last executing test programs: 3.079896354s ago: executing program 4 (id=4114): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r2, 0x301, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044405}, 0x8044) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x72, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000300)={0x1d, r8}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES16=r9], 0x48}}, 0x0) sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvfrom$rose(r6, &(0x7f0000000200)=""/164, 0xa4, 0x101, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000079993c3a17485a4d93dd3f879c9349b1a57c46449c8f6182b825491aaf05c816f31fbe8b222ac369dcac514d3994d6ed3db20cd009754a3c35fefd83ec8612e4c19d7dc1ec1cfabca96f94312f0292c42b13ba76b78a5b6205df733bb0a3fe33bd5e2ee7f4fb6813f819a90b06a52896f2c7334b9e", @ANYRES16=r13, @ANYBLOB="00042abd7000fedbdf251300000005000300060000000c0009000203aaaaaaaaaaaa06000800a1aa0000"], 0x30}, 0x1, 0x0, 0x0, 0x2000c005}, 0x20040811) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff85) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='5\t\x00\x00', @ANYRES16=r5, @ANYBLOB="010229bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 2.801607062s ago: executing program 0 (id=4117): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000007840)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}, 0x1c, 0x0, 0x2000, &(0x7f0000000400)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}], 0x30}}], 0x1, 0x20004090) 2.699719897s ago: executing program 0 (id=4118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) 2.542027511s ago: executing program 0 (id=4119): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x2000000}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r1, 0x0) 2.458548114s ago: executing program 3 (id=4120): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1287, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xfffffffffffffce6, 0x4, {0x300}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x100000000000000, 0x0, 0x40000}, 0x8000) 2.449502605s ago: executing program 4 (id=4122): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="bc023535354bc901c8916331ecff364c3e048f0df038a2382754f3294880fbdba6abbf07189d5d4f7fbe4fe684d80511062c3f218d04b90178f001b41bbfe2688da704f56f521404cc810f161489221c2f1d9bb911e2f1323cd1e2289c9a4473a5bb172b85dbe2f58463ddcfa934310924f54e24a520f75343f79251ac9605b41aeb740f66d64e90820f168015ba3be078f5cdd61650915a334f3b699108b697712b6b4891c169f94d6b4cdaec03babe73266769be03f76d56066376753ef08b5a71a042bdccf5", 0xc7}, {&(0x7f00000008c0)="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", 0x1000}], 0x2}}, {{&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000400)="458784cafe67e830abca1c5d116f0154cfa891cb3abeaafc7a4867e55cd346fef18a23fc9344c6336e9a55e3fe229f8f938e252f57677acd83e656070aa3058812f9851a4c94124e120b9a86089425d9279eef5937884ecf3709badee92274aca456b4629b10b7541e6ba4953e150e5e8b3233569d0799f3d02c08ffabfae203a61584c8884bbfcc8da0f1c2e2165a496d2277022d72f40103c0162450001b6c79d1b7770ff843b64bbed76676e28f2ec1a4c7ea72a847a657070fb4e7af416a75394ba768baa75c43dc8e9f558a", 0xce}, {&(0x7f0000000240)="aafdb0da250a4ddbf4753ddef866717137f5644a6a64da69fcc4b748ca98dca10db5ee9da7d520aa34", 0x29}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f0000000500)="c50e43477e16823ba5256b981156862eabfaa5e1aef930c93db96bb9eefa87cf42fba70d4693c39fe90696314f363aa7fd746a588fda2b6c2bf3454c0203176c027ac6d5da7e743a504d6e5c141f7b66670cd2d28639a6788785b2328d622e435a6ce1419711b7af2b8e", 0x6a}], 0x4}}, {{&(0x7f00000005c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000600)="34d6b05a7c1b6dea0b2ddfd1974ed2e4ec26be6d6781f81e8d8421d6dd2d3a440c4d5bf9bd4393", 0x27}, {&(0x7f0000000640)="9e35b6dc5d780ed33d9436d7c6d33d16950736a44177a5aa610f3fab5d6c32cf657335993801803ffa4f6ef327930ac9b93c98579dbcf7de10ba985e0f546e8d38470e804f8734745a13b94d15e03c3ae3f144ac85bd1b13e4c1f1782bd08071b0833d8f78351373d99307ac7e434204f9a48071c9a8fe5b64fb1b4d5c379b5a87622ef6c420184c4f71391638e8821b67b19b4ae472193d42f3d530f756e22e3fb859c128759be03e45644210627db7a2dc9507e84f13dfcd985228cfdbeed1ac1324141ca0d0a28473a3c900393d58e8db62cafce379b0374053f75a19", 0xde}, {&(0x7f0000000740)="e8f23e93cc609a3c54d62a92591a865e9c926f31c4d832a47d41e838578b0382c211e7271896f50bb0", 0x29}, {&(0x7f0000000780)="31481944b19a86610a916807bc3ad1a04c9790da862513dc47bb8a9a93770aa02a8d1823bd3d40ec7d93b6892c8925ca04eb36aec5f444417c5c636137aeb3f4a81907a6c642f34c4d68818e9d6678844e6aa6b34aa0d585e4a712715823fe582ed938415712a0f0972a84cf99bea072a6242c0eea5b3d0f47a3612e4d6e57379fefcda814bb4f761df20166602eb43c7f6d376c4121e45247ffaf29f727647f5fc1a73d8300d8d8aab14006aade7598979129b148be4300191850993851402257aa30cd54206aa7e03fbaa81ba5f2003ae03bcd5234f2a4284fa5a47c8d55fb71867917efbdccbd08", 0xe9}], 0x4, &(0x7f0000001900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @empty}}}], 0x38}}], 0x3, 0x4008850) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r1, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.336698426s ago: executing program 3 (id=4123): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141604089f034d2f87e5440c05ab845013f2325f1a39018603038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6", 0xd}], 0x1, 0x0, 0x0, 0x4044005}}], 0x1, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffdd) sendmsg$key(r0, 0x0, 0x8800) tee(r0, r0, 0x8001, 0x9) 2.195498329s ago: executing program 4 (id=4125): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r0, &(0x7f0000000240)=[{0xfffffffffffffffc}, {&(0x7f0000000080)="9cacd4ae5259d780c7c148c56e6476393e8e3889420f98e6fbcd5c4848e9b55feb3dc9b4fe2e53ba284f766f0d3f930c77a646c3a4701b02f9c6d43b70f368232185d128af7b1f49989e2fd223dc1ec5f9df0dc1056e2b89bbed844bcf4f9daca12195f31bc9a4fc78b89732c9468a0393c57b70fc6ff3c75f65616c604a9e0c6edf8133efea666561624f2a37d3fa8b8ec9c37c011b9cd2cc1c4c5658", 0x9d}, {&(0x7f0000000000)="83287727edab61861e2393161a9d6b", 0xf}, {&(0x7f0000000140)="a6c29fde570db2a47ae10d0aad98ed974972c25cd11eda19684016c73ffc", 0x1e}, {&(0x7f0000000180)="636df60561a0fd4d5d2a33e925955583602706a59367adeab2a9c1146bb722df86a8a42030da999fa7fd7663b15f2e3638fdee7362d45ba2e627cd30947b9a805ea80851f864d883a351ea449b7a39d4a460aba45210b647a5c2471377d4bbb875fb17f0ef135710f5bd36a58b5c4314e899e4d4510aa696658adc55f404ccd3e18c528e8b2c9d8fd23d67f4f7c64c9f68347daf071adfc9f33485082d9c428786e3661a9fd30493f893eb13bfc1d78959", 0xb1}], 0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="19fd9bed22ac2a90d79729758c8eec869f68cc1cb5ef9a2b0f9efd6cf7828e49625b6a74403aa1a11329ff614cfb541aee3bb1de75901f0d44a30d7b651c6cb50594c012cf6cf0d736b1d8071d01c8093f87bd95554dd0832726e46f997c2d55c36a9f5562b9f882c8cd13d63719c6f50fe9f8b568afa7e1c8c4dc2da3e90caa9a72772d3f7058c2c0ee41599cd19d0ef13242b7456d49c487c3aede74eec7e347e07d7e8c0e7578cc5b2c11", 0xac}, {&(0x7f00000002c0)="3009e8e4c2c988ca4cd4d6736eacbb5dc9dc23db", 0x14}], 0x2, 0x0, 0x0, 0x4000411}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d000f80b6aa883c187282c63edaa1b302338fad461472d9973f4b900698029295938e3a20c23a798bb88410e2247554e77adbc729a361e05fb3477db89e064fa08f0bc302dedd15b1829ca0af"], 0x64}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x80000001}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x800, 0x2}, {0x0, 0x4, 0x8000000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x1, 0x32}, 0x2, @in=@empty, 0x3500, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$SIOCSIFMTU(r5, 0x89b1, &(0x7f0000000040)={'vlan1\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "a03386ffd6e177cd", "772811dceae5f46b65f785b5362143ee", "3827f88a", "2ec93924c0019428"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000380)={'wg0\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000001840), 0x4) write(r0, &(0x7f0000000040)="98faaf4805dc7b4806681b2334c15a4d6ffa777cb1abb147dd89f4ba848008", 0x1f) 2.159773537s ago: executing program 0 (id=4126): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd200010"], 0xffe) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x4001c, 0xffffffffffffffff, 0x100000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r8, 0x5133c4bf67cd92a7}, 0x38) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000180001002cbd7000000000000a000000ff02ff000000000008000400", @ANYRES32=r2, @ANYBLOB="14000500ff03"], 0x38}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xb}}], 0x18}}], 0x1, 0x4000084) 2.158780991s ago: executing program 1 (id=4127): r0 = socket$rxrpc(0x21, 0x2, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='y', 0x1}], 0x1) 2.092777241s ago: executing program 3 (id=4128): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x29, 0x0, &(0x7f00000001c0)=0x46) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eca20ae4000044000380080001000200"], 0x58}}, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0) 2.017329192s ago: executing program 1 (id=4129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x4d, &(0x7f0000000140)=[{&(0x7f0000000300)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="e0", 0x1}], 0x1, &(0x7f0000000a80)=[{0x10, 0x1}], 0x10}}], 0x1, 0x4004804) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xd, 0x30, 0x2, 0x4}, &(0x7f00000000c0)=0x18) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000001ac0)={0x290, 0x1, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_EXP={0x28, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, @NFQA_CT={0x114, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x9d]}, @CTA_ID={0x8}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x454}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffd}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x200}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb6c}, @NFQA_CT={0x138, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x7c0}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xb}]}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}, @CTA_TUPLE_ORIG={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x32, 0x6]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x840}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @md5sig={0x13, 0x12, "2a9c444be69caceb3fbd4ef8047b79a3"}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000020000fc2be2000a28000000000a0101000000005e1affd5020000000900010073797a0240000000032c000000030a01030000e6ff00000000020000000900010073797a3008003528f30d1e5eb30000000009000300"], 0x7c}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a320000000014000580080002400000000208000140e1"], 0xa0}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000ac0)={0x0, 0x0, "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", "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"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) unshare(0x20000400) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffeeb) syz_emit_ethernet(0x42, &(0x7f00000005c0)=ANY=[@ANYBLOB="d00912398fd8bbbbbbbbbbbb8100400086dd60000000000800000000000000ff1d1aa81d1fde172a04a31b405c6e0000000000ffff00"/66], 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xfffffffd, 0xfffffffd}}, 0x44) 1.967929348s ago: executing program 4 (id=4130): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x266) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca7193"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (fail_nth: 6) 1.571258478s ago: executing program 4 (id=4131): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x29, 0x0, &(0x7f00000001c0)=0x46) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000eca20ae4000044000380080001000200"], 0x58}}, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0) 1.501011819s ago: executing program 1 (id=4133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="920d", 0x2}], 0x1}}], 0x1, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008020}, 0x40010) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4) recvfrom$unix(r2, 0x0, 0x0, 0x10102, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x5}}, 0x4c02, 0x200, 0x8, 0x2, 0x9}, &(0x7f0000000100)=0x98) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) splice(r8, &(0x7f0000000340)=0x8000000000000000, 0xffffffffffffffff, &(0x7f0000000380)=0xfffffffffffff001, 0x93, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.399898921s ago: executing program 2 (id=4134): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x2}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) write(r4, &(0x7f0000000040)="05000000010000", 0x7) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4, 0x12}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="5d119872", 0x4}], 0x1, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8044) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.371769315s ago: executing program 0 (id=4135): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d00000000000000000000000080000024000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x1, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000150800c2cb1f9844330000000000000000000c0000000800ae12658020c938f5df101f4385c0cd5d868981ad180d40b7583a580e34b67996aceae6c45650c0cbf740bd79c71633431a4d18504bc0142a8fc1f469b9641e9f4402cef6290b74354010ea1995bcbb32aa43522f769c6f7ed3d63752a46429d5219e6dd829daed2b590daad63a794c1b3ce124060fe95db29ccb32146c787f291ff313b08ab454dc90bda9f39ce9bb44cd02259ae106aab1a437b859cd840d65766984564171ba61c73eec123c7f264947999d107d2e9f93fa4ab2e992a1d19896458fb02cba9bf5011fc7c3190f57b19ec80255"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x2f, 0x19, 0xe8, 0x8, 0x25, @mcast1, @loopback, 0x40, 0x700, 0x6, 0x3}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r5, &(0x7f0000008340)=[{{0x0, 0xfffffffffffffe4d, 0x0}, 0x2}], 0x1, 0x2100, 0x0) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 1.165070771s ago: executing program 2 (id=4136): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000380)) epoll_create(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e0080", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 953.795457ms ago: executing program 2 (id=4137): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000380)) epoll_create(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e0080", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 904.548068ms ago: executing program 1 (id=4138): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6", 0xd}], 0x1, 0x0, 0x0, 0x4044005}}], 0x1, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffdd) sendmsg$key(r0, 0x0, 0x8800) tee(r0, r0, 0x8001, 0x9) 806.907035ms ago: executing program 2 (id=4139): r0 = socket$rxrpc(0x21, 0x2, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='y', 0x1}], 0x1) 761.830729ms ago: executing program 3 (id=4140): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb45", 0x28, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x2, 0x0, 0x0, '\x00', @empty, @private1}}}}}}, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x810) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x2102) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@delqdisc={0x60, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0xfff2, 0xd}, {0xb, 0x9}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c000}, 0x90) 733.679203ms ago: executing program 1 (id=4141): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 671.188844ms ago: executing program 3 (id=4142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) (fail_nth: 6) 670.437174ms ago: executing program 2 (id=4143): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DONE(r0, 0xa4, 0xc9, 0x0, 0x0) 35.889609ms ago: executing program 3 (id=4144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x1}, @void, @eth={@random="8c5d673ef776", @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x36) 35.52612ms ago: executing program 2 (id=4145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYRESHEX=r1, @ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000100)="67acf7c8ff188befcc404b648473e4982733570ae921fb86d188c7", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f0000000100), 0x0) mmap(&(0x7f000027f000/0x4000)=nil, 0x4000, 0x200000e, 0x10, 0xffffffffffffffff, 0x15826000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0xfffffffa, 0x3b, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7, 0x7800, 0xd, 0x7fffffff}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback, r5}, 0x14) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000005c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 8.808316ms ago: executing program 1 (id=4146): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x2}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) write(r4, &(0x7f0000000040)="05000000010000", 0x7) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4, 0x12}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="5d119872", 0x4}], 0x1, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8044) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.567099ms ago: executing program 4 (id=4147): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000380)) epoll_create(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e0080000000", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 0s ago: executing program 0 (id=4148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000000)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): tdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 409.491731][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 409.527290][ T59] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 409.845975][T16799] __nla_validate_parse: 6 callbacks suppressed [ 409.846007][T16799] netlink: 844 bytes leftover after parsing attributes in process `syz.4.3683'. [ 409.868901][T16800] FAULT_INJECTION: forcing a failure. [ 409.868901][T16800] name failslab, interval 1, probability 0, space 0, times 0 [ 409.886560][T16800] CPU: 0 UID: 0 PID: 16800 Comm: syz.3.3687 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 409.886595][T16800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.886609][T16800] Call Trace: [ 409.886618][T16800] [ 409.886628][T16800] dump_stack_lvl+0x189/0x250 [ 409.886657][T16800] ? __pfx____ratelimit+0x10/0x10 [ 409.886690][T16800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.886713][T16800] ? __pfx__printk+0x10/0x10 [ 409.886740][T16800] ? __mutex_trylock_common+0x153/0x260 [ 409.886767][T16800] ? __pfx___mutex_trylock_common+0x10/0x10 [ 409.886796][T16800] should_fail_ex+0x414/0x560 [ 409.886837][T16800] should_failslab+0xa8/0x100 [ 409.886862][T16800] __kmalloc_cache_noprof+0x70/0x3d0 [ 409.886894][T16800] ? __hw_addr_add_ex+0x1f4/0x770 [ 409.886924][T16800] __hw_addr_add_ex+0x1f4/0x770 [ 409.886957][T16800] dev_addr_init+0x14f/0x230 [ 409.886992][T16800] ? __pfx_dev_addr_init+0x10/0x10 [ 409.887033][T16800] alloc_netdev_mqs+0x2ae/0x1170 [ 409.887059][T16800] ? __pfx_macvlan_setup+0x10/0x10 [ 409.887097][T16800] rtnl_create_link+0x31f/0xd10 [ 409.887132][T16800] rtnl_newlink_create+0x25c/0xb00 [ 409.887159][T16800] ? __pfx_aa_get_newest_label+0x10/0x10 [ 409.887189][T16800] ? __pfx_aa_get_newest_label+0x10/0x10 [ 409.887223][T16800] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 409.887250][T16800] ? __pfx___mutex_lock+0x10/0x10 [ 409.887295][T16800] ? ns_capable+0x8a/0xf0 [ 409.887332][T16800] rtnl_newlink+0x16d6/0x1c70 [ 409.887385][T16800] ? __pfx_rtnl_newlink+0x10/0x10 [ 409.887427][T16800] ? is_bpf_text_address+0x26/0x2b0 [ 409.887471][T16800] ? __lock_acquire+0xab9/0xd20 [ 409.887516][T16800] ? __lock_acquire+0xab9/0xd20 [ 409.887571][T16800] ? is_bpf_text_address+0x26/0x2b0 [ 409.887626][T16800] ? __lock_acquire+0xab9/0xd20 [ 409.887687][T16800] ? __pfx_rtnl_newlink+0x10/0x10 [ 409.887720][T16800] rtnetlink_rcv_msg+0x7cc/0xb70 [ 409.887753][T16800] ? __lock_acquire+0xab9/0xd20 [ 409.887785][T16800] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 409.887816][T16800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.887870][T16800] netlink_rcv_skb+0x205/0x470 [ 409.887900][T16800] ? __lock_acquire+0xab9/0xd20 [ 409.887931][T16800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.887966][T16800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.888022][T16800] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.888064][T16800] netlink_unicast+0x82c/0x9e0 [ 409.888105][T16800] ? __pfx_netlink_unicast+0x10/0x10 [ 409.888137][T16800] ? netlink_sendmsg+0x642/0xb30 [ 409.888167][T16800] ? skb_put+0x11b/0x210 [ 409.888192][T16800] netlink_sendmsg+0x805/0xb30 [ 409.888238][T16800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.888275][T16800] ? aa_sock_msg_perm+0x94/0x160 [ 409.888306][T16800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.888331][T16800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.888366][T16800] __sock_sendmsg+0x219/0x270 [ 409.888400][T16800] ____sys_sendmsg+0x505/0x830 [ 409.888429][T16800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.888462][T16800] ? import_iovec+0x74/0xa0 [ 409.888496][T16800] ___sys_sendmsg+0x21f/0x2a0 [ 409.888522][T16800] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.888589][T16800] ? __fget_files+0x2a/0x420 [ 409.888609][T16800] ? __fget_files+0x3a0/0x420 [ 409.888643][T16800] __x64_sys_sendmsg+0x19b/0x260 [ 409.888669][T16800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.888708][T16800] ? rcu_is_watching+0x15/0xb0 [ 409.888742][T16800] ? trace_sys_enter+0x25/0x100 [ 409.888779][T16800] do_syscall_64+0xfa/0x3b0 [ 409.888810][T16800] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.888839][T16800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.888861][T16800] ? clear_bhb_loop+0x60/0xb0 [ 409.888888][T16800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.888909][T16800] RIP: 0033:0x7f6e2798eb69 [ 409.888929][T16800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.888948][T16800] RSP: 002b:00007f6e2872a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.888973][T16800] RAX: ffffffffffffffda RBX: 00007f6e27bb5fa0 RCX: 00007f6e2798eb69 [ 409.888996][T16800] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 409.889009][T16800] RBP: 00007f6e2872a090 R08: 0000000000000000 R09: 0000000000000000 [ 409.889021][T16800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.889034][T16800] R13: 0000000000000000 R14: 00007f6e27bb5fa0 R15: 00007fff5d520708 [ 409.889068][T16800] [ 410.474949][T16804] netpci0: tun_chr_ioctl cmd 1074025681 [ 410.659134][T16823] FAULT_INJECTION: forcing a failure. [ 410.659134][T16823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.697369][T16823] CPU: 1 UID: 0 PID: 16823 Comm: syz.3.3694 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 410.697402][T16823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.697416][T16823] Call Trace: [ 410.697424][T16823] [ 410.697433][T16823] dump_stack_lvl+0x189/0x250 [ 410.697462][T16823] ? __pfx____ratelimit+0x10/0x10 [ 410.697495][T16823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.697518][T16823] ? __pfx__printk+0x10/0x10 [ 410.697546][T16823] ? __might_fault+0xb0/0x130 [ 410.697590][T16823] should_fail_ex+0x414/0x560 [ 410.697636][T16823] _copy_from_iter+0x1db/0x16f0 [ 410.697669][T16823] ? rcu_is_watching+0x15/0xb0 [ 410.697704][T16823] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 410.697739][T16823] ? __pfx__copy_from_iter+0x10/0x10 [ 410.697768][T16823] ? __build_skb_around+0x257/0x3e0 [ 410.697807][T16823] ? netlink_sendmsg+0x642/0xb30 [ 410.697837][T16823] ? skb_put+0x11b/0x210 [ 410.697862][T16823] netlink_sendmsg+0x6b2/0xb30 [ 410.697921][T16823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.697959][T16823] ? aa_sock_msg_perm+0x94/0x160 [ 410.697991][T16823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.698016][T16823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.698050][T16823] __sock_sendmsg+0x219/0x270 [ 410.698083][T16823] ____sys_sendmsg+0x505/0x830 [ 410.698111][T16823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.698144][T16823] ? import_iovec+0x74/0xa0 [ 410.698178][T16823] ___sys_sendmsg+0x21f/0x2a0 [ 410.698203][T16823] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.698265][T16823] ? __fget_files+0x2a/0x420 [ 410.698296][T16823] ? __fget_files+0x3a0/0x420 [ 410.698329][T16823] __x64_sys_sendmsg+0x19b/0x260 [ 410.698356][T16823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.698390][T16823] ? __pfx_ksys_write+0x10/0x10 [ 410.698419][T16823] ? rcu_is_watching+0x15/0xb0 [ 410.698459][T16823] ? do_syscall_64+0xbe/0x3b0 [ 410.698497][T16823] do_syscall_64+0xfa/0x3b0 [ 410.698530][T16823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.698551][T16823] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.698573][T16823] ? clear_bhb_loop+0x60/0xb0 [ 410.698600][T16823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.698621][T16823] RIP: 0033:0x7f6e2798eb69 [ 410.698640][T16823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.698660][T16823] RSP: 002b:00007f6e2872a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.698684][T16823] RAX: ffffffffffffffda RBX: 00007f6e27bb5fa0 RCX: 00007f6e2798eb69 [ 410.698700][T16823] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 410.698714][T16823] RBP: 00007f6e2872a090 R08: 0000000000000000 R09: 0000000000000000 [ 410.698727][T16823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.698740][T16823] R13: 0000000000000000 R14: 00007f6e27bb5fa0 R15: 00007fff5d520708 [ 410.698775][T16823] [ 411.036485][T16831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3698'. [ 411.203330][T16835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3699'. [ 411.327695][T16835] nbd: socks must be embedded in a SOCK_ITEM attr [ 411.571431][T16855] FAULT_INJECTION: forcing a failure. [ 411.571431][T16855] name failslab, interval 1, probability 0, space 0, times 0 [ 411.584235][T16855] CPU: 0 UID: 0 PID: 16855 Comm: syz.3.3707 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 411.584267][T16855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.584280][T16855] Call Trace: [ 411.584289][T16855] [ 411.584299][T16855] dump_stack_lvl+0x189/0x250 [ 411.584327][T16855] ? __pfx____ratelimit+0x10/0x10 [ 411.584359][T16855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.584381][T16855] ? __pfx__printk+0x10/0x10 [ 411.584411][T16855] ? __pfx___might_resched+0x10/0x10 [ 411.584444][T16855] ? fs_reclaim_acquire+0x7d/0x100 [ 411.584474][T16855] should_fail_ex+0x414/0x560 [ 411.584514][T16855] should_failslab+0xa8/0x100 [ 411.584538][T16855] __kmalloc_noprof+0xcb/0x4f0 [ 411.584569][T16855] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 411.584604][T16855] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 411.584639][T16855] genl_family_rcv_msg_doit+0xb8/0x300 [ 411.584673][T16855] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 411.584702][T16855] ? rcu_is_watching+0x15/0xb0 [ 411.584740][T16855] ? apparmor_capable+0x137/0x1b0 [ 411.584764][T16855] ? bpf_lsm_capable+0x9/0x20 [ 411.584795][T16855] ? security_capable+0x7e/0x2e0 [ 411.584838][T16855] genl_rcv_msg+0x60e/0x790 [ 411.584871][T16855] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.584894][T16855] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 411.584917][T16855] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 411.584938][T16855] ? __pfx_nl80211_post_doit+0x10/0x10 [ 411.584979][T16855] netlink_rcv_skb+0x205/0x470 [ 411.585009][T16855] ? __lock_acquire+0xab9/0xd20 [ 411.585040][T16855] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.585067][T16855] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.585122][T16855] ? down_read+0x1ad/0x2e0 [ 411.585146][T16855] genl_rcv+0x28/0x40 [ 411.585168][T16855] netlink_unicast+0x82c/0x9e0 [ 411.585208][T16855] ? __pfx_netlink_unicast+0x10/0x10 [ 411.585240][T16855] ? netlink_sendmsg+0x642/0xb30 [ 411.585276][T16855] ? skb_put+0x11b/0x210 [ 411.585302][T16855] netlink_sendmsg+0x805/0xb30 [ 411.585346][T16855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.585384][T16855] ? aa_sock_msg_perm+0x94/0x160 [ 411.585414][T16855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.585439][T16855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.585473][T16855] __sock_sendmsg+0x219/0x270 [ 411.585507][T16855] ____sys_sendmsg+0x505/0x830 [ 411.585537][T16855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.585571][T16855] ? import_iovec+0x74/0xa0 [ 411.585605][T16855] ___sys_sendmsg+0x21f/0x2a0 [ 411.585630][T16855] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.585693][T16855] ? __fget_files+0x2a/0x420 [ 411.585712][T16855] ? __fget_files+0x3a0/0x420 [ 411.585744][T16855] __x64_sys_sendmsg+0x19b/0x260 [ 411.585770][T16855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.585805][T16855] ? __pfx_ksys_write+0x10/0x10 [ 411.585842][T16855] ? rcu_is_watching+0x15/0xb0 [ 411.585882][T16855] ? do_syscall_64+0xbe/0x3b0 [ 411.585919][T16855] do_syscall_64+0xfa/0x3b0 [ 411.585949][T16855] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.585979][T16855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.586002][T16855] ? clear_bhb_loop+0x60/0xb0 [ 411.586029][T16855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.586050][T16855] RIP: 0033:0x7f6e2798eb69 [ 411.586070][T16855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.586090][T16855] RSP: 002b:00007f6e2872a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.586115][T16855] RAX: ffffffffffffffda RBX: 00007f6e27bb5fa0 RCX: 00007f6e2798eb69 [ 411.586132][T16855] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 411.586145][T16855] RBP: 00007f6e2872a090 R08: 0000000000000000 R09: 0000000000000000 [ 411.586159][T16855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.586172][T16855] R13: 0000000000000000 R14: 00007f6e27bb5fa0 R15: 00007fff5d520708 [ 411.586207][T16855] [ 412.222176][T16861] netpci0: tun_chr_ioctl cmd 1074025681 [ 412.377398][T16876] netpci0: tun_chr_ioctl cmd 1074025681 [ 412.598340][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3721'. [ 412.773386][T16901] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3724'. [ 412.865257][T16903] FAULT_INJECTION: forcing a failure. [ 412.865257][T16903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.880479][T16903] CPU: 1 UID: 0 PID: 16903 Comm: syz.3.3725 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 412.880511][T16903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.880523][T16903] Call Trace: [ 412.880531][T16903] [ 412.880541][T16903] dump_stack_lvl+0x189/0x250 [ 412.880569][T16903] ? __pfx____ratelimit+0x10/0x10 [ 412.880600][T16903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.880622][T16903] ? __pfx__printk+0x10/0x10 [ 412.880650][T16903] ? __might_fault+0xb0/0x130 [ 412.880694][T16903] should_fail_ex+0x414/0x560 [ 412.880734][T16903] _copy_from_iter+0x1db/0x16f0 [ 412.880766][T16903] ? rcu_is_watching+0x15/0xb0 [ 412.880809][T16903] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 412.880844][T16903] ? __pfx__copy_from_iter+0x10/0x10 [ 412.880872][T16903] ? __build_skb_around+0x257/0x3e0 [ 412.880911][T16903] ? netlink_sendmsg+0x642/0xb30 [ 412.880942][T16903] ? skb_put+0x11b/0x210 [ 412.880966][T16903] netlink_sendmsg+0x6b2/0xb30 [ 412.881009][T16903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.881046][T16903] ? aa_sock_msg_perm+0x94/0x160 [ 412.881076][T16903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.881100][T16903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.881133][T16903] __sock_sendmsg+0x219/0x270 [ 412.881165][T16903] ____sys_sendmsg+0x505/0x830 [ 412.881194][T16903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.881227][T16903] ? import_iovec+0x74/0xa0 [ 412.881261][T16903] ___sys_sendmsg+0x21f/0x2a0 [ 412.881287][T16903] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.881351][T16903] ? __fget_files+0x2a/0x420 [ 412.881371][T16903] ? __fget_files+0x3a0/0x420 [ 412.881403][T16903] __x64_sys_sendmsg+0x19b/0x260 [ 412.881430][T16903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.881464][T16903] ? __pfx_ksys_write+0x10/0x10 [ 412.881492][T16903] ? rcu_is_watching+0x15/0xb0 [ 412.881531][T16903] ? do_syscall_64+0xbe/0x3b0 [ 412.881564][T16903] do_syscall_64+0xfa/0x3b0 [ 412.881590][T16903] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.881620][T16903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.881642][T16903] ? clear_bhb_loop+0x60/0xb0 [ 412.881669][T16903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.881692][T16903] RIP: 0033:0x7f6e2798eb69 [ 412.881713][T16903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.881733][T16903] RSP: 002b:00007f6e2872a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.881758][T16903] RAX: ffffffffffffffda RBX: 00007f6e27bb5fa0 RCX: 00007f6e2798eb69 [ 412.881775][T16903] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 412.881798][T16903] RBP: 00007f6e2872a090 R08: 0000000000000000 R09: 0000000000000000 [ 412.881812][T16903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.881826][T16903] R13: 0000000000000000 R14: 00007f6e27bb5fa0 R15: 00007fff5d520708 [ 412.881861][T16903] [ 413.520276][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3728'. [ 413.674608][T16925] netpci0: tun_chr_ioctl cmd 1074025681 [ 413.868778][T16934] netpci0: tun_chr_ioctl cmd 1074025681 [ 413.927285][T16929] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3736'. [ 414.097130][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'. [ 414.114796][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'. [ 414.576272][T16971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3749'. [ 414.639353][T16973] FAULT_INJECTION: forcing a failure. [ 414.639353][T16973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.652712][T16973] CPU: 1 UID: 0 PID: 16973 Comm: syz.1.3750 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 414.652745][T16973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.652760][T16973] Call Trace: [ 414.652770][T16973] [ 414.652779][T16973] dump_stack_lvl+0x189/0x250 [ 414.652808][T16973] ? __pfx____ratelimit+0x10/0x10 [ 414.652840][T16973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.652862][T16973] ? __pfx__printk+0x10/0x10 [ 414.652889][T16973] ? __might_fault+0xb0/0x130 [ 414.652934][T16973] should_fail_ex+0x414/0x560 [ 414.652976][T16973] _copy_from_user+0x2d/0xb0 [ 414.653008][T16973] ___sys_sendmsg+0x158/0x2a0 [ 414.653036][T16973] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.653100][T16973] ? __fget_files+0x2a/0x420 [ 414.653122][T16973] ? __fget_files+0x3a0/0x420 [ 414.653157][T16973] __x64_sys_sendmsg+0x19b/0x260 [ 414.653185][T16973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.653310][T16973] ? __pfx_ksys_write+0x10/0x10 [ 414.653350][T16973] ? rcu_is_watching+0x15/0xb0 [ 414.653396][T16973] ? do_syscall_64+0xbe/0x3b0 [ 414.653435][T16973] do_syscall_64+0xfa/0x3b0 [ 414.653468][T16973] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.653500][T16973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.653523][T16973] ? clear_bhb_loop+0x60/0xb0 [ 414.653550][T16973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.653573][T16973] RIP: 0033:0x7fbc8e18eb69 [ 414.653595][T16973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.653623][T16973] RSP: 002b:00007fbc8f0bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.653650][T16973] RAX: ffffffffffffffda RBX: 00007fbc8e3b5fa0 RCX: 00007fbc8e18eb69 [ 414.653668][T16973] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 414.653683][T16973] RBP: 00007fbc8f0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 414.653698][T16973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.653712][T16973] R13: 0000000000000000 R14: 00007fbc8e3b5fa0 R15: 00007ffe08919ea8 [ 414.653747][T16973] [ 414.927918][T16977] FAULT_INJECTION: forcing a failure. [ 414.927918][T16977] name failslab, interval 1, probability 0, space 0, times 0 [ 414.952822][T16977] CPU: 1 UID: 0 PID: 16977 Comm: syz.3.3752 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 414.952856][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.952870][T16977] Call Trace: [ 414.952879][T16977] [ 414.952889][T16977] dump_stack_lvl+0x189/0x250 [ 414.952918][T16977] ? __pfx____ratelimit+0x10/0x10 [ 414.952949][T16977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.952973][T16977] ? __pfx__printk+0x10/0x10 [ 414.953008][T16977] ? __pfx___might_resched+0x10/0x10 [ 414.953041][T16977] ? fs_reclaim_acquire+0x7d/0x100 [ 414.953071][T16977] should_fail_ex+0x414/0x560 [ 414.953113][T16977] should_failslab+0xa8/0x100 [ 414.953136][T16977] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 414.953171][T16977] ? __alloc_skb+0x112/0x2d0 [ 414.953209][T16977] __alloc_skb+0x112/0x2d0 [ 414.953244][T16977] netlink_ack+0x146/0xa50 [ 414.953273][T16977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 414.953323][T16977] netlink_rcv_skb+0x28c/0x470 [ 414.953353][T16977] ? __lock_acquire+0xab9/0xd20 [ 414.953385][T16977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 414.953421][T16977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.953467][T16977] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.953509][T16977] netlink_unicast+0x82c/0x9e0 [ 414.953550][T16977] ? __pfx_netlink_unicast+0x10/0x10 [ 414.953582][T16977] ? netlink_sendmsg+0x642/0xb30 [ 414.953613][T16977] ? skb_put+0x11b/0x210 [ 414.953647][T16977] netlink_sendmsg+0x805/0xb30 [ 414.953691][T16977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.953729][T16977] ? aa_sock_msg_perm+0x94/0x160 [ 414.953760][T16977] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.953786][T16977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.953820][T16977] __sock_sendmsg+0x219/0x270 [ 414.953854][T16977] ____sys_sendmsg+0x52d/0x830 [ 414.953884][T16977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.953918][T16977] ? import_iovec+0x74/0xa0 [ 414.953954][T16977] ___sys_sendmsg+0x21f/0x2a0 [ 414.953981][T16977] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.954046][T16977] ? __fget_files+0x2a/0x420 [ 414.954067][T16977] ? __fget_files+0x3a0/0x420 [ 414.954101][T16977] __sys_sendmmsg+0x227/0x430 [ 414.954131][T16977] ? __pfx___sys_sendmmsg+0x10/0x10 [ 414.954152][T16977] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 414.954216][T16977] ? ksys_write+0x22a/0x250 [ 414.954251][T16977] ? __pfx_ksys_write+0x10/0x10 [ 414.954280][T16977] ? rcu_is_watching+0x15/0xb0 [ 414.954322][T16977] __x64_sys_sendmmsg+0xa0/0xc0 [ 414.954349][T16977] do_syscall_64+0xfa/0x3b0 [ 414.954381][T16977] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.954412][T16977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.954434][T16977] ? clear_bhb_loop+0x60/0xb0 [ 414.954461][T16977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.954483][T16977] RIP: 0033:0x7f6e2798eb69 [ 414.954503][T16977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.954523][T16977] RSP: 002b:00007f6e2872a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 414.954550][T16977] RAX: ffffffffffffffda RBX: 00007f6e27bb5fa0 RCX: 00007f6e2798eb69 [ 414.954567][T16977] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 414.954583][T16977] RBP: 00007f6e2872a090 R08: 0000000000000000 R09: 0000000000000000 [ 414.954597][T16977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.954611][T16977] R13: 0000000000000000 R14: 00007f6e27bb5fa0 R15: 00007fff5d520708 [ 414.954653][T16977] [ 415.427051][T16984] veth0: entered promiscuous mode [ 415.439110][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'. [ 415.457890][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'. [ 415.580768][T16990] FAULT_INJECTION: forcing a failure. [ 415.580768][T16990] name failslab, interval 1, probability 0, space 0, times 0 [ 415.621369][T16990] CPU: 0 UID: 0 PID: 16990 Comm: syz.3.3756 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 415.621406][T16990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.621422][T16990] Call Trace: [ 415.621432][T16990] [ 415.621443][T16990] dump_stack_lvl+0x189/0x250 [ 415.621472][T16990] ? __pfx____ratelimit+0x10/0x10 [ 415.621505][T16990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.621529][T16990] ? __pfx__printk+0x10/0x10 [ 415.621565][T16990] ? __pfx___might_resched+0x10/0x10 [ 415.621605][T16990] should_fail_ex+0x414/0x560 [ 415.621657][T16990] should_failslab+0xa8/0x100 [ 415.621682][T16990] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 415.621718][T16990] ? __alloc_skb+0x112/0x2d0 [ 415.621758][T16990] __alloc_skb+0x112/0x2d0 [ 415.621797][T16990] inet_netconf_notify_devconf+0x173/0x240 [ 415.621828][T16990] mrtsock_destruct+0x19e/0x240 [ 415.621866][T16990] ? __pfx_mrtsock_destruct+0x10/0x10 [ 415.621901][T16990] ip_ra_control+0x48f/0x530 [ 415.621936][T16990] ip_mroute_setsockopt+0x90c/0xf60 [ 415.621981][T16990] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 415.622029][T16990] ? vfs_write+0x8d8/0xa90 [ 415.622068][T16990] do_ip_setsockopt+0xf11/0x2d00 [ 415.622104][T16990] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 415.622138][T16990] ? aa_sk_perm+0x81e/0x950 [ 415.622171][T16990] ? __pfx_aa_sk_perm+0x10/0x10 [ 415.622201][T16990] ? __fget_files+0x2a/0x420 [ 415.622228][T16990] ip_setsockopt+0x66/0x110 [ 415.622256][T16990] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 415.622290][T16990] do_sock_setsockopt+0x17c/0x1b0 [ 415.622319][T16990] __x64_sys_setsockopt+0x13f/0x1b0 [ 415.622348][T16990] do_syscall_64+0xfa/0x3b0 [ 415.622381][T16990] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.622412][T16990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.622434][T16990] ? clear_bhb_loop+0x60/0xb0 [ 415.622463][T16990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.622485][T16990] RIP: 0033:0x7f6e2798eb69 [ 415.622505][T16990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.622525][T16990] RSP: 002b:00007f6e2872a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 415.622550][T16990] RAX: ffffffffffffffda RBX: 00007f6e27bb5fa0 RCX: 00007f6e2798eb69 [ 415.622567][T16990] RDX: 00000000000000c9 RSI: 0000000000000000 RDI: 0000000000000003 [ 415.622581][T16990] RBP: 00007f6e2872a090 R08: 0000000000000000 R09: 0000000000000000 [ 415.622595][T16990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.622609][T16990] R13: 0000000000000000 R14: 00007f6e27bb5fa0 R15: 00007fff5d520708 [ 415.622653][T16990] [ 415.908329][T16978] veth0: left promiscuous mode [ 416.108341][T16992] wg1 speed is unknown, defaulting to 1000 [ 416.203726][T17003] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3762'. [ 416.396285][T17013] netpci0: tun_chr_ioctl cmd 1074025681 [ 416.704322][T17023] FAULT_INJECTION: forcing a failure. [ 416.704322][T17023] name failslab, interval 1, probability 0, space 0, times 0 [ 416.719222][T17023] CPU: 1 UID: 0 PID: 17023 Comm: syz.2.3766 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 416.719256][T17023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.719272][T17023] Call Trace: [ 416.719281][T17023] [ 416.719292][T17023] dump_stack_lvl+0x189/0x250 [ 416.719333][T17023] ? __pfx____ratelimit+0x10/0x10 [ 416.719368][T17023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.719389][T17023] ? __pfx__printk+0x10/0x10 [ 416.719417][T17023] ? __pfx___might_resched+0x10/0x10 [ 416.719449][T17023] should_fail_ex+0x414/0x560 [ 416.719483][T17023] should_failslab+0xa8/0x100 [ 416.719502][T17023] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 416.719531][T17023] ? __alloc_skb+0x112/0x2d0 [ 416.719565][T17023] __alloc_skb+0x112/0x2d0 [ 416.719597][T17023] netlink_sendmsg+0x5c6/0xb30 [ 416.719633][T17023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.719663][T17023] ? aa_sock_msg_perm+0x94/0x160 [ 416.719690][T17023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.719711][T17023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.719743][T17023] __sock_sendmsg+0x219/0x270 [ 416.719776][T17023] ____sys_sendmsg+0x505/0x830 [ 416.719805][T17023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.719839][T17023] ? import_iovec+0x74/0xa0 [ 416.719875][T17023] ___sys_sendmsg+0x21f/0x2a0 [ 416.719900][T17023] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.719963][T17023] ? __fget_files+0x2a/0x420 [ 416.719983][T17023] ? __fget_files+0x3a0/0x420 [ 416.720016][T17023] __x64_sys_sendmsg+0x19b/0x260 [ 416.720042][T17023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.720076][T17023] ? __pfx_ksys_write+0x10/0x10 [ 416.720106][T17023] ? rcu_is_watching+0x15/0xb0 [ 416.720145][T17023] ? do_syscall_64+0xbe/0x3b0 [ 416.720183][T17023] do_syscall_64+0xfa/0x3b0 [ 416.720216][T17023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.720237][T17023] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 416.720260][T17023] ? clear_bhb_loop+0x60/0xb0 [ 416.720286][T17023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.720313][T17023] RIP: 0033:0x7f8f1db8eb69 [ 416.720333][T17023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.720353][T17023] RSP: 002b:00007f8f1e9af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.720378][T17023] RAX: ffffffffffffffda RBX: 00007f8f1ddb5fa0 RCX: 00007f8f1db8eb69 [ 416.720394][T17023] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000004 [ 416.720409][T17023] RBP: 00007f8f1e9af090 R08: 0000000000000000 R09: 0000000000000000 [ 416.720423][T17023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.720436][T17023] R13: 0000000000000000 R14: 00007f8f1ddb5fa0 R15: 00007ffd74606dc8 [ 416.720470][T17023] [ 417.326746][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'. [ 417.380113][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'. [ 417.523331][T17044] netlink: 'syz.0.3775': attribute type 4 has an invalid length. [ 417.545626][T17044] netlink: 'syz.0.3775': attribute type 4 has an invalid length. [ 417.916243][T17066] tipc: Enabling of bearer rejected, already enabled [ 418.062873][T17072] FAULT_INJECTION: forcing a failure. [ 418.062873][T17072] name failslab, interval 1, probability 0, space 0, times 0 [ 418.084313][T17072] CPU: 1 UID: 0 PID: 17072 Comm: syz.3.3787 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 418.084356][T17072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.084371][T17072] Call Trace: [ 418.084381][T17072] [ 418.084391][T17072] dump_stack_lvl+0x189/0x250 [ 418.084421][T17072] ? __pfx____ratelimit+0x10/0x10 [ 418.084453][T17072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.084478][T17072] ? __pfx__printk+0x10/0x10 [ 418.084512][T17072] ? __pfx___might_resched+0x10/0x10 [ 418.084552][T17072] should_fail_ex+0x414/0x560 [ 418.084594][T17072] should_failslab+0xa8/0x100 [ 418.084617][T17072] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 418.084652][T17072] ? __alloc_skb+0x112/0x2d0 [ 418.084691][T17072] __alloc_skb+0x112/0x2d0 [ 418.084730][T17072] netlink_sendmsg+0x5c6/0xb30 [ 418.084776][T17072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.084813][T17072] ? aa_sock_msg_perm+0x94/0x160 [ 418.084845][T17072] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.084871][T17072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.084906][T17072] __sock_sendmsg+0x219/0x270 [ 418.084940][T17072] ____sys_sendmsg+0x505/0x830 [ 418.084970][T17072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.085004][T17072] ? import_iovec+0x74/0xa0 [ 418.085041][T17072] ___sys_sendmsg+0x21f/0x2a0 [ 418.085067][T17072] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.085132][T17072] ? __fget_files+0x2a/0x420 [ 418.085153][T17072] ? __fget_files+0x3a0/0x420 [ 418.085188][T17072] __x64_sys_sendmsg+0x19b/0x260 [ 418.085215][T17072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.085250][T17072] ? __pfx_ksys_write+0x10/0x10 [ 418.085279][T17072] ? rcu_is_watching+0x15/0xb0 [ 418.085319][T17072] ? do_syscall_64+0xbe/0x3b0 [ 418.085370][T17072] do_syscall_64+0xfa/0x3b0 [ 418.085402][T17072] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.085433][T17072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.085456][T17072] ? clear_bhb_loop+0x60/0xb0 [ 418.085483][T17072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.085505][T17072] RIP: 0033:0x7f6e2798eb69 [ 418.085526][T17072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.085545][T17072] RSP: 002b:00007f6e2872a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.085571][T17072] RAX: ffffffffffffffda RBX: 00007f6e27bb5fa0 RCX: 00007f6e2798eb69 [ 418.085587][T17072] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 418.085602][T17072] RBP: 00007f6e2872a090 R08: 0000000000000000 R09: 0000000000000000 [ 418.085616][T17072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.085630][T17072] R13: 0000000000000000 R14: 00007f6e27bb5fa0 R15: 00007fff5d520708 [ 418.085664][T17072] [ 418.443212][T17078] netlink: 'syz.1.3789': attribute type 1 has an invalid length. [ 418.461040][T17078] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3789'. [ 418.874576][T17086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3793'. [ 419.019280][T17093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3797'. [ 419.214498][T17106] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.224712][T17106] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 419.235941][T17106] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 419.286591][T17114] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3801'. [ 419.327683][T17118] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3800'. [ 419.354846][T17106] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.419519][T17106] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 419.469234][T17106] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 419.557745][T17106] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.572667][T17106] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 419.583665][T17106] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 419.659663][T17106] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.675685][T17106] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 419.688518][T17106] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 419.831851][ T76] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.853320][ T76] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 419.871616][ T76] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 419.917349][ T76] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.933584][ T76] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 419.942626][ T76] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.008984][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.028085][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 420.057633][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.123164][T17126] FAULT_INJECTION: forcing a failure. [ 420.123164][T17126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.132542][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.158662][T17126] CPU: 1 UID: 0 PID: 17126 Comm: syz.0.3804 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 420.158697][T17126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.158711][T17126] Call Trace: [ 420.158720][T17126] [ 420.158731][T17126] dump_stack_lvl+0x189/0x250 [ 420.158760][T17126] ? __pfx____ratelimit+0x10/0x10 [ 420.158792][T17126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.158815][T17126] ? __pfx__printk+0x10/0x10 [ 420.158843][T17126] ? __might_fault+0xb0/0x130 [ 420.158888][T17126] should_fail_ex+0x414/0x560 [ 420.158929][T17126] _copy_from_iter+0x1db/0x16f0 [ 420.158969][T17126] ? policy_nodemask+0x27c/0x720 [ 420.159011][T17126] ? __pfx__copy_from_iter+0x10/0x10 [ 420.159045][T17126] ? set_page_refcounted+0xa0/0x1e0 [ 420.159078][T17126] ? page_copy_sane+0x4e/0x280 [ 420.159107][T17126] copy_page_from_iter+0xdd/0x170 [ 420.159138][T17126] tun_get_user+0x1d7b/0x3e20 [ 420.159170][T17126] ? tun_get_user+0x6f6/0x3e20 [ 420.159204][T17126] ? __pfx_tun_get_user+0x10/0x10 [ 420.159232][T17126] ? aa_file_perm+0x40c/0xe70 [ 420.159265][T17126] ? aa_file_perm+0x122/0xe70 [ 420.159313][T17126] ? ref_tracker_alloc+0x318/0x460 [ 420.159333][T17126] ? __lock_acquire+0xab9/0xd20 [ 420.159365][T17126] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 420.159392][T17126] ? tun_get+0x1c/0x2f0 [ 420.159421][T17126] ? tun_get+0x1c/0x2f0 [ 420.159443][T17126] ? tun_get+0x1c/0x2f0 [ 420.159471][T17126] tun_chr_write_iter+0x113/0x200 [ 420.159498][T17126] vfs_write+0x54b/0xa90 [ 420.159560][T17126] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 420.159587][T17126] ? __pfx_vfs_write+0x10/0x10 [ 420.159629][T17126] ? __fget_files+0x2a/0x420 [ 420.159662][T17126] ksys_write+0x145/0x250 [ 420.159697][T17126] ? __pfx_ksys_write+0x10/0x10 [ 420.159738][T17126] ? do_syscall_64+0xbe/0x3b0 [ 420.159775][T17126] do_syscall_64+0xfa/0x3b0 [ 420.159807][T17126] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.159837][T17126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.159859][T17126] ? clear_bhb_loop+0x60/0xb0 [ 420.159886][T17126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.159908][T17126] RIP: 0033:0x7f615f58d61f [ 420.159928][T17126] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 420.159949][T17126] RSP: 002b:00007f616040c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 420.159976][T17126] RAX: ffffffffffffffda RBX: 00007f615f7b5fa0 RCX: 00007f615f58d61f [ 420.159992][T17126] RDX: 0000000000000782 RSI: 0000200000001180 RDI: 00000000000000c8 [ 420.160008][T17126] RBP: 00007f616040c090 R08: 0000000000000000 R09: 0000000000000000 [ 420.160022][T17126] R10: 0000000000000782 R11: 0000000000000293 R12: 0000000000000001 [ 420.160036][T17126] R13: 0000000000000001 R14: 00007f615f7b5fa0 R15: 00007fff0efb09a8 [ 420.160072][T17126] [ 420.166865][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 420.456508][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.488925][T17134] netlink: 'syz.1.3803': attribute type 4 has an invalid length. [ 420.550811][T17129] 8021q: adding VLAN 0 to HW filter on device bond11 [ 420.560328][T17138] netlink: 'syz.1.3803': attribute type 4 has an invalid length. [ 420.569416][T17128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.001872][T17157] __nla_validate_parse: 2 callbacks suppressed [ 421.001894][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3814'. [ 421.053110][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 421.096644][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 421.574735][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3822'. [ 421.694025][T17194] nbd: must specify a size in bytes for the device [ 421.871940][T17201] FAULT_INJECTION: forcing a failure. [ 421.871940][T17201] name failslab, interval 1, probability 0, space 0, times 0 [ 421.906286][T17201] CPU: 1 UID: 0 PID: 17201 Comm: syz.0.3826 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 421.906320][T17201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.906335][T17201] Call Trace: [ 421.906344][T17201] [ 421.906354][T17201] dump_stack_lvl+0x189/0x250 [ 421.906390][T17201] ? __pfx____ratelimit+0x10/0x10 [ 421.906424][T17201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.906447][T17201] ? __pfx__printk+0x10/0x10 [ 421.906478][T17201] ? __pfx___might_resched+0x10/0x10 [ 421.906512][T17201] ? fs_reclaim_acquire+0x7d/0x100 [ 421.906539][T17201] should_fail_ex+0x414/0x560 [ 421.906579][T17201] should_failslab+0xa8/0x100 [ 421.906603][T17201] __kmalloc_noprof+0xcb/0x4f0 [ 421.906636][T17201] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 421.906670][T17201] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 421.906707][T17201] genl_family_rcv_msg_doit+0xb8/0x300 [ 421.906741][T17201] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 421.906772][T17201] ? rcu_is_watching+0x15/0xb0 [ 421.906810][T17201] ? apparmor_capable+0x137/0x1b0 [ 421.906835][T17201] ? bpf_lsm_capable+0x9/0x20 [ 421.906873][T17201] ? security_capable+0x7e/0x2e0 [ 421.906910][T17201] genl_rcv_msg+0x60e/0x790 [ 421.906944][T17201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.906968][T17201] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 421.906997][T17201] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 421.907029][T17201] ? __pfx_nl802154_post_doit+0x10/0x10 [ 421.907075][T17201] netlink_rcv_skb+0x205/0x470 [ 421.907105][T17201] ? __lock_acquire+0xab9/0xd20 [ 421.907138][T17201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.907166][T17201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.907221][T17201] ? down_read+0x1ad/0x2e0 [ 421.907246][T17201] genl_rcv+0x28/0x40 [ 421.907269][T17201] netlink_unicast+0x82c/0x9e0 [ 421.907310][T17201] ? __pfx_netlink_unicast+0x10/0x10 [ 421.907342][T17201] ? netlink_sendmsg+0x642/0xb30 [ 421.907372][T17201] ? skb_put+0x11b/0x210 [ 421.907397][T17201] netlink_sendmsg+0x805/0xb30 [ 421.907443][T17201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.907480][T17201] ? aa_sock_msg_perm+0x94/0x160 [ 421.907512][T17201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.907537][T17201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.907572][T17201] __sock_sendmsg+0x219/0x270 [ 421.907605][T17201] ____sys_sendmsg+0x505/0x830 [ 421.907636][T17201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.907671][T17201] ? import_iovec+0x74/0xa0 [ 421.907707][T17201] ___sys_sendmsg+0x21f/0x2a0 [ 421.907733][T17201] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.907800][T17201] ? __fget_files+0x2a/0x420 [ 421.907822][T17201] ? __fget_files+0x3a0/0x420 [ 421.907862][T17201] __x64_sys_sendmsg+0x19b/0x260 [ 421.907890][T17201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.907926][T17201] ? __pfx_ksys_write+0x10/0x10 [ 421.907956][T17201] ? rcu_is_watching+0x15/0xb0 [ 421.907996][T17201] ? do_syscall_64+0xbe/0x3b0 [ 421.908033][T17201] do_syscall_64+0xfa/0x3b0 [ 421.908062][T17201] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.908093][T17201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.908115][T17201] ? clear_bhb_loop+0x60/0xb0 [ 421.908142][T17201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.908163][T17201] RIP: 0033:0x7f615f58eb69 [ 421.908183][T17201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.908202][T17201] RSP: 002b:00007f616040c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.908228][T17201] RAX: ffffffffffffffda RBX: 00007f615f7b5fa0 RCX: 00007f615f58eb69 [ 421.908244][T17201] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 421.908258][T17201] RBP: 00007f616040c090 R08: 0000000000000000 R09: 0000000000000000 [ 421.908272][T17201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.908286][T17201] R13: 0000000000000000 R14: 00007f615f7b5fa0 R15: 00007fff0efb09a8 [ 421.908319][T17201] [ 422.426536][T17204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.426975][T17212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3832'. [ 422.448541][T17212] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3832'. [ 422.453474][T17202] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.469986][T17202] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.495030][T17202] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 422.505116][T17202] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 422.525063][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3831'. [ 422.534507][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3831'. [ 422.598844][T17215] bond0: (slave veth15): Enslaving as an active interface with an up link [ 422.619632][T17217] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3827'. [ 422.629480][T17202] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.639572][T17202] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.657662][T17202] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 422.667436][T17202] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 422.732662][T17203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.748164][T17221] netpci0: tun_chr_ioctl cmd 1074025681 [ 422.783241][T17202] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.800424][T17202] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.834662][T17202] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 422.877335][T17202] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 422.958707][T17202] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.974911][T17202] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.985581][T17202] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 422.995790][T17202] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 423.078947][ T76] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.089344][ T76] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.097981][ T76] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 423.109596][ T76] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 423.132571][ T76] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.141933][ T76] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.150719][ T76] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 423.158883][ T76] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 423.181115][ T76] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.196862][ T76] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.205401][ T76] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 423.218575][ T76] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 423.347075][ T7976] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.371517][ T7976] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.416924][ T7976] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 423.448327][ T7976] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 423.612768][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3839'. [ 423.653850][T17263] delete_channel: no stack [ 423.808860][T17269] netlink: 'syz.1.3844': attribute type 12 has an invalid length. [ 424.093004][T17280] 8021q: adding VLAN 0 to HW filter on device bond10 [ 424.109275][T17283] netlink: 'syz.4.3846': attribute type 4 has an invalid length. [ 424.182370][T17293] netlink: 'syz.2.3850': attribute type 10 has an invalid length. [ 424.196175][T17284] bond10: (slave veth13): Enslaving as an active interface with an up link [ 424.208656][T17288] netlink: 'syz.0.3847': attribute type 4 has an invalid length. [ 424.217266][T17277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.826736][T17275] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 424.878349][T17281] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 425.580461][T17347] bridge0: port 1(macvlan2) entered blocking state [ 425.587285][T17347] bridge0: port 1(macvlan2) entered disabled state [ 425.594423][T17347] macvlan2: entered allmulticast mode [ 425.600326][T17347] bridge0: entered allmulticast mode [ 425.621356][T17347] macvlan2: left allmulticast mode [ 425.629018][T17347] bridge0: left allmulticast mode [ 425.639589][T17348] netlink: 'syz.0.3868': attribute type 1 has an invalid length. [ 425.705669][T17348] 8021q: adding VLAN 0 to HW filter on device bond8 [ 425.717428][T17353] netlink: 'syz.4.3871': attribute type 4 has an invalid length. [ 425.762222][T17356] bond8: (slave veth15): Enslaving as an active interface with an up link [ 425.823401][T17345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.001663][T17367] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.017795][T17367] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 426.036443][T17367] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 426.057682][T17367] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 426.127556][T17374] __nla_validate_parse: 9 callbacks suppressed [ 426.127578][T17374] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3875'. [ 426.152248][T17367] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.162911][T17367] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 426.180278][T17367] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 426.189348][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3876'. [ 426.207274][T17373] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3873'. [ 426.238152][T17367] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 426.385037][T17367] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.400288][T17367] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 426.417710][T17367] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 426.455960][T17367] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 426.542199][T17367] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.561984][T17367] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 426.581102][T17367] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 426.614487][T17367] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 426.678411][T17392] bridge0: port 1(macvlan2) entered blocking state [ 426.686143][T17392] bridge0: port 1(macvlan2) entered disabled state [ 426.700296][T17392] macvlan2: entered allmulticast mode [ 426.705868][T17392] bridge0: entered allmulticast mode [ 426.722774][T17392] macvlan2: left allmulticast mode [ 426.728076][T17392] bridge0: left allmulticast mode [ 426.770592][T17390] netpci0: tun_chr_ioctl cmd 1074025681 [ 427.002856][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.016918][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 427.049868][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 427.062992][ T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 427.077154][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3881'. [ 427.101742][T17401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3881'. [ 427.196679][T17401] geneve3: entered promiscuous mode [ 427.206195][T17401] geneve3: entered allmulticast mode [ 427.218196][ T37] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.227751][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 427.250683][ T37] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 427.271404][ T37] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 427.312337][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.334597][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.343609][T17409] netlink: 'syz.0.3882': attribute type 11 has an invalid length. [ 427.353295][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3883'. [ 427.358917][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.362448][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3883'. [ 427.385057][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.397323][ T37] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.444529][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 427.464585][ T37] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 427.488280][ T37] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 427.552298][ T37] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.591041][T17418] netlink: 'syz.2.3887': attribute type 1 has an invalid length. [ 427.594094][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 427.630110][ T37] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 427.638363][ T37] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 427.725148][T17418] 8021q: adding VLAN 0 to HW filter on device bond7 [ 427.794161][T17421] bond7: (slave veth17): Enslaving as an active interface with an up link [ 427.848813][T17415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.871622][T17436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3889'. [ 428.088068][T17443] FAULT_INJECTION: forcing a failure. [ 428.088068][T17443] name failslab, interval 1, probability 0, space 0, times 0 [ 428.159995][T17443] CPU: 0 UID: 0 PID: 17443 Comm: syz.0.3894 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 428.160031][T17443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.160045][T17443] Call Trace: [ 428.160054][T17443] [ 428.160064][T17443] dump_stack_lvl+0x189/0x250 [ 428.160094][T17443] ? __pfx____ratelimit+0x10/0x10 [ 428.160125][T17443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.160149][T17443] ? __pfx__printk+0x10/0x10 [ 428.160179][T17443] ? __pfx___might_resched+0x10/0x10 [ 428.160212][T17443] ? fs_reclaim_acquire+0x7d/0x100 [ 428.160242][T17443] should_fail_ex+0x414/0x560 [ 428.160283][T17443] should_failslab+0xa8/0x100 [ 428.160306][T17443] __kmalloc_noprof+0xcb/0x4f0 [ 428.160337][T17443] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 428.160371][T17443] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 428.160406][T17443] genl_family_rcv_msg_doit+0xb8/0x300 [ 428.160461][T17443] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 428.160491][T17443] ? rcu_is_watching+0x15/0xb0 [ 428.160529][T17443] ? apparmor_capable+0x137/0x1b0 [ 428.160553][T17443] ? bpf_lsm_capable+0x9/0x20 [ 428.160583][T17443] ? security_capable+0x7e/0x2e0 [ 428.160621][T17443] genl_rcv_msg+0x60e/0x790 [ 428.160656][T17443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.160680][T17443] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 428.160703][T17443] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 428.160724][T17443] ? __pfx_nl80211_post_doit+0x10/0x10 [ 428.160751][T17443] ? __asan_memcpy+0x40/0x70 [ 428.160779][T17443] ? __pfx_ref_tracker_free+0x10/0x10 [ 428.160812][T17443] netlink_rcv_skb+0x205/0x470 [ 428.160842][T17443] ? __lock_acquire+0xab9/0xd20 [ 428.160874][T17443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.160902][T17443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.160957][T17443] ? down_read+0x1ad/0x2e0 [ 428.160981][T17443] genl_rcv+0x28/0x40 [ 428.161007][T17443] netlink_unicast+0x82c/0x9e0 [ 428.161047][T17443] ? __pfx_netlink_unicast+0x10/0x10 [ 428.161080][T17443] ? netlink_sendmsg+0x642/0xb30 [ 428.161110][T17443] ? skb_put+0x11b/0x210 [ 428.161136][T17443] netlink_sendmsg+0x805/0xb30 [ 428.161180][T17443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.161218][T17443] ? aa_sock_msg_perm+0x94/0x160 [ 428.161250][T17443] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.161274][T17443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.161309][T17443] __sock_sendmsg+0x219/0x270 [ 428.161343][T17443] ____sys_sendmsg+0x505/0x830 [ 428.161373][T17443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.161409][T17443] ? import_iovec+0x74/0xa0 [ 428.161451][T17443] ___sys_sendmsg+0x21f/0x2a0 [ 428.161478][T17443] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.161545][T17443] ? __fget_files+0x2a/0x420 [ 428.161566][T17443] ? __fget_files+0x3a0/0x420 [ 428.161600][T17443] __x64_sys_sendmsg+0x19b/0x260 [ 428.161628][T17443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.161664][T17443] ? __pfx_ksys_write+0x10/0x10 [ 428.161694][T17443] ? rcu_is_watching+0x15/0xb0 [ 428.161734][T17443] ? do_syscall_64+0xbe/0x3b0 [ 428.161773][T17443] do_syscall_64+0xfa/0x3b0 [ 428.161804][T17443] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.161836][T17443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.161859][T17443] ? clear_bhb_loop+0x60/0xb0 [ 428.161885][T17443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.161907][T17443] RIP: 0033:0x7f615f58eb69 [ 428.161927][T17443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.161947][T17443] RSP: 002b:00007f616040c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.161973][T17443] RAX: ffffffffffffffda RBX: 00007f615f7b5fa0 RCX: 00007f615f58eb69 [ 428.161990][T17443] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 428.162004][T17443] RBP: 00007f616040c090 R08: 0000000000000000 R09: 0000000000000000 [ 428.162018][T17443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.162030][T17443] R13: 0000000000000000 R14: 00007f615f7b5fa0 R15: 00007fff0efb09a8 [ 428.162066][T17443] [ 428.683883][T17455] netlink: 844 bytes leftover after parsing attributes in process `syz.4.3899'. [ 428.853143][T17462] FAULT_INJECTION: forcing a failure. [ 428.853143][T17462] name failslab, interval 1, probability 0, space 0, times 0 [ 428.867223][T17462] CPU: 0 UID: 0 PID: 17462 Comm: syz.4.3903 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 428.867257][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.867271][T17462] Call Trace: [ 428.867281][T17462] [ 428.867291][T17462] dump_stack_lvl+0x189/0x250 [ 428.867321][T17462] ? __pfx____ratelimit+0x10/0x10 [ 428.867354][T17462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.867377][T17462] ? __pfx__printk+0x10/0x10 [ 428.867421][T17462] ? __pfx___might_resched+0x10/0x10 [ 428.867453][T17462] ? fs_reclaim_acquire+0x7d/0x100 [ 428.867483][T17462] should_fail_ex+0x414/0x560 [ 428.867524][T17462] should_failslab+0xa8/0x100 [ 428.867547][T17462] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 428.867581][T17462] ? __alloc_skb+0x112/0x2d0 [ 428.867620][T17462] __alloc_skb+0x112/0x2d0 [ 428.867658][T17462] netlink_ack+0x146/0xa50 [ 428.867688][T17462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.867733][T17462] netlink_rcv_skb+0x28c/0x470 [ 428.867763][T17462] ? __lock_acquire+0xab9/0xd20 [ 428.867795][T17462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.867822][T17462] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.867874][T17462] ? down_read+0x1ad/0x2e0 [ 428.867899][T17462] genl_rcv+0x28/0x40 [ 428.867922][T17462] netlink_unicast+0x82c/0x9e0 [ 428.867962][T17462] ? __pfx_netlink_unicast+0x10/0x10 [ 428.867994][T17462] ? netlink_sendmsg+0x642/0xb30 [ 428.868024][T17462] ? skb_put+0x11b/0x210 [ 428.868049][T17462] netlink_sendmsg+0x805/0xb30 [ 428.868094][T17462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.868132][T17462] ? aa_sock_msg_perm+0x94/0x160 [ 428.868164][T17462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.868189][T17462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.868224][T17462] __sock_sendmsg+0x219/0x270 [ 428.868258][T17462] ____sys_sendmsg+0x505/0x830 [ 428.868289][T17462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.868323][T17462] ? import_iovec+0x74/0xa0 [ 428.868358][T17462] ___sys_sendmsg+0x21f/0x2a0 [ 428.868384][T17462] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.868459][T17462] ? __fget_files+0x2a/0x420 [ 428.868481][T17462] ? __fget_files+0x3a0/0x420 [ 428.868515][T17462] __x64_sys_sendmsg+0x19b/0x260 [ 428.868543][T17462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.868578][T17462] ? __pfx_ksys_write+0x10/0x10 [ 428.868608][T17462] ? rcu_is_watching+0x15/0xb0 [ 428.868648][T17462] ? do_syscall_64+0xbe/0x3b0 [ 428.868687][T17462] do_syscall_64+0xfa/0x3b0 [ 428.868718][T17462] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.868749][T17462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.868772][T17462] ? clear_bhb_loop+0x60/0xb0 [ 428.868799][T17462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.868820][T17462] RIP: 0033:0x7fccc878eb69 [ 428.868840][T17462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.868861][T17462] RSP: 002b:00007fccc9616038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.868887][T17462] RAX: ffffffffffffffda RBX: 00007fccc89b5fa0 RCX: 00007fccc878eb69 [ 428.868903][T17462] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 428.868917][T17462] RBP: 00007fccc9616090 R08: 0000000000000000 R09: 0000000000000000 [ 428.868931][T17462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.868944][T17462] R13: 0000000000000000 R14: 00007fccc89b5fa0 R15: 00007fff134aad28 [ 428.868979][T17462] [ 429.318088][T17470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3902'. [ 429.615518][T17483] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.631521][T17483] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 429.927470][T17483] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.940464][T17483] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 429.959610][T17500] netlink: 'syz.4.3914': attribute type 1 has an invalid length. [ 430.139274][T17500] 8021q: adding VLAN 0 to HW filter on device bond12 [ 430.392506][T17502] bond12: (slave veth21): Enslaving as an active interface with an up link [ 430.523412][T17499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.930301][T17483] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.948605][T17483] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 431.026168][T17483] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.051008][T17483] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 431.196061][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.217698][T17537] FAULT_INJECTION: forcing a failure. [ 431.217698][T17537] name failslab, interval 1, probability 0, space 0, times 0 [ 431.234038][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.247060][T17537] CPU: 1 UID: 0 PID: 17537 Comm: syz.1.3922 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 431.247093][T17537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.247107][T17537] Call Trace: [ 431.247116][T17537] [ 431.247126][T17537] dump_stack_lvl+0x189/0x250 [ 431.247155][T17537] ? __pfx____ratelimit+0x10/0x10 [ 431.247187][T17537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.247210][T17537] ? __pfx__printk+0x10/0x10 [ 431.247244][T17537] ? __pfx___might_resched+0x10/0x10 [ 431.247282][T17537] should_fail_ex+0x414/0x560 [ 431.247322][T17537] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 431.247354][T17537] should_failslab+0xa8/0x100 [ 431.247378][T17537] __kvmalloc_node_noprof+0x161/0x5f0 [ 431.247414][T17537] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 431.247453][T17537] bpf_test_run_xdp_live+0x18e/0x1b10 [ 431.247499][T17537] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 431.247539][T17537] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 431.247580][T17537] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 431.247609][T17537] ? 0xffffffffa02057c0 [ 431.247629][T17537] ? 0xffffffffa02057c0 [ 431.247698][T17537] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 431.247740][T17537] ? _copy_from_user+0x94/0xb0 [ 431.247772][T17537] ? bpf_test_init+0x133/0x170 [ 431.247801][T17537] ? xdp_convert_md_to_buff+0x5b/0x330 [ 431.247837][T17537] bpf_prog_test_run_xdp+0x713/0x1000 [ 431.247888][T17537] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 431.247926][T17537] ? __fget_files+0x2a/0x420 [ 431.247954][T17537] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 431.247989][T17537] bpf_prog_test_run+0x2c4/0x340 [ 431.248026][T17537] __sys_bpf+0x581/0x870 [ 431.248060][T17537] ? __pfx___sys_bpf+0x10/0x10 [ 431.248106][T17537] ? ksys_write+0x22a/0x250 [ 431.248140][T17537] ? __pfx_ksys_write+0x10/0x10 [ 431.248168][T17537] ? rcu_is_watching+0x15/0xb0 [ 431.248212][T17537] __x64_sys_bpf+0x7c/0x90 [ 431.248240][T17537] do_syscall_64+0xfa/0x3b0 [ 431.248273][T17537] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.248304][T17537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.248326][T17537] ? clear_bhb_loop+0x60/0xb0 [ 431.248352][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.248374][T17537] RIP: 0033:0x7fbc8e18eb69 [ 431.248394][T17537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.248415][T17537] RSP: 002b:00007fbc8f0bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.248441][T17537] RAX: ffffffffffffffda RBX: 00007fbc8e3b5fa0 RCX: 00007fbc8e18eb69 [ 431.248458][T17537] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 431.248481][T17537] RBP: 00007fbc8f0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 431.248495][T17537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.248509][T17537] R13: 0000000000000000 R14: 00007fbc8e3b5fa0 R15: 00007ffe08919ea8 [ 431.248544][T17537] [ 431.539248][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.541569][T17541] __nla_validate_parse: 2 callbacks suppressed [ 431.541593][T17541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3921'. [ 431.547541][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.603073][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.664624][ T59] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.716179][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.747898][ T59] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 431.843224][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3925'. [ 431.937967][T17560] FAULT_INJECTION: forcing a failure. [ 431.937967][T17560] name failslab, interval 1, probability 0, space 0, times 0 [ 431.951631][T17560] CPU: 1 UID: 0 PID: 17560 Comm: syz.0.3928 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 431.951665][T17560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.951680][T17560] Call Trace: [ 431.951688][T17560] [ 431.951699][T17560] dump_stack_lvl+0x189/0x250 [ 431.951729][T17560] ? __pfx____ratelimit+0x10/0x10 [ 431.951761][T17560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.951783][T17560] ? __pfx__printk+0x10/0x10 [ 431.951817][T17560] ? __pfx___might_resched+0x10/0x10 [ 431.951857][T17560] should_fail_ex+0x414/0x560 [ 431.951898][T17560] should_failslab+0xa8/0x100 [ 431.951923][T17560] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 431.951958][T17560] ? __alloc_skb+0x112/0x2d0 [ 431.951995][T17560] __alloc_skb+0x112/0x2d0 [ 431.952033][T17560] netlink_sendmsg+0x5c6/0xb30 [ 431.952077][T17560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.952114][T17560] ? aa_sock_msg_perm+0x94/0x160 [ 431.952147][T17560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.952180][T17560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.952220][T17560] __sock_sendmsg+0x219/0x270 [ 431.952252][T17560] ____sys_sendmsg+0x505/0x830 [ 431.952283][T17560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.952316][T17560] ? import_iovec+0x74/0xa0 [ 431.952351][T17560] ___sys_sendmsg+0x21f/0x2a0 [ 431.952377][T17560] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.952441][T17560] ? __fget_files+0x2a/0x420 [ 431.952462][T17560] ? __fget_files+0x3a0/0x420 [ 431.952496][T17560] __x64_sys_sendmsg+0x19b/0x260 [ 431.952529][T17560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.952564][T17560] ? __pfx_ksys_write+0x10/0x10 [ 431.952593][T17560] ? rcu_is_watching+0x15/0xb0 [ 431.952633][T17560] ? do_syscall_64+0xbe/0x3b0 [ 431.952670][T17560] do_syscall_64+0xfa/0x3b0 [ 431.952700][T17560] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.952731][T17560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.952754][T17560] ? clear_bhb_loop+0x60/0xb0 [ 431.952781][T17560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.952803][T17560] RIP: 0033:0x7f615f58eb69 [ 431.952823][T17560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.952843][T17560] RSP: 002b:00007f616040c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.952869][T17560] RAX: ffffffffffffffda RBX: 00007f615f7b5fa0 RCX: 00007f615f58eb69 [ 431.952887][T17560] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 431.952902][T17560] RBP: 00007f616040c090 R08: 0000000000000000 R09: 0000000000000000 [ 431.952916][T17560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.952929][T17560] R13: 0000000000000000 R14: 00007f615f7b5fa0 R15: 00007fff0efb09a8 [ 431.952961][T17560] [ 432.288771][T17559] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.298946][T17559] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 432.347675][T17563] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3929'. [ 432.394889][T17559] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.404972][T17559] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 432.483401][T17559] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.493303][T17559] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 432.595743][T17559] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.609484][T17559] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 432.773685][T17575] netlink: 'syz.2.3934': attribute type 1 has an invalid length. [ 432.935937][T17575] 8021q: adding VLAN 0 to HW filter on device bond8 [ 433.032871][T17581] bond8: (slave veth19): Enslaving as an active interface with an up link [ 433.079136][T17574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.132516][ T1169] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.149942][ T1169] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 433.176626][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3938'. [ 433.213118][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.226836][T17589] netlink: 'syz.0.3937': attribute type 10 has an invalid length. [ 433.257635][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 433.328847][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.364732][ T37] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 433.408164][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.416595][ T59] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 433.443863][T17600] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 433.475737][T17600] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 433.535813][T17602] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3940'. [ 433.577625][T17600] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 433.598862][T17600] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 433.645332][T17609] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3941'. [ 433.764240][T17600] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 433.802650][T17600] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 433.875713][T17600] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 433.886155][T17600] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 433.913653][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3945'. [ 434.023414][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 434.043147][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 434.077097][ T1169] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 434.092320][ T1169] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 434.093030][T17621] netlink: 4660 bytes leftover after parsing attributes in process `syz.2.3947'. [ 434.130460][ T1169] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 434.138984][ T1169] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 434.167346][ T1169] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 434.180633][T17622] FAULT_INJECTION: forcing a failure. [ 434.180633][T17622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.193918][T17622] CPU: 0 UID: 0 PID: 17622 Comm: syz.4.3948 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 434.193950][T17622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.193965][T17622] Call Trace: [ 434.193974][T17622] [ 434.193984][T17622] dump_stack_lvl+0x189/0x250 [ 434.194013][T17622] ? __pfx____ratelimit+0x10/0x10 [ 434.194046][T17622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.194069][T17622] ? __pfx__printk+0x10/0x10 [ 434.194096][T17622] ? __might_fault+0xb0/0x130 [ 434.194141][T17622] should_fail_ex+0x414/0x560 [ 434.194182][T17622] _copy_from_iter+0x1db/0x16f0 [ 434.194221][T17622] ? sock_alloc_send_pskb+0x875/0x990 [ 434.194256][T17622] ? __pfx__copy_from_iter+0x10/0x10 [ 434.194293][T17622] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 434.194323][T17622] skb_copy_datagram_from_iter+0xf5/0x720 [ 434.194356][T17622] ? skb_put+0x11b/0x210 [ 434.194381][T17622] tun_get_user+0x1691/0x3e20 [ 434.194431][T17622] ? __pfx_tun_get_user+0x10/0x10 [ 434.194461][T17622] ? aa_file_perm+0x40c/0xe70 [ 434.194496][T17622] ? aa_file_perm+0x122/0xe70 [ 434.194535][T17622] ? ref_tracker_alloc+0x318/0x460 [ 434.194557][T17622] ? __lock_acquire+0xab9/0xd20 [ 434.194589][T17622] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 434.194618][T17622] ? tun_get+0x1c/0x2f0 [ 434.194648][T17622] ? tun_get+0x1c/0x2f0 [ 434.194670][T17622] ? tun_get+0x1c/0x2f0 [ 434.194699][T17622] tun_chr_write_iter+0x113/0x200 [ 434.194727][T17622] vfs_write+0x54b/0xa90 [ 434.194764][T17622] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 434.194789][T17622] ? __pfx_vfs_write+0x10/0x10 [ 434.194832][T17622] ? __fget_files+0x2a/0x420 [ 434.194865][T17622] ksys_write+0x145/0x250 [ 434.194900][T17622] ? __pfx_ksys_write+0x10/0x10 [ 434.194928][T17622] ? rcu_is_watching+0x15/0xb0 [ 434.194985][T17622] ? do_syscall_64+0xbe/0x3b0 [ 434.195024][T17622] do_syscall_64+0xfa/0x3b0 [ 434.195055][T17622] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.195087][T17622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.195109][T17622] ? clear_bhb_loop+0x60/0xb0 [ 434.195136][T17622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.195158][T17622] RIP: 0033:0x7fccc878eb69 [ 434.195178][T17622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.195199][T17622] RSP: 002b:00007fccc9616038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.195231][T17622] RAX: ffffffffffffffda RBX: 00007fccc89b5fa0 RCX: 00007fccc878eb69 [ 434.195248][T17622] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 434.195263][T17622] RBP: 00007fccc9616090 R08: 0000000000000000 R09: 0000000000000000 [ 434.195278][T17622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.195291][T17622] R13: 0000000000000000 R14: 00007fccc89b5fa0 R15: 00007fff134aad28 [ 434.195325][T17622] [ 434.216280][ T1169] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 434.803042][T17629] netlink: 'syz.4.3950': attribute type 1 has an invalid length. [ 434.811386][T17629] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3950'. [ 434.907158][T17640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3951'. [ 435.231515][T17648] netlink: 'syz.3.3955': attribute type 1 has an invalid length. [ 435.327945][T17648] 8021q: adding VLAN 0 to HW filter on device bond7 [ 435.489110][T17654] bond7: (slave veth17): Enslaving as an active interface with an up link [ 435.535219][T17647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.729180][T17665] netlink: 'syz.0.3961': attribute type 4 has an invalid length. [ 435.776337][T17669] netlink: 'syz.2.3963': attribute type 10 has an invalid length. [ 435.789400][T17669] macvlan0: entered promiscuous mode [ 435.912005][T17671] netlink: 'syz.4.3964': attribute type 1 has an invalid length. [ 436.036280][T17675] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.064700][T17675] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 436.081760][T17675] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 436.169519][T17675] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.191049][T17675] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 436.223364][T17675] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 436.339202][T17675] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.350100][T17675] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 436.377147][T17675] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 436.485931][T17664] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 436.609388][T17675] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.647487][T17675] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 436.669951][T17675] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 436.717960][T17691] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 436.730377][T17691] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 436.806924][T17691] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 436.819368][T17691] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 436.823500][T17692] __nla_validate_parse: 2 callbacks suppressed [ 436.823525][T17692] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3971'. [ 436.885568][ T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.912379][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 436.939931][ T37] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 436.999410][T17691] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 437.021539][T17691] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 437.059561][ T7976] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.073937][ T7976] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 437.110255][ T7976] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 437.136675][T17691] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 437.159914][T17691] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 437.226988][ T7976] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.235964][ T7976] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 437.248433][ T7976] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 437.310179][ T7976] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.319071][ T7976] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 437.344315][ T7976] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 437.370484][T17708] netlink: 'syz.4.3978': attribute type 1 has an invalid length. [ 437.431704][T17708] 8021q: adding VLAN 0 to HW filter on device bond13 [ 437.645722][T17712] bond13: (slave veth23): Enslaving as an active interface with an up link [ 437.714616][T17705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.732045][ T1169] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 437.750964][ T1169] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 437.774143][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 437.790258][ T37] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 437.864712][ T7976] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 437.885518][ T7976] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 437.919294][ T7976] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 437.938342][ T7976] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 438.136056][T17736] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 438.148685][T17736] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.167466][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3988'. [ 438.176599][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3988'. [ 438.294030][T17736] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 438.312636][T17736] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.368950][T17736] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 438.417535][T17736] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.476606][T17736] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 438.489517][T17736] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.552903][T17753] netlink: 844 bytes leftover after parsing attributes in process `syz.2.3994'. [ 438.845806][T17765] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.859941][T17765] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 438.872662][T17765] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.924295][T17768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4001'. [ 438.933880][T17767] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4000'. [ 438.956510][T17765] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.972778][T17765] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 438.984588][T17765] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.075458][T17765] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.085914][T17765] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 439.098741][T17765] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.102456][T17766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.166726][T17765] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.181882][T17765] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 439.191868][T17765] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.297368][T17776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4004'. [ 439.768865][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4008'. [ 439.786885][T17787] veth1: entered promiscuous mode [ 439.795154][T17787] netlink: 'syz.1.4008': attribute type 1 has an invalid length. [ 439.807958][T17787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4008'. [ 439.823851][T17787] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 440.043300][T17799] netlink: 'syz.1.4014': attribute type 1 has an invalid length. [ 440.065967][T17802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4015'. [ 440.102477][T17804] netlink: 'syz.4.4016': attribute type 12 has an invalid length. [ 440.256788][T17816] netlink: 'syz.4.4019': attribute type 2 has an invalid length. [ 440.295640][T17808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.352935][T17820] FAULT_INJECTION: forcing a failure. [ 440.352935][T17820] name failslab, interval 1, probability 0, space 0, times 0 [ 440.367579][T17820] CPU: 1 UID: 0 PID: 17820 Comm: syz.1.4020 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 440.367614][T17820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.367627][T17820] Call Trace: [ 440.367637][T17820] [ 440.367647][T17820] dump_stack_lvl+0x189/0x250 [ 440.367675][T17820] ? __pfx____ratelimit+0x10/0x10 [ 440.367706][T17820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.367729][T17820] ? __pfx__printk+0x10/0x10 [ 440.367763][T17820] ? __pfx___might_resched+0x10/0x10 [ 440.367807][T17820] ? fs_reclaim_acquire+0x7d/0x100 [ 440.367836][T17820] should_fail_ex+0x414/0x560 [ 440.367877][T17820] should_failslab+0xa8/0x100 [ 440.367900][T17820] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 440.367934][T17820] ? __alloc_skb+0x112/0x2d0 [ 440.367973][T17820] __alloc_skb+0x112/0x2d0 [ 440.368011][T17820] netlink_ack+0x146/0xa50 [ 440.368041][T17820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.368064][T17820] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 440.368093][T17820] ? __pfx_nl802154_post_doit+0x10/0x10 [ 440.368139][T17820] netlink_rcv_skb+0x28c/0x470 [ 440.368169][T17820] ? __lock_acquire+0xab9/0xd20 [ 440.368200][T17820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.368226][T17820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.368281][T17820] ? down_read+0x1ad/0x2e0 [ 440.368305][T17820] genl_rcv+0x28/0x40 [ 440.368327][T17820] netlink_unicast+0x82c/0x9e0 [ 440.368366][T17820] ? __pfx_netlink_unicast+0x10/0x10 [ 440.368399][T17820] ? netlink_sendmsg+0x642/0xb30 [ 440.368429][T17820] ? skb_put+0x11b/0x210 [ 440.368454][T17820] netlink_sendmsg+0x805/0xb30 [ 440.368498][T17820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.368536][T17820] ? aa_sock_msg_perm+0x94/0x160 [ 440.368568][T17820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.368593][T17820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.368646][T17820] __sock_sendmsg+0x219/0x270 [ 440.368679][T17820] ____sys_sendmsg+0x505/0x830 [ 440.368708][T17820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.368741][T17820] ? import_iovec+0x74/0xa0 [ 440.368775][T17820] ___sys_sendmsg+0x21f/0x2a0 [ 440.368809][T17820] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.368872][T17820] ? __fget_files+0x2a/0x420 [ 440.368893][T17820] ? __fget_files+0x3a0/0x420 [ 440.368927][T17820] __x64_sys_sendmsg+0x19b/0x260 [ 440.368955][T17820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.368989][T17820] ? __pfx_ksys_write+0x10/0x10 [ 440.369019][T17820] ? rcu_is_watching+0x15/0xb0 [ 440.369060][T17820] ? do_syscall_64+0xbe/0x3b0 [ 440.369097][T17820] do_syscall_64+0xfa/0x3b0 [ 440.369129][T17820] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.369159][T17820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.369180][T17820] ? clear_bhb_loop+0x60/0xb0 [ 440.369207][T17820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.369228][T17820] RIP: 0033:0x7fbc8e18eb69 [ 440.369248][T17820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.369268][T17820] RSP: 002b:00007fbc8f0bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.369292][T17820] RAX: ffffffffffffffda RBX: 00007fbc8e3b5fa0 RCX: 00007fbc8e18eb69 [ 440.369308][T17820] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 440.369322][T17820] RBP: 00007fbc8f0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 440.369337][T17820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.369351][T17820] R13: 0000000000000000 R14: 00007fbc8e3b5fa0 R15: 00007ffe08919ea8 [ 440.369385][T17820] [ 440.823650][T17825] batadv_slave_1: entered promiscuous mode [ 441.003619][ T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.020359][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 441.054996][ T37] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.100966][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.119602][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 441.141474][ T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.204936][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 441.224798][ T37] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.249409][ T37] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.258296][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 441.267281][ T37] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.287185][ T1169] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 441.312300][ T1169] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.357966][ T7976] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.379633][ T7976] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 441.397335][ T7976] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.426384][ T7976] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 441.438072][ T7976] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.458373][T17823] batadv_slave_1: left promiscuous mode [ 441.478856][ T7976] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 441.499817][ T7976] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 441.644238][T17843] batadv_slave_0: entered promiscuous mode [ 441.741896][T17854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.832836][T17861] __nla_validate_parse: 5 callbacks suppressed [ 441.832858][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4037'. [ 441.857399][T17860] tipc: Enabled bearer , priority 0 [ 441.867237][T17860] syzkaller0: entered promiscuous mode [ 441.873299][T17860] syzkaller0: entered allmulticast mode [ 441.898325][T17860] syzkaller0: mtu greater than device maximum [ 441.910833][T17856] tipc: Resetting bearer [ 441.940536][T17866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4040'. [ 441.941791][T17856] tipc: Disabling bearer [ 442.055539][T17859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.074670][T17870] netlink: 'syz.4.4041': attribute type 12 has an invalid length. [ 442.236023][T17878] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.250702][T17878] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 442.265337][T17878] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 442.278490][T17878] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 442.357144][T17878] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.370103][T17878] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 442.390631][T17878] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 442.406083][T17878] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 442.460743][T17878] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.473625][T17878] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 442.487012][T17878] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 442.499056][T17878] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 442.556984][T17878] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.567861][T17878] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 442.582711][T17878] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 442.594928][T17878] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 442.665468][T17887] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 442.684854][T17887] bond0: (slave lo): Error: Device can not be enslaved while up [ 442.823863][ T37] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.842676][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 442.858153][ T37] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 442.869529][ T37] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 442.913723][ T1109] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.923029][ T1109] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 442.936495][ T1109] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 442.945391][ T1109] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 442.961926][T17900] netlink: 'syz.4.4051': attribute type 4 has an invalid length. [ 443.003286][ T1109] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.023550][ T1109] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 443.040527][ T1109] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 443.057154][ T1109] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 443.087177][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.097101][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 443.105965][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 443.116515][ T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 443.210845][T17910] bridge0: port 1(macvlan3) entered blocking state [ 443.218884][T17910] bridge0: port 1(macvlan3) entered disabled state [ 443.226681][T17910] macvlan3: entered allmulticast mode [ 443.232929][T17910] bridge0: entered allmulticast mode [ 443.244622][T17910] macvlan3: left allmulticast mode [ 443.254399][T17910] bridge0: left allmulticast mode [ 443.318767][T17906] wg1 speed is unknown, defaulting to 1000 [ 443.594959][T17916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.628733][T17895] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 443.884964][T17940] sctp: [Deprecated]: syz.4.4065 (pid 17940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.884964][T17940] Use struct sctp_sack_info instead [ 443.902644][T17939] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.923452][T17939] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 443.935842][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4065'. [ 443.949778][T17939] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 443.979117][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4066'. [ 444.048248][T17939] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.064828][T17939] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 444.075186][T17939] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 444.217154][T17939] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.254091][T17939] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 444.294005][T17939] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 444.386100][T17939] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.419874][T17939] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 444.432899][T17939] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 444.579283][T17962] netlink: 844 bytes leftover after parsing attributes in process `syz.1.4072'. [ 444.886052][T17970] netlink: 'syz.1.4073': attribute type 2 has an invalid length. [ 444.900756][T17970] netlink: 119 bytes leftover after parsing attributes in process `syz.1.4073'. [ 445.057479][T17978] netlink: 'syz.3.4075': attribute type 4 has an invalid length. [ 445.178382][T17980] wg1 speed is unknown, defaulting to 1000 [ 445.327806][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.412440][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.438095][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 445.458607][ T59] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.503493][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.516321][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 445.524803][ T59] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.546972][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.560412][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 445.568577][ T59] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.595518][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.604164][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 445.612710][ T59] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.830812][T17972] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 446.127759][T17996] netlink: 844 bytes leftover after parsing attributes in process `syz.3.4083'. [ 446.196937][T17998] FAULT_INJECTION: forcing a failure. [ 446.196937][T17998] name failslab, interval 1, probability 0, space 0, times 0 [ 446.269684][T17998] CPU: 1 UID: 0 PID: 17998 Comm: syz.0.4084 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 446.269723][T17998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.269737][T17998] Call Trace: [ 446.269747][T17998] [ 446.269757][T17998] dump_stack_lvl+0x189/0x250 [ 446.269788][T17998] ? __pfx____ratelimit+0x10/0x10 [ 446.269820][T17998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.269844][T17998] ? __pfx__printk+0x10/0x10 [ 446.269880][T17998] ? __pfx___might_resched+0x10/0x10 [ 446.269914][T17998] ? fs_reclaim_acquire+0x7d/0x100 [ 446.269945][T17998] should_fail_ex+0x414/0x560 [ 446.269988][T17998] should_failslab+0xa8/0x100 [ 446.270012][T17998] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 446.270046][T17998] ? __alloc_skb+0x112/0x2d0 [ 446.270086][T17998] __alloc_skb+0x112/0x2d0 [ 446.270126][T17998] netlink_ack+0x146/0xa50 [ 446.270156][T17998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.270188][T17998] ? __asan_memcpy+0x40/0x70 [ 446.270216][T17998] ? __pfx_ref_tracker_free+0x10/0x10 [ 446.270250][T17998] netlink_rcv_skb+0x28c/0x470 [ 446.270290][T17998] ? __lock_acquire+0xab9/0xd20 [ 446.270322][T17998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.270350][T17998] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.270407][T17998] ? down_read+0x1ad/0x2e0 [ 446.270440][T17998] genl_rcv+0x28/0x40 [ 446.270476][T17998] netlink_unicast+0x82c/0x9e0 [ 446.270515][T17998] ? __pfx_netlink_unicast+0x10/0x10 [ 446.270543][T17998] ? netlink_sendmsg+0x642/0xb30 [ 446.270574][T17998] ? skb_put+0x11b/0x210 [ 446.270599][T17998] netlink_sendmsg+0x805/0xb30 [ 446.270644][T17998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.270683][T17998] ? aa_sock_msg_perm+0x94/0x160 [ 446.270721][T17998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.270747][T17998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.270782][T17998] __sock_sendmsg+0x219/0x270 [ 446.270817][T17998] ____sys_sendmsg+0x505/0x830 [ 446.270849][T17998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.270884][T17998] ? import_iovec+0x74/0xa0 [ 446.270921][T17998] ___sys_sendmsg+0x21f/0x2a0 [ 446.270949][T17998] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.271015][T17998] ? __fget_files+0x2a/0x420 [ 446.271037][T17998] ? __fget_files+0x3a0/0x420 [ 446.271069][T17998] __x64_sys_sendmsg+0x19b/0x260 [ 446.271096][T17998] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.271131][T17998] ? __pfx_ksys_write+0x10/0x10 [ 446.271159][T17998] ? rcu_is_watching+0x15/0xb0 [ 446.271200][T17998] ? do_syscall_64+0xbe/0x3b0 [ 446.271237][T17998] do_syscall_64+0xfa/0x3b0 [ 446.271268][T17998] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.271298][T17998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.271320][T17998] ? clear_bhb_loop+0x60/0xb0 [ 446.271346][T17998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.271367][T17998] RIP: 0033:0x7f615f58eb69 [ 446.271388][T17998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.271408][T17998] RSP: 002b:00007f616040c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.271440][T17998] RAX: ffffffffffffffda RBX: 00007f615f7b5fa0 RCX: 00007f615f58eb69 [ 446.271457][T17998] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 446.271472][T17998] RBP: 00007f616040c090 R08: 0000000000000000 R09: 0000000000000000 [ 446.271486][T17998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.271500][T17998] R13: 0000000000000000 R14: 00007f615f7b5fa0 R15: 00007fff0efb09a8 [ 446.271536][T17998] [ 446.941266][T18012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4088'. [ 447.012910][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4087'. [ 447.128689][T18019] netlink: 'syz.0.4090': attribute type 4 has an invalid length. [ 447.266570][T18023] netlink: 'syz.1.4092': attribute type 10 has an invalid length. [ 447.288064][T18023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4092'. [ 447.307156][T18023] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 447.456200][T18028] netlink: 'syz.1.4094': attribute type 4 has an invalid length. [ 447.508978][T18033] netlink: 844 bytes leftover after parsing attributes in process `syz.3.4096'. [ 447.884016][T18018] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 447.966283][T18043] netlink: 'syz.0.4099': attribute type 1 has an invalid length. [ 448.093040][T18047] netlink: 'syz.4.4101': attribute type 1 has an invalid length. [ 448.128907][T18047] 8021q: adding VLAN 0 to HW filter on device bond14 [ 448.169679][T18047] bond14: (slave gretap1): making interface the new active one [ 448.186605][T18047] bond14: (slave gretap1): Enslaving as an active interface with an up link [ 448.337728][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4102'. [ 448.602904][T18060] FAULT_INJECTION: forcing a failure. [ 448.602904][T18060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.618925][T18060] CPU: 1 UID: 0 PID: 18060 Comm: syz.0.4104 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 448.618961][T18060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.619088][T18060] Call Trace: [ 448.619103][T18060] [ 448.619114][T18060] dump_stack_lvl+0x189/0x250 [ 448.619144][T18060] ? __pfx____ratelimit+0x10/0x10 [ 448.619177][T18060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.619209][T18060] ? __pfx__printk+0x10/0x10 [ 448.619252][T18060] should_fail_ex+0x414/0x560 [ 448.619294][T18060] _copy_to_user+0x31/0xb0 [ 448.619335][T18060] simple_read_from_buffer+0xe1/0x170 [ 448.619380][T18060] proc_fail_nth_read+0x1b3/0x220 [ 448.619412][T18060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.619442][T18060] ? rw_verify_area+0x258/0x650 [ 448.619473][T18060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.619503][T18060] vfs_read+0x1fd/0x980 [ 448.619533][T18060] ? fdget_pos+0x247/0x320 [ 448.619560][T18060] ? __pfx___mutex_lock+0x10/0x10 [ 448.619594][T18060] ? __pfx_vfs_read+0x10/0x10 [ 448.619628][T18060] ? __fget_files+0x2a/0x420 [ 448.619655][T18060] ? __fget_files+0x3a0/0x420 [ 448.619676][T18060] ? __fget_files+0x2a/0x420 [ 448.619712][T18060] ksys_read+0x145/0x250 [ 448.619746][T18060] ? __pfx_ksys_read+0x10/0x10 [ 448.619783][T18060] ? do_syscall_64+0xbe/0x3b0 [ 448.619822][T18060] do_syscall_64+0xfa/0x3b0 [ 448.619853][T18060] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.619884][T18060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.619907][T18060] ? clear_bhb_loop+0x60/0xb0 [ 448.619936][T18060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.619957][T18060] RIP: 0033:0x7f615f58d57c [ 448.619978][T18060] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 448.619998][T18060] RSP: 002b:00007f616040c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.620023][T18060] RAX: ffffffffffffffda RBX: 00007f615f7b5fa0 RCX: 00007f615f58d57c [ 448.620040][T18060] RDX: 000000000000000f RSI: 00007f616040c0a0 RDI: 0000000000000004 [ 448.620053][T18060] RBP: 00007f616040c090 R08: 0000000000000000 R09: 0000000000000000 [ 448.620068][T18060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.620082][T18060] R13: 0000000000000000 R14: 00007f615f7b5fa0 R15: 00007fff0efb09a8 [ 448.620117][T18060] [ 448.882902][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4103'. [ 448.896361][T18062] netlink: 'syz.1.4103': attribute type 2 has an invalid length. [ 448.904300][T18062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4103'. [ 448.947832][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4103'. [ 448.963447][T18062] netlink: 'syz.1.4103': attribute type 2 has an invalid length. [ 448.974804][T18062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4103'. [ 449.096571][T18070] netlink: 'syz.4.4107': attribute type 1 has an invalid length. [ 449.114203][T18073] netlink: 844 bytes leftover after parsing attributes in process `syz.1.4108'. [ 449.139352][T18070] netlink: 'syz.4.4107': attribute type 2 has an invalid length. [ 449.318935][T18090] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 449.490466][T18100] FAULT_INJECTION: forcing a failure. [ 449.490466][T18100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.530164][T18100] CPU: 0 UID: 0 PID: 18100 Comm: syz.3.4115 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 449.530201][T18100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.530217][T18100] Call Trace: [ 449.530226][T18100] [ 449.530236][T18100] dump_stack_lvl+0x189/0x250 [ 449.530266][T18100] ? __pfx____ratelimit+0x10/0x10 [ 449.530298][T18100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.530322][T18100] ? __pfx__printk+0x10/0x10 [ 449.530350][T18100] ? __might_fault+0xb0/0x130 [ 449.530397][T18100] should_fail_ex+0x414/0x560 [ 449.530440][T18100] _copy_from_iter+0x1db/0x16f0 [ 449.530474][T18100] ? rcu_is_watching+0x15/0xb0 [ 449.530512][T18100] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 449.530548][T18100] ? __pfx__copy_from_iter+0x10/0x10 [ 449.530578][T18100] ? __build_skb_around+0x257/0x3e0 [ 449.530617][T18100] ? netlink_sendmsg+0x642/0xb30 [ 449.530650][T18100] ? skb_put+0x11b/0x210 [ 449.530674][T18100] netlink_sendmsg+0x6b2/0xb30 [ 449.530718][T18100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.530756][T18100] ? aa_sock_msg_perm+0x94/0x160 [ 449.530788][T18100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.530814][T18100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.530848][T18100] __sock_sendmsg+0x219/0x270 [ 449.530882][T18100] ____sys_sendmsg+0x505/0x830 [ 449.530911][T18100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.530944][T18100] ? import_iovec+0x74/0xa0 [ 449.530987][T18100] ___sys_sendmsg+0x21f/0x2a0 [ 449.531014][T18100] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.531078][T18100] ? __fget_files+0x2a/0x420 [ 449.531103][T18100] ? __fget_files+0x3a0/0x420 [ 449.531137][T18100] __x64_sys_sendmsg+0x19b/0x260 [ 449.531164][T18100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.531198][T18100] ? __pfx_ksys_write+0x10/0x10 [ 449.531227][T18100] ? rcu_is_watching+0x15/0xb0 [ 449.531268][T18100] ? do_syscall_64+0xbe/0x3b0 [ 449.531306][T18100] do_syscall_64+0xfa/0x3b0 [ 449.531338][T18100] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.531369][T18100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.531390][T18100] ? clear_bhb_loop+0x60/0xb0 [ 449.531417][T18100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.531438][T18100] RIP: 0033:0x7f6e2798eb69 [ 449.531458][T18100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.531477][T18100] RSP: 002b:00007f6e2872a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.531502][T18100] RAX: ffffffffffffffda RBX: 00007f6e27bb5fa0 RCX: 00007f6e2798eb69 [ 449.531518][T18100] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000004 [ 449.531533][T18100] RBP: 00007f6e2872a090 R08: 0000000000000000 R09: 0000000000000000 [ 449.531547][T18100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.531560][T18100] R13: 0000000000000000 R14: 00007f6e27bb5fa0 R15: 00007fff5d520708 [ 449.531592][T18100] [ 450.211004][T18123] netlink: 'syz.1.4124': attribute type 1 has an invalid length. [ 450.320910][T18125] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.423628][T18135] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.454534][T18135] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 450.494399][T18141] FAULT_INJECTION: forcing a failure. [ 450.494399][T18141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.514745][T18141] CPU: 1 UID: 0 PID: 18141 Comm: syz.4.4130 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 450.514779][T18141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.514793][T18141] Call Trace: [ 450.514802][T18141] [ 450.514813][T18141] dump_stack_lvl+0x189/0x250 [ 450.514841][T18141] ? __pfx____ratelimit+0x10/0x10 [ 450.514872][T18141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.514900][T18141] ? __pfx__printk+0x10/0x10 [ 450.514940][T18141] should_fail_ex+0x414/0x560 [ 450.514981][T18141] _copy_to_user+0x31/0xb0 [ 450.515016][T18141] simple_read_from_buffer+0xe1/0x170 [ 450.515056][T18141] proc_fail_nth_read+0x1b3/0x220 [ 450.515109][T18141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.515139][T18141] ? rw_verify_area+0x258/0x650 [ 450.515170][T18141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.515198][T18141] vfs_read+0x1fd/0x980 [ 450.515228][T18141] ? fdget_pos+0x247/0x320 [ 450.515254][T18141] ? __pfx___mutex_lock+0x10/0x10 [ 450.515288][T18141] ? __pfx_vfs_read+0x10/0x10 [ 450.515322][T18141] ? __fget_files+0x2a/0x420 [ 450.515348][T18141] ? __fget_files+0x3a0/0x420 [ 450.515369][T18141] ? __fget_files+0x2a/0x420 [ 450.515406][T18141] ksys_read+0x145/0x250 [ 450.515437][T18141] ? __pfx_ksys_read+0x10/0x10 [ 450.515461][T18141] ? rcu_is_watching+0x15/0xb0 [ 450.515499][T18141] ? do_syscall_64+0xbe/0x3b0 [ 450.515543][T18141] do_syscall_64+0xfa/0x3b0 [ 450.515582][T18141] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.515613][T18141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.515635][T18141] ? clear_bhb_loop+0x60/0xb0 [ 450.515661][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.515687][T18141] RIP: 0033:0x7fccc878d57c [ 450.515717][T18141] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 450.515737][T18141] RSP: 002b:00007fccc9616030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.515763][T18141] RAX: ffffffffffffffda RBX: 00007fccc89b5fa0 RCX: 00007fccc878d57c [ 450.515780][T18141] RDX: 000000000000000f RSI: 00007fccc96160a0 RDI: 0000000000000007 [ 450.515794][T18141] RBP: 00007fccc9616090 R08: 0000000000000000 R09: 0000000000000000 [ 450.515808][T18141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.515821][T18141] R13: 0000000000000000 R14: 00007fccc89b5fa0 R15: 00007fff134aad28 [ 450.515855][T18141] [ 450.780570][T18141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.815754][T18135] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.828492][T18135] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 450.883576][T18147] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.919221][T18149] sctp: [Deprecated]: syz.2.4132 (pid 18149) Use of int in maxseg socket option. [ 450.919221][T18149] Use struct sctp_assoc_value instead [ 450.953286][T18135] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.964084][T18135] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.001892][T18147] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.077857][T18135] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.109889][T18135] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.145712][T18147] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.297574][ T1142] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.309162][ T1142] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 451.348129][T18147] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.386443][ T1142] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.405627][ T1142] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 451.453035][ T1169] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.481865][ T1169] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 451.525147][ T1169] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.544640][ T1169] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 451.574021][ T1169] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.650089][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.678382][ T1169] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.778605][ T1169] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.808801][T18184] FAULT_INJECTION: forcing a failure. [ 451.808801][T18184] name failslab, interval 1, probability 0, space 0, times 0 [ 451.824039][T18184] CPU: 0 UID: 0 PID: 18184 Comm: syz.3.4142 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 451.824073][T18184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.824096][T18184] Call Trace: [ 451.824106][T18184] [ 451.824115][T18184] dump_stack_lvl+0x189/0x250 [ 451.824144][T18184] ? __pfx____ratelimit+0x10/0x10 [ 451.824176][T18184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.824199][T18184] ? __pfx__printk+0x10/0x10 [ 451.824233][T18184] ? __pfx___might_resched+0x10/0x10 [ 451.824272][T18184] should_fail_ex+0x414/0x560 [ 451.824313][T18184] should_failslab+0xa8/0x100 [ 451.824336][T18184] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 451.824370][T18184] ? __alloc_skb+0x112/0x2d0 [ 451.824414][T18184] __alloc_skb+0x112/0x2d0 [ 451.824452][T18184] netlink_dump+0x1b7/0xe90 [ 451.824498][T18184] ? __pfx_netlink_dump+0x10/0x10 [ 451.824559][T18184] __netlink_dump_start+0x5cb/0x7e0 [ 451.824596][T18184] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 451.824625][T18184] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 451.824657][T18184] nf_tables_getset+0x599/0xa90 [ 451.824696][T18184] ? __pfx_nf_tables_getset+0x10/0x10 [ 451.824726][T18184] ? nfnl_pernet+0x23/0x240 [ 451.824753][T18184] ? __pfx_nf_tables_dump_sets_start+0x10/0x10 [ 451.824783][T18184] ? __pfx_nf_tables_dump_sets+0x10/0x10 [ 451.824812][T18184] ? __pfx_nf_tables_dump_sets_done+0x10/0x10 [ 451.824850][T18184] ? __nla_parse+0x40/0x60 [ 451.824875][T18184] ? __pfx_nf_tables_getset+0x10/0x10 [ 451.824900][T18184] nfnetlink_rcv_msg+0x80e/0x1130 [ 451.824931][T18184] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 451.824981][T18184] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 451.825007][T18184] ? trace_sched_exit_tp+0x38/0x120 [ 451.825063][T18184] ? preempt_schedule_irq+0xb5/0x150 [ 451.825124][T18184] netlink_rcv_skb+0x205/0x470 [ 451.825158][T18184] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 451.825189][T18184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.825234][T18184] ? bpf_lsm_capable+0x9/0x20 [ 451.825266][T18184] ? security_capable+0x7e/0x2e0 [ 451.825303][T18184] nfnetlink_rcv+0x26a/0x2520 [ 451.825338][T18184] ? __kernel_text_address+0x1c/0x40 [ 451.825368][T18184] ? __kernel_text_address+0xd/0x40 [ 451.825395][T18184] ? unwind_get_return_address+0x4d/0x90 [ 451.825418][T18184] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 451.825443][T18184] ? arch_stack_walk+0xfc/0x150 [ 451.825485][T18184] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 451.825513][T18184] ? stack_depot_save_flags+0x40/0x900 [ 451.825540][T18184] ? __lock_acquire+0xab9/0xd20 [ 451.825598][T18184] ? __lock_acquire+0xab9/0xd20 [ 451.825641][T18184] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.825680][T18184] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.825722][T18184] netlink_unicast+0x82c/0x9e0 [ 451.825761][T18184] ? __pfx_netlink_unicast+0x10/0x10 [ 451.825792][T18184] ? netlink_sendmsg+0x642/0xb30 [ 451.825822][T18184] ? skb_put+0x11b/0x210 [ 451.825847][T18184] netlink_sendmsg+0x805/0xb30 [ 451.825891][T18184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.825928][T18184] ? aa_sock_msg_perm+0x94/0x160 [ 451.825959][T18184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.825984][T18184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.826019][T18184] __sock_sendmsg+0x219/0x270 [ 451.826053][T18184] ____sys_sendmsg+0x505/0x830 [ 451.826090][T18184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.826125][T18184] ? import_iovec+0x74/0xa0 [ 451.826160][T18184] ___sys_sendmsg+0x21f/0x2a0 [ 451.826188][T18184] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.826252][T18184] ? __fget_files+0x2a/0x420 [ 451.826274][T18184] ? __fget_files+0x3a0/0x420 [ 451.826308][T18184] __x64_sys_sendmsg+0x19b/0x260 [ 451.826336][T18184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.826371][T18184] ? __pfx_ksys_write+0x10/0x10 [ 451.826401][T18184] ? rcu_is_watching+0x15/0xb0 [ 451.826441][T18184] ? do_syscall_64+0xbe/0x3b0 [ 451.826479][T18184] do_syscall_64+0xfa/0x3b0 [ 451.826512][T18184] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.826543][T18184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.826566][T18184] ? clear_bhb_loop+0x60/0xb0 [ 451.826594][T18184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.826616][T18184] RIP: 0033:0x7f6e2798eb69 [ 451.826637][T18184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.826658][T18184] RSP: 002b:00007f6e2872a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.826684][T18184] RAX: ffffffffffffffda RBX: 00007f6e27bb5fa0 RCX: 00007f6e2798eb69 [ 451.826701][T18184] RDX: 0000000020000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 451.826716][T18184] RBP: 00007f6e2872a090 R08: 0000000000000000 R09: 0000000000000000 [ 451.826729][T18184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.826743][T18184] R13: 0000000000000000 R14: 00007f6e27bb5fa0 R15: 00007fff5d520708 [ 451.826777][T18184] Connection to 10.128.1.112 closed by remote host. [ 452.603291][T18194] __nla_validate_parse: 6 callbacks suppressed [ 452.603314][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4147'. [ 452.612281][T18193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 452.626003][T18193] IPv6: NLM_F_CREATE should be set when creating new route [ 453.298112][ T5839] syz_tun (unregistering): left allmulticast mode [ 453.388176][ T5842] syz_tun (unregistering): left allmulticast mode [ 453.534116][ T59] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 453.545065][ T59] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.666458][T18190] syz_tun (unregistering): left allmulticast mode [ 453.688909][ T59] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 453.700537][ T59] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.760945][ T59] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 453.770896][ T59] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.874868][ T59] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 453.884807][ T59] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.988937][ T59] tipc: Resetting bearer [ 454.492089][ T59] tipc: Disabling bearer [ 454.763820][ T59] bond0 (unregistering): Released all slaves [ 454.864764][ T59] bond1 (unregistering): Released all slaves [ 454.960758][ T59] bond2 (unregistering): Released all slaves [ 455.066074][ T59] bond3 (unregistering): (slave veth3): Releasing active interface [ 455.075851][ T59] bond3 (unregistering): Released all slaves [ 455.172360][ T59] bond4 (unregistering): (slave veth5): Releasing active interface [ 455.182862][ T59] bond4 (unregistering): Released all slaves [ 455.282325][ T59] bond5 (unregistering): (slave veth7): Releasing active interface [ 455.292687][ T59] bond5 (unregistering): Released all slaves [ 455.396736][ T59] bond6 (unregistering): (slave veth9): Releasing active interface [ 455.408059][ T59] bond6 (unregistering): Released all slaves [ 455.509122][ T59] bond7 (unregistering): Released all slaves [ 455.646913][ T59] bond8 (unregistering): (slave veth15): Releasing backup interface [ 455.660569][ T59] bond8 (unregistering): Released all slaves [ 455.683290][ T9260] wg1 speed is unknown, defaulting to 1000 [ 455.689347][ T9260] syz1: Port: 1 Link DOWN [ 455.794765][ T59] tipc: Disabling bearer [ 455.808417][ T59] tipc: Left network mode [ 456.252629][ T59] hsr_slave_0: left promiscuous mode [ 456.259268][ T59] hsr_slave_1: left promiscuous mode [ 456.284149][ T59] veth1_macvtap: left promiscuous mode [ 456.290576][ T59] veth0_macvtap: left promiscuous mode [ 456.296238][ T59] veth1_vlan: left promiscuous mode [ 456.302068][ T59] veth0_vlan: left promiscuous mode [ 456.465929][ C1] ------------[ cut here ]------------ [ 456.471717][ C1] kernel BUG at arch/x86/mm/physaddr.c:28! [ 456.477676][ C1] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 456.484029][ C1] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 456.495788][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.505968][ C1] Workqueue: netns cleanup_net [ 456.511114][ C1] RIP: 0010:__phys_addr+0x16b/0x180 [ 456.516317][ C1] Code: 40 ae 00 e9 45 ff ff ff e8 52 1e 4b 00 48 c7 c7 10 ef fa 8d 48 89 de 4c 89 f2 e8 e0 d9 87 03 e9 4d ff ff ff e8 36 1e 4b 00 90 <0f> 0b e8 2e 1e 4b 00 90 0f 0b e8 26 1e 4b 00 90 0f 0b 0f 1f 00 90 [ 456.536026][ C1] RSP: 0018:ffffc90000a08b58 EFLAGS: 00010246 [ 456.542114][ C1] RAX: ffffffff8174927a RBX: 00007780ffff0000 RCX: ffff88801bbe1e00 [ 456.550094][ C1] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 456.558449][ C1] RBP: ffffc90000a08e30 R08: 0000000000000000 R09: ffffffff81a7f5d4 [ 456.566436][ C1] R10: dffffc0000000000 R11: ffffffff89f872c0 R12: ffffffff89f872c0 [ 456.574431][ C1] R13: ffffffff81a7f5d4 R14: 000000017fff0000 R15: dffffc0000000000 [ 456.582464][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 456.591693][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.598288][ C1] CR2: 000000110c255f28 CR3: 000000000df38000 CR4: 00000000003526f0 [ 456.606294][ C1] Call Trace: [ 456.609617][ C1] [ 456.612504][ C1] ? in_dev_free_rcu+0x49/0x60 [ 456.617276][ C1] kfree+0x77/0x440 [ 456.621105][ C1] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 456.626421][ C1] ? rcu_core+0xc34/0x1710 [ 456.630954][ C1] in_dev_free_rcu+0x49/0x60 [ 456.635638][ C1] rcu_core+0xca8/0x1710 [ 456.639898][ C1] ? debug_object_activate+0x2e2/0x420 [ 456.645377][ C1] ? __pfx_rcu_core+0x10/0x10 [ 456.650076][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 456.655994][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.661296][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 456.667204][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 456.673635][ C1] handle_softirqs+0x283/0x870 [ 456.678416][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 456.683287][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 456.688596][ C1] __irq_exit_rcu+0xca/0x1f0 [ 456.693374][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 456.698595][ C1] irq_exit_rcu+0x9/0x30 [ 456.702869][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 456.708520][ C1] [ 456.711455][ C1] [ 456.714396][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.720485][ C1] RIP: 0010:lockdep_unregister_key+0x2c5/0x310 [ 456.726745][ C1] Code: 65 48 8b 05 9d 6a fc 10 48 3b 44 24 10 0f 84 26 fe ff ff e8 5d 32 d2 09 e8 88 33 d2 09 41 f7 c7 00 02 00 00 74 bd fb 40 84 ed <75> bc eb cd 90 0f 0b 90 e9 19 ff ff ff 90 0f 0b 90 e9 2a ff ff ff [ 456.746368][ C1] RSP: 0018:ffffc9000210f578 EFLAGS: 00000246 [ 456.752486][ C1] RAX: a7de49f71aa0ee00 RBX: ffff88807d36f298 RCX: a7de49f71aa0ee00 [ 456.760494][ C1] RDX: ffffffff935dc358 RSI: ffffffff8d98cba8 RDI: ffffffff8be30a00 [ 456.768831][ C1] RBP: ffff88807d36f200 R08: 0000000000000000 R09: ffffffff81aa7ed8 [ 456.777103][ C1] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 0000000000000000 [ 456.785087][ C1] R13: 0000000000001000 R14: 0000000000000001 R15: 0000000000000a02 [ 456.793087][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 456.798915][ C1] __qdisc_destroy+0x166/0x420 [ 456.803693][ C1] dev_shutdown+0x34c/0x440 [ 456.808322][ C1] unregister_netdevice_many_notify+0xe0f/0x1ff0 [ 456.814773][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 456.821580][ C1] ? unregister_netdevice_queue+0x1b3/0x380 [ 456.827594][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 456.833857][ C1] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 456.840039][ C1] default_device_exit_batch+0x819/0x890 [ 456.845697][ C1] ? __pfx___might_resched+0x10/0x10 [ 456.851001][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 456.857181][ C1] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 456.862742][ C1] ? net_generic+0x1e/0x240 [ 456.867272][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 456.873468][ C1] ops_undo_list+0x522/0x990 [ 456.878080][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 456.883210][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 456.888440][ C1] cleanup_net+0x4c5/0x800 [ 456.892873][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 456.897838][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.903053][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 456.908788][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 456.914524][ C1] process_scheduled_works+0xae1/0x17b0 [ 456.920193][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 456.926204][ C1] worker_thread+0x8a0/0xda0 [ 456.930821][ C1] kthread+0x70e/0x8a0 [ 456.934986][ C1] ? __pfx_worker_thread+0x10/0x10 [ 456.940120][ C1] ? __pfx_kthread+0x10/0x10 [ 456.944747][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.949954][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.955168][ C1] ? __pfx_kthread+0x10/0x10 [ 456.959853][ C1] ret_from_fork+0x3fc/0x770 [ 456.964492][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 456.969626][ C1] ? __switch_to_asm+0x39/0x70 [ 456.974399][ C1] ? __switch_to_asm+0x33/0x70 [ 456.979180][ C1] ? __pfx_kthread+0x10/0x10 [ 456.983786][ C1] ret_from_fork_asm+0x1a/0x30 [ 456.988680][ C1] [ 456.991823][ C1] Modules linked in: [ 456.995816][ C1] ---[ end trace 0000000000000000 ]--- [ 457.001359][ C1] RIP: 0010:__phys_addr+0x16b/0x180 [ 457.006715][ C1] Code: 40 ae 00 e9 45 ff ff ff e8 52 1e 4b 00 48 c7 c7 10 ef fa 8d 48 89 de 4c 89 f2 e8 e0 d9 87 03 e9 4d ff ff ff e8 36 1e 4b 00 90 <0f> 0b e8 2e 1e 4b 00 90 0f 0b e8 26 1e 4b 00 90 0f 0b 0f 1f 00 90 [ 457.026846][ C1] RSP: 0018:ffffc90000a08b58 EFLAGS: 00010246 [ 457.033090][ C1] RAX: ffffffff8174927a RBX: 00007780ffff0000 RCX: ffff88801bbe1e00 [ 457.041212][ C1] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 457.049336][ C1] RBP: ffffc90000a08e30 R08: 0000000000000000 R09: ffffffff81a7f5d4 [ 457.057834][ C1] R10: dffffc0000000000 R11: ffffffff89f872c0 R12: ffffffff89f872c0 [ 457.066626][ C1] R13: ffffffff81a7f5d4 R14: 000000017fff0000 R15: dffffc0000000000 [ 457.074697][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 457.083776][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.090499][ C1] CR2: 000000110c255f28 CR3: 000000000df38000 CR4: 00000000003526f0 [ 457.098503][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 457.106216][ C1] Kernel Offset: disabled [ 457.110560][ C1] Rebooting in 86400 seconds..