last executing test programs: 2m39.628436704s ago: executing program 2 (id=751): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a3d5585e2e75dcdf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)="d7ec", 0x2}], 0x2}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="040900004000070100000000fddbdf25047c0000f0082b80bd17e596a740373006ae69ee063ece491d3339a7617bd697bf8dbca9c9b156687833c7c6bbce688d89d0f5ce9d37925d0c00b18008004700", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x904}}, 0x0) socket(0x26, 0x4, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r6 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x87}]}, 0x10) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$qrtr(0xffffffffffffffff, &(0x7f0000000300)={0x2a, 0x0, 0x3fff}, 0xc) sendmsg$nl_route(r3, 0x0, 0x6044850) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FICLONE(r8, 0x40049409, r8) r9 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) close(r9) 2m39.43412025s ago: executing program 2 (id=755): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x414, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x401, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x311, 0x64, 0x0, 0x1, [@nested={0x145, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r3}, @nested={0xb9, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f", @nested={0x6c, 0x1e, 0x0, 0x1, [@nested={0x59, 0xd4, 0x0, 0x1, [@generic="a4803e3fd1af764643b73de45d768de8db52619a63255c11ccef20dfffd887a99225e2f5ecae032cafb7216b237a1429eed88bc6f84aeb562009f34ab2a8894cd1d7697087420e5ab42922b7a9a487ed10c5c0e82b"]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x100}]}]}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05f1", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x414}], 0x1}, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="b64c5e954877ad7387dffada87cbbbcb6acd6ade34136542f44bad21b45407d59e3e8cfde7f68b41cd7a8130ad5720630e13a1171e1b245046800fad15e59ec40ab53e646067211186501fd93292d3ab88567269ba2a6dd96738270563bcff5ca44a7d5f22c37eddd9a48cf39e6720a6360386cc086c8724b41a4ada5b573642c5e1c3ce83", 0x85}, {&(0x7f0000000500)="35c6fc7729a0024a3891d746f2345f97561a95625d4504e3fee04bfa577db929d6be58161b337fbf4472e311552db70f0b84397686cff89f64e7d46c3d6b00aebab4dc907c2430addabe1a0ccb104e07e9bbcb452603fa94b8a82a2277931eab65e05f725950314f045eb2b7e36baace12a44c65cf5d8efa76c3f67a5696022a384cbe20b118f93da60a04a089b17ccbbfc158493446bd3f4475e5c123a77d594f7f5d5d207a138be15ea62ac817bfba204cefe679a419818cd15784e4bdd23256a83c08ae7a3f45c098017b301095bd443c6efa5d3518c4d5534e8baf755e0448fa62bd380e4839", 0xe8}, {&(0x7f0000000600)="a4eec7348a2ebbfdfcb22e693652d3711ca4c19f758b468d5ad9f012f4f244d79e1bb52720fbdda0c3d047ecbb23e7cc65c1eb7bbbfb243d1d9e06be468c3c9ed78baa7b0e79198de0579d79e5a4f6f1d4f7b6b51f42a7b1097688ec4a42e9126fc6f43990e765b010e972e16aaad0f791d6127912928eac88c006cbf63224e33e833056a7b6ff6cdbf8958bcc9f2b7ac0165941ae0fa80cad26a07f3c6002617b9b385f0ba87fe78fc8c7657b1b3627782f6791dd196897fa6e18d27ce948ee6afd95847954c1e2d90abf3c", 0xcc}, {&(0x7f0000000700)="8c15d20cbce4dd5125639b90c933bbfb75bb7e8ae3360f6a4becb180fff6911e2d49f2dd831c9d3e16f5c6180183914031829f15b8524ff51b16113fe3e677f7f3b39a79090105b0ecaa53d292774af3eb9037c911e6f59bf4a33f77b41ca930a937053cc6ad711ab7d356a3f37511955087902ec5e2f42329a1da9d6263900a9bc19a098755b2050c2c477743afe82bc3f9407eda6a3a8d810d61adcab12c06b796958fdd6f56e4dcd9b0ebbc1afb8216eac536aacf2c27f109cec5eac9d77e1e3abc3d592c650e16880e7855cf3f833ccf", 0xd2}, {&(0x7f0000000800)="4c33491f937d1f40e424356f9fe79be719c0840f64b4f87540393642f2887e6e7a98e4aebefd69ad8b25136a66fd1b41ea5ab4343c2a3c0e407be2896f807cdbce892ab6f5c02a8a3ff6b276cc5281b51c83cd8afd04abbda60096beb7fa6fa843def5874a3c835845", 0x69}, {&(0x7f0000000b40)="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", 0x1000}], 0x6}}], 0x1, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1}, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={0x0, 0xd5d4, 0xa063, 0x9, 0x3, 0x3, 0x5, 0x81, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0xfce, 0x5, 0x40f6, 0x17, 0x5}}, &(0x7f0000000000)=0xb0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'vcan0\x00', {0x2, 0x0, @empty}}) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_getaddr={0x20, 0x16, 0x1, 0x70bd27, 0x25dfdbfc, {0x2, 0x40, 0x8, 0x37, r8}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x20}}, 0x0) 2m39.239305964s ago: executing program 2 (id=757): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x80015864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 5) 2m38.699075694s ago: executing program 2 (id=762): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x5, 0x36, 0x300, &(0x7f0000000380)="259a53f271a76d2686dd4c6588a89ada9e4fa25088bbe05bea24045ef84cc5861322ba00294da9cc2cdb3db46a3efbc06bcca84d4588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 2m38.377515873s ago: executing program 0 (id=771): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005a40)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0x5, @remote}, 0x1c, 0x0}, 0x700}], 0x1, 0x4008810) 2m38.324490643s ago: executing program 2 (id=772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c000000080000000200000002000085000000000400000003000000020000000d0000000400000007000000080002000000000803000000060000000000000f01000000d4040000000000000f03000000451ad60d000000000000010000000063007b0100d1f628"], 0x0, 0x7c, 0x0, 0x1, 0x4, 0x0, @void, @value}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="e10514383481e6"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x18}], 0x57) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x1d, &(0x7f0000003e00)=@fragment={0x16, 0x0, 0xbc, 0x0, 0x0, 0x6, 0x66}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f0000000000)=0xfc, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @local, 0x8}, @in6={0xa, 0x4e23, 0x7, @mcast2, 0x7}]}, &(0x7f0000000240)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@bridge_getvlan={0x60, 0x72, 0x100, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x462d57049ff8ff0c}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 2m38.246388404s ago: executing program 4 (id=774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r1, 0x5, 0xffffffff, 0x1000000c, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac09, 0xfac08, 0xfac0c]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x880) 2m38.180589018s ago: executing program 0 (id=775): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x20080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000002280)={'netdevsim0\x00', @random="001300"}) 2m38.10704661s ago: executing program 0 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0xc2, 0x0, 0x0, 0x2, {[@sack={0x5, 0x16, [0x101, 0xfffffff9, 0xfff, 0x6, 0x4]}, @sack={0x5, 0x26, [0x9, 0x562, 0x4, 0x5, 0x3429, 0x10001, 0x9f1, 0x839, 0x401]}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) sendmsg$inet(r2, 0x0, 0x45) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_ECN, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}]}}]}, 0xfffffffffffffee9}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f00000059c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)='d', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="00206000ffffffffffffaaaaaaaaaabb810037000800450000e31000000000299078ac1e0001ac1414aa0600000000cf90780400000009000000590f00000000000085b8e6665d890582126b83824ec5eabb03a01fcf153a3646eceaf0ffff2f780837084c4cc8a19acf27b70180327f6abf78820fc7871428e283c54d113d30c304eb28044ee8774d5b70f2e9f184db67007ec1be931e3dc74d973d2e9f6f23571bebe1d1b1fbb3efc0e8ebf0e49c43d86afabb8d481fc31ddcb37cce1c21feb3af6ee3d9b411a3bfc800465412292f36d5f103e723d7c1903dfb50f380ddba1d723abb6c5b5d8c0682b2bcbdeeac1003e2a1a7c61321e3e7"], 0xf9) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYRES16=r9], 0x44}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2m38.045279332s ago: executing program 4 (id=777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x401, @mcast1, 0xa}, 0x1c) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) 2m36.626488707s ago: executing program 4 (id=782): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0x1d}}}]}, 0x58}, 0x1, 0x7}, 0x0) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000000", @ANYRES32=0x0, @ANYBLOB="e000000200000000000000001800000000000000100100000c0000004404000100000000"], 0x38}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xd, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x24004000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x8, 0x7fffffff, 0x2, 0x3, 0x100000001, 0x27e2, 0xd}, &(0x7f0000000100)={0x5, 0x3, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x6}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6e3]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000631108000000000005200000000000009500740000000080"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) accept4(r9, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200019, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r11, 0x4}}]}, 0x144}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b4000000000060005000000000004000600"], 0x48}}, 0x0) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2m35.567389532s ago: executing program 4 (id=785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20000824) (fail_nth: 5) 2m34.831289728s ago: executing program 2 (id=787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000600)=0x7, 0x4) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4) recvmsg$unix(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0x400) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r12, 0x1, 0x70bd26, 0x8080, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x18}, 0x4014) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000200000140012800c0001006d6163766c616e0026000280080001"], 0x4c}}, 0x0) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001bc0)=""/152, 0x98}, {&(0x7f0000003140)=""/4104, 0x1008}, {&(0x7f0000002f40)=""/196, 0xc4}, {&(0x7f0000001c80)=""/166, 0xa6}, {&(0x7f0000001d40)=""/132, 0x84}, {&(0x7f00000008c0)=""/12, 0xc}, {&(0x7f0000001e00)=""/208, 0xd0}, {&(0x7f0000001f00)=""/130, 0x82}, {&(0x7f0000001fc0)=""/197, 0xc5}, {&(0x7f0000000900)=""/38, 0x26}, {&(0x7f0000001a40)=""/3, 0x3}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f00000020c0)=""/99, 0x63}, {&(0x7f0000002140)=""/128, 0x80}], 0xe}, 0x3}], 0x1, 0x0, 0x0) 2m34.716278708s ago: executing program 4 (id=788): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="0d000000010001", 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{}, 0x0, &(0x7f0000000c40)='%pK \x00'}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1}, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'pimreg\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x22, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000e40)=""/4096, 0x41000, 0x5, '\x00', r2, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x10, 0x6, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x288, 0x3d, 0x2, 0x70bd27, 0x25dfdbfb, {0x3}, [@generic="6d6562cd28beeabfce1ac418d80f4774e628c8a104eafb6b5e00b759d8b10dbb464c5696481f59e001e6c4b1c4461ed3a3ea91b3783394539deac599b9bee04fb7222c5303b2575c912157fc0d123e36701bfab0ccd248b489374754a37fa7e23f9e9f564cabcf320cd838f91442805c0f74b4cc7a7d2d29691aa6e08656cf2c3496fca73658a9ea8d6989331679114f764ff7262f", @generic="cf4a4b2cfb1fdbee9685637fa57104462e638c1ac7283821c5515be51a21bb85884f7c21c9a9956fe5d830520985ce506e027b3b27683825c35062d5bba874a22efa60407bb8d21192242441e6f7e0dbe10366019503eedbad8439dee403d20175b3555fad274cc12573f0e5cea2e4179c4d2cb6773d187c7deb8f5a05bb7ab2b995813417f6ca961b80dd3bb579dea39361f93155ba4ab52d7be120940ffd7c253349a5d304f6fcbbdc564591f2b56f12af5d6aafd3197a02752bcdc9f328b9b91bd0078ef08a3a7965e33bec2c9847a57c5214d21574503600e3eaea9affb38044bffd669686", @nested={0xf8, 0x18, 0x0, 0x1, [@typed={0xb, 0x4c, 0x0, 0x0, @binary="2a4c6eece257db"}, @nested={0x4, 0xdd}, @generic="7e57cf6290aceb0468e8b0cdb8a53294f0aaaeefe5eadbb1c8ba493a34dc3650ab4b42e7193d92ebd985c5eeed07da59be70106c54522b306cdea8b5a0595ba8ab6e27cabbecd27159264edf029bf084dbc6894eb274a3e44843d4f804a689b346fc2300830406c67db8be610c28f39307cb83bbcba034e6608169c86a88d4e3b821e4e7db4b15ba7c04ecfd8fa28e3701115d241096cfcc0ee10e2c013fd25e125551ae900ebc6dcace0cf543cbdc630c35aa6887e06442548cb4b2f6d47d33a917d66470624106e825e798f6485cd62ac6e0d1", @typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x1a}, @nested={0x4, 0x34}, @generic]}]}, 0x288}}, 0x1000) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x1c, r4, 0x1, 0x70bd2d, 0x5dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) recvmsg(r1, &(0x7f00000020c0)={&(0x7f0000001e40)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/151, 0x97}], 0x1, &(0x7f0000001fc0)=""/248, 0xf8}, 0x40000000) 2m33.872548677s ago: executing program 3 (id=790): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000200)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}, 0x96a}, {{0x0, 0x0, &(0x7f0000000940)=[{0xfffffffffffffffc}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2}, 0xb}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x40000006, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000005c0)=[{0x7fff, 0x4, 0x4, 0x7}, {0x4, 0x62, 0xc3, 0x6}, {0x3, 0x3, 0x3, 0x7f}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175", 0xf1}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf0161797664", 0xaf}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a6590", 0x38}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fba", 0xe9}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675", 0x2f}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0", 0x3d}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76", 0xaa}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd64", 0xb8}], 0x3}}], 0x2, 0xc0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000a00)=""/159, &(0x7f00000004c0)=0x9f) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m33.643113112s ago: executing program 4 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x401, @mcast1, 0xa}, 0x1c) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) 2m33.338880501s ago: executing program 1 (id=794): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x14, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m33.20913567s ago: executing program 1 (id=795): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16d599c71547d018aba506", 0x5d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/87, 0x57}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa", 0xc2}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc258060000000000", 0x5e}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="807d384f8faafd632a51ff632c899dcc", 0x10}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000780)="08b3bf2e1fd53e177d25d73f71309bfc8bcd2e42fea5dc145d9cdbf2026c131a2b5a28688e95c51f1b2ba2fa778cc6435d5b", 0x32}, {&(0x7f00000007c0)="57232dce61b1bd78699dc85e37b63a7bf104e6b5e9070c", 0x17}], 0x2, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xf8, 0x0, 0x2, [0x8, 0x401, 0x6cac, 0x1, 0x0, 0x80]}, @generic={0x4a, 0x5, "6c3ece"}, @timestamp={0x44, 0x24, 0xb8, 0x0, 0x0, [0x5, 0x800, 0x9, 0x1, 0x6f, 0xfffffff7, 0x2, 0xfffffd44]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x76, 0x3, 0x4, [{@multicast2, 0xbb1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0xd1}, {@local, 0x8}, {@multicast1, 0x8}, {@loopback, 0x7}, {@loopback, 0x4}]}, @cipso={0x86, 0x1d, 0x1, [{0x0, 0x8, '&nObK '}, {0x5, 0x8, "773c11e0e25b"}, {0x1, 0x7, "44c67a8866"}]}, @ra={0x94, 0x4, 0xfff}, @cipso={0x86, 0x25, 0x2, [{0x2, 0xe, "6c5467d84bbfea9b62c5d3a3"}, {0x5, 0x11, "417414da98b889f58d1016ad5f7c09"}]}, @end]}}}], 0x158}}], 0x4, 0xc0) 2m33.037123905s ago: executing program 1 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x3c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x3c}}, 0x40080) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x135f7ca9a9d6f8a0}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x4c}}, 0x4001) 2m32.820941133s ago: executing program 0 (id=797): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x300}, 0x0) 2m32.707928758s ago: executing program 3 (id=798): socket$netlink(0x10, 0x3, 0x7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1}, 0x8) 2m32.514895149s ago: executing program 3 (id=799): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="30de1cee2fc8", 0x6}, {&(0x7f0000000240)="75c0fc1370877535542adb9532af506e140d0473d06e71ffcb7f4bbc860715a51587c7470eac3c1183e67dc3cface414d041859233d9972da70e44ba0823572d5a9ba8ad3cd360f3371bc95ded292e0e6f217b622dbe340b03358f22881c893b4718b335eac4742d154604b4fc59791fc2cd50f97b", 0x75}, {&(0x7f00000003c0)="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", 0xff}, {&(0x7f0000001840)="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", 0xa46}], 0x4, 0x0, 0x0, 0x24008000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x6}, {{&(0x7f0000000000)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000300)=""/57, 0x39}, {&(0x7f00000008c0)=""/168, 0xa8}, {&(0x7f0000000980)=""/200, 0xc8}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/12, 0xc}], 0x6, &(0x7f0000000740)=""/242, 0xf2}, 0x6}], 0x2, 0x28144, 0x0) 2m32.469118016s ago: executing program 3 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c00000010000104000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c00028008000100", @ANYRES32], 0x4c}}, 0x800) 2m32.378311971s ago: executing program 3 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x30}}, 0x0) 2m29.50852094s ago: executing program 1 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x10100, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008844}, 0x4) 2m29.493301152s ago: executing program 3 (id=803): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) socket(0x1, 0xa, 0x2) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) 2m29.459051714s ago: executing program 0 (id=804): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}}, 0x0) 2m29.354944884s ago: executing program 1 (id=805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x300, 0x10100, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4) 2m29.284481527s ago: executing program 0 (id=806): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16d599c71547d018aba506", 0x5d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/87, 0x57}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa", 0xc2}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc258060000000000", 0x5e}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="807d384f8faafd632a51ff632c899dcc", 0x10}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000780)="08b3bf2e1fd53e177d25d73f71309bfc8bcd2e42fea5dc145d9cdbf2026c131a2b5a28688e95c51f1b2ba2fa778cc6435d5b", 0x32}, {&(0x7f00000007c0)="57232dce61b1bd78699dc85e37b63a7bf104e6b5e9070c", 0x17}], 0x2, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xf8, 0x0, 0x2, [0x8, 0x401, 0x6cac, 0x1, 0x0, 0x80]}, @generic={0x4a, 0x5, "6c3ece"}, @timestamp={0x44, 0x24, 0xb8, 0x0, 0x0, [0x5, 0x800, 0x9, 0x1, 0x6f, 0xfffffff7, 0x2, 0xfffffd44]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x76, 0x3, 0x4, [{@multicast2, 0xbb1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0xd1}, {@local, 0x8}, {@multicast1, 0x8}, {@loopback, 0x7}, {@loopback, 0x4}]}, @cipso={0x86, 0x1d, 0x1, [{0x0, 0x8, '&nObK '}, {0x5, 0x8, "773c11e0e25b"}, {0x1, 0x7, "44c67a8866"}]}, @ra={0x94, 0x4, 0xfff}, @cipso={0x86, 0x25, 0x2, [{0x2, 0xe, "6c5467d84bbfea9b62c5d3a3"}, {0x5, 0x11, "417414da98b889f58d1016ad5f7c09"}]}, @end]}}}], 0x158}}], 0x4, 0xc0) 2m29.177156742s ago: executing program 1 (id=807): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x80000003, 0x5) write$cgroup_devices(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="63202a4b63e8ba4c3a72e6a37f2892be15c5de67189a0218271291465d0dc76ac37b884803ac953ae7c89fe8ff695b092d71ba3a94177865d212c3516835c33921548c8268b20e17e5a4b40c1a4f9f194f5a407f06b2cd80364149e18b8ab741b0"], 0x9) 2m8.280814291s ago: executing program 32 (id=806): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16d599c71547d018aba506", 0x5d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/87, 0x57}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa", 0xc2}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc258060000000000", 0x5e}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="807d384f8faafd632a51ff632c899dcc", 0x10}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000780)="08b3bf2e1fd53e177d25d73f71309bfc8bcd2e42fea5dc145d9cdbf2026c131a2b5a28688e95c51f1b2ba2fa778cc6435d5b", 0x32}, {&(0x7f00000007c0)="57232dce61b1bd78699dc85e37b63a7bf104e6b5e9070c", 0x17}], 0x2, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xf8, 0x0, 0x2, [0x8, 0x401, 0x6cac, 0x1, 0x0, 0x80]}, @generic={0x4a, 0x5, "6c3ece"}, @timestamp={0x44, 0x24, 0xb8, 0x0, 0x0, [0x5, 0x800, 0x9, 0x1, 0x6f, 0xfffffff7, 0x2, 0xfffffd44]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x76, 0x3, 0x4, [{@multicast2, 0xbb1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0xd1}, {@local, 0x8}, {@multicast1, 0x8}, {@loopback, 0x7}, {@loopback, 0x4}]}, @cipso={0x86, 0x1d, 0x1, [{0x0, 0x8, '&nObK '}, {0x5, 0x8, "773c11e0e25b"}, {0x1, 0x7, "44c67a8866"}]}, @ra={0x94, 0x4, 0xfff}, @cipso={0x86, 0x25, 0x2, [{0x2, 0xe, "6c5467d84bbfea9b62c5d3a3"}, {0x5, 0x11, "417414da98b889f58d1016ad5f7c09"}]}, @end]}}}], 0x158}}], 0x4, 0xc0) 1m51.168313061s ago: executing program 33 (id=787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000600)=0x7, 0x4) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4) recvmsg$unix(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0x400) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r12, 0x1, 0x70bd26, 0x8080, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x18}, 0x4014) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000200000140012800c0001006d6163766c616e0026000280080001"], 0x4c}}, 0x0) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001bc0)=""/152, 0x98}, {&(0x7f0000003140)=""/4104, 0x1008}, {&(0x7f0000002f40)=""/196, 0xc4}, {&(0x7f0000001c80)=""/166, 0xa6}, {&(0x7f0000001d40)=""/132, 0x84}, {&(0x7f00000008c0)=""/12, 0xc}, {&(0x7f0000001e00)=""/208, 0xd0}, {&(0x7f0000001f00)=""/130, 0x82}, {&(0x7f0000001fc0)=""/197, 0xc5}, {&(0x7f0000000900)=""/38, 0x26}, {&(0x7f0000001a40)=""/3, 0x3}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f00000020c0)=""/99, 0x63}, {&(0x7f0000002140)=""/128, 0x80}], 0xe}, 0x3}], 0x1, 0x0, 0x0) 1m12.874398069s ago: executing program 34 (id=803): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) socket(0x1, 0xa, 0x2) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) 0s ago: executing program 35 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x401, @mcast1, 0xa}, 0x1c) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) kernel console output (not intermixed with test programs): : Port device team_slave_0 added [ 91.312052][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.319213][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.345350][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.366781][ T5834] team0: Port device team_slave_0 added [ 91.376851][ T5837] team0: Port device team_slave_0 added [ 91.386195][ T5829] team0: Port device team_slave_1 added [ 91.425287][ T5834] team0: Port device team_slave_1 added [ 91.447273][ T5837] team0: Port device team_slave_1 added [ 91.468931][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.476120][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.502697][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.521214][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.528592][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.555415][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.593578][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.601291][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.628000][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.691050][ T5826] hsr_slave_0: entered promiscuous mode [ 91.697691][ T5826] hsr_slave_1: entered promiscuous mode [ 91.720396][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.729682][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.756319][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.808429][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.818079][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.846031][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.870213][ T5844] hsr_slave_0: entered promiscuous mode [ 91.876946][ T5844] hsr_slave_1: entered promiscuous mode [ 91.883347][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.891196][ T5844] Cannot create hsr debugfs directory [ 91.903014][ T978] cfg80211: failed to load regulatory.db [ 91.932533][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.939930][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.967456][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.019183][ T5829] hsr_slave_0: entered promiscuous mode [ 92.025841][ T5829] hsr_slave_1: entered promiscuous mode [ 92.032012][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.039795][ T5829] Cannot create hsr debugfs directory [ 92.109007][ T5837] hsr_slave_0: entered promiscuous mode [ 92.116324][ T5837] hsr_slave_1: entered promiscuous mode [ 92.122466][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.130105][ T5837] Cannot create hsr debugfs directory [ 92.239735][ T5834] hsr_slave_0: entered promiscuous mode [ 92.246445][ T5834] hsr_slave_1: entered promiscuous mode [ 92.252639][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.263114][ T5834] Cannot create hsr debugfs directory [ 92.776107][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.791953][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.805250][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.818979][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.883384][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.910985][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.930552][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.949806][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.049203][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.076582][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.090507][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.116692][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.174770][ T5149] Bluetooth: hci3: command tx timeout [ 93.175302][ T5830] Bluetooth: hci2: command tx timeout [ 93.180227][ T5149] Bluetooth: hci0: command tx timeout [ 93.185675][ T5830] Bluetooth: hci1: command tx timeout [ 93.248567][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.256646][ T5149] Bluetooth: hci4: command tx timeout [ 93.271632][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.286761][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.296714][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.332021][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.368186][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.385780][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.426789][ T2133] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.434141][ T2133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.447466][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.491749][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.498953][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.523747][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.539750][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.547028][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.574632][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.587921][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.600090][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.613519][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.620699][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.817752][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.946790][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.962112][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.000399][ T2133] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.008080][ T2133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.052412][ T2133] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.059651][ T2133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.083778][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.106310][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.169544][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.176745][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.212832][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.259329][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.266561][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.309402][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.316639][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.327870][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.335083][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.431892][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.446120][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.680399][ T5829] veth0_vlan: entered promiscuous mode [ 94.722740][ T5829] veth1_vlan: entered promiscuous mode [ 94.740715][ T5826] veth0_vlan: entered promiscuous mode [ 94.805618][ T5826] veth1_vlan: entered promiscuous mode [ 94.969380][ T5829] veth0_macvtap: entered promiscuous mode [ 95.008007][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.032773][ T5829] veth1_macvtap: entered promiscuous mode [ 95.077009][ T5826] veth0_macvtap: entered promiscuous mode [ 95.109182][ T5826] veth1_macvtap: entered promiscuous mode [ 95.152767][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.186424][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.200360][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.209835][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.220834][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.229912][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.254340][ T5841] Bluetooth: hci0: command tx timeout [ 95.255582][ T5830] Bluetooth: hci2: command tx timeout [ 95.259790][ T5841] Bluetooth: hci3: command tx timeout [ 95.271141][ T5149] Bluetooth: hci1: command tx timeout [ 95.309812][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.334917][ T5149] Bluetooth: hci4: command tx timeout [ 95.350219][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.368487][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.383469][ T5844] veth0_vlan: entered promiscuous mode [ 95.408858][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.493393][ T5844] veth1_vlan: entered promiscuous mode [ 95.504689][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.513428][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.526598][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.538591][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.626386][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.638994][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.751296][ T5837] veth0_vlan: entered promiscuous mode [ 95.772287][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.789690][ T5837] veth1_vlan: entered promiscuous mode [ 95.801535][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.807617][ T5844] veth0_macvtap: entered promiscuous mode [ 95.850794][ T5844] veth1_macvtap: entered promiscuous mode [ 95.907669][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.918018][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.932931][ T5837] veth0_macvtap: entered promiscuous mode [ 95.937863][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.007421][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.017890][ T5837] veth1_macvtap: entered promiscuous mode [ 96.046373][ T5902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.059163][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.069710][ T5902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.106421][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.129142][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.144031][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.152767][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.167412][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.209281][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.224031][ T5834] veth0_vlan: entered promiscuous mode [ 96.272695][ T5919] vlan2: entered promiscuous mode [ 96.283391][ T5919] bond0: entered promiscuous mode [ 96.290482][ T5919] bond_slave_0: entered promiscuous mode [ 96.296787][ T5919] bond_slave_1: entered promiscuous mode [ 96.326103][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.335243][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.344395][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.353636][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.370075][ T5921] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 96.411741][ T5834] veth1_vlan: entered promiscuous mode [ 96.603881][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.620566][ T5925] batadv_slave_0: entered promiscuous mode [ 96.635074][ T5834] veth0_macvtap: entered promiscuous mode [ 96.691102][ T5834] veth1_macvtap: entered promiscuous mode [ 96.741906][ T5902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.777057][ T5902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.847777][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.849149][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.866748][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.917690][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.967673][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.985289][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.000271][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.015674][ T5935] Zero length message leads to an empty skb [ 97.031759][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.053517][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.067300][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.108347][ T5937] FAULT_INJECTION: forcing a failure. [ 97.108347][ T5937] name failslab, interval 1, probability 0, space 0, times 1 [ 97.130757][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.150523][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.154850][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: syz.3.10 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 97.154884][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.154906][ T5937] Call Trace: [ 97.154916][ T5937] [ 97.154926][ T5937] dump_stack_lvl+0x189/0x250 [ 97.154974][ T5937] ? __pfx____ratelimit+0x10/0x10 [ 97.155003][ T5937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.155038][ T5937] ? __pfx__printk+0x10/0x10 [ 97.155068][ T5937] ? __pfx___might_resched+0x10/0x10 [ 97.155105][ T5937] should_fail_ex+0x414/0x560 [ 97.155139][ T5937] should_failslab+0xa8/0x100 [ 97.155175][ T5937] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 97.155208][ T5937] ? __alloc_skb+0x112/0x2d0 [ 97.155246][ T5937] __alloc_skb+0x112/0x2d0 [ 97.155283][ T5937] netlink_sendmsg+0x5c6/0xb30 [ 97.155315][ T5937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.155339][ T5937] ? aa_sock_msg_perm+0x94/0x160 [ 97.155369][ T5937] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 97.155396][ T5937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.155417][ T5937] __sock_sendmsg+0x219/0x270 [ 97.155448][ T5937] ____sys_sendmsg+0x505/0x830 [ 97.155476][ T5937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.155508][ T5937] ? import_iovec+0x74/0xa0 [ 97.155534][ T5937] ___sys_sendmsg+0x21f/0x2a0 [ 97.155559][ T5937] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.155620][ T5937] ? __fget_files+0x2a/0x420 [ 97.155652][ T5937] ? __fget_files+0x3a0/0x420 [ 97.155696][ T5937] __x64_sys_sendmsg+0x19b/0x260 [ 97.155721][ T5937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.155754][ T5937] ? __pfx_ksys_write+0x10/0x10 [ 97.155780][ T5937] ? rcu_is_watching+0x15/0xb0 [ 97.155825][ T5937] ? do_syscall_64+0xbe/0x3b0 [ 97.155859][ T5937] do_syscall_64+0xfa/0x3b0 [ 97.155884][ T5937] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.155911][ T5937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.155932][ T5937] ? clear_bhb_loop+0x60/0xb0 [ 97.155959][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.155980][ T5937] RIP: 0033:0x7fbc1e18e969 [ 97.156006][ T5937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.156025][ T5937] RSP: 002b:00007fbc1ef4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.156052][ T5937] RAX: ffffffffffffffda RBX: 00007fbc1e3b5fa0 RCX: 00007fbc1e18e969 [ 97.156068][ T5937] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 97.156082][ T5937] RBP: 00007fbc1ef4b090 R08: 0000000000000000 R09: 0000000000000000 [ 97.156096][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.156109][ T5937] R13: 0000000000000000 R14: 00007fbc1e3b5fa0 R15: 00007ffebacc61d8 [ 97.156142][ T5937] [ 97.344141][ T5149] Bluetooth: hci1: command tx timeout [ 97.384946][ T5841] Bluetooth: hci3: command tx timeout [ 97.398820][ T5149] Bluetooth: hci2: command tx timeout [ 97.408445][ T5830] Bluetooth: hci0: command tx timeout [ 97.416002][ T5835] Bluetooth: hci4: command tx timeout [ 97.588032][ T5941] netlink: 'syz.3.11': attribute type 2 has an invalid length. [ 97.649960][ T5943] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 97.690687][ T5943] netlink: 600 bytes leftover after parsing attributes in process `syz.3.11'. [ 97.768627][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.786835][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.835547][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 97.957444][ T2133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.991090][ T2133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.074698][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.216440][ T5953] netlink: 788 bytes leftover after parsing attributes in process `syz.1.14'. [ 99.075743][ T5979] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17'. [ 99.343405][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 99.369989][ T5993] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.20'. [ 99.388541][ T5993] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 99.399184][ T5993] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 99.437148][ T5996] netlink: ct family unspecified [ 99.461295][ T5996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.480839][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 99.613006][ T5996] tipc: Started in network mode [ 99.624714][ T5996] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 99.664851][ T5996] tipc: Enabled bearer , priority 14 [ 99.911450][ T6013] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 99.948395][ T6009] netlink: 'syz.0.27': attribute type 39 has an invalid length. [ 100.126691][ T6020] netlink: 'syz.2.30': attribute type 6 has an invalid length. [ 100.197997][ T6000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.326238][ T6000] netlink: 'syz.4.24': attribute type 29 has an invalid length. [ 100.358756][ T6028] netlink: 'syz.2.32': attribute type 6 has an invalid length. [ 100.732769][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 100.780304][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.794807][ T978] tipc: Node number set to 10136234 [ 101.289732][ T6058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.44'. [ 101.308947][ T6050] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 101.576559][ T6067] netlink: 104 bytes leftover after parsing attributes in process `syz.0.48'. [ 102.395725][ T6094] FAULT_INJECTION: forcing a failure. [ 102.395725][ T6094] name failslab, interval 1, probability 0, space 0, times 0 [ 102.424703][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: syz.2.58 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 102.424734][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.424747][ T6094] Call Trace: [ 102.424755][ T6094] [ 102.424764][ T6094] dump_stack_lvl+0x189/0x250 [ 102.424802][ T6094] ? __pfx____ratelimit+0x10/0x10 [ 102.424829][ T6094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.424862][ T6094] ? __pfx__printk+0x10/0x10 [ 102.424888][ T6094] ? __pfx___might_resched+0x10/0x10 [ 102.424919][ T6094] ? fs_reclaim_acquire+0x7d/0x100 [ 102.424946][ T6094] should_fail_ex+0x414/0x560 [ 102.424979][ T6094] should_failslab+0xa8/0x100 [ 102.425021][ T6094] __kmalloc_noprof+0xcb/0x4f0 [ 102.425050][ T6094] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 102.425079][ T6094] ? sock_kmalloc+0xd6/0x160 [ 102.425107][ T6094] sock_kmalloc+0xd6/0x160 [ 102.425133][ T6094] hash_sendmsg+0x666/0x11d0 [ 102.425186][ T6094] ? __pfx_hash_sendmsg+0x10/0x10 [ 102.425215][ T6094] __sock_sendmsg+0x219/0x270 [ 102.425245][ T6094] __sys_sendto+0x3bd/0x520 [ 102.425280][ T6094] ? __pfx___sys_sendto+0x10/0x10 [ 102.425308][ T6094] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 102.425351][ T6094] ? __fget_files+0x3a0/0x420 [ 102.425395][ T6094] ? ksys_write+0x22a/0x250 [ 102.425425][ T6094] ? __pfx_ksys_write+0x10/0x10 [ 102.425449][ T6094] ? rcu_is_watching+0x15/0xb0 [ 102.425483][ T6094] __x64_sys_sendto+0xde/0x100 [ 102.425518][ T6094] do_syscall_64+0xfa/0x3b0 [ 102.425542][ T6094] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.425566][ T6094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.425586][ T6094] ? clear_bhb_loop+0x60/0xb0 [ 102.425611][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.425631][ T6094] RIP: 0033:0x7fd5dcf8e969 [ 102.425649][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.425667][ T6094] RSP: 002b:00007fd5dded5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 102.425689][ T6094] RAX: ffffffffffffffda RBX: 00007fd5dd1b5fa0 RCX: 00007fd5dcf8e969 [ 102.425704][ T6094] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000004 [ 102.425717][ T6094] RBP: 00007fd5dded5090 R08: 0000000000000000 R09: 0000000000000000 [ 102.425730][ T6094] R10: 0000000004004083 R11: 0000000000000246 R12: 0000000000000001 [ 102.425743][ T6094] R13: 0000000000000000 R14: 00007fd5dd1b5fa0 R15: 00007fff9e1cd7c8 [ 102.425787][ T6094] [ 102.899291][ T6111] x_tables: unsorted underflow at hook 3 [ 102.985748][ T6116] __nla_validate_parse: 1 callbacks suppressed [ 102.985768][ T6116] netlink: 72 bytes leftover after parsing attributes in process `syz.1.63'. [ 103.057648][ T6103] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 34817 - 0 [ 103.067121][ T6103] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 34817 - 0 [ 103.076447][ T6103] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 34817 - 0 [ 103.085786][ T6103] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 34817 - 0 [ 103.096611][ T6103] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 36991 - 0 [ 103.110785][ T6103] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 36991 - 0 [ 103.121893][ T6103] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 36991 - 0 [ 103.131195][ T6103] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 36991 - 0 [ 103.141962][ T6103] geneve2: entered promiscuous mode [ 103.171433][ T6103] geneve2: entered allmulticast mode [ 103.403028][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'. [ 103.779417][ T6140] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 103.819381][ T6140] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 104.183435][ T6145] netlink: 'syz.3.77': attribute type 1 has an invalid length. [ 105.077459][ T6144] netlink: 'syz.0.76': attribute type 4 has an invalid length. [ 105.864525][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 105.921458][ T6191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.93'. [ 106.161125][ T6200] FAULT_INJECTION: forcing a failure. [ 106.161125][ T6200] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.186394][ T3077] hid-generic 0005:16BF:0006.0001: unknown main item tag 0x0 [ 106.223699][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 106.247209][ T6200] CPU: 0 UID: 0 PID: 6200 Comm: syz.0.96 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 106.247240][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.247253][ T6200] Call Trace: [ 106.247261][ T6200] [ 106.247271][ T6200] dump_stack_lvl+0x189/0x250 [ 106.247309][ T6200] ? __pfx____ratelimit+0x10/0x10 [ 106.247335][ T6200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.247368][ T6200] ? __pfx__printk+0x10/0x10 [ 106.247391][ T6200] ? __might_fault+0xb0/0x130 [ 106.247434][ T6200] should_fail_ex+0x414/0x560 [ 106.247466][ T6200] _copy_from_user+0x2d/0xb0 [ 106.247489][ T6200] hidp_sock_ioctl+0x1c7/0x560 [ 106.247522][ T6200] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 106.247606][ T6200] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 106.247633][ T6200] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.247669][ T6200] sock_do_ioctl+0xd9/0x300 [ 106.247699][ T6200] ? __pfx_sock_do_ioctl+0x10/0x10 [ 106.247721][ T6200] ? __lock_acquire+0xab9/0xd20 [ 106.247765][ T6200] sock_ioctl+0x576/0x790 [ 106.247791][ T6200] ? __pfx_sock_ioctl+0x10/0x10 [ 106.247815][ T6200] ? __fget_files+0x2a/0x420 [ 106.247845][ T6200] ? __fget_files+0x3a0/0x420 [ 106.247874][ T6200] ? __fget_files+0x2a/0x420 [ 106.247908][ T6200] ? bpf_lsm_file_ioctl+0x9/0x20 [ 106.247936][ T6200] ? __pfx_sock_ioctl+0x10/0x10 [ 106.247959][ T6200] __se_sys_ioctl+0xf9/0x170 [ 106.247988][ T6200] do_syscall_64+0xfa/0x3b0 [ 106.248014][ T6200] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.248039][ T6200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.248060][ T6200] ? clear_bhb_loop+0x60/0xb0 [ 106.248087][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.248107][ T6200] RIP: 0033:0x7f13a118e969 [ 106.248126][ T6200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.248144][ T6200] RSP: 002b:00007f13a1fc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.248166][ T6200] RAX: ffffffffffffffda RBX: 00007f13a13b5fa0 RCX: 00007f13a118e969 [ 106.248181][ T6200] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 106.248195][ T6200] RBP: 00007f13a1fc0090 R08: 0000000000000000 R09: 0000000000000000 [ 106.248208][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.248224][ T6200] R13: 0000000000000000 R14: 00007f13a13b5fa0 R15: 00007fff1b700708 [ 106.248257][ T6200] [ 106.278236][ T3077] hid-generic 0005:16BF:0006.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 106.284202][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 106.833488][ T6205] netlink: 204 bytes leftover after parsing attributes in process `syz.3.95'. [ 107.527175][ T6233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.542150][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 108.043466][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 108.108421][ T6253] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 108.132878][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 108.185830][ T6253] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 108.283081][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 108.505403][ T6263] nbd: socks must be embedded in a SOCK_ITEM attr [ 108.520714][ T6263] block nbd0: shutting down sockets [ 108.907927][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 108.971850][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 109.037768][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.120'. [ 109.774989][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 109.839986][ T6312] netlink: 'syz.4.129': attribute type 11 has an invalid length. [ 109.847984][ T6312] netlink: 'syz.4.129': attribute type 4 has an invalid length. [ 109.868097][ T6309] netlink: 2284 bytes leftover after parsing attributes in process `syz.2.128'. [ 109.903628][ T6312] netlink: 224 bytes leftover after parsing attributes in process `syz.4.129'. [ 109.924281][ T6318] netlink: 'syz.0.130': attribute type 10 has an invalid length. [ 110.338807][ T6316] lo: entered promiscuous mode [ 110.350069][ T6316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.397690][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 110.451018][ T6337] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 110.947463][ T6353] dummy0: entered promiscuous mode [ 110.964594][ T6353] macsec1: entered promiscuous mode [ 110.975262][ T6353] macsec1: entered allmulticast mode [ 110.981251][ T6353] dummy0: entered allmulticast mode [ 111.039166][ T6353] dummy0: left allmulticast mode [ 111.071555][ T6353] dummy0: left promiscuous mode [ 111.098654][ T6367] netlink: 'syz.3.142': attribute type 1 has an invalid length. [ 111.214427][ T6361] vlan2: entered promiscuous mode [ 111.241536][ T6361] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 111.266104][ T6361] vlan2: entered allmulticast mode [ 111.271322][ T6361] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 112.115632][ T6386] FAULT_INJECTION: forcing a failure. [ 112.115632][ T6386] name failslab, interval 1, probability 0, space 0, times 0 [ 112.144662][ T6386] CPU: 1 UID: 0 PID: 6386 Comm: syz.1.147 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 112.144693][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.144706][ T6386] Call Trace: [ 112.144714][ T6386] [ 112.144724][ T6386] dump_stack_lvl+0x189/0x250 [ 112.144763][ T6386] ? __pfx____ratelimit+0x10/0x10 [ 112.144789][ T6386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.144821][ T6386] ? __pfx__printk+0x10/0x10 [ 112.144846][ T6386] ? __pfx___might_resched+0x10/0x10 [ 112.144877][ T6386] ? fs_reclaim_acquire+0x7d/0x100 [ 112.144904][ T6386] should_fail_ex+0x414/0x560 [ 112.144938][ T6386] should_failslab+0xa8/0x100 [ 112.144972][ T6386] __kmalloc_noprof+0xcb/0x4f0 [ 112.145001][ T6386] ? sock_kmalloc+0xd6/0x160 [ 112.145027][ T6386] sock_kmalloc+0xd6/0x160 [ 112.145052][ T6386] skcipher_recvmsg+0x55c/0x11c0 [ 112.145104][ T6386] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 112.145131][ T6386] ? __lock_acquire+0xab9/0xd20 [ 112.145162][ T6386] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 112.145198][ T6386] ? security_socket_recvmsg+0x7e/0x2e0 [ 112.145231][ T6386] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 112.145261][ T6386] sock_recvmsg+0x229/0x270 [ 112.145293][ T6386] ____sys_recvmsg+0x1c9/0x460 [ 112.145326][ T6386] ? __pfx_____sys_recvmsg+0x10/0x10 [ 112.145366][ T6386] ? import_iovec+0x74/0xa0 [ 112.145392][ T6386] ___sys_recvmsg+0x1b5/0x510 [ 112.145420][ T6386] ? __pfx____sys_recvmsg+0x10/0x10 [ 112.145483][ T6386] ? __fget_files+0x3a0/0x420 [ 112.145523][ T6386] do_recvmmsg+0x307/0x770 [ 112.145555][ T6386] ? __pfx_do_recvmmsg+0x10/0x10 [ 112.145590][ T6386] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.145637][ T6386] __x64_sys_recvmmsg+0x190/0x240 [ 112.145663][ T6386] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 112.145682][ T6386] ? rcu_is_watching+0x15/0xb0 [ 112.145789][ T6386] ? do_syscall_64+0xbe/0x3b0 [ 112.145821][ T6386] do_syscall_64+0xfa/0x3b0 [ 112.145846][ T6386] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.145870][ T6386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.145889][ T6386] ? clear_bhb_loop+0x60/0xb0 [ 112.145916][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.145935][ T6386] RIP: 0033:0x7fbc1258e969 [ 112.145954][ T6386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.145970][ T6386] RSP: 002b:00007fbc1337d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 112.145994][ T6386] RAX: ffffffffffffffda RBX: 00007fbc127b5fa0 RCX: 00007fbc1258e969 [ 112.146009][ T6386] RDX: 0000000000000001 RSI: 0000200000002380 RDI: 0000000000000004 [ 112.146022][ T6386] RBP: 00007fbc1337d090 R08: 0000000000000000 R09: 0000000000000000 [ 112.146035][ T6386] R10: 0000000000002101 R11: 0000000000000246 R12: 0000000000000001 [ 112.146048][ T6386] R13: 0000000000000000 R14: 00007fbc127b5fa0 R15: 00007ffd2ffcc3e8 [ 112.146081][ T6386] [ 112.589031][ T6394] bridge0: entered allmulticast mode [ 112.651191][ T6394] bridge_slave_1: left allmulticast mode [ 112.656980][ T6394] bridge_slave_1: left promiscuous mode [ 112.663506][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.758597][ T6394] bridge_slave_0: left allmulticast mode [ 112.804987][ T6394] bridge_slave_0: left promiscuous mode [ 112.835669][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.991558][ T6394] bridge0 (unregistering): left allmulticast mode [ 113.152034][ T6396] netlink: 'syz.3.153': attribute type 2 has an invalid length. [ 113.164171][ T6396] netlink: 'syz.3.153': attribute type 2 has an invalid length. [ 113.237849][ T6398] __nla_validate_parse: 3 callbacks suppressed [ 113.237871][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 113.647787][ T6421] syzkaller1: entered promiscuous mode [ 113.658053][ T6421] syzkaller1: entered allmulticast mode [ 114.012471][ T6429] netlink: 2284 bytes leftover after parsing attributes in process `syz.1.159'. [ 114.243288][ T6424] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:21 [ 114.683030][ T6451] netlink: 104 bytes leftover after parsing attributes in process `syz.0.171'. [ 114.936582][ T6460] netlink: 2284 bytes leftover after parsing attributes in process `syz.3.174'. [ 115.029541][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 115.353363][ T6481] openvswitch: netlink: Key 18 has unexpected len 4 expected 2 [ 115.403899][ T6480] netlink: 'syz.1.181': attribute type 11 has an invalid length. [ 115.554922][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 115.588311][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 115.723873][ T6493] FAULT_INJECTION: forcing a failure. [ 115.723873][ T6493] name failslab, interval 1, probability 0, space 0, times 0 [ 115.736712][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.1.185 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 115.736739][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.736751][ T6493] Call Trace: [ 115.736759][ T6493] [ 115.736768][ T6493] dump_stack_lvl+0x189/0x250 [ 115.736817][ T6493] ? __pfx____ratelimit+0x10/0x10 [ 115.736842][ T6493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.736873][ T6493] ? __pfx__printk+0x10/0x10 [ 115.736897][ T6493] ? trace_fib_table_lookup+0x85/0x200 [ 115.736922][ T6493] ? fib_table_lookup+0x11ba/0x16e0 [ 115.736945][ T6493] should_fail_ex+0x414/0x560 [ 115.736977][ T6493] should_failslab+0xa8/0x100 [ 115.737010][ T6493] kmem_cache_alloc_noprof+0x73/0x3c0 [ 115.737039][ T6493] ? dst_alloc+0x105/0x170 [ 115.737058][ T6493] ? fib_lookup+0x76/0x440 [ 115.737084][ T6493] dst_alloc+0x105/0x170 [ 115.737111][ T6493] ip_route_input_rcu+0x1ed5/0x2ff0 [ 115.737150][ T6493] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 115.737191][ T6493] ? inet_ehashfn+0x8d/0x210 [ 115.737255][ T6493] ? ip_route_input_noref+0x98/0x250 [ 115.737282][ T6493] ip_route_input_noref+0x167/0x250 [ 115.737310][ T6493] ? __pfx_ip_route_input_noref+0x10/0x10 [ 115.737341][ T6493] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 115.737361][ T6493] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 115.737388][ T6493] ip_rcv_finish_core+0x5af/0x1c00 [ 115.737435][ T6493] ip_rcv_finish+0x14c/0x2f0 [ 115.737470][ T6493] NF_HOOK+0x30c/0x3a0 [ 115.737503][ T6493] ? __pfx_ip_rcv_finish+0x10/0x10 [ 115.737534][ T6493] ? NF_HOOK+0x9a/0x3a0 [ 115.737564][ T6493] ? __pfx_NF_HOOK+0x10/0x10 [ 115.737592][ T6493] ? ip_rcv_core+0x7f7/0xd00 [ 115.737624][ T6493] ? __pfx_ip_rcv_finish+0x10/0x10 [ 115.737665][ T6493] ? __pfx_ip_rcv+0x10/0x10 [ 115.737694][ T6493] __netif_receive_skb+0x143/0x380 [ 115.737729][ T6493] ? netif_receive_skb+0x115/0x790 [ 115.737763][ T6493] netif_receive_skb+0x1cb/0x790 [ 115.737788][ T6493] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 115.737827][ T6493] ? __pfx_netif_receive_skb+0x10/0x10 [ 115.737860][ T6493] ? tun_rx_batched+0x160/0x730 [ 115.737895][ T6493] tun_rx_batched+0x1b9/0x730 [ 115.737926][ T6493] ? __lock_acquire+0xab9/0xd20 [ 115.737959][ T6493] ? __pfx_tun_rx_batched+0x10/0x10 [ 115.737996][ T6493] ? tun_get_user+0x2549/0x3ce0 [ 115.738045][ T6493] tun_get_user+0x298e/0x3ce0 [ 115.738081][ T6493] ? tun_get_user+0x693/0x3ce0 [ 115.738111][ T6493] ? tun_get_user+0x2549/0x3ce0 [ 115.738158][ T6493] ? aa_file_perm+0x11f/0xed0 [ 115.738188][ T6493] ? __pfx_tun_get_user+0x10/0x10 [ 115.738221][ T6493] ? aa_file_perm+0x3e7/0xed0 [ 115.738263][ T6493] ? ref_tracker_alloc+0x318/0x460 [ 115.738289][ T6493] ? __lock_acquire+0xab9/0xd20 [ 115.738318][ T6493] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 115.738353][ T6493] ? tun_get+0x1c/0x2f0 [ 115.738392][ T6493] ? tun_get+0x1c/0x2f0 [ 115.738422][ T6493] ? tun_get+0x1c/0x2f0 [ 115.738458][ T6493] tun_chr_write_iter+0x113/0x200 [ 115.738494][ T6493] vfs_write+0x54b/0xa90 [ 115.738539][ T6493] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 115.738570][ T6493] ? __pfx_vfs_write+0x10/0x10 [ 115.738609][ T6493] ? __fget_files+0x2a/0x420 [ 115.738649][ T6493] ksys_write+0x145/0x250 [ 115.738679][ T6493] ? __pfx_ksys_write+0x10/0x10 [ 115.738712][ T6493] ? do_syscall_64+0xbe/0x3b0 [ 115.738743][ T6493] do_syscall_64+0xfa/0x3b0 [ 115.738768][ T6493] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.738792][ T6493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.738830][ T6493] ? clear_bhb_loop+0x60/0xb0 [ 115.738853][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.738872][ T6493] RIP: 0033:0x7fbc1258d41f [ 115.738890][ T6493] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 115.738906][ T6493] RSP: 002b:00007fbc1337d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 115.738926][ T6493] RAX: ffffffffffffffda RBX: 00007fbc127b5fa0 RCX: 00007fbc1258d41f [ 115.738939][ T6493] RDX: 000000000000003a RSI: 00002000000005c0 RDI: 00000000000000c8 [ 115.738969][ T6493] RBP: 00007fbc1337d090 R08: 0000000000000000 R09: 0000000000000000 [ 115.738982][ T6493] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 115.738993][ T6493] R13: 0000000000000001 R14: 00007fbc127b5fa0 R15: 00007ffd2ffcc3e8 [ 115.739026][ T6493] [ 116.253437][ T6498] netlink: 2284 bytes leftover after parsing attributes in process `syz.3.189'. [ 116.358476][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 116.373392][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 117.961423][ T6551] warning: `syz.4.210' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.077972][ T6557] Bluetooth: MGMT ver 1.23 [ 118.485029][ T6572] __nla_validate_parse: 2 callbacks suppressed [ 118.485066][ T6572] netlink: 2284 bytes leftover after parsing attributes in process `syz.0.217'. [ 119.076754][ T6589] bridge_slave_0: default FDB implementation only supports local addresses [ 119.403435][ T6598] netlink: 64 bytes leftover after parsing attributes in process `syz.1.228'. [ 119.732013][ T6614] netlink: 2284 bytes leftover after parsing attributes in process `syz.3.232'. [ 120.267514][ T6630] FAULT_INJECTION: forcing a failure. [ 120.267514][ T6630] name failslab, interval 1, probability 0, space 0, times 0 [ 120.280472][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.2.240 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 120.280499][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.280511][ T6630] Call Trace: [ 120.280520][ T6630] [ 120.280529][ T6630] dump_stack_lvl+0x189/0x250 [ 120.280567][ T6630] ? __pfx____ratelimit+0x10/0x10 [ 120.280593][ T6630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.280625][ T6630] ? __pfx__printk+0x10/0x10 [ 120.280663][ T6630] should_fail_ex+0x414/0x560 [ 120.280695][ T6630] should_failslab+0xa8/0x100 [ 120.280728][ T6630] __kmalloc_noprof+0xcb/0x4f0 [ 120.280758][ T6630] ? hash_netport4_add+0xf1e/0x2720 [ 120.280785][ T6630] hash_netport4_add+0xf1e/0x2720 [ 120.280806][ T6630] ? hash_netport4_add+0x81/0x2720 [ 120.280853][ T6630] ? ip_set_range_to_cidr+0x90/0x1e0 [ 120.280904][ T6630] hash_netport4_uadt+0xba9/0xf30 [ 120.280934][ T6630] ? __pfx_hash_netport4_add+0x10/0x10 [ 120.280957][ T6630] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 120.280977][ T6630] ? __nla_validate_parse+0x2400/0x2d40 [ 120.281036][ T6630] call_ad+0x178/0xb00 [ 120.281075][ T6630] ? __pfx_call_ad+0x10/0x10 [ 120.281127][ T6630] ? __nla_parse+0x40/0x60 [ 120.281163][ T6630] ip_set_ad+0x791/0x930 [ 120.281203][ T6630] ? __pfx_ip_set_ad+0x10/0x10 [ 120.281228][ T6630] ? __mutex_lock+0x330/0xe80 [ 120.281301][ T6630] nfnetlink_rcv_msg+0xb4d/0x1130 [ 120.281330][ T6630] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 120.281379][ T6630] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 120.281403][ T6630] ? kasan_save_free_info+0x46/0x50 [ 120.281489][ T6630] netlink_rcv_skb+0x205/0x470 [ 120.281523][ T6630] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 120.281552][ T6630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.281599][ T6630] ? bpf_lsm_capable+0x9/0x20 [ 120.281630][ T6630] ? security_capable+0x7e/0x2e0 [ 120.281665][ T6630] nfnetlink_rcv+0x26a/0x2520 [ 120.281696][ T6630] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 120.281726][ T6630] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 120.281759][ T6630] ? __dev_queue_xmit+0x27e/0x3a70 [ 120.281783][ T6630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.281817][ T6630] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 120.281843][ T6630] ? __pfx___dev_queue_xmit+0x10/0x10 [ 120.281884][ T6630] ? ref_tracker_free+0x63a/0x7d0 [ 120.281910][ T6630] ? __copy_skb_header+0xa7/0x550 [ 120.281935][ T6630] ? __pfx_ref_tracker_free+0x10/0x10 [ 120.282006][ T6630] ? skb_clone+0x246/0x3a0 [ 120.282034][ T6630] ? __netlink_deliver_tap+0x807/0x850 [ 120.282066][ T6630] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.282112][ T6630] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.282144][ T6630] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.282184][ T6630] netlink_unicast+0x758/0x8d0 [ 120.282227][ T6630] netlink_sendmsg+0x805/0xb30 [ 120.282259][ T6630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.282284][ T6630] ? aa_sock_msg_perm+0x94/0x160 [ 120.282313][ T6630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.282338][ T6630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.282360][ T6630] __sock_sendmsg+0x219/0x270 [ 120.282391][ T6630] ____sys_sendmsg+0x505/0x830 [ 120.282419][ T6630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.282452][ T6630] ? import_iovec+0x74/0xa0 [ 120.282478][ T6630] ___sys_sendmsg+0x21f/0x2a0 [ 120.282503][ T6630] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.282568][ T6630] ? __fget_files+0x2a/0x420 [ 120.282600][ T6630] ? __fget_files+0x3a0/0x420 [ 120.282645][ T6630] __x64_sys_sendmsg+0x19b/0x260 [ 120.282671][ T6630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.282704][ T6630] ? __pfx_ksys_write+0x10/0x10 [ 120.282730][ T6630] ? rcu_is_watching+0x15/0xb0 [ 120.282767][ T6630] ? do_syscall_64+0xbe/0x3b0 [ 120.282799][ T6630] do_syscall_64+0xfa/0x3b0 [ 120.282825][ T6630] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.282849][ T6630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.282870][ T6630] ? clear_bhb_loop+0x60/0xb0 [ 120.282896][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.282916][ T6630] RIP: 0033:0x7fd5dcf8e969 [ 120.282937][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.282964][ T6630] RSP: 002b:00007fd5dded5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.282987][ T6630] RAX: ffffffffffffffda RBX: 00007fd5dd1b5fa0 RCX: 00007fd5dcf8e969 [ 120.283002][ T6630] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 120.283015][ T6630] RBP: 00007fd5dded5090 R08: 0000000000000000 R09: 0000000000000000 [ 120.283028][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.283040][ T6630] R13: 0000000000000000 R14: 00007fd5dd1b5fa0 R15: 00007fff9e1cd7c8 [ 120.283074][ T6630] [ 120.842992][ T6632] netlink: 64 bytes leftover after parsing attributes in process `syz.1.241'. [ 121.254402][ T6646] netlink: 2284 bytes leftover after parsing attributes in process `syz.2.245'. [ 121.669387][ T6661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.249'. [ 122.206481][ T6676] dummy0: entered promiscuous mode [ 122.246965][ T6676] dummy0: left promiscuous mode [ 122.417303][ T6680] netlink: 64 bytes leftover after parsing attributes in process `syz.3.254'. [ 122.706820][ T6697] netlink: 2284 bytes leftover after parsing attributes in process `syz.3.258'. [ 123.116340][ T6707] lo: entered promiscuous mode [ 123.165934][ T6707] lo: entered allmulticast mode [ 123.184798][ T6708] tipc: Can't bind to reserved service type 0 [ 123.222219][ T6707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.279060][ T6713] netlink: 3 bytes leftover after parsing attributes in process `syz.2.263'. [ 123.281730][ T6709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.340372][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 123.608267][ T30] audit: type=1800 audit(1748507037.235:2): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="blkio.bfq.time_recursive" dev="tmpfs" ino=290 res=0 errno=0 [ 123.867360][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.875303][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.150410][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.168587][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.285544][ T6708] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.295214][ T6708] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.308058][ T6708] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.318041][ T6708] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.377869][ T6730] __nla_validate_parse: 3 callbacks suppressed [ 124.377889][ T6730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.268'. [ 124.417910][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 124.621853][ T6743] netlink: 2284 bytes leftover after parsing attributes in process `syz.4.272'. [ 124.761717][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'. [ 125.771493][ T6782] netlink: 'syz.3.281': attribute type 11 has an invalid length. [ 126.369894][ T6793] netlink: 2284 bytes leftover after parsing attributes in process `syz.3.286'. [ 127.239420][ T6835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.298'. [ 128.060055][ T6851] netlink: 2284 bytes leftover after parsing attributes in process `syz.4.301'. [ 128.250841][ T6853] bridge0: port 3(erspan0) entered blocking state [ 128.267571][ T6853] bridge0: port 3(erspan0) entered disabled state [ 128.299572][ T6853] erspan0: entered allmulticast mode [ 128.319387][ T6853] erspan0: entered promiscuous mode [ 128.341686][ T6853] bridge0: port 3(erspan0) entered blocking state [ 128.348596][ T6853] bridge0: port 3(erspan0) entered forwarding state [ 128.488644][ T6857] erspan0: left allmulticast mode [ 128.498014][ T6857] erspan0: left promiscuous mode [ 128.513295][ T6857] bridge0: port 3(erspan0) entered disabled state [ 129.256534][ T6882] netlink: 36 bytes leftover after parsing attributes in process `syz.2.311'. [ 129.978016][ T6897] netlink: 208 bytes leftover after parsing attributes in process `syz.4.314'. [ 130.254441][ T6903] netlink: 2284 bytes leftover after parsing attributes in process `syz.3.315'. [ 130.619565][ T6912] netlink: 72 bytes leftover after parsing attributes in process `syz.2.318'. [ 130.910034][ T6922] FAULT_INJECTION: forcing a failure. [ 130.910034][ T6922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.927591][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.4.321 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 130.927621][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.927634][ T6922] Call Trace: [ 130.927642][ T6922] [ 130.927651][ T6922] dump_stack_lvl+0x189/0x250 [ 130.927689][ T6922] ? __pfx____ratelimit+0x10/0x10 [ 130.927715][ T6922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.927747][ T6922] ? __pfx__printk+0x10/0x10 [ 130.927770][ T6922] ? __might_fault+0xb0/0x130 [ 130.927814][ T6922] should_fail_ex+0x414/0x560 [ 130.927847][ T6922] _copy_from_user+0x2d/0xb0 [ 130.927870][ T6922] ___sys_sendmsg+0x158/0x2a0 [ 130.927895][ T6922] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.927958][ T6922] ? __fget_files+0x2a/0x420 [ 130.927988][ T6922] ? __fget_files+0x3a0/0x420 [ 130.928031][ T6922] __x64_sys_sendmsg+0x19b/0x260 [ 130.928056][ T6922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.928088][ T6922] ? __pfx_ksys_write+0x10/0x10 [ 130.928113][ T6922] ? rcu_is_watching+0x15/0xb0 [ 130.928150][ T6922] ? do_syscall_64+0xbe/0x3b0 [ 130.928181][ T6922] do_syscall_64+0xfa/0x3b0 [ 130.928206][ T6922] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.928230][ T6922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.928259][ T6922] ? clear_bhb_loop+0x60/0xb0 [ 130.928285][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.928305][ T6922] RIP: 0033:0x7f6ca138e969 [ 130.928323][ T6922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.928340][ T6922] RSP: 002b:00007f6ca2154038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.928362][ T6922] RAX: ffffffffffffffda RBX: 00007f6ca15b5fa0 RCX: 00007f6ca138e969 [ 130.928378][ T6922] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 130.928390][ T6922] RBP: 00007f6ca2154090 R08: 0000000000000000 R09: 0000000000000000 [ 130.928403][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.928415][ T6922] R13: 0000000000000000 R14: 00007f6ca15b5fa0 R15: 00007ffc5c3c8d28 [ 130.928448][ T6922] [ 131.410926][ T6924] netlink: 36 bytes leftover after parsing attributes in process `syz.3.323'. [ 131.527653][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.325'. [ 131.999903][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.328'. [ 132.387504][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.333'. [ 132.443480][ T6953] netlink: 'syz.3.335': attribute type 3 has an invalid length. [ 132.454514][ T6953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.471366][ T6953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.520619][ T6953] netlink: 'syz.3.335': attribute type 10 has an invalid length. [ 132.580227][ T6953] syz_tun: entered promiscuous mode [ 132.612565][ T6958] netlink: 332 bytes leftover after parsing attributes in process `syz.2.336'. [ 132.627296][ T6953] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 132.632797][ T6958] netlink: 104 bytes leftover after parsing attributes in process `syz.2.336'. [ 132.645973][ T6958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.336'. [ 132.709583][ T6958] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 132.860926][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.867665][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.042423][ T6969] x_tables: duplicate underflow at hook 3 [ 133.531077][ T6985] Bluetooth: MGMT ver 1.23 [ 133.623805][ T6993] FAULT_INJECTION: forcing a failure. [ 133.623805][ T6993] name failslab, interval 1, probability 0, space 0, times 0 [ 133.686569][ T6993] CPU: 0 UID: 0 PID: 6993 Comm: syz.2.345 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 133.686600][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.686612][ T6993] Call Trace: [ 133.686621][ T6993] [ 133.686630][ T6993] dump_stack_lvl+0x189/0x250 [ 133.686669][ T6993] ? __pfx____ratelimit+0x10/0x10 [ 133.686696][ T6993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.686729][ T6993] ? __pfx__printk+0x10/0x10 [ 133.686769][ T6993] should_fail_ex+0x414/0x560 [ 133.686808][ T6993] should_failslab+0xa8/0x100 [ 133.686842][ T6993] __kmalloc_cache_noprof+0x70/0x3d0 [ 133.686872][ T6993] ? sctp_add_bind_addr+0x8c/0x370 [ 133.686906][ T6993] sctp_add_bind_addr+0x8c/0x370 [ 133.686941][ T6993] sctp_copy_local_addr_list+0x30b/0x4e0 [ 133.686979][ T6993] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 133.687009][ T6993] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 133.687041][ T6993] ? sctp_v6_is_any+0x64/0x80 [ 133.687073][ T6993] ? sctp_copy_one_addr+0x93/0x360 [ 133.687107][ T6993] sctp_bind_addr_copy+0x189/0x3c0 [ 133.687145][ T6993] sctp_connect_new_asoc+0x2e0/0x690 [ 133.687172][ T6993] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 133.687191][ T6993] ? __local_bh_enable_ip+0x12d/0x1c0 [ 133.687242][ T6993] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 133.687269][ T6993] ? security_sctp_bind_connect+0x7e/0x2e0 [ 133.687295][ T6993] sctp_sendmsg+0x155c/0x2810 [ 133.687329][ T6993] ? __pfx_sctp_sendmsg+0x10/0x10 [ 133.687353][ T6993] ? aa_sk_perm+0x81e/0x950 [ 133.687382][ T6993] ? __pfx_aa_sk_perm+0x10/0x10 [ 133.687410][ T6993] ? sock_rps_record_flow+0x19/0x410 [ 133.687441][ T6993] ? inet_sendmsg+0x2f4/0x370 [ 133.687490][ T6993] __sock_sendmsg+0x19c/0x270 [ 133.687522][ T6993] ____sys_sendmsg+0x52d/0x830 [ 133.687551][ T6993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.687584][ T6993] ? import_iovec+0x74/0xa0 [ 133.687610][ T6993] ___sys_sendmsg+0x21f/0x2a0 [ 133.687634][ T6993] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.687699][ T6993] ? __fget_files+0x2a/0x420 [ 133.687731][ T6993] ? __fget_files+0x3a0/0x420 [ 133.687775][ T6993] __sys_sendmmsg+0x227/0x430 [ 133.687803][ T6993] ? __pfx___sys_sendmmsg+0x10/0x10 [ 133.687822][ T6993] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 133.687882][ T6993] ? ksys_write+0x22a/0x250 [ 133.687912][ T6993] ? __pfx_ksys_write+0x10/0x10 [ 133.687937][ T6993] ? rcu_is_watching+0x15/0xb0 [ 133.687984][ T6993] __x64_sys_sendmmsg+0xa0/0xc0 [ 133.688008][ T6993] do_syscall_64+0xfa/0x3b0 [ 133.688034][ T6993] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.688058][ T6993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.688079][ T6993] ? clear_bhb_loop+0x60/0xb0 [ 