last executing test programs: 2.612422646s ago: executing program 3 (id=1771): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x1, 0xbe5a, 0x7, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x40, 0xe8000000, 0x1a}}) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000180), 0x0, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x13}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x50}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4, 0x3ff, @private2, 0xff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000340)=0x8) listen(r0, 0x0) accept$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2}}], 0x1, 0x8080) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000280)="d14eab1c525236326eba9e0f25350bb1d9b6901de0c3f3d846c4f87bdb14528606651496429c892d766c63dc6c1d1cea4992e0ab1dfbce48894bd4a776865ec71c520f7f758722b70e72ba392a4f794660cd55922d2f2eeacd31d1723e13750a650c97c5318870884e095354dca4ae58628b576c6b87bcf84b1a5b95d6498d842cace3", 0x83}], 0x1) sendto$inet6(r0, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x1403, 0x200, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200000c5}, 0x24008090) 2.318843892s ago: executing program 3 (id=1777): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0xb8, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x88, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x7c, 0x6, [@m_simple={0x78, 0x1f, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x8, 0x4, 0xa}}, @TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xb8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}, 0x41}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.299512276s ago: executing program 0 (id=1779): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) unshare(0x20000400) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x80000001, 0x9, 0x1, 0x100, 0x268, 0x20]}, &(0x7f0000000140)=0x78) unshare(0x68040200) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x2c, 0x11, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x0, 0x7}}, [{0x8, 0xb, 0xc40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.208081504s ago: executing program 1 (id=1781): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e73608000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x884) r4 = getpid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, {{@in6=@mcast2, 0xfffffffc, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) close(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0xfffffffc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r8, 0x10, 0x10, 0x2, 0x4, {{0x6, 0x4, 0x3, 0xd, 0x18, 0x68, 0x0, 0xf, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@end]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020"], 0x80}}, 0x4814) socket$inet_udp(0x2, 0x2, 0x0) 2.125970201s ago: executing program 3 (id=1782): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e73608000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x884) r4 = getpid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, {{@in6=@mcast2, 0xfffffffc, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) close(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0xfffffffc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r8, 0x10, 0x10, 0x2, 0x4, {{0x6, 0x4, 0x3, 0xd, 0x18, 0x68, 0x0, 0xf, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@end]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020"], 0x80}}, 0x4814) socket$inet_udp(0x2, 0x2, 0x0) 2.125722822s ago: executing program 0 (id=1783): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.027987076s ago: executing program 0 (id=1785): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000340)='syz0\x00', 0x1ff) 1.881147282s ago: executing program 0 (id=1787): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x24000045) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="450a0000000000000ae7000000000c0000000000ffffffef4b407257184cd7f64d33a0d999762c034cdc23bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00 \x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bond_slave_0\x00', {0x2}, 0x5}) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)}, 0x100) connect$packet(r6, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r6, 0x1) ppoll(&(0x7f0000000200)=[{r2, 0x6010}], 0x1, &(0x7f00000005c0), &(0x7f0000000600)={[0x1ff]}, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000640)={0x0, 'veth0_vlan\x00', {0x4}, 0xfbf7}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x280c82, 0x0) write$tun(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x59) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="030000004f556d602be85943394beb959c446350037c3395a2efbf8e832d5955c9746bc7b4c262d60bdb40c48fcda7175d2ee2681a3cb5b2e2fc501f744f825a824cafa626ebf14f9a79de43e5d5ecd9a076dfcc3ad935cfbecaad53f59eadef53a8b47d61249be571d3988e04047dae8c9b83a2e1f272dc768ad6b502d13f16d0d2fc0fc37cd7a02d841208bcebcfa5f91ab311d4c81c5e8d9bc4ad579bfedd9524585320a4e67af6aef8f6e7f0c31f7fab39178663ae21684f47c0391d662f95b768cc49bc223972d5f98ac5e7372850734d848ed5b579c594ddce24ecdbabb34faf2041ba09e0dcca7eaabc903782c99555861fa7d10e", @ANYBLOB="f0b80b2563e6d4b46d7c15698b97a9201c56ddef366ab97a7754cf06fb97c061830895194784729a626f85cc4649075023a4c48a69fd3ee5a08dedb3d0abfaff2ade675f7efa567f7c6cfd8c812b7336806e6666ff62c775913c6bec3d39cab35f180d0a5dd8013451a2384a2cce3eecd2bba4b8ee07b6261b6e467d897375639c581b793d14d958096f2dd2bd906acb627b4bb614462cc9488fb8641c366930042dc2dac196d9f37207f32ec2210be4ca27535e91dbc272a934d60d38cbe2a96387d3e228147c6841a9f0e31fcf64e37f1f5265fd1aded63be63b4e97899fde11720ca8384a26e72365680d5b2255493f", @ANYBLOB="010000000000ffdbdf251800000008000300", @ANYRESHEX=r11, @ANYRES8=r4], 0x24}, 0x1, 0x0, 0x0, 0x24040001}, 0x20040814) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000203010200000000000000000e000007080003400000000c90ff84c601000000000800044000000010090002000000000101000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040044}, 0x8040) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a0000000000440007"], 0x90}}, 0x4c040) 1.634915746s ago: executing program 2 (id=1789): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.599828877s ago: executing program 2 (id=1790): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x4) 1.518054231s ago: executing program 2 (id=1791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), 0x0, 0x6040000}, 0x20) 1.354830419s ago: executing program 2 (id=1793): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x3a, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.276278769s ago: executing program 4 (id=1795): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.234478906s ago: executing program 1 (id=1796): socket(0x2a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) close(0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4703, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe3}, {}, {0x0, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x2, 0x8, 0xff, 0x94, 0x9, 0x3, 0x1000}}]}}]}, 0x44}}, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x0, 0x0, @loopback, 0x80}], 0x2c) 1.18993679s ago: executing program 3 (id=1797): vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544ebbb18ee617231e4bdb87424814565dfb6ebe0", 0x93}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe3}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac5809", 0x7f}], 0x4, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000540)=ANY=[], 0x8) 1.14619687s ago: executing program 1 (id=1798): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000340)='syz0\x00', 0x1ff) 1.126627982s ago: executing program 4 (id=1799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r1, &(0x7f00000002c0)=""/26, 0x1a, 0x142, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000200)) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x7844000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000300)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x8001, @mcast2, 0x25d}, @in={0x2, 0x4e24, @private=0xa010100}], 0x3c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r9) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, 0xffffffffffffffff, 0x20040000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)={0x48, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r9) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000400", @ANYRES32=r4, @ANYBLOB="00030000000000001400128009000100766c616e000000000400028008000a00", @ANYRES32=r5, @ANYBLOB="bc087f022a10007f09eb38bd91eb1099a60a03ff1a02f832d0a150a9d084bc77fb87ddb28e2869048e3709"], 0x3c}}, 0x0) 1.038995387s ago: executing program 3 (id=1800): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.01654751s ago: executing program 1 (id=1801): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x4) 969.116433ms ago: executing program 0 (id=1802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f00000003c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='&\x00'/12, @ANYRES32=r4, @ANYBLOB="cc"], 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000100003040001000000000000002625f75ccf000400", @ANYRES32=0x0, @ANYBLOB="00030000428000002800128009000100766c616e000000001800028006000100020000000c000200030000003400000008000500", @ANYRES32=r6, @ANYBLOB], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r4, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c000000100001040000000000000000000000005bf8ef87837afe3ab4a651739e87e88e28fed05b51972147fc423e7f83cbca6882bbb8c77e7d86c5039148bbc76037cfce76ad2a97dab1182cb6dceb2d1da8c794bffb2d61f75d9331cfaeb3a7ec4a21b0c8e1a1ab549f7f0970ae666556d6f38fceeb4a20eb32f37702cf28a32c7024a92182aa28bb375e6f3af9142a10fc4144c4cf04d5cc71846c2bfe3eab46481eadc5120316ab61d292ba66ffc7d161e2e5e368b88882", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b00010067656e65766500002c00028008000b400000000704000600050009000100000014000700fc0100"/68], 0x5c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}}, 0x0) epoll_pwait(r8, &(0x7f0000000180)=[{}], 0x1, 0x3, &(0x7f00000001c0)={[0x5]}, 0x8) 886.798097ms ago: executing program 3 (id=1803): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r1 = socket(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'bond0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20040051) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, 0x3, 0x9, 0xb, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_key={0x4, 0x8, 0xb8, 0x0, "fc59f6f825707419d1935a7bcc9c7934377e98f0786680"}, @sadb_address={0x5, 0x5, 0x3c, 0x20, 0x0, @in6={0xa, 0x4e23, 0x0, @private0, 0x10d89}}]}, 0x58}}, 0x4004891) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002600)=ANY=[], 0x1340}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c854) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendto(r7, &(0x7f00000002c0)="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", 0xfa, 0x0, &(0x7f00000001c0)=@l2={0x1f, 0x0, @none, 0xbd37, 0x1}, 0x80) 886.642641ms ago: executing program 4 (id=1804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, 0x0, 0x0, 0x604000000000000}, 0x20) 856.492613ms ago: executing program 1 (id=1805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="b70200000f000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000010000006a0a00fe00000000850000000d000000bf0000000000000095000000000000005ecefab8f2e85c6c1ca711fc206bb8ad6ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bd04000000000000009c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5f683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891184604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e101d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe151acc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394b9ba1a836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429ba63903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6d6fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f25005798ca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9958fad67ccaba76408da35c9f1534c8bd48bbdf9594e8b4ce73febaefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb3b379e221a5318849b6b0679b5d65ab855fc9f1d10022cc20603480ffb1e3392fad690ce56aaa717e56fd55aec3d9d6671f55d7bc33830a4095497586e8d15c2a32d3176d45b783cb27112a69c14134488b6dd302c3e92a7e659351b610ed5ba022f92d4bf26b0a5c10a3c8eb0fabdf0017995ea0c06b41fe6dda769729328d6ee80ab3b4aeeeee7926575d526431184b2034b5cdacc8eaab03cf45af6ec451f65705d8a4375d559e4c3ad80e942d237616d8f2fdd5afe4fdf21478228d9f6299bf67cf1e62fc11c285e18fb65eeb657bc7375401bb175f6d2625195ce8647945dbdfb7eacc06a24832d155059b0f0c36b9433eff190f4c4c160f0484d4d39f5f92e8bd49ad3df23b961fe7bf9e506c5098ca79deb7906257e4ce9035f3a6b29453ee41640ade8b5916f38d19ab6f2fd51a9fd9a2559411967460952acf5c549e5466ee2d8563397a5f028486220fae69611d9bc0f1a68d31ad1a4e387de687ab1537bd46703e4e5ae0f096f731916628bf743a49ea7b7d22c04d738ca439343aaab682d45dc91187e9ff08005358e1f3d864f36ee590fb0da9c958f15f9105c41add43a7c28874e58c31a7acb0467e0bd97f2ccd78615b5144267772381e7498bb98d9e8a3f98b505e5c9645e19d011dd86a1dc134fa4b21ff8ec2d054ae7e0044b4700cd54ce392c2ee515e86070f2df561c15f331a1babfa60504410fa56a848ba1f501c8eb0bd6856451d150cfaf95d6dc889be27e8915bb3670fc76bcbeb390f3cefb5429c84907a92c6eab2b15758194ece4b1461f622510bcff5c0f8354637856f94d71a0841180e78a3a837ae7847c479f5c9c54859cb85393f190042a5dc31197f2c463be8affe29869d71df330b3466fc79b3488b4a2a3e2aae9af6421cd0902347103f2384bf08e5230b37297b668be11b4428b9a8e8c259afa6c73dd87fcc165b2fea66a180bf048530a5849f849d37aca6874cb1d50defdb90b3da04a575db38825db87f6bb0013a5dabcc0e9783aaac0cbb5d6fc437f1e77bf69cae31a213ca2b90ece8cc70fa320c9ffd05618e7a6e6cf8ada"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0xf) 694.513599ms ago: executing program 4 (id=1806): r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x486, 0x1000, {}, {0x77359400}, {0x2, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "e05ad60a92c50497"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 418.595542ms ago: executing program 1 (id=1807): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e73608000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x884) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, {{@in6=@mcast2, 0xfffffffc, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) close(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0xfffffffc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r8, 0x10, 0x10, 0x2, 0x4, {{0x6, 0x4, 0x3, 0xd, 0x18, 0x68, 0x0, 0xf, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@end]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020"], 0x80}}, 0x4814) socket$inet_udp(0x2, 0x2, 0x0) 366.692747ms ago: executing program 2 (id=1808): socket(0x2a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) close(0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4703, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe3}, {}, {0x0, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x2, 0x8, 0xff, 0x94, 0x9, 0x3, 0x1000}}]}}]}, 0x44}}, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x0, 0x0, @loopback, 0x80}], 0x2c) 276.482718ms ago: executing program 4 (id=1809): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 112.993146ms ago: executing program 2 (id=1810): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000040)=0xfdf1) 450.423µs ago: executing program 0 (id=1811): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x6, [@struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x5, [{0xf, 0x3, 0x80000000}, {0x9, 0x5, 0x9}]}, @enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x3ff}, {0xe, 0x7}, {0x0, 0x8}]}, @union={0xe, 0x9, 0x0, 0x5, 0x0, 0x1, [{0x1, 0x1, 0x5}, {0x4, 0x4, 0x7}, {0xb, 0x3, 0x1}, {0x6, 0x5, 0x6}, {0x5, 0x3, 0x7}, {0xa, 0x0, 0x7}, {0x5, 0x2, 0x401}, {0xd, 0x2}, {0xd, 0x4, 0x9}]}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @restrict={0x5, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000780)=""/235, 0xf6, 0xeb, 0x1, 0xffffffff, 0x10000, @value=r7}, 0x28) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl1\x00', r6, 0x4, 0x3, 0xa, 0x5, 0x14, @empty, @private0, 0x7800, 0x7800, 0x0, 0x33e4}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES16=r0, @ANYRESDEC=r4, @ANYRESDEC=r9], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x1b, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r10, @ANYRES64=r3, @ANYRES8=r10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00 \x00'/13], 0x50) unshare(0x8000480) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r11, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bond_slave_0\x00', {0x2}, 0x5}) r12 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r12, 0x8983, &(0x7f0000000580)={0x6, 'veth0_to_team\x00', {}, 0x5}) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)}, 0x100) shutdown(r13, 0x1) ppoll(&(0x7f0000000200), 0x0, &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000640)={0x0, 'veth0_vlan\x00', {0x4}, 0xfbf7}) 0s ago: executing program 4 (id=1812): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x24000045) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="450a0000000000000ae7000000000c0000000000ffffffef4b407257184cd7f64d33a0d999762c034cdc23bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00 \x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bond_slave_0\x00', {0x2}, 0x5}) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)}, 0x100) connect$packet(r6, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r6, 0x1) ppoll(&(0x7f0000000200)=[{r2, 0x6010}], 0x1, &(0x7f00000005c0), &(0x7f0000000600)={[0x1ff]}, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000640)={0x0, 'veth0_vlan\x00', {0x4}, 0xfbf7}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x280c82, 0x0) write$tun(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x59) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="030000004f556d602be85943394beb959c446350037c3395a2efbf8e832d5955c9746bc7b4c262d60bdb40c48fcda7175d2ee2681a3cb5b2e2fc501f744f825a824cafa626ebf14f9a79de43e5d5ecd9a076dfcc3ad935cfbecaad53f59eadef53a8b47d61249be571d3988e04047dae8c9b83a2e1f272dc768ad6b502d13f16d0d2fc0fc37cd7a02d841208bcebcfa5f91ab311d4c81c5e8d9bc4ad579bfedd9524585320a4e67af6aef8f6e7f0c31f7fab39178663ae21684f47c0391d662f95b768cc49bc223972d5f98ac5e7372850734d848ed5b579c594ddce24ecdbabb34faf2041ba09e0dcca7eaabc903782c99555861fa7d10e", @ANYBLOB="f0b80b2563e6d4b46d7c15698b97a9201c56ddef366ab97a7754cf06fb97c061830895194784729a626f85cc4649075023a4c48a69fd3ee5a08dedb3d0abfaff2ade675f7efa567f7c6cfd8c812b7336806e6666ff62c775913c6bec3d39cab35f180d0a5dd8013451a2384a2cce3eecd2bba4b8ee07b6261b6e467d897375639c581b793d14d958096f2dd2bd906acb627b4bb614462cc9488fb8641c366930042dc2dac196d9f37207f32ec2210be4ca27535e91dbc272a934d60d38cbe2a96387d3e228147c6841a9f0e31fcf64e37f1f5265fd1aded63be63b4e97899fde11720ca8384a26e72365680d5b2255493f", @ANYBLOB="010000000000ffdbdf251800000008000300", @ANYRESHEX=r11, @ANYRES8=r4], 