock_ioctl+0x719/0x790 [ 571.216289][T24625] ? __pfx_sock_ioctl+0x10/0x10 [ 571.216311][T24625] ? __fget_files+0x3a0/0x420 [ 571.216340][T24625] ? __fget_files+0x2a/0x420 [ 571.216368][T24625] ? bpf_lsm_file_ioctl+0x9/0x20 [ 571.216391][T24625] ? __pfx_sock_ioctl+0x10/0x10 [ 571.216410][T24625] __se_sys_ioctl+0xfc/0x170 [ 571.216435][T24625] do_syscall_64+0xfa/0x3b0 [ 571.216457][T24625] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.216479][T24625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.216498][T24625] ? clear_bhb_loop+0x60/0xb0 [ 571.216522][T24625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.216540][T24625] RIP: 0033:0x7f7a1898ebe9 [ 571.216558][T24625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.216581][T24625] RSP: 002b:00007f7a19793038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.216601][T24625] RAX: ffffffffffffffda RBX: 00007f7a18bb5fa0 RCX: 00007f7a1898ebe9 [ 571.216614][T24625] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 571.216627][T24625] RBP: 00007f7a19793090 R08: 0000000000000000 R09: 0000000000000000 [ 571.216638][T24625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.216649][T24625] R13: 00007f7a18bb6038 R14: 00007f7a18bb5fa0 R15: 00007ffe7c245f08 [ 571.216682][T24625] [ 571.770471][T24656] FAULT_INJECTION: forcing a failure. [ 571.770471][T24656] name failslab, interval 1, probability 0, space 0, times 0 [ 571.828020][T24656] CPU: 0 UID: 0 PID: 24656 Comm: syz.3.7280 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 571.828048][T24656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.828060][T24656] Call Trace: [ 571.828085][T24656] [ 571.828094][T24656] dump_stack_lvl+0x189/0x250 [ 571.828122][T24656] ? __pfx____ratelimit+0x10/0x10 [ 571.828145][T24656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.828168][T24656] ? __pfx__printk+0x10/0x10 [ 571.828195][T24656] ? __pfx___might_resched+0x10/0x10 [ 571.828215][T24656] ? fs_reclaim_acquire+0x7d/0x100 [ 571.828247][T24656] should_fail_ex+0x414/0x560 [ 571.828273][T24656] should_failslab+0xa8/0x100 [ 571.828300][T24656] __kmalloc_noprof+0xcb/0x4f0 [ 571.828323][T24656] ? sock_kmalloc+0xd6/0x160 [ 571.828347][T24656] sock_kmalloc+0xd6/0x160 [ 571.828368][T24656] skcipher_recvmsg+0x55c/0x11c0 [ 571.828412][T24656] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 571.828443][T24656] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 571.828462][T24656] ? security_socket_recvmsg+0x7e/0x2e0 [ 571.828482][T24656] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 571.828503][T24656] sock_recvmsg+0x22c/0x270 [ 571.828534][T24656] __sys_recvfrom+0x1f6/0x340 [ 571.828562][T24656] ? __pfx___sys_recvfrom+0x10/0x10 [ 571.828599][T24656] ? count_memcg_event_mm+0x21/0x260 [ 571.828636][T24656] ? exc_page_fault+0x76/0xf0 [ 571.828662][T24656] ? do_user_addr_fault+0xc8a/0x1390 [ 571.828695][T24656] __x64_sys_recvfrom+0xde/0x100 [ 571.828724][T24656] do_syscall_64+0xfa/0x3b0 [ 571.828745][T24656] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.828767][T24656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.828786][T24656] ? clear_bhb_loop+0x60/0xb0 [ 571.828810][T24656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.828829][T24656] RIP: 0033:0x7f510bf909b4 [ 571.828848][T24656] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 571.828864][T24656] RSP: 002b:00007f510cd79ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 571.828884][T24656] RAX: ffffffffffffffda RBX: 00007f510cd79fc0 RCX: 00007f510bf909b4 [ 571.828898][T24656] RDX: 0000000000001000 RSI: 00007f510cd7a010 RDI: 0000000000000004 [ 571.828910][T24656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.828921][T24656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 571.828933][T24656] R13: 00007f510cd79f68 R14: 00007f510cd7a010 R15: 0000000000000000 [ 571.828965][T24656] [ 571.830158][T24660] tipc: Enabled bearer , priority 0 [ 571.857923][T24663] IPVS: set_ctl: invalid protocol: 108 172.30.0.6:20001 [ 572.037876][T24671] can: request_module (can-proto-3) failed. [ 572.048630][T24666] syzkaller0: entered promiscuous mode [ 572.116823][T24666] syzkaller0: entered allmulticast mode [ 572.132833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.135804][T24660] tipc: Resetting bearer [ 572.201860][T24659] tipc: Resetting bearer [ 572.261654][T24659] tipc: Disabling bearer [ 572.306176][T24676] tipc: Resetting bearer [ 572.332309][T24676] team0: Port device vlan0 removed [ 572.352202][T24683] team0: Unable to change to the same mode the team is in [ 572.400690][T24689] team0: Port device vlan0 added [ 572.411178][T24694] tipc: Enabled bearer , priority 0 [ 572.435081][T24687] syzkaller0: entered promiscuous mode [ 572.440617][T24687] syzkaller0: entered allmulticast mode [ 572.452945][T24684] tipc: Enabled bearer , priority 0 [ 572.473070][T24690] syzkaller0: entered promiscuous mode [ 572.484081][T24690] syzkaller0: entered allmulticast mode [ 572.511547][T24687] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 572.575238][T24684] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 572.603770][T24691] tipc: Resetting bearer [ 572.618035][T24684] tipc: Resetting bearer [ 572.646299][T24682] tipc: Resetting bearer [ 572.687136][T24682] tipc: Disabling bearer [ 572.717737][T24686] tipc: Resetting bearer [ 572.794104][T24686] tipc: Disabling bearer [ 572.897542][T24719] digital: digital_start_poll: Unknown protocol [ 572.980803][T24722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7299'. [ 573.023428][T24722] [ 573.025788][T24722] ====================================================== [ 573.032823][T24722] WARNING: possible circular locking dependency detected [ 573.039854][T24722] 6.16.0-syzkaller-12063-g37816488247d #0 Not tainted [ 573.046615][T24722] ------------------------------------------------------ [ 573.053633][T24722] syz.4.7299/24722 is trying to acquire lock: [ 573.059699][T24722] ffffffff8f689f58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 573.069034][T24722] [ 573.069034][T24722] but task is already holding lock: [ 573.076455][T24722] ffff888144befa70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 573.085882][T24722] [ 573.085882][T24722] which lock already depends on the new lock. [ 573.085882][T24722] [ 573.093416][T24733] tipc: Enabling of bearer rejected, already enabled [ 573.096284][T24722] [ 573.096284][T24722] the existing dependency chain (in reverse order) is: [ 573.112545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.113484][T24722] [ 573.113484][T24722] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 573.129582][T24722] lock_acquire+0x120/0x360 [ 573.134611][T24722] _raw_spin_lock_bh+0x36/0x50 [ 573.139886][T24722] nr_rt_device_down+0x12a/0x720 [ 573.145418][T24722] nr_device_event+0x137/0x150 [ 573.150695][T24722] notifier_call_chain+0x1b6/0x3e0 [ 573.156367][T24722] __dev_notify_flags+0x18d/0x2e0 [ 573.161907][T24722] netif_change_flags+0xe8/0x1a0 [ 573.167379][T24722] dev_change_flags+0x130/0x260 [ 573.172743][T24722] dev_ioctl+0x7b4/0x1150 [ 573.177582][T24722] sock_do_ioctl+0x22c/0x300 [ 573.182692][T24722] sock_ioctl+0x576/0x790 [ 573.187566][T24722] __se_sys_ioctl+0xfc/0x170 [ 573.192665][T24722] do_syscall_64+0xfa/0x3b0 [ 573.197683][T24722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.204079][T24722] [ 573.204079][T24722] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 573.211895][T24722] lock_acquire+0x120/0x360 [ 573.216917][T24722] _raw_spin_lock_bh+0x36/0x50 [ 573.222205][T24722] nr_rt_device_down+0xa9/0x720 [ 573.227562][T24722] nr_device_event+0x137/0x150 [ 573.233104][T24722] notifier_call_chain+0x1b6/0x3e0 [ 573.238734][T24722] __dev_notify_flags+0x18d/0x2e0 [ 573.244271][T24722] netif_change_flags+0xe8/0x1a0 [ 573.249719][T24722] dev_change_flags+0x130/0x260 [ 573.255077][T24722] dev_ioctl+0x7b4/0x1150 [ 573.259915][T24722] sock_do_ioctl+0x22c/0x300 [ 573.265006][T24722] sock_ioctl+0x576/0x790 [ 573.269844][T24722] __se_sys_ioctl+0xfc/0x170 [ 573.274939][T24722] do_syscall_64+0xfa/0x3b0 [ 573.279975][T24722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.286376][T24722] [ 573.286376][T24722] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 573.294273][T24722] validate_chain+0xb9b/0x2140 [ 573.299548][T24722] __lock_acquire+0xab9/0xd20 [ 573.304738][T24722] lock_acquire+0x120/0x360 [ 573.309841][T24722] _raw_spin_lock_bh+0x36/0x50 [ 573.315221][T24722] nr_remove_neigh+0x25/0xe0 [ 573.320316][T24722] nr_add_node+0x1d9f/0x2570 [ 573.325414][T24722] nr_rt_ioctl+0xc12/0xd50 [ 573.330592][T24722] sock_do_ioctl+0xd9/0x300 [ 573.335602][T24722] sock_ioctl+0x576/0x790 [ 573.340442][T24722] __se_sys_ioctl+0xfc/0x170 [ 573.345557][T24722] do_syscall_64+0xfa/0x3b0 [ 573.350568][T24722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.356965][T24722] [ 573.356965][T24722] other info that might help us debug this: [ 573.356965][T24722] [ 573.367271][T24722] Chain exists of: [ 573.367271][T24722] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 573.367271][T24722] [ 573.381087][T24722] Possible unsafe locking scenario: [ 573.381087][T24722] [ 573.388530][T24722] CPU0 CPU1 [ 573.393875][T24722] ---- ---- [ 573.399243][T24722] lock(&nr_node->node_lock); [ 573.403992][T24722] lock(nr_node_list_lock); [ 573.411083][T24722] lock(&nr_node->node_lock); [ 573.418447][T24722] lock(nr_neigh_list_lock); [ 573.423129][T24722] [ 573.423129][T24722] *** DEADLOCK *** [ 573.423129][T24722] [ 573.431343][T24722] 1 lock held by syz.4.7299/24722: [ 573.436616][T24722] #0: ffff888144befa70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 573.446369][T24722] [ 573.446369][T24722] stack backtrace: [ 573.452252][T24722] CPU: 0 UID: 0 PID: 24722 Comm: syz.4.7299 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 573.452271][T24722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.452286][T24722] Call Trace: [ 573.452293][T24722] [ 573.452301][T24722] dump_stack_lvl+0x189/0x250 [ 573.452325][T24722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.452342][T24722] ? __pfx__printk+0x10/0x10 [ 573.452362][T24722] ? stack_trace_save+0x9c/0xe0 [ 573.452384][T24722] print_circular_bug+0x2ee/0x310 [ 573.452402][T24722] check_noncircular+0x134/0x160 [ 573.452422][T24722] validate_chain+0xb9b/0x2140 [ 573.452447][T24722] __lock_acquire+0xab9/0xd20 [ 573.452473][T24722] ? nr_remove_neigh+0x25/0xe0 [ 573.452494][T24722] lock_acquire+0x120/0x360 [ 573.452518][T24722] ? nr_remove_neigh+0x25/0xe0 [ 573.452543][T24722] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 573.452567][T24722] ? nr_remove_neigh+0x25/0xe0 [ 573.452587][T24722] _raw_spin_lock_bh+0x36/0x50 [ 573.452607][T24722] ? nr_remove_neigh+0x25/0xe0 [ 573.452628][T24722] nr_remove_neigh+0x25/0xe0 [ 573.452650][T24722] nr_add_node+0x1d9f/0x2570 [ 573.452672][T24722] ? __asan_memcpy+0x40/0x70 [ 573.452691][T24722] ? nr_call_to_digi+0x126/0x1b0 [ 573.452710][T24722] nr_rt_ioctl+0xc12/0xd50 [ 573.452734][T24722] ? kasan_quarantine_put+0xdd/0x220 [ 573.452756][T24722] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 573.452776][T24722] ? apparmor_capable+0x137/0x1b0 [ 573.452795][T24722] ? capable+0x89/0xe0 [ 573.452809][T24722] ? nr_ioctl+0x1b1/0x3b0 [ 573.452829][T24722] sock_do_ioctl+0xd9/0x300 [ 573.452846][T24722] ? __pfx_sock_do_ioctl+0x10/0x10 [ 573.452861][T24722] ? __lock_acquire+0xab9/0xd20 [ 573.452887][T24722] sock_ioctl+0x576/0x790 [ 573.452902][T24722] ? __pfx_sock_ioctl+0x10/0x10 [ 573.452916][T24722] ? __fget_files+0x2a/0x420 [ 573.452937][T24722] ? __fget_files+0x3a0/0x420 [ 573.452957][T24722] ? __fget_files+0x2a/0x420 [ 573.452977][T24722] ? bpf_lsm_file_ioctl+0x9/0x20 [ 573.452996][T24722] ? __pfx_sock_ioctl+0x10/0x10 [ 573.453010][T24722] __se_sys_ioctl+0xfc/0x170 [ 573.453028][T24722] do_syscall_64+0xfa/0x3b0 [ 573.453047][T24722] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.453064][T24722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.453080][T24722] ? clear_bhb_loop+0x60/0xb0 [ 573.453096][T24722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.453117][T24722] RIP: 0033:0x7ff88018ebe9 [ 573.453133][T24722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.453148][T24722] RSP: 002b:00007ff881039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.453164][T24722] RAX: ffffffffffffffda RBX: 00007ff8803b5fa0 RCX: 00007ff88018ebe9 [ 573.453176][T24722] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000006 [ 573.453186][T24722] RBP: 00007ff880211e19 R08: 0000000000000000 R09: 0000000000000000 [ 573.453195][T24722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.453204][T24722] R13: 00007ff8803b6038 R14: 00007ff8803b5fa0 R15: 00007ffefafe2b38 [ 573.453221][T24722] [ 573.764136][T24725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7297'. [ 573.778499][T24736] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 573.787352][T24736] tipc: Resetting bearer [ 573.813488][T24731] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7301'. [ 574.152521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.212724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.212694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.382821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.302586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.422589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.382634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.472724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.542572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog