last executing test programs: 3.67521832s ago: executing program 4 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000005500e50125bd70000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01010300ff"], 0x38}, 0x1, 0xf0}, 0x0) (fail_nth: 3) 3.60285686s ago: executing program 4 (id=820): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x208040, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000004c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x1, 0x4}}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000640)="cf84edd3d4f4601b8620f4adc35abc2a0e92135535949146418443241c31dd49f51032df6a96009d312629f280e3159a7b4d6e82e2139bb19541a2a6afba2085656275c2c7d33ac8484d5e92246eb19ec2d0d19ca3ff7fe0d1aedcf6a9a59f63a8b02d7119abf0fba91c4f98988332088d0fc440346231b20da7255ba566cb87bd988b573b4f7eba96f1588248f9dc84e0ebbdec5e27dbf150c7807ee90fc2c0b90e24a8d2a7af92299295d4f31429c4b4026e3720fc4e0bc006c51cb0c3f69ad5e793adc6f576f184a5599a332a6402b95934d015101b23bc4d672c303a2cac099977cc747ae8309d274493ab2700"/248, 0xf8}, {&(0x7f0000000180)="f88a884102707f6ff13b4430d72ad967aaf2c7fc294a707d72934c39a568b605b33d29fc87fa", 0x26}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000001c0)="a9b409bb8eee2d2d30f08564092e240ee7af896f96a9e261efda36f8c665217433ede6c384bede0b22afc3", 0x2b}, {&(0x7f0000000740)="d8ef1c96b0435c4a43badeb34b8dd7b71ad49c1a40556247515f359fea7686b1b33f26a3c1a4cee0b20a32e89d147078e6fdabd18902fb029754a7c6ec25e8e7c32255afccad3ee0419e72ad49a39fcbd31df8948dd78fe84d1568bc1667e40b5267e147e232ea6fde2204e52207362a42260a510fae45c01dc31ddfbf7a87a8610d2c3243198503824c3f8d94d5ce669f4b21c9d6f208693431e3a107fc7bdf42395c6a385524ffa901d843280f888355a954df3b934c30a56cf225342bb07171bb7261d78588eacb6e77ecc5e48b06a4736bb6eccf38b55eab86f40f05dc1beb3358b4c9c1f159e336614c28f0a29ff19001", 0xf3}, {&(0x7f0000000280)="64960d4bed10e2a69108d303973fbb38978c744eff91fa132774d0d5e7e3f840bb8189d3aed6be969825363c2a963c3891e0ad5ce371d78338d2c6d68f75f58823f60f4c7b7346919dbe37e78eafe52ef91a6fb87f5516ca116e1f62b324aef2a79794b3073e6c092d91c250e3910ed6e543d9e179a918ad26552272cb08cd2054cab410a5d1bb1226986f10bcd89e74dd6bed7fc83b3e1a29f4634521bb1768cb042fe33d2a6adbc63e5b58408103321553156aa3558c", 0xb7}, {&(0x7f0000000840)="8b6bbfaa6daf502f1e556ca6e4ebfeb456d913ac8011ef6fa83785de74911e7b08e76e39376839908e3cb79779793b95568d7db4672849a95e83a3b689a36b3ac0583c4126a61f0491375a8d5f59ac11338ac8f1846eae098d632e4d05ffa46541b3fb7d7450b8ffe88e54af226fc9afa119a2601d44e4dbfcf470bfeda4c5e151e0f13352cb26be0ddd4d69d5e1b25ce0ad8619e48c320558ff27b16c0df7be336bd5747369edd726926842d7c0bde95e3bf963680a3ceb51726753cb43c047655f6a23e7701e36a30e8063209f5fd99549", 0xd2}, {&(0x7f0000000500)="e0785753a670917edb4224abb30583ad741dc274964aa6c9066a7a839de7dc02ba88690384d19f537680896378b5711520b414d302fd3a846e607b1993ae766e220dd08f3056f9438683e97fc5c9bfb115a995baf543240af56f2a76597880a3ece2ac3dd049223f51450f0a58fd15cac1caaa90ad0af5622525246255ff348ebe451ff2a4248cc5be004825ea6469f78490f5a65c7850cb93868058e6587125af24bf0b15d0921053505a3fd583eac2f424cac674d3b5e52d40eb5b7f7296214fcadea3e010eddec0aadffd8ffb9c6ae940e5faa43ed7f443e127", 0xdb}, {&(0x7f0000000940)="c6d08e05757fc23123d33ef7f4f7a1d4b384519739c9973732bf8cfb01545f81f09ec5aaf0311a1dc19b9f1af8352834873b3321fa5b86bcc3a7e87e98b04e7dd70e1933c73024e67ac41f72105f6e9c9c33dbce34ea157441478afc5efdf5963179fc8fee4c3b3b8ec9c025f8f592ce43cdfc9fc137b7790058c62a3a72233104800952ebbb601548b6414ffc89cf0689b42eb5d331ab7e53b0a380921509fc62577ebd471fe0650adef179d446d21faed6a761a63d3688ff89ba2fc036c9b046bbd775c4487283375ea9e1ef563998b452d2353ea49847d6ea0f7b02c64dcc421d2d", 0xe3}, {&(0x7f0000000340)="2f62aadb789582c21c3c5cf45c492d46ae1dfc3f5027feab41504301c95364cc6bc3757a03c44547dec7bc5c1aa593231bc338f8b9373bda222ce04a9f32", 0x3e}], 0xa, 0x0, 0x0, 0x5}, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40001100, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206010200000000000000000c0000000c000780080012402b0600000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00"], 0x58}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) read(r7, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='5'], 0x20) r8 = socket(0x15, 0x80a, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000280)={{}, 0x745bb3d8, 0x79, 0xfffffffffffffff7}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r8, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000040)={0x0, @default, @bpq0, 0xffffff95, 'syz0\x00', @bcast, 0x101, 0x4, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null]}) 3.461441922s ago: executing program 4 (id=822): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r2, &(0x7f0000000800)={0xa, 0x4e22, 0x8, @mcast2, 0x3ff}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000580)="d49756f7c88f45cb254d3eda174d107044e81029", 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) 3.191938668s ago: executing program 2 (id=826): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x8, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="0800cca7f8668afefb", 0x9}], 0x1}, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @empty}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x4, {0x2, 0x4e24, @broadcast}, 'pim6reg0\x00'}) 3.107285255s ago: executing program 0 (id=827): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}, 0x40002042) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040004) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r5 = socket$tipc(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000340)={0x0, 'netdevsim0\x00', {0x1}, 0x3}) 2.985587298s ago: executing program 2 (id=829): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x4, 0x4, 0x38e38e3, 0x1, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) recvmsg$unix(r0, &(0x7f00000001c0)={&(0x7f00000003c0), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f00000005c0)=""/222, 0xde}, {&(0x7f00000006c0)=""/190, 0xbe}, {&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000880)=""/184, 0xb8}], 0x6, &(0x7f0000000a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x140) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000000d40)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000012fd1528dfffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800b00010062726964676500000400028008000400ff030000"], 0x3c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000000)=0x5, 0x12) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000004ec0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, 0x0, 0x0) sendfile(r8, r7, 0x0, 0x1) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24000000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.861306641s ago: executing program 0 (id=830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x2b, 0x8, 0xffffffffffffffff, @void, @value}, 0x20) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xc99a}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40) 2.691407405s ago: executing program 0 (id=831): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xc00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.617406942s ago: executing program 0 (id=833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x35, 0x301, 0x70bd2d, 0x25dfdbf9, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x88}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0080000f0601020000200061219350b6e00ba9000000000500000006210b00ffff00000600fcb875edcff36d6a70cb4f77d683860b00ffff000006000b000300000006000b000200000006000b000400000006"], 0x4c}, 0x1, 0x0, 0x0, 0x8000090}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x35, 0x301, 0x70bd2d, 0x25dfdbf9, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x88}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0080000f0601020000200061219350b6e00ba9000000000500000006210b00ffff00000600fcb875edcff36d6a70cb4f77d683860b00ffff000006000b000300000006000b000200000006000b000400000006"], 0x4c}, 0x1, 0x0, 0x0, 0x8000090}, 0x4000) (async) 2.451232783s ago: executing program 4 (id=835): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000280)=0x9, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c200280080001000800000006ef0200010000001ffe", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc014) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8c39db6ebf", 0x5, 0x24040015, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 2.370930371s ago: executing program 0 (id=837): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000003000100000000003f000000110000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x1) unshare(0x40040000) shutdown(r1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000006000000000000070000000000000000c45f00"], 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x100000001, 0x4, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) listen(r0, 0x558d) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) r5 = epoll_create(0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000240)={0xb0000000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062013c00000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2.251452479s ago: executing program 3 (id=838): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18200000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.205028361s ago: executing program 3 (id=839): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="84e66f7f83e123c8c2684daa76eaa6335d1a6e9799cde53c807b73b46c4e02e1d3bb2e27da4ae3cc581d9262bc2cedfa8c5a9c07066a7c1703081b39745d816229c26466ff5e6b95c04b2edd891ca51bce647fa708ebdc4976e8eb89d689291a65c5ce7ae90894bfe2cb2396889dba4b9ebb", 0x72}, {&(0x7f0000000080)="037d7c4ed83e1c1fd60bdf95b4d578ba545018c5bea2d77872aa7410b9fc94dcdcbe8d41abcf7e4629574c666997701bef8d0941a08bf02729c61e3dbdb218ccaec01de90865d2e068719fdf888e2e03b0ff26566e0329c3f2e05a242d0ed793d0dcff5d97d6f200b84a1bd6f8271aaf16c859bb14a7b3e6588c5a95a9fe9cb225ee41a31709541f3d", 0x89}, {&(0x7f0000000140)="691baa633307f00682893ad7de142d5761a3405b95ecd93f08f4038070f00f53a7d26d07d73cd9f9579a9fa316d063ede0229df6ca6bc09a2cdf469adb1cb3c8df6b92d7f5414c5d62466638a595b5418b7c513d2b1a25bd005c0e9bf4f48687fa7dcc9b09281bebd6d70d2f6c167df864430600cc73215774d08fdac1b3e041511df94ace87b51de2588407fd926eb435531fedfbf9c373ef3327777e37fd339a371dd936f8df0abe6cf74c50e5e8675e4cdd497f5ea69f5a62c703bb63f76f3c3cc3004a2d4151318b241029b2076fb92c92e0a7b90e61bca7f0d8c90c17d2fe401a2b4e0eb6a2ea45136ed5", 0xed}, {&(0x7f0000000240)="e7c4f8b2f51c63008767a02e9ef0a991fd1dbe04840690038defa780", 0x1c}, {&(0x7f0000000280)="9dd9caaf41d816597a8d4c6155bd710494050af9ec3e96ebfceabde8b0f449b1810c5b26fc0d8ccf243ee042d3004684d299c88a1d628b15ac098c2c5ba2cc17114c34ea948aec87982aa1fa2dee17199bb00bff3360f3dc8e0babd3f9422852a0f691179a8145a9965e8b435b314ee939278b1e50e399cc3eead68cbcc8bc3f3bdd592364c6e68abd381bcde28860bc31189b537e5890ba0ea1cdbc441c9a0562b3423f09b6806ec7f6484281766b4bae36d835e6de3e4171c2f1ea65be0601b23703c6c67dc77c19904eaafa1b0847bc4432e6e631bf7fcc03931f63823e1cd1cf921df6e9dc4f6171688b3dc622", 0xef}, {&(0x7f0000000380)="57e0e740fe5e048b778fcaf4bd2e664315ea6cc5a2f0996860d010f11389772b08cd5f40ff6dc87eb6105336189631a3dd9dc9c93df482d2ddbea1fb1020a9a9260a3cc56748e3ccf2c79a5f5bdc2ed1367aaf0ca32f2cb55dac69a213b9812cf7981e9c7bf20a216579d9421c6e7b3ef166951f3a33e5830f2c43ea517cfa736399eed65a3f0030fe2e5a2b953bca5cc482e8bca434f81d317168d87b841fa66f3119a61343ed049f5372773da147ad6ad87e98", 0xb4}, {&(0x7f0000000440)}], 0x7, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0xf00}}, @rthdr={{0xb8, 0x29, 0x39, {0x2c, 0x14, 0x2, 0x4, 0x0, [@loopback, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @mcast2, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}]}}}], 0xd0}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000640)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000680)) r2 = socket$inet(0x2, 0x1, 0xa575) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000700)={0x8001, 0x18, '\x00', 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0]}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000880)={&(0x7f0000000740), 0x10, &(0x7f0000000840)={&(0x7f00000007c0)={0x7, 0x800, 0x46c4, {r4, r5/1000+10000}, {0x77359400}, {0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x1e, 0x1, 0x0, 0x0, "bc052eab6e8effcd428a91d95152ad9d3972750c5a663ea9abd98b441891f71a5f8dda68cad1e35ea9fd822d8b3b108ebc9c263d808cce0f936858d926adf395"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x408b0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r8, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x400, 0x68}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x75}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x45}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x324}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40040) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000a80)={0x1, 0x852, 0x401}) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r11 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00)=0xe, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000b40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r10, 0x5000943f, &(0x7f0000000dc0)={{r11}, r12, 0x0, @inherit={0x78, &(0x7f0000000d40)={0x0, 0x6, 0x2, 0x0, {0xe, 0x5, 0x0, 0x1c00000000000, 0x10000}, [0x100, 0x2, 0x3de74761, 0x8, 0x3, 0xe0000000000000]}}, @subvolid=0x100}) recvmmsg(r10, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001dc0)=""/148, 0x94}, {&(0x7f0000001e80)=""/144, 0x90}], 0x2, &(0x7f0000001f80)=""/118, 0x76}, 0xfffff800}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000002000)=""/81, 0x51}, {&(0x7f0000002080)=""/217, 0xd9}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/228, 0xe4}, {&(0x7f0000003280)=""/119, 0x77}, {&(0x7f0000003300)=""/142, 0x8e}, {&(0x7f00000033c0)=""/86, 0x56}, {0xffffffffffffffff}, {&(0x7f0000003440)=""/32, 0x20}, {&(0x7f0000003480)}], 0xa}, 0x2}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003580)=""/219, 0xdb}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/58, 0x3a}, {&(0x7f00000046c0)=""/11, 0xb}, {&(0x7f0000004700)=""/222, 0xde}, {&(0x7f0000004800)=""/14, 0xe}, {&(0x7f0000004840)=""/50, 0x32}, {&(0x7f0000004880)=""/28, 0x1c}], 0x8, &(0x7f0000004940)=""/165, 0xa5}, 0x1}], 0x3, 0x0, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000004ac0)=0x1, 0x4) r13 = accept4$bt_l2cap(r3, &(0x7f0000004b00)={0x1f, 0x0, @fixed}, &(0x7f0000004b40)=0xe, 0x800) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000004b80)={'bond_slave_1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000004bc0), r10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c40), r7) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000004d40)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004d00)={&(0x7f0000004c80)={0x6c, r14, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "45aa1259ab3733401501a7a05ee77c69"}, @NL80211_ATTR_PMKID={0x14, 0x55, "a64561c348aff4c33c7c08d0478565ca"}, @NL80211_ATTR_PMKID={0x14, 0x55, "56a2adf627808e05ce65bfb751c7418f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x32}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ba6419cdb95b"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1e}]}, 0x6c}}, 0x4010) ioctl$BTRFS_IOC_START_SYNC(r13, 0x80089418, &(0x7f0000004d80)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000004dc0)={{r2}, r15, 0x0, @unused=[0x1, 0x9, 0x6, 0x7], @name="87ffbd2af03bd7910c8a039f777ec3e945a8bac4ab345605fec5aafaa57d6f5d7e2a4724d36d000a1cbffe8193f1b18fe1d0d410190e464d7c205d4722bcb4ffa3362faac244aaeba1c5ad2bf4ffc651ee2266e3e6869c315f6a098938b7d041db591aeb8467b415b076a0fb5810af9dd658a77f76bcdd49cc595045be1fd609ef00103c467651a26424409e53858572375cc0c97bb97719c82bed048dada306528ea24472276c169b584f55bbf7404a72b1072fb244a661f953ad5771361a2027223014db07e98616a5d3008132f0909af2f07fa39f5d5ffcc7654abe488eae043bf21e7d9618ca2d03492c35990171a42f055d033146b9bac6f51b6fbdbda7dc0a83b30e6f44f0ab81d0c8660ca046cdc4ffb226d451b6bd617b06bb3429f2398dddca38dcee163c1cc707051a91afd63b30945c2dcc8d13aeb9ba375d59749846fb86d04b70701cf6141445129145a123950141626eb9f87fe6be6937d8c641572ed99313f53ae7196b5617c6777769540e38ed438da195fcccf7f872f5af994cee47310839e3e133067960f84af822da3b8eba9cad9241271124d4dd453b48900f1fbe19343e67a12cf518d358b65ffec6d585872914b7f940ccbe96a732efa203b0d6f7a56aa9a8487193ed3feb67ad88facaf8ddb9ffe32c29a32f28171029f7bfe46257af263d57bcfe7da69892e9f8666c0bd240cb0c296bb2effd1a3e5d8b1e3c1e1d4ddbe4d810d3179317151864cd089428042c7e8b736867686ee03cfb0bbf6572aa535c5cc799408456b4872b989128388fc82f06a5fddb8fe37a8d30826be34525657d10d2d29e26f91fb0979eb9275bdfd5122fcdc000cf18455f4e853c19f47b44fc1f5d3c2c201e6ffc1cd90eea19f4ff921311d48623f6a2b079e1a5ed4eaa61947e5fe8a902d6806d5d08557755b5033e7a293615f7ee2f5284fdd364884e57ee5305239b2f335dae73f5a55b4a94a9702b65ace914340f7ae94a3c399dd98a57f498dd6e337e8b96227a6cb44172c4faed06906af72feb78e9ce711c9a41dd3f8280af28a25f74d0f273785b7c1fdb1441e56aa183f927342e6a8ed9226d991b61e462f3396fcc458c3d63e38017a1883b4947ee37bb3a462c3fd4f11a3eaaff7f0ca559f70360d1bb9fab1dc46e72b9a71a0f28ef8992a6a6a82fa9f26692125b3b3eff4c33137feb34b4b19c00ec5a997f8f8f450303a264a60dfd170760a5db96da61469cdd4412745a8ecfb1dcc003da91661e5aab4cc655b6fd015610c799192b6636f931d345d50e727a61581b4eb5bd421d9b1d7bf42e53c6e772ab1852bf3bc75a9912c453c660421e81ce3eacbd3dfc61718b8b8707099b9532ad14c7432b23617d881db2d68ecadb33d6564eec0bd21dcdcb79dd5382a59722a5ca744effdb631a092606a36b1eaedb69ef64575df464eaef83efb18cac9ae3c107095ab8c357e3f7ee0ab3f2b7edd966d9e71f7b0a262912d0f56235084d2abfe9facf3787da9f68c240f737b2aa1a22d729223ccd71082d58909f0102cdebacc976a598b6c181728a0d12b301eabe72bc7d0e2b3c1a8a909e9e2852d1ff78e4c46b6d9723a75b1b68706d3a36024485eb1944fe43cf27d9d850d2d9cc38230d38879c1b16bcd3e2d6e5577def8cca85166d97f4ba49b0876256b0b85498dfdf68ed2153e43b3c4cb419ad55aea5bd85dbe513c00ae0a0f8604a90df54bd637dee9be9e95e1ad06ea76595f2228f95c4c1269bc94f19032e01fe58c4dc753dc754b637960da99d3a288233cbd85a9a6120f3aa63f6c9926c8e24da08f36d06c9bdf588f38d28c1986379950cd7404354ec6db644cdf7675de13847ed8f9177305b72c48eae88b1bf344a6217767b1124adf08a392eb6c5175190b114d1f3885aa557d94bde2de6d81fcc08fb7e21a800eeaee0471cb0e9b5a1f49bebd56f83d9d4a1e00164ace6cf1ddc010bd2e8a0001f0db25ccedee1a148a7455e5574ac4405f8be9ef54630f89477fcef9e3baadcb55397c50a9f4e7a887e15016f551edce052ab9641ee5c3072960a625554843a78e77db199e73fdfb05a27aa6db606636071bf7407a7bde50bd5a41eaf05992380c82d4f08b9c61d34fd1c93f3789f5d5eda510100494bd773d60dca3e3ecd581609737ab4a8c6182e57d5f9b34a06b2b4e02e72be8fdb56c054841d26743b44767a338454feb44d206b8230a209ed581b2f98daa54b808410b8c611c9c268ce7f487d97ab7c532b9d88cd07ae9820dc98fbef669d49bfec1ef5fcd0c2ad5d77befdb5ceafc81d6ac8d059b49562e3b0094966a49f00a7d7bf54e753d9afd65dc1f41cea288dbeb7c580110a59fda889fbef453a366e46a3e23fdff7097097836e27358c0ffe7489883479febd8ae773525aeb4e868b12d9879a3217eb2ec8da5aef7de8b0cb7efacf9ae9db61cd3849a5e57ea059f502a7501e955dacb13cf27ca56f02442e809635ddaf7156d213d2ab1de3430bdb9b9c028c7a0b1fbdfeb6caf5cf0c4ab1d0ad2d238f61631e1d3546375d57b5f1f47b32dcad849f71d0e198c7a039525e883ca15134d9da89f229e05f64929e256c5cb2b65ea4bf38ceae7eb6f9e8f4a9798183687ca3860689bc85b7de8b4049b77cadd153a56248f941d0435ee62f2fb64e11f9fdef3dc9771a6d46f042f7716181e35ddd30f5d9b6d01dc08d339c065d8910064276e451e031cf8682cb73d94df202279787856b21557a852974f0fb8598349453b0eb91ca3ddb477314b9f5d69455912ff820658ad62133a208fe6f41b3cd228608866f079d7c3af0e294979b9cd7d0a6bcc401ce585758424d7e3a974b4f957debd258f641ea3b4365497426150e31cd4eac01afc82542e2eee35a56231b188eea613e9adf09768b10faa7e243443785e4b5e858961dc3e9f73ff5d0a5d559861b3aa5d53052573ba7e010439411456fe3df74ad73f20eae6c4b6542a159cf49511d5f952c89cfb8fa313f80ed589033bbe1545e9fc6f93192330762e6d482ca07f069fbad21ffb61c750a8676a295162464790eed94a0ca4441abbe81ed658e7f3ae231d200b69a337e1c8b6e41d7180b394c205f794d1d2e47c604ea7bcf2f4520a648ba5069ebc6bdb0e8a48d3064165e4809883a911623dcd7609f64ae45c55a0316941f88d74108a6470008b57660b75ccdc9929825186f524e601ce9db00b96d8bc9489c9278bcc5de798a2e8d865b69dc646920c75263bdfeaf4988308ad89474022311906879f533ddbe4e2f7a182919f4ce875e3bdc78a2b1de2d13e7b2ee31fd7c9c6442ed429c20c36bb632cd779752d6c25a7fd661a77971c0b7c6b6f2475890d652ba48e602452ed3db680f1c155f2259dc03ab02ecad10e8f196d9ff89a4d72450e683288294c281076a79c04a9474c138097bfe4727c7d76ff0ae56a3ef4df8326969ae0771384b0a4eb70991b088f99e8edcf89e0ed6be7a9f11c209a51658d85e77fe43b2bbce75928e1ae718fdae4f1bf573fef99d8b20a1e0d56277ce2ad30d943e5843fd42df3a9f11d33355adbc7347662f57074a2b5ab1978e9d4f156398f2bd455188b471616bdbc2064f71108373415d130ededf781825a7b8abdd3480483a515340798050f0636a9635c5198fd8bba801004556b5ea20c7952fbe69f3d37715798284ead7e881478956beeae37c848debb64156898bc3b8828d1927a4f4fc76b5ab3f0e64c766bb6d9b73c435159e0a1d5dbcbd3ca6a9fb1ed6ad6ad6aa8d4631e496cda77e3295a768c01b90db54cd58ed489c420f4ef19decb0691919bf92586d37bb4e655cc995fdfc647eceac4f6140819d28ad4d351b8041f4d0cd5ce5f79e0a795bf36f62cf9e48eb0c65d9e4173586d666fb8ac70817b4cbc5267beaa18fb3b0841aeec2f618996f15b953c045a98bc1191dd1e3d3eaefe03b90d2d4712e205564a7d1f708ea6d43ab5ff7a8c021b7f99107b39513703b37ce335ce6eb4472f53dc022ade149c2001157a8d9b601863fdb5407f88a1f0d0621351fbbb0b676a50d12b7e9592d54d7d94621d831625d84a445744a8f25e836a6a85bfe171a43c7b2f3682722a2546b8a61f2acc03ddbcae7f83c68df7e2cdc3e2a497cc96b8c37d566bf9ec9a534e9464f4c3f245ff77d7f95b0301244cd0308d2787591c4a47b69b9a7a0c75f46303f7ac038041924fd7140acb55a6b4fb6ad65d0f17e341ceaac44c3ad58745c449fd3ba09f6df8fa0535b7d143af4ef2e6f34e76da6993cf04f26461e3cca50bd46c46da2b178fea45fdbbddd10ef4b03d9c3c1c4f891b3da7922af816ccd897dbc332ee1ab2fa8bf6627b1760e61c3cbbaaaa2a9648f964988abefcc93c1c0562d41325583766413d51223997c0c1dcf944fb0ecd7f8e0c1deec283a4d37db804e876477c3fbe2d156a5a154396e91edca968b7260e6d3bef07f077a9900366baae8066f0cf6f9bbdfd79a20d2ffd6d5b4c5b345ec39be2cba4b63d39da498bbb4f9d34a7d0ec24221f52e55ce880f28bcbe64c5c1a949cf6600dc3986d02eb0808d5f642bd21a2d072d712a2de087ea243cf076e3432888c5d8fc1950cd3084cc4c70ee4f3bf15891563fe18306df32ee2d19ecee8dac371f85f0257cfb0f7f0ac402405bef367e009e18e30aed3469d70556c60fe8334c0abba553db0c54c9d2851322057a2edc87c758cb01adc1594b1919257fb5a904b3d68a8115564ccf30948ebadeea66fc451273f7e4478d857ca82bd3e53727e92ec4d51ab1167b3289e70ff69562bafadeafcffb243d171610215cd6a5e3504679289ca93fa6b23c4dc13e4c9318df65c6a4141aead537049f06cef1b37eec367c02857b6a95ffe72d5d9e6a4773799980c143edf2aaabbaf0d4b58401f3b3cf55d8df8782235fe86ede9796281f2eed14db4b6b5f6e07d459db8b777e6f9acc216f5494cc824c124c16e9b1b3bf0d0f800240db987da96eaf15c8395adc72c7bf51f40887b8f026823b6d3e4be50b2cccd0b5036949fe185183399404006aa038a73fe043511d73e4983e5adf34e6a58db670ffbf2ac3012fa27792562165da204a74b0405df1612d06230f040f56fd5f31eac4750484bc03180235531adbb6238b30b0c23404d349ea4bdd4ce3dc86c5eba2e509fc1954f64aac0887493d341d8e313bc9adbbd34a3f0207064ea3b66e2a9faa0a02716de6ef6aa2dc2a626711b570a7dcaa2b6546d15c52681892c2489f9b028787649437dd49756328345885a8fc9124cd2bfa42554b787fe3c50a74f62d18f614102a7ff951f77cfcdd1f6c1c56e56b96dab1bd5f4a976d772b7aa4bb902793a35801d7005cd5ea71ebc85ae4d5de8031385e67836045471c1f93bdeda6c29196e0ade5e6002ee894b5722ca90a3cd398fa7ea5b0e765671f2e72cdaad16cc1cb3c41b0d50e229d07bcac7e8ad0c1cdefaf8f4d9f91c7cd487af630602cf8b71f90e08f47f2119db1467683505667bf84848f8006585d258999db543c6e3b9ef69edbd9a0b05bc68030e6416a3f7df15dc5ebda0a6db183b525c4fb755932e98b0706ed636482bcb052578cf8acb40057d1a20175aa488d4227a77a85ad54ee6930a80e72a5428a8f02c0861db94c1803b9ee7c46d4dfd81e23130855a421ce3be43c1c9e2cf05cd02a3f33119f6cbfa8515debbe46e5105c61a4c3813741"}) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000005e80)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005e40)={&(0x7f0000005e00)={0x14, r14, 0x400, 0xe, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 2.113336232s ago: executing program 3 (id=840): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}, 0x40002042) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040004) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r5 = socket$tipc(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000340)={0x0, 'netdevsim0\x00', {0x1}, 0x3}) 2.041649782s ago: executing program 2 (id=841): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xd, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES64=r1, @ANYBLOB="00000000020000000000008008000000850040005e0000009519524ed819fff1c68efdaf03764882ea8c29822308e752911533158a0669496d7835029594caf6b720758756db3147a1b6615869f62455b450fe4b6320a77adf2387e95ea295269252c58c4a57dd6feda8f367e0d09e0a3b9df3666daa32799cde5c59990c8dc3bc5feb5d21907bd1282763410be9188d52", @ANYRES64=r3], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4000, 0xfffffffd, @loopback, 0x6}, 0x6e) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x30) 1.99667636s ago: executing program 3 (id=842): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x4008800) 1.879362324s ago: executing program 3 (id=843): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x4}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0xfff, 0x0, @void, @value}, 0x28) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x400000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x3) 1.626637805s ago: executing program 1 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r4, 0xd456100da20768b2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000004c0)={0xe8, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xcc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.626281741s ago: executing program 4 (id=845): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000e7ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.4756824s ago: executing program 4 (id=846): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000003000100000000003f000000110000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x1) unshare(0x40040000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000070000000600000000000007000000000000"], 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x100000001, 0x4, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) listen(r0, 0x558d) r4 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000240)={0xb0000000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.180950048s ago: executing program 1 (id=847): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x0, 0x3}}, 0x2e) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r0}, 0x18) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @multicast2, 0x0}, &(0x7f0000000140)=0xc) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x1618, 0x30c, 0xfffff6b2, 0x5a244, r1, 0x7, '\x00', r2, r3, 0x4, 0x2, 0x3, 0x1, @value=r4, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x9, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x1d, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x3, 0x9, 0x8, 0xe, 0x1}, @ldst={0x0, 0x1, 0x2, 0xa, 0x4, 0x20, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000006c0)='GPL\x00', 0xe8a1, 0xc8, &(0x7f0000000700)=""/200, 0x0, 0x4, '\x00', 0x0, @sk_msg=0x7, r4, 0x8, &(0x7f0000000800)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x2, 0xf9, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000880)=[r5, r0], &(0x7f00000008c0)=[{0x1, 0x1, 0x6, 0x7}, {0x3, 0x1, 0x4, 0x7}], 0x10, 0x6, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x28, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdcf, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @jmp={0x5, 0x1, 0xb, 0x5, 0x7, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4a}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000400)='GPL\x00', 0xffffff01, 0x9c, &(0x7f0000000440)=""/156, 0x41100, 0x22, '\x00', r2, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xa, 0x7, 0x6}, 0x10, r7, r8, 0x4, &(0x7f00000009c0)=[r1], &(0x7f0000000a00)=[{0x0, 0x2, 0xf, 0xa}, {0x4, 0x4, 0x6, 0x7}, {0x1, 0x4, 0x6, 0x4}, {0x0, 0x5, 0x0, 0x8}], 0x10, 0xdcd, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000b00)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000bc0)=@ccm_128={{0x304}, "a2d9cc3f737eef58", "60ff0b640957281fa5ac93afcca51585", "bc4fffe9", "569f7608e000b08f"}, 0x28) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0}, &(0x7f0000000c80)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000e80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)=@flushsa={0x158, 0x1c, 0x0, 0x70bd2a, 0x25dfdbfe, {0x2b}, [@sa={0xe4, 0x6, {{@in6=@dev={0xfe, 0x80, '\x00', 0x9}, @in6=@mcast2, 0x4e21, 0x0, 0x4e21, 0x7, 0xa, 0x20, 0x0, 0x0, r2, r10}, {@in=@private=0xa010102, 0x4d5, 0x3c}, @in=@private=0xa010102, {0x800, 0x6, 0x9d64, 0x6, 0xe9f, 0x9, 0x5, 0xc}, {0x2, 0x1, 0x100000000, 0x5}, {0x8, 0xdc24, 0x4}, 0x70bd29, 0x3503, 0x0, 0x3, 0x9, 0x10}}, @lastused={0xc, 0xf, 0x7ff}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd26, 0x70bd2c, 0x70bd2a, 0x70bd27, 0x6, [0x1, 0x7, 0xfff, 0x5, 0x0]}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffffff9}, @srcaddr={0x14, 0xd, @in6=@empty}]}, 0x158}, 0x1, 0x0, 0x0, 0x28000044}, 0x5014) r11 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000000ec0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), r0) clock_gettime(0x0, &(0x7f0000003000)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000f40)=""/210, 0xd2}, {&(0x7f0000001040)=""/144, 0x90}, {&(0x7f0000001100)=""/180, 0xb4}, {&(0x7f00000011c0)=""/245, 0xf5}], 0x4, &(0x7f0000001300)=""/209, 0xd1}, 0x5}, {{&(0x7f0000001400)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001480)=""/226, 0xe2}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f0000001640)=""/249, 0xf9}, {&(0x7f0000001740)=""/210, 0xd2}], 0x4, &(0x7f0000001880)=""/7, 0x7}, 0x9}, {{&(0x7f00000018c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/174, 0xae}, {&(0x7f0000001a00)=""/33, 0x21}, {&(0x7f0000001a40)=""/158, 0x9e}, {&(0x7f0000001b00)=""/242, 0xf2}], 0x4, &(0x7f0000001c40)=""/6, 0x6}, 0x3}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001c80)=""/44, 0x2c}, {&(0x7f0000001cc0)=""/244, 0xf4}, {&(0x7f0000001dc0)=""/56, 0x38}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/82, 0x52}], 0x5}, 0x9f10}], 0x4, 0x40000000, &(0x7f0000003040)={r12, r13+10000000}) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000003080), 0x8) ioctl$PPPIOCBRIDGECHAN(r14, 0x40047435, &(0x7f00000030c0)=0x75) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003100)) socket$nl_xfrm(0x10, 0x3, 0x6) r15 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r15, &(0x7f0000003140)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$TUNGETSNDBUF(r14, 0x800454d3, &(0x7f0000003180)) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x89e2, &(0x7f00000031c0)={r0}) getsockopt$sock_int(r16, 0x1, 0xb, &(0x7f0000003200), &(0x7f0000003240)=0x4) 1.004915439s ago: executing program 1 (id=848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x86}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xea, 0xea, 0x6, [@typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @datasec={0x1, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x8, 0x8000}, {0x3, 0xffffffff, 0xdb}, {0x5, 0xd3f2, 0x5}, {0x4, 0x1, 0x2}, {0x1, 0x800, 0x5}], "cc4d"}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x9}, @enum64={0x7, 0xa, 0x0, 0x13, 0x1, 0xc, [{0xa, 0xfff, 0x80000000}, {0xa, 0x2, 0x7}, {0x1, 0x29d4cd66, 0x932}, {0x3, 0x800, 0x1}, {0xe, 0x7, 0x80000001}, {0xd, 0x4, 0x1}, {0xd, 0x5, 0xd28}, {0x2, 0x9, 0x401}, {0x4, 0x7, 0x145d}, {0x3, 0x5, 0x7}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x71]}}, &(0x7f0000001880)=""/28, 0x10a, 0x1c, 0x0, 0x8, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4e}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @ldst={0x3, 0x2, 0x0, 0xb, 0x9, 0x50, 0x1}, @call={0x85, 0x0, 0x0, 0x78}]}, &(0x7f0000001600)='syzkaller\x00', 0x7, 0xd0, &(0x7f0000001640)=""/208, 0x40f00, 0x23, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000001900)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001940)={0x4, 0x0, 0x5, 0x1}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000001980)=[{0x5, 0x4, 0x1, 0xc}, {0x2, 0x4, 0xc, 0x2}, {0x0, 0x4, 0xa, 0x1}, {0x3, 0x1, 0x4, 0xb}, {0x0, 0x4, 0xf, 0xb}, {0x0, 0x4, 0x0, 0x1}, {0x2, 0x3, 0xd, 0x7}, {0x4, 0x4, 0xd, 0x9}, {0x2, 0x1, 0x10, 0xb}, {0x3, 0x5, 0x5, 0xc}], 0x10, 0x80000001, @void, @value}, 0x94) ioctl$sock_bt_hci(r3, 0x400448dd, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x54, r2, 0xfe12482fe0801d67, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1f}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x17bfffc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x121c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x1200, 0x102, 0x0, 0x1, [@generic="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", @nested={0x115, 0x14, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x12e}, @generic="edb931e12619e3bd73876db9c35daa227a1c71e139c820c3ddea8ad35f43c9", @typed={0x14, 0xef, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="2eef16088faaa45deae2827d91c8700262d0390215218d55715dfa3cdbcf12c2a644c84aa4488a5d1a1aad9960af5cdc6746cef641538522af1d3c8e3e376ac61ce308a71f195b99fe5e5829e15d7c0478ed52ddca6487921543b4dffbcdf09b11375b22aa4313e7e9dc628435f49416bf9284b8248b9fcb5e41", @typed={0x47, 0x4f, 0x0, 0x0, @binary="1ff7b9d6c3ea8038c63304096206a1a43e4abdb86137523881f35758e02f2138e71f8104db5ca1dcdd33ace64906f63acfea2af463e3ac780529953803f05a01ed736e"}, @nested={0x4, 0x139}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0x61}]}, @nested={0x74, 0xc2, 0x0, 0x1, [@nested={0x4, 0x7c}, @generic="2fbf3bb783a7db913b93a962dd7fe34ce7385af7cfcf7cc94a15c4fdcc30d1465dcaa6220c20762a863a975e01d382771cf36bc897b7639c11103fc45b5de3bb2ec923916f2d62318a32c7b9f47f17a20e68c1cce05d55b842a3b27987f3578fa08be283", @typed={0x8, 0x119, 0x0, 0x0, @uid=r7}]}, @generic="ac833d5a78acfc6d9bcfcaec6d1132016a3d0f301fa9d77045d9b6d9136befdc8c013be4576dc4e39f2352885a3f08a381e0b06d0a79030b1831fb74391b69bdaac1257f6f7bf1765f63399a", @nested={0x18, 0xbc, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0xc, 0xda, 0x0, 0x0, @u64=0x2}]}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x121c}}, 0x0) 1.004134168s ago: executing program 2 (id=849): r0 = socket(0x1d, 0x2, 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xff}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 980.887943ms ago: executing program 0 (id=850): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000005c00), 0x0, 0x32, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000001480)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000200)={'ip6tnl0\x00', {0x2, 0x4e24, @private=0xa010102}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x3b, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x4, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000740)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x48054) sendmmsg(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x20, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x0) 980.304659ms ago: executing program 3 (id=851): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xe, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=ANY=[@ANYBLOB="2400000014005fc37c2abd7000fbdbdf2510010e000000c000550dc419290b3f4e000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040) openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) bind$ax25(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) 687.487386ms ago: executing program 2 (id=852): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}, 0x40002042) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040004) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r5 = socket$tipc(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000340)={0x0, 'netdevsim0\x00', {0x1}, 0x3}) 679.482106ms ago: executing program 1 (id=853): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000002}) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x1574, 0x30, 0x8, 0x70bd25, 0x25dfdbff, {0x4}, [@nested={0x19e, 0xd7, 0x0, 0x1, [@generic="bd67c361449f2e95ab62fc0217e70a43bdc94d309c3269e474c7f12f348e5de722953e11ca7ece34fc3f7f11be469bb800a6b38d8d8c0b8e712e4cccca2a794e18eb20b1c31f69a56aa771762b8a58699655063a0320f53cefdeed8fabed6840d7e0f4009259100a519aad8abd61a035d01055828e38bf33f612", @nested={0x4, 0xa7}, @typed={0x8, 0x80, 0x0, 0x0, @u32=0x80000001}, @generic="c9ef2968a21324951ab1ab5e1a07f28b2769e6740b95ac72f45ed68d452bd2a66bf0b937f881cffcd8637d0456328492c1308b98fe036fffe540630cf1f05326e52209619888053d504c720238a948cb95d36af980c21846d3b69ca20cf20bbcc08d1db66431a63ee1466ce178d9275712c0b4c7496a708431478cd5823b11123d5dc8d6c42c4f9716eadae03146fa6499d691b03921391d926bd8fa8981ee1b62b47c457d51a2067dab77620e0087ba21cbfebf9056", @generic="f11d562ce7a57feb978e2ad5b312eb25f96f183362da8db5946c9f0ae396c629f848e6d59d696a0e7a1437269c3edf5f19942873ce5ac133e3504a2b062d8ede47ba7c2b52d9d46721613c1c25440d9b55eed4a9150d63798fc09f1c3ca6"]}, @generic="8c21953ac80368b685e57eb1694aeede21bf2063888e4aa4799cc38fa6f3201a86f602aa694d400752c11ba3814aa883129b415bed93b8d42f24826fc78e6d46a44fe4c3f903db068ead99f6c04a17e791cf37992bbfab33a6992297fb325ba87e2ac2861dcde479895271c814ff9d8c5a9c0721e264bfbe52", @nested={0x8, 0x1d, 0x0, 0x1, [@nested={0x4, 0x122}]}, @generic="b85f98f566e22ab69d41783a384a692d144768d346bc2753b76a978d87c8b829eabc67f6da4bf422e3af1d8fdde4e024920f1c137b8e3449f56045f72d442554af28b0aa3214ded92acb6c6aa70656bf9b25ecac3269364bb8f1ae48ec24249cc9055ebf8af891", @nested={0xf9, 0x2a, 0x0, 0x1, [@nested={0x4, 0x29}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0x8}, @generic="721872d4807b0d8fb6ffc0f5fbc47f2294d1540bf973455962abc86430855635cbf8c53f331b26a9753930764ea96d0f71b201a2f8cd4e8f43b9373a285262b82d02a2728515ff888d2c11ecf212b5cbe8e88838b12b21f18ddf8182292b43fd47c48fe92ffd79e87481aac5bb4f15e4c1f1af40ad0ae7a07dad2378ecb6abcb13d1f57e88e51bb024918427071c9a8f2698d8e8b223620903c93b281a2fcc9f7843b9fa99f7700f2adb892be6adc3b4af6e6687cb1ef2b7c5137011dd2defaf6581e0a777e3cdb606de7abcf0ea6bc2bf5c4216e3cb9e190cc91cb59dece95faba40e85419eaac540"]}, @generic="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", @nested={0x8, 0xcc, 0x0, 0x1, [@nested={0x4, 0x5e}]}, @generic="8642f0a82ad1082176250fcc6da969fc5c9fab13d901ac7f63269a299cedf6dcf912e5f309784df94a851bed7e19cb39a13fb885831cb87fa88ee50f7f13c714ed6807fb8bda2fa28535ce6ebf75e6d5937921497bca54f9605cdc13ac131f9b41ac6505e46e8b2966f16b2dbcc2378884e1bbf71614001c3899c7a23d4997ea56098667940c9f1fa764e3e526bc15ff9f0effcc6726ef670c1714fa98cc49299dc90b685d44e170d3201b36a2286232601e0ebfe6f962a49449bf538fb8c2d2bec54572516201827df73cee9df5bbe27ecc39d96c7e489e8c6489c794a2bb6efb64", @nested={0xf0, 0x2b, 0x0, 0x1, [@nested={0x4, 0x139}, @typed={0x8, 0x139, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0xdd, 0xa4, 0x0, 0x0, @binary="083f4bd25deee89151e5c7d130ab40d6922ca1a74562ff42dad17a4e34bbdb38798656906ca758517643936dbe0e9db9825e9c133b4133804beb857124aa2c6bccd1d096d6aaa41180f503544f4a9c1177c9abdf34e78a96e06d8934ccd7ac2e44ba6ed7cc468988aa1b8e8f4ebb091fee8629b9ad83ba8e42166ac35a49d80cb12d80d94cc34a1677b933c5c24c4cdf7cb1f9796a0011ce39c4a5bdceda9d788ef79ca7b61fff5324c13c7cb491b8779eee406872a297a209795787a18c1c3c532838d74d3b753db74f1e0ab4492f453f57ca5fcb98563f61"}]}]}, 0x1574}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB='\x00'], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 357.340563ms ago: executing program 2 (id=854): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x64}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0xb, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000014"], 0x34}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc0d016e4ecff866b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c00028005000100000000"], 0x88}}, 0x4008000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 315.381197ms ago: executing program 1 (id=855): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000240)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="5f1bebbf19", 0x5}], 0x1, 0x0, 0xfffffffffffffdfb}, 0x4000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250f000000050033000100000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r2, {0x1f, 0x3}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="24002d80050001000000000005000400000000ff090002"], 0x40}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 0s ago: executing program 1 (id=856): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000003000100000000003f000000110000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x1) unshare(0x40040000) shutdown(r1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000070000000600000000000007000000000000"], 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x100000001, 0x4, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) listen(r0, 0x558d) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) r5 = epoll_create(0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000240)={0xb0000000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062013c00000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): T6089] ip_vti0: entered promiscuous mode [ 71.324666][ T6089] ip6_vti0: entered promiscuous mode [ 71.342302][ T6089] sit0: entered promiscuous mode [ 71.355695][ T6089] ip6tnl0: entered promiscuous mode [ 71.363572][ T6089] ip6gre0: entered promiscuous mode [ 71.371039][ T6089] syz_tun: entered promiscuous mode [ 71.377634][ T6089] ip6gretap0: entered promiscuous mode [ 71.387049][ T6089] bridge0: entered promiscuous mode [ 71.393022][ T6089] vcan0: entered promiscuous mode [ 71.398874][ T6089] bond0: entered promiscuous mode [ 71.403916][ T6089] bond_slave_0: entered promiscuous mode [ 71.410555][ T6089] bond_slave_1: entered promiscuous mode [ 71.418065][ T6089] team0: entered promiscuous mode [ 71.423296][ T6089] team_slave_0: entered promiscuous mode [ 71.430530][ T6089] team_slave_1: entered promiscuous mode [ 71.437761][ T6089] dummy0: entered promiscuous mode [ 71.443896][ T6089] nlmon0: entered promiscuous mode [ 71.451278][ T6089] caif0: entered promiscuous mode [ 71.457228][ T6089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.514954][ T6102] lo: entered promiscuous mode [ 71.521607][ T6102] tunl0: entered promiscuous mode [ 71.529870][ T6102] gre0: entered promiscuous mode [ 71.535988][ T6102] gretap0: entered promiscuous mode [ 71.542349][ T6102] erspan0: entered promiscuous mode [ 71.548608][ T6102] ip_vti0: entered promiscuous mode [ 71.554657][ T6102] ip6_vti0: entered promiscuous mode [ 71.563133][ T6102] sit0: entered promiscuous mode [ 71.569328][ T6102] ip6tnl0: entered promiscuous mode [ 71.575438][ T6102] ip6gre0: entered promiscuous mode [ 71.582169][ T6102] syz_tun: entered promiscuous mode [ 71.589405][ T6102] ip6gretap0: entered promiscuous mode [ 71.595627][ T6102] bridge0: entered promiscuous mode [ 71.601804][ T6102] vcan0: entered promiscuous mode [ 71.610114][ T6102] bond0: entered promiscuous mode [ 71.615334][ T6102] bond_slave_0: entered promiscuous mode [ 71.624126][ T6102] bond_slave_1: entered promiscuous mode [ 71.635557][ T6102] team0: entered promiscuous mode [ 71.640815][ T6102] team_slave_0: entered promiscuous mode [ 71.646786][ T6102] team_slave_1: entered promiscuous mode [ 71.653105][ T6102] dummy0: entered promiscuous mode [ 71.659879][ T6102] nlmon0: entered promiscuous mode [ 71.668179][ T6102] caif0: entered promiscuous mode [ 71.673489][ T6102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.757143][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.761082][ T5934] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.764556][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.812094][ T5934] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.873989][ T5934] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.901942][ T5934] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.131425][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 72.144973][ T6105] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 72.764672][ T6118] warning: `syz.4.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.983659][ T6127] FAULT_INJECTION: forcing a failure. [ 72.983659][ T6127] name failslab, interval 1, probability 0, space 0, times 1 [ 73.032792][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.2.48 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 73.032817][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.032831][ T6127] Call Trace: [ 73.032837][ T6127] [ 73.032844][ T6127] dump_stack_lvl+0x241/0x360 [ 73.032876][ T6127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.032893][ T6127] ? __pfx__printk+0x10/0x10 [ 73.032912][ T6127] ? __kmalloc_cache_noprof+0x48/0x390 [ 73.032933][ T6127] ? __pfx___might_resched+0x10/0x10 [ 73.032958][ T6127] should_fail_ex+0x40a/0x550 [ 73.032985][ T6127] should_failslab+0xac/0x100 [ 73.033008][ T6127] __kmalloc_cache_noprof+0x70/0x390 [ 73.033027][ T6127] ? dev_ethtool+0x13d/0x1d70 [ 73.033047][ T6127] dev_ethtool+0x13d/0x1d70 [ 73.033069][ T6127] ? __pfx_lock_acquire+0x10/0x10 [ 73.033092][ T6127] ? dev_load+0x21/0x1f0 [ 73.033112][ T6127] ? __pfx_dev_ethtool+0x10/0x10 [ 73.033128][ T6127] ? tomoyo_path_number_perm+0x5dd/0x770 [ 73.033160][ T6127] ? dev_load+0x21/0x1f0 [ 73.033181][ T6127] dev_ioctl+0x785/0x1340 [ 73.033205][ T6127] sock_do_ioctl+0x240/0x460 [ 73.033230][ T6127] ? __pfx_sock_do_ioctl+0x10/0x10 [ 73.033266][ T6127] sock_ioctl+0x626/0x8e0 [ 73.033286][ T6127] ? __pfx_sock_ioctl+0x10/0x10 [ 73.033305][ T6127] ? __fget_files+0x2a/0x410 [ 73.033328][ T6127] ? __fget_files+0x2a/0x410 [ 73.033353][ T6127] ? __pfx_sock_ioctl+0x10/0x10 [ 73.033373][ T6127] __se_sys_ioctl+0xf5/0x170 [ 73.033393][ T6127] do_syscall_64+0xf3/0x230 [ 73.033417][ T6127] ? clear_bhb_loop+0x35/0x90 [ 73.033439][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.033461][ T6127] RIP: 0033:0x7f39cff8d169 [ 73.033478][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.033491][ T6127] RSP: 002b:00007f39d0eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.033509][ T6127] RAX: ffffffffffffffda RBX: 00007f39d01a5fa0 RCX: 00007f39cff8d169 [ 73.033520][ T6127] RDX: 0000400000000e00 RSI: 0000000000008946 RDI: 0000000000000003 [ 73.033529][ T6127] RBP: 00007f39d0eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 73.033539][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.033549][ T6127] R13: 0000000000000000 R14: 00007f39d01a5fa0 R15: 00007ffd9175d138 [ 73.033574][ T6127] [ 73.367324][ T6109] lo: entered promiscuous mode [ 73.376038][ T6109] tunl0: entered promiscuous mode [ 73.403521][ T6109] gre0: entered promiscuous mode [ 73.423455][ T6109] gretap0: entered promiscuous mode [ 73.429109][ T6109] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 74.002503][ T6145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.067495][ T5149] Bluetooth: hci4: command 0x0419 tx timeout [ 74.393488][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 74.422249][ T6163] netlink: 'syz.3.58': attribute type 1 has an invalid length. [ 74.443634][ T6160] bridge0: port 2(bridge_slave_1) entered learning state [ 74.459678][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.665156][ T6169] syz.2.61 uses obsolete (PF_INET,SOCK_PACKET) [ 74.799687][ T6176] FAULT_INJECTION: forcing a failure. [ 74.799687][ T6176] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.813280][ T6176] CPU: 1 UID: 0 PID: 6176 Comm: syz.4.63 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 74.813302][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.813311][ T6176] Call Trace: [ 74.813316][ T6176] [ 74.813322][ T6176] dump_stack_lvl+0x241/0x360 [ 74.813345][ T6176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.813362][ T6176] ? __pfx__printk+0x10/0x10 [ 74.813378][ T6176] ? __pfx_lock_release+0x10/0x10 [ 74.813398][ T6176] ? vfs_write+0x7fa/0xd10 [ 74.813416][ T6176] should_fail_ex+0x40a/0x550 [ 74.813440][ T6176] _copy_from_user+0x2d/0xb0 [ 74.813460][ T6176] move_addr_to_kernel+0x82/0x150 [ 74.813479][ T6176] __sys_connect+0xb6/0x2d0 [ 74.813500][ T6176] ? __fget_files+0x2a/0x410 [ 74.813520][ T6176] ? __pfx___sys_connect+0x10/0x10 [ 74.813548][ T6176] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.813578][ T6176] ? do_syscall_64+0x100/0x230 [ 74.813601][ T6176] __x64_sys_connect+0x7a/0x90 [ 74.813622][ T6176] do_syscall_64+0xf3/0x230 [ 74.813640][ T6176] ? clear_bhb_loop+0x35/0x90 [ 74.813663][ T6176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.813683][ T6176] RIP: 0033:0x7fef5c98d169 [ 74.813697][ T6176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.813709][ T6176] RSP: 002b:00007fef5a7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 74.813726][ T6176] RAX: ffffffffffffffda RBX: 00007fef5cba5fa0 RCX: 00007fef5c98d169 [ 74.813737][ T6176] RDX: 0000000000000010 RSI: 0000400000000180 RDI: 0000000000000003 [ 74.813746][ T6176] RBP: 00007fef5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 74.813756][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.813765][ T6176] R13: 0000000000000000 R14: 00007fef5cba5fa0 R15: 00007ffdf8d1b698 [ 74.813786][ T6176] [ 75.116114][ T6174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.713484][ T6191] bridge0: port 2(bridge_slave_1) entered learning state [ 75.740960][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.831979][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 75.860775][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.895452][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.937030][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.944499][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.121332][ T6214] netlink: 'syz.2.75': attribute type 9 has an invalid length. [ 76.312761][ T5149] Bluetooth: hci4: command 0x0419 tx timeout [ 76.465308][ T6226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.78'. [ 76.481511][ T6226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.78'. [ 76.526558][ T6226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.78'. [ 76.654287][ T6226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.78'. [ 76.934807][ T6238] trusted_key: syz.0.80 sent an empty control message without MSG_MORE. [ 77.090883][ T6236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.195105][ T6240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.354702][ T6242] lo: entered promiscuous mode [ 77.396225][ T6242] tunl0: entered promiscuous mode [ 77.427104][ T6242] gre0: entered promiscuous mode [ 77.439391][ T6242] gretap0: entered promiscuous mode [ 77.445246][ T6242] erspan0: entered promiscuous mode [ 77.452341][ T6242] ip_vti0: entered promiscuous mode [ 77.458613][ T6242] ip6_vti0: entered promiscuous mode [ 77.464885][ T6242] sit0: entered promiscuous mode [ 77.471011][ T6242] ip6tnl0: entered promiscuous mode [ 77.477690][ T6242] ip6gre0: entered promiscuous mode [ 77.484009][ T6242] syz_tun: entered promiscuous mode [ 77.491078][ T6242] ip6gretap0: entered promiscuous mode [ 77.498564][ T6242] bridge0: entered promiscuous mode [ 77.504560][ T6242] vcan0: entered promiscuous mode [ 77.519305][ T6242] bond0: entered promiscuous mode [ 77.534831][ T6242] bond_slave_0: entered promiscuous mode [ 77.553407][ T6242] bond_slave_1: entered promiscuous mode [ 77.569746][ T6242] team0: entered promiscuous mode [ 77.574993][ T6242] team_slave_0: entered promiscuous mode [ 77.581427][ T6242] team_slave_1: entered promiscuous mode [ 77.588349][ T6242] dummy0: entered promiscuous mode [ 77.594443][ T6242] nlmon0: entered promiscuous mode [ 77.602997][ T6242] caif0: entered promiscuous mode [ 77.608465][ T6242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.525458][ T6260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.543022][ T6260] bond1: entered promiscuous mode [ 78.554397][ T6260] bond0: (slave bond1): Enslaving as an active interface with an up link [ 78.714005][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 79.292669][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 79.335199][ T6305] netlink: 'syz.2.94': attribute type 1 has an invalid length. [ 79.640708][ T6315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.97'. [ 80.537676][ T6347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.105'. [ 80.688317][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 80.822525][ T6361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.106'. [ 81.149511][ T6376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.562206][ T6395] __nla_validate_parse: 1 callbacks suppressed [ 81.562223][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.111'. [ 81.610124][ T6395] FAULT_INJECTION: forcing a failure. [ 81.610124][ T6395] name failslab, interval 1, probability 0, space 0, times 0 [ 81.653335][ T6395] CPU: 1 UID: 0 PID: 6395 Comm: syz.0.111 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 81.653359][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.653369][ T6395] Call Trace: [ 81.653375][ T6395] [ 81.653382][ T6395] dump_stack_lvl+0x241/0x360 [ 81.653409][ T6395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.653427][ T6395] ? __pfx__printk+0x10/0x10 [ 81.653446][ T6395] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 81.653468][ T6395] ? __pfx___might_resched+0x10/0x10 [ 81.653492][ T6395] should_fail_ex+0x40a/0x550 [ 81.653517][ T6395] should_failslab+0xac/0x100 [ 81.653538][ T6395] __kmalloc_node_noprof+0xe1/0x4d0 [ 81.653556][ T6395] ? alloc_slab_obj_exts+0x3a/0xa0 [ 81.653573][ T6395] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 81.653596][ T6395] alloc_slab_obj_exts+0x3a/0xa0 [ 81.653615][ T6395] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 81.653639][ T6395] ? kasan_unpoison+0x46/0x70 [ 81.653660][ T6395] __kmalloc_node_noprof+0x30d/0x4d0 [ 81.653680][ T6395] ? __kvmalloc_node_noprof+0x72/0x190 [ 81.653704][ T6395] ? __pfx_macvlan_setup+0x10/0x10 [ 81.653731][ T6395] __kvmalloc_node_noprof+0x72/0x190 [ 81.653755][ T6395] alloc_netdev_mqs+0xa4/0x1210 [ 81.653774][ T6395] ? __pfx_macvlan_setup+0x10/0x10 [ 81.653795][ T6395] rtnl_create_link+0x2f9/0xc90 [ 81.653821][ T6395] rtnl_newlink_create+0x2e1/0xbd0 [ 81.653850][ T6395] ? __pfx_aa_get_newest_label+0x10/0x10 [ 81.653876][ T6395] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 81.653902][ T6395] ? __pfx___mutex_lock+0x10/0x10 [ 81.653935][ T6395] ? ns_capable+0x8a/0xf0 [ 81.653958][ T6395] rtnl_newlink+0x167a/0x1d90 [ 81.653981][ T6395] ? stack_depot_save_flags+0x37/0x940 [ 81.654016][ T6395] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.654035][ T6395] ? __netlink_deliver_tap+0x561/0x7f0 [ 81.654056][ T6395] ? __pfx_validate_chain+0x10/0x10 [ 81.654072][ T6395] ? __sock_sendmsg+0x221/0x270 [ 81.654089][ T6395] ? ____sys_sendmsg+0x53a/0x860 [ 81.654104][ T6395] ? __sys_sendmsg+0x269/0x350 [ 81.654117][ T6395] ? do_syscall_64+0xf3/0x230 [ 81.654133][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.654173][ T6395] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.654199][ T6395] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.654229][ T6395] ? mark_lock+0x9a/0x360 [ 81.654249][ T6395] ? __lock_acquire+0x1397/0x2100 [ 81.654302][ T6395] ? __pfx_lock_release+0x10/0x10 [ 81.654339][ T6395] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.654362][ T6395] rtnetlink_rcv_msg+0x791/0xcf0 [ 81.654381][ T6395] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 81.654408][ T6395] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.654436][ T6395] ? ref_tracker_free+0x643/0x7e0 [ 81.654458][ T6395] netlink_rcv_skb+0x206/0x480 [ 81.654480][ T6395] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.654503][ T6395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.654547][ T6395] ? netlink_deliver_tap+0x2e/0x1b0 [ 81.654570][ T6395] netlink_unicast+0x7f6/0x990 [ 81.654598][ T6395] ? __pfx_netlink_unicast+0x10/0x10 [ 81.654615][ T6395] ? __virt_addr_valid+0x45f/0x530 [ 81.654632][ T6395] ? __phys_addr_symbol+0x2f/0x70 [ 81.654647][ T6395] ? __check_object_size+0x47a/0x730 [ 81.654672][ T6395] netlink_sendmsg+0x8de/0xcb0 [ 81.654705][ T6395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.654736][ T6395] ? aa_sock_msg_perm+0x91/0x160 [ 81.654764][ T6395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.654783][ T6395] __sock_sendmsg+0x221/0x270 [ 81.654806][ T6395] ____sys_sendmsg+0x53a/0x860 [ 81.654832][ T6395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.654847][ T6395] ? __fget_files+0x2a/0x410 [ 81.654872][ T6395] ? __fget_files+0x2a/0x410 [ 81.654902][ T6395] __sys_sendmsg+0x269/0x350 [ 81.654924][ T6395] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.654955][ T6395] ? do_sys_openat2+0x17a/0x1d0 [ 81.655003][ T6395] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.655026][ T6395] ? do_syscall_64+0x100/0x230 [ 81.655048][ T6395] ? do_syscall_64+0xb6/0x230 [ 81.655070][ T6395] do_syscall_64+0xf3/0x230 [ 81.655088][ T6395] ? clear_bhb_loop+0x35/0x90 [ 81.655111][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.655131][ T6395] RIP: 0033:0x7f9eef78d169 [ 81.655146][ T6395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.655159][ T6395] RSP: 002b:00007f9ef05a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.655177][ T6395] RAX: ffffffffffffffda RBX: 00007f9eef9a5fa0 RCX: 00007f9eef78d169 [ 81.655188][ T6395] RDX: 000000000000c014 RSI: 00004000000002c0 RDI: 0000000000000003 [ 81.655197][ T6395] RBP: 00007f9ef05a5090 R08: 0000000000000000 R09: 0000000000000000 [ 81.655207][ T6395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.655216][ T6395] R13: 0000000000000000 R14: 00007f9eef9a5fa0 R15: 00007ffeccac7b88 [ 81.655241][ T6395] [ 82.265918][ T25] cfg80211: failed to load regulatory.db [ 82.739993][ T6421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.119'. [ 82.852658][ T6425] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 82.884058][ T6425] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 82.908283][ T6425] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 82.975581][ T6435] raw_sendmsg: syz.3.121 forgot to set AF_INET. Fix it! [ 82.997949][ T6435] netlink: 'syz.3.121': attribute type 11 has an invalid length. [ 83.128346][ T6438] FAULT_INJECTION: forcing a failure. [ 83.128346][ T6438] name failslab, interval 1, probability 0, space 0, times 0 [ 83.139561][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 83.204718][ T6438] CPU: 0 UID: 0 PID: 6438 Comm: syz.2.122 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 83.204746][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.204755][ T6438] Call Trace: [ 83.204761][ T6438] [ 83.204768][ T6438] dump_stack_lvl+0x241/0x360 [ 83.204795][ T6438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.204813][ T6438] ? __pfx__printk+0x10/0x10 [ 83.204832][ T6438] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 83.204854][ T6438] ? __pfx___might_resched+0x10/0x10 [ 83.204879][ T6438] should_fail_ex+0x40a/0x550 [ 83.204906][ T6438] should_failslab+0xac/0x100 [ 83.204928][ T6438] kmem_cache_alloc_node_noprof+0x77/0x380 [ 83.204947][ T6438] ? __alloc_skb+0x1c3/0x440 [ 83.204961][ T6438] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 83.204986][ T6438] __alloc_skb+0x1c3/0x440 [ 83.205007][ T6438] ? __pfx___alloc_skb+0x10/0x10 [ 83.205027][ T6438] ? if_nlmsg_size+0x540/0x7b0 [ 83.205049][ T6438] rtmsg_ifinfo_build_skb+0x84/0x260 [ 83.205075][ T6438] rtnetlink_event+0x1b1/0x260 [ 83.205112][ T6438] notifier_call_chain+0x1a5/0x3f0 [ 83.205139][ T6438] netif_set_mtu_ext+0x4e5/0x710 [ 83.205161][ T6438] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 83.205178][ T6438] ? validate_linkmsg+0x828/0xa40 [ 83.205202][ T6438] ? __pfx_validate_linkmsg+0x10/0x10 [ 83.205230][ T6438] do_setlink+0xc19/0x40f0 [ 83.205268][ T6438] ? mark_lock+0x9a/0x360 [ 83.205286][ T6438] ? __pfx_do_setlink+0x10/0x10 [ 83.205305][ T6438] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.205329][ T6438] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.205356][ T6438] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 83.205372][ T6438] ? lockdep_hardirqs_on+0x99/0x150 [ 83.205390][ T6438] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 83.205407][ T6438] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.205428][ T6438] ? rcu_is_watching+0x15/0xb0 [ 83.205447][ T6438] ? __mutex_lock+0xba3/0x1010 [ 83.205465][ T6438] ? __mutex_lock+0x602/0x1010 [ 83.205487][ T6438] ? rtnl_newlink+0xc4c/0x1d90 [ 83.205507][ T6438] ? __pfx___mutex_lock+0x10/0x10 [ 83.205538][ T6438] ? ns_capable+0x8a/0xf0 [ 83.205555][ T6438] ? rtnl_link_get_net_capable+0x168/0x340 [ 83.205576][ T6438] rtnl_newlink+0x141c/0x1d90 [ 83.205595][ T6438] ? stack_depot_save_flags+0x37/0x940 [ 83.205626][ T6438] ? __pfx_rtnl_newlink+0x10/0x10 [ 83.205643][ T6438] ? __netlink_deliver_tap+0x561/0x7f0 [ 83.205667][ T6438] ? __pfx_validate_chain+0x10/0x10 [ 83.205682][ T6438] ? __sock_sendmsg+0x221/0x270 [ 83.205699][ T6438] ? ____sys_sendmsg+0x53a/0x860 [ 83.205711][ T6438] ? __sys_sendmsg+0x269/0x350 [ 83.205725][ T6438] ? do_syscall_64+0xf3/0x230 [ 83.205741][ T6438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.205778][ T6438] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.205801][ T6438] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.205830][ T6438] ? mark_lock+0x9a/0x360 [ 83.205848][ T6438] ? __lock_acquire+0x1397/0x2100 [ 83.205898][ T6438] ? __pfx_lock_release+0x10/0x10 [ 83.205934][ T6438] ? __pfx_rtnl_newlink+0x10/0x10 [ 83.205956][ T6438] rtnetlink_rcv_msg+0x791/0xcf0 [ 83.205973][ T6438] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 83.205993][ T6438] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 83.206016][ T6438] ? ref_tracker_free+0x643/0x7e0 [ 83.206036][ T6438] netlink_rcv_skb+0x206/0x480 [ 83.206056][ T6438] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 83.206077][ T6438] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.206115][ T6438] ? netlink_deliver_tap+0x2e/0x1b0 [ 83.206137][ T6438] netlink_unicast+0x7f6/0x990 [ 83.206163][ T6438] ? __pfx_netlink_unicast+0x10/0x10 [ 83.206180][ T6438] ? __virt_addr_valid+0x45f/0x530 [ 83.206196][ T6438] ? __phys_addr_symbol+0x2f/0x70 [ 83.206208][ T6438] ? __check_object_size+0x47a/0x730 [ 83.206232][ T6438] netlink_sendmsg+0x8de/0xcb0 [ 83.206264][ T6438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.206288][ T6438] ? aa_sock_msg_perm+0x91/0x160 [ 83.206315][ T6438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.206331][ T6438] __sock_sendmsg+0x221/0x270 [ 83.206353][ T6438] ____sys_sendmsg+0x53a/0x860 [ 83.206375][ T6438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.206388][ T6438] ? __fget_files+0x2a/0x410 [ 83.206409][ T6438] ? __fget_files+0x2a/0x410 [ 83.206437][ T6438] __sys_sendmsg+0x269/0x350 [ 83.206458][ T6438] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.206486][ T6438] ? do_sys_openat2+0x17a/0x1d0 [ 83.206537][ T6438] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.206559][ T6438] ? do_syscall_64+0x100/0x230 [ 83.206580][ T6438] ? do_syscall_64+0xb6/0x230 [ 83.206600][ T6438] do_syscall_64+0xf3/0x230 [ 83.206618][ T6438] ? clear_bhb_loop+0x35/0x90 [ 83.206642][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.206659][ T6438] RIP: 0033:0x7f39cff8d169 [ 83.206674][ T6438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.206686][ T6438] RSP: 002b:00007f39d0eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.206703][ T6438] RAX: ffffffffffffffda RBX: 00007f39d01a5fa0 RCX: 00007f39cff8d169 [ 83.206715][ T6438] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003 [ 83.206724][ T6438] RBP: 00007f39d0eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 83.206734][ T6438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.206743][ T6438] R13: 0000000000000000 R14: 00007f39d01a5fa0 R15: 00007ffd9175d138 [ 83.206769][ T6438] [ 83.486093][ T6417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.116'. [ 84.218588][ T6457] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.250309][ T6457] bond2: entered promiscuous mode [ 84.258065][ T6457] bond0: (slave bond2): Enslaving as an active interface with an up link [ 84.363153][ T6471] netlink: 'syz.2.129': attribute type 5 has an invalid length. [ 84.491254][ T6471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.129'. [ 85.003498][ T6501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.137'. [ 85.040255][ T6501] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 85.069408][ T6501] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 85.112960][ T6501] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 85.453562][ T6517] netlink: 'syz.2.145': attribute type 17 has an invalid length. [ 85.471889][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 85.563888][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 86.030078][ T6539] tipc: Started in network mode [ 86.051788][ T6539] tipc: Node identity e0000002, cluster identity 4711 [ 86.084711][ T6539] tipc: Enabling of bearer rejected, failed to enable media [ 86.715254][ T6553] xt_CT: No such helper "netbios-ns" [ 86.733380][ T6559] sctp: [Deprecated]: syz.0.161 (pid 6559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.733380][ T6559] Use struct sctp_sack_info instead [ 86.771740][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 86.831449][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 86.858308][ T6550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.884916][ T6550] bond1: entered promiscuous mode [ 86.917274][ T6550] bond0: (slave bond1): Enslaving as an active interface with an up link [ 86.962391][ T6567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.163'. [ 87.000041][ T6569] netlink: 'syz.4.166': attribute type 12 has an invalid length. [ 87.014558][ T6567] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 87.052091][ T6567] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 87.088354][ T6574] syzkaller1: entered promiscuous mode [ 87.093879][ T6574] syzkaller1: entered allmulticast mode [ 87.103627][ T6567] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 87.511218][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 87.561070][ T6601] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 87.626810][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 87.667217][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.674692][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.698430][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.705910][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.872694][ T6581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.211400][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 88.223943][ T6617] netlink: 'syz.0.177': attribute type 2 has an invalid length. [ 88.231798][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 88.421973][ T6628] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 88.464779][ T6624] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 88.509392][ T6624] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 88.724717][ T6640] netlink: 60 bytes leftover after parsing attributes in process `syz.4.186'. [ 88.735631][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 88.745135][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 88.767346][ T6640] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 88.776749][ T6640] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 88.785214][ T6640] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 89.604760][ T6670] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 90.048116][ T6696] FAULT_INJECTION: forcing a failure. [ 90.048116][ T6696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.100728][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.1.209 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 90.100755][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.100765][ T6696] Call Trace: [ 90.100770][ T6696] [ 90.100778][ T6696] dump_stack_lvl+0x241/0x360 [ 90.100804][ T6696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.100821][ T6696] ? __pfx__printk+0x10/0x10 [ 90.100838][ T6696] ? __pfx_lock_release+0x10/0x10 [ 90.100868][ T6696] should_fail_ex+0x40a/0x550 [ 90.100894][ T6696] _copy_from_user+0x2d/0xb0 [ 90.100915][ T6696] copy_msghdr_from_user+0xae/0x680 [ 90.100950][ T6696] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 90.100969][ T6696] ? __fget_files+0x2a/0x410 [ 90.100993][ T6696] ? __fget_files+0x2a/0x410 [ 90.101021][ T6696] __sys_sendmsg+0x209/0x350 [ 90.101043][ T6696] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.101072][ T6696] ? do_sys_openat2+0x17a/0x1d0 [ 90.101116][ T6696] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.101139][ T6696] ? do_syscall_64+0x100/0x230 [ 90.101161][ T6696] ? do_syscall_64+0xb6/0x230 [ 90.101182][ T6696] do_syscall_64+0xf3/0x230 [ 90.101199][ T6696] ? clear_bhb_loop+0x35/0x90 [ 90.101222][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.101241][ T6696] RIP: 0033:0x7f8802d8d169 [ 90.101255][ T6696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.101268][ T6696] RSP: 002b:00007f8803b72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.101286][ T6696] RAX: ffffffffffffffda RBX: 00007f8802fa5fa0 RCX: 00007f8802d8d169 [ 90.101297][ T6696] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003 [ 90.101308][ T6696] RBP: 00007f8803b72090 R08: 0000000000000000 R09: 0000000000000000 [ 90.101317][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.101327][ T6696] R13: 0000000000000000 R14: 00007f8802fa5fa0 R15: 00007ffc10c6e858 [ 90.101351][ T6696] [ 90.386436][ T5149] Bluetooth: hci4: command 0x0419 tx timeout [ 90.750260][ T6711] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 91.295270][ T6718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.401394][ T6719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.546948][ T6727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.843776][ T6741] __nla_validate_parse: 6 callbacks suppressed [ 91.843795][ T6741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.223'. [ 92.018545][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 92.099728][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 92.114023][ T6750] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 92.128576][ T6747] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 92.813593][ T6772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.234'. [ 92.882238][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 92.896406][ T6770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.235'. [ 92.915556][ T6770] gtp0: entered promiscuous mode [ 92.946475][ T6770] gtp0: entered allmulticast mode [ 93.068602][ T6770] syz.0.235 (6770) used greatest stack depth: 17872 bytes left [ 93.305735][ T6785] bridge_slave_0: left allmulticast mode [ 93.314949][ T6785] bridge_slave_0: left promiscuous mode [ 93.324284][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.341172][ T6787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.240'. [ 93.357307][ T6785] bridge_slave_1: left allmulticast mode [ 93.373850][ T6785] bridge_slave_1: left promiscuous mode [ 93.380433][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.400224][ T6785] bond0: (slave bond_slave_0): Releasing backup interface [ 93.417483][ T6785] bond_slave_0: left promiscuous mode [ 93.431022][ T6785] bond0: (slave bond_slave_1): Releasing backup interface [ 93.438752][ T6790] Bluetooth: MGMT ver 1.23 [ 93.447867][ T6785] bond_slave_1: left promiscuous mode [ 93.481161][ T6785] team_slave_0: left promiscuous mode [ 93.504587][ T6785] team0: Port device team_slave_0 removed [ 93.519653][ T6785] team_slave_1: left promiscuous mode [ 93.540504][ T6785] team0: Port device team_slave_1 removed [ 93.594264][ T6788] team0: Mode changed to "loadbalance" [ 93.660475][ T6789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.732443][ T6796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.876541][ T6801] FAULT_INJECTION: forcing a failure. [ 93.876541][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 93.889514][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.3.243 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 93.889534][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.889543][ T6801] Call Trace: [ 93.889549][ T6801] [ 93.889565][ T6801] dump_stack_lvl+0x241/0x360 [ 93.889589][ T6801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.889604][ T6801] ? __pfx__printk+0x10/0x10 [ 93.889626][ T6801] ? __ip_dev_find+0x497/0x570 [ 93.889651][ T6801] should_fail_ex+0x40a/0x550 [ 93.889678][ T6801] should_failslab+0xac/0x100 [ 93.889699][ T6801] ? dst_alloc+0x12b/0x190 [ 93.889714][ T6801] kmem_cache_alloc_noprof+0x70/0x380 [ 93.889741][ T6801] dst_alloc+0x12b/0x190 [ 93.889760][ T6801] ip_route_output_key_hash_rcu+0x1378/0x2290 [ 93.889791][ T6801] ip_route_output_key_hash+0x193/0x2b0 [ 93.889805][ T6801] ? __asan_memcpy+0x40/0x70 [ 93.889821][ T6801] ? ip_route_output_key_hash+0xdf/0x2b0 [ 93.889837][ T6801] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 93.889865][ T6801] ? ip_tunnel_init_flow+0xc0/0x420 [ 93.889885][ T6801] ip_route_output_flow+0x29/0x140 [ 93.889910][ T6801] ip_tunnel_xmit+0xa4b/0x2560 [ 93.889950][ T6801] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 93.889964][ T6801] ? gre_build_header+0x380/0xba0 [ 93.889994][ T6801] ? __pfx_gre_build_header+0x10/0x10 [ 93.890012][ T6801] ? skb_mac_gso_segment+0x50c/0x740 [ 93.890034][ T6801] ? iptunnel_handle_offloads+0x25f/0x650 [ 93.890061][ T6801] ipgre_xmit+0x972/0xd20 [ 93.890091][ T6801] ? __pfx_ipgre_xmit+0x10/0x10 [ 93.890116][ T6801] ? validate_xmit_skb+0x9b8/0xff0 [ 93.890139][ T6801] dev_hard_start_xmit+0x27a/0x7d0 [ 93.890171][ T6801] __dev_queue_xmit+0x1b73/0x3f40 [ 93.890204][ T6801] ? __dev_queue_xmit+0x2f4/0x3f40 [ 93.890221][ T6801] ? __pskb_pull_tail+0xb3c/0x1570 [ 93.890242][ T6801] ? __pfx___dev_queue_xmit+0x10/0x10 [ 93.890261][ T6801] ? __pskb_pull_tail+0xfdf/0x1570 [ 93.890293][ T6801] ? virtio_net_hdr_to_skb+0xd1e/0x15c0 [ 93.890315][ T6801] ? packet_parse_headers+0x7dd/0xb10 [ 93.890345][ T6801] ? copy_page_from_iter+0xe8/0x100 [ 93.890373][ T6801] ? packet_xmit+0x68/0x330 [ 93.890398][ T6801] packet_sendmsg+0x4fbf/0x6d50 [ 93.890439][ T6801] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 93.890498][ T6801] ? __pfx_packet_sendmsg+0x10/0x10 [ 93.890515][ T6801] ? aa_sk_perm+0x96d/0xab0 [ 93.890544][ T6801] ? __pfx_aa_sk_perm+0x10/0x10 [ 93.890569][ T6801] ? __import_iovec+0x582/0x830 [ 93.890588][ T6801] ? aa_sock_msg_perm+0x91/0x160 [ 93.890615][ T6801] ? __pfx_packet_sendmsg+0x10/0x10 [ 93.890631][ T6801] __sock_sendmsg+0x221/0x270 [ 93.890655][ T6801] ____sys_sendmsg+0x53a/0x860 [ 93.890680][ T6801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.890695][ T6801] ? __fget_files+0x2a/0x410 [ 93.890719][ T6801] ? __fget_files+0x2a/0x410 [ 93.890749][ T6801] __sys_sendmsg+0x269/0x350 [ 93.890771][ T6801] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.890801][ T6801] ? do_sys_openat2+0x17a/0x1d0 [ 93.890848][ T6801] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.890872][ T6801] ? do_syscall_64+0x100/0x230 [ 93.890893][ T6801] ? do_syscall_64+0xb6/0x230 [ 93.890913][ T6801] do_syscall_64+0xf3/0x230 [ 93.890931][ T6801] ? clear_bhb_loop+0x35/0x90 [ 93.890955][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.890975][ T6801] RIP: 0033:0x7f294a98d169 [ 93.890990][ T6801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.891003][ T6801] RSP: 002b:00007f294b85f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.891021][ T6801] RAX: ffffffffffffffda RBX: 00007f294aba5fa0 RCX: 00007f294a98d169 [ 93.891033][ T6801] RDX: 0000000000000010 RSI: 0000400000002ac0 RDI: 0000000000000003 [ 93.891043][ T6801] RBP: 00007f294b85f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.891053][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.891062][ T6801] R13: 0000000000000000 R14: 00007f294aba5fa0 R15: 00007ffcd229a968 [ 93.891090][ T6801] [ 94.460458][ T6810] netlink: 36 bytes leftover after parsing attributes in process `syz.3.247'. [ 94.572424][ T6816] netlink: 96 bytes leftover after parsing attributes in process `syz.2.248'. [ 94.712322][ T6821] netlink: 'syz.2.248': attribute type 9 has an invalid length. [ 94.776875][ T6821] netlink: 'syz.2.248': attribute type 6 has an invalid length. [ 95.248621][ T6845] netlink: 'syz.4.251': attribute type 11 has an invalid length. [ 95.272401][ T6845] netlink: 224 bytes leftover after parsing attributes in process `syz.4.251'. [ 95.478615][ T6812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.148246][ T6889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 96.259602][ T6894] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 96.483188][ T6910] FAULT_INJECTION: forcing a failure. [ 96.483188][ T6910] name failslab, interval 1, probability 0, space 0, times 0 [ 96.498827][ T6910] CPU: 1 UID: 0 PID: 6910 Comm: syz.2.275 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 96.498853][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.498862][ T6910] Call Trace: [ 96.498868][ T6910] [ 96.498876][ T6910] dump_stack_lvl+0x241/0x360 [ 96.498902][ T6910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.498919][ T6910] ? __pfx__printk+0x10/0x10 [ 96.498950][ T6910] should_fail_ex+0x40a/0x550 [ 96.498976][ T6910] should_failslab+0xac/0x100 [ 96.498998][ T6910] ? skb_clone+0x20c/0x390 [ 96.499014][ T6910] kmem_cache_alloc_noprof+0x70/0x380 [ 96.499040][ T6910] skb_clone+0x20c/0x390 [ 96.499060][ T6910] __netlink_deliver_tap+0x3c4/0x7f0 [ 96.499092][ T6910] ? netlink_deliver_tap+0x2e/0x1b0 [ 96.499111][ T6910] netlink_deliver_tap+0x19d/0x1b0 [ 96.499132][ T6910] netlink_unicast+0x7c4/0x990 [ 96.499160][ T6910] ? __pfx_netlink_unicast+0x10/0x10 [ 96.499177][ T6910] ? __virt_addr_valid+0x45f/0x530 [ 96.499194][ T6910] ? __phys_addr_symbol+0x2f/0x70 [ 96.499208][ T6910] ? __check_object_size+0x47a/0x730 [ 96.499233][ T6910] netlink_sendmsg+0x8de/0xcb0 [ 96.499266][ T6910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.499292][ T6910] ? aa_sock_msg_perm+0x91/0x160 [ 96.499333][ T6910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.499352][ T6910] __sock_sendmsg+0x221/0x270 [ 96.499376][ T6910] ____sys_sendmsg+0x53a/0x860 [ 96.499402][ T6910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.499418][ T6910] ? __fget_files+0x2a/0x410 [ 96.499442][ T6910] ? __fget_files+0x2a/0x410 [ 96.499472][ T6910] __sys_sendmsg+0x269/0x350 [ 96.499494][ T6910] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.499528][ T6910] ? do_sys_openat2+0x17a/0x1d0 [ 96.499574][ T6910] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.499598][ T6910] ? do_syscall_64+0x100/0x230 [ 96.499620][ T6910] ? do_syscall_64+0xb6/0x230 [ 96.499641][ T6910] do_syscall_64+0xf3/0x230 [ 96.499659][ T6910] ? clear_bhb_loop+0x35/0x90 [ 96.499682][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.499702][ T6910] RIP: 0033:0x7f39cff8d169 [ 96.499717][ T6910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.499730][ T6910] RSP: 002b:00007f39d0eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.499748][ T6910] RAX: ffffffffffffffda RBX: 00007f39d01a5fa0 RCX: 00007f39cff8d169 [ 96.499760][ T6910] RDX: 0000000000040000 RSI: 0000400000000e80 RDI: 0000000000000003 [ 96.499770][ T6910] RBP: 00007f39d0eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 96.499780][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.499790][ T6910] R13: 0000000000000000 R14: 00007f39d01a5fa0 R15: 00007ffd9175d138 [ 96.499816][ T6910] [ 96.847443][ T6928] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 96.987967][ T6930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 97.377617][ T6944] __nla_validate_parse: 8 callbacks suppressed [ 97.377636][ T6944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.286'. [ 97.405898][ T6917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.748761][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 97.958350][ T6937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.076018][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 98.098803][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 98.250687][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.293'. [ 98.385559][ T6956] lo: entered promiscuous mode [ 98.395450][ T6956] tunl0: entered promiscuous mode [ 98.403069][ T6956] gre0: entered promiscuous mode [ 98.413095][ T6956] gretap0: entered promiscuous mode [ 98.418533][ T6956] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 98.651655][ T6983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 98.781786][ T6991] netlink: 36 bytes leftover after parsing attributes in process `syz.2.298'. [ 98.955331][ T6996] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 98.971624][ T6999] FAULT_INJECTION: forcing a failure. [ 98.971624][ T6999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.994332][ T6999] CPU: 1 UID: 0 PID: 6999 Comm: syz.0.301 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 98.994360][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.994369][ T6999] Call Trace: [ 98.994375][ T6999] [ 98.994382][ T6999] dump_stack_lvl+0x241/0x360 [ 98.994408][ T6999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.994425][ T6999] ? __pfx__printk+0x10/0x10 [ 98.994444][ T6999] ? __pfx_lock_release+0x10/0x10 [ 98.994474][ T6999] should_fail_ex+0x40a/0x550 [ 98.994501][ T6999] _copy_from_iter+0x1df/0x1c40 [ 98.994519][ T6999] ? __virt_addr_valid+0x183/0x530 [ 98.994536][ T6999] ? __pfx_lock_release+0x10/0x10 [ 98.994562][ T6999] ? __alloc_skb+0x28f/0x440 [ 98.994578][ T6999] ? __pfx__copy_from_iter+0x10/0x10 [ 98.994597][ T6999] ? __virt_addr_valid+0x183/0x530 [ 98.994612][ T6999] ? __virt_addr_valid+0x183/0x530 [ 98.994625][ T6999] ? __virt_addr_valid+0x45f/0x530 [ 98.994641][ T6999] ? __phys_addr_symbol+0x2f/0x70 [ 98.994654][ T6999] ? __check_object_size+0x47a/0x730 [ 98.994678][ T6999] netlink_sendmsg+0x742/0xcb0 [ 98.994710][ T6999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.994733][ T6999] ? aa_sock_msg_perm+0x91/0x160 [ 98.994760][ T6999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.994778][ T6999] __sock_sendmsg+0x221/0x270 [ 98.994801][ T6999] ____sys_sendmsg+0x53a/0x860 [ 98.994826][ T6999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.994841][ T6999] ? __fget_files+0x2a/0x410 [ 98.994864][ T6999] ? __fget_files+0x2a/0x410 [ 98.994892][ T6999] __sys_sendmsg+0x269/0x350 [ 98.994914][ T6999] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.994942][ T6999] ? do_sys_openat2+0x17a/0x1d0 [ 98.994986][ T6999] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.995009][ T6999] ? do_syscall_64+0x100/0x230 [ 98.995031][ T6999] ? do_syscall_64+0xb6/0x230 [ 98.995058][ T6999] do_syscall_64+0xf3/0x230 [ 98.995076][ T6999] ? clear_bhb_loop+0x35/0x90 [ 98.995099][ T6999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.995118][ T6999] RIP: 0033:0x7f9eef78d169 [ 98.995132][ T6999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.995145][ T6999] RSP: 002b:00007f9ef05a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.995162][ T6999] RAX: ffffffffffffffda RBX: 00007f9eef9a5fa0 RCX: 00007f9eef78d169 [ 98.995173][ T6999] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 0000000000000003 [ 98.995184][ T6999] RBP: 00007f9ef05a5090 R08: 0000000000000000 R09: 0000000000000000 [ 98.995194][ T6999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.995203][ T6999] R13: 0000000000000000 R14: 00007f9eef9a5fa0 R15: 00007ffeccac7b88 [ 98.995228][ T6999] [ 99.331807][ T6994] netlink: 104 bytes leftover after parsing attributes in process `syz.4.299'. [ 99.556984][ T7000] bond3: (slave gretap1): making interface the new active one [ 99.569325][ T7000] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 99.611083][ T7009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.803429][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 99.815811][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 99.908442][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.308'. [ 100.162642][ T7033] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 100.370561][ T7012] lo: entered promiscuous mode [ 100.383075][ T7012] tunl0: entered promiscuous mode [ 100.392562][ T7012] gre0: entered promiscuous mode [ 100.401969][ T7012] gretap0: entered promiscuous mode [ 100.433246][ T7012] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.545456][ T7055] netlink: 'syz.1.317': attribute type 4 has an invalid length. [ 100.574624][ T7054] netlink: 'syz.1.317': attribute type 4 has an invalid length. [ 100.651299][ T7057] netlink: 'syz.1.317': attribute type 4 has an invalid length. [ 100.682921][ T7054] sch_fq: defrate 2048 ignored. [ 101.184432][ T7070] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.220623][ T7076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.279211][ T7070] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.601196][ T7091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.609159][ T7091] bond2: entered promiscuous mode [ 101.614953][ T7091] bond0: (slave bond2): Enslaving as an active interface with an up link [ 102.192423][ T7118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.448122][ T7127] FAULT_INJECTION: forcing a failure. [ 102.448122][ T7127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.463505][ T7127] CPU: 0 UID: 0 PID: 7127 Comm: syz.4.341 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 102.463529][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.463539][ T7127] Call Trace: [ 102.463545][ T7127] [ 102.463552][ T7127] dump_stack_lvl+0x241/0x360 [ 102.463577][ T7127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.463595][ T7127] ? __pfx__printk+0x10/0x10 [ 102.463613][ T7127] ? __pfx_lock_release+0x10/0x10 [ 102.463643][ T7127] should_fail_ex+0x40a/0x550 [ 102.463668][ T7127] _copy_from_user+0x2d/0xb0 [ 102.463688][ T7127] copy_msghdr_from_user+0xae/0x680 [ 102.463714][ T7127] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 102.463731][ T7127] ? __fget_files+0x2a/0x410 [ 102.463753][ T7127] ? __fget_files+0x2a/0x410 [ 102.463779][ T7127] __sys_sendmsg+0x209/0x350 [ 102.463801][ T7127] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.463829][ T7127] ? do_sys_openat2+0x17a/0x1d0 [ 102.463873][ T7127] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.463896][ T7127] ? do_syscall_64+0x100/0x230 [ 102.463917][ T7127] ? do_syscall_64+0xb6/0x230 [ 102.463938][ T7127] do_syscall_64+0xf3/0x230 [ 102.463956][ T7127] ? clear_bhb_loop+0x35/0x90 [ 102.463979][ T7127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.463999][ T7127] RIP: 0033:0x7fef5c98d169 [ 102.464021][ T7127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.464034][ T7127] RSP: 002b:00007fef5a7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.464052][ T7127] RAX: ffffffffffffffda RBX: 00007fef5cba5fa0 RCX: 00007fef5c98d169 [ 102.464064][ T7127] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000004 [ 102.464074][ T7127] RBP: 00007fef5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 102.464083][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.464093][ T7127] R13: 0000000000000000 R14: 00007fef5cba5fa0 R15: 00007ffdf8d1b698 [ 102.464117][ T7127] [ 102.911620][ T7136] __nla_validate_parse: 3 callbacks suppressed [ 102.911639][ T7136] netlink: 96 bytes leftover after parsing attributes in process `syz.4.344'. [ 103.140738][ T7142] netlink: 36 bytes leftover after parsing attributes in process `syz.3.346'. [ 103.398531][ T7152] bridge_slave_0: left allmulticast mode [ 103.415269][ T7152] bridge_slave_0: left promiscuous mode [ 103.437009][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.450860][ T7152] bridge_slave_1: left allmulticast mode [ 103.466530][ T7152] bridge_slave_1: left promiscuous mode [ 103.475651][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.503240][ T7152] bond0: (slave bond_slave_0): Releasing backup interface [ 103.513411][ T7152] bond_slave_0: left promiscuous mode [ 103.522814][ T7152] bond0: (slave bond_slave_1): Releasing backup interface [ 103.532575][ T7152] bond_slave_1: left promiscuous mode [ 103.544772][ T7152] team_slave_0: left promiscuous mode [ 103.569427][ T7152] team0: Port device team_slave_0 removed [ 103.576282][ T7152] team_slave_1: left promiscuous mode [ 103.593185][ T7152] team0: Port device team_slave_1 removed [ 103.615013][ T7152] bond0: (slave bond1): Releasing backup interface [ 103.625336][ T7152] bond1: left promiscuous mode [ 103.643796][ T7152] bond0: (slave bond2): Releasing backup interface [ 103.652794][ T7152] bond2: left promiscuous mode [ 103.673547][ T7160] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.353'. [ 103.906966][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 103.988763][ T7176] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 104.120461][ T7185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.362'. [ 104.370060][ T7163] lo: entered promiscuous mode [ 104.382315][ T7163] tunl0: entered promiscuous mode [ 104.390030][ T7163] gre0: entered promiscuous mode [ 104.398067][ T7163] gretap0: entered promiscuous mode [ 104.403324][ T7163] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 104.825022][ T7211] bridge_slave_0: left allmulticast mode [ 104.855053][ T7211] bridge_slave_0: left promiscuous mode [ 104.865345][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.905566][ T7211] bridge_slave_1: left promiscuous mode [ 104.926437][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.971879][ T7211] bond0: (slave bond_slave_0): Releasing backup interface [ 105.010584][ T7211] bond_slave_0: left promiscuous mode [ 105.040208][ T7211] bond0: (slave bond_slave_1): Releasing backup interface [ 105.066951][ T7211] bond_slave_1: left promiscuous mode [ 105.079015][ T7211] team_slave_0: left promiscuous mode [ 105.111614][ T7211] team0: Port device team_slave_0 removed [ 105.118941][ T7211] team_slave_1: left promiscuous mode [ 105.133417][ T7211] team0: Port device team_slave_1 removed [ 105.143438][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.153312][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.165758][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.178674][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.242834][ T7211] bond0: (slave bond1): Releasing backup interface [ 105.302411][ T7211] bond1: left promiscuous mode [ 105.462719][ T7221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.507558][ T7220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.564098][ T7234] netlink: 36 bytes leftover after parsing attributes in process `syz.2.375'. [ 106.017608][ T7248] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 106.033722][ T7244] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 106.115765][ T7253] netlink: 'syz.2.382': attribute type 5 has an invalid length. [ 106.409846][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.3.386'. [ 106.680289][ T7276] Cannot find add_set index 0 as target [ 106.745656][ T7278] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 106.755615][ T7278] macvlan0: entered allmulticast mode [ 106.771435][ T7278] veth1_vlan: entered allmulticast mode [ 106.790334][ T7278] macvlan0: entered promiscuous mode [ 106.816155][ T7278] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 106.937512][ T7282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 107.321840][ T7302] bond0: (slave bond2): Error -95 calling ndo_bpf [ 107.330539][ T7303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.401'. [ 107.346834][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 107.367070][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 107.385032][ T7302] bond0: (slave bond2): Error -95 calling ndo_bpf [ 107.395620][ T7302] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 107.415301][ T7261] lo: entered promiscuous mode [ 107.427253][ T7261] tunl0: entered promiscuous mode [ 107.433936][ T7261] gre0: entered promiscuous mode [ 107.443679][ T7261] gretap0: entered promiscuous mode [ 107.449345][ T7261] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 107.495018][ T7307] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 107.655210][ T7315] Illegal XDP return value 16128 on prog (id 119) dev syz_tun, expect packet loss! [ 107.743942][ T7318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.806746][ T7320] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 108.617151][ T7345] __nla_validate_parse: 29 callbacks suppressed [ 108.617172][ T7345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.415'. [ 108.813764][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 108.848535][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 108.900974][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 108.976778][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 108.985811][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 109.076810][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 109.096269][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 109.105625][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 109.117724][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 109.129334][ T7351] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 109.278510][ T7369] netlink: 'syz.4.422': attribute type 4 has an invalid length. [ 109.331092][ T7371] netlink: 'syz.4.422': attribute type 4 has an invalid length. [ 109.540281][ T7338] lo: entered promiscuous mode [ 109.549338][ T7338] tunl0: entered promiscuous mode [ 109.557316][ T7338] gre0: entered promiscuous mode [ 109.563878][ T7338] gretap0: entered promiscuous mode [ 109.569710][ T7338] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 110.007840][ T7399] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 110.184621][ T7409] netlink: 'syz.3.438': attribute type 2 has an invalid length. [ 110.517376][ T7424] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 110.893812][ T7429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.266949][ T7438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.355009][ T7449] netlink: 'syz.1.452': attribute type 2 has an invalid length. [ 111.857429][ T7467] FAULT_INJECTION: forcing a failure. [ 111.857429][ T7467] name failslab, interval 1, probability 0, space 0, times 0 [ 111.916753][ T7467] CPU: 0 UID: 0 PID: 7467 Comm: syz.4.458 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 111.916778][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.916789][ T7467] Call Trace: [ 111.916795][ T7467] [ 111.916802][ T7467] dump_stack_lvl+0x241/0x360 [ 111.916828][ T7467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.916846][ T7467] ? __pfx__printk+0x10/0x10 [ 111.916869][ T7467] ? ref_tracker_alloc+0x332/0x490 [ 111.916896][ T7467] should_fail_ex+0x40a/0x550 [ 111.916923][ T7467] should_failslab+0xac/0x100 [ 111.916943][ T7467] ? skb_clone+0x20c/0x390 [ 111.916961][ T7467] kmem_cache_alloc_noprof+0x70/0x380 [ 111.916987][ T7467] skb_clone+0x20c/0x390 [ 111.917009][ T7467] __netlink_deliver_tap+0x3c4/0x7f0 [ 111.917041][ T7467] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.917061][ T7467] netlink_deliver_tap+0x19d/0x1b0 [ 111.917082][ T7467] netlink_sendskb+0x68/0x140 [ 111.917103][ T7467] netlink_unicast+0x39d/0x990 [ 111.917119][ T7467] ? __asan_memcpy+0x40/0x70 [ 111.917144][ T7467] ? __pfx_netlink_unicast+0x10/0x10 [ 111.917173][ T7467] netlink_rcv_skb+0x294/0x480 [ 111.917201][ T7467] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.917224][ T7467] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.917269][ T7467] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.917292][ T7467] netlink_unicast+0x7f6/0x990 [ 111.917320][ T7467] ? __pfx_netlink_unicast+0x10/0x10 [ 111.917337][ T7467] ? __virt_addr_valid+0x45f/0x530 [ 111.917354][ T7467] ? __phys_addr_symbol+0x2f/0x70 [ 111.917369][ T7467] ? __check_object_size+0x47a/0x730 [ 111.917395][ T7467] netlink_sendmsg+0x8de/0xcb0 [ 111.917428][ T7467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.917453][ T7467] ? aa_sock_msg_perm+0x91/0x160 [ 111.917481][ T7467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.917505][ T7467] __sock_sendmsg+0x221/0x270 [ 111.917529][ T7467] ____sys_sendmsg+0x53a/0x860 [ 111.917555][ T7467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.917570][ T7467] ? __fget_files+0x2a/0x410 [ 111.917595][ T7467] ? __fget_files+0x2a/0x410 [ 111.917624][ T7467] __sys_sendmsg+0x269/0x350 [ 111.917647][ T7467] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.917678][ T7467] ? do_sys_openat2+0x17a/0x1d0 [ 111.917727][ T7467] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.917754][ T7467] ? do_syscall_64+0x100/0x230 [ 111.917776][ T7467] ? do_syscall_64+0xb6/0x230 [ 111.917797][ T7467] do_syscall_64+0xf3/0x230 [ 111.917815][ T7467] ? clear_bhb_loop+0x35/0x90 [ 111.917839][ T7467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.917859][ T7467] RIP: 0033:0x7fef5c98d169 [ 111.917874][ T7467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.917887][ T7467] RSP: 002b:00007fef5a7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.917905][ T7467] RAX: ffffffffffffffda RBX: 00007fef5cba5fa0 RCX: 00007fef5c98d169 [ 111.917917][ T7467] RDX: 0000000000000002 RSI: 0000400000000340 RDI: 0000000000000003 [ 111.917927][ T7467] RBP: 00007fef5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 111.917937][ T7467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.917946][ T7467] R13: 0000000000000000 R14: 00007fef5cba5fa0 R15: 00007ffdf8d1b698 [ 111.917974][ T7467] [ 112.295644][ T7442] lo: entered promiscuous mode [ 112.352048][ T7442] tunl0: entered promiscuous mode [ 112.368528][ T7442] gre0: entered promiscuous mode [ 112.375165][ T7442] gretap0: entered promiscuous mode [ 112.383620][ T7442] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 112.478919][ T7489] netlink: 'syz.4.465': attribute type 2 has an invalid length. [ 112.761888][ T7504] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 112.795484][ T7504] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 112.828017][ T7504] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 112.833302][ T7509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.843103][ T7509] IPv6: NLM_F_CREATE should be set when creating new route [ 112.850436][ T7509] IPv6: NLM_F_CREATE should be set when creating new route [ 113.095030][ T7516] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 113.181176][ T7516] macvlan0: entered allmulticast mode [ 113.193696][ T7516] veth1_vlan: entered allmulticast mode [ 113.218305][ T7516] macvlan0: entered promiscuous mode [ 113.232068][ T7516] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 113.267299][ T7521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.765301][ T7531] netlink: 'syz.3.478': attribute type 2 has an invalid length. [ 113.776494][ T7538] __nla_validate_parse: 32 callbacks suppressed [ 113.776512][ T7538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.479'. [ 113.789264][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 113.941914][ T7545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.117651][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 114.138775][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 114.166091][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 114.193268][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 114.217236][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 114.234585][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 114.257196][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 114.272394][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 114.354121][ T7551] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 114.889220][ T7584] netlink: 'syz.3.492': attribute type 2 has an invalid length. [ 114.927653][ T7587] FAULT_INJECTION: forcing a failure. [ 114.927653][ T7587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.944408][ T7587] CPU: 1 UID: 0 PID: 7587 Comm: syz.0.494 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 114.944434][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.944443][ T7587] Call Trace: [ 114.944449][ T7587] [ 114.944457][ T7587] dump_stack_lvl+0x241/0x360 [ 114.944482][ T7587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.944499][ T7587] ? __pfx__printk+0x10/0x10 [ 114.944517][ T7587] ? __pfx_lock_release+0x10/0x10 [ 114.944548][ T7587] should_fail_ex+0x40a/0x550 [ 114.944586][ T7587] _copy_from_user+0x2d/0xb0 [ 114.944607][ T7587] copy_msghdr_from_user+0xae/0x680 [ 114.944633][ T7587] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 114.944650][ T7587] ? __fget_files+0x2a/0x410 [ 114.944674][ T7587] ? __fget_files+0x2a/0x410 [ 114.944702][ T7587] __sys_sendmsg+0x209/0x350 [ 114.944725][ T7587] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.944754][ T7587] ? do_sys_openat2+0x17a/0x1d0 [ 114.944800][ T7587] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.944821][ T7587] ? do_syscall_64+0x100/0x230 [ 114.944843][ T7587] ? do_syscall_64+0xb6/0x230 [ 114.944870][ T7587] do_syscall_64+0xf3/0x230 [ 114.944889][ T7587] ? clear_bhb_loop+0x35/0x90 [ 114.944913][ T7587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.944933][ T7587] RIP: 0033:0x7f9eef78d169 [ 114.944947][ T7587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.944960][ T7587] RSP: 002b:00007f9ef05a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.944978][ T7587] RAX: ffffffffffffffda RBX: 00007f9eef9a5fa0 RCX: 00007f9eef78d169 [ 114.944989][ T7587] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000004 [ 114.944999][ T7587] RBP: 00007f9ef05a5090 R08: 0000000000000000 R09: 0000000000000000 [ 114.945009][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.945018][ T7587] R13: 0000000000000000 R14: 00007f9eef9a5fa0 R15: 00007ffeccac7b88 [ 114.945042][ T7587] [ 115.399263][ T7596] Bluetooth: MGMT ver 1.23 [ 117.207533][ T7674] veth1_macvtap: left promiscuous mode [ 117.303020][ T7681] FAULT_INJECTION: forcing a failure. [ 117.303020][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 117.333545][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.3.522 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 117.333569][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.333579][ T7681] Call Trace: [ 117.333585][ T7681] [ 117.333592][ T7681] dump_stack_lvl+0x241/0x360 [ 117.333619][ T7681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.333636][ T7681] ? __pfx__printk+0x10/0x10 [ 117.333650][ T7681] ? ipt_do_table+0x312/0x1860 [ 117.333680][ T7681] should_fail_ex+0x40a/0x550 [ 117.333708][ T7681] should_failslab+0xac/0x100 [ 117.333731][ T7681] __kmalloc_noprof+0xdd/0x4c0 [ 117.333750][ T7681] ? ___neigh_create+0x6c3/0x2360 [ 117.333774][ T7681] ___neigh_create+0x6c3/0x2360 [ 117.333813][ T7681] ip_neigh_gw4+0x2a1/0x3e0 [ 117.333832][ T7681] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 117.333848][ T7681] ? __pfx_lock_acquire+0x10/0x10 [ 117.333875][ T7681] ip_finish_output2+0x1019/0x12e0 [ 117.333893][ T7681] ? ip_finish_output2+0x43e/0x12e0 [ 117.333915][ T7681] ? __pfx_ip_finish_output2+0x10/0x10 [ 117.333931][ T7681] ? ip_skb_dst_mtu+0x8b5/0xbc0 [ 117.333944][ T7681] ? ip_skb_dst_mtu+0x147/0xbc0 [ 117.333961][ T7681] ? __ip_finish_output+0x349/0x400 [ 117.333981][ T7681] ip_send_skb+0x74/0x100 [ 117.333999][ T7681] udp_send_skb+0xac7/0x1640 [ 117.334032][ T7681] udp_sendmsg+0x6a3/0x2c90 [ 117.334054][ T7681] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 117.334088][ T7681] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 117.334103][ T7681] ? __pfx_udp_sendmsg+0x10/0x10 [ 117.334146][ T7681] ? __pfx_aa_sk_perm+0x10/0x10 [ 117.334165][ T7681] ? sock_rps_record_flow+0x1a/0x400 [ 117.334185][ T7681] ? inet_sendmsg+0x2ba/0x390 [ 117.334224][ T7681] __sock_sendmsg+0x1a6/0x270 [ 117.334248][ T7681] __sys_sendto+0x363/0x4c0 [ 117.334274][ T7681] ? __pfx___sys_sendto+0x10/0x10 [ 117.334308][ T7681] ? __fget_files+0x2a/0x410 [ 117.334337][ T7681] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 117.334372][ T7681] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.334397][ T7681] __x64_sys_sendto+0xde/0x100 [ 117.334415][ T7681] do_syscall_64+0xf3/0x230 [ 117.334433][ T7681] ? clear_bhb_loop+0x35/0x90 [ 117.334455][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.334473][ T7681] RIP: 0033:0x7f294a98d169 [ 117.334488][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.334501][ T7681] RSP: 002b:00007f294b85f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 117.334518][ T7681] RAX: ffffffffffffffda RBX: 00007f294aba5fa0 RCX: 00007f294a98d169 [ 117.334529][ T7681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 117.334538][ T7681] RBP: 00007f294b85f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.334547][ T7681] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 117.334557][ T7681] R13: 0000000000000000 R14: 00007f294aba5fa0 R15: 00007ffcd229a968 [ 117.334584][ T7681] [ 117.713265][ T7687] bridge0: port 2(bridge_slave_1) entered learning state [ 117.742204][ T7695] FAULT_INJECTION: forcing a failure. [ 117.742204][ T7695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.760803][ T7695] CPU: 0 UID: 0 PID: 7695 Comm: syz.3.527 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 117.760829][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.760838][ T7695] Call Trace: [ 117.760844][ T7695] [ 117.760850][ T7695] dump_stack_lvl+0x241/0x360 [ 117.760874][ T7695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.760891][ T7695] ? __pfx__printk+0x10/0x10 [ 117.760916][ T7695] should_fail_ex+0x40a/0x550 [ 117.760942][ T7695] _copy_from_user+0x2d/0xb0 [ 117.760963][ T7695] get_user_ifreq+0xc3/0x200 [ 117.760983][ T7695] sock_ioctl+0x793/0x8e0 [ 117.761002][ T7695] ? __pfx_sock_ioctl+0x10/0x10 [ 117.761031][ T7695] ? __pfx_sock_ioctl+0x10/0x10 [ 117.761050][ T7695] __se_sys_ioctl+0xf5/0x170 [ 117.761067][ T7695] do_syscall_64+0xf3/0x230 [ 117.761085][ T7695] ? clear_bhb_loop+0x35/0x90 [ 117.761108][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.761126][ T7695] RIP: 0033:0x7f294a98d169 [ 117.761141][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.761153][ T7695] RSP: 002b:00007f294b85f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.761169][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.761171][ T7695] RAX: ffffffffffffffda RBX: 00007f294aba5fa0 RCX: 00007f294a98d169 [ 117.761183][ T7695] RDX: 00004000000000c0 RSI: 00000000000089f3 RDI: 0000000000000003 [ 117.761192][ T7695] RBP: 00007f294b85f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.761202][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.761209][ T7695] R13: 0000000000000000 R14: 00007f294aba5fa0 R15: 00007ffcd229a968 [ 117.761229][ T7695] [ 117.813815][ T7699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 118.118678][ T7710] netlink: 'syz.0.530': attribute type 2 has an invalid length. [ 118.308662][ T7717] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.371778][ T7718] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.564142][ T7728] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 118.798289][ T7741] bond0: (slave bond2): Error -95 calling ndo_bpf [ 118.840874][ T7741] __nla_validate_parse: 77 callbacks suppressed [ 118.840894][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 118.873799][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 118.886557][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 118.912725][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 118.942364][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 118.965602][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 118.988567][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 119.023903][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 119.051727][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 119.085260][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 119.117966][ T5149] Bluetooth: hci0: command tx timeout [ 119.144597][ T7741] bond0: (slave bond2): Error -95 calling ndo_bpf [ 119.155622][ T7741] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 119.257229][ T7746] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.466577][ T7752] FAULT_INJECTION: forcing a failure. [ 119.466577][ T7752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.480304][ T7752] CPU: 1 UID: 0 PID: 7752 Comm: syz.0.546 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 119.480328][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.480337][ T7752] Call Trace: [ 119.480343][ T7752] [ 119.480350][ T7752] dump_stack_lvl+0x241/0x360 [ 119.480377][ T7752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.480394][ T7752] ? __pfx__printk+0x10/0x10 [ 119.480417][ T7752] ? snprintf+0xda/0x120 [ 119.480442][ T7752] should_fail_ex+0x40a/0x550 [ 119.480475][ T7752] _copy_to_user+0x31/0xb0 [ 119.480498][ T7752] simple_read_from_buffer+0xca/0x150 [ 119.480523][ T7752] proc_fail_nth_read+0x1e9/0x250 [ 119.480547][ T7752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.480571][ T7752] ? rw_verify_area+0x243/0x630 [ 119.480587][ T7752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.480609][ T7752] vfs_read+0x1f8/0xb40 [ 119.480628][ T7752] ? fdget_pos+0x254/0x320 [ 119.480649][ T7752] ? __pfx___mutex_lock+0x10/0x10 [ 119.480667][ T7752] ? __pfx_vfs_read+0x10/0x10 [ 119.480685][ T7752] ? __fget_files+0x2a/0x410 [ 119.480707][ T7752] ? __fget_files+0x395/0x410 [ 119.480727][ T7752] ? __fget_files+0x2a/0x410 [ 119.480756][ T7752] ksys_read+0x18f/0x2b0 [ 119.480775][ T7752] ? __pfx_ksys_read+0x10/0x10 [ 119.480793][ T7752] ? do_syscall_64+0x100/0x230 [ 119.480815][ T7752] ? do_syscall_64+0xb6/0x230 [ 119.480836][ T7752] do_syscall_64+0xf3/0x230 [ 119.480854][ T7752] ? clear_bhb_loop+0x35/0x90 [ 119.480875][ T7752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.480895][ T7752] RIP: 0033:0x7f9eef78bb7c [ 119.480909][ T7752] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.480920][ T7752] RSP: 002b:00007f9ef05a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.480936][ T7752] RAX: ffffffffffffffda RBX: 00007f9eef9a5fa0 RCX: 00007f9eef78bb7c [ 119.480947][ T7752] RDX: 000000000000000f RSI: 00007f9ef05a50a0 RDI: 0000000000000006 [ 119.480955][ T7752] RBP: 00007f9ef05a5090 R08: 0000000000000000 R09: 0000000000000000 [ 119.480963][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.480972][ T7752] R13: 0000000000000000 R14: 00007f9eef9a5fa0 R15: 00007ffeccac7b88 [ 119.480996][ T7752] [ 119.776876][ T7766] FAULT_INJECTION: forcing a failure. [ 119.776876][ T7766] name failslab, interval 1, probability 0, space 0, times 0 [ 119.799444][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.0.552 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 119.799467][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.799477][ T7766] Call Trace: [ 119.799484][ T7766] [ 119.799491][ T7766] dump_stack_lvl+0x241/0x360 [ 119.799518][ T7766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.799536][ T7766] ? __pfx__printk+0x10/0x10 [ 119.799554][ T7766] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 119.799576][ T7766] ? __pfx___might_resched+0x10/0x10 [ 119.799602][ T7766] should_fail_ex+0x40a/0x550 [ 119.799629][ T7766] should_failslab+0xac/0x100 [ 119.799649][ T7766] kmem_cache_alloc_node_noprof+0x77/0x380 [ 119.799669][ T7766] ? __alloc_skb+0x1c3/0x440 [ 119.799688][ T7766] __alloc_skb+0x1c3/0x440 [ 119.799708][ T7766] ? __pfx___alloc_skb+0x10/0x10 [ 119.799726][ T7766] ? netlink_autobind+0xd6/0x2f0 [ 119.799746][ T7766] ? netlink_autobind+0x2b0/0x2f0 [ 119.799771][ T7766] netlink_sendmsg+0x634/0xcb0 [ 119.799803][ T7766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.799827][ T7766] ? aa_sock_msg_perm+0x91/0x160 [ 119.799854][ T7766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.799873][ T7766] __sock_sendmsg+0x221/0x270 [ 119.799897][ T7766] ____sys_sendmsg+0x53a/0x860 [ 119.799922][ T7766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.799937][ T7766] ? __fget_files+0x2a/0x410 [ 119.799961][ T7766] ? __fget_files+0x2a/0x410 [ 119.799989][ T7766] __sys_sendmsg+0x269/0x350 [ 119.800011][ T7766] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.800041][ T7766] ? do_sys_openat2+0x17a/0x1d0 [ 119.800088][ T7766] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.800112][ T7766] ? do_syscall_64+0x100/0x230 [ 119.800133][ T7766] ? do_syscall_64+0xb6/0x230 [ 119.800154][ T7766] do_syscall_64+0xf3/0x230 [ 119.800172][ T7766] ? clear_bhb_loop+0x35/0x90 [ 119.800196][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.800215][ T7766] RIP: 0033:0x7f9eef78d169 [ 119.800230][ T7766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.800243][ T7766] RSP: 002b:00007f9ef05a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.800261][ T7766] RAX: ffffffffffffffda RBX: 00007f9eef9a5fa0 RCX: 00007f9eef78d169 [ 119.800272][ T7766] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000004 [ 119.800282][ T7766] RBP: 00007f9ef05a5090 R08: 0000000000000000 R09: 0000000000000000 [ 119.800291][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.800301][ T7766] R13: 0000000000000000 R14: 00007f9eef9a5fa0 R15: 00007ffeccac7b88 [ 119.800327][ T7766] [ 120.569445][ T7767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.940403][ T7838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.947765][ T7838] IPv6: NLM_F_CREATE should be set when creating new route [ 122.101232][ T7840] bridge_slave_0: left allmulticast mode [ 122.118625][ T7840] bridge_slave_0: left promiscuous mode [ 122.124401][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.148728][ T7840] bridge_slave_1: left promiscuous mode [ 122.154504][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.180667][ T7840] bond0: (slave bond_slave_0): Releasing backup interface [ 122.190360][ T7840] bond_slave_0: left promiscuous mode [ 122.204275][ T7840] bond0: (slave bond_slave_1): Releasing backup interface [ 122.214101][ T7840] bond_slave_1: left promiscuous mode [ 122.225094][ T7840] team_slave_0: left promiscuous mode [ 122.284746][ T7840] team0: Port device team_slave_0 removed [ 122.316701][ T7840] team_slave_1: left promiscuous mode [ 122.347841][ T7849] FAULT_INJECTION: forcing a failure. [ 122.347841][ T7849] name failslab, interval 1, probability 0, space 0, times 0 [ 122.365422][ T7849] CPU: 0 UID: 0 PID: 7849 Comm: syz.0.574 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 122.365449][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.365459][ T7849] Call Trace: [ 122.365465][ T7849] [ 122.365472][ T7849] dump_stack_lvl+0x241/0x360 [ 122.365499][ T7849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.365517][ T7849] ? __pfx__printk+0x10/0x10 [ 122.365536][ T7849] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 122.365559][ T7849] ? __pfx___might_resched+0x10/0x10 [ 122.365584][ T7849] should_fail_ex+0x40a/0x550 [ 122.365611][ T7849] should_failslab+0xac/0x100 [ 122.365634][ T7849] kmem_cache_alloc_node_noprof+0x77/0x380 [ 122.365654][ T7849] ? __alloc_skb+0x1c3/0x440 [ 122.365673][ T7849] __alloc_skb+0x1c3/0x440 [ 122.365688][ T7849] ? __pfx___alloc_skb+0x10/0x10 [ 122.365704][ T7849] ? netlink_autobind+0xd6/0x2f0 [ 122.365724][ T7849] ? netlink_autobind+0x2b0/0x2f0 [ 122.365749][ T7849] netlink_sendmsg+0x634/0xcb0 [ 122.365781][ T7849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.365804][ T7849] ? aa_sock_msg_perm+0x91/0x160 [ 122.365832][ T7849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.365852][ T7849] __sock_sendmsg+0x221/0x270 [ 122.365876][ T7849] ____sys_sendmsg+0x53a/0x860 [ 122.365899][ T7849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.365914][ T7849] ? __fget_files+0x2a/0x410 [ 122.365938][ T7849] ? __fget_files+0x2a/0x410 [ 122.365978][ T7849] __sys_sendmsg+0x269/0x350 [ 122.366001][ T7849] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.366030][ T7849] ? do_sys_openat2+0x17a/0x1d0 [ 122.366079][ T7849] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.366105][ T7849] ? do_syscall_64+0x100/0x230 [ 122.366127][ T7849] ? do_syscall_64+0xb6/0x230 [ 122.366159][ T7849] do_syscall_64+0xf3/0x230 [ 122.366176][ T7849] ? clear_bhb_loop+0x35/0x90 [ 122.366200][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.366220][ T7849] RIP: 0033:0x7f9eef78d169 [ 122.366234][ T7849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.366248][ T7849] RSP: 002b:00007f9ef05a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.366266][ T7849] RAX: ffffffffffffffda RBX: 00007f9eef9a5fa0 RCX: 00007f9eef78d169 [ 122.366278][ T7849] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000004 [ 122.366291][ T7849] RBP: 00007f9ef05a5090 R08: 0000000000000000 R09: 0000000000000000 [ 122.366300][ T7849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.366309][ T7849] R13: 0000000000000000 R14: 00007f9eef9a5fa0 R15: 00007ffeccac7b88 [ 122.366331][ T7849] [ 122.629708][ T7840] team0: Port device team_slave_1 removed [ 122.635950][ T7840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.643751][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.652391][ T7840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.660534][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.678803][ T7840] bond0: (slave bond1): Releasing backup interface [ 122.685942][ T7840] bond1: left promiscuous mode [ 122.694716][ T7840] bond0: (slave bond2): Releasing backup interface [ 122.703221][ T7840] bond2: left promiscuous mode [ 122.718163][ T7840] bond3: (slave gretap1): Releasing active interface [ 122.753074][ T7841] team0: Mode changed to "loadbalance" [ 123.051607][ T7869] xt_hashlimit: overflow, try lower: 0/0 [ 123.154984][ T7876] FAULT_INJECTION: forcing a failure. [ 123.154984][ T7876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.169809][ T7876] CPU: 0 UID: 0 PID: 7876 Comm: syz.4.586 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 123.169834][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.169844][ T7876] Call Trace: [ 123.169850][ T7876] [ 123.169858][ T7876] dump_stack_lvl+0x241/0x360 [ 123.169892][ T7876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.169910][ T7876] ? __pfx__printk+0x10/0x10 [ 123.169928][ T7876] ? __pfx_lock_release+0x10/0x10 [ 123.169958][ T7876] should_fail_ex+0x40a/0x550 [ 123.169985][ T7876] _copy_from_user+0x2d/0xb0 [ 123.170006][ T7876] copy_msghdr_from_user+0xae/0x680 [ 123.170032][ T7876] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.170051][ T7876] ? __fget_files+0x2a/0x410 [ 123.170076][ T7876] ? __fget_files+0x2a/0x410 [ 123.170105][ T7876] __sys_sendmsg+0x209/0x350 [ 123.170125][ T7876] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.170152][ T7876] ? do_sys_openat2+0x17a/0x1d0 [ 123.170196][ T7876] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.170219][ T7876] ? do_syscall_64+0x100/0x230 [ 123.170239][ T7876] ? do_syscall_64+0xb6/0x230 [ 123.170260][ T7876] do_syscall_64+0xf3/0x230 [ 123.170278][ T7876] ? clear_bhb_loop+0x35/0x90 [ 123.170301][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.170321][ T7876] RIP: 0033:0x7fef5c98d169 [ 123.170336][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.170349][ T7876] RSP: 002b:00007fef5a7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.170367][ T7876] RAX: ffffffffffffffda RBX: 00007fef5cba5fa0 RCX: 00007fef5c98d169 [ 123.170379][ T7876] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000011 [ 123.170389][ T7876] RBP: 00007fef5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.170400][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.170410][ T7876] R13: 0000000000000000 R14: 00007fef5cba5fa0 R15: 00007ffdf8d1b698 [ 123.170436][ T7876] [ 123.737321][ T7902] 8021q: adding VLAN 0 to HW filter on device bond4 [ 123.745032][ T7902] bond4: entered promiscuous mode [ 123.752708][ T7902] bond0: (slave bond4): Enslaving as an active interface with an up link [ 124.114154][ T7924] __nla_validate_parse: 58 callbacks suppressed [ 124.114173][ T7924] netlink: 124 bytes leftover after parsing attributes in process `syz.0.603'. [ 124.286884][ T5149] Bluetooth: hci4: link tx timeout [ 124.293146][ T5149] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.304720][ T5149] Bluetooth: hci4: link tx timeout [ 124.310041][ T5149] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.340781][ T7934] netlink: 3 bytes leftover after parsing attributes in process `syz.0.605'. [ 124.438846][ T7936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.606'. [ 124.513521][ T7940] tipc: Started in network mode [ 124.527725][ T7940] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 124.544284][ T7940] tipc: Enabled bearer , priority 10 [ 124.992533][ T7958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 125.658369][ T5846] tipc: Node number set to 10136234 [ 125.862097][ T7949] lo: entered promiscuous mode [ 125.872044][ T7949] tunl0: entered promiscuous mode [ 125.879139][ T7949] gre0: entered promiscuous mode [ 125.886214][ T7949] gretap0: entered promiscuous mode [ 125.891664][ T7949] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 126.025798][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 126.056662][ T7987] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 126.067417][ T7990] FAULT_INJECTION: forcing a failure. [ 126.067417][ T7990] name failslab, interval 1, probability 0, space 0, times 0 [ 126.084356][ T7990] CPU: 1 UID: 0 PID: 7990 Comm: syz.0.624 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 126.084382][ T7990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.084393][ T7990] Call Trace: [ 126.084399][ T7990] [ 126.084406][ T7990] dump_stack_lvl+0x241/0x360 [ 126.084433][ T7990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.084451][ T7990] ? __pfx__printk+0x10/0x10 [ 126.084482][ T7990] should_fail_ex+0x40a/0x550 [ 126.084509][ T7990] should_failslab+0xac/0x100 [ 126.084532][ T7990] ? skb_clone+0x20c/0x390 [ 126.084549][ T7990] kmem_cache_alloc_noprof+0x70/0x380 [ 126.084587][ T7990] skb_clone+0x20c/0x390 [ 126.084609][ T7990] __netlink_deliver_tap+0x3c4/0x7f0 [ 126.084642][ T7990] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.084661][ T7990] netlink_deliver_tap+0x19d/0x1b0 [ 126.084683][ T7990] netlink_unicast+0x7c4/0x990 [ 126.084710][ T7990] ? __pfx_netlink_unicast+0x10/0x10 [ 126.084727][ T7990] ? __virt_addr_valid+0x45f/0x530 [ 126.084745][ T7990] ? __phys_addr_symbol+0x2f/0x70 [ 126.084759][ T7990] ? __check_object_size+0x47a/0x730 [ 126.084784][ T7990] netlink_sendmsg+0x8de/0xcb0 [ 126.084817][ T7990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.084842][ T7990] ? aa_sock_msg_perm+0x91/0x160 [ 126.084870][ T7990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.084889][ T7990] __sock_sendmsg+0x221/0x270 [ 126.084914][ T7990] ____sys_sendmsg+0x53a/0x860 [ 126.084939][ T7990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.084954][ T7990] ? __fget_files+0x2a/0x410 [ 126.084978][ T7990] ? __fget_files+0x2a/0x410 [ 126.085007][ T7990] __sys_sendmsg+0x269/0x350 [ 126.085030][ T7990] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.085060][ T7990] ? do_sys_openat2+0x17a/0x1d0 [ 126.085108][ T7990] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 126.085132][ T7990] ? do_syscall_64+0x100/0x230 [ 126.085155][ T7990] ? do_syscall_64+0xb6/0x230 [ 126.085176][ T7990] do_syscall_64+0xf3/0x230 [ 126.085194][ T7990] ? clear_bhb_loop+0x35/0x90 [ 126.085219][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.085239][ T7990] RIP: 0033:0x7f9eef78d169 [ 126.085254][ T7990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.085268][ T7990] RSP: 002b:00007f9ef05a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.085286][ T7990] RAX: ffffffffffffffda RBX: 00007f9eef9a5fa0 RCX: 00007f9eef78d169 [ 126.085298][ T7990] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003 [ 126.085308][ T7990] RBP: 00007f9ef05a5090 R08: 0000000000000000 R09: 0000000000000000 [ 126.085319][ T7990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.085328][ T7990] R13: 0000000000000000 R14: 00007f9eef9a5fa0 R15: 00007ffeccac7b88 [ 126.085355][ T7990] [ 126.396389][ T5149] Bluetooth: hci4: command 0x0419 tx timeout [ 126.593023][ T7998] Cannot find add_set index 0 as target [ 126.953185][ T8005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.222840][ T8020] vlan2: entered allmulticast mode [ 127.248411][ T8020] bond0: entered allmulticast mode [ 127.501051][ T8025] gtp0: entered promiscuous mode [ 127.511668][ T8025] team0: Port device gtp0 added [ 127.817740][ T8014] lo: entered promiscuous mode [ 127.825530][ T8014] tunl0: entered promiscuous mode [ 127.838715][ T8014] gre0: entered promiscuous mode [ 127.846481][ T8014] gretap0: entered promiscuous mode [ 127.851741][ T8014] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 127.903332][ T8042] FAULT_INJECTION: forcing a failure. [ 127.903332][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.928543][ T8042] CPU: 1 UID: 0 PID: 8042 Comm: syz.3.642 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 127.928571][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.928581][ T8042] Call Trace: [ 127.928588][ T8042] [ 127.928595][ T8042] dump_stack_lvl+0x241/0x360 [ 127.928632][ T8042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.928651][ T8042] ? __pfx__printk+0x10/0x10 [ 127.928671][ T8042] ? __pfx_lock_release+0x10/0x10 [ 127.928708][ T8042] should_fail_ex+0x40a/0x550 [ 127.928735][ T8042] _copy_from_user+0x2d/0xb0 [ 127.928757][ T8042] copy_msghdr_from_user+0xae/0x680 [ 127.928786][ T8042] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 127.928804][ T8042] ? __fget_files+0x2a/0x410 [ 127.928829][ T8042] ? __fget_files+0x2a/0x410 [ 127.928860][ T8042] __sys_sendmsg+0x209/0x350 [ 127.928883][ T8042] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.928913][ T8042] ? do_sys_openat2+0x17a/0x1d0 [ 127.928960][ T8042] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.928984][ T8042] ? do_syscall_64+0x100/0x230 [ 127.929006][ T8042] ? do_syscall_64+0xb6/0x230 [ 127.929027][ T8042] do_syscall_64+0xf3/0x230 [ 127.929044][ T8042] ? clear_bhb_loop+0x35/0x90 [ 127.929067][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.929087][ T8042] RIP: 0033:0x7f294a98d169 [ 127.929102][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.929116][ T8042] RSP: 002b:00007f294b85f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.929135][ T8042] RAX: ffffffffffffffda RBX: 00007f294aba5fa0 RCX: 00007f294a98d169 [ 127.929147][ T8042] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 127.929157][ T8042] RBP: 00007f294b85f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.929167][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.929177][ T8042] R13: 0000000000000000 R14: 00007f294aba5fa0 R15: 00007ffcd229a968 [ 127.929204][ T8042] [ 128.419743][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 128.504764][ T8061] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 128.551178][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 128.581650][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028835000: rx timeout, send abort [ 128.885447][ T8086] netlink: 'syz.4.654': attribute type 10 has an invalid length. [ 128.915960][ T8086] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 128.926193][ T8086] team0: Port device netdevsim0 added [ 128.937210][ T8080] netlink: 'syz.4.654': attribute type 10 has an invalid length. [ 128.946145][ T8080] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 128.963812][ T8080] team0: Port device netdevsim0 removed [ 128.972332][ T8080] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 128.997662][ T8080] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 129.094251][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028835000: abort rx timeout. Force session deactivation [ 129.130641][ T8093] netlink: 36 bytes leftover after parsing attributes in process `syz.2.657'. [ 129.184814][ T8094] gtp0: left promiscuous mode [ 129.214519][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.658'. [ 129.235280][ T8094] team0: Port device gtp0 removed [ 129.254748][ T8099] team0: Mode changed to "loadbalance" [ 129.366862][ T8103] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 129.471263][ T8106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.663'. [ 129.542438][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 129.594921][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 129.608307][ T8115] FAULT_INJECTION: forcing a failure. [ 129.608307][ T8115] name failslab, interval 1, probability 0, space 0, times 0 [ 129.623070][ T8115] CPU: 0 UID: 0 PID: 8115 Comm: syz.2.666 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 129.623092][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.623101][ T8115] Call Trace: [ 129.623107][ T8115] [ 129.623114][ T8115] dump_stack_lvl+0x241/0x360 [ 129.623137][ T8115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.623152][ T8115] ? __pfx__printk+0x10/0x10 [ 129.623168][ T8115] ? __kmalloc_cache_noprof+0x48/0x390 [ 129.623191][ T8115] ? __pfx___might_resched+0x10/0x10 [ 129.623218][ T8115] should_fail_ex+0x40a/0x550 [ 129.623246][ T8115] should_failslab+0xac/0x100 [ 129.623268][ T8115] __kmalloc_cache_noprof+0x70/0x390 [ 129.623296][ T8115] ? nf_tables_newchain+0x131b/0x3310 [ 129.623323][ T8115] nf_tables_newchain+0x131b/0x3310 [ 129.623365][ T8115] ? __pfx_nf_tables_newchain+0x10/0x10 [ 129.623410][ T8115] ? __pfx_lock_acquire+0x10/0x10 [ 129.623432][ T8115] ? nfnl_pernet+0x23/0x240 [ 129.623465][ T8115] ? __nla_parse+0x40/0x60 [ 129.623487][ T8115] nfnetlink_rcv+0x14e3/0x2ab0 [ 129.623534][ T8115] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 129.623601][ T8115] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.623620][ T8115] ? skb_clone+0x240/0x390 [ 129.623639][ T8115] ? __pfx_lock_release+0x10/0x10 [ 129.623674][ T8115] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.623698][ T8115] netlink_unicast+0x7f6/0x990 [ 129.623726][ T8115] ? __pfx_netlink_unicast+0x10/0x10 [ 129.623741][ T8115] ? __virt_addr_valid+0x45f/0x530 [ 129.623759][ T8115] ? __phys_addr_symbol+0x2f/0x70 [ 129.623774][ T8115] ? __check_object_size+0x47a/0x730 [ 129.623799][ T8115] netlink_sendmsg+0x8de/0xcb0 [ 129.623833][ T8115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.623858][ T8115] ? aa_sock_msg_perm+0x91/0x160 [ 129.623887][ T8115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.623906][ T8115] __sock_sendmsg+0x221/0x270 [ 129.623930][ T8115] ____sys_sendmsg+0x53a/0x860 [ 129.623956][ T8115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.623971][ T8115] ? __fget_files+0x2a/0x410 [ 129.623995][ T8115] ? __fget_files+0x2a/0x410 [ 129.624024][ T8115] __sys_sendmsg+0x269/0x350 [ 129.624044][ T8115] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.624072][ T8115] ? do_sys_openat2+0x17a/0x1d0 [ 129.624114][ T8115] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.624136][ T8115] ? do_syscall_64+0x100/0x230 [ 129.624156][ T8115] ? do_syscall_64+0xb6/0x230 [ 129.624174][ T8115] do_syscall_64+0xf3/0x230 [ 129.624191][ T8115] ? clear_bhb_loop+0x35/0x90 [ 129.624214][ T8115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.624231][ T8115] RIP: 0033:0x7f39cff8d169 [ 129.624245][ T8115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.624258][ T8115] RSP: 002b:00007f39d0eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.624282][ T8115] RAX: ffffffffffffffda RBX: 00007f39d01a5fa0 RCX: 00007f39cff8d169 [ 129.624293][ T8115] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 0000000000000003 [ 129.624302][ T8115] RBP: 00007f39d0eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 129.624311][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.624320][ T8115] R13: 0000000000000000 R14: 00007f39d01a5fa0 R15: 00007ffd9175d138 [ 129.624343][ T8115] [ 130.262301][ T8132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.673'. [ 130.266871][ T8130] netlink: 36 bytes leftover after parsing attributes in process `syz.4.672'. [ 130.308756][ T8134] netlink: 48 bytes leftover after parsing attributes in process `syz.3.674'. [ 130.325468][ T8136] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 130.331875][ T8134] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 130.338439][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b46ac00: rx timeout, send abort [ 130.361925][ T8127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.377475][ T8134] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 130.377500][ T8134] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 130.543930][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 130.600828][ T8143] macvtap1: entered promiscuous mode [ 130.638101][ T8143] macvtap1: entered allmulticast mode [ 130.661164][ T8143] dummy0: entered allmulticast mode [ 130.849969][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b46ac00: abort rx timeout. Force session deactivation [ 131.277535][ T8159] netlink: 48 bytes leftover after parsing attributes in process `syz.2.685'. [ 131.372727][ T8163] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 132.457547][ T8195] team0: Unable to change to the same mode the team is in [ 132.659635][ T8206] sctp: [Deprecated]: syz.0.700 (pid 8206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.659635][ T8206] Use struct sctp_sack_info instead [ 132.817264][ T8209] ip6_vti0: left promiscuous mode [ 132.831102][ T8209] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 133.001832][ T8214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.031433][ T8212] ip6tnl1: entered promiscuous mode [ 133.189303][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.195740][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.442865][ T8231] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 133.749966][ T8242] syzkaller1: entered promiscuous mode [ 133.755489][ T8242] syzkaller1: entered allmulticast mode [ 133.794448][ T8242] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 134.042084][ T8252] netlink: 'syz.0.717': attribute type 3 has an invalid length. [ 134.124302][ T8257] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 134.141999][ T8257] netlink: 'syz.3.718': attribute type 2 has an invalid length. [ 134.317196][ T8266] team0: left promiscuous mode [ 134.322034][ T8266] team0: entered allmulticast mode [ 134.343740][ T8272] __nla_validate_parse: 22 callbacks suppressed [ 134.343761][ T8272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.724'. [ 134.363418][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 134.395150][ T8275] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 134.526528][ T8283] FAULT_INJECTION: forcing a failure. [ 134.526528][ T8283] name failslab, interval 1, probability 0, space 0, times 0 [ 134.547297][ T8283] CPU: 1 UID: 0 PID: 8283 Comm: syz.2.730 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 134.547324][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.547334][ T8283] Call Trace: [ 134.547340][ T8283] [ 134.547348][ T8283] dump_stack_lvl+0x241/0x360 [ 134.547375][ T8283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.547393][ T8283] ? __pfx__printk+0x10/0x10 [ 134.547411][ T8283] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 134.547435][ T8283] ? __pfx___might_resched+0x10/0x10 [ 134.547460][ T8283] should_fail_ex+0x40a/0x550 [ 134.547487][ T8283] should_failslab+0xac/0x100 [ 134.547509][ T8283] kmem_cache_alloc_node_noprof+0x77/0x380 [ 134.547530][ T8283] ? __alloc_skb+0x1c3/0x440 [ 134.547550][ T8283] __alloc_skb+0x1c3/0x440 [ 134.547571][ T8283] ? __pfx___alloc_skb+0x10/0x10 [ 134.547588][ T8283] ? netlink_autobind+0xd6/0x2f0 [ 134.547608][ T8283] ? netlink_autobind+0x2b0/0x2f0 [ 134.547632][ T8283] netlink_sendmsg+0x634/0xcb0 [ 134.547664][ T8283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.547690][ T8283] ? aa_sock_msg_perm+0x91/0x160 [ 134.547717][ T8283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.547736][ T8283] __sock_sendmsg+0x221/0x270 [ 134.547760][ T8283] ____sys_sendmsg+0x53a/0x860 [ 134.547783][ T8283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.547798][ T8283] ? __fget_files+0x2a/0x410 [ 134.547823][ T8283] ? __fget_files+0x2a/0x410 [ 134.547852][ T8283] __sys_sendmsg+0x269/0x350 [ 134.547874][ T8283] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.547903][ T8283] ? do_sys_openat2+0x17a/0x1d0 [ 134.547950][ T8283] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.547975][ T8283] ? do_syscall_64+0x100/0x230 [ 134.547997][ T8283] ? do_syscall_64+0xb6/0x230 [ 134.548018][ T8283] do_syscall_64+0xf3/0x230 [ 134.548041][ T8283] ? clear_bhb_loop+0x35/0x90 [ 134.548065][ T8283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.548085][ T8283] RIP: 0033:0x7f39cff8d169 [ 134.548100][ T8283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.548114][ T8283] RSP: 002b:00007f39d0eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.548132][ T8283] RAX: ffffffffffffffda RBX: 00007f39d01a5fa0 RCX: 00007f39cff8d169 [ 134.548144][ T8283] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 134.548154][ T8283] RBP: 00007f39d0eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 134.548164][ T8283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.548174][ T8283] R13: 0000000000000000 R14: 00007f39d01a5fa0 R15: 00007ffd9175d138 [ 134.548201][ T8283] [ 134.577850][ T8281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.771797][ T8291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.732'. [ 134.775851][ T8281] bond3: entered promiscuous mode [ 134.839189][ T8281] bond0: (slave bond3): Enslaving as an active interface with an up link [ 135.039243][ T8305] bond0: (slave bond3): Error -95 calling ndo_bpf [ 135.048355][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 135.086829][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 135.110950][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 135.159791][ T8316] netlink: 48 bytes leftover after parsing attributes in process `syz.4.739'. [ 135.168615][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 135.168828][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 135.168983][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 135.217405][ T8305] bond0: (slave bond3): Error -95 calling ndo_bpf [ 135.231835][ T8305] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 135.380596][ T8324] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 135.442609][ T8328] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 136.096182][ T8354] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.193797][ T8367] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 136.609273][ T8386] FAULT_INJECTION: forcing a failure. [ 136.609273][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 136.626252][ T8386] CPU: 1 UID: 0 PID: 8386 Comm: syz.1.765 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 136.626285][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.626295][ T8386] Call Trace: [ 136.626301][ T8386] [ 136.626308][ T8386] dump_stack_lvl+0x241/0x360 [ 136.626333][ T8386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.626349][ T8386] ? __pfx__printk+0x10/0x10 [ 136.626367][ T8386] ? __kmalloc_cache_noprof+0x48/0x390 [ 136.626389][ T8386] ? __pfx___might_resched+0x10/0x10 [ 136.626415][ T8386] should_fail_ex+0x40a/0x550 [ 136.626443][ T8386] should_failslab+0xac/0x100 [ 136.626465][ T8386] __kmalloc_cache_noprof+0x70/0x390 [ 136.626485][ T8386] ? nfnetlink_rcv+0x1265/0x2ab0 [ 136.626507][ T8386] nfnetlink_rcv+0x1265/0x2ab0 [ 136.626557][ T8386] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 136.626622][ T8386] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.626641][ T8386] ? skb_clone+0x240/0x390 [ 136.626658][ T8386] ? __pfx_lock_release+0x10/0x10 [ 136.626695][ T8386] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.626718][ T8386] netlink_unicast+0x7f6/0x990 [ 136.626746][ T8386] ? __pfx_netlink_unicast+0x10/0x10 [ 136.626764][ T8386] ? __virt_addr_valid+0x45f/0x530 [ 136.626781][ T8386] ? __phys_addr_symbol+0x2f/0x70 [ 136.626796][ T8386] ? __check_object_size+0x47a/0x730 [ 136.626820][ T8386] netlink_sendmsg+0x8de/0xcb0 [ 136.626858][ T8386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.626884][ T8386] ? aa_sock_msg_perm+0x91/0x160 [ 136.626913][ T8386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.626940][ T8386] __sock_sendmsg+0x221/0x270 [ 136.626964][ T8386] ____sys_sendmsg+0x53a/0x860 [ 136.626988][ T8386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.627003][ T8386] ? __fget_files+0x2a/0x410 [ 136.627028][ T8386] ? __fget_files+0x2a/0x410 [ 136.627057][ T8386] __sys_sendmsg+0x269/0x350 [ 136.627080][ T8386] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.627110][ T8386] ? do_sys_openat2+0x17a/0x1d0 [ 136.627158][ T8386] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.627182][ T8386] ? do_syscall_64+0x100/0x230 [ 136.627205][ T8386] ? do_syscall_64+0xb6/0x230 [ 136.627226][ T8386] do_syscall_64+0xf3/0x230 [ 136.627244][ T8386] ? clear_bhb_loop+0x35/0x90 [ 136.627268][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.627289][ T8386] RIP: 0033:0x7f8802d8d169 [ 136.627305][ T8386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.627319][ T8386] RSP: 002b:00007f8803b72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.627338][ T8386] RAX: ffffffffffffffda RBX: 00007f8802fa5fa0 RCX: 00007f8802d8d169 [ 136.627350][ T8386] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 0000000000000003 [ 136.627361][ T8386] RBP: 00007f8803b72090 R08: 0000000000000000 R09: 0000000000000000 [ 136.627371][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.627382][ T8386] R13: 0000000000000000 R14: 00007f8802fa5fa0 R15: 00007ffc10c6e858 [ 136.627409][ T8386] [ 137.088150][ T8394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.117543][ T8394] bond1: entered promiscuous mode [ 137.143077][ T8394] bond1: entered allmulticast mode [ 137.163211][ T8394] bond0: (slave bond1): Enslaving as an active interface with an up link [ 137.422949][ T8406] FAULT_INJECTION: forcing a failure. [ 137.422949][ T8406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.456554][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.1.773 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 137.456581][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.456592][ T8406] Call Trace: [ 137.456599][ T8406] [ 137.456606][ T8406] dump_stack_lvl+0x241/0x360 [ 137.456632][ T8406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.456650][ T8406] ? __pfx__printk+0x10/0x10 [ 137.456669][ T8406] ? __pfx_lock_release+0x10/0x10 [ 137.456699][ T8406] should_fail_ex+0x40a/0x550 [ 137.456727][ T8406] _copy_from_iter+0x1df/0x1c40 [ 137.456745][ T8406] ? __virt_addr_valid+0x183/0x530 [ 137.456769][ T8406] ? __pfx_lock_release+0x10/0x10 [ 137.456797][ T8406] ? __alloc_skb+0x28f/0x440 [ 137.456813][ T8406] ? __pfx__copy_from_iter+0x10/0x10 [ 137.456832][ T8406] ? __virt_addr_valid+0x183/0x530 [ 137.456847][ T8406] ? __virt_addr_valid+0x183/0x530 [ 137.456861][ T8406] ? __virt_addr_valid+0x45f/0x530 [ 137.456876][ T8406] ? __phys_addr_symbol+0x2f/0x70 [ 137.456891][ T8406] ? __check_object_size+0x47a/0x730 [ 137.456916][ T8406] netlink_sendmsg+0x742/0xcb0 [ 137.456949][ T8406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.456973][ T8406] ? aa_sock_msg_perm+0x91/0x160 [ 137.457000][ T8406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.457020][ T8406] __sock_sendmsg+0x221/0x270 [ 137.457043][ T8406] ____sys_sendmsg+0x53a/0x860 [ 137.457069][ T8406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.457084][ T8406] ? __fget_files+0x2a/0x410 [ 137.457108][ T8406] ? __fget_files+0x2a/0x410 [ 137.457136][ T8406] __sys_sendmsg+0x269/0x350 [ 137.457159][ T8406] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.457187][ T8406] ? do_sys_openat2+0x17a/0x1d0 [ 137.457237][ T8406] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.457260][ T8406] ? do_syscall_64+0x100/0x230 [ 137.457281][ T8406] ? do_syscall_64+0xb6/0x230 [ 137.457305][ T8406] do_syscall_64+0xf3/0x230 [ 137.457323][ T8406] ? clear_bhb_loop+0x35/0x90 [ 137.457348][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.457372][ T8406] RIP: 0033:0x7f8802d8d169 [ 137.457386][ T8406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.457400][ T8406] RSP: 002b:00007f8803b72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.457416][ T8406] RAX: ffffffffffffffda RBX: 00007f8802fa5fa0 RCX: 00007f8802d8d169 [ 137.457428][ T8406] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000004 [ 137.457438][ T8406] RBP: 00007f8803b72090 R08: 0000000000000000 R09: 0000000000000000 [ 137.457449][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.457459][ T8406] R13: 0000000000000000 R14: 00007f8802fa5fa0 R15: 00007ffc10c6e858 [ 137.457484][ T8406] [ 137.934394][ T8415] macvtap1: entered promiscuous mode [ 137.944461][ T8415] macvtap1: entered allmulticast mode [ 137.950424][ T8415] dummy0: entered allmulticast mode [ 138.098373][ T8419] bridge_slave_0: left allmulticast mode [ 138.146646][ T8419] bridge_slave_0: left promiscuous mode [ 138.167915][ T8419] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.209159][ T8419] bridge_slave_1: left promiscuous mode [ 138.228213][ T8419] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.265449][ T8419] bond0: (slave bond_slave_0): Releasing backup interface [ 138.291038][ T8419] bond_slave_0: left promiscuous mode [ 138.319206][ T8419] bond0: (slave bond_slave_1): Releasing backup interface [ 138.361472][ T8419] bond_slave_1: left promiscuous mode [ 138.398626][ T8419] team_slave_0: left promiscuous mode [ 138.415149][ T8419] team0: Port device team_slave_0 removed [ 138.469239][ T8419] team_slave_1: left promiscuous mode [ 138.509674][ T8419] team0: Port device team_slave_1 removed [ 138.567031][ T8419] bond0: (slave macvlan0): Releasing backup interface [ 138.600617][ T8419] macvlan0: left promiscuous mode [ 138.616575][ T8419] veth1_vlan: left allmulticast mode [ 138.665453][ T8422] team0: Mode changed to "loadbalance" [ 138.983493][ T8440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.116491][ T8445] netlink: 'syz.4.786': attribute type 10 has an invalid length. [ 139.204386][ T8450] netlink: 'syz.4.786': attribute type 10 has an invalid length. [ 139.220015][ T8451] IPVS: set_ctl: invalid protocol: 18136 0.0.0.0:20004 [ 139.290451][ T8445] bond0: (slave netdevsim0): Releasing backup interface [ 139.342475][ T8445] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 139.359547][ T8445] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 139.388696][ T8445] team0: Port device netdevsim0 added [ 139.470053][ T8450] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 139.494857][ T8459] FAULT_INJECTION: forcing a failure. [ 139.494857][ T8459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.516153][ T8459] CPU: 1 UID: 0 PID: 8459 Comm: syz.3.789 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 139.516179][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.516189][ T8459] Call Trace: [ 139.516194][ T8459] [ 139.516201][ T8459] dump_stack_lvl+0x241/0x360 [ 139.516227][ T8459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.516244][ T8459] ? __pfx__printk+0x10/0x10 [ 139.516263][ T8459] ? __pfx_lock_release+0x10/0x10 [ 139.516301][ T8459] should_fail_ex+0x40a/0x550 [ 139.516325][ T8459] _copy_to_iter+0x1df/0x1c40 [ 139.516341][ T8459] ? __virt_addr_valid+0x183/0x530 [ 139.516356][ T8459] ? __pfx_lock_release+0x10/0x10 [ 139.516385][ T8459] ? __pfx__copy_to_iter+0x10/0x10 [ 139.516403][ T8459] ? __virt_addr_valid+0x183/0x530 [ 139.516418][ T8459] ? __virt_addr_valid+0x183/0x530 [ 139.516432][ T8459] ? __virt_addr_valid+0x45f/0x530 [ 139.516447][ T8459] ? __phys_addr_symbol+0x2f/0x70 [ 139.516462][ T8459] ? __check_object_size+0x47a/0x730 [ 139.516485][ T8459] j1939_sk_recvmsg+0x254/0x960 [ 139.516511][ T8459] ? __pfx_j1939_sk_recvmsg+0x10/0x10 [ 139.516529][ T8459] ? aa_sock_msg_perm+0x91/0x160 [ 139.516552][ T8459] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 139.516569][ T8459] ? __pfx_j1939_sk_recvmsg+0x10/0x10 [ 139.516588][ T8459] sock_recvmsg+0x22f/0x280 [ 139.516611][ T8459] sock_read_iter+0x2c4/0x3d0 [ 139.516632][ T8459] ? __pfx_sock_read_iter+0x10/0x10 [ 139.516663][ T8459] do_iter_readv_writev+0x71a/0x9d0 [ 139.516686][ T8459] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 139.516709][ T8459] ? bpf_lsm_file_permission+0x9/0x10 [ 139.516731][ T8459] ? rw_verify_area+0x243/0x630 [ 139.516749][ T8459] vfs_readv+0x2b3/0xa80 [ 139.516780][ T8459] ? __pfx_vfs_readv+0x10/0x10 [ 139.516811][ T8459] ? do_sys_openat2+0x17a/0x1d0 [ 139.516831][ T8459] ? __fget_files+0x2a/0x410 [ 139.516855][ T8459] ? __fget_files+0x395/0x410 [ 139.516874][ T8459] ? __fget_files+0x2a/0x410 [ 139.516901][ T8459] do_readv+0x1b6/0x360 [ 139.516925][ T8459] ? __pfx_do_readv+0x10/0x10 [ 139.516946][ T8459] ? do_syscall_64+0x100/0x230 [ 139.516968][ T8459] ? do_syscall_64+0xb6/0x230 [ 139.516988][ T8459] do_syscall_64+0xf3/0x230 [ 139.517007][ T8459] ? clear_bhb_loop+0x35/0x90 [ 139.517029][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.517047][ T8459] RIP: 0033:0x7f294a98d169 [ 139.517062][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.517075][ T8459] RSP: 002b:00007f294b85f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 139.517093][ T8459] RAX: ffffffffffffffda RBX: 00007f294aba5fa0 RCX: 00007f294a98d169 [ 139.517104][ T8459] RDX: 0000000000000001 RSI: 00004000000006c0 RDI: 0000000000000003 [ 139.517113][ T8459] RBP: 00007f294b85f090 R08: 0000000000000000 R09: 0000000000000000 [ 139.517122][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.517131][ T8459] R13: 0000000000000000 R14: 00007f294aba5fa0 R15: 00007ffcd229a968 [ 139.517154][ T8459] [ 139.839700][ T8450] team0: Port device netdevsim0 removed [ 139.849432][ T8450] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 139.857401][ T8450] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 140.289748][ T8476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.435129][ T8481] __nla_validate_parse: 138 callbacks suppressed [ 140.435148][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.794'. [ 140.452498][ T8483] netlink: 'syz.4.795': attribute type 10 has an invalid length. [ 140.468453][ T8483] bond0: (slave netdevsim0): Releasing backup interface [ 140.480826][ T8483] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 140.494749][ T8483] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 140.508815][ T8483] team0: Port device netdevsim0 added [ 140.513493][ T8485] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 140.574558][ T8488] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 140.595907][ T8485] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 140.604506][ T8485] team0: Port device netdevsim0 added [ 140.654994][ T8488] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 140.690462][ T8488] team0: Port device netdevsim0 removed [ 140.699772][ T8488] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 140.707649][ T8488] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 140.715856][ T8488] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 140.725446][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.798'. [ 140.739971][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.798'. [ 140.898075][ T8498] netlink: 36 bytes leftover after parsing attributes in process `syz.3.800'. [ 141.242174][ T8513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.806'. [ 141.669965][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'. [ 141.683280][ T8534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.815'. [ 141.713641][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 141.737116][ T8531] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 141.885450][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 141.911269][ T8532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.981271][ T8544] bridge1: entered promiscuous mode [ 141.990314][ T8544] bridge1: entered allmulticast mode [ 142.513292][ T8572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 142.679116][ T8573] ip6_vti0: entered promiscuous mode [ 142.692850][ T8573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.938005][ T8592] netlink: 48 bytes leftover after parsing attributes in process `syz.1.834'. [ 142.960579][ T8592] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 142.970069][ T8592] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 143.001573][ T8592] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 143.097297][ T8596] netlink: 'syz.4.835': attribute type 8 has an invalid length. [ 143.426969][ T8611] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 143.542026][ T8616] netlink: 'syz.3.842': attribute type 4 has an invalid length. [ 143.988229][ T8623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.143633][ T8631] bond0: (slave bond3): Releasing backup interface [ 144.235881][ T8631] bond3: left promiscuous mode [ 144.269041][ T8634] team0: Unable to change to the same mode the team is in [ 144.909933][ T8653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 145.370469][ T8667] netlink: 'syz.1.855': attribute type 2 has an invalid length. [ 145.422772][ T8661] team0: entered promiscuous mode [ 145.428215][ T8661] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 145.444057][ T8661] team0: left allmulticast mode [ 145.479178][ T8661] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 [ 145.516484][ T8661] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 8661, name: syz.4.846 [ 145.556382][ T8661] preempt_count: 0, expected: 0 [ 145.568225][ T8661] RCU nest depth: 1, expected: 0 [ 145.582095][ T8661] 2 locks held by syz.4.846/8661: [ 145.597983][ T8661] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 145.628497][ T8661] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 145.659543][ T8661] CPU: 0 UID: 0 PID: 8661 Comm: syz.4.846 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 145.659574][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.659586][ T8661] Call Trace: [ 145.659593][ T8661] [ 145.659603][ T8661] dump_stack_lvl+0x241/0x360 [ 145.659632][ T8661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.659652][ T8661] ? __pfx__printk+0x10/0x10 [ 145.659666][ T8661] ? console_unlock+0x2fc/0x3b0 [ 145.659699][ T8661] __might_resched+0x5d4/0x780 [ 145.659723][ T8661] ? __wake_up_klogd+0x1c/0x110 [ 145.659743][ T8661] ? __pfx___might_resched+0x10/0x10 [ 145.659787][ T8661] ? __lock_acquire+0x1397/0x2100 [ 145.659815][ T8661] __mutex_lock+0x126/0x1010 [ 145.659846][ T8661] ? dev_set_allmulti+0x11c/0x270 [ 145.659872][ T8661] ? __pfx___mutex_lock+0x10/0x10 [ 145.659903][ T8661] ? netdev_info+0x122/0x170 [ 145.659922][ T8661] ? netif_set_allmulti+0x1a2/0x380 [ 145.659949][ T8661] dev_set_allmulti+0x11c/0x270 [ 145.659978][ T8661] team_change_rx_flags+0x1a8/0x330 [ 145.659999][ T8661] ? team_change_rx_flags+0x29/0x330 [ 145.660021][ T8661] ? __pfx_team_change_rx_flags+0x10/0x10 [ 145.660041][ T8661] netif_set_allmulti+0x20e/0x380 [ 145.660074][ T8661] __dev_change_flags+0x579/0x6f0 [ 145.660097][ T8661] ? __pfx___dev_change_flags+0x10/0x10 [ 145.660111][ T8661] ? validate_linkmsg+0x828/0xa40 [ 145.660132][ T8661] ? netdev_state_change+0x139/0x1a0 [ 145.660152][ T8661] ? __pfx_netdev_state_change+0x10/0x10 [ 145.660175][ T8661] ? __pfx_validate_linkmsg+0x10/0x10 [ 145.660198][ T8661] netif_change_flags+0x8b/0x1a0 [ 145.660220][ T8661] do_setlink+0xf42/0x40f0 [ 145.660270][ T8661] ? __pfx_do_setlink+0x10/0x10 [ 145.660307][ T8661] ? __pfx___might_resched+0x10/0x10 [ 145.660332][ T8661] ? __pfx___mutex_trylock_common+0x10/0x10 [ 145.660356][ T8661] ? rcu_is_watching+0x15/0xb0 [ 145.660375][ T8661] ? trace_contention_end+0x3c/0x120 [ 145.660394][ T8661] ? __mutex_lock+0x397/0x1010 [ 145.660416][ T8661] ? __pfx_aa_get_newest_label+0x10/0x10 [ 145.660446][ T8661] ? rtnl_newlink+0xc4c/0x1d90 [ 145.660469][ T8661] ? __pfx___mutex_lock+0x10/0x10 [ 145.660498][ T8661] ? ns_capable+0x8a/0xf0 [ 145.660519][ T8661] ? rtnl_link_get_net_capable+0x168/0x340 [ 145.660547][ T8661] rtnl_newlink+0x141c/0x1d90 [ 145.660568][ T8661] ? stack_depot_save_flags+0x37/0x940 [ 145.660606][ T8661] ? __pfx_rtnl_newlink+0x10/0x10 [ 145.660625][ T8661] ? __netlink_deliver_tap+0x561/0x7f0 [ 145.660648][ T8661] ? __pfx_validate_chain+0x10/0x10 [ 145.660665][ T8661] ? __sock_sendmsg+0x221/0x270 [ 145.660684][ T8661] ? ____sys_sendmsg+0x53a/0x860 [ 145.660700][ T8661] ? __sys_sendmsg+0x269/0x350 [ 145.660714][ T8661] ? do_syscall_64+0xf3/0x230 [ 145.660732][ T8661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.660814][ T8661] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 145.660841][ T8661] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.660870][ T8661] ? mark_lock+0x9a/0x360 [ 145.660888][ T8661] ? __lock_acquire+0x1397/0x2100 [ 145.660938][ T8661] ? __pfx_lock_release+0x10/0x10 [ 145.660979][ T8661] ? __pfx_rtnl_newlink+0x10/0x10 [ 145.661003][ T8661] rtnetlink_rcv_msg+0x791/0xcf0 [ 145.661024][ T8661] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 145.661051][ T8661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.661080][ T8661] ? ref_tracker_free+0x643/0x7e0 [ 145.661103][ T8661] netlink_rcv_skb+0x206/0x480 [ 145.661126][ T8661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.661150][ T8661] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.661196][ T8661] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.661221][ T8661] netlink_unicast+0x7f6/0x990 [ 145.661251][ T8661] ? __pfx_netlink_unicast+0x10/0x10 [ 145.661268][ T8661] ? __virt_addr_valid+0x45f/0x530 [ 145.661286][ T8661] ? __phys_addr_symbol+0x2f/0x70 [ 145.661301][ T8661] ? __check_object_size+0x47a/0x730 [ 145.661328][ T8661] netlink_sendmsg+0x8de/0xcb0 [ 145.661364][ T8661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.661390][ T8661] ? aa_sock_msg_perm+0x91/0x160 [ 145.661422][ T8661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.661444][ T8661] __sock_sendmsg+0x221/0x270 [ 145.661470][ T8661] ____sys_sendmsg+0x53a/0x860 [ 145.661498][ T8661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.661514][ T8661] ? __fget_files+0x2a/0x410 [ 145.661540][ T8661] ? __fget_files+0x2a/0x410 [ 145.661572][ T8661] __sys_sendmsg+0x269/0x350 [ 145.661596][ T8661] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.661657][ T8661] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.661682][ T8661] ? do_syscall_64+0x100/0x230 [ 145.661705][ T8661] ? do_syscall_64+0xb6/0x230 [ 145.661727][ T8661] do_syscall_64+0xf3/0x230 [ 145.661746][ T8661] ? clear_bhb_loop+0x35/0x90 [ 145.661779][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.661800][ T8661] RIP: 0033:0x7fef5c98d169 [ 145.661817][ T8661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.661831][ T8661] RSP: 002b:00007fef5a7b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.661850][ T8661] RAX: ffffffffffffffda RBX: 00007fef5cba6160 RCX: 00007fef5c98d169 [ 145.661863][ T8661] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000007 [ 145.661874][ T8661] RBP: 00007fef5ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.661885][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.661896][ T8661] R13: 0000000000000000 R14: 00007fef5cba6160 R15: 00007ffdf8d1b698 [ 145.661925][ T8661] [ 145.661934][ T8661] [ 146.187769][ T8661] ============================= [ 146.192608][ T8661] [ BUG: Invalid wait context ] [ 146.197540][ T8661] 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 Tainted: G W [ 146.206476][ T8661] ----------------------------- [ 146.211320][ T8661] syz.4.846/8661 is trying to lock: [ 146.216515][ T8661] ffff88807efc0d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 146.225427][ T8661] other info that might help us debug this: [ 146.231305][ T8661] context-{5:5} [ 146.234781][ T8661] 2 locks held by syz.4.846/8661: [ 146.239816][ T8661] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 146.248903][ T8661] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 146.258749][ T8661] stack backtrace: [ 146.262461][ T8661] CPU: 0 UID: 0 PID: 8661 Comm: syz.4.846 Tainted: G W 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 146.262480][ T8661] Tainted: [W]=WARN [ 146.262484][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.262493][ T8661] Call Trace: [ 146.262501][ T8661] [ 146.262509][ T8661] dump_stack_lvl+0x241/0x360 [ 146.262528][ T8661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.262542][ T8661] ? __pfx__printk+0x10/0x10 [ 146.262554][ T8661] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.262575][ T8661] __lock_acquire+0x15a8/0x2100 [ 146.262598][ T8661] lock_acquire+0x1ed/0x550 [ 146.262615][ T8661] ? dev_set_allmulti+0x11c/0x270 [ 146.262636][ T8661] ? __pfx_lock_acquire+0x10/0x10 [ 146.262653][ T8661] ? __wake_up_klogd+0x1c/0x110 [ 146.262670][ T8661] ? __pfx___might_resched+0x10/0x10 [ 146.262687][ T8661] ? __lock_acquire+0x1397/0x2100 [ 146.262705][ T8661] __mutex_lock+0x19c/0x1010 [ 146.262722][ T8661] ? dev_set_allmulti+0x11c/0x270 [ 146.262742][ T8661] ? dev_set_allmulti+0x11c/0x270 [ 146.262760][ T8661] ? __pfx___mutex_lock+0x10/0x10 [ 146.262777][ T8661] ? netdev_info+0x122/0x170 [ 146.262789][ T8661] ? netif_set_allmulti+0x1a2/0x380 [ 146.262808][ T8661] dev_set_allmulti+0x11c/0x270 [ 146.262827][ T8661] team_change_rx_flags+0x1a8/0x330 [ 146.262843][ T8661] ? team_change_rx_flags+0x29/0x330 [ 146.262858][ T8661] ? __pfx_team_change_rx_flags+0x10/0x10 [ 146.262871][ T8661] netif_set_allmulti+0x20e/0x380 [ 146.262897][ T8661] __dev_change_flags+0x579/0x6f0 [ 146.262911][ T8661] ? __pfx___dev_change_flags+0x10/0x10 [ 146.262923][ T8661] ? validate_linkmsg+0x828/0xa40 [ 146.262937][ T8661] ? netdev_state_change+0x139/0x1a0 [ 146.262954][ T8661] ? __pfx_netdev_state_change+0x10/0x10 [ 146.262970][ T8661] ? __pfx_validate_linkmsg+0x10/0x10 [ 146.262984][ T8661] netif_change_flags+0x8b/0x1a0 [ 146.262998][ T8661] do_setlink+0xf42/0x40f0 [ 146.263024][ T8661] ? __pfx_do_setlink+0x10/0x10 [ 146.263044][ T8661] ? __pfx___might_resched+0x10/0x10 [ 146.263061][ T8661] ? __pfx___mutex_trylock_common+0x10/0x10 [ 146.263076][ T8661] ? rcu_is_watching+0x15/0xb0 [ 146.263099][ T8661] ? trace_contention_end+0x3c/0x120 [ 146.263112][ T8661] ? __mutex_lock+0x397/0x1010 [ 146.263128][ T8661] ? __pfx_aa_get_newest_label+0x10/0x10 [ 146.263148][ T8661] ? rtnl_newlink+0xc4c/0x1d90 [ 146.263165][ T8661] ? __pfx___mutex_lock+0x10/0x10 [ 146.263181][ T8661] ? ns_capable+0x8a/0xf0 [ 146.263196][ T8661] ? rtnl_link_get_net_capable+0x168/0x340 [ 146.263215][ T8661] rtnl_newlink+0x141c/0x1d90 [ 146.263231][ T8661] ? stack_depot_save_flags+0x37/0x940 [ 146.263253][ T8661] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.263268][ T8661] ? __netlink_deliver_tap+0x561/0x7f0 [ 146.263286][ T8661] ? __pfx_validate_chain+0x10/0x10 [ 146.263299][ T8661] ? __sock_sendmsg+0x221/0x270 [ 146.263315][ T8661] ? ____sys_sendmsg+0x53a/0x860 [ 146.263327][ T8661] ? __sys_sendmsg+0x269/0x350 [ 146.263339][ T8661] ? do_syscall_64+0xf3/0x230 [ 146.263353][ T8661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.263376][ T8661] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.263394][ T8661] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.263414][ T8661] ? mark_lock+0x9a/0x360 [ 146.263427][ T8661] ? __lock_acquire+0x1397/0x2100 [ 146.263453][ T8661] ? __pfx_lock_release+0x10/0x10 [ 146.263474][ T8661] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.263490][ T8661] rtnetlink_rcv_msg+0x791/0xcf0 [ 146.263506][ T8661] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 146.263523][ T8661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.263542][ T8661] ? ref_tracker_free+0x643/0x7e0 [ 146.263555][ T8661] netlink_rcv_skb+0x206/0x480 [ 146.263572][ T8661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.263589][ T8661] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.263611][ T8661] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.263627][ T8661] netlink_unicast+0x7f6/0x990 [ 146.263645][ T8661] ? __pfx_netlink_unicast+0x10/0x10 [ 146.263657][ T8661] ? __virt_addr_valid+0x45f/0x530 [ 146.263670][ T8661] ? __phys_addr_symbol+0x2f/0x70 [ 146.263681][ T8661] ? __check_object_size+0x47a/0x730 [ 146.263698][ T8661] netlink_sendmsg+0x8de/0xcb0 [ 146.263719][ T8661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.263736][ T8661] ? aa_sock_msg_perm+0x91/0x160 [ 146.263754][ T8661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.263769][ T8661] __sock_sendmsg+0x221/0x270 [ 146.263786][ T8661] ____sys_sendmsg+0x53a/0x860 [ 146.263802][ T8661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.263814][ T8661] ? __fget_files+0x2a/0x410 [ 146.263832][ T8661] ? __fget_files+0x2a/0x410 [ 146.263850][ T8661] __sys_sendmsg+0x269/0x350 [ 146.263865][ T8661] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.263899][ T8661] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.263917][ T8661] ? do_syscall_64+0x100/0x230 [ 146.263932][ T8661] ? do_syscall_64+0xb6/0x230 [ 146.263946][ T8661] do_syscall_64+0xf3/0x230 [ 146.263975][ T8661] ? clear_bhb_loop+0x35/0x90 [ 146.263992][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.264009][ T8661] RIP: 0033:0x7fef5c98d169 [ 146.264021][ T8661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.264033][ T8661] RSP: 002b:00007fef5a7b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.264054][ T8661] RAX: ffffffffffffffda RBX: 00007fef5cba6160 RCX: 00007fef5c98d169 [ 146.264070][ T8661] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000007 [ 146.264079][ T8661] RBP: 00007fef5ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.264087][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.264095][ T8661] R13: 0000000000000000 R14: 00007fef5cba6160 R15: 00007ffdf8d1b698 [ 146.264110][ T8661] [ 146.856443][ T8661] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 146.865805][ T8661] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.874522][ T8661] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 146.886246][ T8661] caif:caif_disconnect_client(): nothing to disconnect [ 146.893317][ T8661] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 146.905437][ T8661] chnl_net:chnl_net_open(): state disconnected [ 146.911827][ T8661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.004996][ T8671] lo: entered promiscuous mode [ 147.011349][ T8671] tunl0: entered promiscuous mode [ 147.022768][ T8671] gre0: entered promiscuous mode [ 147.031341][ T8671] gretap0: entered promiscuous mode [ 147.036717][ T8671] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.