0x24}, 0x1, 0x0, 0x0, 0x24040001}, 0x20040814) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000203010200000000000000000e000007080003400000000c90ff84c601000000000800044000000010090002000000000101000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040044}, 0x8040) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a0000000000440007"], 0x90}}, 0x4c040) kernel console output (not intermixed with test programs): ink_recvmsg+0x10/0x10 [ 181.918951][ T9982] sock_recvmsg+0x22f/0x280 [ 181.918976][ T9982] ____sys_recvmsg+0x1c6/0x480 [ 181.919001][ T9982] ? __pfx_____sys_recvmsg+0x10/0x10 [ 181.919039][ T9982] do_recvmmsg+0x426/0xab0 [ 181.919067][ T9982] ? __pfx_do_recvmmsg+0x10/0x10 [ 181.919109][ T9982] ? __pfx___might_resched+0x10/0x10 [ 181.919129][ T9982] ? __might_fault+0xaa/0x120 [ 181.919145][ T9982] ? __pfx_lock_release+0x10/0x10 [ 181.919167][ T9982] ? vfs_write+0x7fa/0xd10 [ 181.919197][ T9982] ? get_timespec64+0x19c/0x280 [ 181.919234][ T9982] __x64_sys_recvmmsg+0x1b8/0x250 [ 181.919255][ T9982] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 181.919273][ T9982] ? do_syscall_64+0x100/0x230 [ 181.919294][ T9982] ? do_syscall_64+0xb6/0x230 [ 181.919313][ T9982] do_syscall_64+0xf3/0x230 [ 181.919333][ T9982] ? clear_bhb_loop+0x35/0x90 [ 181.919355][ T9982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.919374][ T9982] RIP: 0033:0x7f600258d169 [ 181.919393][ T9982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.919406][ T9982] RSP: 002b:00007f6003406038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 181.919430][ T9982] RAX: ffffffffffffffda RBX: 00007f60027a5fa0 RCX: 00007f600258d169 [ 181.919442][ T9982] RDX: 04000000000003b4 RSI: 00004000000037c0 RDI: 0000000000000003 [ 181.919452][ T9982] RBP: 00007f6003406090 R08: 0000400000003700 R09: 0000000000000000 [ 181.919462][ T9982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.919471][ T9982] R13: 0000000000000000 R14: 00007f60027a5fa0 R15: 00007ffd289e5268 [ 181.919492][ T9982] [ 182.298328][ T9986] tipc: Enabled bearer , priority 10 [ 182.441632][ T9991] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1264'. [ 182.457393][ T9991] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1264'. [ 182.491179][ T9991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1264'. [ 182.658311][T10004] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1268'. [ 182.824503][T10009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.852772][T10015] FAULT_INJECTION: forcing a failure. [ 182.852772][T10015] name failslab, interval 1, probability 0, space 0, times 0 [ 182.951349][T10015] CPU: 0 UID: 0 PID: 10015 Comm: syz.2.1272 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 182.951377][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.951387][T10015] Call Trace: [ 182.951394][T10015] [ 182.951402][T10015] dump_stack_lvl+0x241/0x360 [ 182.951428][T10015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.951446][T10015] ? __pfx__printk+0x10/0x10 [ 182.951465][T10015] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 182.951488][T10015] ? __pfx___might_resched+0x10/0x10 [ 182.951506][T10015] ? rcu_is_watching+0x15/0xb0 [ 182.951530][T10015] should_fail_ex+0x40a/0x550 [ 182.951559][T10015] should_failslab+0xac/0x100 [ 182.951581][T10015] __kmalloc_node_noprof+0xe1/0x4d0 [ 182.951602][T10015] ? __kvmalloc_node_noprof+0x72/0x190 [ 182.951666][T10015] __kvmalloc_node_noprof+0x72/0x190 [ 182.951691][T10015] nf_hook_entries_grow+0x288/0x720 [ 182.951724][T10015] __nf_register_net_hook+0x278/0x8d0 [ 182.951744][T10015] ? parse_nl_config+0x33f/0x480 [ 182.951773][T10015] nf_register_net_hook+0xb0/0x190 [ 182.951794][T10015] nf_register_net_hooks+0x41/0x1a0 [ 182.951817][T10015] ila_xlat_nl_cmd_add_mapping+0x646/0x17d0 [ 182.951850][T10015] ? __pfx_ila_xlat_nl_cmd_add_mapping+0x10/0x10 [ 182.951873][T10015] ? __nla_parse+0x40/0x60 [ 182.951893][T10015] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 182.951919][T10015] genl_rcv_msg+0xb1f/0xec0 [ 182.951945][T10015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.951992][T10015] ? __pfx_lock_acquire+0x10/0x10 [ 182.952013][T10015] ? __pfx_ila_xlat_nl_cmd_add_mapping+0x10/0x10 [ 182.952034][T10015] ? __pfx___might_resched+0x10/0x10 [ 182.952063][T10015] netlink_rcv_skb+0x206/0x480 [ 182.952086][T10015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.952104][T10015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.952155][T10015] genl_rcv+0x28/0x40 [ 182.952170][T10015] netlink_unicast+0x7f6/0x990 [ 182.952198][T10015] ? __pfx_netlink_unicast+0x10/0x10 [ 182.952216][T10015] ? __virt_addr_valid+0x45f/0x530 [ 182.952234][T10015] ? __phys_addr_symbol+0x2f/0x70 [ 182.952249][T10015] ? __check_object_size+0x47a/0x730 [ 182.952275][T10015] netlink_sendmsg+0x8de/0xcb0 [ 182.952310][T10015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.952336][T10015] ? aa_sock_msg_perm+0x91/0x160 [ 182.952365][T10015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.952384][T10015] __sock_sendmsg+0x221/0x270 [ 182.952414][T10015] ____sys_sendmsg+0x53a/0x860 [ 182.952441][T10015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.952456][T10015] ? __fget_files+0x2a/0x410 [ 182.952481][T10015] ? __fget_files+0x2a/0x410 [ 182.952512][T10015] __sys_sendmsg+0x269/0x350 [ 182.952535][T10015] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.952566][T10015] ? do_sys_openat2+0x17a/0x1d0 [ 182.952617][T10015] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.952647][T10015] ? do_syscall_64+0x100/0x230 [ 182.952669][T10015] ? do_syscall_64+0xb6/0x230 [ 182.952691][T10015] do_syscall_64+0xf3/0x230 [ 182.952709][T10015] ? clear_bhb_loop+0x35/0x90 [ 182.952734][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.952754][T10015] RIP: 0033:0x7fd943b8d169 [ 182.952769][T10015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.952785][T10015] RSP: 002b:00007fd9449d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.952804][T10015] RAX: ffffffffffffffda RBX: 00007fd943da5fa0 RCX: 00007fd943b8d169 [ 182.952817][T10015] RDX: 0000000004000000 RSI: 0000400000000780 RDI: 0000000000000003 [ 182.952828][T10015] RBP: 00007fd9449d2090 R08: 0000000000000000 R09: 0000000000000000 [ 182.952838][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.952848][T10015] R13: 0000000000000000 R14: 00007fd943da5fa0 R15: 00007ffd7cd3a918 [ 182.952877][T10015] [ 183.367782][T10019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.428441][T10026] FAULT_INJECTION: forcing a failure. [ 183.428441][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 183.468838][T10026] CPU: 1 UID: 0 PID: 10026 Comm: syz.1.1275 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 183.468866][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.468877][T10026] Call Trace: [ 183.468883][T10026] [ 183.468890][T10026] dump_stack_lvl+0x241/0x360 [ 183.468917][T10026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.468935][T10026] ? __pfx__printk+0x10/0x10 [ 183.468957][T10026] ? ref_tracker_alloc+0x332/0x490 [ 183.468984][T10026] should_fail_ex+0x40a/0x550 [ 183.469011][T10026] should_failslab+0xac/0x100 [ 183.469032][T10026] ? skb_clone+0x20c/0x390 [ 183.469049][T10026] kmem_cache_alloc_noprof+0x70/0x380 [ 183.469075][T10026] skb_clone+0x20c/0x390 [ 183.469096][T10026] __netlink_deliver_tap+0x3c4/0x7f0 [ 183.469128][T10026] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.469146][T10026] netlink_deliver_tap+0x19d/0x1b0 [ 183.469168][T10026] netlink_sendskb+0x68/0x140 [ 183.469188][T10026] netlink_unicast+0x39d/0x990 [ 183.469205][T10026] ? __asan_memcpy+0x40/0x70 [ 183.469229][T10026] ? __pfx_netlink_unicast+0x10/0x10 [ 183.469263][T10026] netlink_rcv_skb+0x294/0x480 [ 183.469284][T10026] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 183.469307][T10026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.469349][T10026] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.469372][T10026] netlink_unicast+0x7f6/0x990 [ 183.469398][T10026] ? __pfx_netlink_unicast+0x10/0x10 [ 183.469415][T10026] ? __virt_addr_valid+0x45f/0x530 [ 183.469432][T10026] ? __phys_addr_symbol+0x2f/0x70 [ 183.469447][T10026] ? __check_object_size+0x47a/0x730 [ 183.469471][T10026] netlink_sendmsg+0x8de/0xcb0 [ 183.469503][T10026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.469535][T10026] ? aa_sock_msg_perm+0x91/0x160 [ 183.469563][T10026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.469628][T10026] __sock_sendmsg+0x221/0x270 [ 183.469652][T10026] ____sys_sendmsg+0x53a/0x860 [ 183.469678][T10026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.469693][T10026] ? __fget_files+0x2a/0x410 [ 183.469717][T10026] ? __fget_files+0x2a/0x410 [ 183.469746][T10026] __sys_sendmsg+0x269/0x350 [ 183.469768][T10026] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.469804][T10026] ? do_sys_openat2+0x17a/0x1d0 [ 183.469850][T10026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 183.469876][T10026] ? do_syscall_64+0x100/0x230 [ 183.469898][T10026] ? do_syscall_64+0xb6/0x230 [ 183.469919][T10026] do_syscall_64+0xf3/0x230 [ 183.469937][T10026] ? clear_bhb_loop+0x35/0x90 [ 183.469960][T10026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.469979][T10026] RIP: 0033:0x7f28dad8d169 [ 183.469995][T10026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.470009][T10026] RSP: 002b:00007f28dbc48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.470026][T10026] RAX: ffffffffffffffda RBX: 00007f28dafa5fa0 RCX: 00007f28dad8d169 [ 183.470039][T10026] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 183.470049][T10026] RBP: 00007f28dbc48090 R08: 0000000000000000 R09: 0000000000000000 [ 183.470059][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.470069][T10026] R13: 0000000000000000 R14: 00007f28dafa5fa0 R15: 00007ffca4db5898 [ 183.470097][T10026] [ 183.862568][T10025] Cannot find del_set index 4 as target [ 183.941153][T10037] FAULT_INJECTION: forcing a failure. [ 183.941153][T10037] name failslab, interval 1, probability 0, space 0, times 0 [ 183.976021][T10037] CPU: 0 UID: 0 PID: 10037 Comm: syz.1.1278 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 183.976050][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.976060][T10037] Call Trace: [ 183.976066][T10037] [ 183.976074][T10037] dump_stack_lvl+0x241/0x360 [ 183.976100][T10037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.976118][T10037] ? __pfx__printk+0x10/0x10 [ 183.976137][T10037] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 183.976160][T10037] ? __pfx___might_resched+0x10/0x10 [ 183.976185][T10037] should_fail_ex+0x40a/0x550 [ 183.976211][T10037] should_failslab+0xac/0x100 [ 183.976233][T10037] kmem_cache_alloc_node_noprof+0x77/0x380 [ 183.976254][T10037] ? __alloc_skb+0x1c3/0x440 [ 183.976274][T10037] __alloc_skb+0x1c3/0x440 [ 183.976295][T10037] ? __pfx___alloc_skb+0x10/0x10 [ 183.976319][T10037] ? netlink_autobind+0xd6/0x2f0 [ 183.976340][T10037] ? netlink_autobind+0x2b0/0x2f0 [ 183.976365][T10037] netlink_sendmsg+0x634/0xcb0 [ 183.976397][T10037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.976421][T10037] ? aa_sock_msg_perm+0x91/0x160 [ 183.976463][T10037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.976482][T10037] __sock_sendmsg+0x221/0x270 [ 183.976505][T10037] ____sys_sendmsg+0x53a/0x860 [ 183.976531][T10037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.976546][T10037] ? __fget_files+0x2a/0x410 [ 183.976570][T10037] ? __fget_files+0x2a/0x410 [ 183.976601][T10037] __sys_sendmsg+0x269/0x350 [ 183.976619][T10037] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.976645][T10037] ? do_sys_openat2+0x17a/0x1d0 [ 183.976688][T10037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 183.976714][T10037] ? do_syscall_64+0x100/0x230 [ 183.976735][T10037] ? do_syscall_64+0xb6/0x230 [ 183.976756][T10037] do_syscall_64+0xf3/0x230 [ 183.976774][T10037] ? clear_bhb_loop+0x35/0x90 [ 183.976798][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.976817][T10037] RIP: 0033:0x7f28dad8d169 [ 183.976832][T10037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.976846][T10037] RSP: 002b:00007f28dbc48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.976863][T10037] RAX: ffffffffffffffda RBX: 00007f28dafa5fa0 RCX: 00007f28dad8d169 [ 183.976875][T10037] RDX: 0000000000000000 RSI: 0000400000001200 RDI: 0000000000000007 [ 183.976886][T10037] RBP: 00007f28dbc48090 R08: 0000000000000000 R09: 0000000000000000 [ 183.976895][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.976905][T10037] R13: 0000000000000000 R14: 00007f28dafa5fa0 R15: 00007ffca4db5898 [ 183.976931][T10037] [ 184.886066][T10090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.998908][T10101] netlink: 'syz.3.1283': attribute type 11 has an invalid length. [ 185.169321][T10109] xt_hashlimit: size too large, truncated to 1048576 [ 185.189443][T10111] netlink: 'syz.2.1291': attribute type 29 has an invalid length. [ 185.396503][T10120] __nla_validate_parse: 8 callbacks suppressed [ 185.396523][T10120] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1294'. [ 185.476944][T10120] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1294'. [ 185.489248][T10120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1294'. [ 185.616361][T10128] FAULT_INJECTION: forcing a failure. [ 185.616361][T10128] name failslab, interval 1, probability 0, space 0, times 0 [ 185.633187][T10128] CPU: 0 UID: 0 PID: 10128 Comm: syz.1.1296 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 185.633215][T10128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.633225][T10128] Call Trace: [ 185.633231][T10128] [ 185.633237][T10128] dump_stack_lvl+0x241/0x360 [ 185.633264][T10128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.633282][T10128] ? __pfx__printk+0x10/0x10 [ 185.633310][T10128] should_fail_ex+0x40a/0x550 [ 185.633335][T10128] should_failslab+0xac/0x100 [ 185.633356][T10128] kmem_cache_alloc_node_noprof+0x77/0x380 [ 185.633377][T10128] ? __alloc_skb+0x1c3/0x440 [ 185.633398][T10128] __alloc_skb+0x1c3/0x440 [ 185.633412][T10128] ? sctp_bind_addrs_to_raw+0xeb/0x340 [ 185.633432][T10128] ? __pfx___alloc_skb+0x10/0x10 [ 185.633452][T10128] ? sctp_del_bind_addr+0xb0/0x190 [ 185.633475][T10128] _sctp_make_chunk+0x58/0x460 [ 185.633499][T10128] sctp_make_init+0x74a/0x1280 [ 185.633515][T10128] ? 0xffffffffa000064c [ 185.633541][T10128] ? __pfx_sctp_make_init+0x10/0x10 [ 185.633556][T10128] ? unwind_get_return_address+0x4d/0x90 [ 185.633594][T10128] ? arch_stack_walk+0xfd/0x150 [ 185.633621][T10128] ? stack_trace_save+0x118/0x1d0 [ 185.633645][T10128] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 185.633666][T10128] ? __pfx_sctp_pname+0x10/0x10 [ 185.633684][T10128] sctp_do_sm+0x1f1/0x60c0 [ 185.633706][T10128] ? kasan_save_track+0x51/0x80 [ 185.633723][T10128] ? __kasan_kmalloc+0x98/0xb0 [ 185.633740][T10128] ? sctp_stream_init_ext+0x56/0x180 [ 185.633753][T10128] ? sctp_sendmsg_to_asoc+0x12fd/0x1800 [ 185.633774][T10128] ? __sock_sendmsg+0x1a6/0x270 [ 185.633793][T10128] ? __sys_sendto+0x363/0x4c0 [ 185.633815][T10128] ? __x64_sys_sendto+0xde/0x100 [ 185.633836][T10128] ? do_syscall_64+0xf3/0x230 [ 185.633853][T10128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.633875][T10128] ? __pfx_sctp_do_sm+0x10/0x10 [ 185.633923][T10128] ? __sk_mem_raise_allocated+0xa5f/0x1140 [ 185.633955][T10128] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 185.633981][T10128] sctp_sendmsg_to_asoc+0xfa5/0x1800 [ 185.634002][T10128] ? __asan_memcpy+0x40/0x70 [ 185.634026][T10128] ? sctp_assoc_add_peer+0xcc0/0x1360 [ 185.634058][T10128] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 185.634077][T10128] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 185.634100][T10128] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 185.634119][T10128] ? sctp_sendmsg+0xf1a/0x35d0 [ 185.634145][T10128] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 185.634164][T10128] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 185.634184][T10128] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 185.634209][T10128] sctp_sendmsg+0x242e/0x35d0 [ 185.634247][T10128] ? __pfx_sctp_sendmsg+0x10/0x10 [ 185.634270][T10128] ? aa_sk_perm+0x96d/0xab0 [ 185.634305][T10128] ? inet_sendmsg+0x330/0x390 [ 185.634327][T10128] __sock_sendmsg+0x1a6/0x270 [ 185.634350][T10128] __sys_sendto+0x363/0x4c0 [ 185.634375][T10128] ? __pfx___sys_sendto+0x10/0x10 [ 185.634411][T10128] ? __fget_files+0x2a/0x410 [ 185.634440][T10128] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.634466][T10128] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.634494][T10128] __x64_sys_sendto+0xde/0x100 [ 185.634519][T10128] do_syscall_64+0xf3/0x230 [ 185.634537][T10128] ? clear_bhb_loop+0x35/0x90 [ 185.634560][T10128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.634588][T10128] RIP: 0033:0x7f28dad8d169 [ 185.634603][T10128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.634617][T10128] RSP: 002b:00007f28dbc48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 185.634635][T10128] RAX: ffffffffffffffda RBX: 00007f28dafa5fa0 RCX: 00007f28dad8d169 [ 185.634646][T10128] RDX: 000000000000ffe0 RSI: 0000400000000100 RDI: 0000000000000003 [ 185.634657][T10128] RBP: 00007f28dbc48090 R08: 0000400000000140 R09: 000000000000001c [ 185.634668][T10128] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 185.634678][T10128] R13: 0000000000000000 R14: 00007f28dafa5fa0 R15: 00007ffca4db5898 [ 185.634704][T10128] [ 186.428211][T10139] lo speed is unknown, defaulting to 1000 [ 186.455347][T10154] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1301'. [ 186.487604][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 186.494209][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 186.494260][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 186.522600][T10148] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1301'. [ 186.715293][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'. [ 186.907237][T10171] lo speed is unknown, defaulting to 1000 [ 187.225688][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 187.273071][T10178] syzkaller0: entered promiscuous mode [ 187.284890][T10191] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1313'. [ 187.298727][T10191] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1313'. [ 187.316835][T10178] syzkaller0: entered allmulticast mode [ 187.336741][T10191] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1313'. [ 187.583947][T10189] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.596935][T10189] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.612735][T10191] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.441511][T10189] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.451640][T10189] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.467380][T10191] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.628689][T10189] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.658669][T10189] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.697175][T10191] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.751391][T10189] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.791026][T10189] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.839510][T10191] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.853690][T10214] netlink: 'syz.3.1320': attribute type 10 has an invalid length. [ 189.887003][T10214] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 189.913028][T10214] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 189.926270][T10214] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 190.018005][T10191] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 190.046820][T10189] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.072498][T10189] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.095391][T10191] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 190.111516][T10189] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.122026][T10189] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.138178][T10191] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 190.155377][T10189] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.167017][T10189] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.200471][T10191] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 190.230314][T10189] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.258545][T10234] FAULT_INJECTION: forcing a failure. [ 190.258545][T10234] name failslab, interval 1, probability 0, space 0, times 0 [ 190.268143][T10189] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.275513][T10234] CPU: 0 UID: 0 PID: 10234 Comm: syz.3.1325 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 190.275539][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.275550][T10234] Call Trace: [ 190.275556][T10234] [ 190.275563][T10234] dump_stack_lvl+0x241/0x360 [ 190.275589][T10234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.275607][T10234] ? __pfx__printk+0x10/0x10 [ 190.275636][T10234] should_fail_ex+0x40a/0x550 [ 190.275662][T10234] should_failslab+0xac/0x100 [ 190.275684][T10234] __kmalloc_cache_noprof+0x70/0x390 [ 190.275702][T10234] ? sctp_add_bind_addr+0x89/0x3a0 [ 190.275726][T10234] sctp_add_bind_addr+0x89/0x3a0 [ 190.275747][T10234] sctp_copy_local_addr_list+0x311/0x500 [ 190.275767][T10234] ? sctp_copy_local_addr_list+0xab/0x500 [ 190.275786][T10234] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 190.275802][T10234] ? sctp_association_new+0x1876/0x2540 [ 190.275833][T10234] ? sctp_v6_is_any+0x60/0x70 [ 190.275853][T10234] ? sctp_copy_one_addr+0x94/0x360 [ 190.275875][T10234] sctp_bind_addr_copy+0xad/0x3b0 [ 190.275894][T10234] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 190.275919][T10234] sctp_connect_new_asoc+0x2f3/0x6c0 [ 190.275943][T10234] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 190.275962][T10234] ? sctp_sendmsg+0xf1a/0x35d0 [ 190.275987][T10234] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 190.276005][T10234] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 190.276029][T10234] sctp_sendmsg+0x1f64/0x35d0 [ 190.276066][T10234] ? __pfx_sctp_sendmsg+0x10/0x10 [ 190.276089][T10234] ? aa_sk_perm+0x96d/0xab0 [ 190.276125][T10234] ? inet_sendmsg+0x330/0x390 [ 190.276147][T10234] __sock_sendmsg+0x1a6/0x270 [ 190.276171][T10234] __sys_sendto+0x363/0x4c0 [ 190.276198][T10234] ? __pfx___sys_sendto+0x10/0x10 [ 190.276232][T10234] ? __fget_files+0x2a/0x410 [ 190.276262][T10234] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 190.276286][T10234] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 190.276312][T10234] __x64_sys_sendto+0xde/0x100 [ 190.276338][T10234] do_syscall_64+0xf3/0x230 [ 190.276356][T10234] ? clear_bhb_loop+0x35/0x90 [ 190.276379][T10234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.276398][T10234] RIP: 0033:0x7f9439d8d169 [ 190.276413][T10234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.276426][T10234] RSP: 002b:00007f943abbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 190.276444][T10234] RAX: ffffffffffffffda RBX: 00007f9439fa5fa0 RCX: 00007f9439d8d169 [ 190.276455][T10234] RDX: 0000000000000001 RSI: 00004000000002c0 RDI: 0000000000000003 [ 190.276466][T10234] RBP: 00007f943abbf090 R08: 0000400000000140 R09: 000000000000001c [ 190.276480][T10234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.276490][T10234] R13: 0000000000000000 R14: 00007f9439fa5fa0 R15: 00007ffd97814ea8 [ 190.276516][T10234] [ 190.719984][T10250] __nla_validate_parse: 3 callbacks suppressed [ 190.720003][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 190.936191][T10260] netlink: 'syz.3.1334': attribute type 10 has an invalid length. [ 190.950749][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1332'. [ 191.038385][T10256] syzkaller0: entered promiscuous mode [ 191.058524][T10256] syzkaller0: entered allmulticast mode [ 191.065056][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 191.075484][T10260] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 191.097953][T10260] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 191.118788][T10260] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 191.388956][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 191.464725][T10284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.601889][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 191.676375][T10293] geneve1: entered promiscuous mode [ 191.686313][T10293] FAULT_INJECTION: forcing a failure. [ 191.686313][T10293] name failslab, interval 1, probability 0, space 0, times 0 [ 191.763216][T10293] CPU: 0 UID: 0 PID: 10293 Comm: syz.0.1342 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 191.763242][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.763253][T10293] Call Trace: [ 191.763259][T10293] [ 191.763266][T10293] dump_stack_lvl+0x241/0x360 [ 191.763291][T10293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.763306][T10293] ? __pfx__printk+0x10/0x10 [ 191.763333][T10293] should_fail_ex+0x40a/0x550 [ 191.763358][T10293] should_failslab+0xac/0x100 [ 191.763378][T10293] kmem_cache_alloc_node_noprof+0x77/0x380 [ 191.763399][T10293] ? __alloc_skb+0x1c3/0x440 [ 191.763412][T10293] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 191.763436][T10293] __alloc_skb+0x1c3/0x440 [ 191.763455][T10293] ? __pfx___alloc_skb+0x10/0x10 [ 191.763478][T10293] ? if_nlmsg_size+0x755/0x7b0 [ 191.763495][T10293] ? if_nlmsg_size+0x540/0x7b0 [ 191.763515][T10293] rtmsg_ifinfo_build_skb+0x84/0x260 [ 191.763537][T10293] ? __local_bh_enable_ip+0x168/0x200 [ 191.763557][T10293] rtmsg_ifinfo+0x91/0x1b0 [ 191.763581][T10293] __dev_notify_flags+0xf7/0x400 [ 191.763602][T10293] ? dev_set_rx_mode+0xb8/0x2e0 [ 191.763627][T10293] ? __pfx___dev_notify_flags+0x10/0x10 [ 191.763648][T10293] ? __dev_change_flags+0x515/0x6f0 [ 191.763669][T10293] ? __pfx___dev_change_flags+0x10/0x10 [ 191.763683][T10293] ? validate_linkmsg+0x8b6/0xa40 [ 191.763707][T10293] ? __pfx_validate_linkmsg+0x10/0x10 [ 191.763729][T10293] netif_change_flags+0xf0/0x1a0 [ 191.763762][T10293] do_setlink+0xf42/0x40f0 [ 191.763808][T10293] ? __pfx_do_setlink+0x10/0x10 [ 191.763844][T10293] ? __pfx___might_resched+0x10/0x10 [ 191.763868][T10293] ? __pfx___mutex_trylock_common+0x10/0x10 [ 191.763891][T10293] ? rcu_is_watching+0x15/0xb0 [ 191.763909][T10293] ? trace_contention_end+0x3c/0x120 [ 191.763927][T10293] ? __mutex_lock+0x397/0x1010 [ 191.763948][T10293] ? __pfx_aa_get_newest_label+0x10/0x10 [ 191.763977][T10293] ? rtnl_newlink+0xc4c/0x1d90 [ 191.763997][T10293] ? __pfx___mutex_lock+0x10/0x10 [ 191.764025][T10293] ? ns_capable+0x8a/0xf0 [ 191.764046][T10293] ? rtnl_link_get_net_capable+0x168/0x340 [ 191.764072][T10293] rtnl_newlink+0x15a6/0x1d90 [ 191.764092][T10293] ? stack_depot_save_flags+0x37/0x940 [ 191.764127][T10293] ? __pfx_rtnl_newlink+0x10/0x10 [ 191.764146][T10293] ? __netlink_deliver_tap+0x561/0x7f0 [ 191.764168][T10293] ? __pfx_validate_chain+0x10/0x10 [ 191.764184][T10293] ? __sock_sendmsg+0x221/0x270 [ 191.764202][T10293] ? ____sys_sendmsg+0x53a/0x860 [ 191.764217][T10293] ? __sys_sendmsg+0x269/0x350 [ 191.764232][T10293] ? do_syscall_64+0xf3/0x230 [ 191.764248][T10293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.764287][T10293] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.764312][T10293] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.764343][T10293] ? mark_lock+0x9a/0x360 [ 191.764361][T10293] ? __lock_acquire+0x1397/0x2100 [ 191.764408][T10293] ? __pfx_lock_release+0x10/0x10 [ 191.764445][T10293] ? __pfx_rtnl_newlink+0x10/0x10 [ 191.764468][T10293] rtnetlink_rcv_msg+0x791/0xcf0 [ 191.764488][T10293] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 191.764514][T10293] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 191.764540][T10293] ? ref_tracker_free+0x643/0x7e0 [ 191.764565][T10293] netlink_rcv_skb+0x206/0x480 [ 191.764586][T10293] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 191.764606][T10293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.764648][T10293] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.764671][T10293] netlink_unicast+0x7f6/0x990 [ 191.764699][T10293] ? __pfx_netlink_unicast+0x10/0x10 [ 191.764717][T10293] ? __virt_addr_valid+0x45f/0x530 [ 191.764734][T10293] ? __phys_addr_symbol+0x2f/0x70 [ 191.764756][T10293] ? __check_object_size+0x47a/0x730 [ 191.764781][T10293] netlink_sendmsg+0x8de/0xcb0 [ 191.764812][T10293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.764835][T10293] ? aa_sock_msg_perm+0x91/0x160 [ 191.764862][T10293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.764879][T10293] __sock_sendmsg+0x221/0x270 [ 191.764901][T10293] ____sys_sendmsg+0x53a/0x860 [ 191.764924][T10293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.764939][T10293] ? __fget_files+0x2a/0x410 [ 191.764963][T10293] ? __fget_files+0x2a/0x410 [ 191.764992][T10293] __sys_sendmsg+0x269/0x350 [ 191.765015][T10293] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.765044][T10293] ? do_sys_openat2+0x17a/0x1d0 [ 191.765092][T10293] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.765116][T10293] ? do_syscall_64+0x100/0x230 [ 191.765137][T10293] ? do_syscall_64+0xb6/0x230 [ 191.765157][T10293] do_syscall_64+0xf3/0x230 [ 191.765175][T10293] ? clear_bhb_loop+0x35/0x90 [ 191.765199][T10293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.765218][T10293] RIP: 0033:0x7f40fed8d169 [ 191.765233][T10293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.765247][T10293] RSP: 002b:00007f40ffbbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.765265][T10293] RAX: ffffffffffffffda RBX: 00007f40fefa5fa0 RCX: 00007f40fed8d169 [ 191.765277][T10293] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 191.765288][T10293] RBP: 00007f40ffbbd090 R08: 0000000000000000 R09: 0000000000000000 [ 191.765298][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.765308][T10293] R13: 0000000000000000 R14: 00007f40fefa5fa0 R15: 00007ffec7ce44c8 [ 191.765334][T10293] [ 194.281895][T10311] netlink: 'syz.2.1346': attribute type 10 has an invalid length. [ 194.358287][T10311] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 194.377316][T10311] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 194.416193][T10311] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 194.650993][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.741083][T10329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1352'. [ 194.762096][T10328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.774957][T10337] netlink: 'syz.3.1353': attribute type 11 has an invalid length. [ 194.821688][T10329] bond0: entered promiscuous mode [ 194.837904][T10329] bond_slave_0: entered promiscuous mode [ 194.849014][T10329] bond_slave_1: entered promiscuous mode [ 194.863492][T10329] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.889629][T10329] bond0: left promiscuous mode [ 194.900116][T10329] bond_slave_0: left promiscuous mode [ 194.912603][T10329] bond_slave_1: left promiscuous mode [ 194.991877][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 195.014032][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.025310][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1355'. [ 195.046004][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.119157][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.394463][T10361] netlink: zone id is out of range [ 195.408857][T10368] netlink: 'syz.3.1360': attribute type 10 has an invalid length. [ 195.424657][T10368] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 195.437157][T10368] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 195.498052][T10368] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 195.581966][T10361] netlink: set zone limit has 4 unknown bytes [ 195.864183][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1367'. [ 195.878733][T10394] FAULT_INJECTION: forcing a failure. [ 195.878733][T10394] name failslab, interval 1, probability 0, space 0, times 0 [ 195.904710][T10394] CPU: 1 UID: 0 PID: 10394 Comm: syz.4.1366 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 195.904735][T10394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.904745][T10394] Call Trace: [ 195.904752][T10394] [ 195.904760][T10394] dump_stack_lvl+0x241/0x360 [ 195.904787][T10394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.904806][T10394] ? __pfx__printk+0x10/0x10 [ 195.904825][T10394] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 195.904848][T10394] ? __pfx___might_resched+0x10/0x10 [ 195.904867][T10394] ? vsnprintf+0x1152/0x1220 [ 195.904894][T10394] should_fail_ex+0x40a/0x550 [ 195.904921][T10394] should_failslab+0xac/0x100 [ 195.904943][T10394] __kmalloc_node_noprof+0xe1/0x4d0 [ 195.904963][T10394] ? __kvmalloc_node_noprof+0x72/0x190 [ 195.904988][T10394] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 195.905010][T10394] __kvmalloc_node_noprof+0x72/0x190 [ 195.905034][T10394] alloc_netdev_mqs+0xa4/0x1210 [ 195.905051][T10394] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 195.905078][T10394] rtnl_create_link+0x2f9/0xc90 [ 195.905103][T10394] rtnl_newlink_create+0x2e1/0xbd0 [ 195.905131][T10394] ? __mutex_lock+0x602/0x1010 [ 195.905154][T10394] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 195.905181][T10394] ? __pfx___mutex_lock+0x10/0x10 [ 195.905208][T10394] ? ns_capable+0x8a/0xf0 [ 195.905231][T10394] rtnl_newlink+0x167a/0x1d90 [ 195.905254][T10394] ? __lock_acquire+0x1397/0x2100 [ 195.905288][T10394] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.905309][T10394] ? __pfx_validate_chain+0x10/0x10 [ 195.905344][T10394] ? validate_chain+0x11e/0x5920 [ 195.905362][T10394] ? __pfx_lock_acquire+0x10/0x10 [ 195.905387][T10394] ? __pfx_lock_release+0x10/0x10 [ 195.905413][T10394] ? __pfx_validate_chain+0x10/0x10 [ 195.905433][T10394] ? mark_lock+0x9a/0x360 [ 195.905452][T10394] ? __lock_acquire+0x1397/0x2100 [ 195.905505][T10394] ? __pfx_lock_release+0x10/0x10 [ 195.905552][T10394] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.905574][T10394] rtnetlink_rcv_msg+0x791/0xcf0 [ 195.905594][T10394] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 195.905615][T10394] ? __lock_acquire+0x1397/0x2100 [ 195.905637][T10394] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.905674][T10394] netlink_rcv_skb+0x206/0x480 [ 195.905697][T10394] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.905720][T10394] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.905765][T10394] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.905788][T10394] netlink_unicast+0x7f6/0x990 [ 195.905815][T10394] ? __pfx_netlink_unicast+0x10/0x10 [ 195.905832][T10394] ? __virt_addr_valid+0x45f/0x530 [ 195.905848][T10394] ? __phys_addr_symbol+0x2f/0x70 [ 195.905863][T10394] ? __check_object_size+0x47a/0x730 [ 195.905887][T10394] netlink_sendmsg+0x8de/0xcb0 [ 195.905920][T10394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.905945][T10394] ? aa_sock_msg_perm+0x91/0x160 [ 195.905973][T10394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.905992][T10394] __sock_sendmsg+0x221/0x270 [ 195.906016][T10394] ____sys_sendmsg+0x53a/0x860 [ 195.906042][T10394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.906057][T10394] ? __fget_files+0x2a/0x410 [ 195.906083][T10394] ? __fget_files+0x2a/0x410 [ 195.906113][T10394] __sys_sendmsg+0x269/0x350 [ 195.906136][T10394] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.906166][T10394] ? do_sys_openat2+0x17a/0x1d0 [ 195.906217][T10394] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.906240][T10394] ? do_syscall_64+0x100/0x230 [ 195.906262][T10394] ? do_syscall_64+0xb6/0x230 [ 195.906283][T10394] do_syscall_64+0xf3/0x230 [ 195.906302][T10394] ? clear_bhb_loop+0x35/0x90 [ 195.906326][T10394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.906345][T10394] RIP: 0033:0x7f600258d169 [ 195.906360][T10394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.906374][T10394] RSP: 002b:00007f60033e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.906393][T10394] RAX: ffffffffffffffda RBX: 00007f60027a6080 RCX: 00007f600258d169 [ 195.906405][T10394] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 195.906416][T10394] RBP: 00007f60033e5090 R08: 0000000000000000 R09: 0000000000000000 [ 195.906426][T10394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.906436][T10394] R13: 0000000000000000 R14: 00007f60027a6080 R15: 00007ffd289e5268 [ 195.906464][T10394] [ 196.777136][T10418] netlink: 'syz.3.1374': attribute type 10 has an invalid length. [ 196.809374][T10420] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 196.815359][T10418] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 196.852305][T10418] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 196.900296][T10418] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 196.989403][T10420] syzkaller0: create flow: hash 912832940 index 2 [ 197.017601][ T3000] syzkaller0: tun_net_xmit 76 [ 197.023056][ T3000] syzkaller0: tun_net_xmit 48 [ 197.046955][ T6560] syzkaller0: tun_net_xmit 76 [ 197.070954][T10435] pimreg: entered allmulticast mode [ 197.082675][T10435] netlink: 'syz.1.1379': attribute type 15 has an invalid length. [ 197.114616][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1379'. [ 197.164391][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 197.266871][ T6563] syzkaller0: tun_net_xmit 76 [ 197.266916][T10416] syzkaller0: delete flow: hash 912832940 index 2 [ 197.394044][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'. [ 199.080754][T10464] lo: entered allmulticast mode [ 199.086732][T10464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.392271][T10484] netlink: 'syz.0.1391': attribute type 10 has an invalid length. [ 199.425179][T10484] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 199.451600][T10484] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 199.499721][T10484] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 199.527331][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 199.571082][T10495] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1395'. [ 199.598607][T10495] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1395'. [ 199.614155][T10489] lo speed is unknown, defaulting to 1000 [ 199.644078][T10495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1395'. [ 199.673243][T10499] netlink: 'syz.0.1396': attribute type 10 has an invalid length. [ 199.795975][T10495] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.823448][T10495] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 199.840574][T10485] infiniband syz0: set down [ 199.854507][T10495] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 199.856383][T10485] infiniband syz0: added veth0_to_batadv [ 199.953799][T10495] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.994634][T10485] RDS/IB: syz0: added [ 199.998921][T10485] smc: adding ib device syz0 with port count 1 [ 200.005358][T10485] smc: ib device syz0 port 1 has pnetid [ 200.023728][T10495] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 200.045802][T10495] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 200.151352][T10506] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.189428][T10495] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.223409][T10495] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 200.253845][T10495] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 200.374418][T10495] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.392588][T10495] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 200.412669][T10495] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 200.727626][T10495] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.772813][T10495] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.792008][T10495] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 200.832600][T10495] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.857618][T10495] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.876924][T10495] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 200.912292][T10495] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.935612][T10495] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.986982][T10495] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 200.988490][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'. [ 201.025426][T10495] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.076289][T10495] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.079481][T10528] netlink: 'syz.3.1401': attribute type 10 has an invalid length. [ 201.088601][T10495] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 201.225924][T10523] netlink: 'syz.3.1401': attribute type 6 has an invalid length. [ 201.366891][T10539] netlink: 'syz.4.1406': attribute type 10 has an invalid length. [ 201.377981][T10539] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 201.397819][T10542] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1407'. [ 201.416993][T10539] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 201.450268][T10539] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 201.570186][T10550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1408'. [ 201.783400][T10553] lo speed is unknown, defaulting to 1000 [ 201.826696][T10554] dccp_invalid_packet: P.Data Offset(0) too small [ 201.953286][T10555] syzkaller1: entered promiscuous mode [ 201.969329][T10555] syzkaller1: entered allmulticast mode [ 201.985766][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'. [ 202.255611][T10530] infiniband syz1: set down [ 202.263633][T10569] sctp: [Deprecated]: syz.2.1414 (pid 10569) Use of int in maxseg socket option. [ 202.263633][T10569] Use struct sctp_assoc_value instead [ 202.275707][T10530] infiniband syz1: added team_slave_0 [ 202.304321][T10530] syz1: rxe_create_cq: returned err = -12 [ 202.339963][T10530] infiniband syz1: Couldn't create ib_mad CQ [ 202.346911][T10530] infiniband syz1: Couldn't open port 1 [ 202.427982][T10530] RDS/IB: syz1: added [ 202.432542][T10530] smc: adding ib device syz1 with port count 1 [ 202.488818][T10530] smc: ib device syz1 port 1 has pnetid [ 202.510460][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1414'. [ 202.854795][T10600] FAULT_INJECTION: forcing a failure. [ 202.854795][T10600] name failslab, interval 1, probability 0, space 0, times 0 [ 202.914755][T10600] CPU: 1 UID: 0 PID: 10600 Comm: syz.1.1419 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 202.914783][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.914794][T10600] Call Trace: [ 202.914799][T10600] [ 202.914807][T10600] dump_stack_lvl+0x241/0x360 [ 202.914838][T10600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.914856][T10600] ? __pfx__printk+0x10/0x10 [ 202.914876][T10600] ? __kmalloc_noprof+0xb5/0x4c0 [ 202.914899][T10600] ? __pfx___might_resched+0x10/0x10 [ 202.914925][T10600] should_fail_ex+0x40a/0x550 [ 202.914952][T10600] should_failslab+0xac/0x100 [ 202.914975][T10600] __kmalloc_noprof+0xdd/0x4c0 [ 202.914993][T10600] ? ethnl_default_start+0x10a/0x570 [ 202.915018][T10600] ethnl_default_start+0x10a/0x570 [ 202.915046][T10600] genl_start+0x4dc/0x6d0 [ 202.915072][T10600] __netlink_dump_start+0x45c/0x790 [ 202.915104][T10600] genl_rcv_msg+0x894/0xec0 [ 202.915130][T10600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.915154][T10600] ? __pfx_genl_start+0x10/0x10 [ 202.915169][T10600] ? __pfx_genl_dumpit+0x10/0x10 [ 202.915182][T10600] ? __pfx_genl_done+0x10/0x10 [ 202.915215][T10600] ? __pfx_lock_acquire+0x10/0x10 [ 202.915236][T10600] ? __pfx_ethnl_default_start+0x10/0x10 [ 202.915255][T10600] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 202.915273][T10600] ? __pfx_ethnl_default_done+0x10/0x10 [ 202.915293][T10600] ? __pfx___might_resched+0x10/0x10 [ 202.915320][T10600] netlink_rcv_skb+0x206/0x480 [ 202.915341][T10600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.915359][T10600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.915391][T10600] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 202.915426][T10600] genl_rcv+0x28/0x40 [ 202.915439][T10600] netlink_unicast+0x7f6/0x990 [ 202.915466][T10600] ? __pfx_netlink_unicast+0x10/0x10 [ 202.915482][T10600] ? __virt_addr_valid+0x45f/0x530 [ 202.915499][T10600] ? __phys_addr_symbol+0x2f/0x70 [ 202.915514][T10600] ? __check_object_size+0x47a/0x730 [ 202.915555][T10600] netlink_sendmsg+0x8de/0xcb0 [ 202.915588][T10600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.915615][T10600] ? aa_sock_msg_perm+0x91/0x160 [ 202.915643][T10600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.915661][T10600] __sock_sendmsg+0x221/0x270 [ 202.915687][T10600] ____sys_sendmsg+0x53a/0x860 [ 202.915713][T10600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.915728][T10600] ? __fget_files+0x2a/0x410 [ 202.915752][T10600] ? __fget_files+0x2a/0x410 [ 202.915782][T10600] __sys_sendmsg+0x269/0x350 [ 202.915804][T10600] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.915834][T10600] ? do_sys_openat2+0x17a/0x1d0 [ 202.915883][T10600] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.915907][T10600] ? do_syscall_64+0x100/0x230 [ 202.915929][T10600] ? do_syscall_64+0xb6/0x230 [ 202.915951][T10600] do_syscall_64+0xf3/0x230 [ 202.915969][T10600] ? clear_bhb_loop+0x35/0x90 [ 202.915993][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.916014][T10600] RIP: 0033:0x7f28dad8d169 [ 202.916029][T10600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.916043][T10600] RSP: 002b:00007f28dbc48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.916062][T10600] RAX: ffffffffffffffda RBX: 00007f28dafa5fa0 RCX: 00007f28dad8d169 [ 202.916074][T10600] RDX: 0000000020000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 202.916084][T10600] RBP: 00007f28dbc48090 R08: 0000000000000000 R09: 0000000000000000 [ 202.916093][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.916103][T10600] R13: 0000000000000000 R14: 00007f28dafa5fa0 R15: 00007ffca4db5898 [ 202.916130][T10600] [ 202.964222][T10605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1420'. [ 203.088224][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1421'. [ 203.478307][T10619] netlink: 'syz.2.1423': attribute type 6 has an invalid length. [ 203.581953][T10621] netlink: 'syz.0.1424': attribute type 11 has an invalid length. [ 203.858940][T10634] hsr_slave_0: left promiscuous mode [ 203.871009][T10634] hsr_slave_1: left promiscuous mode [ 204.317755][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1434'. [ 204.438198][T10668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.723374][T10679] FAULT_INJECTION: forcing a failure. [ 204.723374][T10679] name failslab, interval 1, probability 0, space 0, times 0 [ 204.754990][T10679] CPU: 0 UID: 0 PID: 10679 Comm: syz.2.1437 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 204.755018][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.755028][T10679] Call Trace: [ 204.755035][T10679] [ 204.755043][T10679] dump_stack_lvl+0x241/0x360 [ 204.755069][T10679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.755087][T10679] ? __pfx__printk+0x10/0x10 [ 204.755106][T10679] ? fs_reclaim_acquire+0x93/0x130 [ 204.755123][T10679] ? __pfx___might_resched+0x10/0x10 [ 204.755141][T10679] ? dynamic_dname+0x144/0x1b0 [ 204.755159][T10679] should_fail_ex+0x40a/0x550 [ 204.755185][T10679] should_failslab+0xac/0x100 [ 204.755207][T10679] __kmalloc_noprof+0xdd/0x4c0 [ 204.755226][T10679] ? tomoyo_encode+0x26f/0x540 [ 204.755248][T10679] tomoyo_encode+0x26f/0x540 [ 204.755264][T10679] ? __pfx_sockfs_dname+0x10/0x10 [ 204.755288][T10679] tomoyo_realpath_from_path+0x59e/0x5e0 [ 204.755316][T10679] tomoyo_path_number_perm+0x239/0x770 [ 204.755335][T10679] ? __lock_acquire+0x1397/0x2100 [ 204.755360][T10679] ? tomoyo_path_number_perm+0x209/0x770 [ 204.755383][T10679] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 204.755439][T10679] ? __fget_files+0x2a/0x410 [ 204.755464][T10679] ? __fget_files+0x2a/0x410 [ 204.755491][T10679] security_file_ioctl+0xc6/0x2a0 [ 204.755514][T10679] __se_sys_ioctl+0x46/0x170 [ 204.755535][T10679] do_syscall_64+0xf3/0x230 [ 204.755554][T10679] ? clear_bhb_loop+0x35/0x90 [ 204.755578][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.755606][T10679] RIP: 0033:0x7fd943b8d169 [ 204.755621][T10679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.755635][T10679] RSP: 002b:00007fd9449d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.755654][T10679] RAX: ffffffffffffffda RBX: 00007fd943da5fa0 RCX: 00007fd943b8d169 [ 204.755667][T10679] RDX: 00004000000001c0 RSI: 00000000000089f2 RDI: 0000000000000003 [ 204.755678][T10679] RBP: 00007fd9449d2090 R08: 0000000000000000 R09: 0000000000000000 [ 204.755689][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.755699][T10679] R13: 0000000000000000 R14: 00007fd943da5fa0 R15: 00007ffd7cd3a918 [ 204.755727][T10679] [ 204.755746][T10679] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.125505][T10690] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1440'. [ 205.301489][T10702] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 205.388564][T10690] geneve1: left promiscuous mode [ 205.394155][T10690] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 205.463529][T10702] tipc: New replicast peer: 0.0.0.0 [ 205.504955][T10702] tipc: Enabled bearer , priority 10 [ 205.655183][T10714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1446'. [ 205.764130][T10722] netlink: 'syz.1.1448': attribute type 4 has an invalid length. [ 206.034485][T10735] __nla_validate_parse: 7 callbacks suppressed [ 206.034503][T10735] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1451'. [ 206.091947][T10731] lo speed is unknown, defaulting to 1000 [ 206.106877][T10735] netlink: 'syz.0.1451': attribute type 1 has an invalid length. [ 206.470160][T10755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1456'. [ 206.631539][T10762] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1459'. [ 206.654127][T10762] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 206.843773][T10769] netlink: 'syz.4.1461': attribute type 8 has an invalid length. [ 206.865715][T10769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1461'. [ 206.888042][ T5850] Bluetooth: hci4: link tx timeout [ 206.893377][ T5850] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 206.939510][T10765] syzkaller0: entered promiscuous mode [ 206.945136][T10765] syzkaller0: entered allmulticast mode [ 206.980898][T10775] sch_fq: defrate 511 ignored. [ 207.100744][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 207.165729][T10786] netlink: 'syz.1.1464': attribute type 4 has an invalid length. [ 207.180834][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 207.196230][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 207.216291][T10786] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1464'. [ 207.380883][T10792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.809513][T10771] netlink: 'syz.2.1463': attribute type 30 has an invalid length. [ 208.004517][T10806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1470'. [ 208.014028][T10807] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1471'. [ 208.108605][T10804] FAULT_INJECTION: forcing a failure. [ 208.108605][T10804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.123808][T10802] netlink: 'syz.2.1470': attribute type 4 has an invalid length. [ 208.139427][T10804] CPU: 0 UID: 0 PID: 10804 Comm: syz.4.1471 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 208.139454][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.139464][T10804] Call Trace: [ 208.139470][T10804] [ 208.139477][T10804] dump_stack_lvl+0x241/0x360 [ 208.139501][T10804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.139516][T10804] ? __pfx__printk+0x10/0x10 [ 208.139532][T10804] ? __pfx_lock_release+0x10/0x10 [ 208.139558][T10804] should_fail_ex+0x40a/0x550 [ 208.139583][T10804] _copy_from_iter+0x1df/0x1c40 [ 208.139599][T10804] ? __virt_addr_valid+0x183/0x530 [ 208.139614][T10804] ? __pfx_lock_release+0x10/0x10 [ 208.139638][T10804] ? __alloc_skb+0x28f/0x440 [ 208.139653][T10804] ? __pfx__copy_from_iter+0x10/0x10 [ 208.139670][T10804] ? __virt_addr_valid+0x183/0x530 [ 208.139684][T10804] ? __virt_addr_valid+0x183/0x530 [ 208.139697][T10804] ? __virt_addr_valid+0x45f/0x530 [ 208.139713][T10804] ? __phys_addr_symbol+0x2f/0x70 [ 208.139728][T10804] ? __check_object_size+0x47a/0x730 [ 208.139754][T10804] netlink_sendmsg+0x742/0xcb0 [ 208.139786][T10804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.139811][T10804] ? aa_sock_msg_perm+0x91/0x160 [ 208.139838][T10804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.139858][T10804] __sock_sendmsg+0x221/0x270 [ 208.139882][T10804] sock_write_iter+0x2d7/0x3f0 [ 208.139904][T10804] ? __pfx_sock_write_iter+0x10/0x10 [ 208.139943][T10804] do_iter_readv_writev+0x71a/0x9d0 [ 208.139968][T10804] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 208.139991][T10804] ? bpf_lsm_file_permission+0x9/0x10 [ 208.140027][T10804] ? rw_verify_area+0x243/0x630 [ 208.140047][T10804] vfs_writev+0x38b/0xbc0 [ 208.140081][T10804] ? __pfx_vfs_writev+0x10/0x10 [ 208.140113][T10804] ? __pfx_vfs_write+0x10/0x10 [ 208.140127][T10804] ? do_sys_openat2+0x17a/0x1d0 [ 208.140165][T10804] do_writev+0x1b6/0x360 [ 208.140190][T10804] ? __pfx_do_writev+0x10/0x10 [ 208.140210][T10804] ? do_syscall_64+0x100/0x230 [ 208.140230][T10804] ? do_syscall_64+0xb6/0x230 [ 208.140248][T10804] do_syscall_64+0xf3/0x230 [ 208.140264][T10804] ? clear_bhb_loop+0x35/0x90 [ 208.140286][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.140304][T10804] RIP: 0033:0x7f600258d169 [ 208.140318][T10804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.140330][T10804] RSP: 002b:00007f6003406038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 208.140346][T10804] RAX: ffffffffffffffda RBX: 00007f60027a5fa0 RCX: 00007f600258d169 [ 208.140358][T10804] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000007 [ 208.140367][T10804] RBP: 00007f6003406090 R08: 0000000000000000 R09: 0000000000000000 [ 