133.688104][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.688124][ T6993] RIP: 0033:0x7fd5dcf8e969 [ 133.688143][ T6993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.688160][ T6993] RSP: 002b:00007fd5dded5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.688182][ T6993] RAX: ffffffffffffffda RBX: 00007fd5dd1b5fa0 RCX: 00007fd5dcf8e969 [ 133.688197][ T6993] RDX: 0000000000000002 RSI: 0000200000003240 RDI: 0000000000000003 [ 133.688210][ T6993] RBP: 00007fd5dded5090 R08: 0000000000000000 R09: 0000000000000000 [ 133.688223][ T6993] R10: 931766f6319eed40 R11: 0000000000000246 R12: 0000000000000002 [ 133.688236][ T6993] R13: 0000000000000000 R14: 00007fd5dd1b5fa0 R15: 00007fff9e1cd7c8 [ 133.688268][ T6993] [ 134.360740][ T7007] sctp: [Deprecated]: syz.3.351 (pid 7007) Use of int in max_burst socket option. [ 134.360740][ T7007] Use struct sctp_assoc_value instead [ 135.095962][ T7040] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 135.552420][ T7047] __nla_validate_parse: 5 callbacks suppressed [ 135.552440][ T7047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.362'. [ 136.080914][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.371'. [ 136.186365][ T7084] netlink: 372 bytes leftover after parsing attributes in process `syz.0.372'. [ 136.293877][ T7087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.375'. [ 136.336493][ T7086] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.340498][ T5897] IPVS: starting estimator thread 0... [ 136.351063][ T7087] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 136.475876][ T7089] IPVS: using max 25 ests per chain, 60000 per kthread [ 136.698724][ T7106] FAULT_INJECTION: forcing a failure. [ 136.698724][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 136.751601][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'. [ 136.773462][ T7106] CPU: 1 UID: 0 PID: 7106 Comm: syz.4.383 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 136.773504][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.773518][ T7106] Call Trace: [ 136.773526][ T7106] [ 136.773536][ T7106] dump_stack_lvl+0x189/0x250 [ 136.773576][ T7106] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.773603][ T7106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.773636][ T7106] ? __pfx__printk+0x10/0x10 [ 136.773674][ T7106] should_fail_ex+0x414/0x560 [ 136.773707][ T7106] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 136.773740][ T7106] should_failslab+0xa8/0x100 [ 136.773775][ T7106] __kvmalloc_node_noprof+0x168/0x600 [ 136.773808][ T7106] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 136.773848][ T7106] bpf_test_run_xdp_live+0x18e/0x1b10 [ 136.773885][ T7106] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 136.773919][ T7106] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.773961][ T7106] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 136.773992][ T7106] ? 0xffffffffa0205540 [ 136.774011][ T7106] ? 0xffffffffa0205540 [ 136.774081][ T7106] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 136.774111][ T7106] ? _copy_from_user+0x94/0xb0 [ 136.774134][ T7106] ? bpf_test_init+0x133/0x170 [ 136.774162][ T7106] ? xdp_convert_md_to_buff+0x5b/0x330 [ 136.774197][ T7106] bpf_prog_test_run_xdp+0x713/0x1000 [ 136.774250][ T7106] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.774289][ T7106] ? __fget_files+0x2a/0x420 [ 136.774326][ T7106] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.774361][ T7106] bpf_prog_test_run+0x2c4/0x340 [ 136.774394][ T7106] __sys_bpf+0x4a4/0x860 [ 136.774424][ T7106] ? __pfx___sys_bpf+0x10/0x10 [ 136.774466][ T7106] ? ksys_write+0x22a/0x250 [ 136.774516][ T7106] ? __pfx_ksys_write+0x10/0x10 [ 136.774540][ T7106] ? rcu_is_watching+0x15/0xb0 [ 136.774579][ T7106] __x64_sys_bpf+0x7c/0x90 [ 136.774604][ T7106] do_syscall_64+0xfa/0x3b0 [ 136.774631][ T7106] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.774656][ T7106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.774677][ T7106] ? clear_bhb_loop+0x60/0xb0 [ 136.774703][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.774724][ T7106] RIP: 0033:0x7f6ca138e969 [ 136.774742][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.774760][ T7106] RSP: 002b:00007f6ca2154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.774782][ T7106] RAX: ffffffffffffffda RBX: 00007f6ca15b5fa0 RCX: 00007f6ca138e969 [ 136.774798][ T7106] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 136.774811][ T7106] RBP: 00007f6ca2154090 R08: 0000000000000000 R09: 0000000000000000 [ 136.774824][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.774836][ T7106] R13: 0000000000000000 R14: 00007f6ca15b5fa0 R15: 00007ffc5c3c8d28 [ 136.774869][ T7106] [ 137.071410][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'. [ 137.138917][ T7110] x_tables: duplicate underflow at hook 2 [ 137.254567][ T7121] tipc: Started in network mode [ 137.259528][ T7121] tipc: Node identity , cluster identity 4711 [ 137.267108][ T7122] tipc: Started in network mode [ 137.272009][ T7122] tipc: Node identity , cluster identity 4711 [ 137.405691][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'. [ 137.425772][ T7125] lo: entered promiscuous mode [ 137.430650][ T7125] lo: entered allmulticast mode [ 137.437429][ T7125] tunl0: entered promiscuous mode [ 137.442507][ T7125] tunl0: entered allmulticast mode [ 137.514101][ T7125] gre0: entered promiscuous mode [ 137.537385][ T7125] gre0: entered allmulticast mode [ 137.562548][ T7125] gretap0: entered promiscuous mode [ 137.574413][ T7125] gretap0: entered allmulticast mode [ 137.603390][ T7125] erspan0: entered promiscuous mode [ 137.616712][ T7125] erspan0: entered allmulticast mode [ 137.632340][ T7125] ip_vti0: entered promiscuous mode [ 137.714184][ T7125] ip_vti0: entered allmulticast mode [ 137.732004][ T7125] ip6_vti0: entered promiscuous mode [ 137.738454][ T7125] ip6_vti0: entered allmulticast mode [ 137.748699][ T7125] sit0: entered promiscuous mode [ 137.754614][ T7125] sit0: entered allmulticast mode [ 137.822184][ T7125] ip6tnl0: entered promiscuous mode [ 137.828267][ T7125] ip6tnl0: entered allmulticast mode [ 137.916368][ T7125] ip6gre0: entered promiscuous mode [ 137.921801][ T7125] ip6gre0: entered allmulticast mode [ 137.938227][ T7125] syz_tun: entered promiscuous mode [ 137.944704][ T7125] syz_tun: entered allmulticast mode [ 137.971442][ T7125] ip6gretap0: entered promiscuous mode [ 137.977213][ T7125] ip6gretap0: entered allmulticast mode [ 137.989274][ T7125] vcan0: entered promiscuous mode [ 137.996427][ T7125] vcan0: entered allmulticast mode [ 138.009945][ T7125] bond0: entered promiscuous mode [ 138.020535][ T7125] bond_slave_0: entered promiscuous mode [ 138.028713][ T7125] bond_slave_1: entered promiscuous mode [ 138.037427][ T7125] bond0: entered allmulticast mode [ 138.042745][ T7125] bond_slave_0: entered allmulticast mode [ 138.048791][ T7125] bond_slave_1: entered allmulticast mode [ 138.068821][ T7125] team0: entered promiscuous mode [ 138.074100][ T7125] team_slave_0: entered promiscuous mode [ 138.094872][ T7125] team_slave_1: entered promiscuous mode [ 138.114384][ T7125] team0: entered allmulticast mode [ 138.119580][ T7125] team_slave_0: entered allmulticast mode [ 138.127075][ T7125] team_slave_1: entered allmulticast mode [ 138.140137][ T7125] dummy0: entered promiscuous mode [ 138.163171][ T7125] dummy0: entered allmulticast mode [ 138.205053][ T7125] nlmon0: entered promiscuous mode [ 138.210626][ T7125] nlmon0: entered allmulticast mode [ 138.224112][ T7125] caif0: entered promiscuous mode [ 138.229382][ T7125] caif0: entered allmulticast mode [ 138.239928][ T7125] batadv0: entered promiscuous mode [ 138.245472][ T7125] batadv0: entered allmulticast mode [ 138.260427][ T7125] veth0: entered promiscuous mode [ 138.266430][ T7125] veth0: entered allmulticast mode [ 138.276591][ T7125] veth1: entered promiscuous mode [ 138.287793][ T7125] veth1: entered allmulticast mode [ 138.334501][ T7125] wg0: entered promiscuous mode [ 138.345332][ T7125] wg0: entered allmulticast mode [ 138.363653][ T7125] wg1: entered promiscuous mode [ 138.382537][ T7125] wg1: entered allmulticast mode [ 138.432298][ T7125] wg2: entered promiscuous mode [ 138.442986][ T7125] wg2: entered allmulticast mode [ 138.458928][ T7125] veth0_to_bridge: entered promiscuous mode [ 138.481219][ T7125] veth0_to_bridge: entered allmulticast mode [ 138.491530][ T7125] bridge_slave_0: entered promiscuous mode [ 138.514046][ T7125] bridge_slave_0: entered allmulticast mode [ 138.522119][ T7125] veth1_to_bridge: entered promiscuous mode [ 138.544036][ T7125] veth1_to_bridge: entered allmulticast mode [ 138.555628][ T7125] bridge_slave_1: entered promiscuous mode [ 138.561636][ T7125] bridge_slave_1: entered allmulticast mode [ 138.576847][ T7125] veth0_to_bond: entered promiscuous mode [ 138.585708][ T7125] veth0_to_bond: entered allmulticast mode [ 138.597764][ T7125] veth1_to_bond: entered promiscuous mode [ 138.603625][ T7125] veth1_to_bond: entered allmulticast mode [ 138.616822][ T7125] veth0_to_team: entered promiscuous mode [ 138.622748][ T7125] veth0_to_team: entered allmulticast mode [ 138.640900][ T7125] veth1_to_team: entered promiscuous mode [ 138.647739][ T7125] veth1_to_team: entered allmulticast mode [ 138.676069][ T7125] veth0_to_batadv: entered promiscuous mode [ 138.682058][ T7125] veth0_to_batadv: entered allmulticast mode [ 138.706305][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.724665][ T7125] batadv_slave_0: entered promiscuous mode [ 138.736453][ T7125] batadv_slave_0: entered allmulticast mode [ 138.752412][ T7125] veth1_to_batadv: entered promiscuous mode [ 138.761373][ T7125] veth1_to_batadv: entered allmulticast mode [ 138.773896][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.785538][ T7125] batadv_slave_1: entered promiscuous mode [ 138.791438][ T7125] batadv_slave_1: entered allmulticast mode [ 138.816241][ T7125] xfrm0: entered promiscuous mode [ 138.822199][ T7125] xfrm0: entered allmulticast mode [ 138.837729][ T7125] veth0_to_hsr: entered promiscuous mode [ 138.844197][ T7125] veth0_to_hsr: entered allmulticast mode [ 138.853541][ T7125] hsr_slave_0: entered allmulticast mode [ 138.862913][ T7125] veth1_to_hsr: entered promiscuous mode [ 138.869235][ T7125] veth1_to_hsr: entered allmulticast mode [ 138.890818][ T7125] hsr_slave_1: entered allmulticast mode [ 138.909537][ T7125] hsr0: entered promiscuous mode [ 138.915026][ T7125] hsr0: entered allmulticast mode [ 138.928380][ T7125] veth1_virt_wifi: entered promiscuous mode [ 138.934509][ T7125] veth1_virt_wifi: entered allmulticast mode [ 138.944949][ T7125] veth0_virt_wifi: entered promiscuous mode [ 138.966220][ T7125] veth0_virt_wifi: entered allmulticast mode [ 138.985217][ T7125] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 138.992698][ T7125] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 139.006117][ T7125] veth1_vlan: entered allmulticast mode [ 139.023510][ T7125] veth0_vlan: entered allmulticast mode [ 139.052990][ T7125] vlan0: entered promiscuous mode [ 139.066090][ T7125] vlan0: entered allmulticast mode [ 139.071831][ T7125] vlan1: entered promiscuous mode [ 139.086557][ T7125] vlan1: entered allmulticast mode [ 139.093509][ T7125] macvlan0: entered promiscuous mode [ 139.099865][ T7125] macvlan0: entered allmulticast mode [ 139.113169][ T7125] macvlan1: entered promiscuous mode [ 139.118811][ T7125] macvlan1: entered allmulticast mode [ 139.127759][ T7125] ipvlan0: entered promiscuous mode [ 139.133011][ T7125] ipvlan0: entered allmulticast mode [ 139.138970][ T7125] ipvlan1: entered promiscuous mode [ 139.144685][ T7125] ipvlan1: entered allmulticast mode [ 139.150918][ T7125] veth1_macvtap: entered allmulticast mode [ 139.162024][ T7125] veth0_macvtap: entered allmulticast mode [ 139.173666][ T7125] macvtap0: entered promiscuous mode [ 139.179280][ T7125] macvtap0: entered allmulticast mode [ 139.190810][ T7125] macsec0: entered promiscuous mode [ 139.214063][ T7125] macsec0: entered allmulticast mode [ 139.225612][ T7125] geneve0: entered promiscuous mode [ 139.231231][ T7125] geneve0: entered allmulticast mode [ 139.247989][ T7125] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.261531][ T7125] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.273140][ T7125] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.288725][ T7125] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.300785][ T7125] geneve1: entered promiscuous mode [ 139.310565][ T7125] geneve1: entered allmulticast mode [ 139.331433][ T7125] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 139.339892][ T7125] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 139.355580][ T7125] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 139.363249][ T7125] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 139.376029][ T7125] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 139.383386][ T7125] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 139.395837][ T7125] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 139.403280][ T7125] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 139.424633][ T7125] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 139.431647][ T7125] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 139.460460][ T7125] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 139.467594][ T7125] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 139.477344][ T7125] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 139.484736][ T7125] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 139.492105][ T7125] gtp0: entered promiscuous mode [ 139.500946][ T7125] gtp0: entered allmulticast mode [ 139.710087][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 139.747876][ T5835] Bluetooth: hci4: link tx timeout [ 139.753332][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.382634][ T7198] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 140.732100][ T7204] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 140.825360][ T7204] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 140.857841][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.413'. [ 140.967014][ T7212] netlink: 'syz.3.412': attribute type 5 has an invalid length. [ 141.235202][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.416'. [ 141.289481][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.416'. [ 141.353692][ T7222] dummy0: entered promiscuous mode [ 141.394581][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 141.516070][ T7222] dummy0 (unregistering): left promiscuous mode [ 141.816833][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 141.917204][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 141.984786][ T7252] netlink: 44 bytes leftover after parsing attributes in process `syz.0.428'. [ 142.128251][ T7255] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.227781][ T7260] netlink: 312 bytes leftover after parsing attributes in process `syz.1.432'. [ 142.242505][ T7260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'. [ 142.265162][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 142.324371][ T7262] netlink: 'syz.0.433': attribute type 30 has an invalid length. [ 142.384042][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'. [ 142.451405][ T7270] FAULT_INJECTION: forcing a failure. [ 142.451405][ T7270] name failslab, interval 1, probability 0, space 0, times 0 [ 142.480795][ T7270] CPU: 1 UID: 0 PID: 7270 Comm: syz.4.437 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 142.480834][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.480847][ T7270] Call Trace: [ 142.480856][ T7270] [ 142.480866][ T7270] dump_stack_lvl+0x189/0x250 [ 142.480905][ T7270] ? __pfx____ratelimit+0x10/0x10 [ 142.480932][ T7270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.480965][ T7270] ? __pfx__printk+0x10/0x10 [ 142.480995][ T7270] ? __pfx___might_resched+0x10/0x10 [ 142.481025][ T7270] ? fs_reclaim_acquire+0x7d/0x100 [ 142.481052][ T7270] should_fail_ex+0x414/0x560 [ 142.481086][ T7270] should_failslab+0xa8/0x100 [ 142.481120][ T7270] __kmalloc_noprof+0xcb/0x4f0 [ 142.481148][ T7270] ? kfree+0x4d/0x440 [ 142.481172][ T7270] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 142.481209][ T7270] tomoyo_realpath_from_path+0xe3/0x5d0 [ 142.481241][ T7270] ? tomoyo_domain+0xd9/0x130 [ 142.481278][ T7270] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 142.481302][ T7270] tomoyo_path_number_perm+0x1e8/0x5a0 [ 142.481330][ T7270] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.481375][ T7270] ? __lock_acquire+0xab9/0xd20 [ 142.481426][ T7270] ? __fget_files+0x2a/0x420 [ 142.481461][ T7270] ? __fget_files+0x2a/0x420 [ 142.481491][ T7270] ? __fget_files+0x3a0/0x420 [ 142.481521][ T7270] ? __fget_files+0x2a/0x420 [ 142.481557][ T7270] security_file_ioctl+0xcb/0x2d0 [ 142.481583][ T7270] __se_sys_ioctl+0x47/0x170 [ 142.481612][ T7270] do_syscall_64+0xfa/0x3b0 [ 142.481638][ T7270] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.481662][ T7270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.481683][ T7270] ? clear_bhb_loop+0x60/0xb0 [ 142.481709][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.481729][ T7270] RIP: 0033:0x7f6ca138e969 [ 142.481748][ T7270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.481765][ T7270] RSP: 002b:00007f6ca2154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.481788][ T7270] RAX: ffffffffffffffda RBX: 00007f6ca15b5fa0 RCX: 00007f6ca138e969 [ 142.481803][ T7270] RDX: 0000200000000080 RSI: 00000000800442d2 RDI: 0000000000000004 [ 142.481823][ T7270] RBP: 00007f6ca2154090 R08: 0000000000000000 R09: 0000000000000000 [ 142.481835][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.481847][ T7270] R13: 0000000000000000 R14: 00007f6ca15b5fa0 R15: 00007ffc5c3c8d28 [ 142.481881][ T7270] [ 142.481890][ T7270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.631394][ T7313] tipc: Enabling of bearer rejected, failed to enable media [ 144.117400][ T7331] netem: unknown loss type 13 [ 144.489869][ T7341] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 144.701772][ T30] audit: type=1800 audit(1748507058.355:3): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.454" name="cgroup.controllers" dev="tmpfs" ino=494 res=0 errno=0 [ 144.729743][ T7346] gtp0: entered promiscuous mode [ 144.764687][ T7346] gtp0: entered allmulticast mode [ 145.832603][ T7378] syzkaller1: entered promiscuous mode [ 145.863654][ T7378] syzkaller1: entered allmulticast mode [ 145.895444][ T7378] netlink: 'syz.4.482': attribute type 10 has an invalid length. [ 145.931109][ T7378] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.976364][ T7378] bond0: (slave team0): Enslaving as an active interface with an up link [ 146.059244][ T7386] __nla_validate_parse: 8 callbacks suppressed [ 146.059266][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.484'. [ 146.472120][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.007764][ T7425] netlink: 108 bytes leftover after parsing attributes in process `syz.3.497'. [ 147.074013][ T7425] netlink: 108 bytes leftover after parsing attributes in process `syz.3.497'. [ 147.138096][ T7425] netlink: 108 bytes leftover after parsing attributes in process `syz.3.497'. [ 147.814426][ T7457] bridge: RTM_NEWNEIGH with invalid ether address [ 147.841885][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 147.875830][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.503'. [ 148.199368][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'. [ 148.239590][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'. [ 148.354291][ T7480] FAULT_INJECTION: forcing a failure. [ 148.354291][ T7480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.378561][ T7480] CPU: 0 UID: 0 PID: 7480 Comm: syz.2.515 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 148.378591][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.378603][ T7480] Call Trace: [ 148.378611][ T7480] [ 148.378620][ T7480] dump_stack_lvl+0x189/0x250 [ 148.378657][ T7480] ? __pfx____ratelimit+0x10/0x10 [ 148.378682][ T7480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.378714][ T7480] ? __pfx__printk+0x10/0x10 [ 148.378736][ T7480] ? __might_fault+0xb0/0x130 [ 148.378776][ T7480] should_fail_ex+0x414/0x560 [ 148.378808][ T7480] _copy_from_user+0x2d/0xb0 [ 148.378829][ T7480] ___sys_recvmsg+0x12e/0x510 [ 148.378857][ T7480] ? __pfx____sys_recvmsg+0x10/0x10 [ 148.378912][ T7480] ? __might_fault+0xb0/0x130 [ 148.378945][ T7480] do_recvmmsg+0x307/0x770 [ 148.378975][ T7480] ? __pfx_do_recvmmsg+0x10/0x10 [ 148.379010][ T7480] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.379074][ T7480] __x64_sys_recvmmsg+0x190/0x240 [ 148.379118][ T7480] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 148.379138][ T7480] ? rcu_is_watching+0x15/0xb0 [ 148.379173][ T7480] ? do_syscall_64+0xbe/0x3b0 [ 148.379209][ T7480] do_syscall_64+0xfa/0x3b0 [ 148.379234][ T7480] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.379259][ T7480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.379279][ T7480] ? clear_bhb_loop+0x60/0xb0 [ 148.379305][ T7480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.379325][ T7480] RIP: 0033:0x7fd5dcf8e969 [ 148.379343][ T7480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.379360][ T7480] RSP: 002b:00007fd5dded5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 148.379382][ T7480] RAX: ffffffffffffffda RBX: 00007fd5dd1b5fa0 RCX: 00007fd5dcf8e969 [ 148.379397][ T7480] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 148.379410][ T7480] RBP: 00007fd5dded5090 R08: 0000000000000000 R09: 0000000000000000 [ 148.379422][ T7480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.379434][ T7480] R13: 0000000000000000 R14: 00007fd5dd1b5fa0 R15: 00007fff9e1cd7c8 [ 148.379467][ T7480] [ 149.172727][ T7505] xt_hashlimit: size too large, truncated to 1048576 [ 149.305482][ T7508] FAULT_INJECTION: forcing a failure. [ 149.305482][ T7508] name failslab, interval 1, probability 0, space 0, times 0 [ 149.348281][ T7508] CPU: 0 UID: 0 PID: 7508 Comm: syz.2.524 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 149.348310][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.348323][ T7508] Call Trace: [ 149.348331][ T7508] [ 149.348340][ T7508] dump_stack_lvl+0x189/0x250 [ 149.348379][ T7508] ? __pfx____ratelimit+0x10/0x10 [ 149.348406][ T7508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.348439][ T7508] ? __pfx__printk+0x10/0x10 [ 149.348464][ T7508] ? __pfx___might_resched+0x10/0x10 [ 149.348495][ T7508] ? fs_reclaim_acquire+0x7d/0x100 [ 149.348523][ T7508] should_fail_ex+0x414/0x560 [ 149.348557][ T7508] should_failslab+0xa8/0x100 [ 149.348590][ T7508] __kmalloc_noprof+0xcb/0x4f0 [ 149.348620][ T7508] ? sock_kmalloc+0xd6/0x160 [ 149.348648][ T7508] sock_kmalloc+0xd6/0x160 [ 149.348673][ T7508] skcipher_recvmsg+0x55c/0x11c0 [ 149.348724][ T7508] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 149.348751][ T7508] ? __lock_acquire+0xab9/0xd20 [ 149.348781][ T7508] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 149.348805][ T7508] ? security_socket_recvmsg+0x7e/0x2e0 [ 149.348838][ T7508] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 149.348867][ T7508] sock_recvmsg+0x229/0x270 [ 149.348899][ T7508] ____sys_recvmsg+0x1c9/0x460 [ 149.348931][ T7508] ? __pfx_____sys_recvmsg+0x10/0x10 [ 149.348971][ T7508] ? import_iovec+0x74/0xa0 [ 149.348997][ T7508] ___sys_recvmsg+0x1b5/0x510 [ 149.349025][ T7508] ? __pfx____sys_recvmsg+0x10/0x10 [ 149.349076][ T7508] ? __fget_files+0x3a0/0x420 [ 149.349136][ T7508] do_recvmmsg+0x307/0x770 [ 149.349168][ T7508] ? __pfx_do_recvmmsg+0x10/0x10 [ 149.349205][ T7508] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.349253][ T7508] __x64_sys_recvmmsg+0x190/0x240 [ 149.349279][ T7508] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 149.349304][ T7508] ? rcu_is_watching+0x15/0xb0 [ 149.349340][ T7508] ? do_syscall_64+0xbe/0x3b0 [ 149.349371][ T7508] do_syscall_64+0xfa/0x3b0 [ 149.349397][ T7508] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.349422][ T7508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.349442][ T7508] ? clear_bhb_loop+0x60/0xb0 [ 149.349468][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.349489][ T7508] RIP: 0033:0x7fd5dcf8e969 [ 149.349507][ T7508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.349524][ T7508] RSP: 002b:00007fd5dded5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 149.349547][ T7508] RAX: ffffffffffffffda RBX: 00007fd5dd1b5fa0 RCX: 00007fd5dcf8e969 [ 149.349562][ T7508] RDX: 0000000000000001 RSI: 00002000000029c0 RDI: 0000000000000004 [ 149.349575][ T7508] RBP: 00007fd5dded5090 R08: 0000000000000000 R09: 0000000000000000 [ 149.349587][ T7508] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 149.349600][ T7508] R13: 0000000000000000 R14: 00007fd5dd1b5fa0 R15: 00007fff9e1cd7c8 [ 149.349633][ T7508] [ 150.282577][ T7533] netlink: 92 bytes leftover after parsing attributes in process `syz.0.533'. [ 150.885893][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 150.944202][ T7564] bond0: entered promiscuous mode [ 150.949506][ T7564] bond_slave_0: entered promiscuous mode [ 150.956492][ T7564] bond_slave_1: entered promiscuous mode [ 150.967934][ T7564] batadv0: entered promiscuous mode [ 150.979583][ T7564] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 151.008651][ T7564] bond0: left promiscuous mode [ 151.022290][ T7564] bond_slave_0: left promiscuous mode [ 151.030509][ T7564] bond_slave_1: left promiscuous mode [ 151.057138][ T7564] batadv0: left promiscuous mode [ 151.131751][ T7571] netlink: 'syz.4.547': attribute type 1 has an invalid length. [ 151.198633][ T7571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.122573][ T7619] __nla_validate_parse: 2 callbacks suppressed [ 152.122593][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.564'. [ 152.161081][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 152.310228][ T7623] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 152.369807][ T7623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.388534][ T7630] vlan2: entered allmulticast mode [ 152.401030][ T7630] bond1: (slave vlan2): Opening slave failed [ 153.154630][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 153.364609][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 153.584419][ T7688] bridge0: port 3(erspan0) entered blocking state [ 153.592066][ T7688] bridge0: port 3(erspan0) entered disabled state [ 153.599316][ T7688] erspan0: entered allmulticast mode [ 153.606868][ T7688] erspan0: entered promiscuous mode [ 153.616936][ T7688] erspan0: left allmulticast mode [ 153.624401][ T7688] erspan0: left promiscuous mode [ 153.650143][ T7688] bridge0: port 3(erspan0) entered disabled state [ 153.657860][ T7692] netlink: 72 bytes leftover after parsing attributes in process `syz.1.594'. [ 153.701829][ T7692] trusted_key: syz.1.594 sent an empty control message without MSG_MORE. [ 153.825060][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 154.037982][ T7705] FAULT_INJECTION: forcing a failure. [ 154.037982][ T7705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.057806][ T7705] CPU: 0 UID: 0 PID: 7705 Comm: syz.2.598 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 154.057836][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.057849][ T7705] Call Trace: [ 154.057856][ T7705] [ 154.057865][ T7705] dump_stack_lvl+0x189/0x250 [ 154.057910][ T7705] ? __pfx____ratelimit+0x10/0x10 [ 154.057937][ T7705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.057970][ T7705] ? __pfx__printk+0x10/0x10 [ 154.057993][ T7705] ? __might_fault+0xb0/0x130 [ 154.058036][ T7705] should_fail_ex+0x414/0x560 [ 154.058069][ T7705] _copy_from_user+0x2d/0xb0 [ 154.058091][ T7705] kstrtouint_from_user+0xc4/0x170 [ 154.058124][ T7705] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 154.058173][ T7705] proc_fail_nth_write+0x88/0x240 [ 154.058196][ T7705] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.058225][ T7705] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.058248][ T7705] vfs_write+0x27e/0xa90 [ 154.058287][ T7705] ? __pfx_vfs_write+0x10/0x10 [ 154.058317][ T7705] ? __fget_files+0x2a/0x420 [ 154.058355][ T7705] ? __fget_files+0x3a0/0x420 [ 154.058385][ T7705] ? __fget_files+0x2a/0x420 [ 154.058428][ T7705] ksys_write+0x145/0x250 [ 154.058482][ T7705] ? __pfx_ksys_write+0x10/0x10 [ 154.058507][ T7705] ? rcu_is_watching+0x15/0xb0 [ 154.058545][ T7705] ? do_syscall_64+0xbe/0x3b0 [ 154.058578][ T7705] do_syscall_64+0xfa/0x3b0 [ 154.058604][ T7705] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.058629][ T7705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.058651][ T7705] ? clear_bhb_loop+0x60/0xb0 [ 154.058678][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.058699][ T7705] RIP: 0033:0x7fd5dcf8d41f [ 154.058718][ T7705] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 154.058736][ T7705] RSP: 002b:00007fd5dded5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 154.058757][ T7705] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd5dcf8d41f [ 154.058772][ T7705] RDX: 0000000000000001 RSI: 00007fd5dded50a0 RDI: 0000000000000004 [ 154.058785][ T7705] RBP: 00007fd5dded5090 R08: 0000000000000000 R09: 0000000000000000 [ 154.058798][ T7705] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 154.058810][ T7705] R13: 0000000000000000 R14: 00007fd5dd1b5fa0 R15: 00007fff9e1cd7c8 [ 154.058844][ T7705] [ 154.585501][ T7719] netlink: 256 bytes leftover after parsing attributes in process `syz.4.603'. [ 154.630085][ T7719] netlink: 48 bytes leftover after parsing attributes in process `syz.4.603'. [ 154.671919][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 154.880510][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 155.467442][ T7757] FAULT_INJECTION: forcing a failure. [ 155.467442][ T7757] name failslab, interval 1, probability 0, space 0, times 0 [ 155.494443][ T7757] CPU: 0 UID: 0 PID: 7757 Comm: syz.2.622 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 155.494473][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.494499][ T7757] Call Trace: [ 155.494507][ T7757] [ 155.494516][ T7757] dump_stack_lvl+0x189/0x250 [ 155.494553][ T7757] ? __pfx____ratelimit+0x10/0x10 [ 155.494578][ T7757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.494610][ T7757] ? __pfx__printk+0x10/0x10 [ 155.494634][ T7757] ? __pfx___might_resched+0x10/0x10 [ 155.494663][ T7757] ? fs_reclaim_acquire+0x7d/0x100 [ 155.494707][ T7757] should_fail_ex+0x414/0x560 [ 155.494759][ T7757] should_failslab+0xa8/0x100 [ 155.494793][ T7757] __kmalloc_noprof+0xcb/0x4f0 [ 155.494822][ T7757] ? sock_kmalloc+0xd6/0x160 [ 155.494861][ T7757] sock_kmalloc+0xd6/0x160 [ 155.494885][ T7757] skcipher_recvmsg+0x55c/0x11c0 [ 155.494954][ T7757] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 155.494987][ T7757] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 155.495011][ T7757] ? security_socket_recvmsg+0x7e/0x2e0 [ 155.495044][ T7757] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 155.495073][ T7757] sock_recvmsg+0x229/0x270 [ 155.495106][ T7757] ____sys_recvmsg+0x1c9/0x460 [ 155.495138][ T7757] ? __pfx_____sys_recvmsg+0x10/0x10 [ 155.495177][ T7757] ? ___sys_recvmsg+0x193/0x510 [ 155.495215][ T7757] ___sys_recvmsg+0x1b5/0x510 [ 155.495242][ T7757] ? __pfx____sys_recvmsg+0x10/0x10 [ 155.495292][ T7757] ? __fget_files+0x3a0/0x420 [ 155.495334][ T7757] do_recvmmsg+0x307/0x770 [ 155.495366][ T7757] ? __pfx_do_recvmmsg+0x10/0x10 [ 155.495401][ T7757] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.495447][ T7757] __x64_sys_recvmmsg+0x190/0x240 [ 155.495472][ T7757] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 155.495492][ T7757] ? rcu_is_watching+0x15/0xb0 [ 155.495527][ T7757] ? do_syscall_64+0xbe/0x3b0 [ 155.495557][ T7757] do_syscall_64+0xfa/0x3b0 [ 155.495582][ T7757] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.495605][ T7757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.495625][ T7757] ? clear_bhb_loop+0x60/0xb0 [ 155.495650][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.495670][ T7757] RIP: 0033:0x7fd5dcf8e969 [ 155.495688][ T7757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.495704][ T7757] RSP: 002b:00007fd5dded5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 155.495734][ T7757] RAX: ffffffffffffffda RBX: 00007fd5dd1b5fa0 RCX: 00007fd5dcf8e969 [ 155.495748][ T7757] RDX: 0000000000000001 RSI: 00002000000029c0 RDI: 0000000000000004 [ 155.495761][ T7757] RBP: 00007fd5dded5090 R08: 0000000000000000 R09: 0000000000000000 [ 155.495773][ T7757] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 155.495785][ T7757] R13: 0000000000000000 R14: 00007fd5dd1b5fa0 R15: 00007fff9e1cd7c8 [ 155.495816][ T7757] [ 156.025329][ T7738] netlink: 'syz.1.614': attribute type 4 has an invalid length. [ 156.105667][ T7163] IPVS: starting estimator thread 0... [ 156.175387][ T7767] syzkaller1: entered promiscuous mode [ 156.204023][ T7767] syzkaller1: entered allmulticast mode [ 156.204437][ T7769] IPVS: using max 27 ests per chain, 64800 per kthread [ 156.831688][ T7803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.895681][ T7803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.254829][ T7824] __nla_validate_parse: 4 callbacks suppressed [ 157.254848][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 157.360012][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 157.419553][ T7832] netlink: 2284 bytes leftover after parsing attributes in process `syz.3.648'. [ 158.190085][ T7865] netlink: 'syz.3.659': attribute type 39 has an invalid length. [ 158.246298][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.660'. [ 158.300196][ T7865] bond0: (slave syz_tun): Releasing backup interface [ 158.309957][ T7862] netlink: 'syz.4.656': attribute type 303 has an invalid length. [ 158.382719][ T7872] netlink: 2284 bytes leftover after parsing attributes in process `syz.2.661'. [ 158.399301][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 158.437728][ T7830] netlink: 'syz.0.646': attribute type 4 has an invalid length. [ 158.667594][ T7862] syz.4.656 (7862) used greatest stack depth: 17144 bytes left [ 158.942572][ T7883] netlink: 'syz.4.664': attribute type 11 has an invalid length. [ 158.984200][ T7883] netlink: 224 bytes leftover after parsing attributes in process `syz.4.664'. [ 159.100604][ T7891] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 159.117205][ T7887] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 159.130172][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 159.188196][ T7900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.670'. [ 159.201551][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 159.264252][ T7883] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:b0ec:21ff:fe52:718c error=-28 [ 159.283661][ T7897] lo: left promiscuous mode [ 159.299594][ T7897] lo: left allmulticast mode [ 159.456783][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.465299][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.787639][ T7897] batadv_slave_0: left promiscuous mode [ 159.819192][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.966381][ T7897] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.997134][ T7897] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.012310][ T7897] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.029833][ T7897] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.111005][ T7919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.295284][ T7937] FAULT_INJECTION: forcing a failure. [ 160.295284][ T7937] name failslab, interval 1, probability 0, space 0, times 0 [ 160.341992][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.3.681 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 160.342024][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.342037][ T7937] Call Trace: [ 160.342046][ T7937] [ 160.342056][ T7937] dump_stack_lvl+0x189/0x250 [ 160.342096][ T7937] ? __pfx____ratelimit+0x10/0x10 [ 160.342123][ T7937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.342157][ T7937] ? __pfx__printk+0x10/0x10 [ 160.342188][ T7937] ? __pfx___might_resched+0x10/0x10 [ 160.342225][ T7937] should_fail_ex+0x414/0x560 [ 160.342259][ T7937] should_failslab+0xa8/0x100 [ 160.342292][ T7937] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 160.342323][ T7937] ? __nla_parse+0x40/0x60 [ 160.342350][ T7937] ? __alloc_skb+0x112/0x2d0 [ 160.342386][ T7937] __alloc_skb+0x112/0x2d0 [ 160.342422][ T7937] rtnl_fdb_get+0x918/0xc70 [ 160.342465][ T7937] ? __pfx_rtnl_fdb_get+0x10/0x10 [ 160.342529][ T7937] ? __pfx_rtnl_fdb_get+0x10/0x10 [ 160.342559][ T7937] rtnetlink_rcv_msg+0x779/0xb70 [ 160.342593][ T7937] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 160.342636][ T7937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.342684][ T7937] netlink_rcv_skb+0x205/0x470 [ 160.342727][ T7937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.342756][ T7937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.342799][ T7937] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.342827][ T7937] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.342862][ T7937] netlink_unicast+0x758/0x8d0 [ 160.342900][ T7937] netlink_sendmsg+0x805/0xb30 [ 160.342927][ T7937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.342958][ T7937] ? aa_sock_msg_perm+0x94/0x160 [ 160.342984][ T7937] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.343006][ T7937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.343024][ T7937] __sock_sendmsg+0x219/0x270 [ 160.343052][ T7937] ____sys_sendmsg+0x505/0x830 [ 160.343077][ T7937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.343105][ T7937] ? import_iovec+0x74/0xa0 [ 160.343127][ T7937] ___sys_sendmsg+0x21f/0x2a0 [ 160.343149][ T7937] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.343206][ T7937] ? __fget_files+0x2a/0x420 [ 160.343234][ T7937] ? __fget_files+0x3a0/0x420 [ 160.343274][ T7937] __x64_sys_sendmsg+0x19b/0x260 [ 160.343296][ T7937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.343326][ T7937] ? __pfx_ksys_write+0x10/0x10 [ 160.343348][ T7937] ? rcu_is_watching+0x15/0xb0 [ 160.343381][ T7937] ? do_syscall_64+0xbe/0x3b0 [ 160.343410][ T7937] do_syscall_64+0xfa/0x3b0 [ 160.343433][ T7937] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.343455][ T7937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.343473][ T7937] ? clear_bhb_loop+0x60/0xb0 [ 160.343497][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.343515][ T7937] RIP: 0033:0x7fbc1e18e969 [ 160.343532][ T7937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.343549][ T7937] RSP: 002b:00007fbc1ef4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.343569][ T7937] RAX: ffffffffffffffda RBX: 00007fbc1e3b5fa0 RCX: 00007fbc1e18e969 [ 160.343583][ T7937] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000004 [ 160.343596][ T7937] RBP: 00007fbc1ef4b090 R08: 0000000000000000 R09: 0000000000000000 [ 160.343607][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.343618][ T7937] R13: 0000000000000000 R14: 00007fbc1e3b5fa0 R15: 00007ffebacc61d8 [ 160.343648][ T7937] [ 160.559810][ T7883] infiniband syz!: set active [ 160.688536][ T7883] infiniband syz!: added team_slave_0 [ 160.698652][ T7883] syz!: rxe_create_cq: returned err = -12 [ 160.705872][ T7883] infiniband syz!: Couldn't create ib_mad CQ [ 160.712748][ T7883] infiniband syz!: Couldn't open port 1 [ 160.758299][ T7883] RDS/IB: syz!: added [ 160.763016][ T7883] smc: adding ib device syz! with port count 1 [ 160.770002][ T7883] smc: ib device syz! port 1 has pnetid [ 161.023167][ T7956] netlink: 'syz.0.689': attribute type 2 has an invalid length. [ 161.030931][ T7956] netlink: 'syz.0.689': attribute type 8 has an invalid length. [ 161.238472][ T7966] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.247903][ T7966] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.247974][ T7967] netlink: 'syz.1.694': attribute type 9 has an invalid length. [ 161.256679][ T7966] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.273039][ T7966] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.289123][ T7964] tipc: Started in network mode [ 161.294323][ T7964] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 161.301759][ T7964] tipc: Enabled bearer , priority 0 [ 161.783337][ T7991] netlink: 'syz.3.700': attribute type 29 has an invalid length. [ 161.791999][ T7991] netlink: 'syz.3.700': attribute type 29 has an invalid length. [ 162.052964][ T8002] FAULT_INJECTION: forcing a failure. [ 162.052964][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 162.073831][ T8004] FAULT_INJECTION: forcing a failure. [ 162.073831][ T8004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.082594][ T8002] CPU: 0 UID: 0 PID: 8002 Comm: syz.2.704 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 162.082625][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.082638][ T8002] Call Trace: [ 162.082648][ T8002] [ 162.082658][ T8002] dump_stack_lvl+0x189/0x250 [ 162.082701][ T8002] ? __pfx____ratelimit+0x10/0x10 [ 162.082730][ T8002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.082765][ T8002] ? __pfx__printk+0x10/0x10 [ 162.082797][ T8002] ? __pfx___might_resched+0x10/0x10 [ 162.082830][ T8002] ? fs_reclaim_acquire+0x7d/0x100 [ 162.082859][ T8002] should_fail_ex+0x414/0x560 [ 162.082907][ T8002] should_failslab+0xa8/0x100 [ 162.082943][ T8002] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 162.082974][ T8002] ? __pfx_nf_tables_abort+0x10/0x10 [ 162.082995][ T8002] ? __alloc_skb+0x112/0x2d0 [ 162.083040][ T8002] __alloc_skb+0x112/0x2d0 [ 162.083078][ T8002] netlink_ack+0x146/0xa50 [ 162.083116][ T8002] ? __kasan_kmalloc+0x93/0xb0 [ 162.083157][ T8002] nfnetlink_rcv+0x2290/0x2520 [ 162.083221][ T8002] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 162.083261][ T8002] ? __lock_acquire+0xab9/0xd20 [ 162.083344][ T8002] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.083377][ T8002] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.083422][ T8002] netlink_unicast+0x758/0x8d0 [ 162.083465][ T8002] netlink_sendmsg+0x805/0xb30 [ 162.083496][ T8002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.083521][ T8002] ? aa_sock_msg_perm+0x94/0x160 [ 162.083551][ T8002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.083577][ T8002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.083598][ T8002] __sock_sendmsg+0x219/0x270 [ 162.083636][ T8002] ____sys_sendmsg+0x505/0x830 [ 162.083664][ T8002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.083698][ T8002] ? import_iovec+0x74/0xa0 [ 162.083725][ T8002] ___sys_sendmsg+0x21f/0x2a0 [ 162.083751][ T8002] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.083814][ T8002] ? __fget_files+0x2a/0x420 [ 162.083846][ T8002] ? __fget_files+0x3a0/0x420 [ 162.083890][ T8002] __x64_sys_sendmsg+0x19b/0x260 [ 162.083934][ T8002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.083968][ T8002] ? __pfx_ksys_write+0x10/0x10 [ 162.083995][ T8002] ? rcu_is_watching+0x15/0xb0 [ 162.084041][ T8002] ? do_syscall_64+0xbe/0x3b0 [ 162.084075][ T8002] do_syscall_64+0xfa/0x3b0 [ 162.084101][ T8002] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.084128][ T8002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.084151][ T8002] ? clear_bhb_loop+0x60/0xb0 [ 162.084178][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.084200][ T8002] RIP: 0033:0x7fd5dcf8e969 [ 162.084221][ T8002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.084240][ T8002] RSP: 002b:00007fd5dded5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.084264][ T8002] RAX: ffffffffffffffda RBX: 00007fd5dd1b5fa0 RCX: 00007fd5dcf8e969 [ 162.084281][ T8002] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 162.084295][ T8002] RBP: 00007fd5dded5090 R08: 0000000000000000 R09: 0000000000000000 [ 162.084309][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.084322][ T8002] R13: 0000000000000000 R14: 00007fd5dd1b5fa0 R15: 00007fff9e1cd7c8 [ 162.084357][ T8002] [ 162.410531][ T7163] tipc: Node number set to 11578026 [ 162.417538][ T8004] CPU: 1 UID: 0 PID: 8004 Comm: syz.3.705 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 162.417564][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.417577][ T8004] Call Trace: [ 162.417585][ T8004] [ 162.417606][ T8004] dump_stack_lvl+0x189/0x250 [ 162.417643][ T8004] ? __pfx____ratelimit+0x10/0x10 [ 162.417668][ T8004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.417700][ T8004] ? __pfx__printk+0x10/0x10 [ 162.417743][ T8004] should_fail_ex+0x414/0x560 [ 162.417776][ T8004] _copy_from_user+0x2d/0xb0 [ 162.417798][ T8004] bpf_test_init+0xf8/0x170 [ 162.417833][ T8004] bpf_prog_test_run_xdp+0x37c/0x1000 [ 162.417882][ T8004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 162.417938][ T8004] ? __fget_files+0x2a/0x420 [ 162.417976][ T8004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 162.418011][ T8004] bpf_prog_test_run+0x2c4/0x340 [ 162.418044][ T8004] __sys_bpf+0x4a4/0x860 [ 162.418073][ T8004] ? __pfx___sys_bpf+0x10/0x10 [ 162.418114][ T8004] ? ksys_write+0x22a/0x250 [ 162.418146][ T8004] ? __pfx_ksys_write+0x10/0x10 [ 162.418170][ T8004] ? rcu_is_watching+0x15/0xb0 [ 162.418209][ T8004] __x64_sys_bpf+0x7c/0x90 [ 162.418234][ T8004] do_syscall_64+0xfa/0x3b0 [ 162.418259][ T8004] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.418284][ T8004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.418305][ T8004] ? clear_bhb_loop+0x60/0xb0 [ 162.418331][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.418352][ T8004] RIP: 0033:0x7fbc1e18e969 [ 162.418370][ T8004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.418388][ T8004] RSP: 002b:00007fbc1ef4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.418410][ T8004] RAX: ffffffffffffffda RBX: 00007fbc1e3b5fa0 RCX: 00007fbc1e18e969 [ 162.418425][ T8004] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 162.418438][ T8004] RBP: 00007fbc1ef4b090 R08: 0000000000000000 R09: 0000000000000000 [ 162.418451][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.418463][ T8004] R13: 0000000000000000 R14: 00007fbc1e3b5fa0 R15: 00007ffebacc61d8 [ 162.418497][ T8004] [ 162.745281][ T8006] FAULT_INJECTION: forcing a failure. [ 162.745281][ T8006] name failslab, interval 1, probability 0, space 0, times 0 [ 162.782226][ T8006] CPU: 1 UID: 0 PID: 8006 Comm: syz.0.706 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 162.782256][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.782269][ T8006] Call Trace: [ 162.782277][ T8006] [ 162.782286][ T8006] dump_stack_lvl+0x189/0x250 [ 162.782324][ T8006] ? __pfx____ratelimit+0x10/0x10 [ 162.782350][ T8006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.782383][ T8006] ? __pfx__printk+0x10/0x10 [ 162.782406][ T8006] ? __lock_acquire+0xab9/0xd20 [ 162.782448][ T8006] should_fail_ex+0x414/0x560 [ 162.782481][ T8006] should_failslab+0xa8/0x100 [ 162.782516][ T8006] __kmalloc_cache_noprof+0x70/0x3d0 [ 162.782546][ T8006] ? __tipc_nl_bearer_enable+0xab3/0x13f0 [ 162.782581][ T8006] __tipc_nl_bearer_enable+0xab3/0x13f0 [ 162.782610][ T8006] ? __pfx___mutex_trylock_common+0x10/0x10 [ 162.782652][ T8006] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 162.782679][ T8006] ? trace_contention_end+0x39/0x120 [ 162.782734][ T8006] ? __asan_memcpy+0x40/0x70 [ 162.782757][ T8006] ? nla_put+0xd0/0x150 [ 162.782788][ T8006] ? tipc_nl_compat_bearer_enable+0x427/0x5d0 [ 162.782816][ T8006] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 162.782840][ T8006] ? __nla_parse+0x40/0x60 [ 162.782873][ T8006] tipc_nl_compat_doit+0x3b9/0x5f0 [ 162.782893][ T8006] ? __pfx_aa_get_newest_label+0x10/0x10 [ 162.782920][ T8006] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 162.782959][ T8006] ? bpf_lsm_capable+0x9/0x20 [ 162.782986][ T8006] ? security_capable+0x7e/0x2e0 [ 162.783018][ T8006] tipc_nl_compat_recv+0x83c/0xbe0 [ 162.783040][ T8006] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 162.783061][ T8006] ? __mutex_trylock_common+0x153/0x260 [ 162.783093][ T8006] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 162.783117][ T8006] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 162.783136][ T8006] ? __pfx___mutex_trylock_common+0x10/0x10 [ 162.783163][ T8006] ? __local_bh_enable_ip+0x12d/0x1c0 [ 162.783195][ T8006] ? rcu_is_watching+0x15/0xb0 [ 162.783233][ T8006] genl_family_rcv_msg_doit+0x212/0x300 [ 162.783265][ T8006] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 162.783314][ T8006] genl_rcv_msg+0x60e/0x790 [ 162.783344][ T8006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.783363][ T8006] ? ref_tracker_free+0x63a/0x7d0 [ 162.783388][ T8006] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 162.783408][ T8006] ? __pfx_ref_tracker_free+0x10/0x10 [ 162.783446][ T8006] netlink_rcv_skb+0x205/0x470 [ 162.783475][ T8006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.783499][ T8006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.783547][ T8006] ? down_read+0x1ad/0x2e0 [ 162.783576][ T8006] genl_rcv+0x28/0x40 [ 162.783596][ T8006] netlink_unicast+0x758/0x8d0 [ 162.783634][ T8006] netlink_sendmsg+0x805/0xb30 [ 162.783662][ T8006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.783684][ T8006] ? aa_sock_msg_perm+0x94/0x160 [ 162.783709][ T8006] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.783731][ T8006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.783750][ T8006] __sock_sendmsg+0x219/0x270 [ 162.783778][ T8006] ____sys_sendmsg+0x505/0x830 [ 162.783804][ T8006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.783833][ T8006] ? import_iovec+0x74/0xa0 [ 162.783855][ T8006] ___sys_sendmsg+0x21f/0x2a0 [ 162.783876][ T8006] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.783937][ T8006] ? __fget_files+0x2a/0x420 [ 162.783980][ T8006] ? __fget_files+0x3a0/0x420 [ 162.784020][ T8006] __x64_sys_sendmsg+0x19b/0x260 [ 162.784043][ T8006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.784070][ T8006] ? __pfx_ksys_write+0x10/0x10 [ 162.784092][ T8006] ? rcu_is_watching+0x15/0xb0 [ 162.784125][ T8006] ? do_syscall_64+0xbe/0x3b0 [ 162.784154][ T8006] do_syscall_64+0xfa/0x3b0 [ 162.784176][ T8006] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.784198][ T8006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.784217][ T8006] ? clear_bhb_loop+0x60/0xb0 [ 162.784240][ T8006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.784258][ T8006] RIP: 0033:0x7f13a118e969 [ 162.784275][ T8006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.784290][ T8006] RSP: 002b:00007f13a1fc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.784310][ T8006] RAX: ffffffffffffffda RBX: 00007f13a13b5fa0 RCX: 00007f13a118e969 [ 162.784324][ T8006] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 162.784335][ T8006] RBP: 00007f13a1fc0090 R08: 0000000000000000 R09: 0000000000000000 [ 162.784347][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.784358][ T8006] R13: 0000000000000000 R14: 00007f13a13b5fa0 R15: 00007fff1b700708 [ 162.784389][ T8006] [ 163.275503][ T8012] __nla_validate_parse: 12 callbacks suppressed [ 163.275520][ T8012] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.709'. [ 163.293801][ T8012] netlink: zone id is out of range [ 163.299081][ T8012] netlink: zone id is out of range [ 163.304463][ T8012] netlink: zone id is out of range [ 163.309600][ T8012] netlink: zone id is out of range [ 163.314769][ T8012] netlink: zone id is out of range [ 163.319903][ T8012] netlink: zone id is out of range [ 163.325121][ T8012] netlink: zone id is out of range [ 163.330268][ T8012] netlink: zone id is out of range [ 163.338757][ T8012] netlink: zone id is out of range [ 163.377890][ T8015] netlink: 2284 bytes leftover after parsing attributes in process `syz.0.710'. [ 163.569828][ T7922] IPVS: starting estimator thread 0... [ 163.605615][ T8022] SET target dimension over the limit! [ 163.674580][ T8024] IPVS: using max 27 ests per chain, 64800 per kthread [ 163.970579][ T8037] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 163.980429][ T8037] netlink: 'syz.2.716': attribute type 3 has an invalid length. [ 163.997627][ T8037] netlink: 224 bytes leftover after parsing attributes in process `syz.2.716'. [ 164.061457][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 164.156808][ T8041] bond3: entered promiscuous mode [ 164.191034][ T8041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.308652][ T8054] netlink: 2284 bytes leftover after parsing attributes in process `syz.0.723'. [ 164.354066][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.722'. [ 164.388106][ T8045] bond4: entered promiscuous mode [ 164.422210][ T8045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.443717][ T8059] netlink: 240 bytes leftover after parsing attributes in process `syz.0.725'. [ 165.108857][ T8090] netlink: 2284 bytes leftover after parsing attributes in process `syz.2.735'. [ 165.131190][ T8083] Cannot find add_set index 0 as target [ 165.320407][ T8102] FAULT_INJECTION: forcing a failure. [ 165.320407][ T8102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.327491][ T8101] tipc: Started in network mode [ 165.357921][ T8101] tipc: Node identity ac14140c, cluster identity 4711 [ 165.372743][ T8101] tipc: New replicast peer: 255.255.255.255 [ 165.373446][ T8102] CPU: 1 UID: 0 PID: 8102 Comm: syz.1.740 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 165.373474][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.373487][ T8102] Call Trace: [ 165.373496][ T8102] [ 165.373505][ T8102] dump_stack_lvl+0x189/0x250 [ 165.373547][ T8102] ? __pfx____ratelimit+0x10/0x10 [ 165.373574][ T8102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.373609][ T8102] ? __pfx__printk+0x10/0x10 [ 165.373648][ T8102] should_fail_ex+0x414/0x560 [ 165.373682][ T8102] _copy_from_user+0x2d/0xb0 [ 165.373715][ T8102] copy_from_sockptr_offset+0x66/0xa0 [ 165.373754][ T8102] do_ipt_set_ctl+0x8ae/0xcd0 [ 165.373796][ T8102] ? rcu_is_watching+0x15/0xb0 [ 165.373829][ T8102] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 165.373884][ T8102] ? __pfx___mutex_lock+0x10/0x10 [ 165.373920][ T8102] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.373946][ T8102] ? smc_setsockopt+0x181/0xab0 [ 165.373976][ T8102] ? __pfx___mutex_lock+0x10/0x10 [ 165.374002][ T8102] ? rcu_read_lock_any_held+0xb3/0x120 [ 165.374034][ T8102] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 165.374072][ T8102] ? vfs_write+0x8d8/0xa90 [ 165.374104][ T8102] nf_setsockopt+0x26f/0x290 [ 165.374129][ T8102] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 165.374163][ T8102] smc_setsockopt+0x232/0xab0 [ 165.374196][ T8102] ? __pfx_smc_setsockopt+0x10/0x10 [ 165.374229][ T8102] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 165.374256][ T8102] ? __pfx_smc_setsockopt+0x10/0x10 [ 165.374286][ T8102] do_sock_setsockopt+0x25a/0x3e0 [ 165.374325][ T8102] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 165.374365][ T8102] ? __fget_files+0x2a/0x420 [ 165.374409][ T8102] __x64_sys_setsockopt+0x18b/0x220 [ 165.374450][ T8102] do_syscall_64+0xfa/0x3b0 [ 165.374493][ T8102] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.374517][ T8102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.374538][ T8102] ? clear_bhb_loop+0x60/0xb0 [ 165.374563][ T8102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.374583][ T8102] RIP: 0033:0x7fbc1258e969 [ 165.374601][ T8102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.374618][ T8102] RSP: 002b:00007fbc1337d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.374640][ T8102] RAX: ffffffffffffffda RBX: 00007fbc127b5fa0 RCX: 00007fbc1258e969 [ 165.374655][ T8102] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 165.374667][ T8102] RBP: 00007fbc1337d090 R08: 00000000000003f0 R09: 0000000000000000 [ 165.374680][ T8102] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.374699][ T8102] R13: 0000000000000000 R14: 00007fbc127b5fa0 R15: 00007ffd2ffcc3e8 [ 165.374731][ T8102] [ 165.690907][ T8101] tipc: Enabled bearer , priority 10 [ 166.054127][ T30] audit: type=1107 audit(1748507079.705:4): pid=8134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 166.059372][ T8138] netlink: 2284 bytes leftover after parsing attributes in process `syz.2.751'. [ 166.281052][ T8145] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 166.291998][ T8146] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 166.303493][ T8145] netlink: 224 bytes leftover after parsing attributes in process `syz.2.755'. [ 166.447794][ T8155] FAULT_INJECTION: forcing a failure. [ 166.447794][ T8155] name failslab, interval 1, probability 0, space 0, times 0 [ 166.460737][ T8155] CPU: 1 UID: 0 PID: 8155 Comm: syz.2.757 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 166.460762][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.460773][ T8155] Call Trace: [ 166.460781][ T8155] [ 166.460788][ T8155] dump_stack_lvl+0x189/0x250 [ 166.460823][ T8155] ? __pfx____ratelimit+0x10/0x10 [ 166.460847][ T8155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.460876][ T8155] ? __pfx__printk+0x10/0x10 [ 166.460902][ T8155] ? __pfx___might_resched+0x10/0x10 [ 166.460930][ T8155] ? fs_reclaim_acquire+0x7d/0x100 [ 166.460954][ T8155] should_fail_ex+0x414/0x560 [ 166.460983][ T8155] should_failslab+0xa8/0x100 [ 166.461014][ T8155] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 166.461042][ T8155] ? __alloc_skb+0x112/0x2d0 [ 166.461091][ T8155] __alloc_skb+0x112/0x2d0 [ 166.461126][ T8155] netlink_ack+0x146/0xa50 [ 166.461154][ T8155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.461202][ T8155] netlink_rcv_skb+0x28c/0x470 [ 166.461234][ T8155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.461275][ T8155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.461317][ T8155] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.461346][ T8155] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.461381][ T8155] netlink_unicast+0x758/0x8d0 [ 166.461418][ T8155] netlink_sendmsg+0x805/0xb30 [ 166.461446][ T8155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.461467][ T8155] ? aa_sock_msg_perm+0x94/0x160 [ 166.461513][ T8155] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.461538][ T8155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.461559][ T8155] __sock_sendmsg+0x219/0x270 [ 166.461589][ T8155] ____sys_sendmsg+0x52d/0x830 [ 166.461625][ T8155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.461667][ T8155] ? import_iovec+0x74/0xa0 [ 166.461693][ T8155] ___sys_sendmsg+0x21f/0x2a0 [ 166.461718][ T8155] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.461779][ T8155] ? __fget_files+0x2a/0x420 [ 166.461811][ T8155] ? __fget_files+0x3a0/0x420 [ 166.461854][ T8155] __sys_sendmmsg+0x227/0x430 [ 166.461882][ T8155] ? __pfx___sys_sendmmsg+0x10/0x10 [ 166.461902][ T8155] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 166.461959][ T8155] ? ksys_write+0x22a/0x250 [ 166.461990][ T8155] ? __pfx_ksys_write+0x10/0x10 [ 166.462015][ T8155] ? rcu_is_watching+0x15/0xb0 [ 166.462054][ T8155] __x64_sys_sendmmsg+0xa0/0xc0 [ 166.462078][ T8155] do_syscall_64+0xfa/0x3b0 [ 166.462104][ T8155] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.462129][ T8155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.462150][ T8155] ? clear_bhb_loop+0x60/0xb0 [ 166.462177][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.462198][ T8155] RIP: 0033:0x7fd5dcf8e969 [ 166.462217][ T8155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.462236][ T8155] RSP: 002b:00007fd5dded5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 166.462258][ T8155] RAX: ffffffffffffffda RBX: 00007fd5dd1b5fa0 RCX: 00007fd5dcf8e969 [ 166.462273][ T8155] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 166.462288][ T8155] RBP: 00007fd5dded5090 R08: 0000000000000000 R09: 0000000000000000 [ 166.462302][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.462314][ T8155] R13: 0000000000000000 R14: 00007fd5dd1b5fa0 R15: 00007fff9e1cd7c8 [ 166.462347][ T8155] [ 166.804946][ T7922] tipc: Node number set to 2886997004 [ 167.025426][ T8169] batadv_slave_1: entered promiscuous mode [ 170.119892][ T8233] FAULT_INJECTION: forcing a failure. [ 170.119892][ T8233] name failslab, interval 1, probability 0, space 0, times 0 [ 170.136837][ T8233] CPU: 1 UID: 0 PID: 8233 Comm: syz.4.785 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 170.136869][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.136882][ T8233] Call Trace: [ 170.136891][ T8233] [ 170.136901][ T8233] dump_stack_lvl+0x189/0x250 [ 170.136947][ T8233] ? __pfx____ratelimit+0x10/0x10 [ 170.136974][ T8233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.137008][ T8233] ? __pfx__printk+0x10/0x10 [ 170.137038][ T8233] ? ref_tracker_alloc+0x318/0x460 [ 170.137071][ T8233] should_fail_ex+0x414/0x560 [ 170.137105][ T8233] should_failslab+0xa8/0x100 [ 170.137139][ T8233] kmem_cache_alloc_noprof+0x73/0x3c0 [ 170.137169][ T8233] ? skb_clone+0x212/0x3a0 [ 170.137199][ T8233] skb_clone+0x212/0x3a0 [ 170.137226][ T8233] __netlink_deliver_tap+0x404/0x850 [ 170.137274][ T8233] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.137309][ T8233] netlink_deliver_tap+0x19c/0x1b0 [ 170.137344][ T8233] netlink_unicast+0x72f/0x8d0 [ 170.137388][ T8233] netlink_sendmsg+0x805/0xb30 [ 170.137419][ T8233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.137443][ T8233] ? aa_sock_msg_perm+0x94/0x160 [ 170.137472][ T8233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.137498][ T8233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.137519][ T8233] __sock_sendmsg+0x219/0x270 [ 170.137550][ T8233] ____sys_sendmsg+0x505/0x830 [ 170.137579][ T8233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.137611][ T8233] ? import_iovec+0x74/0xa0 [ 170.137637][ T8233] ___sys_sendmsg+0x21f/0x2a0 [ 170.137661][ T8233] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.137724][ T8233] ? __fget_files+0x2a/0x420 [ 170.137757][ T8233] ? __fget_files+0x3a0/0x420 [ 170.137801][ T8233] __x64_sys_sendmsg+0x19b/0x260 [ 170.137827][ T8233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.137860][ T8233] ? __pfx_ksys_write+0x10/0x10 [ 170.137891][ T8233] ? rcu_is_watching+0x15/0xb0 [ 170.137934][ T8233] ? do_syscall_64+0xbe/0x3b0 [ 170.137967][ T8233] do_syscall_64+0xfa/0x3b0 [ 170.137992][ T8233] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.138017][ T8233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.138039][ T8233] ? clear_bhb_loop+0x60/0xb0 [ 170.138077][ T8233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.138097][ T8233] RIP: 0033:0x7f6ca138e969 [ 170.138115][ T8233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.138134][ T8233] RSP: 002b:00007f6ca2154038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.138156][ T8233] RAX: ffffffffffffffda RBX: 00007f6ca15b5fa0 RCX: 00007f6ca138e969 [ 170.138172][ T8233] RDX: 0000000020000824 RSI: 0000200000000580 RDI: 0000000000000003 [ 170.138186][ T8233] RBP: 00007f6ca2154090 R08: 0000000000000000 R09: 0000000000000000 [ 170.138199][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.138211][ T8233] R13: 0000000000000000 R14: 00007f6ca15b5fa0 R15: 00007ffc5c3c8d28 [ 170.138244][ T8233] [ 171.735859][ T8241] syzkaller0: entered promiscuous mode [ 171.771302][ T8252] __nla_validate_parse: 6 callbacks suppressed [ 171.771320][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.787'. [ 171.842128][ T8241] syzkaller0: entered allmulticast mode [ 171.974642][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 172.383807][ T8267] netlink: 428 bytes leftover after parsing attributes in process `syz.1.794'. [ 173.213723][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.800'. [ 182.842276][ T5161] sched: DL replenish lagged too much [ 194.529332][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.551085][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.933437][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 211.954218][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 212.128022][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 212.141977][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 257.303775][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.432318][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.844935][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.867302][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.835676][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.858153][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 412.209317][ T8303] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 413.511104][ T31] INFO: task kworker/u8:3:49 blocked for more than 143 seconds. [ 413.527878][ T31] Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 [ 413.628676][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.949437][ T31] task:kworker/u8:3 state:D stack:23352 pid:49 tgid:49 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 414.044162][ T31] Workqueue: events_unbound linkwatch_event [ 414.050133][ T31] Call Trace: [ 414.053431][ T31] [ 414.715393][ T8303] CPU: 1 UID: 0 PID: 8303 Comm: syz-executor Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 414.715425][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.715438][ T8303] Call Trace: [ 414.715447][ T8303] [ 414.715456][ T8303] dump_stack_lvl+0x189/0x250 [ 414.715498][ T8303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.715531][ T8303] ? __pfx__printk+0x10/0x10 [ 414.715554][ T8303] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 414.715588][ T8303] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 414.715634][ T8303] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 414.715668][ T8303] warn_alloc+0x214/0x310 [ 414.715695][ T8303] ? __pfx_warn_alloc+0x10/0x10 [ 414.715724][ T8303] ? __get_vm_area_node+0x28f/0x300 [ 414.715764][ T8303] ? kcov_ioctl+0x55/0x640 [ 414.715789][ T8303] __vmalloc_node_range_noprof+0x67e/0x1340 [ 414.715847][ T8303] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 414.715884][ T8303] ? __pfx_kcov_ioctl+0x10/0x10 [ 414.715906][ T8303] vmalloc_user_noprof+0xad/0xf0 [ 414.715923][ T8303] ? kcov_ioctl+0x55/0x640 [ 414.715951][ T8303] kcov_ioctl+0x55/0x640 [ 414.715974][ T8303] ? bpf_lsm_file_ioctl+0x9/0x20 [ 414.715999][ T8303] ? __pfx_kcov_ioctl+0x10/0x10 [ 414.716020][ T8303] __se_sys_ioctl+0xf9/0x170 [ 414.716045][ T8303] do_syscall_64+0xfa/0x3b0 [ 414.716069][ T8303] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.716090][ T8303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.716108][ T8303] ? clear_bhb_loop+0x60/0xb0 [ 414.716131][ T8303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.716154][ T8303] RIP: 0033:0x7f34c858e56b [ 414.716171][ T8303] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 414.716187][ T8303] RSP: 002b:00007ffd3c18f2b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.716208][ T8303] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f34c858e56b [ 414.716221][ T8303] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000de [ 414.716233][ T8303] RBP: 00007f34c87b6578 R08: 00000000000000da R09: 0000000000000000 [ 414.716245][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.716256][ T8303] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 414.716283][ T8303] [ 414.716294][ T8303] Mem-Info: [ 414.735152][ T31] __schedule+0x16f5/0x4d00 [ 414.735205][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.735240][ T31] ? schedule+0x165/0x360 [ 414.735270][ T31] ? __pfx___schedule+0x10/0x10 [ 414.735313][ T31] ? schedule+0x91/0x360 [ 414.735342][ T31] schedule+0x165/0x360 [ 414.735370][ T31] schedule_preempt_disabled+0x13/0x30 [ 414.735413][ T31] __mutex_lock+0x724/0xe80 [ 414.735444][ T31] ? __mutex_lock+0x51b/0xe80 [ 414.735491][ T31] ? linkwatch_event+0xe/0x60 [ 414.735519][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 414.735561][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.735585][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 414.735616][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 414.735650][ T31] linkwatch_event+0xe/0x60 [ 414.735672][ T31] process_scheduled_works+0xae1/0x17b0 [ 414.735746][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 414.735797][ T31] worker_thread+0x8a0/0xda0 [ 414.735845][ T31] ? __kthread_parkme+0x7b/0x200 [ 414.735891][ T31] kthread+0x70e/0x8a0 [ 414.735919][ T31] ? __pfx_worker_thread+0x10/0x10 [ 414.735968][ T31] ? __pfx_kthread+0x10/0x10 [ 414.735995][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.736020][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.736046][ T31] ? __pfx_kthread+0x10/0x10 [ 414.736073][ T31] ret_from_fork+0x3fc/0x770 [ 414.736107][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 414.736146][ T31] ? __switch_to_asm+0x39/0x70 [ 414.736170][ T31] ? __switch_to_asm+0x33/0x70 [ 414.736192][ T31] ? __pfx_kthread+0x10/0x10 [ 414.736219][ T31] ret_from_fork_asm+0x1a/0x30 [ 414.736263][ T31] [ 414.736396][ T31] INFO: task kworker/u8:8:5902 blocked for more than 145 seconds. [ 414.736415][ T31] Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 [ 414.736431][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.736443][ T31] task:kworker/u8:8 state:D stack:19496 pid:5902 tgid:5902 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 414.736519][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 414.736545][ T31] Call Trace: [ 414.736554][ T31] [ 414.736568][ T31] __schedule+0x16f5/0x4d00 [ 414.736608][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.736640][ T31] ? schedule+0x165/0x360 [ 414.736670][ T31] ? __pfx___schedule+0x10/0x10 [ 414.736722][ T31] ? schedule+0x91/0x360 [ 414.736770][ T31] schedule+0x165/0x360 [ 414.736811][ T31] schedule_preempt_disabled+0x13/0x30 [ 414.736836][ T31] __mutex_lock+0x724/0xe80 [ 414.736863][ T31] ? look_up_lock_class+0x74/0x170 [ 414.736890][ T31] ? __mutex_lock+0x51b/0xe80 [ 414.736925][ T31] ? addrconf_verify_work+0x19/0x30 [ 414.736951][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 414.736988][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 414.737027][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.737057][ T31] addrconf_verify_work+0x19/0x30 [ 414.737078][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 414.737108][ T31] process_scheduled_works+0xae1/0x17b0 [ 414.737181][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 414.737230][ T31] worker_thread+0x8a0/0xda0 [ 414.737264][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 414.737297][ T31] ? __kthread_parkme+0x7b/0x200 [ 414.737339][ T31] kthread+0x70e/0x8a0 [ 414.737366][ T31] ? __pfx_worker_thread+0x10/0x10 [ 414.737396][ T31] ? __pfx_kthread+0x10/0x10 [ 414.737421][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.737444][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.737477][ T31] ? __pfx_kthread+0x10/0x10 [ 414.737500][ T31] ret_from_fork+0x3fc/0x770 [ 414.737529][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 414.737561][ T31] ? __switch_to_asm+0x39/0x70 [ 414.737581][ T31] ? __switch_to_asm+0x33/0x70 [ 414.737600][ T31] ? __pfx_kthread+0x10/0x10 [ 414.737622][ T31] ret_from_fork_asm+0x1a/0x30 [ 414.737659][ T31] [ 414.737701][ T31] [ 414.737701][ T31] Showing all locks held in the system: [ 414.737712][ T31] 2 locks held by kworker/u8:0/12: [ 414.737727][ T31] 1 lock held by khungtaskd/31: [ 414.737738][ T31] #0: ffffffff8e13ccc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 414.737794][ T31] 3 locks held by kworker/u8:3/49: [ 414.737805][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 414.737865][ T31] #1: ffffc90000ba7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 414.737925][ T31] #2: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 414.737977][ T31] 3 locks held by kworker/u8:4/59: [ 414.738005][ T31] 1 lock held by klogd/5188: [ 414.738016][ T31] 2 locks held by dhcpcd/5493: [ 414.738028][ T31] 4 locks held by dhcpcd/5494: [ 414.738040][ T31] 2 locks held by getty/5588: [ 414.738051][ T31] #0: ffff888034cea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 414.738113][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 414.738170][ T31] 1 lock held by syz-executor/5826: [ 414.738181][ T31] #0: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 414.738241][ T31] 1 lock held by syz-executor/5829: [ 414.738253][ T31] 3 locks held by syz-executor/5834: [ 414.738265][ T31] #0: ffff888033318d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 414.738320][ T31] #1: [ 416.299637][ T8303] active_anon:4131 inactive_anon:0 isolated_anon:0 [ 416.299637][ T8303] active_file:1662 inactive_file:39919 isolated_file:0 [ 416.299637][ T8303] unevictable:768 dirty:9 writeback:0 [ 416.299637][ T8303] slab_reclaimable:9924 slab_unreclaimable:302493 [ 416.299637][ T8303] mapped:12940 shmem:1367 pagetables:570 [ 416.299637][ T8303] sec_pagetables:0 bounce:0 [ 416.299637][ T8303] kernel_misc_reclaimable:0 [ 416.299637][ T8303] free:1180385 free_pcp:162 free_cma:0 [ 417.224473][ T8303] Node 0 active_anon:16524kB inactive_anon:0kB active_file:6648kB inactive_file:159476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:51760kB dirty:32kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11568kB pagetables:2280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 422.673696][ T31] ffff888033318078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 422.691731][ T31] #2: ffffffff8e25cf30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 422.710452][ T8303] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 423.420076][ T31] 1 lock held by syz-executor/5837: [ 423.434112][ T31] #0: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 423.443146][ T31] 3 locks held by kworker/u8:8/5902: