last executing test programs: 2.318551113s ago: executing program 3 (id=770): unshare(0x62040200) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x28, 0x40085, 0x13}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000200000000000000d419348166e53163a31271143a1ffd460fa4f37a0be30ce7ccbbbdc032e34b918a79dfcca995b3c34e78f95b81d8b27f2256a9f3aab70f0a5f3c8bae294ccd0f12bb4e2a16c82fd4b89e8769d44a19ed26ad9f149ddcfbf72132321c7c6474e6c374da64bc2deb1b2ab7b77415bf20909a4014fd8cf623803975158e854e9d54ef47244c35d535d7c89f376c3dfeceef84882fabc9077f25d4917543c4412c46fdc71d6044d1766c925b723635f9cb8b08ca03d566708be42061e8c79198e0f4be79eb0f87be8a94734977cd0a5dcf21e5"], 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x1, 0x8000, 0x3, 0x7, {{0x1e, 0x4, 0x2, 0x20, 0x78, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @multicast1, {[@end, @timestamp={0x44, 0x28, 0xbe, 0x0, 0x5, [0x100, 0x4, 0x0, 0x3, 0x0, 0x97, 0x2, 0x1, 0x4]}, @generic={0x88, 0x12, "f09bb294f54606f03ee0f45573fc0296"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x3a, [@remote, @rand_addr=0x64010100, @loopback, @local, @remote, @multicast2, @empty, @remote]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', r6, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x50}}, 0x40) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x100000c, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) 1.978385259s ago: executing program 1 (id=778): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000030010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1.865306475s ago: executing program 1 (id=781): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, 0x0, 0xffe) r2 = socket(0xf, 0x3, 0x2) write(r2, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) sendto$inet(r3, &(0x7f00000001c0)="de74c7646dd6cecc5506e441c97aaae6cccad61130249863f32a900a82c25b2fa4d01b7befe8f001b4f95b44ce83088177f474aea7b4211aa9e3459dab6b3ef74e63393bc86575fc3bde2fb39fead88014a20c7dac4f", 0x56, 0x20004000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000002a00)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0xc8, @remote}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000b27c9605f547680affd49db53e75290000000400000029000000000000001400000000000000290000000b00000000000100000000001458f8a3e8000000290000080000000004000000000000002000000000000000290000000400000033000000000000000502010000000000280000000000000029000000370000003cf50000000000000708000000020005040000000000000018000000000000002900"], 0xa8}}, {{&(0x7f0000000540)={0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000002900)=[{0x0}], 0x1}}], 0x3, 0x1) 1.589654066s ago: executing program 2 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x13, 0x8, 0x8, 0x0, 0x0, 0x1, 0x1, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000000500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r4, 0x0, &(0x7f0000000bc0)=""/177}, 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x210, r6, 0xb00, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5e}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0x1, 0x35, 0x6}}]}, @NL80211_ATTR_IE={0x1b3, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0xf7, @device_b, 0x64, @value=@broadcast, 0xa, 0xbc4e, @device_a, 0x5}}, @tim={0x5, 0x20, {0x8, 0x80, 0x7, "f73c328ff2fa00e56db1dccc19f5c6e78f787fd37fc4cecbfd675e4097"}}, @tim={0x5, 0x67, {0xe, 0x84, 0x9, "7762adce047623d494325771ca4d7c65a4c39c512892e12e7baec09e8562cc39037e4540a279e547045b6285afc4d21815f9aa233f8c8ea431e67d75914d3ada83550cd70889bb5d77b1d9f52eb174363496fac185d3969ce5bf764e2b91a57132e2e087"}}, @measure_req={0x26, 0xf3, {0xff, 0x4, 0x7, "0897282426c00ae2e156a381fed5816e668492b7176d58cfa215101dbf21b7ed85d3f23872539bb735caa58d859f9716764f6027acb04cc7468970d5e102bfb9af44f6b2487bc3468c4edd31f11067f39be8a8a67c4a3de293a91aefb277d2af4422a2a65fab0a09af4405091e3e8dfe78e528c419a647d89c181763ebac0df9b4c362dadab9e1c5572d25c046047b7f176222158787d6fa31f58a9269c4498f4c1291999424b463810cae8841d4f92522b6fd513dff6b8f74bd0bfa903578b6db8bc0eedcb3351866eff7f1ec0bec12b9e05e3b4b7f11d105a52e9a7d252b5813597e466b5c1c1939d20ed09944b509"}}, @mesh_chsw={0x76, 0x6, {0x81, 0x0, 0x17, 0x7}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x3000000, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1.484176795s ago: executing program 2 (id=785): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmmsg$sock(r0, 0x0, 0x0, 0x8004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), 0x0}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x20004855) recvmmsg(r4, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/77, 0x4d}], 0x1}}], 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000440)=""/254, 0x0, 0x0, 0xc3, 0x0, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f", 0x0, 0x2, 0x0, 0x10000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000100400000003000000001d0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x5ea6, 0x8}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r6, &(0x7f0000000d80)="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", &(0x7f00000006c0)=""/223}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) tee(r7, r7, 0x100000001, 0x6) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xe0, 0x25, 0x148, 0x0, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @local, 0xff000000, 0xffffffff, 'veth0_to_bond\x00', 'veth1\x00', {}, {0xff}, 0x62, 0x5, 0x10}, 0x0, 0x98, 0xe0, 0x0, {0x200003ae, 0x7f00}, [@common=@ttl={{0x28}, {0x3, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4, 0x20}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000030601020000000000000000050000010500010007000000050000000000000064f486546f2c6e0ad888609f1fb28abe8f3b522d180415b7798f90721b49dd2df4f22ca8c068af98756186e6e2910fe6d7838eef31023716ce"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000100003a4e5a638a0fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="00080000075005002c0012800b00010062726964676500001c000280080005000100000005002500010000000500240001"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00008c0a00000000000000000000000000000000000000000000000000000000000000000000000000000000feffe6ffff000000"]}, 0x108) 1.349414985s ago: executing program 3 (id=786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000fff4000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000c0002"], 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.189715226s ago: executing program 3 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000300000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1.122247438s ago: executing program 3 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r3], 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="3795000000000000000072004e0008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x6000000000000000}, 0x0) 1.027491194s ago: executing program 3 (id=790): unshare(0x62040200) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x28, 0x40085, 0x13}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000200000000000000d419348166e53163a31271143a1ffd460fa4f37a0be30ce7ccbbbdc032e34b918a79dfcca995b3c34e78f95b81d8b27f2256a9f3aab70f0a5f3c8bae294ccd0f12bb4e2a16c82fd4b89e8769d44a19ed26ad9f149ddcfbf72132321c7c6474e6c374da64bc2deb1b2ab7b77415bf20909a4014fd8cf623803975158e854e9d54ef47244c35d535d7c89f376c3dfeceef84882fabc9077f25d4917543c4412c46fdc71d6044d1766c925b723635f9cb8b08ca03d566708be42061e8c79198e0f4be79eb0f87be8a94734977cd0a5dcf21e5"], 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x1, 0x8000, 0x3, 0x7, {{0x1e, 0x4, 0x2, 0x20, 0x78, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @multicast1, {[@end, @timestamp={0x44, 0x28, 0xbe, 0x0, 0x5, [0x100, 0x4, 0x0, 0x3, 0x0, 0x97, 0x2, 0x1, 0x4]}, @generic={0x88, 0x12, "f09bb294f54606f03ee0f45573fc0296"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x3a, [@remote, @rand_addr=0x64010100, @loopback, @local, @remote, @multicast2, @empty, @remote]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', r7, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x50}}, 0x40) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x100000c, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) 967.820566ms ago: executing program 0 (id=792): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="edffffffcdbfe1c5cedcce0c024cf18723fae1e40384de577942b594b5967700", @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf2511000000a00004800c0007800800020000000000240007800800040000004000080002008c0a0000080001001100000008000200170e00003c0007800800030082070000080003000500000008000200810c0000080001000100000008000300d2390000080001000200008008000400040000000900010073797a31000000002400078008000200050000000800030006000000080002000f00000008000200000100000800048004000780080005800400028018000480040007800900010073797a300000000004000780"], 0xdc}, 0x1, 0x0, 0x0, 0x20000804}, 0x4008001) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) 824.344178ms ago: executing program 1 (id=793): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x6c, 0x29, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xfff2}, {0x10, 0x3}}, [@c_atm={{0x8}, {0x24, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0x7}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0x2}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x6}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0x6}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0x1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000400) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000001c0)={0x0, 'wlan0\x00', 0x5}, 0x18) r8 = accept4(r6, 0x0, &(0x7f0000000200), 0x800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000ec0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f00000002c0)={0xbbc, r9, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1ff, 0x60}}}}, [@NL80211_ATTR_TX_RATES={0x28c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0x8, 0x6, 0x7, 0xfb9, 0x9, 0x9]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x5, 0x7}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x5}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x5}, {0x7, 0x3}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x5, 0x6}, {0x6, 0x6}, {0x6, 0x9}, {0x7, 0x7}, {0x2, 0x6}, {0x4, 0x8}, {0x2, 0x4}, {0x6, 0x7}, {0x3, 0x7}, {0x3, 0x4}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x800, 0x9, 0x16ab, 0xff5c, 0x1, 0x7fff]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x1}, {0x3}, {0x3}, {0x7, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0x8}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x2}, {0x5, 0xa}, {0x6, 0x7}, {0x4, 0x6}, {0x3}, {0x5, 0x7}, {0x7, 0x7}, {0x5, 0x6}, {0x1, 0x2}, {0x2, 0x16}, {0x3, 0x3}, {0x4, 0x4}, {0x6}, {0x1, 0x9}, {0x3, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x3}, {0x5, 0x4}, {0x4, 0x5}, {0x4, 0x7}, {0x6}, {0x4, 0x6}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x7}, {0x3}, {0x4, 0xa}, {0x2, 0x9}, {0x7, 0x2}, {0x4, 0x2}, {}, {0x5, 0x2}, {}, {0x2, 0xa}, {0x4, 0x9}, {0x4, 0x4}, {0x3, 0x4}, {0x4}, {0x0, 0x4}, {0x6, 0x9}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x5, 0x3, 0x3aa1, 0x0, 0xc00, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xfff, 0xff9a, 0x4, 0x8, 0x7, 0x9, 0x3]}}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x5}, {0x6, 0x3}, {0x3}, {0x3, 0xa}, {0x4, 0x3}, {0x1}, {0x1}, {0x1, 0x1}, {0x7}, {0x3, 0x1}, {0x6, 0x1}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x3, 0x8}, {0x6, 0xa}, {0x1, 0x3}, {0x4, 0x4}, {0x3, 0x6}, {0x1, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x5, 0x3}, {0x3, 0x5}, {0x6, 0x4}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0x8}, {0x4, 0x6}, {0x1}, {0x7, 0x1}, {0x2, 0x8}, {0x6}, {0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x3, 0x1}, {0x7}, {0x2, 0x6}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x2}, {0x5, 0x2}, {0x2, 0x5}, {0x5, 0x3}, {0x4, 0x9}, {}, {0x3, 0x9}, {0x4, 0xa}, {0x7, 0x4}, {0x5}, {0x3, 0x7}, {0x6, 0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x7, 0x8}, {0x7, 0x1}, {0x5, 0x9}, {0x5}, {0x5, 0x3}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x0, 0xee1e03220fe5b01d, 0x1b, 0xc, 0xb, 0x60, 0xb, 0x1b, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x3, 0x8, 0x2, 0x1, 0x9, 0x80, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc84, 0x2, 0x81, 0x100, 0xd, 0x2, 0x0, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xa, 0x7, 0x0, 0xa6e, 0x9, 0xb72, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x5, 0xb0, 0x1, 0x3ff, 0x800, 0x5, 0x9]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x4, 0x4, 0x30, 0x9, 0x9, 0x12, 0x6, 0x0, 0x48, 0xb, 0x1b, 0x4, 0x4, 0x2, 0xb, 0x9, 0x1, 0x1, 0x12, 0x74, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x8}, {0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x3, 0x4}, {0x4, 0x9}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x1}, {0x2, 0x7}, {0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x1}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x5}, {0x2, 0x8}, {0x2, 0x6}, {0x4, 0x1}, {0x5, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x4, 0xd5, 0x0, 0x1, 0x4, 0x3, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x6, 0x2, 0xa, 0x8, 0xf, 0x0, 0xd3c]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x1ff, 0x9, 0x9, 0x1, 0xfff, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x4, 0x48, 0xc, 0x12, 0x24, 0x2, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x3, 0xfff, 0xc, 0x40, 0x5, 0x5, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x3, 0x9, 0x30, 0x2d, 0x6c, 0x24, 0x48, 0x0, 0x18, 0xc, 0x5, 0x6c, 0x24, 0xc, 0xc, 0x18, 0x6, 0x1, 0xb, 0x16, 0x9, 0x60, 0x36, 0x12, 0x9, 0x2, 0x60, 0x5, 0x60, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9931, 0x2, 0xf1, 0x8001, 0x2, 0x7, 0x8f, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x6}, {0x2, 0x4}, {0x7, 0x8}, {0x1, 0x8}, {0x6, 0x6}, {0x0, 0x7}, {0x2}, {0x1, 0x8}, {0x3}]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x24, 0x48, 0xb, 0x60, 0x1b, 0x48, 0x18, 0x36, 0x2, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x60, 0x36, 0x9, 0x4, 0xb, 0x3, 0x5, 0x1b, 0x24, 0x60, 0x14, 0x48, 0x16, 0x16, 0x36, 0xc, 0x1, 0x16, 0x5c, 0xb, 0x0, 0x5, 0x18, 0x16, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x36, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x0, 0xf9, 0xd, 0xabd, 0x5, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x9, 0x82a, 0x101, 0x200, 0x6, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd654, 0x8, 0x2, 0x8000, 0x7fff, 0x4c7d, 0x34f, 0x26]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x7, 0x9}, {0x6, 0x5}, {0x0, 0x8}, {0x4, 0xa}, {0x7, 0x7}, {0x2, 0x4}, {0x3, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x3, 0x4, 0x74, 0x3, 0x24, 0x4, 0x41, 0x30, 0x16, 0x12, 0x4c, 0x36, 0x6, 0x2f, 0x30, 0x3, 0xb, 0x1, 0x1, 0x6, 0x3, 0x48, 0x1, 0x12, 0x36, 0xc, 0x6, 0xc, 0xc, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x3, 0xad, 0x17fa, 0xea2, 0x5, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x7}, {0x3, 0x6}, {0x3, 0xa}, {0x6, 0x5}, {0x5}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x7}, {0x7, 0x9}, {0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x6}, {0x4}, {0x3, 0x9}, {0x1}, {0x0, 0x4}, {0x5, 0x1}, {0x6, 0x7}, {0x4, 0x7}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x3, 0x60, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xadc7, 0x101, 0xfff, 0x8001, 0x0, 0x1, 0xffff, 0xff]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd879, 0x6, 0x7, 0x6, 0x7, 0x3, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x220c, 0x6, 0x6, 0x1, 0xffff, 0x72, 0x2]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0x9}, {0x1, 0x8}, {}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x7}, {0x4, 0x1}, {0x6, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x7, 0x5}, {0x1, 0x7}, {0x7, 0x8}, {0x1, 0x7}, {0x7}, {0x1, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x6, 0x8}, {0x0, 0x6}, {0x4}, {0x5, 0x4}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x8}, {0x6, 0x3}, {0x1, 0x6}, {0x5}, {0x2, 0x8}, {0x5, 0x5}, {0x6, 0x4}, {0x0, 0x1}, {0x3, 0x9}, {0x1, 0x8}, {}, {0x2, 0x4}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x9}, {0x5}, {0x1, 0x8}, {0x3, 0x2}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x2}, {0x0, 0x4}, {0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x3, 0x2, 0xb, 0x1, 0x4, 0x0, 0x36, 0x5b, 0x1b, 0x36, 0x2, 0x18, 0x30, 0x36, 0x1b, 0x30, 0x1, 0xb, 0x30, 0x30, 0x6c, 0x6, 0x18, 0x36, 0x16, 0x24, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x18, 0x4, 0x1b, 0x18, 0x48, 0x3, 0x52, 0x2, 0x1b, 0x30, 0x24, 0x48, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x5, 0x2, 0x8, 0x0, 0xffff, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x2, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x7, 0x11d7, 0x863, 0x2, 0x0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xfffd, 0x8, 0xffa8, 0x81, 0x7, 0x81, 0x1]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x32, 0x16, 0x1b, 0x60, 0x48, 0x30, 0xc, 0x30, 0x16, 0x5, 0x4d, 0x4, 0x5, 0x12, 0x1b, 0x3, 0x16, 0x2, 0x16, 0x0, 0x16, 0x30, 0xb, 0x60, 0xc, 0x24, 0x6c]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x51, 0x2, 0x24, 0x1, 0x24, 0x36, 0x24, 0xc, 0x36, 0x30, 0x6d, 0x6c, 0x6, 0x30, 0x9, 0x4, 0x60, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0xfff, 0x101, 0xfffc, 0xf, 0x3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x2, 0x1, 0x1ff, 0x8, 0xa8, 0xe3, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x5aa6, 0x40, 0x0, 0xb, 0x0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0xb, 0x5, 0x2, 0x200, 0x6, 0x8, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x4, 0x0, 0x1ff, 0x7, 0x100, 0x2]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x1}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x5, 0x9}, {0x7, 0x5}, {0x3, 0x4}, {0x2}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x3}, {0x6, 0x3}, {0x4, 0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x4}, {0x5, 0x8}, {0x1, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x3}, {0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x4, 0x2}, {0x7, 0x3}, {0x4, 0x3}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x511, 0x9, 0xb, 0x4, 0xfffc, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6360, 0x2, 0xa, 0x3, 0x7, 0x1, 0x6, 0xd571]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x4dee, 0xcf, 0xff, 0xfffc, 0x18, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x4, 0x6c, 0x15, 0x2, 0x5, 0x6c, 0x9, 0x1, 0x1b, 0x6c, 0x5, 0x1, 0x6, 0x3b, 0x0, 0x16, 0x18, 0x3, 0x3, 0x48, 0x1, 0x30, 0x48, 0x60, 0x4]}]}]}, @NL80211_ATTR_TX_RATES={0x1fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1b, 0x2, 0x48, 0x0, 0x12, 0x5, 0x12, 0x6c, 0x24, 0x30, 0x16, 0xb, 0x3, 0x36, 0x9, 0x3, 0xb, 0x34d07647bc7258a4, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x2, 0xffff, 0x1, 0x8, 0x3, 0x6]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x6, 0xa}, {0x5, 0x5}, {}, {0x6, 0x1}, {0x0, 0x3}, {0x1, 0x7}, {0x3}, {0x2, 0xa}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x4, 0xa}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x0, 0x1, 0x9, 0xff80, 0xf929, 0x9]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa5, 0x2, 0x6, 0x6, 0x2, 0x8, 0xb, 0xad06]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xa, 0x5, 0x2, 0x7fff, 0x9, 0x49ef]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x3}, {0x2, 0x5}, {0x5, 0x2}, {0x6, 0x1}, {0x1}, {0x6, 0x3}, {0x7, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x9}, {0x2}, {0x1, 0xa}, {0x2, 0x4}, {0x6}, {0x3, 0x4}, {0x1, 0x4}, {0x5, 0x4}, {0x4, 0x7}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0xb, 0x1, 0x1b, 0x16, 0x33, 0x30, 0x5, 0x1, 0x12, 0x1, 0xc, 0x12, 0x0, 0x16, 0xe, 0x36, 0xc, 0x60, 0x5, 0x36, 0x6c, 0x12, 0x24, 0x6c, 0x30, 0x6c, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x4, 0x80, 0x2, 0x11, 0x8, 0xf0bb]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0xb, 0x30, 0x60, 0x5, 0x24, 0x6, 0x1b, 0x36]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x33, 0x18, 0x24, 0x3, 0x24, 0x9, 0xb, 0x24, 0x16, 0x3, 0x5, 0x5, 0x1b, 0x2, 0x12, 0x47]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x3, 0x1b, 0x48, 0x4, 0x12, 0x6c, 0x4, 0x36, 0x36, 0x33, 0x6, 0x30, 0x18, 0x36, 0x9, 0x7e, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x800, 0x9, 0x3, 0x7, 0x9, 0xe000, 0x5]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x9, 0x24, 0xb, 0xc, 0x1b, 0x6, 0x9, 0x30, 0x1, 0x6c, 0x3, 0x24]}, @NL80211_TXRATE_HT={0x37, 0x2, [{}, {0x7, 0x2}, {0x2, 0x1}, {0x7, 0x7}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0x6}, {0x6, 0x3}, {0x6, 0x9}, {0x2}, {0x2, 0x5}, {0x6, 0x6}, {0x2, 0x2}, {0x5, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x9}, {0x1}, {0x3, 0xa}, {0x7, 0x2}, {0x6, 0x8}, {0x3, 0x8}, {0x3, 0x8}, {0x4, 0x8}, {0x7, 0x8}, {0x7, 0x5}, {0x2, 0x9}, {0x5, 0x2}, {0x3, 0x6}, {0x1}, {0x4, 0x7}, {0x6, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x6, 0x7}, {0x5, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {}, {0x0, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x4, 0xa}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xe8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x3, 0x9, 0x8000, 0x292, 0x1, 0x4, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x5}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0xa}, {0x7, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x4, 0x6}, {0x2, 0x4}, {0x4}, {0x0, 0x3}, {0x3, 0x4}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x77, 0x0, 0x0, 0x6, 0x9, 0xf, 0x80]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x8, 0x200, 0x14, 0x6, 0x81, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x2}, {0x2, 0x9}, {0x5, 0x1}, {0x4, 0x3}, {0x7, 0xa}, {0x4, 0x5}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x4, 0x6}, {0x7}, {0x7, 0x17}, {0x5, 0x3}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x3}, {}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x7}, {0x2, 0x9}, {0x1, 0x1}, {0x5, 0x4}, {0x3}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {}, {0x4, 0x8}, {0x2, 0xa}, {0x5, 0x4}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4ed, 0x6, 0x2, 0x6, 0x8, 0x1, 0x52, 0xcb]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x8, 0x2, 0x7df, 0x2daf, 0x6, 0x400]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1e, 0x2, 0xf6f, 0x8000, 0x8000, 0x8000, 0x3ff, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x71, 0x9, 0x0, 0x8, 0x7, 0x7, 0xea]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x88dac1eefbd59883}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x4}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x5}, {0x1, 0x5}, {0x5, 0x8}, {0x3}, {0x5, 0x7}, {0x3}, {0x0, 0x7}, {0x2, 0x4}, {0x5}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x2, 0x6}, {0x6}, {0x2, 0x2}, {0x3, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x6, 0x16, 0x6, 0x24, 0x8c, 0x60, 0x24, 0x48, 0x16, 0x30, 0x2, 0x1, 0x0, 0x4, 0x24, 0xb, 0x30, 0x16, 0x9, 0x9, 0x11, 0x48, 0x2, 0x16, 0x1, 0x6, 0x53, 0x1, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xfff9, 0xd, 0x101, 0x8, 0x2, 0x1, 0xfff9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x4}, {0x3, 0x5}, {0x2}, {0x2, 0x9}, {0x7, 0x8}, {0x2, 0xa}, {0x7}, {0x7, 0x5}, {}, {0x2, 0x6}, {0x4, 0x8}, {0x5, 0x6}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x2}, {0x3, 0xa}, {0x3}, {0x4, 0x6}, {0x6, 0x3}, {0x3, 0x5}, {0x5, 0x7}, {0x1, 0x5}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0x7}, {0x7, 0x2}, {0x7}, {0x0, 0x5}, {0x1}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x5158, 0x3, 0x4, 0x4, 0x7, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc3, 0x5, 0xfd, 0x7, 0x7, 0x2, 0x101, 0xe3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x9, 0x0, 0x16, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x12, 0x1, 0x18, 0x9, 0x3, 0x5, 0x3, 0x64, 0x1, 0xb, 0x2, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfbff, 0x78, 0x10, 0x2, 0x9, 0x400, 0x91]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x1}, {0x5, 0x8}, {0x5, 0x8}, {0x5, 0x5}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x6}, {0x1, 0xa}, {0x2}, {0x1, 0x1}, {0x3}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x3}, {0x7, 0x1}, {0x4}, {0x5, 0x2}, {0x6}, {0x4, 0x5}, {0x6, 0x1}, {0x4, 0x5}, {0x3}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x6, 0x4}, {0x6, 0x6}, {0x3, 0xa}, {0x0, 0xa}, {0x3, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x2, 0x5}, {0x3}, {0x3, 0x5}, {0x1, 0x7}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x1, 0x101, 0x55, 0x3, 0xfffa, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xbbc}, 0x1, 0x0, 0x0, 0x1}, 0x80d4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c0, 0xf8, 0x1d0, 0x0, 0x3f8, 0x3f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f0000000f00), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, [0xff, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'tunl0\x00', 'netpci0\x00', {0xff}, {}, 0x32, 0x81, 0x2, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"b29d"}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x3, 0x7}, {0x4, 0x6, 0x4}, 0x2, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0x0, {0x3}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x92}}, @common=@unspec=@state={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x13}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x1, 0x2}, {0x1, 0x2, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000001b40)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001600)={0x4cc, r9, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x8, 0x6041, 0xe, 0xb, 0x8, 0xf000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x800, 0x1, 0x72, 0x3, 0x100, 0xe86f, 0x2]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x90c, 0xfff1, 0x4f, 0x8, 0x1, 0x7, 0x6, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0xfff, 0x0, 0x1, 0x3, 0x3, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x52, 0x2, 0x0, 0x30, 0x60, 0x60, 0x18, 0x36, 0x1b, 0xb6ee66ed6f756acd, 0x18, 0x24, 0x6, 0x30, 0x6c, 0xc, 0x16, 0x4, 0x1]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x2, 0x1, 0x9, 0x48, 0x5, 0x48, 0x18, 0x77, 0x36, 0xc, 0x18, 0x18, 0x60, 0x0, 0x18, 0x1, 0x3, 0x18, 0xb, 0x9, 0x48, 0x30, 0x6c]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x48, 0xb, 0x5, 0x6c, 0xb, 0x2, 0xc, 0x7, 0x65, 0x30, 0x24, 0x6c, 0x36, 0x36, 0x6c, 0x4d, 0x6c, 0xc, 0x2, 0x5, 0xb, 0x18, 0x16, 0x5, 0x2, 0x16, 0xc, 0x9, 0x6c, 0x4, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9, 0x7, 0xffff, 0x4, 0x5bf5, 0x2, 0xff00]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x13, 0x9, 0x2, 0x3, 0x36, 0x48, 0xc, 0x6c, 0x30, 0x30, 0x36, 0x36, 0x48, 0x60, 0x3, 0x36, 0x4, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x24, 0x3, 0x0, 0x6, 0xc, 0x18, 0x1, 0x3, 0x60, 0x5, 0xc, 0x12, 0x9]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x5}, {0x3, 0x7}, {0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x3, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x4}, {0x5, 0x4}, {0x2}, {0x5, 0x6}, {0x2, 0x7}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x8600, 0xbd2, 0x81, 0x8001, 0x5, 0x6, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x5}, {0x5, 0x1}, {0x6, 0xa}, {0x4, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x2, 0x1}, {0x4, 0x6}, {0x5, 0xa}, {0x4, 0x1}, {0x0, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x7}, {0x7, 0x6}, {0x7, 0x7}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x4}, {0x7, 0x5}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x2, 0x7}, {0x2, 0x8}, {0x2, 0x6}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x6}, {0x2, 0x4}, {0x5, 0x7}, {0x3, 0x3}, {0x3, 0x9}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x9}, {0x4}, {0x6}, {0x6, 0x5}, {0x5, 0x4}, {0x7}, {0x4, 0x1}, {0x7, 0x6}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x8, 0x0, 0xa59, 0x6, 0x2, 0x6, 0x4]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x8, 0x1, 0x8000, 0x9, 0x2, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x0, 0xf9a5, 0x5, 0x4, 0x9, 0xf]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x48, 0x5, 0x6c, 0x64, 0x48, 0x6c, 0x5a, 0x5, 0x1, 0x1b, 0x48, 0x48, 0x37, 0x60, 0x60, 0x48, 0x4, 0x1, 0x16, 0x24, 0xc, 0x3, 0x2, 0x6c, 0x60, 0x3]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x30, 0x60, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff, 0x5, 0x8001, 0x4eb, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf, 0xffff, 0x5, 0xc1, 0x0, 0x7, 0xe]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x5}, {0x5, 0x7}, {0x5}, {0x3, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x2, 0x5}, {0x6, 0x8}, {0x6, 0x3}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x3}, {0x4, 0x7}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x7}, {0x1, 0x9}, {0x6}, {0x3, 0x3}, {0x6}, {0x0, 0x5}, {0x0, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x7}, {0x0, 0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x7}, {0x4}, {0x6, 0x9}, {0x2, 0x9}, {0x2, 0x2}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x190, 0x401, 0x7ff, 0x4, 0x6, 0x9, 0x2, 0xb944]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfc28, 0x3, 0x3, 0x97, 0x5, 0x800, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x3, 0x6}, {0x3}, {0x7, 0x2}, {0x3, 0x9}, {0x3}, {0x2}, {0x7, 0x4}, {0x3, 0x6}, {0x4, 0x5}, {0x0, 0x7}, {0x7, 0x1}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x5, 0x6}, {0x3, 0x2}, {0x5, 0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x7, 0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x1}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x8}, {0x2, 0xa}, {0x5, 0x4}, {0x6, 0x4}, {0x5, 0x7}, {0x2, 0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x9}, {0x7}, {0x4, 0x9}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x1}, {0x0, 0x6}, {0x7, 0x9}, {}, {0x7, 0x1}, {0x7}, {0x4, 0xa}, {0x6, 0x3}, {0x2}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x7}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0x9}, {0x5, 0x7}, {0x6, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x7, 0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x5}, {0x2, 0x6}, {0x7, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x5}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x1000, 0xc, 0x6, 0x8001, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xffff, 0x0, 0x4, 0x4, 0x5c, 0x5]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x717, 0x3259, 0xd9c9, 0x3, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x2, 0x5de2, 0x406, 0x1, 0x7ff, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x7}, {0x3, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x6}, {0x4}, {0x1, 0x4}, {0x2, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x6}, {0x4, 0x7}, {0x0, 0x4}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0x3}, {0x5, 0x6}, {0x5, 0x4}, {0x4, 0x8}, {0x3}, {0x0, 0x2}, {0x2, 0x3}, {0x4, 0x5}, {0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x6}, {0x0, 0x6}, {0x2}, {0x3, 0x2}, {0x3, 0xa}, {0x4, 0x3}, {0x2}, {0x6, 0x4}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x7, 0x8}, {0x1, 0x8}, {0x6, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x6}, {0x3, 0x8}, {0x7, 0x2}, {0x4, 0x8}, {0x7, 0x5}, {0x0, 0x9}, {0x3}, {0x4, 0x3}, {0x7, 0x8}, {0x7, 0x3}, {0x6, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x4}, {0x1, 0x3}, {0x5, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x4, 0x2, 0x16, 0x24, 0xaf1c4ee215437dd8, 0x16, 0x3, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xff67, 0x7, 0x8, 0x3, 0x8, 0x5, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x8010}, 0x10) splice(r7, &(0x7f0000001b80)=0x4, r7, &(0x7f0000001bc0)=0xe6, 0x5, 0x0) r11 = gettid() r12 = getgid() sendmsg$unix(r8, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001c00)="107431f96603bb75bfc92e86153286c64768", 0x12}, {&(0x7f0000001c40)="b1e4ea6dba1c0d26d2f1383351c46dd4c30837958923b107cdb21d7bf9304aa223f43eda7c2571ab997705503bfe838a6c9bf0b3452bf0ecd7973baeffcfff2be1f5c1234e290eb4158a73efc2c3b98f9a4dcabc99b37676d65851c0e425c35f7de27e71b6aa7815d7e47f111a", 0x6d}], 0x2, &(0x7f0000001d00)=[@rights={{0x24, 0x1, 0x1, [r10, r0, r2, r8, r7]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, r12}}}], 0x48, 0x810}, 0x840) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x20, r13, 0x8, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000001f00)=0x800, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000020c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002080)={&(0x7f0000001f80)={0xd4, r13, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000d5}, 0x4000001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000002180)={'team_slave_1\x00', &(0x7f0000002140)=@ethtool_dump={0x3f, 0x6, 0x6, 0x20, "8fb67fee55fbfefbe4bfc8bf9331473bb90c23ec80708e3b4daddd0e41d06e29"}}) r15 = accept4$vsock_stream(r8, &(0x7f00000021c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80800) accept4$vsock_stream(r15, &(0x7f0000002200)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 824.102105ms ago: executing program 4 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3103000000000000000009000000080003"], 0x24}, 0x1, 0x400000000000000}, 0x4000) 813.383031ms ago: executing program 0 (id=795): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 716.96131ms ago: executing program 4 (id=796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0xd, 0x6}, {}, {0x9, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x700000000000000, 0x0, 0x20000001}, 0x0) 691.997328ms ago: executing program 1 (id=797): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x1, 0x9}, {0x35, 0x0, 0x0, 0xffffffff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1414aa0000000000000000000000007f00000100000000000000000000000000000001000000000a00000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x80000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20002003}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000020, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, 0x0, 0x0) close(r5) shutdown(r4, 0x0) close(r3) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0xf, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x20, 0xfffffc01, 0x3ff, 0x9dfc, 0x8000, r8, 0x70b, '\x00', 0x0, r1, 0x4, 0x4, 0x5, 0x0, @value, @void, @void, @value}, 0x50) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r9) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x54, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40844) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000ec0)=@deltfilter={0x8a8, 0x2d, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0x2, 0xe}, {0xfff9, 0x1}}, [@f_rsvp={{0x9}, {0x878, 0x2, [@TCA_RSVP_POLICE={0x874, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x2, 0x800, 0xc0e, 0x6, 0x3, 0x21e9, 0x9, 0x4, 0x2, 0x51, 0x3, 0x8, 0xa7, 0x10, 0xb0000000, 0xffffff01, 0x3, 0x1, 0xf6, 0xfff, 0x4, 0x4, 0xfffffffa, 0x8001, 0xf5, 0x7, 0x80, 0x7, 0x3, 0xe, 0x7, 0x83a0, 0x700, 0x2, 0x6, 0x8, 0x401, 0xab4, 0x1, 0x4, 0x2, 0x5, 0x2, 0xfffffff7, 0x8, 0x100, 0x7, 0x40, 0x0, 0xa1, 0x33d, 0x4, 0x7, 0x81, 0x9, 0xcf, 0xb3, 0x2, 0xa, 0xfffffff8, 0x0, 0x0, 0x4, 0x2, 0xffffff29, 0x4, 0x40, 0x9, 0xb4, 0x1, 0x1ff, 0x5, 0x3, 0x9e8, 0x2, 0x1, 0x7, 0x10000000, 0x10, 0x3, 0x961, 0x0, 0xc, 0xfffff9d6, 0x9, 0x200, 0xffff, 0x7, 0x459, 0x400000, 0xffffffff, 0x8, 0x8, 0x4, 0x3, 0x2, 0x4, 0x80000000, 0x1, 0x3, 0x10, 0x111d451, 0x0, 0x0, 0x400, 0x65240faf, 0x3, 0x8, 0x8, 0x9, 0xf8, 0x9, 0x6, 0x4, 0x5, 0x7, 0x100, 0xe1e, 0x401, 0x0, 0xdff, 0x3, 0x1, 0x4, 0xa8, 0x8, 0x9, 0x4, 0x0, 0x80, 0x5, 0xff, 0x400, 0xa9, 0x5, 0x6, 0x2, 0x40, 0xfffffffe, 0x2, 0x7ff, 0x9, 0x2, 0x7, 0x0, 0x7, 0x267, 0x80, 0x5, 0x4, 0x4, 0x0, 0x3, 0x7, 0x9, 0x6, 0x9, 0x7, 0x4, 0x7, 0x8, 0x2, 0xffffffff, 0xfffffffd, 0x4, 0xa5, 0x8, 0x5, 0x4, 0x6, 0x2, 0x2, 0x7, 0x7, 0x9, 0x76, 0x10000, 0x5, 0x5, 0x6, 0x2, 0x2, 0x75, 0x7f, 0x4, 0x5, 0x8, 0x0, 0x80000000, 0x1, 0x9, 0xf, 0x0, 0x6, 0x9, 0x7, 0x3ff, 0x28000, 0x0, 0xfffffffb, 0x7fffffff, 0xce1e, 0x8, 0x4, 0xb5, 0x3, 0xb, 0x3, 0x19a0000, 0x47, 0xb, 0x7fff, 0x3, 0x1, 0x5, 0xd, 0xfffffffa, 0x8, 0x200, 0x795, 0x5, 0x9, 0x7fff, 0xa9b1, 0xc8, 0x10, 0x7ff, 0x18a4, 0x8, 0x8, 0xf, 0x7fff, 0x1, 0x3, 0x4, 0x1, 0x40, 0x7, 0x1000, 0x5, 0x3f, 0x88d8, 0x5, 0x9, 0xdf5a, 0xffff6a8c, 0x5, 0x4, 0x2, 0x100, 0x1, 0x7fffffff, 0x8, 0x81]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5ce}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x0, 0x3, 0x8, 0xd1, 0xe, 0xffffffff, 0x101, 0x7, 0x10, 0x400, 0x8, 0x2, 0x9917, 0xe, 0xac, 0x1ff, 0xa, 0x1, 0x3136b09d, 0x2, 0x0, 0x4, 0x0, 0x0, 0x3, 0x401, 0x100, 0x5, 0x2, 0x401, 0x6, 0x0, 0x7, 0xfffffffe, 0x8001, 0x7, 0xff0, 0x9, 0x7, 0x10000, 0x4, 0x7fffffff, 0x10, 0x8, 0x8001, 0xe, 0x8, 0x7, 0x0, 0x8, 0x0, 0xe, 0xb, 0x7, 0x7, 0x8001, 0x4, 0x101, 0x5, 0xe442, 0x2, 0xfffffff9, 0x9, 0x1, 0x8, 0x4, 0x1, 0x6, 0xffff, 0x9, 0xfd, 0x5, 0x101, 0x4, 0x7, 0xb9a0, 0x4, 0x17b, 0x4, 0xf0, 0x8, 0x2c2, 0x2, 0x6, 0x8, 0x8, 0xffffffff, 0xfd5, 0x800, 0x9, 0xb49, 0x1, 0x9, 0x8000, 0xc25d, 0x0, 0x401, 0x1, 0x10000, 0x80000, 0x7, 0x7, 0x8, 0xe, 0x2, 0x80000000, 0x0, 0x15c2c7cb, 0x2, 0x7, 0xa, 0xfe, 0x4, 0x4, 0x19b2, 0x2, 0x7, 0x8, 0x0, 0x80, 0x1, 0x5, 0x5, 0x9, 0x8, 0x1, 0xebd, 0x7, 0x9, 0x100, 0x4, 0x8, 0x3, 0x3, 0x5, 0x3, 0x6, 0xa, 0x9, 0x8, 0x5, 0x4, 0x4, 0xd, 0x7, 0x8, 0xcd, 0x9, 0x2, 0x0, 0x9, 0xfffff001, 0x6, 0x1, 0x7fffffff, 0x101, 0x2, 0x9c, 0x7, 0x1, 0xbdc4, 0x88d1, 0x7, 0x9, 0x4, 0x1ff, 0x1, 0x1ff, 0x7, 0x10001, 0x8, 0x6, 0x2, 0x9, 0x100, 0x3, 0x6, 0x2, 0x1, 0xfffffff9, 0x8, 0x3, 0x3ff, 0xffff35dc, 0x6, 0x800, 0x9, 0x0, 0x3, 0x81, 0x40, 0x1, 0xe269, 0x7, 0x7, 0x3, 0x1, 0x4, 0x3, 0x9, 0xfff, 0xaac, 0x5, 0x1, 0x100, 0x0, 0x1, 0xfe6, 0xfffffffa, 0xc8000000, 0x8, 0x1, 0x8, 0x4, 0x1000, 0x4, 0x0, 0x9, 0x80000000, 0xfffffffa, 0x7, 0x4, 0x3, 0x6, 0x6, 0x7, 0x5, 0x1, 0x5, 0xffffffff, 0x5, 0x5, 0x5, 0xdf4c, 0x0, 0x8000, 0x2, 0x6, 0x6, 0x1, 0x8, 0x2, 0xa, 0x1, 0x200, 0x5, 0x4, 0xde, 0x1, 0x3, 0x4, 0x4, 0x0, 0x10e, 0x86ad]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0x6, 0x9, 0x7, {0x5, 0x0, 0x2, 0xd, 0x5, 0x5}, {0xe3, 0x1, 0x0, 0x800, 0x7, 0x2}, 0x1d7, 0x0, 0x7}}]}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x1}, 0x41) 641.757499ms ago: executing program 0 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x40000000, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x40) 547.911678ms ago: executing program 2 (id=799): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x300) 534.849164ms ago: executing program 0 (id=800): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r1, 0x0, 0x6}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x11) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010007000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 421.833578ms ago: executing program 4 (id=801): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r2 = epoll_create1(0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x180000011}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) shutdown(r3, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 380.994485ms ago: executing program 2 (id=802): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xd7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000600), &(0x7f00000000c0)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = accept(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a00102001c00128009000100766c616e0000eb8a4b7e1ae0ab2b01000200000008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa00000a000200aaaaaaaaaabb0000"], 0x5c}}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() sendmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000b200000080200010b708000000001d007b8a000000b7080000000000007b8af0ff00ec2000bfa11d00000000000701b8c3d92f380000f8ffffffbfb60000000000f0fffffffffffffafbb7420000080000001823", @ANYRES32=r12, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r13}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xe, 0x0, 0x0, 0x4000, 0xd06}, {0x0, 0x0, 0x1}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev, 0xffffffff, 0x0, 0x0, 0xff}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="00e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @dev}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xffffffffffffffbb, 0x24, 0x400, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xb, 0xffff}}}, 0x24}}, 0x0) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYRES32], 0x14}], 0x1, 0x0, 0x0, 0x40000860}, 0x0) 359.654891ms ago: executing program 0 (id=803): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0xf00}, 0x0) 305.809683ms ago: executing program 4 (id=804): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) 263.661069ms ago: executing program 2 (id=805): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) 232.075814ms ago: executing program 1 (id=806): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004180)={0x1c, r2, 0xf9bd2d6ca286407d, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004844}, 0x20010040) 173.720496ms ago: executing program 4 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="000500007f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/time\x00') r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02dc24c9b9000000180000000000000084"], 0x38}, 0x200048d0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x1402, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x84001}, 0x20008807) 159.142759ms ago: executing program 0 (id=808): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6) 135.957212ms ago: executing program 2 (id=809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x5e, &(0x7f0000000880)={&(0x7f0000000440)={0x30, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x1, 0x5d}, @val={0xfffffffffffffda5}, @val={0xc, 0x99, {0xa7, 0x27}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) (fail_nth: 5) 65.511063ms ago: executing program 4 (id=810): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno\x00', 0xb) getsockopt$inet_mreqn(r2, 0x29, 0x1a, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1d, 0x1f, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff234d, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x67}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @exit, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001700)='GPL\x00', 0x6, 0x45, &(0x7f0000001740)=""/69, 0x41100, 0x80, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x4, 0x4, 0x7, 0x4}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x9, 0x1e, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@cb_func={0x18, 0x82500c6b2bbac2aa, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdf29}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x1000, &(0x7f0000000580)=""/4096, 0x41100, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001580)={0x5, 0xe, 0x3, 0x7}, 0x10, 0x0, r4, 0x2, 0x0, &(0x7f00000018c0)=[{0x1, 0x4, 0x2, 0xc}, {0x2, 0x2, 0xb, 0xc}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400f6cfa1fc58b41994", @ANYRES32=0x0, @ANYBLOB="4018000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x48, 0x2}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={r8, 0x6, 0x7, 0x6}, 0x10) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000140)=0x3) 65.394734ms ago: executing program 1 (id=811): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @loopback, @empty, @private=0xa010100}}}}, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'wlan0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001000)={0x6c, @empty, 0x4e24, 0x3, 'lblcr\x00', 0x2, 0x9, 0x3c}, 0x2c) 0s ago: executing program 3 (id=812): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000500), 0x7, r5}, 0x38) unshare(0x26020480) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r5, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r6 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r6, 0x0, 0x0) r7 = socket$kcm(0x29, 0x1, 0x0) recvmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000040)=@ax25={{0x3, @rose}, [@bcast, @netrom, @null, @netrom, @default, @rose, @null, @rose]}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000600)=""/222, 0xde}], 0x2}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000850000008c000000950000000000000016488da8180c7ff5b4e950ad447410e668eeb71f85"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780"], 0x60}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500090000000000050020000100000005"], 0x7c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r11, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xbe}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000400c) kernel console output (not intermixed with test programs): ogle Compute Engine, BIOS Google 02/12/2025 [ 89.468498][ T6170] Call Trace: [ 89.468505][ T6170] [ 89.468513][ T6170] dump_stack_lvl+0x241/0x360 [ 89.468552][ T6170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.468574][ T6170] ? __pfx__printk+0x10/0x10 [ 89.468600][ T6170] ? __pfx___might_resched+0x10/0x10 [ 89.468624][ T6170] should_fail_ex+0x424/0x570 [ 89.468654][ T6170] should_failslab+0xac/0x100 [ 89.468678][ T6170] kmem_cache_alloc_noprof+0x78/0x390 [ 89.468699][ T6170] ? radix_tree_node_alloc+0x8b/0x3c0 [ 89.468723][ T6170] radix_tree_node_alloc+0x8b/0x3c0 [ 89.468756][ T6170] idr_get_free+0x296/0xac0 [ 89.468789][ T6170] idr_alloc_u32+0x197/0x330 [ 89.468815][ T6170] ? __pfx_idr_alloc_u32+0x10/0x10 [ 89.468836][ T6170] ? tcf_exts_init_ex+0x43a/0x6d0 [ 89.468867][ T6170] basic_change+0x416/0xee0 [ 89.468900][ T6170] ? __pfx_basic_change+0x10/0x10 [ 89.468936][ T6170] ? __pfx_basic_change+0x10/0x10 [ 89.468956][ T6170] tc_new_tfilter+0x112f/0x1a90 [ 89.469010][ T6170] ? __pfx_tc_new_tfilter+0x10/0x10 [ 89.469048][ T6170] ? __lock_acquire+0xad5/0xd80 [ 89.469086][ T6170] ? __pfx_tc_new_tfilter+0x10/0x10 [ 89.469112][ T6170] rtnetlink_rcv_msg+0x80f/0xd70 [ 89.469132][ T6170] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 89.469159][ T6170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.469177][ T6170] ? __lock_acquire+0xad5/0xd80 [ 89.469210][ T6170] netlink_rcv_skb+0x208/0x480 [ 89.469233][ T6170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.469256][ T6170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.469297][ T6170] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.469321][ T6170] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.469345][ T6170] netlink_unicast+0x7f8/0x9a0 [ 89.469375][ T6170] ? __pfx_netlink_unicast+0x10/0x10 [ 89.469397][ T6170] ? skb_put+0x114/0x1f0 [ 89.469425][ T6170] netlink_sendmsg+0x8c3/0xcd0 [ 89.469460][ T6170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.469485][ T6170] ? aa_sock_msg_perm+0x91/0x160 [ 89.469513][ T6170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.469532][ T6170] __sock_sendmsg+0x221/0x270 [ 89.469555][ T6170] ____sys_sendmsg+0x523/0x860 [ 89.469578][ T6170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.469592][ T6170] ? __fget_files+0x2a/0x420 [ 89.469618][ T6170] ? __fget_files+0x2a/0x420 [ 89.469648][ T6170] __sys_sendmsg+0x271/0x360 [ 89.469668][ T6170] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.469729][ T6170] ? do_syscall_64+0xb6/0x230 [ 89.469758][ T6170] do_syscall_64+0xf3/0x230 [ 89.469776][ T6170] ? clear_bhb_loop+0x45/0xa0 [ 89.469793][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.469813][ T6170] RIP: 0033:0x7f01c218d169 [ 89.469829][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.469839][ T6170] RSP: 002b:00007f01c2fbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.469854][ T6170] RAX: ffffffffffffffda RBX: 00007f01c23a5fa0 RCX: 00007f01c218d169 [ 89.469863][ T6170] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 89.469870][ T6170] RBP: 00007f01c2fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 89.469878][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.469885][ T6170] R13: 0000000000000000 R14: 00007f01c23a5fa0 R15: 00007fff8fc4fe88 [ 89.469906][ T6170] [ 89.942469][ T6180] FAULT_INJECTION: forcing a failure. [ 89.942469][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 89.998914][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.2.70 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 89.998931][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.998937][ T6180] Call Trace: [ 89.998941][ T6180] [ 89.998946][ T6180] dump_stack_lvl+0x241/0x360 [ 89.998965][ T6180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.998977][ T6180] ? __pfx__printk+0x10/0x10 [ 89.998991][ T6180] ? __pfx___might_resched+0x10/0x10 [ 89.999005][ T6180] should_fail_ex+0x424/0x570 [ 89.999023][ T6180] should_failslab+0xac/0x100 [ 89.999037][ T6180] kmem_cache_alloc_noprof+0x78/0x390 [ 89.999049][ T6180] ? security_inode_alloc+0x37/0x310 [ 89.999065][ T6180] security_inode_alloc+0x37/0x310 [ 89.999078][ T6180] inode_init_always_gfp+0xa0f/0xd90 [ 89.999093][ T6180] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 89.999104][ T6180] alloc_inode+0xa3/0x1b0 [ 89.999117][ T6180] new_inode+0x22/0x180 [ 89.999132][ T6180] shmem_get_inode+0x39d/0xf20 [ 89.999147][ T6180] shmem_mknod+0x191/0x3d0 [ 89.999161][ T6180] vfs_mknod+0x36d/0x3b0 [ 89.999176][ T6180] unix_bind+0x5af/0xe40 [ 89.999193][ T6180] ? __pfx_unix_bind+0x10/0x10 [ 89.999209][ T6180] __sys_bind+0x1de/0x290 [ 89.999224][ T6180] ? __pfx___sys_bind+0x10/0x10 [ 89.999258][ T6180] __x64_sys_bind+0x7a/0x90 [ 89.999277][ T6180] do_syscall_64+0xf3/0x230 [ 89.999296][ T6180] ? clear_bhb_loop+0x45/0xa0 [ 89.999315][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.999331][ T6180] RIP: 0033:0x7f01c218d169 [ 89.999344][ T6180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.999355][ T6180] RSP: 002b:00007f01c2fbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 89.999372][ T6180] RAX: ffffffffffffffda RBX: 00007f01c23a5fa0 RCX: 00007f01c218d169 [ 89.999384][ T6180] RDX: 000000000000006e RSI: 00002000000002c0 RDI: 0000000000000003 [ 89.999394][ T6180] RBP: 00007f01c2fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 89.999404][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.999413][ T6180] R13: 0000000000000000 R14: 00007f01c23a5fa0 R15: 00007fff8fc4fe88 [ 89.999449][ T6180] [ 90.398528][ T6190] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 90.711481][ T6209] FAULT_INJECTION: forcing a failure. [ 90.711481][ T6209] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.762745][ T6209] CPU: 1 UID: 0 PID: 6209 Comm: syz.0.78 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 90.762773][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.762783][ T6209] Call Trace: [ 90.762790][ T6209] [ 90.762797][ T6209] dump_stack_lvl+0x241/0x360 [ 90.762826][ T6209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.762848][ T6209] ? __pfx__printk+0x10/0x10 [ 90.762881][ T6209] should_fail_ex+0x424/0x570 [ 90.762911][ T6209] _copy_from_user+0x2d/0xb0 [ 90.762934][ T6209] copy_msghdr_from_user+0xb3/0x580 [ 90.762961][ T6209] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 90.762995][ T6209] do_recvmmsg+0x3bf/0xab0 [ 90.763021][ T6209] ? __pfx_do_recvmmsg+0x10/0x10 [ 90.763051][ T6209] ? rcu_read_lock_any_held+0xbb/0x160 [ 90.763072][ T6209] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 90.763095][ T6209] ? vfs_write+0xb29/0xd10 [ 90.763123][ T6209] ? ksys_write+0x24e/0x2d0 [ 90.763144][ T6209] ? __mutex_unlock_slowpath+0x229/0x800 [ 90.763175][ T6209] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.763194][ T6209] ? __fget_files+0x2a/0x420 [ 90.763234][ T6209] __x64_sys_recvmmsg+0x1ab/0x260 [ 90.763254][ T6209] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 90.763278][ T6209] ? do_syscall_64+0xb6/0x230 [ 90.763301][ T6209] do_syscall_64+0xf3/0x230 [ 90.763321][ T6209] ? clear_bhb_loop+0x45/0xa0 [ 90.763340][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.763356][ T6209] RIP: 0033:0x7f603758d169 [ 90.763370][ T6209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.763383][ T6209] RSP: 002b:00007f60353d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 90.763400][ T6209] RAX: ffffffffffffffda RBX: 00007f60377a6080 RCX: 00007f603758d169 [ 90.763412][ T6209] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 90.763422][ T6209] RBP: 00007f60353d5090 R08: 0000000000000000 R09: 0000000000000000 [ 90.763432][ T6209] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 90.763441][ T6209] R13: 0000000000000001 R14: 00007f60377a6080 R15: 00007ffca5082f28 [ 90.763468][ T6209] [ 91.068500][ T6204] netlink: 'syz.3.76': attribute type 7 has an invalid length. [ 91.139873][ T6204] __nla_validate_parse: 3 callbacks suppressed [ 91.139889][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.76'. [ 91.420729][ T6221] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.429792][ T6221] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.439449][ T6221] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.448278][ T6221] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.490022][ T6221] vxlan0: entered promiscuous mode [ 91.498344][ T6221] vxlan0: entered allmulticast mode [ 91.782739][ T6234] tipc: Started in network mode [ 91.788864][ T6234] tipc: Node identity fee00000000000000079940000000001, cluster identity 4711 [ 91.823259][ T6234] tipc: Enabling of bearer rejected, failed to enable media [ 91.831536][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 92.234084][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.241954][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.373181][ T6254] netlink: 'syz.0.95': attribute type 7 has an invalid length. [ 92.380795][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'. [ 92.470239][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.602389][ T6277] netlink: 48 bytes leftover after parsing attributes in process `syz.1.106'. [ 92.646713][ T6277] vti0: entered promiscuous mode [ 92.753248][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 92.848926][ T6285] xt_hashlimit: overflow, try lower: 0/0 [ 92.988858][ T6289] syzkaller1: entered promiscuous mode [ 93.014372][ T6289] syzkaller1: entered allmulticast mode [ 93.348902][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 93.371308][ T6302] ipt_rpfilter: unknown options [ 93.378336][ T6299] FAULT_INJECTION: forcing a failure. [ 93.378336][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 93.402049][ T6302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.117'. [ 93.420309][ T6299] CPU: 1 UID: 0 PID: 6299 Comm: syz.1.114 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 93.420334][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.420344][ T6299] Call Trace: [ 93.420357][ T6299] [ 93.420365][ T6299] dump_stack_lvl+0x241/0x360 [ 93.420395][ T6299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.420417][ T6299] ? __pfx__printk+0x10/0x10 [ 93.420444][ T6299] ? ref_tracker_alloc+0x316/0x4c0 [ 93.420465][ T6299] should_fail_ex+0x424/0x570 [ 93.420495][ T6299] should_failslab+0xac/0x100 [ 93.420519][ T6299] kmem_cache_alloc_noprof+0x78/0x390 [ 93.420539][ T6299] ? skb_clone+0x20c/0x390 [ 93.420561][ T6299] skb_clone+0x20c/0x390 [ 93.420582][ T6299] __netlink_deliver_tap+0x3c4/0x7f0 [ 93.420616][ T6299] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.420636][ T6299] netlink_deliver_tap+0x19d/0x1b0 [ 93.420659][ T6299] netlink_sendskb+0x68/0x140 [ 93.420680][ T6299] netlink_unicast+0x39f/0x9a0 [ 93.420697][ T6299] ? __asan_memcpy+0x40/0x70 [ 93.420721][ T6299] ? __pfx_netlink_unicast+0x10/0x10 [ 93.420751][ T6299] netlink_rcv_skb+0x296/0x480 [ 93.420774][ T6299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.420797][ T6299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.420837][ T6299] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.420861][ T6299] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.420885][ T6299] netlink_unicast+0x7f8/0x9a0 [ 93.420914][ T6299] ? __pfx_netlink_unicast+0x10/0x10 [ 93.420936][ T6299] ? skb_put+0x114/0x1f0 [ 93.420979][ T6299] netlink_sendmsg+0x8c3/0xcd0 [ 93.421009][ T6299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.421033][ T6299] ? aa_sock_msg_perm+0x91/0x160 [ 93.421061][ T6299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.421080][ T6299] __sock_sendmsg+0x221/0x270 [ 93.421104][ T6299] ____sys_sendmsg+0x523/0x860 [ 93.421129][ T6299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.421143][ T6299] ? __fget_files+0x2a/0x420 [ 93.421170][ T6299] ? __fget_files+0x2a/0x420 [ 93.421202][ T6299] __sys_sendmsg+0x271/0x360 [ 93.421224][ T6299] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.421294][ T6299] ? do_syscall_64+0xb6/0x230 [ 93.421319][ T6299] do_syscall_64+0xf3/0x230 [ 93.421343][ T6299] ? clear_bhb_loop+0x45/0xa0 [ 93.421369][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.421385][ T6299] RIP: 0033:0x7f9c2e78d169 [ 93.421400][ T6299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.421413][ T6299] RSP: 002b:00007f9c2f665038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.421431][ T6299] RAX: ffffffffffffffda RBX: 00007f9c2e9a5fa0 RCX: 00007f9c2e78d169 [ 93.421443][ T6299] RDX: 0000000000004090 RSI: 0000200000000180 RDI: 0000000000000003 [ 93.421454][ T6299] RBP: 00007f9c2f665090 R08: 0000000000000000 R09: 0000000000000000 [ 93.421464][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.421473][ T6299] R13: 0000000000000000 R14: 00007f9c2e9a5fa0 R15: 00007ffe73270018 [ 93.421501][ T6299] [ 93.913690][ T6313] vlan3: entered promiscuous mode [ 93.918782][ T6313] vlan2: entered promiscuous mode [ 93.924445][ T6313] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 94.182507][ T6301] netlink: 'syz.3.116': attribute type 7 has an invalid length. [ 94.198377][ T6327] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.202151][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.116'. [ 94.218423][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.125'. [ 94.405853][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 94.436902][ T6339] Cannot find set identified by id 0 to match [ 94.630765][ T6347] FAULT_INJECTION: forcing a failure. [ 94.630765][ T6347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.666340][ T6347] CPU: 1 UID: 0 PID: 6347 Comm: syz.4.131 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 94.666364][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.666373][ T6347] Call Trace: [ 94.666380][ T6347] [ 94.666387][ T6347] dump_stack_lvl+0x241/0x360 [ 94.666416][ T6347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.666437][ T6347] ? __pfx__printk+0x10/0x10 [ 94.666470][ T6347] should_fail_ex+0x424/0x570 [ 94.666501][ T6347] _copy_from_user+0x2d/0xb0 [ 94.666522][ T6347] copy_msghdr_from_user+0xb3/0x580 [ 94.666548][ T6347] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 94.666583][ T6347] do_recvmmsg+0x3bf/0xab0 [ 94.666609][ T6347] ? __pfx_do_recvmmsg+0x10/0x10 [ 94.666639][ T6347] ? rcu_read_lock_any_held+0xbb/0x160 [ 94.666657][ T6347] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 94.666678][ T6347] ? vfs_write+0xb29/0xd10 [ 94.666704][ T6347] ? ksys_write+0x24e/0x2d0 [ 94.666722][ T6347] ? __mutex_unlock_slowpath+0x229/0x800 [ 94.666751][ T6347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.666770][ T6347] ? __fget_files+0x2a/0x420 [ 94.666806][ T6347] __x64_sys_recvmmsg+0x1ab/0x260 [ 94.666826][ T6347] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 94.666850][ T6347] ? do_syscall_64+0xb6/0x230 [ 94.666873][ T6347] do_syscall_64+0xf3/0x230 [ 94.666893][ T6347] ? clear_bhb_loop+0x45/0xa0 [ 94.666913][ T6347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.666928][ T6347] RIP: 0033:0x7f6dd058d169 [ 94.666943][ T6347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.666956][ T6347] RSP: 002b:00007f6dd14a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 94.666974][ T6347] RAX: ffffffffffffffda RBX: 00007f6dd07a5fa0 RCX: 00007f6dd058d169 [ 94.666984][ T6347] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 94.666992][ T6347] RBP: 00007f6dd14a1090 R08: 0000000000000000 R09: 0000000000000000 [ 94.666999][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.667006][ T6347] R13: 0000000000000000 R14: 00007f6dd07a5fa0 R15: 00007ffe9e878978 [ 94.667029][ T6347] [ 94.981556][ T6349] tipc: Started in network mode [ 95.006250][ T6349] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 95.025752][ T6349] tipc: Enabled bearer , priority 10 [ 95.145253][ T6354] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 95.156569][ T6354] syzkaller1: entered promiscuous mode [ 95.162171][ T6354] syzkaller1: entered allmulticast mode [ 95.755586][ T6367] netlink: 'syz.0.139': attribute type 7 has an invalid length. [ 95.792546][ T6377] bond0: entered promiscuous mode [ 95.797520][ T6375] FAULT_INJECTION: forcing a failure. [ 95.797520][ T6375] name failslab, interval 1, probability 0, space 0, times 0 [ 95.847102][ T6377] bond_slave_0: entered promiscuous mode [ 95.858453][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.1.143 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 95.858477][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.858486][ T6375] Call Trace: [ 95.858493][ T6375] [ 95.858500][ T6375] dump_stack_lvl+0x241/0x360 [ 95.858527][ T6375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.858548][ T6375] ? __pfx__printk+0x10/0x10 [ 95.858574][ T6375] ? __pfx___might_resched+0x10/0x10 [ 95.858597][ T6375] should_fail_ex+0x424/0x570 [ 95.858626][ T6375] should_failslab+0xac/0x100 [ 95.858649][ T6375] __kmalloc_noprof+0xdf/0x4d0 [ 95.858668][ T6375] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 95.858685][ T6375] ? apparmor_capable+0x13b/0x1b0 [ 95.858704][ T6375] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 95.858728][ T6375] genl_rcv_msg+0x819/0xf00 [ 95.858753][ T6375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.858767][ T6375] ? __dev_queue_xmit+0x1780/0x3f60 [ 95.858782][ T6375] ? kasan_save_track+0x3f/0x80 [ 95.858797][ T6375] ? __kasan_slab_alloc+0x66/0x80 [ 95.858821][ T6375] ? do_syscall_64+0xf3/0x230 [ 95.858860][ T6375] ? __lock_acquire+0xad5/0xd80 [ 95.858878][ T6375] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 95.858917][ T6375] netlink_rcv_skb+0x208/0x480 [ 95.858940][ T6375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.858958][ T6375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.859001][ T6375] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.859028][ T6375] genl_rcv+0x28/0x40 [ 95.859043][ T6375] netlink_unicast+0x7f8/0x9a0 [ 95.859072][ T6375] ? __pfx_netlink_unicast+0x10/0x10 [ 95.859094][ T6375] ? skb_put+0x114/0x1f0 [ 95.859129][ T6375] netlink_sendmsg+0x8c3/0xcd0 [ 95.859164][ T6375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.859190][ T6375] ? aa_sock_msg_perm+0x91/0x160 [ 95.859217][ T6375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.859237][ T6375] __sock_sendmsg+0x221/0x270 [ 95.859260][ T6375] ____sys_sendmsg+0x523/0x860 [ 95.859286][ T6375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.859300][ T6375] ? __fget_files+0x2a/0x420 [ 95.859326][ T6375] ? __fget_files+0x2a/0x420 [ 95.859357][ T6375] __sys_sendmsg+0x271/0x360 [ 95.859377][ T6375] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.859445][ T6375] ? do_syscall_64+0xb6/0x230 [ 95.859469][ T6375] do_syscall_64+0xf3/0x230 [ 95.859491][ T6375] ? clear_bhb_loop+0x45/0xa0 [ 95.859511][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.859526][ T6375] RIP: 0033:0x7f9c2e78d169 [ 95.859541][ T6375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.859553][ T6375] RSP: 002b:00007f9c2f665038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.859571][ T6375] RAX: ffffffffffffffda RBX: 00007f9c2e9a5fa0 RCX: 00007f9c2e78d169 [ 95.859582][ T6375] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000d [ 95.859591][ T6375] RBP: 00007f9c2f665090 R08: 0000000000000000 R09: 0000000000000000 [ 95.859600][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.859610][ T6375] R13: 0000000000000000 R14: 00007f9c2e9a5fa0 R15: 00007ffe73270018 [ 95.859638][ T6375] [ 96.169135][ T6377] bond_slave_1: entered promiscuous mode [ 96.175505][ T5839] tipc: Node number set to 4269801514 [ 96.183767][ T6377] ip6gretap0: entered promiscuous mode [ 96.281620][ T6385] FAULT_INJECTION: forcing a failure. [ 96.281620][ T6385] name failslab, interval 1, probability 0, space 0, times 0 [ 96.282136][ T6381] __nla_validate_parse: 4 callbacks suppressed [ 96.282152][ T6381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.145'. [ 96.296410][ T6385] CPU: 0 UID: 0 PID: 6385 Comm: syz.0.148 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 96.296436][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.296445][ T6385] Call Trace: [ 96.296452][ T6385] [ 96.296458][ T6385] dump_stack_lvl+0x241/0x360 [ 96.296487][ T6385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.296509][ T6385] ? __pfx__printk+0x10/0x10 [ 96.296534][ T6385] ? __pfx___might_resched+0x10/0x10 [ 96.296560][ T6385] should_fail_ex+0x424/0x570 [ 96.296590][ T6385] should_failslab+0xac/0x100 [ 96.296612][ T6385] __kmalloc_node_noprof+0xe7/0x4d0 [ 96.296631][ T6385] ? percpu_ref_put+0x1f/0x250 [ 96.296653][ T6385] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 96.296675][ T6385] bpf_map_kmalloc_node+0xd3/0x1c0 [ 96.296696][ T6385] bpf_cgroup_storage_alloc+0x1d2/0x2f0 [ 96.296716][ T6385] bpf_test_run+0x1c2/0xa90 [ 96.296757][ T6385] ? __pfx_bpf_test_run+0x10/0x10 [ 96.296789][ T6385] ? eth_type_trans+0x3da/0x7b0 [ 96.296821][ T6385] ? __pfx_eth_type_trans+0x10/0x10 [ 96.296847][ T6385] ? convert___skb_to_skb+0x41/0x630 [ 96.296871][ T6385] bpf_prog_test_run_skb+0xcc3/0x1850 [ 96.296912][ T6385] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 96.296930][ T6385] ? __fget_files+0x2a/0x420 [ 96.296957][ T6385] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 96.296979][ T6385] bpf_prog_test_run+0x2e4/0x360 [ 96.296999][ T6385] __sys_bpf+0x4ee/0x8b0 [ 96.297016][ T6385] ? __pfx___sys_bpf+0x10/0x10 [ 96.297043][ T6385] ? ksys_write+0x275/0x2d0 [ 96.297073][ T6385] __x64_sys_bpf+0x7c/0x90 [ 96.297102][ T6385] do_syscall_64+0xf3/0x230 [ 96.297123][ T6385] ? clear_bhb_loop+0x45/0xa0 [ 96.297142][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.297157][ T6385] RIP: 0033:0x7f603758d169 [ 96.297172][ T6385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.297184][ T6385] RSP: 002b:00007f60353f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.297202][ T6385] RAX: ffffffffffffffda RBX: 00007f60377a5fa0 RCX: 00007f603758d169 [ 96.297213][ T6385] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 96.297223][ T6385] RBP: 00007f60353f6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.297233][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.297242][ T6385] R13: 0000000000000000 R14: 00007f60377a5fa0 R15: 00007ffca5082f28 [ 96.297268][ T6385] [ 96.825204][ T6401] FAULT_INJECTION: forcing a failure. [ 96.825204][ T6401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.884940][ T6403] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 96.885754][ T6401] CPU: 1 UID: 0 PID: 6401 Comm: syz.2.153 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 96.885776][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.885795][ T6401] Call Trace: [ 96.885802][ T6401] [ 96.885809][ T6401] dump_stack_lvl+0x241/0x360 [ 96.885838][ T6401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.885859][ T6401] ? __pfx__printk+0x10/0x10 [ 96.885894][ T6401] should_fail_ex+0x424/0x570 [ 96.885923][ T6401] _copy_from_user+0x2d/0xb0 [ 96.885946][ T6401] kstrtouint_from_user+0xce/0x1a0 [ 96.885967][ T6401] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 96.885988][ T6401] ? __lock_acquire+0xad5/0xd80 [ 96.886014][ T6401] proc_fail_nth_write+0xac/0x2d0 [ 96.886039][ T6401] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 96.886060][ T6401] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.886089][ T6401] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.886115][ T6401] vfs_write+0x2bc/0xd10 [ 96.886138][ T6401] ? fdget_pos+0x247/0x310 [ 96.886164][ T6401] ? __pfx_vfs_write+0x10/0x10 [ 96.886184][ T6401] ? __fget_files+0x2a/0x420 [ 96.886207][ T6401] ? __fget_files+0x39d/0x420 [ 96.886227][ T6401] ? __fget_files+0x2a/0x420 [ 96.886258][ T6401] ksys_write+0x19d/0x2d0 [ 96.886278][ T6401] ? __pfx_ksys_write+0x10/0x10 [ 96.886300][ T6401] ? do_syscall_64+0xb6/0x230 [ 96.886324][ T6401] do_syscall_64+0xf3/0x230 [ 96.886344][ T6401] ? clear_bhb_loop+0x45/0xa0 [ 96.886363][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.886378][ T6401] RIP: 0033:0x7f01c218bc1f [ 96.886392][ T6401] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 96.886404][ T6401] RSP: 002b:00007f01c2fbb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 96.886422][ T6401] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f01c218bc1f [ 96.886433][ T6401] RDX: 0000000000000001 RSI: 00007f01c2fbb0a0 RDI: 0000000000000004 [ 96.886443][ T6401] RBP: 00007f01c2fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 96.886452][ T6401] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 96.886461][ T6401] R13: 0000000000000000 R14: 00007f01c23a5fa0 R15: 00007fff8fc4fe88 [ 96.886488][ T6401] [ 97.003282][ T6411] FAULT_INJECTION: forcing a failure. [ 97.003282][ T6411] name failslab, interval 1, probability 0, space 0, times 0 [ 97.223044][ T6411] CPU: 1 UID: 0 PID: 6411 Comm: syz.0.156 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 97.223070][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.223080][ T6411] Call Trace: [ 97.223086][ T6411] [ 97.223093][ T6411] dump_stack_lvl+0x241/0x360 [ 97.223122][ T6411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.223144][ T6411] ? __pfx__printk+0x10/0x10 [ 97.223170][ T6411] ? __pfx___might_resched+0x10/0x10 [ 97.223194][ T6411] should_fail_ex+0x424/0x570 [ 97.223224][ T6411] should_failslab+0xac/0x100 [ 97.223248][ T6411] __kmalloc_cache_noprof+0x73/0x370 [ 97.223268][ T6411] ? rtnl_newlink+0x144/0x1fe0 [ 97.223294][ T6411] rtnl_newlink+0x144/0x1fe0 [ 97.223315][ T6411] ? stack_depot_save_flags+0x44/0x940 [ 97.223340][ T6411] ? kasan_save_track+0x51/0x80 [ 97.223356][ T6411] ? kasan_save_track+0x3f/0x80 [ 97.223373][ T6411] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.223392][ T6411] ? dev_hard_start_xmit+0x2d9/0x830 [ 97.223406][ T6411] ? __dev_queue_xmit+0x1b80/0x3f60 [ 97.223422][ T6411] ? __netlink_deliver_tap+0x561/0x7f0 [ 97.223442][ T6411] ? netlink_deliver_tap+0x19d/0x1b0 [ 97.223462][ T6411] ? netlink_unicast+0x7c6/0x9a0 [ 97.223478][ T6411] ? netlink_sendmsg+0x8c3/0xcd0 [ 97.223497][ T6411] ? __sock_sendmsg+0x221/0x270 [ 97.223514][ T6411] ? ____sys_sendmsg+0x523/0x860 [ 97.223528][ T6411] ? __sys_sendmmsg+0x3a0/0x7b0 [ 97.223542][ T6411] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 97.223555][ T6411] ? do_syscall_64+0xf3/0x230 [ 97.223574][ T6411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.223627][ T6411] ? kasan_quarantine_put+0xdc/0x230 [ 97.223641][ T6411] ? lockdep_hardirqs_on+0x9d/0x150 [ 97.223664][ T6411] ? nlmon_xmit+0xaf/0x100 [ 97.223694][ T6411] ? __local_bh_enable_ip+0x168/0x200 [ 97.223717][ T6411] ? lockdep_hardirqs_on+0x9d/0x150 [ 97.223744][ T6411] ? aa_get_newest_label+0x101/0x6f0 [ 97.223778][ T6411] ? __lock_acquire+0xad5/0xd80 [ 97.223816][ T6411] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.223838][ T6411] rtnetlink_rcv_msg+0x80f/0xd70 [ 97.223858][ T6411] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 97.223884][ T6411] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.223912][ T6411] ? ref_tracker_free+0x63e/0x7e0 [ 97.223936][ T6411] netlink_rcv_skb+0x208/0x480 [ 97.223959][ T6411] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.223982][ T6411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.224021][ T6411] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.224045][ T6411] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.224069][ T6411] netlink_unicast+0x7f8/0x9a0 [ 97.224097][ T6411] ? __pfx_netlink_unicast+0x10/0x10 [ 97.224119][ T6411] ? skb_put+0x114/0x1f0 [ 97.224148][ T6411] netlink_sendmsg+0x8c3/0xcd0 [ 97.224183][ T6411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.224209][ T6411] ? aa_sock_msg_perm+0x91/0x160 [ 97.224236][ T6411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.224255][ T6411] __sock_sendmsg+0x221/0x270 [ 97.224279][ T6411] ____sys_sendmsg+0x523/0x860 [ 97.224304][ T6411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.224318][ T6411] ? __fget_files+0x2a/0x420 [ 97.224344][ T6411] ? __fget_files+0x2a/0x420 [ 97.224376][ T6411] __sys_sendmmsg+0x3a0/0x7b0 [ 97.224405][ T6411] ? __pfx___sys_sendmmsg+0x10/0x10 [ 97.224457][ T6411] ? rcu_read_lock_any_held+0xbb/0x160 [ 97.224477][ T6411] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 97.224500][ T6411] ? vfs_write+0xb29/0xd10 [ 97.224528][ T6411] ? ksys_write+0x24e/0x2d0 [ 97.224549][ T6411] ? __mutex_unlock_slowpath+0x229/0x800 [ 97.224599][ T6411] ? ksys_write+0x275/0x2d0 [ 97.224627][ T6411] __x64_sys_sendmmsg+0xa0/0xb0 [ 97.224646][ T6411] do_syscall_64+0xf3/0x230 [ 97.224666][ T6411] ? clear_bhb_loop+0x45/0xa0 [ 97.224686][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.224701][ T6411] RIP: 0033:0x7f603758d169 [ 97.224716][ T6411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.224729][ T6411] RSP: 002b:00007f60353d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 97.224747][ T6411] RAX: ffffffffffffffda RBX: 00007f60377a6080 RCX: 00007f603758d169 [ 97.224764][ T6411] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 97.224775][ T6411] RBP: 00007f60353d5090 R08: 0000000000000000 R09: 0000000000000000 [ 97.224784][ T6411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.224794][ T6411] R13: 0000000000000000 R14: 00007f60377a6080 R15: 00007ffca5082f28 [ 97.224822][ T6411] [ 97.777705][ T6403] lo speed is unknown, defaulting to 1000 [ 97.926250][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 97.946155][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 97.996571][ T6429] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.006931][ T6429] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.015830][ T6429] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.025089][ T6429] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.036264][ T6429] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 98.042370][ T6435] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 98.083721][ T6435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.102411][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.162'. [ 98.139698][ T6430] netlink: 'syz.4.159': attribute type 7 has an invalid length. [ 98.147826][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.159'. [ 98.208391][ T6435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.235782][ T6435] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 98.255586][ T6435] bond2: (slave vcan1): Error -95 calling set_mac_address [ 98.278283][ T6429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.302727][ T6432] lo speed is unknown, defaulting to 1000 [ 98.490840][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 98.551135][ T6452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.167'. [ 98.590092][ T6446] ipvlan2: entered promiscuous mode [ 98.821313][ T6454] lo speed is unknown, defaulting to 1000 [ 99.121644][ T6468] lo speed is unknown, defaulting to 1000 [ 99.852168][ T6475] netlink: 'syz.4.175': attribute type 7 has an invalid length. [ 99.887178][ T6475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.175'. [ 99.990121][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 100.246799][ T6499] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 100.302815][ T6499] netlink: 224 bytes leftover after parsing attributes in process `syz.3.182'. [ 100.811766][ T6516] lo speed is unknown, defaulting to 1000 [ 101.171625][ T6538] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 101.592496][ T6556] FAULT_INJECTION: forcing a failure. [ 101.592496][ T6556] name failslab, interval 1, probability 0, space 0, times 0 [ 101.616195][ T6556] CPU: 1 UID: 0 PID: 6556 Comm: syz.1.200 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 101.616221][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.616231][ T6556] Call Trace: [ 101.616237][ T6556] [ 101.616245][ T6556] dump_stack_lvl+0x241/0x360 [ 101.616274][ T6556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.616296][ T6556] ? __pfx__printk+0x10/0x10 [ 101.616321][ T6556] ? __pfx___might_resched+0x10/0x10 [ 101.616344][ T6556] should_fail_ex+0x424/0x570 [ 101.616375][ T6556] should_failslab+0xac/0x100 [ 101.616399][ T6556] __kmalloc_cache_noprof+0x73/0x370 [ 101.616419][ T6556] ? nfnetlink_rcv+0x1037/0x28f0 [ 101.616440][ T6556] nfnetlink_rcv+0x1037/0x28f0 [ 101.616501][ T6556] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 101.616568][ T6556] ? skb_clone+0x240/0x390 [ 101.616596][ T6556] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.616621][ T6556] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.616645][ T6556] netlink_unicast+0x7f8/0x9a0 [ 101.616673][ T6556] ? __pfx_netlink_unicast+0x10/0x10 [ 101.616695][ T6556] ? skb_put+0x114/0x1f0 [ 101.616721][ T6556] netlink_sendmsg+0x8c3/0xcd0 [ 101.616757][ T6556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.616783][ T6556] ? aa_sock_msg_perm+0x91/0x160 [ 101.616810][ T6556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.616829][ T6556] __sock_sendmsg+0x221/0x270 [ 101.616853][ T6556] ____sys_sendmsg+0x523/0x860 [ 101.616883][ T6556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.616897][ T6556] ? __fget_files+0x2a/0x420 [ 101.616922][ T6556] ? __fget_files+0x2a/0x420 [ 101.616954][ T6556] __sys_sendmsg+0x271/0x360 [ 101.616976][ T6556] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.617045][ T6556] ? do_syscall_64+0xb6/0x230 [ 101.617070][ T6556] do_syscall_64+0xf3/0x230 [ 101.617089][ T6556] ? clear_bhb_loop+0x45/0xa0 [ 101.617110][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.617125][ T6556] RIP: 0033:0x7f9c2e78d169 [ 101.617140][ T6556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.617153][ T6556] RSP: 002b:00007f9c2f665038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.617171][ T6556] RAX: ffffffffffffffda RBX: 00007f9c2e9a5fa0 RCX: 00007f9c2e78d169 [ 101.617183][ T6556] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 101.617193][ T6556] RBP: 00007f9c2f665090 R08: 0000000000000000 R09: 0000000000000000 [ 101.617203][ T6556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.617212][ T6556] R13: 0000000000000000 R14: 00007f9c2e9a5fa0 R15: 00007ffe73270018 [ 101.617239][ T6556] [ 101.881993][ T6558] __nla_validate_parse: 4 callbacks suppressed [ 101.882012][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.201'. [ 102.171004][ T6571] x_tables: duplicate underflow at hook 2 [ 102.357747][ T6575] lo speed is unknown, defaulting to 1000 [ 102.675422][ T6588] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 103.130222][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 103.183953][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 103.297331][ T6611] netlink: 'syz.3.213': attribute type 7 has an invalid length. [ 103.376876][ T6611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.213'. [ 103.416151][ T6625] netlink: 44 bytes leftover after parsing attributes in process `syz.2.219'. [ 103.635511][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 103.768872][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 103.833225][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 103.860301][ T6641] tipc: Started in network mode [ 103.867224][ T6641] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 103.901850][ T6647] netlink: 36 bytes leftover after parsing attributes in process `syz.4.224'. [ 103.925662][ T6641] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 103.956449][ T6641] tipc: Enabled bearer , priority 10 [ 104.078856][ T6644] lo speed is unknown, defaulting to 1000 [ 104.422602][ T6663] xt_addrtype: ipv6 does not support BROADCAST matching [ 104.525959][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 104.857413][ T6682] FAULT_INJECTION: forcing a failure. [ 104.857413][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 104.976188][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.3.233 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 104.976215][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.976225][ T6682] Call Trace: [ 104.976233][ T6682] [ 104.976240][ T6682] dump_stack_lvl+0x241/0x360 [ 104.976270][ T6682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.976292][ T6682] ? __pfx__printk+0x10/0x10 [ 104.976328][ T6682] ? __pfx___might_resched+0x10/0x10 [ 104.976352][ T6682] should_fail_ex+0x424/0x570 [ 104.976383][ T6682] should_failslab+0xac/0x100 [ 104.976406][ T6682] __kmalloc_noprof+0xdf/0x4d0 [ 104.976427][ T6682] ? security_inode_init_security+0x12e/0x490 [ 104.976456][ T6682] security_inode_init_security+0x12e/0x490 [ 104.976480][ T6682] ? __pfx_shmem_initxattrs+0x10/0x10 [ 104.976502][ T6682] ? __pfx_security_inode_init_security+0x10/0x10 [ 104.976524][ T6682] ? shmem_get_inode+0xc37/0xf20 [ 104.976554][ T6682] shmem_mknod+0x1ff/0x3d0 [ 104.976580][ T6682] vfs_mknod+0x36d/0x3b0 [ 104.976607][ T6682] unix_bind+0x5af/0xe40 [ 104.976637][ T6682] ? __pfx_unix_bind+0x10/0x10 [ 104.976666][ T6682] __sys_bind+0x1de/0x290 [ 104.976692][ T6682] ? __pfx___sys_bind+0x10/0x10 [ 104.976737][ T6682] __x64_sys_bind+0x7a/0x90 [ 104.976758][ T6682] do_syscall_64+0xf3/0x230 [ 104.976780][ T6682] ? clear_bhb_loop+0x45/0xa0 [ 104.976800][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.976816][ T6682] RIP: 0033:0x7f75d398d169 [ 104.976830][ T6682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.976843][ T6682] RSP: 002b:00007f75d4734038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 104.976863][ T6682] RAX: ffffffffffffffda RBX: 00007f75d3ba5fa0 RCX: 00007f75d398d169 [ 104.976875][ T6682] RDX: 000000000000006e RSI: 00002000000002c0 RDI: 0000000000000003 [ 104.976885][ T6682] RBP: 00007f75d4734090 R08: 0000000000000000 R09: 0000000000000000 [ 104.976895][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.976905][ T6682] R13: 0000000000000000 R14: 00007f75d3ba5fa0 R15: 00007fffef07cf38 [ 104.976934][ T6682] [ 105.263236][ T5900] tipc: Node number set to 1 [ 105.477233][ T6691] netlink: 'syz.0.235': attribute type 7 has an invalid length. [ 105.547509][ T6709] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 105.556785][ T6709] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 105.667164][ T6713] lo speed is unknown, defaulting to 1000 [ 105.719291][ T6715] FAULT_INJECTION: forcing a failure. [ 105.719291][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 105.741694][ T6715] CPU: 1 UID: 0 PID: 6715 Comm: syz.3.242 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 105.741721][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.741730][ T6715] Call Trace: [ 105.741737][ T6715] [ 105.741744][ T6715] dump_stack_lvl+0x241/0x360 [ 105.741771][ T6715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.741791][ T6715] ? __pfx__printk+0x10/0x10 [ 105.741817][ T6715] ? ref_tracker_alloc+0x316/0x4c0 [ 105.741837][ T6715] should_fail_ex+0x424/0x570 [ 105.741866][ T6715] should_failslab+0xac/0x100 [ 105.741889][ T6715] kmem_cache_alloc_noprof+0x78/0x390 [ 105.741908][ T6715] ? skb_clone+0x20c/0x390 [ 105.741930][ T6715] skb_clone+0x20c/0x390 [ 105.741951][ T6715] __netlink_deliver_tap+0x3c4/0x7f0 [ 105.741983][ T6715] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.742002][ T6715] netlink_deliver_tap+0x19d/0x1b0 [ 105.742023][ T6715] netlink_sendskb+0x68/0x140 [ 105.742043][ T6715] netlink_unicast+0x39f/0x9a0 [ 105.742058][ T6715] ? __asan_memcpy+0x40/0x70 [ 105.742086][ T6715] ? __pfx_netlink_unicast+0x10/0x10 [ 105.742114][ T6715] netlink_rcv_skb+0x296/0x480 [ 105.742137][ T6715] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.742160][ T6715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.742201][ T6715] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.742226][ T6715] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.742250][ T6715] netlink_unicast+0x7f8/0x9a0 [ 105.742287][ T6715] ? __pfx_netlink_unicast+0x10/0x10 [ 105.742309][ T6715] ? skb_put+0x114/0x1f0 [ 105.742337][ T6715] netlink_sendmsg+0x8c3/0xcd0 [ 105.742372][ T6715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.742397][ T6715] ? aa_sock_msg_perm+0x91/0x160 [ 105.742424][ T6715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.742443][ T6715] __sock_sendmsg+0x221/0x270 [ 105.742467][ T6715] ____sys_sendmsg+0x523/0x860 [ 105.742493][ T6715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.742507][ T6715] ? __fget_files+0x2a/0x420 [ 105.742531][ T6715] ? __fget_files+0x2a/0x420 [ 105.742562][ T6715] __sys_sendmsg+0x271/0x360 [ 105.742585][ T6715] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.742656][ T6715] ? do_syscall_64+0xb6/0x230 [ 105.742680][ T6715] do_syscall_64+0xf3/0x230 [ 105.742700][ T6715] ? clear_bhb_loop+0x45/0xa0 [ 105.742720][ T6715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.742734][ T6715] RIP: 0033:0x7f75d398d169 [ 105.742750][ T6715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.742762][ T6715] RSP: 002b:00007f75d4734038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.742780][ T6715] RAX: ffffffffffffffda RBX: 00007f75d3ba5fa0 RCX: 00007f75d398d169 [ 105.742792][ T6715] RDX: 0000000000004090 RSI: 0000200000000180 RDI: 0000000000000005 [ 105.742802][ T6715] RBP: 00007f75d4734090 R08: 0000000000000000 R09: 0000000000000000 [ 105.742812][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.742821][ T6715] R13: 0000000000000000 R14: 00007f75d3ba5fa0 R15: 00007fffef07cf38 [ 105.742846][ T6715] [ 105.764047][ T6718] IPv6: Can't replace route, no match found [ 106.198948][ T6729] xt_hashlimit: overflow, try lower: 0/0 [ 106.470492][ T6733] syzkaller1: entered promiscuous mode [ 106.483692][ T6733] syzkaller1: entered allmulticast mode [ 106.510015][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.777201][ T6753] netlink: 'syz.3.254': attribute type 7 has an invalid length. [ 106.905666][ T6769] __nla_validate_parse: 5 callbacks suppressed [ 106.905683][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 107.040435][ T6775] netlink: 148 bytes leftover after parsing attributes in process `syz.3.260'. [ 107.110355][ T6778] vlan3: entered promiscuous mode [ 107.122339][ T6778] vlan2: entered promiscuous mode [ 107.127991][ T6778] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 107.243153][ T6779] syzkaller0: entered promiscuous mode [ 107.257898][ T6779] syzkaller0: entered allmulticast mode [ 107.356023][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 108.578080][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 108.634167][ T6802] netlink: 'syz.0.270': attribute type 7 has an invalid length. [ 108.647035][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.270'. [ 108.662213][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.271'. [ 108.711493][ T6790] lo speed is unknown, defaulting to 1000 [ 108.713396][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 108.812510][ T6815] Cannot find set identified by id 0 to match [ 108.814420][ T6818] FAULT_INJECTION: forcing a failure. [ 108.814420][ T6818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.863210][ T6818] CPU: 1 UID: 0 PID: 6818 Comm: syz.4.274 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 108.863236][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.863245][ T6818] Call Trace: [ 108.863252][ T6818] [ 108.863260][ T6818] dump_stack_lvl+0x241/0x360 [ 108.863291][ T6818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.863311][ T6818] ? __pfx__printk+0x10/0x10 [ 108.863343][ T6818] should_fail_ex+0x424/0x570 [ 108.863374][ T6818] _copy_from_user+0x2d/0xb0 [ 108.863398][ T6818] copy_msghdr_from_user+0xb3/0x580 [ 108.863423][ T6818] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 108.863458][ T6818] do_recvmmsg+0x3bf/0xab0 [ 108.863486][ T6818] ? __pfx_do_recvmmsg+0x10/0x10 [ 108.863519][ T6818] ? rcu_read_lock_any_held+0xbb/0x160 [ 108.863539][ T6818] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 108.863562][ T6818] ? vfs_write+0xb29/0xd10 [ 108.863590][ T6818] ? ksys_write+0x24e/0x2d0 [ 108.863610][ T6818] ? __mutex_unlock_slowpath+0x229/0x800 [ 108.863640][ T6818] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.863658][ T6818] ? __fget_files+0x2a/0x420 [ 108.863694][ T6818] __x64_sys_recvmmsg+0x1ab/0x260 [ 108.863714][ T6818] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 108.863737][ T6818] ? do_syscall_64+0xb6/0x230 [ 108.863769][ T6818] do_syscall_64+0xf3/0x230 [ 108.863788][ T6818] ? clear_bhb_loop+0x45/0xa0 [ 108.863805][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.863818][ T6818] RIP: 0033:0x7f6dd058d169 [ 108.863832][ T6818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.863843][ T6818] RSP: 002b:00007f6dd14a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 108.863859][ T6818] RAX: ffffffffffffffda RBX: 00007f6dd07a5fa0 RCX: 00007f6dd058d169 [ 108.863869][ T6818] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 108.863879][ T6818] RBP: 00007f6dd14a1090 R08: 0000000000000000 R09: 0000000000000000 [ 108.863887][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.863895][ T6818] R13: 0000000000000000 R14: 00007f6dd07a5fa0 R15: 00007ffe9e878978 [ 108.863920][ T6818] [ 109.188016][ T6823] tipc: Started in network mode [ 109.200247][ T6823] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 109.235682][ T6823] tipc: Enabled bearer , priority 10 [ 109.403084][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 109.440858][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 109.465944][ T6843] FAULT_INJECTION: forcing a failure. [ 109.465944][ T6843] name failslab, interval 1, probability 0, space 0, times 0 [ 109.478896][ T6843] CPU: 1 UID: 0 PID: 6843 Comm: syz.0.283 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 109.478920][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.478929][ T6843] Call Trace: [ 109.478937][ T6843] [ 109.478944][ T6843] dump_stack_lvl+0x241/0x360 [ 109.478979][ T6843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.479001][ T6843] ? __pfx__printk+0x10/0x10 [ 109.479035][ T6843] should_fail_ex+0x424/0x570 [ 109.479065][ T6843] should_failslab+0xac/0x100 [ 109.479088][ T6843] __kmalloc_noprof+0xdf/0x4d0 [ 109.479108][ T6843] ? __kmalloc_cache_noprof+0x236/0x370 [ 109.479126][ T6843] ? nsim_fib_event_nb+0x287/0x10b0 [ 109.479151][ T6843] nsim_fib_event_nb+0x287/0x10b0 [ 109.479182][ T6843] notifier_call_chain+0x1a5/0x3f0 [ 109.479207][ T6843] ? atomic_notifier_call_chain+0x26/0x180 [ 109.479226][ T6843] atomic_notifier_call_chain+0xdb/0x180 [ 109.479248][ T6843] call_fib_notifiers+0x31/0x60 [ 109.479272][ T6843] fib6_add+0x1bde/0x4420 [ 109.479321][ T6843] ? __pfx_fib6_add+0x10/0x10 [ 109.479341][ T6843] ? do_raw_spin_lock+0x151/0x370 [ 109.479369][ T6843] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 109.479394][ T6843] ? ip6_route_add+0x76/0x160 [ 109.479420][ T6843] ip6_route_add+0x8b/0x160 [ 109.479444][ T6843] inet6_rtm_newroute+0x2a8/0x2100 [ 109.479492][ T6843] ? __lock_acquire+0xad5/0xd80 [ 109.479511][ T6843] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 109.479527][ T6843] ? __mutex_trylock_common+0x184/0x2e0 [ 109.479553][ T6843] ? __pfx___mutex_trylock_common+0x10/0x10 [ 109.479578][ T6843] ? rcu_is_watching+0x15/0xb0 [ 109.479598][ T6843] ? trace_contention_end+0x3c/0x120 [ 109.479618][ T6843] ? __mutex_lock+0x380/0x10c0 [ 109.479639][ T6843] ? aa_get_newest_label+0x101/0x6f0 [ 109.479693][ T6843] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 109.479713][ T6843] rtnetlink_rcv_msg+0x7c2/0xd70 [ 109.479733][ T6843] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 109.479758][ T6843] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.479787][ T6843] ? ref_tracker_free+0x63e/0x7e0 [ 109.479811][ T6843] netlink_rcv_skb+0x208/0x480 [ 109.479835][ T6843] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.479858][ T6843] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.479907][ T6843] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.479931][ T6843] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.479955][ T6843] netlink_unicast+0x7f8/0x9a0 [ 109.479989][ T6843] ? __pfx_netlink_unicast+0x10/0x10 [ 109.480011][ T6843] ? skb_put+0x114/0x1f0 [ 109.480039][ T6843] netlink_sendmsg+0x8c3/0xcd0 [ 109.480075][ T6843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.480101][ T6843] ? aa_sock_msg_perm+0x91/0x160 [ 109.480127][ T6843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.480147][ T6843] __sock_sendmsg+0x221/0x270 [ 109.480171][ T6843] ____sys_sendmsg+0x523/0x860 [ 109.480197][ T6843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.480210][ T6843] ? __fget_files+0x2a/0x420 [ 109.480237][ T6843] ? __fget_files+0x2a/0x420 [ 109.480269][ T6843] __sys_sendmsg+0x271/0x360 [ 109.480292][ T6843] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.480365][ T6843] ? do_syscall_64+0xb6/0x230 [ 109.480389][ T6843] do_syscall_64+0xf3/0x230 [ 109.480409][ T6843] ? clear_bhb_loop+0x45/0xa0 [ 109.480430][ T6843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.480445][ T6843] RIP: 0033:0x7f603758d169 [ 109.480461][ T6843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.480474][ T6843] RSP: 002b:00007f60353f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.480492][ T6843] RAX: ffffffffffffffda RBX: 00007f60377a5fa0 RCX: 00007f603758d169 [ 109.480504][ T6843] RDX: 0000000000004090 RSI: 0000200000000180 RDI: 0000000000000003 [ 109.480514][ T6843] RBP: 00007f60353f6090 R08: 0000000000000000 R09: 0000000000000000 [ 109.480524][ T6843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.480533][ T6843] R13: 0000000000000000 R14: 00007f60377a5fa0 R15: 00007ffca5082f28 [ 109.480562][ T6843] [ 109.963804][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.285'. [ 110.165699][ T6851] netlink: 'syz.1.286': attribute type 7 has an invalid length. [ 110.285285][ T47] tipc: Node number set to 4269801514 [ 110.329342][ T6871] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.338294][ T6871] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.347145][ T6871] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.356254][ T6871] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.382022][ T6871] vxlan0: entered promiscuous mode [ 110.407046][ T6871] vxlan0: entered allmulticast mode [ 110.479340][ T6875] lo speed is unknown, defaulting to 1000 [ 110.602413][ T6882] netlink: 'syz.3.298': attribute type 8 has an invalid length. [ 110.807541][ T6889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.816775][ T6889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.840449][ T6889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.866197][ T6889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.896356][ T6889] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 111.077724][ T6884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.098437][ T6901] ipvlan2: entered promiscuous mode [ 111.207556][ T6884] syz.2.299 (6884) used greatest stack depth: 19384 bytes left [ 111.313410][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 112.062280][ T6962] __nla_validate_parse: 8 callbacks suppressed [ 112.062298][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.326'. [ 112.082642][ T6968] FAULT_INJECTION: forcing a failure. [ 112.082642][ T6968] name failslab, interval 1, probability 0, space 0, times 0 [ 112.089508][ T6965] netlink: 'syz.3.328': attribute type 12 has an invalid length. [ 112.096337][ T6968] CPU: 0 UID: 0 PID: 6968 Comm: syz.1.327 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 112.096362][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.096371][ T6968] Call Trace: [ 112.096378][ T6968] [ 112.096385][ T6968] dump_stack_lvl+0x241/0x360 [ 112.096427][ T6968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.096448][ T6968] ? __pfx__printk+0x10/0x10 [ 112.096467][ T6968] ? nft_pernet+0x1f5/0x240 [ 112.096487][ T6968] ? __pfx___might_resched+0x10/0x10 [ 112.096510][ T6968] should_fail_ex+0x424/0x570 [ 112.096545][ T6968] should_failslab+0xac/0x100 [ 112.096568][ T6968] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 112.096590][ T6968] ? __alloc_skb+0x1c2/0x480 [ 112.096617][ T6968] __alloc_skb+0x1c2/0x480 [ 112.096645][ T6968] ? __pfx___alloc_skb+0x10/0x10 [ 112.096674][ T6968] ? netlink_ack_tlv_len+0x6e/0x200 [ 112.096697][ T6968] netlink_ack+0x147/0xa70 [ 112.096723][ T6968] ? __kasan_kmalloc+0x9d/0xb0 [ 112.096743][ T6968] ? nfnetlink_rcv+0x1095/0x28f0 [ 112.096765][ T6968] nfnetlink_rcv+0x2366/0x28f0 [ 112.096812][ T6968] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 112.096876][ T6968] ? skb_clone+0x240/0x390 [ 112.096903][ T6968] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.096927][ T6968] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.096951][ T6968] netlink_unicast+0x7f8/0x9a0 [ 112.096978][ T6968] ? __pfx_netlink_unicast+0x10/0x10 [ 112.097000][ T6968] ? skb_put+0x114/0x1f0 [ 112.097028][ T6968] netlink_sendmsg+0x8c3/0xcd0 [ 112.097061][ T6968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.097087][ T6968] ? aa_sock_msg_perm+0x91/0x160 [ 112.097114][ T6968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.097134][ T6968] __sock_sendmsg+0x221/0x270 [ 112.097157][ T6968] ____sys_sendmsg+0x523/0x860 [ 112.097182][ T6968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.097196][ T6968] ? __fget_files+0x2a/0x420 [ 112.097222][ T6968] ? __fget_files+0x2a/0x420 [ 112.097253][ T6968] __sys_sendmsg+0x271/0x360 [ 112.097275][ T6968] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.097341][ T6968] ? do_syscall_64+0xb6/0x230 [ 112.097365][ T6968] do_syscall_64+0xf3/0x230 [ 112.097385][ T6968] ? clear_bhb_loop+0x45/0xa0 [ 112.097404][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.097424][ T6968] RIP: 0033:0x7f9c2e78d169 [ 112.097439][ T6968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.097451][ T6968] RSP: 002b:00007f9c2f665038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.097469][ T6968] RAX: ffffffffffffffda RBX: 00007f9c2e9a5fa0 RCX: 00007f9c2e78d169 [ 112.097480][ T6968] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 112.097490][ T6968] RBP: 00007f9c2f665090 R08: 0000000000000000 R09: 0000000000000000 [ 112.097499][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.097508][ T6968] R13: 0000000000000000 R14: 00007f9c2e9a5fa0 R15: 00007ffe73270018 [ 112.097534][ T6968] [ 112.271319][ T6975] netlink: 'syz.4.329': attribute type 1 has an invalid length. [ 112.421226][ T6975] netlink: 224 bytes leftover after parsing attributes in process `syz.4.329'. [ 112.771291][ T6997] netlink: 104 bytes leftover after parsing attributes in process `syz.1.339'. [ 113.224939][ T7027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.352'. [ 113.257223][ T7027] netlink: 2 bytes leftover after parsing attributes in process `syz.3.352'. [ 113.260972][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 113.528573][ T7039] netlink: 92 bytes leftover after parsing attributes in process `syz.2.356'. [ 114.105553][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 114.106253][ T7055] xt_addrtype: ipv6 does not support BROADCAST matching [ 114.223574][ T7059] netlink: 76 bytes leftover after parsing attributes in process `syz.4.363'. [ 114.574378][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.368'. [ 114.823728][ T7087] lo speed is unknown, defaulting to 1000 [ 114.984341][ T7103] syzkaller1: entered promiscuous mode [ 115.014263][ T7103] syzkaller1: entered allmulticast mode [ 115.043545][ T7093] block nbd4: server does not support multiple connections per device. [ 115.064174][ T7093] block nbd4: shutting down sockets [ 115.462239][ T7125] vlan3: entered promiscuous mode [ 115.492956][ T7125] vlan2: entered promiscuous mode [ 115.522380][ T7125] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 115.569890][ T7135] netlink: 'syz.2.383': attribute type 6 has an invalid length. [ 115.950709][ T7157] FAULT_INJECTION: forcing a failure. [ 115.950709][ T7157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.998267][ T7157] CPU: 1 UID: 0 PID: 7157 Comm: syz.4.391 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 115.998294][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.998304][ T7157] Call Trace: [ 115.998310][ T7157] [ 115.998317][ T7157] dump_stack_lvl+0x241/0x360 [ 115.998348][ T7157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.998370][ T7157] ? __pfx__printk+0x10/0x10 [ 115.998403][ T7157] should_fail_ex+0x424/0x570 [ 115.998433][ T7157] _copy_to_user+0x31/0xb0 [ 115.998458][ T7157] simple_read_from_buffer+0xc4/0x170 [ 115.998485][ T7157] proc_fail_nth_read+0x1ef/0x260 [ 115.998514][ T7157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.998542][ T7157] ? rw_verify_area+0x246/0x630 [ 115.998558][ T7157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.998584][ T7157] vfs_read+0x21f/0xb90 [ 115.998607][ T7157] ? __pfx___mutex_lock+0x10/0x10 [ 115.998629][ T7157] ? __pfx_vfs_read+0x10/0x10 [ 115.998650][ T7157] ? __fget_files+0x2a/0x420 [ 115.998674][ T7157] ? __fget_files+0x39d/0x420 [ 115.998695][ T7157] ? __fget_files+0x2a/0x420 [ 115.998728][ T7157] ksys_read+0x19d/0x2d0 [ 115.998748][ T7157] ? __pfx_ksys_read+0x10/0x10 [ 115.998772][ T7157] ? do_syscall_64+0xb6/0x230 [ 115.998796][ T7157] do_syscall_64+0xf3/0x230 [ 115.998816][ T7157] ? clear_bhb_loop+0x45/0xa0 [ 115.998837][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.998853][ T7157] RIP: 0033:0x7f6dd058bb7c [ 115.998869][ T7157] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.998896][ T7157] RSP: 002b:00007f6dd14a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.998913][ T7157] RAX: ffffffffffffffda RBX: 00007f6dd07a5fa0 RCX: 00007f6dd058bb7c [ 115.998924][ T7157] RDX: 000000000000000f RSI: 00007f6dd14a10a0 RDI: 0000000000000004 [ 115.998933][ T7157] RBP: 00007f6dd14a1090 R08: 0000000000000000 R09: 0000000000000000 [ 115.998943][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.998953][ T7157] R13: 0000000000000000 R14: 00007f6dd07a5fa0 R15: 00007ffe9e878978 [ 115.998982][ T7157] [ 116.329232][ T7160] FAULT_INJECTION: forcing a failure. [ 116.329232][ T7160] name failslab, interval 1, probability 0, space 0, times 0 [ 116.368783][ T7160] CPU: 0 UID: 0 PID: 7160 Comm: syz.3.395 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 116.368809][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.368819][ T7160] Call Trace: [ 116.368825][ T7160] [ 116.368832][ T7160] dump_stack_lvl+0x241/0x360 [ 116.368861][ T7160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.368882][ T7160] ? __pfx__printk+0x10/0x10 [ 116.368910][ T7160] ? __pfx___might_resched+0x10/0x10 [ 116.368934][ T7160] should_fail_ex+0x424/0x570 [ 116.368964][ T7160] should_failslab+0xac/0x100 [ 116.368985][ T7160] __kmalloc_noprof+0xdf/0x4d0 [ 116.369004][ T7160] ? ethnl_default_notify+0x19c/0x9f0 [ 116.369029][ T7160] ethnl_default_notify+0x19c/0x9f0 [ 116.369049][ T7160] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 116.369064][ T7160] ? lockdep_hardirqs_on+0x9d/0x150 [ 116.369084][ T7160] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 116.369100][ T7160] ? __pfx_ethnl_default_notify+0x10/0x10 [ 116.369130][ T7160] ? __pfx_ethnl_set_coalesce+0x10/0x10 [ 116.369153][ T7160] ? mutex_is_locked+0x17/0x50 [ 116.369175][ T7160] ethnl_default_set_doit+0x678/0xb10 [ 116.369206][ T7160] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 116.369241][ T7160] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 116.369265][ T7160] genl_rcv_msg+0xb38/0xf00 [ 116.369290][ T7160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.369303][ T7160] ? __dev_queue_xmit+0x1780/0x3f60 [ 116.369317][ T7160] ? kasan_save_track+0x3f/0x80 [ 116.369330][ T7160] ? __kasan_slab_alloc+0x66/0x80 [ 116.369352][ T7160] ? do_syscall_64+0xf3/0x230 [ 116.369387][ T7160] ? __lock_acquire+0xad5/0xd80 [ 116.369403][ T7160] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 116.369439][ T7160] netlink_rcv_skb+0x208/0x480 [ 116.369461][ T7160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.369479][ T7160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.369525][ T7160] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.369552][ T7160] genl_rcv+0x28/0x40 [ 116.369567][ T7160] netlink_unicast+0x7f8/0x9a0 [ 116.369598][ T7160] ? __pfx_netlink_unicast+0x10/0x10 [ 116.369619][ T7160] ? skb_put+0x114/0x1f0 [ 116.369645][ T7160] netlink_sendmsg+0x8c3/0xcd0 [ 116.369678][ T7160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.369703][ T7160] ? aa_sock_msg_perm+0x91/0x160 [ 116.369729][ T7160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.369749][ T7160] __sock_sendmsg+0x221/0x270 [ 116.369774][ T7160] ____sys_sendmsg+0x523/0x860 [ 116.369798][ T7160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.369810][ T7160] ? __fget_files+0x2a/0x420 [ 116.369835][ T7160] ? __fget_files+0x2a/0x420 [ 116.369864][ T7160] __sys_sendmsg+0x271/0x360 [ 116.369886][ T7160] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.369961][ T7160] ? do_syscall_64+0xb6/0x230 [ 116.369982][ T7160] do_syscall_64+0xf3/0x230 [ 116.370002][ T7160] ? clear_bhb_loop+0x45/0xa0 [ 116.370022][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.370038][ T7160] RIP: 0033:0x7f75d398d169 [ 116.370054][ T7160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.370065][ T7160] RSP: 002b:00007f75d4734038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.370081][ T7160] RAX: ffffffffffffffda RBX: 00007f75d3ba5fa0 RCX: 00007f75d398d169 [ 116.370093][ T7160] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000d [ 116.370102][ T7160] RBP: 00007f75d4734090 R08: 0000000000000000 R09: 0000000000000000 [ 116.370111][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.370120][ T7160] R13: 0000000000000000 R14: 00007f75d3ba5fa0 R15: 00007fffef07cf38 [ 116.370148][ T7160] [ 116.766395][ T7155] netlink: 'syz.0.389': attribute type 7 has an invalid length. [ 116.972743][ T7178] IPv6: NLM_F_REPLACE set, but no existing node found! [ 116.980329][ T7181] FAULT_INJECTION: forcing a failure. [ 116.980329][ T7181] name failslab, interval 1, probability 0, space 0, times 0 [ 117.007072][ T7181] CPU: 0 UID: 0 PID: 7181 Comm: syz.4.400 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 117.007099][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.007109][ T7181] Call Trace: [ 117.007117][ T7181] [ 117.007124][ T7181] dump_stack_lvl+0x241/0x360 [ 117.007154][ T7181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.007176][ T7181] ? __pfx__printk+0x10/0x10 [ 117.007207][ T7181] ? __mutex_trylock_common+0x184/0x2e0 [ 117.007235][ T7181] should_fail_ex+0x424/0x570 [ 117.007266][ T7181] should_failslab+0xac/0x100 [ 117.007289][ T7181] __kmalloc_cache_noprof+0x73/0x370 [ 117.007310][ T7181] ? __hw_addr_add_ex+0x1fb/0x760 [ 117.007330][ T7181] __hw_addr_add_ex+0x1fb/0x760 [ 117.007354][ T7181] dev_addr_init+0x159/0x240 [ 117.007381][ T7181] ? __pfx_dev_addr_init+0x10/0x10 [ 117.007412][ T7181] ? sized_strscpy+0x9a/0x2b0 [ 117.007439][ T7181] alloc_netdev_mqs+0x307/0x1210 [ 117.007456][ T7181] ? __pfx_vxlan_setup+0x10/0x10 [ 117.007487][ T7181] rtnl_create_link+0x2f7/0xea0 [ 117.007515][ T7181] rtnl_newlink_create+0x2f2/0xcb0 [ 117.007539][ T7181] ? __mutex_lock+0xbe3/0x10c0 [ 117.007566][ T7181] ? __mutex_lock+0x5f3/0x10c0 [ 117.007586][ T7181] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 117.007613][ T7181] ? __pfx___mutex_lock+0x10/0x10 [ 117.007644][ T7181] ? ns_capable+0x8a/0xf0 [ 117.007665][ T7181] rtnl_newlink+0x18b0/0x1fe0 [ 117.007705][ T7181] ? __pfx_rtnl_newlink+0x10/0x10 [ 117.007724][ T7181] ? dev_hard_start_xmit+0x2d9/0x830 [ 117.007738][ T7181] ? __dev_queue_xmit+0x1b80/0x3f60 [ 117.007753][ T7181] ? __netlink_deliver_tap+0x561/0x7f0 [ 117.007773][ T7181] ? netlink_deliver_tap+0x19d/0x1b0 [ 117.007792][ T7181] ? netlink_unicast+0x7c6/0x9a0 [ 117.007809][ T7181] ? netlink_sendmsg+0x8c3/0xcd0 [ 117.007828][ T7181] ? __sock_sendmsg+0x221/0x270 [ 117.007846][ T7181] ? ____sys_sendmsg+0x523/0x860 [ 117.007859][ T7181] ? __sys_sendmmsg+0x3a0/0x7b0 [ 117.007872][ T7181] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 117.007886][ T7181] ? do_syscall_64+0xf3/0x230 [ 117.007903][ T7181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.007955][ T7181] ? kasan_quarantine_put+0xdc/0x230 [ 117.007970][ T7181] ? lockdep_hardirqs_on+0x9d/0x150 [ 117.007993][ T7181] ? nlmon_xmit+0xaf/0x100 [ 117.008022][ T7181] ? __local_bh_enable_ip+0x168/0x200 [ 117.008045][ T7181] ? lockdep_hardirqs_on+0x9d/0x150 [ 117.008072][ T7181] ? aa_get_newest_label+0x101/0x6f0 [ 117.008101][ T7181] ? __lock_acquire+0xad5/0xd80 [ 117.008139][ T7181] ? __pfx_rtnl_newlink+0x10/0x10 [ 117.008162][ T7181] rtnetlink_rcv_msg+0x80f/0xd70 [ 117.008187][ T7181] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 117.008213][ T7181] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.008242][ T7181] ? ref_tracker_free+0x63e/0x7e0 [ 117.008266][ T7181] netlink_rcv_skb+0x208/0x480 [ 117.008289][ T7181] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.008312][ T7181] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.008353][ T7181] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.008377][ T7181] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.008402][ T7181] netlink_unicast+0x7f8/0x9a0 [ 117.008431][ T7181] ? __pfx_netlink_unicast+0x10/0x10 [ 117.008453][ T7181] ? skb_put+0x114/0x1f0 [ 117.008481][ T7181] netlink_sendmsg+0x8c3/0xcd0 [ 117.008516][ T7181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.008543][ T7181] ? aa_sock_msg_perm+0x91/0x160 [ 117.008570][ T7181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.008590][ T7181] __sock_sendmsg+0x221/0x270 [ 117.008613][ T7181] ____sys_sendmsg+0x523/0x860 [ 117.008636][ T7181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.008649][ T7181] ? __fget_files+0x2a/0x420 [ 117.008673][ T7181] ? __fget_files+0x2a/0x420 [ 117.008706][ T7181] __sys_sendmmsg+0x3a0/0x7b0 [ 117.008736][ T7181] ? __pfx___sys_sendmmsg+0x10/0x10 [ 117.008785][ T7181] ? rcu_read_lock_any_held+0xbb/0x160 [ 117.008806][ T7181] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 117.008830][ T7181] ? vfs_write+0xb29/0xd10 [ 117.008858][ T7181] ? ksys_write+0x24e/0x2d0 [ 117.008880][ T7181] ? __mutex_unlock_slowpath+0x229/0x800 [ 117.008930][ T7181] ? ksys_write+0x275/0x2d0 [ 117.008961][ T7181] __x64_sys_sendmmsg+0xa0/0xb0 [ 117.008980][ T7181] do_syscall_64+0xf3/0x230 [ 117.009000][ T7181] ? clear_bhb_loop+0x45/0xa0 [ 117.009020][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.009036][ T7181] RIP: 0033:0x7f6dd058d169 [ 117.009051][ T7181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.009063][ T7181] RSP: 002b:00007f6dd14a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 117.009082][ T7181] RAX: ffffffffffffffda RBX: 00007f6dd07a5fa0 RCX: 00007f6dd058d169 [ 117.009094][ T7181] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 117.009105][ T7181] RBP: 00007f6dd14a1090 R08: 0000000000000000 R09: 0000000000000000 [ 117.009115][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.009124][ T7181] R13: 0000000000000000 R14: 00007f6dd07a5fa0 R15: 00007ffe9e878978 [ 117.009152][ T7181] [ 117.914070][ T7210] __nla_validate_parse: 8 callbacks suppressed [ 117.914099][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 118.106197][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'. [ 118.544855][ T7252] sit0: entered promiscuous mode [ 118.550010][ T7252] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 118.599783][ T7252] netlink: 1 bytes leftover after parsing attributes in process `syz.2.418'. [ 118.784694][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'. [ 118.895880][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 118.969536][ T7262] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.993966][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 119.011502][ T7262] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.026501][ T7262] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.036973][ T7262] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.052325][ T7262] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 119.120774][ T7258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.147219][ T7275] xt_TCPMSS: Only works on TCP SYN packets [ 119.157372][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 119.576646][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 119.627873][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 119.638012][ T7310] netlink: 'syz.2.444': attribute type 4 has an invalid length. [ 119.756489][ T30] audit: type=1800 audit(1744643133.678:2): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.447" name="memory.events" dev="tmpfs" ino=460 res=0 errno=0 [ 119.758200][ T7306] syzkaller0: entered promiscuous mode [ 119.787243][ T30] audit: type=1804 audit(1744643133.708:3): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.447" name="memory.events" dev="tmpfs" ino=460 res=1 errno=0 [ 119.789775][ T7306] syzkaller0: entered allmulticast mode [ 119.848410][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 119.872732][ T7309] lo speed is unknown, defaulting to 1000 [ 120.367193][ T7318] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.796019][ T7318] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.980082][ T7318] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.054346][ T7341] lo speed is unknown, defaulting to 1000 [ 122.280249][ T7318] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.309460][ T7361] xt_hashlimit: overflow, try lower: 0/0 [ 122.550778][ T7318] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.608263][ T7318] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.653295][ T7318] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.688597][ T7318] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.714221][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.952012][ T7378] lo speed is unknown, defaulting to 1000 [ 123.243462][ T7398] __nla_validate_parse: 9 callbacks suppressed [ 123.243479][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 123.394802][ T7404] netlink: 'syz.2.476': attribute type 58 has an invalid length. [ 123.405177][ T7404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.476'. [ 123.441900][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.449548][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.571287][ T7400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.650690][ T7409] FAULT_INJECTION: forcing a failure. [ 123.650690][ T7409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.679928][ T7409] CPU: 0 UID: 0 PID: 7409 Comm: syz.1.479 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 123.679956][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.679966][ T7409] Call Trace: [ 123.679973][ T7409] [ 123.679980][ T7409] dump_stack_lvl+0x241/0x360 [ 123.680000][ T7409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.680012][ T7409] ? __pfx__printk+0x10/0x10 [ 123.680030][ T7409] should_fail_ex+0x424/0x570 [ 123.680047][ T7409] _copy_to_user+0x31/0xb0 [ 123.680062][ T7409] bpf_test_finish+0x626/0x930 [ 123.680080][ T7409] ? __pfx_bpf_test_finish+0x10/0x10 [ 123.680095][ T7409] ? convert_skb_to___skb+0x2d7/0x510 [ 123.680109][ T7409] bpf_prog_test_run_skb+0x1018/0x1850 [ 123.680132][ T7409] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 123.680143][ T7409] ? __fget_files+0x2a/0x420 [ 123.680159][ T7409] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 123.680171][ T7409] bpf_prog_test_run+0x2e4/0x360 [ 123.680184][ T7409] __sys_bpf+0x4ee/0x8b0 [ 123.680194][ T7409] ? __pfx___sys_bpf+0x10/0x10 [ 123.680210][ T7409] ? ksys_write+0x275/0x2d0 [ 123.680227][ T7409] __x64_sys_bpf+0x7c/0x90 [ 123.680240][ T7409] do_syscall_64+0xf3/0x230 [ 123.680254][ T7409] ? clear_bhb_loop+0x45/0xa0 [ 123.680265][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.680274][ T7409] RIP: 0033:0x7f9c2e78d169 [ 123.680284][ T7409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.680294][ T7409] RSP: 002b:00007f9c2f665038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.680311][ T7409] RAX: ffffffffffffffda RBX: 00007f9c2e9a5fa0 RCX: 00007f9c2e78d169 [ 123.680323][ T7409] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 123.680332][ T7409] RBP: 00007f9c2f665090 R08: 0000000000000000 R09: 0000000000000000 [ 123.680342][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.680351][ T7409] R13: 0000000000000000 R14: 00007f9c2e9a5fa0 R15: 00007ffe73270018 [ 123.680376][ T7409] [ 123.892964][ T7400] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.902073][ T7400] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.912360][ T7400] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.921444][ T7400] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.015330][ T7400] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.024526][ T7400] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.033986][ T7400] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.042959][ T7400] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.062607][ T7400] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.071866][ T7400] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.080904][ T7400] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.090089][ T7400] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.322487][ T7430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.485'. [ 124.337911][ T7430] netlink: 168 bytes leftover after parsing attributes in process `syz.2.485'. [ 124.351252][ T7430] netlink: 168 bytes leftover after parsing attributes in process `syz.2.485'. [ 124.384169][ T7430] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 124.460583][ T7428] lo speed is unknown, defaulting to 1000 [ 124.666282][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 124.675739][ T7453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.491'. [ 124.706845][ T7450] veth3: entered promiscuous mode [ 124.713666][ T7435] lo speed is unknown, defaulting to 1000 [ 124.719402][ T7450] tipc: Started in network mode [ 124.719431][ T7450] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 124.719475][ T7450] tipc: Enabling of bearer rejected, failed to enable media [ 124.768233][ T7457] FAULT_INJECTION: forcing a failure. [ 124.768233][ T7457] name failslab, interval 1, probability 0, space 0, times 0 [ 124.771509][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.492'. [ 124.781133][ T7457] CPU: 0 UID: 0 PID: 7457 Comm: syz.1.493 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 124.781159][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.781169][ T7457] Call Trace: [ 124.781175][ T7457] [ 124.781182][ T7457] dump_stack_lvl+0x241/0x360 [ 124.781212][ T7457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.781233][ T7457] ? __pfx__printk+0x10/0x10 [ 124.781260][ T7457] ? ref_tracker_alloc+0x316/0x4c0 [ 124.781280][ T7457] should_fail_ex+0x424/0x570 [ 124.781309][ T7457] should_failslab+0xac/0x100 [ 124.781332][ T7457] kmem_cache_alloc_noprof+0x78/0x390 [ 124.781352][ T7457] ? skb_clone+0x20c/0x390 [ 124.781373][ T7457] skb_clone+0x20c/0x390 [ 124.781393][ T7457] __netlink_deliver_tap+0x3c4/0x7f0 [ 124.781427][ T7457] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.781447][ T7457] netlink_deliver_tap+0x19d/0x1b0 [ 124.781469][ T7457] netlink_sendskb+0x68/0x140 [ 124.781489][ T7457] netlink_unicast+0x39f/0x9a0 [ 124.781502][ T7457] ? __asan_memcpy+0x40/0x70 [ 124.781523][ T7457] ? __pfx_netlink_unicast+0x10/0x10 [ 124.781552][ T7457] nfnetlink_rcv+0x2366/0x28f0 [ 124.781612][ T7457] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 124.781678][ T7457] ? skb_clone+0x240/0x390 [ 124.781705][ T7457] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.781729][ T7457] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.781752][ T7457] netlink_unicast+0x7f8/0x9a0 [ 124.781779][ T7457] ? __pfx_netlink_unicast+0x10/0x10 [ 124.781800][ T7457] ? skb_put+0x114/0x1f0 [ 124.781828][ T7457] netlink_sendmsg+0x8c3/0xcd0 [ 124.781862][ T7457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.781887][ T7457] ? aa_sock_msg_perm+0x91/0x160 [ 124.781914][ T7457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.781934][ T7457] __sock_sendmsg+0x221/0x270 [ 124.781957][ T7457] ____sys_sendmsg+0x523/0x860 [ 124.781991][ T7457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.782005][ T7457] ? __fget_files+0x2a/0x420 [ 124.782032][ T7457] ? __fget_files+0x2a/0x420 [ 124.782062][ T7457] __sys_sendmsg+0x271/0x360 [ 124.782083][ T7457] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.782151][ T7457] ? do_syscall_64+0xb6/0x230 [ 124.782175][ T7457] do_syscall_64+0xf3/0x230 [ 124.782195][ T7457] ? clear_bhb_loop+0x45/0xa0 [ 124.782215][ T7457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.782230][ T7457] RIP: 0033:0x7f9c2e78d169 [ 124.782245][ T7457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.782257][ T7457] RSP: 002b:00007f9c2f665038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.782275][ T7457] RAX: ffffffffffffffda RBX: 00007f9c2e9a5fa0 RCX: 00007f9c2e78d169 [ 124.782286][ T7457] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 124.782296][ T7457] RBP: 00007f9c2f665090 R08: 0000000000000000 R09: 0000000000000000 [ 124.782306][ T7457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.782314][ T7457] R13: 0000000000000000 R14: 00007f9c2e9a5fa0 R15: 00007ffe73270018 [ 124.782340][ T7457] [ 125.165481][ T7462] netlink: 248 bytes leftover after parsing attributes in process `syz.3.495'. [ 125.198442][ T7462] netlink: 3 bytes leftover after parsing attributes in process `syz.3.495'. [ 125.252300][ T7468] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 125.305577][ T7462] 0ªX¹¦À: renamed from caif0 [ 125.315936][ T7462] 0ªX¹¦À: entered allmulticast mode [ 125.321281][ T7462] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 125.500310][ T7477] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20003 [ 125.781024][ T7500] Unknown options in mask 1f4 [ 125.801043][ T7500] nbd: couldn't find a device at index 135 [ 125.809286][ T7502] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 127.287859][ T7540] netlink: 'syz.3.525': attribute type 10 has an invalid length. [ 127.438280][ T7549] Cannot find set identified by id 0 to match [ 128.176834][ T7583] FAULT_INJECTION: forcing a failure. [ 128.176834][ T7583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.186008][ T7581] sctp: [Deprecated]: syz.3.541 (pid 7581) Use of int in max_burst socket option. [ 128.186008][ T7581] Use struct sctp_assoc_value instead [ 128.205958][ T7583] CPU: 1 UID: 0 PID: 7583 Comm: syz.0.542 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 128.205984][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.205993][ T7583] Call Trace: [ 128.206000][ T7583] [ 128.206007][ T7583] dump_stack_lvl+0x241/0x360 [ 128.206037][ T7583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.206059][ T7583] ? __pfx__printk+0x10/0x10 [ 128.206092][ T7583] should_fail_ex+0x424/0x570 [ 128.206122][ T7583] _copy_to_user+0x31/0xb0 [ 128.206147][ T7583] simple_read_from_buffer+0xc4/0x170 [ 128.206174][ T7583] proc_fail_nth_read+0x1ef/0x260 [ 128.206202][ T7583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.206230][ T7583] ? rw_verify_area+0x246/0x630 [ 128.206246][ T7583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.206272][ T7583] vfs_read+0x21f/0xb90 [ 128.206295][ T7583] ? __pfx___mutex_lock+0x10/0x10 [ 128.206317][ T7583] ? __pfx_vfs_read+0x10/0x10 [ 128.206338][ T7583] ? __fget_files+0x2a/0x420 [ 128.206362][ T7583] ? __fget_files+0x39d/0x420 [ 128.206383][ T7583] ? __fget_files+0x2a/0x420 [ 128.206415][ T7583] ksys_read+0x19d/0x2d0 [ 128.206435][ T7583] ? __pfx_ksys_read+0x10/0x10 [ 128.206459][ T7583] ? do_syscall_64+0xb6/0x230 [ 128.206482][ T7583] do_syscall_64+0xf3/0x230 [ 128.206502][ T7583] ? clear_bhb_loop+0x45/0xa0 [ 128.206523][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.206538][ T7583] RIP: 0033:0x7f603758bb7c [ 128.206553][ T7583] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 128.206566][ T7583] RSP: 002b:00007f60353f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.206584][ T7583] RAX: ffffffffffffffda RBX: 00007f60377a5fa0 RCX: 00007f603758bb7c [ 128.206595][ T7583] RDX: 000000000000000f RSI: 00007f60353f60a0 RDI: 0000000000000009 [ 128.206605][ T7583] RBP: 00007f60353f6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.206615][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.206624][ T7583] R13: 0000000000000000 R14: 00007f60377a5fa0 R15: 00007ffca5082f28 [ 128.206653][ T7583] [ 128.486973][ T7589] __nla_validate_parse: 44 callbacks suppressed [ 128.486989][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 128.513638][ T7588] tipc: Enabling of bearer rejected, failed to enable media [ 128.550034][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 128.650674][ T7595] tc_dump_action: action bad kind [ 128.762105][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.769627][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.790896][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d105400: rx timeout, send abort [ 128.851701][ T7599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.869056][ T7599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.895824][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 128.950369][ T7599] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.961801][ T7599] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.971961][ T7599] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.982985][ T7599] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.027429][ T7599] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 129.038052][ T7599] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 129.047171][ T7599] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 129.056160][ T7599] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 129.066827][ T7599] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.076140][ T7599] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.085447][ T7599] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.094737][ T7599] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.107868][ T5890] lo speed is unknown, defaulting to 1000 [ 129.108043][ T7602] FAULT_INJECTION: forcing a failure. [ 129.108043][ T7602] name failslab, interval 1, probability 0, space 0, times 0 [ 129.113864][ T5890] syz1: Port: 1 Link DOWN [ 129.132644][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz.2.550 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 129.132670][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.132679][ T7602] Call Trace: [ 129.132687][ T7602] [ 129.132695][ T7602] dump_stack_lvl+0x241/0x360 [ 129.132726][ T7602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.132751][ T7602] ? __pfx__printk+0x10/0x10 [ 129.132775][ T7602] ? __pfx___might_resched+0x10/0x10 [ 129.132796][ T7602] should_fail_ex+0x424/0x570 [ 129.132824][ T7602] should_failslab+0xac/0x100 [ 129.132846][ T7602] __kmalloc_cache_noprof+0x73/0x370 [ 129.132866][ T7602] ? alloc_netdev_mqs+0xc1a/0x1210 [ 129.132882][ T7602] ? __xdp_rxq_info_reg+0x186/0x290 [ 129.132910][ T7602] alloc_netdev_mqs+0xc1a/0x1210 [ 129.132938][ T7602] rtnl_create_link+0x2f7/0xea0 [ 129.132966][ T7602] rtnl_newlink_create+0x2f2/0xcb0 [ 129.132991][ T7602] ? __mutex_lock+0xbe3/0x10c0 [ 129.133019][ T7602] ? __mutex_lock+0x5f3/0x10c0 [ 129.133039][ T7602] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 129.133074][ T7602] ? __pfx___mutex_lock+0x10/0x10 [ 129.133106][ T7602] ? ns_capable+0x8a/0xf0 [ 129.133126][ T7602] rtnl_newlink+0x18b0/0x1fe0 [ 129.133168][ T7602] ? __pfx_rtnl_newlink+0x10/0x10 [ 129.133187][ T7602] ? __lock_acquire+0xad5/0xd80 [ 129.133208][ T7602] ? __lock_acquire+0xad5/0xd80 [ 129.133229][ T7602] ? __lock_acquire+0xad5/0xd80 [ 129.133247][ T7602] ? __lock_acquire+0xad5/0xd80 [ 129.133280][ T7602] ? is_bpf_text_address+0x26/0x2a0 [ 129.133298][ T7602] ? 0xffffffffa0000950 [ 129.133314][ T7602] ? is_bpf_text_address+0x288/0x2a0 [ 129.133330][ T7602] ? is_bpf_text_address+0x26/0x2a0 [ 129.133346][ T7602] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 129.133370][ T7602] ? kernel_text_address+0xa7/0xe0 [ 129.133394][ T7602] ? __kernel_text_address+0xd/0x40 [ 129.133422][ T7602] ? aa_get_newest_label+0x101/0x6f0 [ 129.133452][ T7602] ? __lock_acquire+0xad5/0xd80 [ 129.133485][ T7602] ? __pfx_rtnl_newlink+0x10/0x10 [ 129.133507][ T7602] rtnetlink_rcv_msg+0x80f/0xd70 [ 129.133526][ T7602] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 129.133551][ T7602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.133570][ T7602] ? __lock_acquire+0xad5/0xd80 [ 129.133598][ T7602] netlink_rcv_skb+0x208/0x480 [ 129.133621][ T7602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.133643][ T7602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.133686][ T7602] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.133710][ T7602] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.133734][ T7602] netlink_unicast+0x7f8/0x9a0 [ 129.133765][ T7602] ? __pfx_netlink_unicast+0x10/0x10 [ 129.133787][ T7602] ? skb_put+0x114/0x1f0 [ 129.133815][ T7602] netlink_sendmsg+0x8c3/0xcd0 [ 129.133853][ T7602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.133876][ T7602] ? aa_sock_msg_perm+0x91/0x160 [ 129.133902][ T7602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.133922][ T7602] __sock_sendmsg+0x221/0x270 [ 129.133947][ T7602] ____sys_sendmsg+0x523/0x860 [ 129.133973][ T7602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.133988][ T7602] ? __fget_files+0x2a/0x420 [ 129.134013][ T7602] ? __fget_files+0x2a/0x420 [ 129.134047][ T7602] __sys_sendmmsg+0x3a0/0x7b0 [ 129.134086][ T7602] ? __pfx___sys_sendmmsg+0x10/0x10 [ 129.134144][ T7602] ? rcu_read_lock_any_held+0xbb/0x160 [ 129.134165][ T7602] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 129.134189][ T7602] ? vfs_write+0xb29/0xd10 [ 129.134219][ T7602] ? ksys_write+0x24e/0x2d0 [ 129.134241][ T7602] ? __mutex_unlock_slowpath+0x229/0x800 [ 129.134296][ T7602] ? ksys_write+0x275/0x2d0 [ 129.134327][ T7602] __x64_sys_sendmmsg+0xa0/0xb0 [ 129.134347][ T7602] do_syscall_64+0xf3/0x230 [ 129.134368][ T7602] ? clear_bhb_loop+0x45/0xa0 [ 129.134389][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.134406][ T7602] RIP: 0033:0x7f01c218d169 [ 129.134421][ T7602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.134434][ T7602] RSP: 002b:00007f01c2fbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 129.134453][ T7602] RAX: ffffffffffffffda RBX: 00007f01c23a5fa0 RCX: 00007f01c218d169 [ 129.134465][ T7602] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 129.134477][ T7602] RBP: 00007f01c2fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 129.134487][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.134498][ T7602] R13: 0000000000000000 R14: 00007f01c23a5fa0 R15: 00007fff8fc4fe88 [ 129.134528][ T7602] [ 129.291593][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d105c00: rx timeout, send abort [ 129.385646][ T7605] tipc: Enabling of bearer rejected, failed to enable media [ 129.387967][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d105400: abort rx timeout. Force session deactivation [ 129.573145][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.552'. [ 129.814714][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'. [ 129.850838][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 129.887777][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d105c00: abort rx timeout. Force session deactivation [ 129.993128][ T7640] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 130.018077][ T7640] netlink: 224 bytes leftover after parsing attributes in process `syz.1.563'. [ 130.063514][ T7647] FAULT_INJECTION: forcing a failure. [ 130.063514][ T7647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.109760][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.0.565 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 130.109786][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.109796][ T7647] Call Trace: [ 130.109803][ T7647] [ 130.109809][ T7647] dump_stack_lvl+0x241/0x360 [ 130.109840][ T7647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.109861][ T7647] ? __pfx__printk+0x10/0x10 [ 130.109893][ T7647] should_fail_ex+0x424/0x570 [ 130.109928][ T7647] _copy_to_user+0x31/0xb0 [ 130.109952][ T7647] simple_read_from_buffer+0xc4/0x170 [ 130.109979][ T7647] proc_fail_nth_read+0x1ef/0x260 [ 130.110018][ T7647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.110044][ T7647] ? rw_verify_area+0x246/0x630 [ 130.110060][ T7647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.110085][ T7647] vfs_read+0x21f/0xb90 [ 130.110106][ T7647] ? __pfx___mutex_lock+0x10/0x10 [ 130.110127][ T7647] ? __pfx_vfs_read+0x10/0x10 [ 130.110147][ T7647] ? __fget_files+0x2a/0x420 [ 130.110170][ T7647] ? __fget_files+0x39d/0x420 [ 130.110190][ T7647] ? __fget_files+0x2a/0x420 [ 130.110220][ T7647] ksys_read+0x19d/0x2d0 [ 130.110239][ T7647] ? __pfx_ksys_read+0x10/0x10 [ 130.110263][ T7647] ? do_syscall_64+0xb6/0x230 [ 130.110287][ T7647] do_syscall_64+0xf3/0x230 [ 130.110305][ T7647] ? clear_bhb_loop+0x45/0xa0 [ 130.110324][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.110339][ T7647] RIP: 0033:0x7f603758bb7c [ 130.110353][ T7647] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 130.110366][ T7647] RSP: 002b:00007f60353f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.110384][ T7647] RAX: ffffffffffffffda RBX: 00007f60377a5fa0 RCX: 00007f603758bb7c [ 130.110396][ T7647] RDX: 000000000000000f RSI: 00007f60353f60a0 RDI: 0000000000000005 [ 130.110407][ T7647] RBP: 00007f60353f6090 R08: 0000000000000000 R09: 0000000000000000 [ 130.110417][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.110426][ T7647] R13: 0000000000000000 R14: 00007f60377a5fa0 R15: 00007ffca5082f28 [ 130.110455][ T7647] [ 130.388349][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.567'. [ 130.535102][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 130.690867][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 130.910703][ T7686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.549529][ T7724] FAULT_INJECTION: forcing a failure. [ 131.549529][ T7724] name failslab, interval 1, probability 0, space 0, times 0 [ 131.562467][ T7724] CPU: 1 UID: 0 PID: 7724 Comm: syz.1.592 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 131.562492][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.562502][ T7724] Call Trace: [ 131.562510][ T7724] [ 131.562517][ T7724] dump_stack_lvl+0x241/0x360 [ 131.562546][ T7724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.562568][ T7724] ? __pfx__printk+0x10/0x10 [ 131.562598][ T7724] should_fail_ex+0x424/0x570 [ 131.562635][ T7724] should_failslab+0xac/0x100 [ 131.562659][ T7724] kmem_cache_alloc_noprof+0x78/0x390 [ 131.562680][ T7724] ? dst_alloc+0x12b/0x190 [ 131.562700][ T7724] dst_alloc+0x12b/0x190 [ 131.562722][ T7724] ip_route_input_rcu+0x22b3/0x3930 [ 131.562764][ T7724] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 131.562786][ T7724] ? lockdep_hardirqs_on+0x9d/0x150 [ 131.562833][ T7724] ? ip_route_input_noref+0xaf/0x250 [ 131.562855][ T7724] ip_route_input_noref+0x169/0x250 [ 131.562878][ T7724] ? __pfx_ip_route_input_noref+0x10/0x10 [ 131.562906][ T7724] ? ipt_do_table+0x314/0x1870 [ 131.562931][ T7724] ip_rcv_finish_core+0x5b4/0x1b60 [ 131.562961][ T7724] ip_rcv_finish+0x14a/0x560 [ 131.562977][ T7724] ? NF_HOOK+0x38c/0x450 [ 131.562996][ T7724] NF_HOOK+0x3a0/0x450 [ 131.563017][ T7724] ? __pfx_ip_rcv_finish+0x10/0x10 [ 131.563036][ T7724] ? NF_HOOK+0x9e/0x450 [ 131.563054][ T7724] ? __pfx_NF_HOOK+0x10/0x10 [ 131.563070][ T7724] ? ip_rcv_core+0x80c/0xd20 [ 131.563091][ T7724] ? __pfx_ip_rcv_finish+0x10/0x10 [ 131.563118][ T7724] ? __pfx_ip_rcv+0x10/0x10 [ 131.563138][ T7724] __netif_receive_skb+0x2c9/0x670 [ 131.563166][ T7724] ? __pfx___netif_receive_skb+0x10/0x10 [ 131.563201][ T7724] ? netif_receive_skb+0x133/0x890 [ 131.563219][ T7724] ? netif_receive_skb+0x133/0x890 [ 131.563239][ T7724] netif_receive_skb+0x1ea/0x890 [ 131.563258][ T7724] ? tun_rx_batched+0x14b/0x8d0 [ 131.563282][ T7724] ? __pfx_netif_receive_skb+0x10/0x10 [ 131.563312][ T7724] ? tun_rx_batched+0x14b/0x8d0 [ 131.563333][ T7724] tun_rx_batched+0x1a4/0x8d0 [ 131.563360][ T7724] ? __lock_acquire+0xad5/0xd80 [ 131.563380][ T7724] ? __pfx_tun_rx_batched+0x10/0x10 [ 131.563421][ T7724] ? tun_get_user+0x2a99/0x47c0 [ 131.563443][ T7724] ? tun_get_user+0x2a99/0x47c0 [ 131.563466][ T7724] tun_get_user+0x2fec/0x47c0 [ 131.563492][ T7724] ? tun_get_user+0x852/0x47c0 [ 131.563534][ T7724] ? aa_file_perm+0x139/0xf60 [ 131.563557][ T7724] ? aa_file_perm+0x3f1/0xf60 [ 131.563578][ T7724] ? __pfx_tun_get_user+0x10/0x10 [ 131.563629][ T7724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.563666][ T7724] ? tun_get+0x1e/0x2f0 [ 131.563691][ T7724] ? tun_get+0x1e/0x2f0 [ 131.563712][ T7724] ? tun_get+0x27d/0x2f0 [ 131.563735][ T7724] tun_chr_write_iter+0x10d/0x1f0 [ 131.563763][ T7724] vfs_write+0x70f/0xd10 [ 131.563788][ T7724] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 131.563813][ T7724] ? __pfx_vfs_write+0x10/0x10 [ 131.563834][ T7724] ? __fget_files+0x2a/0x420 [ 131.563861][ T7724] ? __fget_files+0x2a/0x420 [ 131.563892][ T7724] ksys_write+0x19d/0x2d0 [ 131.563912][ T7724] ? __pfx_ksys_write+0x10/0x10 [ 131.563936][ T7724] ? do_syscall_64+0xb6/0x230 [ 131.563960][ T7724] do_syscall_64+0xf3/0x230 [ 131.563981][ T7724] ? clear_bhb_loop+0x45/0xa0 [ 131.564002][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.564017][ T7724] RIP: 0033:0x7f9c2e78bc1f [ 131.564033][ T7724] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 131.564047][ T7724] RSP: 002b:00007f9c2f665000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.564066][ T7724] RAX: ffffffffffffffda RBX: 00007f9c2e9a5fa0 RCX: 00007f9c2e78bc1f [ 131.564078][ T7724] RDX: 000000000000002a RSI: 0000200000000700 RDI: 00000000000000c8 [ 131.564089][ T7724] RBP: 00007f9c2f665090 R08: 0000000000000000 R09: 0000000000000000 [ 131.564099][ T7724] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 131.564109][ T7724] R13: 0000000000000001 R14: 00007f9c2e9a5fa0 R15: 00007ffe73270018 [ 131.564138][ T7724] [ 132.076485][ T7730] lo speed is unknown, defaulting to 1000 [ 132.555931][ T7736] lo speed is unknown, defaulting to 1000 [ 132.919587][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.926515][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.147738][ T7791] tipc: Enabling of bearer rejected, failed to enable media [ 133.283370][ T7797] Cannot find set identified by id 0 to match [ 133.665356][ T7818] pim6reg: entered allmulticast mode [ 133.679044][ T7818] pim6reg: left allmulticast mode [ 133.728058][ T7820] __nla_validate_parse: 11 callbacks suppressed [ 133.728078][ T7820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.625'. [ 133.814930][ T7822] tun0: tun_chr_ioctl cmd 1074025673 [ 133.820383][ T7822] tun0: tun_chr_ioctl cmd 1074025673 [ 133.906544][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 134.028218][ T7839] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 134.122396][ T7848] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 134.235030][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'. [ 134.282241][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 134.298913][ T7855] bond2: (slave gretap1): making interface the new active one [ 134.308205][ T7855] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 134.356398][ T7867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.634'. [ 134.379495][ T7863] veth1_to_bond: entered allmulticast mode [ 134.385711][ T7863] veth1_to_bond: entered promiscuous mode [ 134.421071][ T7867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.520960][ T7863] lo speed is unknown, defaulting to 1000 [ 134.605783][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 134.678898][ T7861] veth1_to_bond: left promiscuous mode [ 134.686632][ T7861] veth1_to_bond: left allmulticast mode [ 134.718590][ T7887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.640'. [ 134.774975][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.793247][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.885318][ T7891] FAULT_INJECTION: forcing a failure. [ 134.885318][ T7891] name failslab, interval 1, probability 0, space 0, times 0 [ 134.918916][ T7891] CPU: 0 UID: 0 PID: 7891 Comm: syz.1.646 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 134.918943][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.918953][ T7891] Call Trace: [ 134.918960][ T7891] [ 134.918966][ T7891] dump_stack_lvl+0x241/0x360 [ 134.918997][ T7891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.919018][ T7891] ? __pfx__printk+0x10/0x10 [ 134.919045][ T7891] ? __pfx___might_resched+0x10/0x10 [ 134.919069][ T7891] should_fail_ex+0x424/0x570 [ 134.919099][ T7891] should_failslab+0xac/0x100 [ 134.919123][ T7891] __kmalloc_cache_noprof+0x73/0x370 [ 134.919145][ T7891] ? alloc_netdev_mqs+0xc1a/0x1210 [ 134.919160][ T7891] ? __xdp_rxq_info_reg+0x186/0x290 [ 134.919195][ T7891] alloc_netdev_mqs+0xc1a/0x1210 [ 134.919224][ T7891] rtnl_create_link+0x2f7/0xea0 [ 134.919249][ T7891] rtnl_newlink_create+0x2f2/0xcb0 [ 134.919278][ T7891] ? __mutex_lock+0xbe3/0x10c0 [ 134.919305][ T7891] ? __mutex_lock+0x5f3/0x10c0 [ 134.919323][ T7891] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 134.919351][ T7891] ? irqentry_exit+0x63/0x90 [ 134.919368][ T7891] ? lockdep_hardirqs_on+0x9d/0x150 [ 134.919404][ T7891] rtnl_newlink+0x18b0/0x1fe0 [ 134.919447][ T7891] ? __pfx_rtnl_newlink+0x10/0x10 [ 134.919466][ T7891] ? dev_hard_start_xmit+0x2d9/0x830 [ 134.919482][ T7891] ? __dev_queue_xmit+0x1b80/0x3f60 [ 134.919497][ T7891] ? __netlink_deliver_tap+0x561/0x7f0 [ 134.919518][ T7891] ? netlink_deliver_tap+0x19d/0x1b0 [ 134.919538][ T7891] ? netlink_unicast+0x7c6/0x9a0 [ 134.919555][ T7891] ? netlink_sendmsg+0x8c3/0xcd0 [ 134.919575][ T7891] ? __sock_sendmsg+0x221/0x270 [ 134.919592][ T7891] ? ____sys_sendmsg+0x523/0x860 [ 134.919607][ T7891] ? __sys_sendmmsg+0x3a0/0x7b0 [ 134.919621][ T7891] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 134.919642][ T7891] ? do_syscall_64+0xf3/0x230 [ 134.919661][ T7891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.919714][ T7891] ? kasan_quarantine_put+0xdc/0x230 [ 134.919735][ T7891] ? lockdep_hardirqs_on+0x9d/0x150 [ 134.919759][ T7891] ? nlmon_xmit+0xaf/0x100 [ 134.919789][ T7891] ? __local_bh_enable_ip+0x168/0x200 [ 134.919812][ T7891] ? lockdep_hardirqs_on+0x9d/0x150 [ 134.919840][ T7891] ? aa_get_newest_label+0x101/0x6f0 [ 134.919869][ T7891] ? __lock_acquire+0xad5/0xd80 [ 134.919909][ T7891] ? __pfx_rtnl_newlink+0x10/0x10 [ 134.919933][ T7891] rtnetlink_rcv_msg+0x80f/0xd70 [ 134.919952][ T7891] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 134.919978][ T7891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.920005][ T7891] ? ref_tracker_free+0x63e/0x7e0 [ 134.920028][ T7891] netlink_rcv_skb+0x208/0x480 [ 134.920049][ T7891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.920071][ T7891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.920109][ T7891] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.920137][ T7891] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.920160][ T7891] netlink_unicast+0x7f8/0x9a0 [ 134.920188][ T7891] ? __pfx_netlink_unicast+0x10/0x10 [ 134.920210][ T7891] ? skb_put+0x114/0x1f0 [ 134.920237][ T7891] netlink_sendmsg+0x8c3/0xcd0 [ 134.920269][ T7891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.920296][ T7891] ? aa_sock_msg_perm+0x91/0x160 [ 134.920323][ T7891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.920343][ T7891] __sock_sendmsg+0x221/0x270 [ 134.920367][ T7891] ____sys_sendmsg+0x523/0x860 [ 134.920392][ T7891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.920406][ T7891] ? __fget_files+0x2a/0x420 [ 134.920434][ T7891] ? __fget_files+0x2a/0x420 [ 134.920465][ T7891] __sys_sendmmsg+0x3a0/0x7b0 [ 134.920491][ T7891] ? __pfx___sys_sendmmsg+0x10/0x10 [ 134.920542][ T7891] ? rcu_read_lock_any_held+0xbb/0x160 [ 134.920563][ T7891] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 134.920586][ T7891] ? vfs_write+0xb29/0xd10 [ 134.920613][ T7891] ? ksys_write+0x24e/0x2d0 [ 134.920641][ T7891] ? __mutex_unlock_slowpath+0x229/0x800 [ 134.920692][ T7891] ? ksys_write+0x275/0x2d0 [ 134.920721][ T7891] __x64_sys_sendmmsg+0xa0/0xb0 [ 134.920747][ T7891] do_syscall_64+0xf3/0x230 [ 134.920768][ T7891] ? clear_bhb_loop+0x45/0xa0 [ 134.920788][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.920805][ T7891] RIP: 0033:0x7f9c2e78d169 [ 134.920820][ T7891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.920834][ T7891] RSP: 002b:00007f9c2f665038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.920857][ T7891] RAX: ffffffffffffffda RBX: 00007f9c2e9a5fa0 RCX: 00007f9c2e78d169 [ 134.920869][ T7891] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 134.920881][ T7891] RBP: 00007f9c2f665090 R08: 0000000000000000 R09: 0000000000000000 [ 134.920892][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.920901][ T7891] R13: 0000000000000000 R14: 00007f9c2e9a5fa0 R15: 00007ffe73270018 [ 134.920931][ T7891] [ 135.398611][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'. [ 135.753645][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 135.955204][ T7889] lo speed is unknown, defaulting to 1000 [ 135.967725][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.656'. [ 136.049083][ T7908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.097322][ T7924] netlink: ct family unspecified [ 136.102663][ T7924] openvswitch: netlink: Actions may not be safe on all matching packets [ 136.164657][ T7908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.259592][ T7914] lo speed is unknown, defaulting to 1000 [ 136.320436][ T7908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.446921][ T7908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.484215][ T7932] lo speed is unknown, defaulting to 1000 [ 136.521363][ T7932] lo speed is unknown, defaulting to 1000 [ 136.547390][ T7932] lo speed is unknown, defaulting to 1000 [ 136.590575][ T7932] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 136.635490][ T7932] lo speed is unknown, defaulting to 1000 [ 136.666945][ T7908] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.685018][ T7932] lo speed is unknown, defaulting to 1000 [ 136.693797][ T7932] lo speed is unknown, defaulting to 1000 [ 136.701512][ T7932] lo speed is unknown, defaulting to 1000 [ 136.722101][ T7908] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.731836][ T7932] lo speed is unknown, defaulting to 1000 [ 136.740888][ T7908] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.915083][ T7908] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.941574][ T7932] lo speed is unknown, defaulting to 1000 [ 137.059944][ T7953] netlink: 'syz.2.668': attribute type 7 has an invalid length. [ 137.073037][ T7953] netlink: 'syz.2.668': attribute type 8 has an invalid length. [ 137.358400][ T7972] netlink: 'syz.0.677': attribute type 1 has an invalid length. [ 137.408605][ T7972] bond3: (slave gretap1): making interface the new active one [ 137.417938][ T7972] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 137.691356][ T7981] lo speed is unknown, defaulting to 1000 [ 137.736944][ T7981] lo speed is unknown, defaulting to 1000 [ 138.215199][ T8011] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 138.240925][ T8008] ipvlan2: entered promiscuous mode [ 138.534323][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.542040][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.821367][ T8039] lo speed is unknown, defaulting to 1000 [ 138.829299][ T8039] lo speed is unknown, defaulting to 1000 [ 138.949759][ T8047] __nla_validate_parse: 16 callbacks suppressed [ 138.949778][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.705'. [ 139.048615][ T8044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.714'. [ 139.147678][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 139.170878][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'. [ 139.201315][ T8051] siw: device registration error -23 [ 139.709329][ T8066] team0 (unregistering): Port device team_slave_0 removed [ 139.747624][ T8066] team0 (unregistering): Port device team_slave_1 removed [ 139.826393][ T8077] syzkaller1: entered promiscuous mode [ 139.832047][ T8077] syzkaller1: entered allmulticast mode [ 139.875706][ T8074] smc: net device bond0 applied user defined pnetid SYZ0 [ 140.040200][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 140.334861][ T8116] tipc: Enabling of bearer rejected, already enabled [ 140.383557][ T8116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.735'. [ 140.472589][ T8124] netlink: 176 bytes leftover after parsing attributes in process `syz.1.728'. [ 140.684326][ T8135] netlink: 45 bytes leftover after parsing attributes in process `syz.0.733'. [ 140.829733][ T8146] netlink: 372 bytes leftover after parsing attributes in process `syz.2.737'. [ 140.859370][ T8147] netlink: 372 bytes leftover after parsing attributes in process `syz.2.737'. [ 141.601248][ T8161] team0 (unregistering): Port device team_slave_0 removed [ 141.627508][ T8161] team0 (unregistering): Port device team_slave_1 removed [ 141.660937][ T8179] FAULT_INJECTION: forcing a failure. [ 141.660937][ T8179] name failslab, interval 1, probability 0, space 0, times 0 [ 141.674444][ T8179] CPU: 0 UID: 0 PID: 8179 Comm: syz.1.748 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 141.674470][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.674481][ T8179] Call Trace: [ 141.674488][ T8179] [ 141.674495][ T8179] dump_stack_lvl+0x241/0x360 [ 141.674526][ T8179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.674549][ T8179] ? __pfx__printk+0x10/0x10 [ 141.674575][ T8179] ? __pfx___might_resched+0x10/0x10 [ 141.674598][ T8179] should_fail_ex+0x424/0x570 [ 141.674628][ T8179] should_failslab+0xac/0x100 [ 141.674651][ T8179] __kmalloc_cache_noprof+0x73/0x370 [ 141.674672][ T8179] ? alloc_netdev_mqs+0xc7c/0x1210 [ 141.674694][ T8179] alloc_netdev_mqs+0xc7c/0x1210 [ 141.674719][ T8179] rtnl_create_link+0x2f7/0xea0 [ 141.674744][ T8179] rtnl_newlink_create+0x2f2/0xcb0 [ 141.674766][ T8179] ? __mutex_lock+0xbe3/0x10c0 [ 141.674792][ T8179] ? __mutex_lock+0x5f3/0x10c0 [ 141.674811][ T8179] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 141.674835][ T8179] ? __pfx___mutex_lock+0x10/0x10 [ 141.674866][ T8179] ? ns_capable+0x8a/0xf0 [ 141.674887][ T8179] rtnl_newlink+0x18b0/0x1fe0 [ 141.674929][ T8179] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.674948][ T8179] ? dev_hard_start_xmit+0x2d9/0x830 [ 141.674963][ T8179] ? __dev_queue_xmit+0x1b80/0x3f60 [ 141.674978][ T8179] ? __netlink_deliver_tap+0x561/0x7f0 [ 141.674999][ T8179] ? netlink_deliver_tap+0x19d/0x1b0 [ 141.675033][ T8179] ? netlink_unicast+0x7c6/0x9a0 [ 141.675050][ T8179] ? netlink_sendmsg+0x8c3/0xcd0 [ 141.675069][ T8179] ? __sock_sendmsg+0x221/0x270 [ 141.675087][ T8179] ? ____sys_sendmsg+0x523/0x860 [ 141.675100][ T8179] ? __sys_sendmmsg+0x3a0/0x7b0 [ 141.675114][ T8179] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 141.675128][ T8179] ? do_syscall_64+0xf3/0x230 [ 141.675147][ T8179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.675202][ T8179] ? kasan_quarantine_put+0xdc/0x230 [ 141.675217][ T8179] ? lockdep_hardirqs_on+0x9d/0x150 [ 141.675241][ T8179] ? nlmon_xmit+0xaf/0x100 [ 141.675271][ T8179] ? __local_bh_enable_ip+0x168/0x200 [ 141.675298][ T8179] ? lockdep_hardirqs_on+0x9d/0x150 [ 141.675326][ T8179] ? aa_get_newest_label+0x101/0x6f0 [ 141.675355][ T8179] ? __lock_acquire+0xad5/0xd80 [ 141.675393][ T8179] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.675416][ T8179] rtnetlink_rcv_msg+0x80f/0xd70 [ 141.675435][ T8179] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 141.675462][ T8179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.675492][ T8179] ? ref_tracker_free+0x63e/0x7e0 [ 141.675516][ T8179] netlink_rcv_skb+0x208/0x480 [ 141.675538][ T8179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.675561][ T8179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.675604][ T8179] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.675628][ T8179] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.675653][ T8179] netlink_unicast+0x7f8/0x9a0 [ 141.675683][ T8179] ? __pfx_netlink_unicast+0x10/0x10 [ 141.675706][ T8179] ? skb_put+0x114/0x1f0 [ 141.675735][ T8179] netlink_sendmsg+0x8c3/0xcd0 [ 141.675770][ T8179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.675795][ T8179] ? aa_sock_msg_perm+0x91/0x160 [ 141.675822][ T8179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.675843][ T8179] __sock_sendmsg+0x221/0x270 [ 141.675867][ T8179] ____sys_sendmsg+0x523/0x860 [ 141.675893][ T8179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.675908][ T8179] ? __fget_files+0x2a/0x420 [ 141.675935][ T8179] ? __fget_files+0x2a/0x420 [ 141.675968][ T8179] __sys_sendmmsg+0x3a0/0x7b0 [ 141.675998][ T8179] ? __pfx___sys_sendmmsg+0x10/0x10 [ 141.676060][ T8179] ? rcu_read_lock_any_held+0xbb/0x160 [ 141.676080][ T8179] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 141.676104][ T8179] ? vfs_write+0xb29/0xd10 [ 141.676133][ T8179] ? ksys_write+0x24e/0x2d0 [ 141.676155][ T8179] ? __mutex_unlock_slowpath+0x229/0x800 [ 141.676216][ T8179] ? ksys_write+0x275/0x2d0 [ 141.676247][ T8179] __x64_sys_sendmmsg+0xa0/0xb0 [ 141.676266][ T8179] do_syscall_64+0xf3/0x230 [ 141.676288][ T8179] ? clear_bhb_loop+0x45/0xa0 [ 141.676308][ T8179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.676325][ T8179] RIP: 0033:0x7f9c2e78d169 [ 141.676341][ T8179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.676355][ T8179] RSP: 002b:00007f9c2f665038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.676374][ T8179] RAX: ffffffffffffffda RBX: 00007f9c2e9a5fa0 RCX: 00007f9c2e78d169 [ 141.676386][ T8179] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 141.676398][ T8179] RBP: 00007f9c2f665090 R08: 0000000000000000 R09: 0000000000000000 [ 141.676408][ T8179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.676419][ T8179] R13: 0000000000000000 R14: 00007f9c2e9a5fa0 R15: 00007ffe73270018 [ 141.676448][ T8179] [ 141.704687][ T8172] lo speed is unknown, defaulting to 1000 [ 142.152553][ T8172] lo speed is unknown, defaulting to 1000 [ 142.509517][ T8196] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 142.767127][ T8210] Cannot find set identified by id 0 to match [ 142.916247][ T8223] ipvlan0: entered promiscuous mode [ 142.922708][ T8224] FAULT_INJECTION: forcing a failure. [ 142.922708][ T8224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.960484][ T8224] CPU: 0 UID: 0 PID: 8224 Comm: syz.4.763 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 142.960514][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.960524][ T8224] Call Trace: [ 142.960531][ T8224] [ 142.960540][ T8224] dump_stack_lvl+0x241/0x360 [ 142.960567][ T8224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.960586][ T8224] ? __pfx__printk+0x10/0x10 [ 142.960617][ T8224] should_fail_ex+0x424/0x570 [ 142.960648][ T8224] _copy_from_user+0x2d/0xb0 [ 142.960670][ T8224] copy_msghdr_from_user+0xb3/0x580 [ 142.960698][ T8224] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 142.960737][ T8224] do_recvmmsg+0x3bf/0xab0 [ 142.960764][ T8224] ? __pfx_do_recvmmsg+0x10/0x10 [ 142.960796][ T8224] ? rcu_read_lock_any_held+0xbb/0x160 [ 142.960809][ T8224] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 142.960822][ T8224] ? vfs_write+0xb29/0xd10 [ 142.960838][ T8224] ? ksys_write+0x24e/0x2d0 [ 142.960849][ T8224] ? __mutex_unlock_slowpath+0x229/0x800 [ 142.960867][ T8224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.960878][ T8224] ? __fget_files+0x2a/0x420 [ 142.960900][ T8224] __x64_sys_recvmmsg+0x1ab/0x260 [ 142.960911][ T8224] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 142.960925][ T8224] ? do_syscall_64+0xb6/0x230 [ 142.960938][ T8224] do_syscall_64+0xf3/0x230 [ 142.960949][ T8224] ? clear_bhb_loop+0x45/0xa0 [ 142.960961][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.960970][ T8224] RIP: 0033:0x7f6dd058d169 [ 142.960980][ T8224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.960988][ T8224] RSP: 002b:00007f6dd1480038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 142.961000][ T8224] RAX: ffffffffffffffda RBX: 00007f6dd07a6080 RCX: 00007f6dd058d169 [ 142.961007][ T8224] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 142.961013][ T8224] RBP: 00007f6dd1480090 R08: 0000000000000000 R09: 0000000000000000 [ 142.961018][ T8224] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 142.961024][ T8224] R13: 0000000000000001 R14: 00007f6dd07a6080 R15: 00007ffe9e878978 [ 142.961039][ T8224] [ 143.270265][ T8226] netlink: 'syz.2.765': attribute type 12 has an invalid length. [ 143.407433][ T8230] netlink: 'syz.0.766': attribute type 1 has an invalid length. [ 143.558350][ T8240] lo speed is unknown, defaulting to 1000 [ 143.579119][ T8240] lo speed is unknown, defaulting to 1000 [ 144.022049][ T8261] __nla_validate_parse: 9 callbacks suppressed [ 144.022066][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'. [ 144.041839][ T8263] lo speed is unknown, defaulting to 1000 [ 144.065412][ T8263] lo speed is unknown, defaulting to 1000 [ 144.092564][ T8268] lo speed is unknown, defaulting to 1000 [ 144.149933][ T8268] lo speed is unknown, defaulting to 1000 [ 144.400177][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 144.468687][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 145.048541][ T8302] x_tables: duplicate underflow at hook 1 [ 145.057535][ T8295] lo speed is unknown, defaulting to 1000 [ 145.079318][ T8295] lo speed is unknown, defaulting to 1000 [ 145.217870][ T8313] netlink: 76 bytes leftover after parsing attributes in process `syz.1.797'. [ 145.353068][ T8317] netlink: 104 bytes leftover after parsing attributes in process `syz.2.799'. [ 145.487435][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 145.507510][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.804'. [ 145.754271][ T8338] FAULT_INJECTION: forcing a failure. [ 145.754271][ T8338] name failslab, interval 1, probability 0, space 0, times 0 [ 145.807672][ T8338] CPU: 0 UID: 0 PID: 8338 Comm: syz.2.809 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 145.807700][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.807710][ T8338] Call Trace: [ 145.807717][ T8338] [ 145.807725][ T8338] dump_stack_lvl+0x241/0x360 [ 145.807753][ T8338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.807774][ T8338] ? __pfx__printk+0x10/0x10 [ 145.807794][ T8338] ? trace_contention_end+0x3c/0x120 [ 145.807817][ T8338] ? __pfx___might_resched+0x10/0x10 [ 145.807839][ T8338] should_fail_ex+0x424/0x570 [ 145.807868][ T8338] should_failslab+0xac/0x100 [ 145.807891][ T8338] __kmalloc_cache_noprof+0x73/0x370 [ 145.807910][ T8338] ? genl_start+0x1cb/0x6d0 [ 145.807935][ T8338] genl_start+0x1cb/0x6d0 [ 145.807961][ T8338] __netlink_dump_start+0x45c/0x790 [ 145.807992][ T8338] genl_rcv_msg+0x8a4/0xf00 [ 145.808019][ T8338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.808034][ T8338] ? stack_trace_save+0x11a/0x1d0 [ 145.808059][ T8338] ? __pfx_stack_trace_save+0x10/0x10 [ 145.808080][ T8338] ? __pfx_genl_start+0x10/0x10 [ 145.808094][ T8338] ? __pfx_genl_dumpit+0x10/0x10 [ 145.808108][ T8338] ? __pfx_genl_done+0x10/0x10 [ 145.808139][ T8338] ? __lock_acquire+0xad5/0xd80 [ 145.808156][ T8338] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 145.808192][ T8338] netlink_rcv_skb+0x208/0x480 [ 145.808215][ T8338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.808233][ T8338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.808272][ T8338] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.808297][ T8338] genl_rcv+0x28/0x40 [ 145.808311][ T8338] netlink_unicast+0x7f8/0x9a0 [ 145.808338][ T8338] ? __pfx_netlink_unicast+0x10/0x10 [ 145.808359][ T8338] ? skb_put+0x114/0x1f0 [ 145.808387][ T8338] netlink_sendmsg+0x8c3/0xcd0 [ 145.808422][ T8338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.808448][ T8338] ? aa_sock_msg_perm+0x91/0x160 [ 145.808475][ T8338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.808495][ T8338] __sock_sendmsg+0x221/0x270 [ 145.808519][ T8338] ____sys_sendmsg+0x523/0x860 [ 145.808542][ T8338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.808555][ T8338] ? __fget_files+0x2a/0x420 [ 145.808581][ T8338] ? __fget_files+0x2a/0x420 [ 145.808608][ T8338] __sys_sendmsg+0x271/0x360 [ 145.808637][ T8338] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.808700][ T8338] ? do_syscall_64+0xb6/0x230 [ 145.808722][ T8338] do_syscall_64+0xf3/0x230 [ 145.808737][ T8338] ? clear_bhb_loop+0x45/0xa0 [ 145.808753][ T8338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.808765][ T8338] RIP: 0033:0x7f01c218d169 [ 145.808778][ T8338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.808790][ T8338] RSP: 002b:00007f01c2fbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.808805][ T8338] RAX: ffffffffffffffda RBX: 00007f01c23a5fa0 RCX: 00007f01c218d169 [ 145.808814][ T8338] RDX: 0000000000000000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 145.808822][ T8338] RBP: 00007f01c2fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 145.808830][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.808838][ T8338] R13: 0000000000000000 R14: 00007f01c23a5fa0 R15: 00007fff8fc4fe88 [ 145.808862][ T8338] [ 145.809161][ T8343] [ 146.124604][ T8343] ====================================================== [ 146.131636][ T8343] WARNING: possible circular locking dependency detected [ 146.138643][ T8343] 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 Not tainted [ 146.145729][ T8343] ------------------------------------------------------ [ 146.152725][ T8343] syz.1.811/8343 is trying to acquire lock: [ 146.158600][ T8343] ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0xde/0x2d60 [ 146.167556][ T8343] [ 146.167556][ T8343] but task is already holding lock: [ 146.174903][ T8343] ffff888032fb4fa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 146.184980][ T8343] [ 146.184980][ T8343] which lock already depends on the new lock. [ 146.184980][ T8343] [ 146.195363][ T8343] [ 146.195363][ T8343] the existing dependency chain (in reverse order) is: [ 146.204358][ T8343] [ 146.204358][ T8343] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 146.212948][ T8343] lock_acquire+0x116/0x2f0 [ 146.217958][ T8343] __mutex_lock+0x1a5/0x10c0 [ 146.223053][ T8343] smc_switch_to_fallback+0x35/0xda0 [ 146.228840][ T8343] smc_sendmsg+0x11f/0x530 [ 146.233761][ T8343] __sock_sendmsg+0x221/0x270 [ 146.238945][ T8343] __sys_sendto+0x365/0x4c0 [ 146.243958][ T8343] __x64_sys_sendto+0xde/0x100 [ 146.249232][ T8343] do_syscall_64+0xf3/0x230 [ 146.254244][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.260665][ T8343] [ 146.260665][ T8343] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 146.268348][ T8343] lock_acquire+0x116/0x2f0 [ 146.273368][ T8343] lock_sock_nested+0x48/0x100 [ 146.278814][ T8343] do_ip_setsockopt+0x17e9/0x39c0 [ 146.284343][ T8343] ip_setsockopt+0x63/0x100 [ 146.289349][ T8343] do_sock_setsockopt+0x3b1/0x710 [ 146.294880][ T8343] __x64_sys_setsockopt+0x1ee/0x280 [ 146.300588][ T8343] do_syscall_64+0xf3/0x230 [ 146.305596][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.311991][ T8343] [ 146.311991][ T8343] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 146.319188][ T8343] validate_chain+0xa69/0x24e0 [ 146.324460][ T8343] __lock_acquire+0xad5/0xd80 [ 146.329644][ T8343] lock_acquire+0x116/0x2f0 [ 146.334648][ T8343] __mutex_lock+0x1a5/0x10c0 [ 146.339747][ T8343] start_sync_thread+0xde/0x2d60 [ 146.345192][ T8343] do_ip_vs_set_ctl+0x48e/0xe50 [ 146.350554][ T8343] nf_setsockopt+0x295/0x2c0 [ 146.355650][ T8343] smc_setsockopt+0x25c/0xd50 [ 146.360830][ T8343] do_sock_setsockopt+0x3b1/0x710 [ 146.366368][ T8343] __x64_sys_setsockopt+0x1ee/0x280 [ 146.372075][ T8343] do_syscall_64+0xf3/0x230 [ 146.377088][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.383491][ T8343] [ 146.383491][ T8343] other info that might help us debug this: [ 146.383491][ T8343] [ 146.393699][ T8343] Chain exists of: [ 146.393699][ T8343] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 146.393699][ T8343] [ 146.407244][ T8343] Possible unsafe locking scenario: [ 146.407244][ T8343] [ 146.414678][ T8343] CPU0 CPU1 [ 146.420022][ T8343] ---- ---- [ 146.425366][ T8343] lock(&smc->clcsock_release_lock); [ 146.430724][ T8343] lock(sk_lock-AF_INET); [ 146.437654][ T8343] lock(&smc->clcsock_release_lock); [ 146.445535][ T8343] lock(rtnl_mutex); [ 146.449506][ T8343] [ 146.449506][ T8343] *** DEADLOCK *** [ 146.449506][ T8343] [ 146.457716][ T8343] 1 lock held by syz.1.811/8343: [ 146.462809][ T8343] #0: ffff888032fb4fa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 146.473330][ T8343] [ 146.473330][ T8343] stack backtrace: [ 146.479202][ T8343] CPU: 1 UID: 0 PID: 8343 Comm: syz.1.811 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 146.479221][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.479229][ T8343] Call Trace: [ 146.479235][ T8343] [ 146.479241][ T8343] dump_stack_lvl+0x241/0x360 [ 146.479261][ T8343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.479277][ T8343] ? __pfx__printk+0x10/0x10 [ 146.479293][ T8343] ? print_lock+0x171/0x1a0 [ 146.479308][ T8343] print_circular_bug+0x2e1/0x300 [ 146.479324][ T8343] check_noncircular+0x142/0x160 [ 146.479341][ T8343] validate_chain+0xa69/0x24e0 [ 146.479363][ T8343] __lock_acquire+0xad5/0xd80 [ 146.479378][ T8343] lock_acquire+0x116/0x2f0 [ 146.479388][ T8343] ? start_sync_thread+0xde/0x2d60 [ 146.479408][ T8343] __mutex_lock+0x1a5/0x10c0 [ 146.479424][ T8343] ? start_sync_thread+0xde/0x2d60 [ 146.479439][ T8343] ? sched_clock_cpu+0x77/0x4d0 [ 146.479454][ T8343] ? start_sync_thread+0xde/0x2d60 [ 146.479474][ T8343] ? __pfx___mutex_lock+0x10/0x10 [ 146.479495][ T8343] start_sync_thread+0xde/0x2d60 [ 146.479511][ T8343] ? lockdep_hardirqs_on+0x9d/0x150 [ 146.479527][ T8343] ? rcu_is_watching+0x15/0xb0 [ 146.479541][ T8343] ? trace_sched_exit_tp+0x3c/0x120 [ 146.479559][ T8343] ? __schedule+0x1ba6/0x5240 [ 146.479576][ T8343] ? __pfx_start_sync_thread+0x10/0x10 [ 146.479602][ T8343] do_ip_vs_set_ctl+0x48e/0xe50 [ 146.479622][ T8343] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 146.479644][ T8343] ? __mutex_unlock_slowpath+0x229/0x800 [ 146.479662][ T8343] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.479679][ T8343] ? __pfx___mutex_lock+0x10/0x10 [ 146.479697][ T8343] nf_setsockopt+0x295/0x2c0 [ 146.479715][ T8343] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 146.479732][ T8343] smc_setsockopt+0x25c/0xd50 [ 146.479747][ T8343] ? __pfx_aa_sk_perm+0x10/0x10 [ 146.479762][ T8343] ? __pfx_smc_setsockopt+0x10/0x10 [ 146.479776][ T8343] ? aa_sock_opt_perm+0x79/0x120 [ 146.479793][ T8343] ? __pfx_smc_setsockopt+0x10/0x10 [ 146.479805][ T8343] do_sock_setsockopt+0x3b1/0x710 [ 146.479826][ T8343] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 146.479843][ T8343] ? __fget_files+0x2a/0x420 [ 146.479861][ T8343] ? __fget_files+0x39d/0x420 [ 146.479877][ T8343] ? __fget_files+0x2a/0x420 [ 146.479896][ T8343] __x64_sys_setsockopt+0x1ee/0x280 [ 146.479916][ T8343] do_syscall_64+0xf3/0x230 [ 146.479931][ T8343] ? clear_bhb_loop+0x45/0xa0 [ 146.479945][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.479957][ T8343] RIP: 0033:0x7f9c2e78d169 [ 146.479969][ T8343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.479980][ T8343] RSP: 002b:00007f9c2f665038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.479993][ T8343] RAX: ffffffffffffffda RBX: 00007f9c2e9a5fa0 RCX: 00007f9c2e78d169 [ 146.480003][ T8343] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 146.480011][ T8343] RBP: 00007f9c2e80e990 R08: 0000000000000018 R09: 0000000000000000 [ 146.480019][ T8343] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.480027][ T8343] R13: 0000000000000000 R14: 00007f9c2e9a5fa0 R15: 00007ffe73270018 [ 146.480040][ T8343] [ 146.930677][ T8347] netlink: 'syz.3.812': attribute type 7 has an invalid length. [ 146.938526][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.812'.