208.140376][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.140385][T10804] R13: 0000000000000000 R14: 00007f60027a5fa0 R15: 00007ffd289e5268 [ 208.140413][T10804] [ 208.972515][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 210.590868][T10827] netlink: 'syz.2.1475': attribute type 8 has an invalid length. [ 211.308362][T10845] netlink: 'syz.0.1481': attribute type 30 has an invalid length. [ 211.614615][T10861] __nla_validate_parse: 1 callbacks suppressed [ 211.614636][T10861] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1484'. [ 212.021322][T10878] netlink: 'syz.2.1489': attribute type 8 has an invalid length. [ 212.051847][T10878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1489'. [ 212.081710][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'. [ 212.126962][T10880] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1490'. [ 213.160580][T10933] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1501'. [ 213.185290][T10933] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1501'. [ 213.216004][T10933] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1501'. [ 213.441344][T10947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1503'. [ 213.707375][T10955] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1505'. [ 213.740794][T10955] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1505'. [ 213.790644][T10955] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.895175][T10955] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.909991][T10962] netlink: 'syz.4.1507': attribute type 11 has an invalid length. [ 214.011901][T10955] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.168833][T10955] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.244857][T10974] lo speed is unknown, defaulting to 1000 [ 214.417827][T10955] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.457616][T10955] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.508243][T10955] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.640432][T10955] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.778526][T10998] ip_vti0: entered promiscuous mode [ 215.191490][T11016] netlink: 'syz.3.1520': attribute type 11 has an invalid length. [ 215.533560][T11030] netlink: 'syz.3.1525': attribute type 10 has an invalid length. [ 215.559494][T11030] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 215.596512][T11030] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 215.649058][T11030] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 216.671313][T11065] __nla_validate_parse: 13 callbacks suppressed [ 216.671331][T11065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1531'. [ 216.786300][T11074] raw_sendmsg: syz.3.1533 forgot to set AF_INET. Fix it! [ 216.829813][T11077] netlink: 'syz.0.1534': attribute type 10 has an invalid length. [ 217.092402][T11086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1537'. [ 217.094015][T11087] netlink: 'syz.0.1538': attribute type 1 has an invalid length. [ 217.194170][T11087] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1538'. [ 217.254752][T11087] batadv1: entered promiscuous mode [ 217.290345][T11087] batadv1: entered allmulticast mode [ 217.388550][T11099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1538'. [ 217.416030][T11101] geneve0: entered allmulticast mode [ 217.633751][T11109] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1541'. [ 217.708118][T11109] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1541'. [ 217.734951][T11109] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1541'. [ 217.785090][T11109] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.823446][T11109] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.928085][T11122] syz.4.1545: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.977329][T11122] CPU: 0 UID: 0 PID: 11122 Comm: syz.4.1545 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 217.977357][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.977368][T11122] Call Trace: [ 217.977374][T11122] [ 217.977382][T11122] dump_stack_lvl+0x241/0x360 [ 217.977408][T11122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.977426][T11122] ? __pfx__printk+0x10/0x10 [ 217.977448][T11122] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 217.977468][T11122] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 217.977492][T11122] warn_alloc+0x278/0x410 [ 217.977514][T11122] ? __pfx_warn_alloc+0x10/0x10 [ 217.977538][T11122] ? hash_ip_create+0x801/0x1670 [ 217.977557][T11122] ? __get_vm_area_node+0x1c8/0x2d0 [ 217.977579][T11122] ? __get_vm_area_node+0x25c/0x2d0 [ 217.977606][T11122] __vmalloc_node_range_noprof+0x62f/0x1380 [ 217.977646][T11122] ? rcu_is_watching+0x15/0xb0 [ 217.977665][T11122] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.977682][T11122] ? rcu_is_watching+0x15/0xb0 [ 217.977699][T11122] ? trace_kmalloc+0x1f/0xd0 [ 217.977718][T11122] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 217.977736][T11122] ? __kvmalloc_node_noprof+0x72/0x190 [ 217.977761][T11122] __kvmalloc_node_noprof+0x142/0x190 [ 217.977783][T11122] ? hash_ip_create+0x801/0x1670 [ 217.977804][T11122] hash_ip_create+0x801/0x1670 [ 217.977826][T11122] ? __pfx_lock_acquire+0x10/0x10 [ 217.977855][T11122] ? __pfx_hash_ip_create+0x10/0x10 [ 217.977878][T11122] ? __nla_parse+0x40/0x60 [ 217.977896][T11122] ? __pfx_hash_ip_create+0x10/0x10 [ 217.977918][T11122] ip_set_create+0xa78/0x1960 [ 217.977938][T11122] ? ip_set_create+0x48a/0x1960 [ 217.977959][T11122] ? __pfx_ip_set_create+0x10/0x10 [ 217.978010][T11122] ? nfnetlink_rcv_msg+0x225/0x1180 [ 217.978028][T11122] nfnetlink_rcv_msg+0xbec/0x1180 [ 217.978045][T11122] ? nfnetlink_rcv_msg+0x225/0x1180 [ 217.978081][T11122] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 217.978144][T11122] netlink_rcv_skb+0x206/0x480 [ 217.978165][T11122] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 217.978183][T11122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.978216][T11122] ? apparmor_capable+0x13b/0x1b0 [ 217.978236][T11122] ? bpf_lsm_capable+0x9/0x10 [ 217.978256][T11122] ? security_capable+0x7e/0x2d0 [ 217.978284][T11122] nfnetlink_rcv+0x297/0x2ab0 [ 217.978300][T11122] ? __pfx_validate_chain+0x10/0x10 [ 217.978331][T11122] ? mark_lock+0x9a/0x360 [ 217.978346][T11122] ? __pfx_validate_chain+0x10/0x10 [ 217.978366][T11122] ? __lock_acquire+0x1397/0x2100 [ 217.978394][T11122] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 217.978414][T11122] ? mark_lock+0x9a/0x360 [ 217.978433][T11122] ? __lock_acquire+0x1397/0x2100 [ 217.978484][T11122] ? __pfx_lock_release+0x10/0x10 [ 217.978507][T11122] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.978527][T11122] ? __pfx_lock_release+0x10/0x10 [ 217.978563][T11122] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.978586][T11122] netlink_unicast+0x7f6/0x990 [ 217.978612][T11122] ? __pfx_netlink_unicast+0x10/0x10 [ 217.978628][T11122] ? __virt_addr_valid+0x45f/0x530 [ 217.978644][T11122] ? __phys_addr_symbol+0x2f/0x70 [ 217.978658][T11122] ? __check_object_size+0x47a/0x730 [ 217.978683][T11122] netlink_sendmsg+0x8de/0xcb0 [ 217.978715][T11122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.978740][T11122] ? aa_sock_msg_perm+0x91/0x160 [ 217.978768][T11122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.978786][T11122] __sock_sendmsg+0x221/0x270 [ 217.978811][T11122] ____sys_sendmsg+0x53a/0x860 [ 217.978836][T11122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.978851][T11122] ? __fget_files+0x2a/0x410 [ 217.978875][T11122] ? __fget_files+0x2a/0x410 [ 217.978904][T11122] __sys_sendmsg+0x269/0x350 [ 217.978927][T11122] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.978987][T11122] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.979019][T11122] ? do_syscall_64+0x100/0x230 [ 217.979042][T11122] ? do_syscall_64+0xb6/0x230 [ 217.979063][T11122] do_syscall_64+0xf3/0x230 [ 217.979080][T11122] ? clear_bhb_loop+0x35/0x90 [ 217.979102][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.979123][T11122] RIP: 0033:0x7f600258d169 [ 217.979138][T11122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.979151][T11122] RSP: 002b:00007f60033c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.979169][T11122] RAX: ffffffffffffffda RBX: 00007f60027a6160 RCX: 00007f600258d169 [ 217.979181][T11122] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000007 [ 217.979192][T11122] RBP: 00007f600260e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 217.979202][T11122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.979211][T11122] R13: 0000000000000000 R14: 00007f60027a6160 R15: 00007ffd289e5268 [ 217.979238][T11122] [ 217.979245][T11122] Mem-Info: [ 218.025256][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1546'. [ 218.046806][T11122] active_anon:9887 inactive_anon:0 isolated_anon:0 [ 218.046806][T11122] active_file:1911 inactive_file:38361 isolated_file:0 [ 218.046806][T11122] unevictable:768 dirty:191 writeback:0 [ 218.046806][T11122] slab_reclaimable:10490 slab_unreclaimable:108622 [ 218.046806][T11122] mapped:29296 shmem:1441 pagetables:960 [ 218.046806][T11122] sec_pagetables:0 bounce:0 [ 218.046806][T11122] kernel_misc_reclaimable:0 [ 218.046806][T11122] free:1310533 free_pcp:658 free_cma:0 [ 218.258612][T11109] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.336174][T11122] Node 0 active_anon:39904kB inactive_anon:0kB active_file:7644kB inactive_file:153368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117200kB dirty:764kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12916kB pagetables:4064kB sec_pagetables:0kB all_unreclaimable? no [ 218.446999][T11109] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.448080][T11122] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 218.463027][T11142] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 218.604864][T11142] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 218.618881][T11122] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.620132][T11142] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 218.679811][T11142] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 218.733617][T11109] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.743553][T11122] lowmem_reserve[]: 0 2489 2490 0 0 [ 218.752404][T11122] Node 0 DMA32 free:1318536kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:40380kB inactive_anon:0kB active_file:7644kB inactive_file:153060kB unevictable:1536kB writepending:844kB present:3129332kB managed:2549728kB mlocked:0kB bounce:0kB free_pcp:1308kB local_pcp:472kB free_cma:0kB [ 218.807115][T11109] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.836700][T11122] lowmem_reserve[]: 0 0 0 0 0 [ 218.841507][T11122] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 218.914738][T11109] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.946706][T11109] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.956779][T11122] lowmem_reserve[]: 0 0 0 0 0 [ 218.961908][T11122] Node 1 Normal free:3907732kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.999995][T11122] lowmem_reserve[]: 0 0 0 0 0 [ 219.005005][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 219.013352][T11122] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 219.070375][T11122] Node 0 DMA32: 123*4kB (UME) 52*8kB (UE) 23*16kB (UME) 324*32kB (UME) 149*64kB (UME) 59*128kB (UME) 71*256kB (UM) 48*512kB (UM) 28*1024kB (UME) 7*2048kB (UME) 294*4096kB (UM) = 1318716kB [ 219.156566][T11122] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 219.190172][T11109] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.216914][T11122] Node 1 Normal: 203*4kB (UME) 57*8kB (UME) 40*16kB (UME) 227*32kB (UME) 83*64kB (UME) 28*128kB (UME) 18*256kB (UME) 10*512kB (UME) 7*1024kB (UME) 3*2048kB (U) 944*4096kB (M) = 3907732kB [ 219.256734][T11109] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.259767][T11122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.289635][T11109] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.302273][T11122] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 219.316956][T11109] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.343240][T11122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.386996][T11122] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.392610][T11109] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.408079][T11122] 41712 total pagecache pages [ 219.412825][T11122] 0 pages in swap cache [ 219.418428][T11122] Free swap = 124996kB [ 219.422623][T11122] Total swap = 124996kB [ 219.451457][T11122] 2097051 pages RAM [ 219.455666][T11122] 0 pages HighMem/MovableOnly [ 219.455760][T11109] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.467892][T11122] 427897 pages reserved [ 219.482751][T11109] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.496937][T11122] 0 pages cma reserved [ 219.500102][T11169] FAULT_INJECTION: forcing a failure. [ 219.500102][T11169] name failslab, interval 1, probability 0, space 0, times 0 [ 219.517082][T11109] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.537340][T11169] CPU: 1 UID: 0 PID: 11169 Comm: syz.1.1557 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 219.537365][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.537375][T11169] Call Trace: [ 219.537381][T11169] [ 219.537388][T11169] dump_stack_lvl+0x241/0x360 [ 219.537414][T11169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.537432][T11169] ? __pfx__printk+0x10/0x10 [ 219.537451][T11169] ? __kmalloc_noprof+0xb5/0x4c0 [ 219.537472][T11169] ? __pfx___might_resched+0x10/0x10 [ 219.537493][T11169] should_fail_ex+0x40a/0x550 [ 219.537520][T11169] should_failslab+0xac/0x100 [ 219.537541][T11169] __kmalloc_noprof+0xdd/0x4c0 [ 219.537559][T11169] ? ethnl_default_start+0x10a/0x570 [ 219.537583][T11169] ethnl_default_start+0x10a/0x570 [ 219.537609][T11169] genl_start+0x4dc/0x6d0 [ 219.537633][T11169] __netlink_dump_start+0x45c/0x790 [ 219.537664][T11169] genl_rcv_msg+0x894/0xec0 [ 219.537688][T11169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.537709][T11169] ? __pfx_genl_start+0x10/0x10 [ 219.537723][T11169] ? __pfx_genl_dumpit+0x10/0x10 [ 219.537736][T11169] ? __pfx_genl_done+0x10/0x10 [ 219.537767][T11169] ? __pfx_lock_acquire+0x10/0x10 [ 219.537788][T11169] ? __pfx_ethnl_default_start+0x10/0x10 [ 219.537808][T11169] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 219.537827][T11169] ? __pfx_ethnl_default_done+0x10/0x10 [ 219.537847][T11169] ? __pfx___might_resched+0x10/0x10 [ 219.537890][T11169] netlink_rcv_skb+0x206/0x480 [ 219.537913][T11169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.537932][T11169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.537965][T11169] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 219.538001][T11169] genl_rcv+0x28/0x40 [ 219.538016][T11169] netlink_unicast+0x7f6/0x990 [ 219.538042][T11169] ? __pfx_netlink_unicast+0x10/0x10 [ 219.538059][T11169] ? __virt_addr_valid+0x45f/0x530 [ 219.538076][T11169] ? __phys_addr_symbol+0x2f/0x70 [ 219.538090][T11169] ? __check_object_size+0x47a/0x730 [ 219.538114][T11169] netlink_sendmsg+0x8de/0xcb0 [ 219.538145][T11169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.538170][T11169] ? aa_sock_msg_perm+0x91/0x160 [ 219.538198][T11169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.538216][T11169] __sock_sendmsg+0x221/0x270 [ 219.538239][T11169] ____sys_sendmsg+0x53a/0x860 [ 219.538266][T11169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.538280][T11169] ? __fget_files+0x2a/0x410 [ 219.538305][T11169] ? __fget_files+0x2a/0x410 [ 219.538333][T11169] __sys_sendmsg+0x269/0x350 [ 219.538356][T11169] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.538383][T11169] ? do_sys_openat2+0x17a/0x1d0 [ 219.538430][T11169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.538453][T11169] ? do_syscall_64+0x100/0x230 [ 219.538476][T11169] ? do_syscall_64+0xb6/0x230 [ 219.538497][T11169] do_syscall_64+0xf3/0x230 [ 219.538515][T11169] ? clear_bhb_loop+0x35/0x90 [ 219.538539][T11169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.538558][T11169] RIP: 0033:0x7f28dad8d169 [ 219.538574][T11169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.538588][T11169] RSP: 002b:00007f28dbc48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.538606][T11169] RAX: ffffffffffffffda RBX: 00007f28dafa5fa0 RCX: 00007f28dad8d169 [ 219.538618][T11169] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 219.538629][T11169] RBP: 00007f28dbc48090 R08: 0000000000000000 R09: 0000000000000000 [ 219.538639][T11169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.538649][T11169] R13: 0000000000000000 R14: 00007f28dafa5fa0 R15: 00007ffca4db5898 [ 219.538676][T11169] [ 220.063603][T11172] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 220.071643][T11172] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 220.082049][T11172] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 220.094659][T11172] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 220.212094][T11179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1559'. [ 220.238775][T11178] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 25 [ 220.265907][T11184] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1563'. [ 220.374439][T11184] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.425670][T11191] netlink: 'syz.0.1561': attribute type 1 has an invalid length. [ 220.455554][T11194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.461391][T11191] netlink: 'syz.0.1561': attribute type 11 has an invalid length. [ 220.475017][T11194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.515247][T11184] xt_connbytes: Forcing CT accounting to be enabled [ 220.524521][T11184] Cannot find add_set index 0 as target [ 220.596124][T11198] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 221.044284][T11210] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.132233][T11210] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.255689][T11221] netlink: 'syz.2.1573': attribute type 10 has an invalid length. [ 221.280514][T11210] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.308760][T11221] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 221.332554][T11221] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 221.372237][T11221] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 221.418101][T11210] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.558785][T11235] dccp_invalid_packet: P.Data Offset(0) too small [ 221.644487][T11240] netlink: 'syz.1.1578': attribute type 4 has an invalid length. [ 221.647395][T11210] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.683928][T11210] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.698583][T11234] __nla_validate_parse: 7 callbacks suppressed [ 221.698605][T11234] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1579'. [ 221.740731][T11210] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.826191][T11210] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.910204][T11250] netlink: 'syz.1.1581': attribute type 11 has an invalid length. [ 222.362626][T11270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1586'. [ 222.612257][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 222.612729][T11276] netlink: 'syz.1.1589': attribute type 10 has an invalid length. [ 222.652122][T11276] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 222.686115][T11276] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 222.726781][T11276] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 222.889673][T11286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.041147][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'. [ 223.133412][T11294] netlink: 'syz.4.1594': attribute type 11 has an invalid length. [ 223.273048][T11300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1597'. [ 223.415671][T11304] xt_CT: No such helper "syz0" [ 223.495930][T11316] netlink: 'syz.1.1603': attribute type 10 has an invalid length. [ 223.504357][T11316] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 223.540688][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1605'. [ 223.540745][T11316] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 223.563607][T11318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1604'. [ 223.574242][T11316] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 223.594027][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 223.656040][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 223.929713][T11339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.009375][T11343] netlink: 'syz.3.1611': attribute type 11 has an invalid length. [ 224.233628][T11350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.252932][T11352] netlink: 'syz.3.1616': attribute type 10 has an invalid length. [ 224.290999][T11352] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 224.307051][T11352] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 224.332415][T11352] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 224.545062][T11366] FAULT_INJECTION: forcing a failure. [ 224.545062][T11366] name failslab, interval 1, probability 0, space 0, times 0 [ 224.598350][T11366] CPU: 1 UID: 0 PID: 11366 Comm: syz.0.1621 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 224.598377][T11366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.598387][T11366] Call Trace: [ 224.598393][T11366] [ 224.598401][T11366] dump_stack_lvl+0x241/0x360 [ 224.598428][T11366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.598446][T11366] ? __pfx__printk+0x10/0x10 [ 224.598464][T11366] ? __kmalloc_noprof+0xb5/0x4c0 [ 224.598486][T11366] ? __pfx___might_resched+0x10/0x10 [ 224.598505][T11366] ? aa_get_newest_label+0xff/0x6f0 [ 224.598533][T11366] should_fail_ex+0x40a/0x550 [ 224.598560][T11366] should_failslab+0xac/0x100 [ 224.598583][T11366] __kmalloc_noprof+0xdd/0x4c0 [ 224.598602][T11366] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 224.598619][T11366] ? apparmor_capable+0x13b/0x1b0 [ 224.598641][T11366] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 224.598672][T11366] genl_rcv_msg+0x80b/0xec0 [ 224.598697][T11366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.598741][T11366] ? __pfx_lock_acquire+0x10/0x10 [ 224.598762][T11366] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 224.598783][T11366] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 224.598803][T11366] ? __pfx_nl80211_post_doit+0x10/0x10 [ 224.598824][T11366] ? __pfx___might_resched+0x10/0x10 [ 224.598854][T11366] netlink_rcv_skb+0x206/0x480 [ 224.598877][T11366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.598895][T11366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.598928][T11366] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 224.598963][T11366] genl_rcv+0x28/0x40 [ 224.598977][T11366] netlink_unicast+0x7f6/0x990 [ 224.599005][T11366] ? __pfx_netlink_unicast+0x10/0x10 [ 224.599021][T11366] ? __virt_addr_valid+0x45f/0x530 [ 224.599039][T11366] ? __phys_addr_symbol+0x2f/0x70 [ 224.599053][T11366] ? __check_object_size+0x47a/0x730 [ 224.599078][T11366] netlink_sendmsg+0x8de/0xcb0 [ 224.599111][T11366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.599137][T11366] ? aa_sock_msg_perm+0x91/0x160 [ 224.599164][T11366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.599183][T11366] __sock_sendmsg+0x221/0x270 [ 224.599208][T11366] ____sys_sendmsg+0x53a/0x860 [ 224.599234][T11366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.599249][T11366] ? __fget_files+0x2a/0x410 [ 224.599274][T11366] ? __fget_files+0x2a/0x410 [ 224.599304][T11366] __sys_sendmsg+0x269/0x350 [ 224.599326][T11366] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.599357][T11366] ? do_sys_openat2+0x17a/0x1d0 [ 224.599416][T11366] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.599440][T11366] ? do_syscall_64+0x100/0x230 [ 224.599463][T11366] ? do_syscall_64+0xb6/0x230 [ 224.599484][T11366] do_syscall_64+0xf3/0x230 [ 224.599503][T11366] ? clear_bhb_loop+0x35/0x90 [ 224.599527][T11366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.599547][T11366] RIP: 0033:0x7f40fed8d169 [ 224.599562][T11366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.599576][T11366] RSP: 002b:00007f40ffbbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.599594][T11366] RAX: ffffffffffffffda RBX: 00007f40fefa5fa0 RCX: 00007f40fed8d169 [ 224.599606][T11366] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000003 [ 224.599618][T11366] RBP: 00007f40ffbbd090 R08: 0000000000000000 R09: 0000000000000000 [ 224.599628][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.599638][T11366] R13: 0000000000000000 R14: 00007f40fefa5fa0 R15: 00007ffec7ce44c8 [ 224.599671][T11366] [ 225.153376][T11378] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1620'. [ 225.280838][T11377] geneve0: left allmulticast mode [ 225.321383][T11377] macvtap1: left promiscuous mode [ 225.366870][T11377] macvtap1: left allmulticast mode [ 225.664547][T11395] netlink: 'syz.2.1632': attribute type 10 has an invalid length. [ 225.704389][T11395] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 225.738350][T11395] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 225.763816][T11395] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 225.924591][T11403] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 226.223959][T11424] netlink: 'syz.4.1640': attribute type 4 has an invalid length. [ 226.235950][T11428] netlink: 'syz.3.1641': attribute type 21 has an invalid length. [ 226.250081][T11424] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 226.271797][T11428] netlink: 'syz.3.1641': attribute type 4 has an invalid length. [ 226.317722][T11428] netlink: 'syz.3.1641': attribute type 3 has an invalid length. [ 226.337056][T11432] FAULT_INJECTION: forcing a failure. [ 226.337056][T11432] name failslab, interval 1, probability 0, space 0, times 0 [ 226.346421][T11424] lo speed is unknown, defaulting to 1000 [ 226.378244][T11432] CPU: 0 UID: 0 PID: 11432 Comm: syz.0.1643 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 226.378275][T11432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.378286][T11432] Call Trace: [ 226.378293][T11432] [ 226.378301][T11432] dump_stack_lvl+0x241/0x360 [ 226.378330][T11432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.378349][T11432] ? __pfx__printk+0x10/0x10 [ 226.378374][T11432] ? ref_tracker_alloc+0x332/0x490 [ 226.378401][T11432] should_fail_ex+0x40a/0x550 [ 226.378429][T11432] should_failslab+0xac/0x100 [ 226.378451][T11432] ? skb_clone+0x20c/0x390 [ 226.378477][T11432] kmem_cache_alloc_noprof+0x70/0x380 [ 226.378505][T11432] skb_clone+0x20c/0x390 [ 226.378527][T11432] __netlink_deliver_tap+0x3c4/0x7f0 [ 226.378561][T11432] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.378581][T11432] netlink_deliver_tap+0x19d/0x1b0 [ 226.378602][T11432] netlink_sendskb+0x68/0x140 [ 226.378622][T11432] netlink_unicast+0x39d/0x990 [ 226.378640][T11432] ? __asan_memcpy+0x40/0x70 [ 226.378665][T11432] ? __pfx_netlink_unicast+0x10/0x10 [ 226.378697][T11432] netlink_rcv_skb+0x294/0x480 [ 226.378719][T11432] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.378739][T11432] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.378774][T11432] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 226.378811][T11432] genl_rcv+0x28/0x40 [ 226.378827][T11432] netlink_unicast+0x7f6/0x990 [ 226.378856][T11432] ? __pfx_netlink_unicast+0x10/0x10 [ 226.378873][T11432] ? __virt_addr_valid+0x45f/0x530 [ 226.378891][T11432] ? __phys_addr_symbol+0x2f/0x70 [ 226.378907][T11432] ? __check_object_size+0x47a/0x730 [ 226.378931][T11432] netlink_sendmsg+0x8de/0xcb0 [ 226.378965][T11432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.378991][T11432] ? aa_sock_msg_perm+0x91/0x160 [ 226.379022][T11432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.379041][T11432] __sock_sendmsg+0x221/0x270 [ 226.379067][T11432] ____sys_sendmsg+0x53a/0x860 [ 226.379095][T11432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.379110][T11432] ? __fget_files+0x2a/0x410 [ 226.379136][T11432] ? __fget_files+0x2a/0x410 [ 226.379170][T11432] __sys_sendmsg+0x269/0x350 [ 226.379194][T11432] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.379223][T11432] ? do_sys_openat2+0x17a/0x1d0 [ 226.379267][T11432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.379292][T11432] ? do_syscall_64+0x100/0x230 [ 226.379315][T11432] ? do_syscall_64+0xb6/0x230 [ 226.379337][T11432] do_syscall_64+0xf3/0x230 [ 226.379357][T11432] ? clear_bhb_loop+0x35/0x90 [ 226.379382][T11432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.379402][T11432] RIP: 0033:0x7f40fed8d169 [ 226.379418][T11432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.379432][T11432] RSP: 002b:00007f40ffbbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.379452][T11432] RAX: ffffffffffffffda RBX: 00007f40fefa5fa0 RCX: 00007f40fed8d169 [ 226.379465][T11432] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 0000000000000003 [ 226.379477][T11432] RBP: 00007f40ffbbd090 R08: 0000000000000000 R09: 0000000000000000 [ 226.379488][T11432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.379499][T11432] R13: 0000000000000000 R14: 00007f40fefa5fa0 R15: 00007ffec7ce44c8 [ 226.379528][T11432] [ 226.950381][T11438] : renamed from bond0 (while UP) [ 227.113530][T11451] __nla_validate_parse: 5 callbacks suppressed [ 227.113549][T11451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1648'. [ 227.187896][T11451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1648'. [ 227.219835][T11449] lo speed is unknown, defaulting to 1000 [ 227.358351][T11460] tipc: Enabling of bearer rejected, failed to enable media [ 227.370973][T11459] x_tables: duplicate underflow at hook 4 [ 227.430855][T11461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1651'. [ 227.445835][T11461] netlink: 'syz.1.1651': attribute type 15 has an invalid length. [ 227.854630][T11469] xt_CT: No such helper "pptp" [ 228.227890][T11479] netlink: 'syz.0.1659': attribute type 13 has an invalid length. [ 228.251959][T11479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1659'. [ 228.798243][T11501] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1666'. [ 228.862079][T11501] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1666'. [ 229.022374][T11510] FAULT_INJECTION: forcing a failure. [ 229.022374][T11510] name failslab, interval 1, probability 0, space 0, times 0 [ 229.056857][T11510] CPU: 0 UID: 0 PID: 11510 Comm: syz.4.1669 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 229.056884][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.056894][T11510] Call Trace: [ 229.056901][T11510] [ 229.056908][T11510] dump_stack_lvl+0x241/0x360 [ 229.056934][T11510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.056951][T11510] ? __pfx__printk+0x10/0x10 [ 229.056970][T11510] ? __kmalloc_cache_noprof+0x48/0x390 [ 229.056992][T11510] ? __pfx___might_resched+0x10/0x10 [ 229.057014][T11510] should_fail_ex+0x40a/0x550 [ 229.057039][T11510] should_failslab+0xac/0x100 [ 229.057061][T11510] __kmalloc_cache_noprof+0x70/0x390 [ 229.057078][T11510] ? ila_xlat_nl_cmd_add_mapping+0x2e6/0x17d0 [ 229.057100][T11510] ila_xlat_nl_cmd_add_mapping+0x2e6/0x17d0 [ 229.057133][T11510] ? __pfx_ila_xlat_nl_cmd_add_mapping+0x10/0x10 [ 229.057157][T11510] ? __nla_parse+0x40/0x60 [ 229.057175][T11510] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 229.057201][T11510] genl_rcv_msg+0xb1f/0xec0 [ 229.057225][T11510] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.057262][T11510] ? __pfx_lock_acquire+0x10/0x10 [ 229.057283][T11510] ? __pfx_ila_xlat_nl_cmd_add_mapping+0x10/0x10 [ 229.057302][T11510] ? __pfx___might_resched+0x10/0x10 [ 229.057330][T11510] netlink_rcv_skb+0x206/0x480 [ 229.057352][T11510] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.057370][T11510] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.057417][T11510] genl_rcv+0x28/0x40 [ 229.057431][T11510] netlink_unicast+0x7f6/0x990 [ 229.057460][T11510] ? __pfx_netlink_unicast+0x10/0x10 [ 229.057477][T11510] ? __virt_addr_valid+0x45f/0x530 [ 229.057495][T11510] ? __phys_addr_symbol+0x2f/0x70 [ 229.057509][T11510] ? __check_object_size+0x47a/0x730 [ 229.057533][T11510] netlink_sendmsg+0x8de/0xcb0 [ 229.057564][T11510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.057587][T11510] ? aa_sock_msg_perm+0x91/0x160 [ 229.057613][T11510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.057630][T11510] __sock_sendmsg+0x221/0x270 [ 229.057651][T11510] ____sys_sendmsg+0x53a/0x860 [ 229.057677][T11510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.057692][T11510] ? __fget_files+0x2a/0x410 [ 229.057718][T11510] ? __fget_files+0x2a/0x410 [ 229.057745][T11510] __sys_sendmsg+0x269/0x350 [ 229.057767][T11510] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.057797][T11510] ? do_sys_openat2+0x17a/0x1d0 [ 229.057854][T11510] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 229.057879][T11510] ? do_syscall_64+0x100/0x230 [ 229.057901][T11510] ? do_syscall_64+0xb6/0x230 [ 229.057922][T11510] do_syscall_64+0xf3/0x230 [ 229.057938][T11510] ? clear_bhb_loop+0x35/0x90 [ 229.057962][T11510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.057981][T11510] RIP: 0033:0x7f600258d169 [ 229.057996][T11510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.058010][T11510] RSP: 002b:00007f6003406038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.058028][T11510] RAX: ffffffffffffffda RBX: 00007f60027a5fa0 RCX: 00007f600258d169 [ 229.058042][T11510] RDX: 0000000000040000 RSI: 0000400000000100 RDI: 0000000000000003 [ 229.058053][T11510] RBP: 00007f6003406090 R08: 0000000000000000 R09: 0000000000000000 [ 229.058064][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.058075][T11510] R13: 0000000000000000 R14: 00007f60027a5fa0 R15: 00007ffd289e5268 [ 229.058101][T11510] [ 229.468620][T11517] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1671'. [ 229.569216][T11517] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1671'. [ 229.615587][T11519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.702109][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1672'. [ 229.954349][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1674'. [ 230.073567][T11543] FAULT_INJECTION: forcing a failure. [ 230.073567][T11543] name failslab, interval 1, probability 0, space 0, times 0 [ 230.115221][T11543] CPU: 0 UID: 0 PID: 11543 Comm: syz.2.1680 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 230.115250][T11543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.115261][T11543] Call Trace: [ 230.115269][T11543] [ 230.115277][T11543] dump_stack_lvl+0x241/0x360 [ 230.115305][T11543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.115324][T11543] ? __pfx__printk+0x10/0x10 [ 230.115344][T11543] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 230.115368][T11543] ? __pfx___might_resched+0x10/0x10 [ 230.115395][T11543] should_fail_ex+0x40a/0x550 [ 230.115424][T11543] should_failslab+0xac/0x100 [ 230.115447][T11543] __kmalloc_node_noprof+0xe1/0x4d0 [ 230.115468][T11543] ? crypto_create_tfm_node+0x88/0x3d0 [ 230.115494][T11543] crypto_create_tfm_node+0x88/0x3d0 [ 230.115519][T11543] crypto_alloc_tfm_node+0x161/0x360 [ 230.115547][T11543] rxe_icrc_init+0x1f/0xa0 [ 230.115571][T11543] rxe_register_device+0x20a/0x350 [ 230.115590][T11543] rxe_net_add+0x74/0xf0 [ 230.115608][T11543] rxe_newlink+0xde/0x1a0 [ 230.115631][T11543] nldev_newlink+0x5ea/0x680 [ 230.115654][T11543] ? __pfx_nldev_newlink+0x10/0x10 [ 230.115759][T11543] ? __pfx_aa_get_newest_label+0x10/0x10 [ 230.115783][T11543] ? __pfx_aa_get_newest_label+0x10/0x10 [ 230.115822][T11543] ? bpf_lsm_capable+0x9/0x10 [ 230.115843][T11543] ? security_capable+0x7e/0x2d0 [ 230.115868][T11543] ? __pfx_nldev_newlink+0x10/0x10 [ 230.115889][T11543] rdma_nl_rcv+0x6dd/0x9e0 [ 230.115920][T11543] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 230.115974][T11543] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.116010][T11543] netlink_unicast+0x7f6/0x990 [ 230.116040][T11543] ? __pfx_netlink_unicast+0x10/0x10 [ 230.116057][T11543] ? __virt_addr_valid+0x45f/0x530 [ 230.116075][T11543] ? __phys_addr_symbol+0x2f/0x70 [ 230.116091][T11543] ? __check_object_size+0x47a/0x730 [ 230.116118][T11543] netlink_sendmsg+0x8de/0xcb0 [ 230.116152][T11543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.116179][T11543] ? aa_sock_msg_perm+0x91/0x160 [ 230.116207][T11543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.116227][T11543] __sock_sendmsg+0x221/0x270 [ 230.116252][T11543] ____sys_sendmsg+0x53a/0x860 [ 230.116277][T11543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.116293][T11543] ? __fget_files+0x2a/0x410 [ 230.116318][T11543] ? __fget_files+0x2a/0x410 [ 230.116349][T11543] __sys_sendmsg+0x269/0x350 [ 230.116373][T11543] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.116406][T11543] ? do_sys_openat2+0x17a/0x1d0 [ 230.116456][T11543] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.116482][T11543] ? do_syscall_64+0x100/0x230 [ 230.116506][T11543] ? do_syscall_64+0xb6/0x230 [ 230.116528][T11543] do_syscall_64+0xf3/0x230 [ 230.116547][T11543] ? clear_bhb_loop+0x35/0x90 [ 230.116572][T11543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.116596][T11543] RIP: 0033:0x7fd943b8d169 [ 230.116611][T11543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.116625][T11543] RSP: 002b:00007fd9449d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.116642][T11543] RAX: ffffffffffffffda RBX: 00007fd943da5fa0 RCX: 00007fd943b8d169 [ 230.116654][T11543] RDX: 0000000000000844 RSI: 0000400000000000 RDI: 0000000000000003 [ 230.116665][T11543] RBP: 00007fd9449d2090 R08: 0000000000000000 R09: 0000000000000000 [ 230.116676][T11543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.116687][T11543] R13: 0000000000000000 R14: 00007fd943da5fa0 R15: 00007ffd7cd3a918 [ 230.116717][T11543] [ 230.499934][T11543] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 230.507756][T11551] FAULT_INJECTION: forcing a failure. [ 230.507756][T11551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.521476][T11551] CPU: 0 UID: 0 PID: 11551 Comm: syz.4.1682 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 230.521503][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.521514][T11551] Call Trace: [ 230.521521][T11551] [ 230.521530][T11551] dump_stack_lvl+0x241/0x360 [ 230.521559][T11551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.521578][T11551] ? __pfx__printk+0x10/0x10 [ 230.521603][T11551] ? snprintf+0xda/0x120 [ 230.521628][T11551] should_fail_ex+0x40a/0x550 [ 230.521658][T11551] _copy_to_user+0x31/0xb0 [ 230.521681][T11551] simple_read_from_buffer+0xca/0x150 [ 230.521717][T11551] proc_fail_nth_read+0x1e9/0x250 [ 230.521742][T11551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.521767][T11551] ? rw_verify_area+0x243/0x630 [ 230.521783][T11551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.521806][T11551] vfs_read+0x1f8/0xb40 [ 230.521825][T11551] ? fdget_pos+0x254/0x320 [ 230.521848][T11551] ? __pfx___mutex_lock+0x10/0x10 [ 230.521869][T11551] ? __pfx_vfs_read+0x10/0x10 [ 230.521883][T11551] ? do_sys_openat2+0x17a/0x1d0 [ 230.521908][T11551] ? __fget_files+0x2a/0x410 [ 230.521931][T11551] ? __fget_files+0x395/0x410 [ 230.521951][T11551] ? __fget_files+0x2a/0x410 [ 230.521981][T11551] ksys_read+0x18f/0x2b0 [ 230.522002][T11551] ? __pfx_ksys_read+0x10/0x10 [ 230.522021][T11551] ? do_syscall_64+0x100/0x230 [ 230.522043][T11551] ? do_syscall_64+0xb6/0x230 [ 230.522065][T11551] do_syscall_64+0xf3/0x230 [ 230.522084][T11551] ? clear_bhb_loop+0x35/0x90 [ 230.522109][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.522130][T11551] RIP: 0033:0x7f600258bb7c [ 230.522146][T11551] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 230.522162][T11551] RSP: 002b:00007f6003406030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.522181][T11551] RAX: ffffffffffffffda RBX: 00007f60027a5fa0 RCX: 00007f600258bb7c [ 230.522194][T11551] RDX: 000000000000000f RSI: 00007f60034060a0 RDI: 0000000000000004 [ 230.522204][T11551] RBP: 00007f6003406090 R08: 0000000000000000 R09: 0000000000000000 [ 230.522215][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.522226][T11551] R13: 0000000000000000 R14: 00007f60027a5fa0 R15: 00007ffd289e5268 [ 230.522254][T11551] [ 231.033455][T11560] lo speed is unknown, defaulting to 1000 [ 231.147379][T11556] lo speed is unknown, defaulting to 1000 [ 231.202555][T11567] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.936887][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 232.122343][T11615] __nla_validate_parse: 3 callbacks suppressed [ 232.122362][T11615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1697'. [ 232.791964][T11637] FAULT_INJECTION: forcing a failure. [ 232.791964][T11637] name failslab, interval 1, probability 0, space 0, times 0 [ 232.870311][T11637] CPU: 0 UID: 0 PID: 11637 Comm: syz.1.1701 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 232.870340][T11637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.870351][T11637] Call Trace: [ 232.870357][T11637] [ 232.870365][T11637] dump_stack_lvl+0x241/0x360 [ 232.870393][T11637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.870411][T11637] ? __pfx__printk+0x10/0x10 [ 232.870431][T11637] ? __kmalloc_noprof+0xb5/0x4c0 [ 232.870462][T11637] ? __pfx___might_resched+0x10/0x10 [ 232.870491][T11637] should_fail_ex+0x40a/0x550 [ 232.870519][T11637] should_failslab+0xac/0x100 [ 232.870543][T11637] __kmalloc_noprof+0xdd/0x4c0 [ 232.870563][T11637] ? sock_kmalloc+0xd7/0x160 [ 232.870586][T11637] sock_kmalloc+0xd7/0x160 [ 232.870608][T11637] af_alg_alloc_areq+0x90/0x260 [ 232.870633][T11637] skcipher_recvmsg+0x382/0x1230 [ 232.870668][T11637] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 232.870687][T11637] ? __fget_files+0x2a/0x410 [ 232.870707][T11637] ? aa_sock_msg_perm+0x91/0x160 [ 232.870733][T11637] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 232.870752][T11637] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 232.870774][T11637] sock_recvmsg+0x22f/0x280 [ 232.870800][T11637] __sys_recvfrom+0x202/0x380 [ 232.870822][T11637] ? __pfx___sys_recvfrom+0x10/0x10 [ 232.870864][T11637] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 232.870889][T11637] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 232.870918][T11637] __x64_sys_recvfrom+0xde/0x100 [ 232.870939][T11637] do_syscall_64+0xf3/0x230 [ 232.870958][T11637] ? clear_bhb_loop+0x35/0x90 [ 232.870981][T11637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.871001][T11637] RIP: 0033:0x7f28dad8ef34 [ 232.871016][T11637] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 232.871031][T11637] RSP: 002b:00007f28dbc46ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 232.871050][T11637] RAX: ffffffffffffffda RBX: 00007f28dbc46fc0 RCX: 00007f28dad8ef34 [ 232.871062][T11637] RDX: 0000000000001000 RSI: 00007f28dbc47010 RDI: 0000000000000004 [ 232.871073][T11637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.871084][T11637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 232.871094][T11637] R13: 00007f28dbc46f68 R14: 00007f28dbc47010 R15: 0000000000000000 [ 232.871123][T11637] [ 233.275189][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1703'. [ 233.308898][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'. [ 233.411275][T11654] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1707'. [ 233.474888][T11653] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1707'. [ 234.003966][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1714'. [ 234.189977][T11685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1712'. [ 234.215832][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'. [ 234.259782][T11686] lo speed is unknown, defaulting to 1000 [ 234.467882][T11695] lo speed is unknown, defaulting to 1000 [ 234.515445][T11696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1721'. [ 234.919852][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1724'. [ 235.326128][T11718] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 235.378050][T11718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.385739][T11726] netlink: 'syz.1.1728': attribute type 25 has an invalid length. [ 235.513576][T11718] bond0: (slave bridge5): making interface the new active one [ 235.525117][T11718] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 236.070349][T11744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.256506][T11751] ip_vti0: left promiscuous mode [ 236.332615][T11751] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 236.379094][T11751] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 236.406963][T11751] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 236.425704][T11751] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 236.520174][T11757] FAULT_INJECTION: forcing a failure. [ 236.520174][T11757] name failslab, interval 1, probability 0, space 0, times 0 [ 236.565192][T11757] CPU: 0 UID: 0 PID: 11757 Comm: syz.0.1736 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 236.565222][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.565233][T11757] Call Trace: [ 236.565240][T11757] [ 236.565249][T11757] dump_stack_lvl+0x241/0x360 [ 236.565276][T11757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.565296][T11757] ? __pfx__printk+0x10/0x10 [ 236.565315][T11757] ? __kmalloc_cache_noprof+0x48/0x390 [ 236.565339][T11757] ? __pfx___might_resched+0x10/0x10 [ 236.565358][T11757] ? __asan_memset+0x23/0x50 [ 236.565377][T11757] should_fail_ex+0x40a/0x550 [ 236.565405][T11757] should_failslab+0xac/0x100 [ 236.565429][T11757] __kmalloc_cache_noprof+0x70/0x390 [ 236.565449][T11757] ? fl_init+0x53/0x1d0 [ 236.565475][T11757] fl_init+0x53/0x1d0 [ 236.565499][T11757] tcf_proto_create+0x262/0x370 [ 236.565521][T11757] tc_new_tfilter+0x15e6/0x1a90 [ 236.565570][T11757] ? __pfx_tc_new_tfilter+0x10/0x10 [ 236.565607][T11757] ? rcu_read_unlock+0x87/0xa0 [ 236.565647][T11757] ? __pfx_tc_new_tfilter+0x10/0x10 [ 236.565671][T11757] rtnetlink_rcv_msg+0x791/0xcf0 [ 236.565691][T11757] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 236.565718][T11757] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.565747][T11757] ? ref_tracker_free+0x643/0x7e0 [ 236.565770][T11757] netlink_rcv_skb+0x206/0x480 [ 236.565793][T11757] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.565817][T11757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.565861][T11757] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.565885][T11757] netlink_unicast+0x7f6/0x990 [ 236.565914][T11757] ? __pfx_netlink_unicast+0x10/0x10 [ 236.565931][T11757] ? __virt_addr_valid+0x45f/0x530 [ 236.565950][T11757] ? __phys_addr_symbol+0x2f/0x70 [ 236.565965][T11757] ? __check_object_size+0x47a/0x730 [ 236.565991][T11757] netlink_sendmsg+0x8de/0xcb0 [ 236.566025][T11757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.566051][T11757] ? aa_sock_msg_perm+0x91/0x160 [ 236.566080][T11757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.566100][T11757] __sock_sendmsg+0x221/0x270 [ 236.566132][T11757] ____sys_sendmsg+0x53a/0x860 [ 236.566158][T11757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.566177][T11757] ? __fget_files+0x2a/0x410 [ 236.566202][T11757] ? __fget_files+0x2a/0x410 [ 236.566232][T11757] __sys_sendmsg+0x269/0x350 [ 236.566256][T11757] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.566287][T11757] ? do_sys_openat2+0x17a/0x1d0 [ 236.566336][T11757] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.566360][T11757] ? do_syscall_64+0x100/0x230 [ 236.566382][T11757] ? do_syscall_64+0xb6/0x230 [ 236.566404][T11757] do_syscall_64+0xf3/0x230 [ 236.566423][T11757] ? clear_bhb_loop+0x35/0x90 [ 236.566448][T11757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.566468][T11757] RIP: 0033:0x7f40fed8d169 [ 236.566484][T11757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.566498][T11757] RSP: 002b:00007f40ffbbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.566518][T11757] RAX: ffffffffffffffda RBX: 00007f40fefa5fa0 RCX: 00007f40fed8d169 [ 236.566530][T11757] RDX: 0000000000000000 RSI: 0000400000006040 RDI: 0000000000000004 [ 236.566541][T11757] RBP: 00007f40ffbbd090 R08: 0000000000000000 R09: 0000000000000000 [ 236.566552][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.566563][T11757] R13: 0000000000000000 R14: 00007f40fefa5fa0 R15: 00007ffec7ce44c8 [ 236.566591][T11757] [ 237.147713][T11771] __nla_validate_parse: 5 callbacks suppressed [ 237.147731][T11771] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1739'. [ 237.211919][T11768] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1739'. [ 237.286832][T11778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1745'. [ 237.552200][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'. [ 237.601812][T11800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1752'. [ 237.619268][T11802] FAULT_INJECTION: forcing a failure. [ 237.619268][T11802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.656977][T11802] CPU: 0 UID: 0 PID: 11802 Comm: syz.0.1750 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 237.657006][T11802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.657017][T11802] Call Trace: [ 237.657024][T11802] [ 237.657032][T11802] dump_stack_lvl+0x241/0x360 [ 237.657059][T11802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.657078][T11802] ? __pfx__printk+0x10/0x10 [ 237.657097][T11802] ? __pfx_lock_release+0x10/0x10 [ 237.657128][T11802] should_fail_ex+0x40a/0x550 [ 237.657156][T11802] _copy_from_iter+0x1df/0x1c40 [ 237.657178][T11802] ? __virt_addr_valid+0x183/0x530 [ 237.657195][T11802] ? __pfx_lock_release+0x10/0x10 [ 237.657223][T11802] ? __pfx__copy_from_iter+0x10/0x10 [ 237.657242][T11802] ? __pfx__copy_from_iter+0x10/0x10 [ 237.657275][T11802] ? page_copy_sane+0x154/0x260 [ 237.657296][T11802] copy_page_from_iter+0x7a/0x100 [ 237.657324][T11802] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 237.657356][T11802] tun_get_user+0x1788/0x45b0 [ 237.657388][T11802] ? __lock_acquire+0x1397/0x2100 [ 237.657417][T11802] ? __pfx_tun_get_user+0x10/0x10 [ 237.657453][T11802] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 237.657478][T11802] ? tun_get+0x1e/0x2f0 [ 237.657496][T11802] ? __pfx_lock_release+0x10/0x10 [ 237.657531][T11802] ? tun_get+0x1e/0x2f0 [ 237.657549][T11802] ? tun_get+0x27d/0x2f0 [ 237.657568][T11802] tun_chr_write_iter+0x10d/0x1f0 [ 237.657590][T11802] vfs_write+0xacf/0xd10 [ 237.657613][T11802] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 237.657632][T11802] ? __pfx_vfs_write+0x10/0x10 [ 237.657647][T11802] ? do_sys_openat2+0x17a/0x1d0 [ 237.657672][T11802] ? __fget_files+0x2a/0x410 [ 237.657697][T11802] ? __fget_files+0x2a/0x410 [ 237.657726][T11802] ksys_write+0x18f/0x2b0 [ 237.657745][T11802] ? __pfx_ksys_write+0x10/0x10 [ 237.657763][T11802] ? do_syscall_64+0x100/0x230 [ 237.657786][T11802] ? do_syscall_64+0xb6/0x230 [ 237.657807][T11802] do_syscall_64+0xf3/0x230 [ 237.657826][T11802] ? clear_bhb_loop+0x35/0x90 [ 237.657851][T11802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.657872][T11802] RIP: 0033:0x7f40fed8d169 [ 237.657888][T11802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.657903][T11802] RSP: 002b:00007f40ffb9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.657923][T11802] RAX: ffffffffffffffda RBX: 00007f40fefa6080 RCX: 00007f40fed8d169 [ 237.657935][T11802] RDX: 000000000000fdef RSI: 0000400000000240 RDI: 0000000000000003 [ 237.657951][T11802] RBP: 00007f40ffb9c090 R08: 0000000000000000 R09: 0000000000000000 [ 237.657962][T11802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.657972][T11802] R13: 0000000000000001 R14: 00007f40fefa6080 R15: 00007ffec7ce44c8 [ 237.657999][T11802] [ 238.173643][T11810] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1755'. [ 238.203312][T11809] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1755'. [ 238.450063][T11827] netlink: 'syz.2.1760': attribute type 5 has an invalid length. [ 238.556148][T11828] syzkaller0: entered promiscuous mode [ 238.578357][T11828] syzkaller0: entered allmulticast mode [ 238.694824][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 238.833442][T11833] sch_fq: defrate 511 ignored. [ 239.072940][T11827] ip6erspan0: entered promiscuous mode [ 239.549405][T11850] rdma_rxe: rxe_newlink: failed to add lo [ 241.274808][T11862] netlink: 'syz.2.1773': attribute type 2 has an invalid length. [ 241.335473][T11864] sock: sock_set_timeout: `syz.3.1771' (pid 11864) tries to set negative timeout [ 241.336073][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 241.645734][T11881] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1781'. [ 241.688553][T11884] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.732292][T11881] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.756785][T11881] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 241.768809][T11881] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 241.820704][T11884] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.862220][T11894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.862530][T11881] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.887340][T11881] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 241.907294][T11881] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 241.951296][T11884] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.001860][T11881] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.016219][T11881] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.027121][T11881] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.043029][T11884] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.073399][T11881] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.109087][T11881] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.136690][T11881] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.204061][T11884] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.234249][T11881] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.243202][T11881] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.254298][T11881] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 242.291597][T11881] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.300064][T11881] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.319182][T11881] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 242.334352][T11884] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.354539][T11881] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.366586][T11881] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.375439][T11881] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 242.410818][T11884] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.419767][T11913] __nla_validate_parse: 6 callbacks suppressed [ 242.419785][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 242.449692][T11881] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.471685][T11881] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.480616][T11881] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 242.508516][T11884] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.926063][T11937] warn_alloc: 1 callbacks suppressed [ 242.932232][T11937] syz.3.1803: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 242.963625][T11937] CPU: 1 UID: 0 PID: 11937 Comm: syz.3.1803 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 242.963653][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.963665][T11937] Call Trace: [ 242.963672][T11937] [ 242.963681][T11937] dump_stack_lvl+0x241/0x360 [ 242.963711][T11937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.963732][T11937] ? __pfx__printk+0x10/0x10 [ 242.963756][T11937] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 242.963779][T11937] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 242.963806][T11937] warn_alloc+0x278/0x410 [ 242.963826][T11937] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 242.963846][T11937] ? __pfx_warn_alloc+0x10/0x10 [ 242.963865][T11937] ? kasan_save_track+0x3f/0x80 [ 242.963882][T11937] ? __kasan_kmalloc+0x98/0xb0 [ 242.963902][T11937] ? xsk_setsockopt+0x4aa/0x810 [ 242.963925][T11937] ? do_sock_setsockopt+0x3af/0x720 [ 242.963942][T11937] ? __x64_sys_setsockopt+0x1ee/0x280 [ 242.963959][T11937] ? do_syscall_64+0xf3/0x230 [ 242.963978][T11937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.964009][T11937] __vmalloc_node_range_noprof+0x126/0x1380 [ 242.964056][T11937] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 242.964080][T11937] ? __kasan_kmalloc+0x98/0xb0 [ 242.964104][T11937] vmalloc_user_noprof+0x74/0x80 [ 242.964121][T11937] ? xskq_create+0xb6/0x170 [ 242.964144][T11937] xskq_create+0xb6/0x170 [ 242.964171][T11937] xsk_init_queue+0xa1/0x100 [ 242.964197][T11937] xsk_setsockopt+0x4aa/0x810 [ 242.964223][T11937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 242.964247][T11937] ? __pfx_aa_sk_perm+0x10/0x10 [ 242.964300][T11937] ? aa_sock_opt_perm+0x79/0x120 [ 242.964332][T11937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 242.964355][T11937] do_sock_setsockopt+0x3af/0x720 [ 242.964380][T11937] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 242.964404][T11937] ? __fget_files+0x395/0x410 [ 242.964427][T11937] ? __fget_files+0x2a/0x410 [ 242.964465][T11937] __x64_sys_setsockopt+0x1ee/0x280 [ 242.964491][T11937] do_syscall_64+0xf3/0x230 [ 242.964512][T11937] ? clear_bhb_loop+0x35/0x90 [ 242.964537][T11937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.964561][T11937] RIP: 0033:0x7f9439d8d169 [ 242.964577][T11937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.964597][T11937] RSP: 002b:00007f943abbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 242.964618][T11937] RAX: ffffffffffffffda RBX: 00007f9439fa5fa0 RCX: 00007f9439d8d169 [ 242.964632][T11937] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 242.964645][T11937] RBP: 00007f9439e0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 242.964656][T11937] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.964669][T11937] R13: 0000000000000000 R14: 00007f9439fa5fa0 R15: 00007ffd97814ea8 [ 242.964698][T11937] [ 242.967891][T11937] Mem-Info: [ 243.027195][T11941] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1802'. [ 243.073821][T11937] active_anon:5982 inactive_anon:0 isolated_anon:0 [ 243.073821][T11937] active_file:1928 inactive_file:38371 isolated_file:0 [ 243.073821][T11937] unevictable:768 dirty:379 writeback:0 [ 243.073821][T11937] slab_reclaimable:10649 slab_unreclaimable:110243 [ 243.073821][T11937] mapped:29251 shmem:1441 pagetables:876 [ 243.073821][T11937] sec_pagetables:0 bounce:0 [ 243.073821][T11937] kernel_misc_reclaimable:0 [ 243.073821][T11937] free:1318745 free_pcp:478 free_cma:0 [ 243.153283][T11941] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1802'. [ 243.159418][T11937] Node 0 active_anon:23928kB inactive_anon:0kB active_file:7712kB inactive_file:153408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117004kB dirty:1516kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12912kB pagetables:3504kB sec_pagetables:0kB all_unreclaimable? no [ 243.358566][T11937] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 243.440411][T11937] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.483095][T11949] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1807'. [ 243.506846][T11937] lowmem_reserve[]: 0 2489 2490 0 0 [ 243.512240][T11937] Node 0 DMA32 free:1350716kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:23892kB inactive_anon:0kB active_file:7712kB inactive_file:153100kB unevictable:1576kB writepending:744kB present:3129332kB managed:2549728kB mlocked:40kB bounce:0kB free_pcp:2604kB local_pcp:1988kB free_cma:0kB [ 243.561728][T11949] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1807'. [ 243.582605][T11937] lowmem_reserve[]: 0 0 0 0 0 [ 243.598327][T11937] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 243.650290][T11949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1807'. [ 243.679273][T11937] lowmem_reserve[]: 0 0 0 0 0 [ 243.708820][T11937] Node 1 Normal free:3907736kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.808145][T11937] lowmem_reserve[]: 0 0 0 0 0 [ 243.826995][T11937] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 243.838705][T11961] [ 243.842172][T11961] ====================================================== [ 243.849294][T11961] WARNING: possible circular locking dependency detected [ 243.856504][T11961] 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 Not tainted [ 243.863708][T11961] ------------------------------------------------------ [ 243.870741][T11961] syz.0.1811/11961 is trying to acquire lock: [ 243.876897][T11961] ffff8880616a8d28 (&dev_instance_lock_key#11){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 243.887276][T11961] [ 243.887276][T11961] but task is already holding lock: [ 243.894635][T11961] ffff888061798d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 243.904323][T11961] [ 243.904323][T11961] which lock already depends on the new lock. [ 243.904323][T11961] [ 243.914814][T11961] [ 243.914814][T11961] the existing dependency chain (in reverse order) is: [ 243.923857][T11961] [ 243.923857][T11961] -> #2 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 243.932304][T11961] lock_acquire+0x1ed/0x550 [ 243.937333][T11961] __mutex_lock+0x19c/0x1010 [ 243.942440][T11961] __dev_open+0x5cb/0x8a0 [ 243.947285][T11961] netif_open+0xae/0x1b0 [ 243.952047][T11961] dev_open+0x13e/0x260 [ 243.956830][T11961] team_add_slave+0xabe/0x28a0 [ 243.962109][T11961] do_set_master+0x579/0x730 [ 243.967487][T11961] rtnl_newlink_create+0x6e6/0xbd0 [ 243.973224][T11961] rtnl_newlink+0x167a/0x1d90 [ 243.978432][T11961] rtnetlink_rcv_msg+0x791/0xcf0 [ 243.983903][T11961] netlink_rcv_skb+0x206/0x480 [ 243.989249][T11961] netlink_unicast+0x7f6/0x990 [ 243.994713][T11961] netlink_sendmsg+0x8de/0xcb0 [ 243.999995][T11961] __sock_sendmsg+0x221/0x270 [ 244.005234][T11961] ____sys_sendmsg+0x53a/0x860 [ 244.010596][T11961] __sys_sendmsg+0x269/0x350 [ 244.015713][T11961] do_syscall_64+0xf3/0x230 [ 244.020771][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.027199][T11961] [ 244.027199][T11961] -> #1 (team->team_lock_key#3){+.+.}-{4:4}: [ 244.035373][T11961] lock_acquire+0x1ed/0x550 [ 244.040404][T11961] __mutex_lock+0x19c/0x1010 [ 244.045514][T11961] team_set_mac_address+0x122/0x280 [ 244.051404][T11961] netif_set_mac_address+0x327/0x510 [ 244.057202][T11961] do_setlink+0xaa6/0x40f0 [ 244.062141][T11961] rtnl_newlink+0x15a6/0x1d90 [ 244.067343][T11961] rtnetlink_rcv_msg+0x791/0xcf0 [ 244.072808][T11961] netlink_rcv_skb+0x206/0x480 [ 244.078207][T11961] netlink_unicast+0x7f6/0x990 [ 244.083513][T11961] netlink_sendmsg+0x8de/0xcb0 [ 244.088793][T11961] __sock_sendmsg+0x221/0x270 [ 244.093988][T11961] __sys_sendto+0x363/0x4c0 [ 244.099095][T11961] __x64_sys_sendto+0xde/0x100 [ 244.104378][T11961] do_syscall_64+0xf3/0x230 [ 244.109481][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.115896][T11961] [ 244.115896][T11961] -> #0 (&dev_instance_lock_key#11){+.+.}-{4:4}: [ 244.124454][T11961] validate_chain+0x18ef/0x5920 [ 244.130020][T11961] __lock_acquire+0x1397/0x2100 [ 244.135423][T11961] lock_acquire+0x1ed/0x550 [ 244.140465][T11961] __mutex_lock+0x19c/0x1010 [ 244.145612][T11961] dev_set_mac_address+0x2a/0x50 [ 244.151072][T11961] bond_set_mac_address+0x28e/0x830 [ 244.156783][T11961] netif_set_mac_address+0x327/0x510 [ 244.162584][T11961] do_setlink+0xaa6/0x40f0 [ 244.167527][T11961] rtnl_newlink+0x15a6/0x1d90 [ 244.172731][T11961] rtnetlink_rcv_msg+0x791/0xcf0 [ 244.178229][T11961] netlink_rcv_skb+0x206/0x480 [ 244.183783][T11961] netlink_unicast+0x7f6/0x990 [ 244.189064][T11961] netlink_sendmsg+0x8de/0xcb0 [ 244.194440][T11961] __sock_sendmsg+0x221/0x270 [ 244.199659][T11961] ____sys_sendmsg+0x53a/0x860 [ 244.204950][T11961] __sys_sendmsg+0x269/0x350 [ 244.210055][T11961] do_syscall_64+0xf3/0x230 [ 244.215074][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.221920][T11961] [ 244.221920][T11961] other info that might help us debug this: [ 244.221920][T11961] [ 244.232404][T11961] Chain exists of: [ 244.232404][T11961] &dev_instance_lock_key#11 --> team->team_lock_key#3 --> &dev_instance_lock_key#2 [ 244.232404][T11961] [ 244.247834][T11961] Possible unsafe locking scenario: [ 244.247834][T11961] [ 244.255278][T11961] CPU0 CPU1 [ 244.260688][T11961] ---- ---- [ 244.266054][T11961] lock(&dev_instance_lock_key#2); [ 244.271341][T11961] lock(team->team_lock_key#3); [ 244.278812][T11961] lock(&dev_instance_lock_key#2); [ 244.286616][T11961] lock(&dev_instance_lock_key#11); [ 244.291948][T11961] [ 244.291948][T11961] *** DEADLOCK *** [ 244.291948][T11961] [ 244.300086][T11961] 2 locks held by syz.0.1811/11961: [ 244.305267][T11961] #0: ffffffff8fed6848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 244.314424][T11961] #1: ffff888061798d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 244.324531][T11961] [ 244.324531][T11961] stack backtrace: [ 244.330541][T11961] CPU: 1 UID: 0 PID: 11961 Comm: syz.0.1811 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 244.330562][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.330571][T11961] Call Trace: [ 244.330580][T11961] [ 244.330588][T11961] dump_stack_lvl+0x241/0x360 [ 244.330610][T11961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.330625][T11961] ? __pfx__printk+0x10/0x10 [ 244.330641][T11961] print_circular_bug+0x13a/0x1b0 [ 244.330658][T11961] check_noncircular+0x36a/0x4a0 [ 244.330674][T11961] ? __pfx_check_noncircular+0x10/0x10 [ 244.330688][T11961] ? lockdep_lock+0x123/0x2b0 [ 244.330710][T11961] validate_chain+0x18ef/0x5920 [ 244.330730][T11961] ? validate_chain+0x11e/0x5920 [ 244.330743][T11961] ? __pfx_validate_chain+0x10/0x10 [ 244.330762][T11961] ? validate_chain+0x11e/0x5920 [ 244.330780][T11961] ? __pfx_validate_chain+0x10/0x10 [ 244.330794][T11961] ? __pfx_validate_chain+0x10/0x10 [ 244.330809][T11961] ? mark_lock+0x9a/0x360 [ 244.330821][T11961] ? __pfx_validate_chain+0x10/0x10 [ 244.330835][T11961] __lock_acquire+0x1397/0x2100 [ 244.330858][T11961] lock_acquire+0x1ed/0x550 [ 244.330875][T11961] ? dev_set_mac_address+0x2a/0x50 [ 244.330896][T11961] ? __pfx_lock_acquire+0x10/0x10 [ 244.330914][T11961] ? __pfx___might_resched+0x10/0x10 [ 244.330932][T11961] ? __lock_acquire+0x1397/0x2100 [ 244.330952][T11961] __mutex_lock+0x19c/0x1010 [ 244.330968][T11961] ? dev_set_mac_address+0x2a/0x50 [ 244.330989][T11961] ? dev_set_mac_address+0x2a/0x50 [ 244.331007][T11961] ? __pfx___mutex_lock+0x10/0x10 [ 244.331021][T11961] ? ib_device_get_by_netdev+0x85/0x5e0 [ 244.331043][T11961] ? net_generic+0x1f/0x240 [ 244.331058][T11961] ? net_generic+0x1f0/0x240 [ 244.331072][T11961] dev_set_mac_address+0x2a/0x50 [ 244.331091][T11961] bond_set_mac_address+0x28e/0x830 [ 244.331109][T11961] ? __pfx_bond_set_mac_address+0x10/0x10 [ 244.331124][T11961] ? hsr_netdev_notify+0x295/0xb50 [ 244.331144][T11961] ? notifier_call_chain+0x15a/0x3f0 [ 244.331162][T11961] ? notifier_call_chain+0x3cc/0x3f0 [ 244.331180][T11961] netif_set_mac_address+0x327/0x510 [ 244.331196][T11961] ? __pfx_netif_set_mac_address+0x10/0x10 [ 244.331210][T11961] ? rcu_is_watching+0x15/0xb0 [ 244.331225][T11961] ? trace_kmalloc+0x1f/0xd0 [ 244.331242][T11961] ? do_setlink+0x7a7/0x40f0 [ 244.331262][T11961] do_setlink+0xaa6/0x40f0 [ 244.331292][T11961] ? __pfx_do_setlink+0x10/0x10 [ 244.331314][T11961] ? __pfx___might_resched+0x10/0x10 [ 244.331331][T11961] ? __pfx___mutex_trylock_common+0x10/0x10 [ 244.331347][T11961] ? rcu_is_watching+0x15/0xb0 [ 244.331364][T11961] ? trace_contention_end+0x3c/0x120 [ 244.331378][T11961] ? __mutex_lock+0x397/0x1010 [ 244.331393][T11961] ? __pfx_aa_get_newest_label+0x10/0x10 [ 244.331414][T11961] ? rtnl_newlink+0xc4c/0x1d90 [ 244.331435][T11961] ? __pfx___mutex_lock+0x10/0x10 [ 244.331452][T11961] ? ns_capable+0x8a/0xf0 [ 244.331468][T11961] ? rtnl_link_get_net_capable+0x168/0x340 [ 244.331493][T11961] rtnl_newlink+0x15a6/0x1d90 [ 244.331510][T11961] ? stack_depot_save_flags+0x37/0x940 [ 244.331538][T11961] ? __pfx_rtnl_newlink+0x10/0x10 [ 244.331553][T11961] ? __netlink_deliver_tap+0x561/0x7f0 [ 244.331571][T11961] ? __pfx_validate_chain+0x10/0x10 [ 244.331584][T11961] ? __sock_sendmsg+0x221/0x270 [ 244.331600][T11961] ? ____sys_sendmsg+0x53a/0x860 [ 244.331612][T11961] ? __sys_sendmsg+0x269/0x350 [ 244.331624][T11961] ? do_syscall_64+0xf3/0x230 [ 244.331639][T11961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.331666][T11961] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 244.331684][T11961] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.331705][T11961] ? mark_lock+0x9a/0x360 [ 244.331718][T11961] ? __lock_acquire+0x1397/0x2100 [ 244.331745][T11961] ? __pfx_lock_release+0x10/0x10 [ 244.331766][T11961] ? __pfx_rtnl_newlink+0x10/0x10 [ 244.331783][T11961] rtnetlink_rcv_msg+0x791/0xcf0 [ 244.331799][T11961] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 244.331817][T11961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.331836][T11961] ? ref_tracker_free+0x643/0x7e0 [ 244.331850][T11961] netlink_rcv_skb+0x206/0x480 [ 244.331866][T11961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.331883][T11961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.331906][T11961] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.331923][T11961] netlink_unicast+0x7f6/0x990 [ 244.331940][T11961] ? __pfx_netlink_unicast+0x10/0x10 [ 244.331954][T11961] ? __virt_addr_valid+0x45f/0x530 [ 244.331967][T11961] ? __phys_addr_symbol+0x2f/0x70 [ 244.331978][T11961] ? __check_object_size+0x47a/0x730 [ 244.331996][T11961] netlink_sendmsg+0x8de/0xcb0 [ 244.332016][T11961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.332034][T11961] ? aa_sock_msg_perm+0x91/0x160 [ 244.332052][T11961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.332068][T11961] __sock_sendmsg+0x221/0x270 [ 244.332085][T11961] ____sys_sendmsg+0x53a/0x860 [ 244.332101][T11961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.332113][T11961] ? __fget_files+0x2a/0x410 [ 244.332131][T11961] ? __fget_files+0x2a/0x410 [ 244.332150][T11961] __sys_sendmsg+0x269/0x350 [ 244.332165][T11961] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.332191][T11961] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.332209][T11961] ? do_syscall_64+0x100/0x230 [ 244.332225][T11961] ? do_syscall_64+0xb6/0x230 [ 244.332240][T11961] do_syscall_64+0xf3/0x230 [ 244.332255][T11961] ? clear_bhb_loop+0x35/0x90 [ 244.332272][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.332290][T11961] RIP: 0033:0x7f40fed8d169 [ 244.332303][T11961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.332316][T11961] RSP: 002b:00007f40ffbbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.332332][T11961] RAX: ffffffffffffffda RBX: 00007f40fefa5fa0 RCX: 00007f40fed8d169 [ 244.332343][T11961] RDX: 0000000000040880 RSI: 0000400000000000 RDI: 0000000000000005 [ 244.332353][T11961] RBP: 00007f40fee0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 244.332362][T11961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.332371][T11961] R13: 0000000000000000 R14: 00007f40fefa5fa0 R15: 00007ffec7ce44c8 [ 244.332385][T11961] [ 244.337441][T11937] Node 0 [ 244.370544][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 244.374485][T11937] DMA32: [ 244.380957][T11961] : entered promiscuous mode [ 244.384606][T11937] 223*4kB [ 244.391379][T11961] team0: entered promiscuous mode [ 244.395702][T11937] (UM) [ 244.402032][T11961] : left allmulticast mode [ 244.404869][T11937] 277*8kB [ 244.410635][T11961] team0: left allmulticast mode [ 244.417427][T11937] (UME) [ 244.758960][T11969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1812'. [ 244.767022][T11937] 396*16kB (UME) 515*32kB (UME) 291*64kB (UME) 154*128kB (UME) 91*256kB (UME) 31*512kB (UM) 32*1024kB (UME) 8*2048kB (UM) 292*4096kB (UM) = 1348612kB [ 244.999031][T11937] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 245.010962][T11937] Node 1 Normal: 204*4kB (UME) 57*8kB (UME) 40*16kB (UME) 227*32kB (UME) 83*64kB (UME) 28*128kB (UME) 18*256kB (UME) 10*512kB (UME) 7*1024kB (UME) 3*2048kB (U) 944*4096kB (M) = 3907736kB [ 245.029882][T11937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.039621][T11937] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.049106][T11937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.058769][T11937] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.069519][T11937] 41740 total pagecache pages [ 245.074307][T11937] 0 pages in swap cache [ 245.078505][T11937] Free swap = 124996kB [ 245.082745][T11937] Total swap = 124996kB [ 245.087901][T11937] 2097051 pages RAM [ 245.091716][T11937] 0 pages HighMem/MovableOnly [ 245.096461][T11937] 427897 pages reserved [ 245.100728][T11937] 0 pages cma reserved