last executing test programs: 20.108840734s ago: executing program 0 (id=900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r1, 0x711}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (fail_nth: 7) 19.115783395s ago: executing program 0 (id=904): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0xfffc}, 0x90) connect$can_bcm(r0, &(0x7f0000000000), 0x10) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[], 0x80}}, 0x40880) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) recvmmsg$unix(r4, &(0x7f00000040c0)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/54, 0x36}], 0x1, &(0x7f0000000480)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/141, 0x8d}, {&(0x7f00000006c0)=""/62, 0x3e}, {&(0x7f0000000700)=""/33, 0x21}], 0x4, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000000880)=""/84, 0x54}, {&(0x7f0000000900)=""/88, 0x58}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/13, 0xd}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/64, 0x40}, {&(0x7f0000001a40)=""/206, 0xce}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/99, 0x63}], 0x9, &(0x7f0000002c80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000002cc0)=""/5, 0x5}, {&(0x7f0000002d00)=""/64, 0x40}, {&(0x7f0000002d40)=""/174, 0xae}, {&(0x7f0000002e00)=""/11, 0xb}, {&(0x7f0000002e40)=""/64, 0x40}, {&(0x7f0000002e80)=""/85, 0x55}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/120, 0x78}], 0x8, &(0x7f0000004000)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x4, 0x40000002, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x7, 0xfffffffe, 0x7f, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0xfffffd28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @printk={@x={0x18, 0x0}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.854800946s ago: executing program 0 (id=912): r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="ce88", 0x2}], 0x1}, 0x801) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESDEC=r3], 0x3ec}, 0x1, 0x0, 0x0, 0x54}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0xd1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0200"], 0x10) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r13, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r9}, 0x8) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, r15, 0x303, 0x70bd2b, 0x0, {0x6}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20040000) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f40)=ANY=[@ANYRESOCT=r14, @ANYBLOB="a84c6554e2476ed5768ed867f9b450e86f8b4b0cebd9da6e31353e7274f818df197564bc0966f26640e0df4bacc7024b78a6b3c969e25525027ca8e2d662f6ae80384a781bed15b2c2fe5dbd727fb5633e482e540403c8f42bfd09aac4ef4bc0c4763a273970d40c5b7c8637f12235d6f8a0bd12b423c425d2081bd1d484783ecf0fa09ec87b2c75", @ANYRESDEC=r8, @ANYRES32=r15, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT=r12, @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x8800) 17.703990777s ago: executing program 0 (id=914): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) (fail_nth: 7) 17.237883793s ago: executing program 0 (id=919): syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @dev={0xac, 0x14, 0x14, 0x33}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x5, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}, @md5sig={0x13, 0x12, "000000fb000000000000801100"}]}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@var={0x1, 0x0, 0x0, 0xe, 0x3, 0x1}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @fwd={0xd}, @enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0xb, [{0x1, 0x5, 0x5}]}]}, {0x0, [0x0, 0x30, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000300)=""/4096, 0x60, 0x1000, 0x10001, 0x5, 0x10000, @value}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa354", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)={0x20, r7, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)={0x118, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x397}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd0a9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe31}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x100]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x80, 0x3, 0x7f]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0x7]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x80, 0x5, 0x8001, 0x7, 0xa33, 0xde, 0xe]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff0}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x26d}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x9, 0x6]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x70}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x881}, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffff7, '\x00', r1, r2, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) 11.11854338s ago: executing program 4 (id=963): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff03c}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) recvmmsg(r0, &(0x7f0000004100)=[{{&(0x7f0000000140)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f0000000580)=""/71, 0x47}], 0x2, &(0x7f0000000600)=""/222, 0xde}, 0x23}, {{0xfffffffffffffffc, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000780)=""/67, 0x43}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f0000000800)=""/247, 0xf7}], 0x4, &(0x7f0000000940)=""/35, 0x23}, 0x8}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)=""/153, 0x99}, {&(0x7f0000000a40)=""/170, 0xaa}], 0x2}, 0x4}, {{&(0x7f0000000b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)=""/140, 0x8c}, {&(0x7f0000000c80)=""/247, 0xf7}, {&(0x7f0000000d80)=""/9, 0x9}, {&(0x7f0000000dc0)=""/166, 0xa6}, {&(0x7f0000000e80)=""/95, 0x5f}, {&(0x7f0000000f00)=""/132, 0x84}], 0x6, &(0x7f0000001040)=""/151, 0x97}, 0x8}, {{&(0x7f0000001100)=@phonet, 0x80, &(0x7f0000002800)=[{&(0x7f0000001180)=""/148, 0x94}, {&(0x7f0000001240)=""/245, 0xf5}, {&(0x7f0000001340)=""/224, 0xe0}, {&(0x7f0000001440)=""/180, 0xb4}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/159, 0x9f}, {&(0x7f00000025c0)=""/168, 0xa8}, {&(0x7f0000002680)=""/92, 0x5c}, {&(0x7f0000002700)=""/221, 0xdd}], 0x9, &(0x7f00000028c0)=""/78, 0x4e}, 0xff}, {{&(0x7f0000002940)=@alg, 0x80, &(0x7f0000003fc0)=[{&(0x7f00000029c0)=""/249, 0xf9}, {&(0x7f0000002ac0)=""/101, 0x65}, {&(0x7f0000002b40)=""/220, 0xdc}, {&(0x7f0000002c40)=""/171, 0xab}, {&(0x7f0000002d00)=""/25, 0x19}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/249, 0xf9}, {&(0x7f0000003e40)=""/198, 0xc6}, {&(0x7f0000003f40)=""/76, 0x4c}], 0x9, &(0x7f0000004080)=""/100, 0x64}, 0x2}], 0x6, 0x80, &(0x7f0000004280)) sendmsg$key(r1, 0x0, 0x4004840) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x10}, 0x1, 0xfdffffff}, 0x0) 9.939601938s ago: executing program 4 (id=968): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x44}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r7, @ANYBLOB="0101000000000000000001000000c00008806800008024000200334ea8f29e1930090f3191caf613498c95654a654656972dc238b58de30e8c8624000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c140004000a0000007f000001000000000000000008000300020000005400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08000300fef0d3d9240002001e5961ebca53cbc760a1", @ANYRES32=r8], 0xdc}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000140)=0x1e) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="000000bbaaaaaaaaaabb080045190015191f000017119078ac141429640101007e000040000000"], 0x27) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee01) r10 = socket(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000d40)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r10]}}], 0x18, 0x8000000}}], 0x2, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003840)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}}, 0x0) 6.332304625s ago: executing program 4 (id=984): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x700}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 5.61554705s ago: executing program 0 (id=919): syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @dev={0xac, 0x14, 0x14, 0x33}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x5, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}, @md5sig={0x13, 0x12, "000000fb000000000000801100"}]}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@var={0x1, 0x0, 0x0, 0xe, 0x3, 0x1}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @fwd={0xd}, @enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0xb, [{0x1, 0x5, 0x5}]}]}, {0x0, [0x0, 0x30, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000300)=""/4096, 0x60, 0x1000, 0x10001, 0x5, 0x10000, @value}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa354", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)={0x20, r7, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)={0x118, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x397}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd0a9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe31}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x100]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x80, 0x3, 0x7f]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0x7]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x80, 0x5, 0x8001, 0x7, 0xa33, 0xde, 0xe]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff0}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x26d}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x9, 0x6]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x70}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x881}, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffff7, '\x00', r1, r2, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) 4.52364004s ago: executing program 2 (id=998): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18", 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x7, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000100000000000000000850000000200000095"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="0000000000c0a7a0d2843f04ba8c5c5e73f0d400006831ddffb0d0a573845700"/52], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000003576dbccb711bb5d0000040000000d00000000000012040000000400000000000012030000001000000000000010040000000900000000000007000000000d000000000000100c0000000100000006000093060000000f00000003000000000000000c00000004000000f8ffffff0800000049ffffffff0f00000d000000010000008800000097df0000ff0f0000080000000800000063870000010000000e000000000000110400000005000000000000000000000300000000040000000300000005000000000000000200000d000000000200000000fcffff100000000500000000305f00"], &(0x7f0000000280)=""/171, 0xf0, 0xab, 0x0, 0x7, 0x10000, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="18000001800000000000000940000018110000", @ANYRES32, @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x4004094) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r3}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r1, 0x0, 0x10, 0x7}) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x48080000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)=@ipv6_delroute={0x34, 0x19, 0x20, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x6d, 0x35dea80b64de7bf7, 0x1, 0xff, 0x1, 0x1100}, [@RTA_PREF={0x5, 0x14, 0x1}, @RTA_OIF={0x8, 0x4, r7}, @RTA_PREF={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) bind$alg(r6, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r6, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f0000000000)=""/172, 0xac) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) preadv(r10, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x4, 0x0) sendmsg$nl_netfilter(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001000)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r11, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000003400)={0x10, 0x3f6, 0x2, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x24000004}, 0x20008000) 4.406190705s ago: executing program 4 (id=1000): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007f00)=ANY=[@ANYBLOB="96d0f700dc870d77cf0067ad41f507d8380002ca0000000000000000573292f9e2791754ea9bf0f92e8dbe7ab7dc70b807d10be4b94c853df06cee48292b3fe689ab4cb4347621e04d37093d6ce4c3c4eda157cdac395b7cf43edeb6f86363ebd118aa89212227638ef5a82b2f86", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'macvtap0\x00', &(0x7f0000000140)=@ethtool_cmd={0x1, 0x6, 0x5, 0x9, 0xb, 0xf, 0xd, 0x9d, 0x0, 0x11, 0x3, 0x4, 0x6, 0x4, 0x72, 0x480d, [0x6, 0x2a]}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000040)={0x0, @broadcast}) socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000007c80)=0x3) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r6, &(0x7f0000007cc0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/163, 0xa3}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f0000000400)=""/82, 0x52}], 0x7, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000680)=""/30, 0x1e}, {&(0x7f00000006c0)=""/23, 0x17}, {&(0x7f0000001780)=""/154, 0x9a}], 0x4, &(0x7f0000001840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001940)=""/133, 0x85}, {&(0x7f0000001a00)=""/202, 0xca}], 0x2, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/66, 0x42}, {&(0x7f0000001c40)=""/3, 0x3}], 0x2, &(0x7f0000001cc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001d00), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/60, 0x3c}, {&(0x7f0000002dc0)=""/208, 0xd0}, {&(0x7f0000002ec0)=""/238, 0xee}], 0x4, &(0x7f0000003000)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000003140), 0x6e, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/166, 0xa6}, {&(0x7f0000003280)=""/109, 0x6d}, {&(0x7f0000003300)=""/67, 0x43}, {&(0x7f0000003380)=""/4, 0x4}], 0x4, &(0x7f0000003400)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000003500), 0x6e, &(0x7f00000057c0)=[{&(0x7f0000003580)=""/225, 0xe1}, {&(0x7f0000003680)=""/54, 0x36}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/229, 0xe5}, {&(0x7f00000047c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000005880)=@abs, 0x6e, &(0x7f0000007c00)=[{&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000006900)=""/174, 0xae}, {&(0x7f00000069c0)=""/126, 0x7e}, {&(0x7f0000006a40)=""/131, 0x83}, {&(0x7f0000006b00)=""/4096, 0x1000}, {&(0x7f0000007b00)=""/228, 0xe4}], 0x6, &(0x7f0000007c80)}}], 0x8, 0x40010020, &(0x7f0000007ec0)) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r7], 0x20) 4.214875321s ago: executing program 2 (id=1001): socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x004\x00', @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@buf) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000003d80)=0x2, 0x4) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/27, 0x1b}, 0x8}, {{&(0x7f00000000c0)=@ethernet, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1, &(0x7f00000008c0)=""/4096, 0x1000}, 0x8}], 0x2, 0x45833af92e4b39ff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0x3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.213907545s ago: executing program 3 (id=1002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @multicast2}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x6c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}, @NFQA_CFG_CMD={0x0, 0x1, {0x4, 0x0, 0x27}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) 3.634417299s ago: executing program 1 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xfffffffffffffd8c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x38, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r6 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000f63c000700"/20], 0x50) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(r8, r9, 0x0, 0xffffffff000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x18) r11 = socket$kcm(0xa, 0x6, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r11, 0x10d, 0xb, &(0x7f0000000000)=r12, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x200000, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x8, &(0x7f0000000000)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xfd, &(0x7f0000000180)=""/253, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x2c, r4, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x3ff, 0x6}, 0x10, r5, r6, 0x2, &(0x7f0000000880)=[r7, r9, 0xffffffffffffffff, r10, r13], &(0x7f00000008c0)=[{0x0, 0x1, 0xe}, {0x3, 0x2, 0xf, 0xb}], 0x10, 0xb94, @void, @value}, 0x94) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r14, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000007fc0)={&(0x7f0000007f00)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0xfffffffffffffffe, 0x0, &(0x7f0000000a80)=""/251, 0xfb}, 0x7}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/254, 0xfe}], 0x2, &(0x7f0000000b80)=""/167, 0xa7}, 0xfff}], 0x3, 0x40000141, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000003c0)) read(r0, &(0x7f0000000000)=""/170, 0xaa) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.394487734s ago: executing program 3 (id=1004): socket(0x10, 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) 3.356908428s ago: executing program 4 (id=1005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x2000, r0}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0xd, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0xb}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @alu={0x4, 0x1, 0xa, 0xa, 0x0, 0x8, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xac}, @jmp={0x5, 0x1, 0x6, 0x7, 0x3, 0x8, 0xfffffffffffffff0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @ldst={0x3, 0x1, 0x1, 0x0, 0x7, 0x10, 0xfffffffffffffff0}], &(0x7f00000001c0)='syzkaller\x00', 0xf6, 0xa, &(0x7f0000000300)=""/10, 0x41000, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x9, 0x2, 0xbea1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3], &(0x7f0000000c80)=[{0x4, 0x5, 0xa, 0x7}, {0x1, 0x5, 0x1, 0x6}], 0x10, 0x400, @void, @value}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket(0x2000000000000021, 0x2, 0x10000000000002) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 3.166901298s ago: executing program 1 (id=1006): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000029000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4004040, &(0x7f0000000300)={0xa, 0x4e20, 0x7fffffff, @mcast1}, 0x1c) 3.159615092s ago: executing program 2 (id=1007): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="f005000001030500000000000000"], 0x5f0}, 0x1, 0x0, 0x0, 0x810}, 0x4000084) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.159360092s ago: executing program 3 (id=1008): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x15, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff80}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffbfc, @void, @value}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f00000000c0), 0x90) 2.982758531s ago: executing program 1 (id=1009): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.current\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000100)=r3, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109005000108049000000990d59906040c6226d83b3dd9fa584140a972beb7bb2e6afdd6ee1b52f5b7186508ea84b4900077fd8998d20aa3321446cbf0d123c72e8e5e83d06c90e01f5bae80da358cd"], 0x64}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x494}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000280)={{}, 0x78}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="ca64501ec979f3aebb55ab1ff3b70cfba35c92dccbca29d8808cf363d3a27cd162a4e9f4d01af3751767df218161a1af578c2ec976fa50e57ff29175225c79a9511d3cf92fdffc6cf7cf25cc12ecf14ef9507fd6951126ffd2958e469748beda8eb622b57f76c9405ecf9e98b504c2a8bdd45bc7da194416d49e78c8139766d901adeb14cf2dec42112ca6a7fe366080fef8de46b3262aa804db56d27efe29ba2b3bb5c2ea05266ff130e085564634c1b6061e6b06a3b76e7e898451df8ce10cd05edf8b69a1e04a39a2", @ANYRESOCT=r6, @ANYRES8=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000030b2c7a4ea2d0186007b8af8ff00000000bfa2000000000000b7950000000000000000000000000000000000000000001600"/72], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r11, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0xe58ac855f3a312e9}, 0x20000000) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000000)=0x7ded, 0x4) bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='rtc_irq_set_state\x00', r11, 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000800)=0x1220137, 0x4) 2.960741602s ago: executing program 2 (id=1010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x4c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000630169000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x98, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffff}}}}, {{@ip={@dev, @remote, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) 2.790779501s ago: executing program 3 (id=1011): r0 = socket(0x10, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002400)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x9, 0x5, 0xfffffffe, 0x67, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2={0xff, 0x5}, 0x10, 0x700, 0x4, 0x7}}) 2.567166509s ago: executing program 2 (id=1012): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000100)=@can, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000000180)=""/184, 0xb8}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f00000003c0)=""/208, 0xd0}, {&(0x7f00000004c0)=""/52, 0x34}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000002240)=""/4096, 0x1000}], 0x8}, 0x12101) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000680)={0x3, 0x3, 0x2}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x7, &(0x7f0000000780)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @ldst={0x1, 0x0, 0x4, 0x2, 0xb, 0x4, 0xfffffffffffffff0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000006c0)='devices.deny\x00', 0x2, 0x0) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b1834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0xfdf9, 0x4084841, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 2.489939892s ago: executing program 1 (id=1013): r0 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x3, @local, 0xb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0xc06d, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r1 = socket(0x3, 0x0, 0x1000002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x82}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) select(0x17, &(0x7f0000000980)={0x7f}, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a00"], 0x1c}}, 0x0) 2.338931772s ago: executing program 3 (id=1014): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x8, 0x4, 0x3, 0x6c468, r0, 0x48000, '\x00', r1, r2, 0x0, 0x1, 0x1, 0x0, @value=r3, @void, @void, @value}, 0x50) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x1f8) 2.252244533s ago: executing program 2 (id=1015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @multicast2}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x6c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}, @NFQA_CFG_CMD={0x0, 0x1, {0x4, 0x0, 0x27}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) 2.13626743s ago: executing program 1 (id=1016): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003b000701000000000000000003000000caff2505"], 0x18}}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x2, 0x0, 0x4, r1, 0xef, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0xa, @void, @value, @void, @value}, 0x50) 2.030259892s ago: executing program 3 (id=1017): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}}, 0x0) (fail_nth: 6) 1.880629354s ago: executing program 1 (id=1018): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000f1afc218366200ac1414aa00000000000000000000000000000000000000000a00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000000030000000000000000000003000000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x1, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0) r2 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf250600000006000b000a000000337444f362123efac522cb7345686cdcdd9179fa5c7dd65bd3c6bf3cebc87f9cda04ac7ff73d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4880) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000008000000000004001800000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0xa9ce, 0x7, 0xa, 0x3}, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r7, @ANYBLOB="040028bd7000fddbdf2506000000080004000300000050000280080004000700510cb0000006000e004e20000008000800eb000000140001000000000000000000000000000000000106000b000200000005000d000100000008000900ff0100000800060003000000080006000000002008000500000000000c000280080007008000000008000400100000003cff0280080005000a01010014000600fe8000000000000000000000000000bb080001000200000014000600fe8000000000000000000000000000aa0800050002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x18085) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x21, 0x800, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r8, &(0x7f00000005c0), 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, 0x0, 0x0) listen(r9, 0x0) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0xf0, 0xfeffffff, 0x218, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 0s ago: executing program 4 (id=1019): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8f5, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) kernel console output (not intermixed with test programs): Comm: syz.2.586 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 155.395195][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.395208][ T7766] Call Trace: [ 155.395215][ T7766] [ 155.395224][ T7766] dump_stack_lvl+0x241/0x360 [ 155.395257][ T7766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.395281][ T7766] ? __pfx__printk+0x10/0x10 [ 155.395308][ T7766] ? snprintf+0xda/0x120 [ 155.395343][ T7766] should_fail_ex+0x40a/0x550 [ 155.395379][ T7766] _copy_to_user+0x31/0xb0 [ 155.395410][ T7766] simple_read_from_buffer+0xca/0x150 [ 155.395442][ T7766] proc_fail_nth_read+0x1e9/0x250 [ 155.395475][ T7766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.395508][ T7766] ? rw_verify_area+0x243/0x630 [ 155.395529][ T7766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.395561][ T7766] vfs_read+0x1f8/0xb40 [ 155.395583][ T7766] ? fdget_pos+0x254/0x320 [ 155.395615][ T7766] ? __pfx___mutex_lock+0x10/0x10 [ 155.395641][ T7766] ? __pfx_vfs_read+0x10/0x10 [ 155.395666][ T7766] ? __fget_files+0x2a/0x410 [ 155.395698][ T7766] ? __fget_files+0x395/0x410 [ 155.395726][ T7766] ? __fget_files+0x2a/0x410 [ 155.395766][ T7766] ksys_read+0x18f/0x2b0 [ 155.395790][ T7766] ? __pfx_ksys_read+0x10/0x10 [ 155.395813][ T7766] ? do_syscall_64+0x100/0x230 [ 155.395842][ T7766] ? do_syscall_64+0xb6/0x230 [ 155.395878][ T7766] do_syscall_64+0xf3/0x230 [ 155.395903][ T7766] ? clear_bhb_loop+0x35/0x90 [ 155.395937][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.395965][ T7766] RIP: 0033:0x7f970c98bb7c [ 155.395984][ T7766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 155.396002][ T7766] RSP: 002b:00007f970a7f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.396024][ T7766] RAX: ffffffffffffffda RBX: 00007f970cba5fa0 RCX: 00007f970c98bb7c [ 155.396040][ T7766] RDX: 000000000000000f RSI: 00007f970a7f60a0 RDI: 0000000000000006 [ 155.396053][ T7766] RBP: 00007f970a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.396065][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.396077][ T7766] R13: 0000000000000000 R14: 00007f970cba5fa0 R15: 00007ffc67996df8 [ 155.396109][ T7766] [ 155.922619][ T7776] __nla_validate_parse: 2 callbacks suppressed [ 155.922642][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.589'. [ 155.985478][ T7776] unsupported nlmsg_type 40 [ 156.093637][ T7781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.361516][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.594'. [ 156.729489][ T7800] netlink: 44 bytes leftover after parsing attributes in process `syz.3.599'. [ 156.981951][ T7808] FAULT_INJECTION: forcing a failure. [ 156.981951][ T7808] name failslab, interval 1, probability 0, space 0, times 0 [ 157.014981][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.0.602 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 157.015012][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.015026][ T7808] Call Trace: [ 157.015033][ T7808] [ 157.015042][ T7808] dump_stack_lvl+0x241/0x360 [ 157.015074][ T7808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.015097][ T7808] ? __pfx__printk+0x10/0x10 [ 157.015130][ T7808] should_fail_ex+0x40a/0x550 [ 157.015166][ T7808] should_failslab+0xac/0x100 [ 157.015196][ T7808] ? skb_clone+0x20c/0x390 [ 157.015218][ T7808] kmem_cache_alloc_noprof+0x70/0x380 [ 157.015254][ T7808] skb_clone+0x20c/0x390 [ 157.015282][ T7808] __netlink_deliver_tap+0x3c4/0x7f0 [ 157.015324][ T7808] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.015352][ T7808] netlink_deliver_tap+0x19d/0x1b0 [ 157.015383][ T7808] netlink_unicast+0x7c4/0x990 [ 157.015418][ T7808] ? __pfx_netlink_unicast+0x10/0x10 [ 157.015442][ T7808] ? __virt_addr_valid+0x45f/0x530 [ 157.015464][ T7808] ? __phys_addr_symbol+0x2f/0x70 [ 157.015483][ T7808] ? __check_object_size+0x47a/0x730 [ 157.015517][ T7808] netlink_sendmsg+0x8de/0xcb0 [ 157.015560][ T7808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.015595][ T7808] ? aa_sock_msg_perm+0x91/0x160 [ 157.015634][ T7808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.015661][ T7808] __sock_sendmsg+0x221/0x270 [ 157.015693][ T7808] ____sys_sendmsg+0x53a/0x860 [ 157.015725][ T7808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.015746][ T7808] ? __fget_files+0x2a/0x410 [ 157.015780][ T7808] ? __fget_files+0x2a/0x410 [ 157.015820][ T7808] __sys_sendmsg+0x269/0x350 [ 157.015848][ T7808] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.015885][ T7808] ? do_sys_openat2+0x17a/0x1d0 [ 157.015944][ T7808] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.015984][ T7808] ? do_syscall_64+0x100/0x230 [ 157.016013][ T7808] ? do_syscall_64+0xb6/0x230 [ 157.016041][ T7808] do_syscall_64+0xf3/0x230 [ 157.016067][ T7808] ? clear_bhb_loop+0x35/0x90 [ 157.016100][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.016128][ T7808] RIP: 0033:0x7fa7af58d169 [ 157.016147][ T7808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.016166][ T7808] RSP: 002b:00007fa7b0494038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.016187][ T7808] RAX: ffffffffffffffda RBX: 00007fa7af7a5fa0 RCX: 00007fa7af58d169 [ 157.016203][ T7808] RDX: 0000000000000000 RSI: 0000400000000340 RDI: 0000000000000004 [ 157.016215][ T7808] RBP: 00007fa7b0494090 R08: 0000000000000000 R09: 0000000000000000 [ 157.016228][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.016239][ T7808] R13: 0000000000000000 R14: 00007fa7af7a5fa0 R15: 00007fff5c381e78 [ 157.016271][ T7808] [ 157.686314][ T7712] Set syz1 is full, maxelem 65536 reached [ 159.129296][ T7805] lo speed is unknown, defaulting to 1000 [ 159.151503][ T7805] lo speed is unknown, defaulting to 1000 [ 159.199799][ T7805] lo speed is unknown, defaulting to 1000 [ 159.584222][ T7805] infiniband : set active [ 159.591661][ T5878] lo speed is unknown, defaulting to 1000 [ 159.603587][ T7805] infiniband : added lo [ 159.611779][ T7805] : rxe_create_cq: returned err = -12 [ 159.625446][ T7805] infiniband : Couldn't create ib_mad CQ [ 159.636200][ T7805] infiniband : Couldn't open port 1 [ 159.669170][ T7833] netlink: 276 bytes leftover after parsing attributes in process `syz.3.609'. [ 159.695779][ T7805] RDS/IB: : added [ 159.712148][ T7805] smc: adding ib device  with port count 1 [ 159.732011][ T7805] smc: ib device  port 1 has pnetid [ 159.760052][ T5878] lo speed is unknown, defaulting to 1000 [ 159.780724][ T7805] lo speed is unknown, defaulting to 1000 [ 159.872390][ T7839] netlink: 44 bytes leftover after parsing attributes in process `syz.4.611'. [ 160.251022][ T7805] lo speed is unknown, defaulting to 1000 [ 160.632131][ T7858] veth1_macvtap: left promiscuous mode [ 160.734010][ T7864] netlink: 48 bytes leftover after parsing attributes in process `syz.4.621'. [ 160.743437][ T7805] lo speed is unknown, defaulting to 1000 [ 160.958028][ T7870] vlan3: entered promiscuous mode [ 160.979286][ T7870] team0: entered promiscuous mode [ 160.984397][ T7870] team_slave_0: entered promiscuous mode [ 161.046082][ T7870] team_slave_1: entered promiscuous mode [ 161.137386][ T7805] lo speed is unknown, defaulting to 1000 [ 161.518757][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.631'. [ 161.524487][ T7887] FAULT_INJECTION: forcing a failure. [ 161.524487][ T7887] name failslab, interval 1, probability 0, space 0, times 0 [ 161.540739][ T7887] CPU: 1 UID: 0 PID: 7887 Comm: syz.4.630 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 161.540766][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.540780][ T7887] Call Trace: [ 161.540787][ T7887] [ 161.540796][ T7887] dump_stack_lvl+0x241/0x360 [ 161.540829][ T7887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.540853][ T7887] ? __pfx__printk+0x10/0x10 [ 161.540881][ T7887] ? __pfx_lock_acquire+0x10/0x10 [ 161.540920][ T7887] should_fail_ex+0x40a/0x550 [ 161.540958][ T7887] should_failslab+0xac/0x100 [ 161.540988][ T7887] ? __inet_hash_connect+0x167c/0x2580 [ 161.541016][ T7887] kmem_cache_alloc_noprof+0x70/0x380 [ 161.541053][ T7887] __inet_hash_connect+0x167c/0x2580 [ 161.541104][ T7887] ? __inet_hash_connect+0x5e2/0x2580 [ 161.541139][ T7887] ? __pfx___inet_hash_connect+0x10/0x10 [ 161.541177][ T7887] ? inet_hash_connect+0x149/0x240 [ 161.541211][ T7887] tcp_v4_connect+0xd04/0x1ba0 [ 161.541258][ T7887] ? __pfx_tcp_v4_connect+0x10/0x10 [ 161.541281][ T7887] ? mptcp_connect+0x6dd/0xc30 [ 161.541308][ T7887] ? do_raw_spin_unlock+0x13c/0x8b0 [ 161.541347][ T7887] mptcp_connect+0x788/0xc30 [ 161.541373][ T7887] __inet_stream_connect+0x262/0xf30 [ 161.541400][ T7887] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.541438][ T7887] ? __local_bh_enable_ip+0x168/0x200 [ 161.541463][ T7887] ? lockdep_hardirqs_on+0x99/0x150 [ 161.541487][ T7887] ? __pfx___inet_stream_connect+0x10/0x10 [ 161.541508][ T7887] ? __local_bh_enable_ip+0x168/0x200 [ 161.541533][ T7887] ? inet_stream_connect+0x50/0xa0 [ 161.541556][ T7887] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 161.541594][ T7887] inet_stream_connect+0x65/0xa0 [ 161.541620][ T7887] __sys_connect+0x288/0x2d0 [ 161.541654][ T7887] ? __fget_files+0x2a/0x410 [ 161.541684][ T7887] ? __pfx___sys_connect+0x10/0x10 [ 161.541731][ T7887] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.541766][ T7887] ? do_syscall_64+0x100/0x230 [ 161.541796][ T7887] __x64_sys_connect+0x7a/0x90 [ 161.541831][ T7887] do_syscall_64+0xf3/0x230 [ 161.541856][ T7887] ? clear_bhb_loop+0x35/0x90 [ 161.541890][ T7887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.541919][ T7887] RIP: 0033:0x7f6958d8d169 [ 161.541938][ T7887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.541956][ T7887] RSP: 002b:00007f6959c78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 161.541978][ T7887] RAX: ffffffffffffffda RBX: 00007f6958fa5fa0 RCX: 00007f6958d8d169 [ 161.541993][ T7887] RDX: 0000000000000010 RSI: 0000400000000000 RDI: 0000000000000007 [ 161.542006][ T7887] RBP: 00007f6959c78090 R08: 0000000000000000 R09: 0000000000000000 [ 161.542019][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.542031][ T7887] R13: 0000000000000000 R14: 00007f6958fa5fa0 R15: 00007fffd774a838 [ 161.542063][ T7887] [ 162.010048][ T7895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 162.114613][ T7898] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 162.148017][ T7886] lo speed is unknown, defaulting to 1000 [ 162.365889][ T7902] netlink: 'syz.0.635': attribute type 15 has an invalid length. [ 162.635943][ T7892] lo speed is unknown, defaulting to 1000 [ 162.650026][ T7906] netlink: 52 bytes leftover after parsing attributes in process `syz.0.637'. [ 162.977878][ T7805] lo speed is unknown, defaulting to 1000 [ 163.337578][ T7928] FAULT_INJECTION: forcing a failure. [ 163.337578][ T7928] name failslab, interval 1, probability 0, space 0, times 0 [ 163.379354][ T7928] CPU: 0 UID: 0 PID: 7928 Comm: syz.4.644 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 163.379385][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.379399][ T7928] Call Trace: [ 163.379406][ T7928] [ 163.379415][ T7928] dump_stack_lvl+0x241/0x360 [ 163.379447][ T7928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.379470][ T7928] ? __pfx__printk+0x10/0x10 [ 163.379492][ T7928] ? __kmalloc_noprof+0xb5/0x4c0 [ 163.379520][ T7928] ? __pfx___might_resched+0x10/0x10 [ 163.379550][ T7928] should_fail_ex+0x40a/0x550 [ 163.379585][ T7928] should_failslab+0xac/0x100 [ 163.379615][ T7928] __kmalloc_noprof+0xdd/0x4c0 [ 163.379643][ T7928] ? security_sk_alloc+0x53/0x360 [ 163.379672][ T7928] security_sk_alloc+0x53/0x360 [ 163.379700][ T7928] sk_prot_alloc+0xfa/0x210 [ 163.379721][ T7928] ? sk_alloc+0x27/0x370 [ 163.379743][ T7928] sk_alloc+0x3e/0x370 [ 163.379768][ T7928] bpf_prog_test_run_skb+0x3b3/0x1830 [ 163.379798][ T7928] ? __pfx_lock_release+0x10/0x10 [ 163.379840][ T7928] ? __pfx___might_resched+0x10/0x10 [ 163.379874][ T7928] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 163.379900][ T7928] ? __fget_files+0x2a/0x410 [ 163.379934][ T7928] ? fput+0x21b/0x290 [ 163.379961][ T7928] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 163.379991][ T7928] bpf_prog_test_run+0x2e4/0x360 [ 163.380026][ T7928] __sys_bpf+0x487/0x820 [ 163.380056][ T7928] ? __pfx___sys_bpf+0x10/0x10 [ 163.380097][ T7928] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 163.380139][ T7928] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.380173][ T7928] ? do_syscall_64+0x100/0x230 [ 163.380202][ T7928] __x64_sys_bpf+0x7c/0x90 [ 163.380229][ T7928] do_syscall_64+0xf3/0x230 [ 163.380255][ T7928] ? clear_bhb_loop+0x35/0x90 [ 163.380287][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.380316][ T7928] RIP: 0033:0x7f6958d8d169 [ 163.380334][ T7928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.380352][ T7928] RSP: 002b:00007f6959c78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.380375][ T7928] RAX: ffffffffffffffda RBX: 00007f6958fa5fa0 RCX: 00007f6958d8d169 [ 163.380391][ T7928] RDX: 0000000000000048 RSI: 0000400000000780 RDI: 000000000000000a [ 163.380404][ T7928] RBP: 00007f6959c78090 R08: 0000000000000000 R09: 0000000000000000 [ 163.380417][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.380430][ T7928] R13: 0000000000000000 R14: 00007f6958fa5fa0 R15: 00007fffd774a838 [ 163.380458][ T7928] [ 163.762516][ T7934] FAULT_INJECTION: forcing a failure. [ 163.762516][ T7934] name failslab, interval 1, probability 0, space 0, times 0 [ 163.775623][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.0.647 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 163.775651][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.775665][ T7934] Call Trace: [ 163.775672][ T7934] [ 163.775681][ T7934] dump_stack_lvl+0x241/0x360 [ 163.775712][ T7934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.775737][ T7934] ? __pfx__printk+0x10/0x10 [ 163.775772][ T7934] should_fail_ex+0x40a/0x550 [ 163.775809][ T7934] should_failslab+0xac/0x100 [ 163.775837][ T7934] ? skb_clone+0x20c/0x390 [ 163.775859][ T7934] kmem_cache_alloc_noprof+0x70/0x380 [ 163.775894][ T7934] skb_clone+0x20c/0x390 [ 163.775922][ T7934] __netlink_deliver_tap+0x3c4/0x7f0 [ 163.775963][ T7934] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.775990][ T7934] netlink_deliver_tap+0x19d/0x1b0 [ 163.776019][ T7934] netlink_unicast+0x7c4/0x990 [ 163.776054][ T7934] ? __pfx_netlink_unicast+0x10/0x10 [ 163.776077][ T7934] ? __virt_addr_valid+0x45f/0x530 [ 163.776110][ T7934] ? __phys_addr_symbol+0x2f/0x70 [ 163.776130][ T7934] ? __check_object_size+0x47a/0x730 [ 163.776163][ T7934] netlink_sendmsg+0x8de/0xcb0 [ 163.776204][ T7934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.776239][ T7934] ? aa_sock_msg_perm+0x91/0x160 [ 163.776276][ T7934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.776302][ T7934] __sock_sendmsg+0x221/0x270 [ 163.776335][ T7934] ____sys_sendmsg+0x53a/0x860 [ 163.776367][ T7934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.776388][ T7934] ? __fget_files+0x2a/0x410 [ 163.776421][ T7934] ? __fget_files+0x2a/0x410 [ 163.776459][ T7934] __sys_sendmsg+0x269/0x350 [ 163.776487][ T7934] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.776524][ T7934] ? do_sys_openat2+0x17a/0x1d0 [ 163.776577][ T7934] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.776611][ T7934] ? do_syscall_64+0x100/0x230 [ 163.776640][ T7934] ? do_syscall_64+0xb6/0x230 [ 163.776668][ T7934] do_syscall_64+0xf3/0x230 [ 163.776692][ T7934] ? clear_bhb_loop+0x35/0x90 [ 163.776724][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.776751][ T7934] RIP: 0033:0x7fa7af58d169 [ 163.776769][ T7934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.776787][ T7934] RSP: 002b:00007fa7b0494038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.776809][ T7934] RAX: ffffffffffffffda RBX: 00007fa7af7a5fa0 RCX: 00007fa7af58d169 [ 163.776824][ T7934] RDX: 0000000020040004 RSI: 0000400000000380 RDI: 0000000000000003 [ 163.776838][ T7934] RBP: 00007fa7b0494090 R08: 0000000000000000 R09: 0000000000000000 [ 163.776850][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.776862][ T7934] R13: 0000000000000000 R14: 00007fa7af7a5fa0 R15: 00007fff5c381e78 [ 163.776893][ T7934] [ 164.138402][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 164.151306][ T7938] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 164.253310][ T7941] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.650'. [ 164.441705][ T7949] lo speed is unknown, defaulting to 1000 [ 164.478742][ T7949] lo speed is unknown, defaulting to 1000 [ 164.500167][ T7949] lo speed is unknown, defaulting to 1000 [ 164.543311][ T7949] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.577537][ T7952] tap0: tun_chr_ioctl cmd 1074025677 [ 164.579450][ T7949] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 164.596469][ T7952] tap0: linktype set to 804 [ 164.614774][ T7949] lo speed is unknown, defaulting to 1000 [ 164.622263][ T7949] lo speed is unknown, defaulting to 1000 [ 164.629417][ T7949] lo speed is unknown, defaulting to 1000 [ 164.636671][ T7949] lo speed is unknown, defaulting to 1000 [ 164.643977][ T7949] lo speed is unknown, defaulting to 1000 [ 164.651176][ T7949] lo speed is unknown, defaulting to 1000 [ 164.882381][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.656'. [ 165.355517][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 165.386554][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 165.626629][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 165.850472][ T7983] FAULT_INJECTION: forcing a failure. [ 165.850472][ T7983] name failslab, interval 1, probability 0, space 0, times 0 [ 165.875431][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.2.668 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 165.875461][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.875475][ T7983] Call Trace: [ 165.875482][ T7983] [ 165.875490][ T7983] dump_stack_lvl+0x241/0x360 [ 165.875522][ T7983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.875546][ T7983] ? __pfx__printk+0x10/0x10 [ 165.875583][ T7983] should_fail_ex+0x40a/0x550 [ 165.875619][ T7983] should_failslab+0xac/0x100 [ 165.875647][ T7983] ? skb_clone+0x20c/0x390 [ 165.875669][ T7983] kmem_cache_alloc_noprof+0x70/0x380 [ 165.875705][ T7983] skb_clone+0x20c/0x390 [ 165.875733][ T7983] __netlink_deliver_tap+0x3c4/0x7f0 [ 165.875773][ T7983] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.875800][ T7983] netlink_deliver_tap+0x19d/0x1b0 [ 165.875831][ T7983] netlink_unicast+0x7c4/0x990 [ 165.875865][ T7983] ? __pfx_netlink_unicast+0x10/0x10 [ 165.875888][ T7983] ? __virt_addr_valid+0x45f/0x530 [ 165.875910][ T7983] ? __phys_addr_symbol+0x2f/0x70 [ 165.875942][ T7983] ? __check_object_size+0x47a/0x730 [ 165.875976][ T7983] netlink_sendmsg+0x8de/0xcb0 [ 165.876019][ T7983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.876054][ T7983] ? aa_sock_msg_perm+0x91/0x160 [ 165.876093][ T7983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.876120][ T7983] __sock_sendmsg+0x221/0x270 [ 165.876152][ T7983] ____sys_sendmsg+0x53a/0x860 [ 165.876183][ T7983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.876203][ T7983] ? __fget_files+0x2a/0x410 [ 165.876235][ T7983] ? __fget_files+0x2a/0x410 [ 165.876274][ T7983] __sys_sendmsg+0x269/0x350 [ 165.876302][ T7983] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.876339][ T7983] ? do_sys_openat2+0x17a/0x1d0 [ 165.876395][ T7983] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.876429][ T7983] ? do_syscall_64+0x100/0x230 [ 165.876457][ T7983] ? do_syscall_64+0xb6/0x230 [ 165.876484][ T7983] do_syscall_64+0xf3/0x230 [ 165.876509][ T7983] ? clear_bhb_loop+0x35/0x90 [ 165.876542][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.876571][ T7983] RIP: 0033:0x7f970c98d169 [ 165.876591][ T7983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.876609][ T7983] RSP: 002b:00007f970a7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.876631][ T7983] RAX: ffffffffffffffda RBX: 00007f970cba5fa0 RCX: 00007f970c98d169 [ 165.876647][ T7983] RDX: 0000000000000010 RSI: 0000400000000000 RDI: 0000000000000003 [ 165.876660][ T7983] RBP: 00007f970a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 165.876673][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.876685][ T7983] R13: 0000000000000000 R14: 00007f970cba5fa0 R15: 00007ffc67996df8 [ 165.876717][ T7983] [ 166.198905][ T7986] syz_tun: entered allmulticast mode [ 166.256721][ T7986] syz_tun: left allmulticast mode [ 166.315884][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 166.513983][ T8003] lo: entered allmulticast mode [ 166.527786][ T8003] lo: left allmulticast mode [ 166.692848][ T8011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.700212][ T8011] IPv6: NLM_F_CREATE should be set when creating new route [ 166.718188][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 166.743199][ T8014] bridge0: port 1(dummy0) entered blocking state [ 166.761040][ T8014] bridge0: port 1(dummy0) entered disabled state [ 166.775827][ T8014] dummy0: entered allmulticast mode [ 166.792016][ T8014] dummy0: entered promiscuous mode [ 166.804121][ T8014] bridge0: port 1(dummy0) entered blocking state [ 166.810779][ T8014] bridge0: port 1(dummy0) entered forwarding state [ 167.005610][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 167.381202][ T8037] FAULT_INJECTION: forcing a failure. [ 167.381202][ T8037] name failslab, interval 1, probability 0, space 0, times 0 [ 167.406690][ T8037] CPU: 1 UID: 0 PID: 8037 Comm: syz.2.689 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 167.406721][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.406735][ T8037] Call Trace: [ 167.406742][ T8037] [ 167.406750][ T8037] dump_stack_lvl+0x241/0x360 [ 167.406782][ T8037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.406806][ T8037] ? __pfx__printk+0x10/0x10 [ 167.406829][ T8037] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 167.406860][ T8037] ? __pfx___might_resched+0x10/0x10 [ 167.406892][ T8037] should_fail_ex+0x40a/0x550 [ 167.406926][ T8037] should_failslab+0xac/0x100 [ 167.406953][ T8037] kmem_cache_alloc_node_noprof+0x77/0x380 [ 167.406982][ T8037] ? __alloc_skb+0x1c3/0x440 [ 167.407001][ T8037] __alloc_skb+0x1c3/0x440 [ 167.407015][ T8037] ? __lock_acquire+0x1397/0x2100 [ 167.407051][ T8037] ? __pfx___alloc_skb+0x10/0x10 [ 167.407068][ T8037] ? __pfx_validate_chain+0x10/0x10 [ 167.407091][ T8037] alloc_skb_with_frags+0xc3/0x820 [ 167.407120][ T8037] sock_alloc_send_pskb+0x91a/0xa60 [ 167.407153][ T8037] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 167.407173][ T8037] ? mark_lock+0x9a/0x360 [ 167.407192][ T8037] ? __lock_acquire+0x1397/0x2100 [ 167.407222][ T8037] __ip_append_data+0x3013/0x46b0 [ 167.407256][ T8037] ? __pfx_udplite_getfrag+0x10/0x10 [ 167.407275][ T8037] ? __pfx_lock_release+0x10/0x10 [ 167.407313][ T8037] ? __pfx___ip_append_data+0x10/0x10 [ 167.407328][ T8037] ? __pfx_ipv4_mtu+0x10/0x10 [ 167.407354][ T8037] ? ip_setup_cork+0x580/0x9a0 [ 167.407373][ T8037] ip_make_skb+0x198/0x420 [ 167.407394][ T8037] ? __pfx_udplite_getfrag+0x10/0x10 [ 167.407413][ T8037] ? __pfx_ip_make_skb+0x10/0x10 [ 167.407428][ T8037] ? widen_string+0x3a/0x280 [ 167.407456][ T8037] udp_sendmsg+0x1c77/0x2c90 [ 167.407476][ T8037] ? look_up_lock_class+0x77/0x170 [ 167.407509][ T8037] ? __pfx_udplite_getfrag+0x10/0x10 [ 167.407527][ T8037] ? __pfx_udp_sendmsg+0x10/0x10 [ 167.407550][ T8037] ? __pfx_validate_chain+0x10/0x10 [ 167.407572][ T8037] ? __lock_acquire+0x1397/0x2100 [ 167.407603][ T8037] ? mark_lock+0x9a/0x360 [ 167.407631][ T8037] udpv6_sendmsg+0xe4a/0x3070 [ 167.407655][ T8037] ? release_sock+0x30/0x1f0 [ 167.407696][ T8037] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 167.407719][ T8037] ? inet_send_prepare+0x1b7/0x260 [ 167.407739][ T8037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.407774][ T8037] ? inet_send_prepare+0x1b7/0x260 [ 167.407792][ T8037] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 167.407813][ T8037] ? inet_send_prepare+0x1b7/0x260 [ 167.407830][ T8037] ? do_raw_spin_unlock+0x13c/0x8b0 [ 167.407857][ T8037] ? inet_send_prepare+0x1b7/0x260 [ 167.407880][ T8037] __sock_sendmsg+0xef/0x270 [ 167.407905][ T8037] ____sys_sendmsg+0x53a/0x860 [ 167.407929][ T8037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.407945][ T8037] ? __fget_files+0x2a/0x410 [ 167.407971][ T8037] ? __fget_files+0x2a/0x410 [ 167.408002][ T8037] __sys_sendmmsg+0x36a/0x720 [ 167.408027][ T8037] ? __pfx___sys_sendmmsg+0x10/0x10 [ 167.408062][ T8037] ? __pfx_lock_release+0x10/0x10 [ 167.408085][ T8037] ? kstrtouint_from_user+0x128/0x190 [ 167.408120][ T8037] ? ksys_write+0x22a/0x2b0 [ 167.408138][ T8037] ? __pfx_lock_release+0x10/0x10 [ 167.408167][ T8037] ? sb_end_write+0xe9/0x1c0 [ 167.408190][ T8037] ? vfs_write+0x7fa/0xd10 [ 167.408209][ T8037] ? __mutex_unlock_slowpath+0x227/0x800 [ 167.408250][ T8037] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 167.408278][ T8037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.408304][ T8037] ? do_syscall_64+0x100/0x230 [ 167.408327][ T8037] __x64_sys_sendmmsg+0xa0/0xb0 [ 167.408347][ T8037] do_syscall_64+0xf3/0x230 [ 167.408366][ T8037] ? clear_bhb_loop+0x35/0x90 [ 167.408393][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.408416][ T8037] RIP: 0033:0x7f970c98d169 [ 167.408430][ T8037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.408444][ T8037] RSP: 002b:00007f970a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 167.408463][ T8037] RAX: ffffffffffffffda RBX: 00007f970cba5fa0 RCX: 00007f970c98d169 [ 167.408475][ T8037] RDX: 0000000000000001 RSI: 0000400000000b00 RDI: 0000000000000004 [ 167.408486][ T8037] RBP: 00007f970a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.408496][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.408506][ T8037] R13: 0000000000000000 R14: 00007f970cba5fa0 R15: 00007ffc67996df8 [ 167.408528][ T8037] [ 167.409635][ T8038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.690'. [ 167.599189][ T8040] sctp: [Deprecated]: syz.2.691 (pid 8040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.599189][ T8040] Use struct sctp_sack_info instead [ 168.063402][ T8052] netlink: 308 bytes leftover after parsing attributes in process `syz.4.695'. [ 168.106169][ T8055] FAULT_INJECTION: forcing a failure. [ 168.106169][ T8055] name failslab, interval 1, probability 0, space 0, times 0 [ 168.139562][ T8055] CPU: 1 UID: 0 PID: 8055 Comm: syz.3.696 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 168.139595][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.139609][ T8055] Call Trace: [ 168.139617][ T8055] [ 168.139626][ T8055] dump_stack_lvl+0x241/0x360 [ 168.139658][ T8055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.139682][ T8055] ? __pfx__printk+0x10/0x10 [ 168.139717][ T8055] should_fail_ex+0x40a/0x550 [ 168.139754][ T8055] should_failslab+0xac/0x100 [ 168.139790][ T8055] ? skb_clone+0x20c/0x390 [ 168.139812][ T8055] kmem_cache_alloc_noprof+0x70/0x380 [ 168.139848][ T8055] skb_clone+0x20c/0x390 [ 168.139876][ T8055] __netlink_deliver_tap+0x3c4/0x7f0 [ 168.139919][ T8055] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.139947][ T8055] netlink_deliver_tap+0x19d/0x1b0 [ 168.139982][ T8055] netlink_unicast+0x7c4/0x990 [ 168.140016][ T8055] ? __pfx_netlink_unicast+0x10/0x10 [ 168.140039][ T8055] ? __virt_addr_valid+0x45f/0x530 [ 168.140060][ T8055] ? __phys_addr_symbol+0x2f/0x70 [ 168.140079][ T8055] ? __check_object_size+0x47a/0x730 [ 168.140110][ T8055] netlink_sendmsg+0x8de/0xcb0 [ 168.140153][ T8055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.140187][ T8055] ? aa_sock_msg_perm+0x91/0x160 [ 168.140224][ T8055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.140250][ T8055] __sock_sendmsg+0x221/0x270 [ 168.140280][ T8055] ____sys_sendmsg+0x53a/0x860 [ 168.140310][ T8055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.140330][ T8055] ? __fget_files+0x2a/0x410 [ 168.140361][ T8055] ? __fget_files+0x2a/0x410 [ 168.140401][ T8055] __sys_sendmsg+0x269/0x350 [ 168.140429][ T8055] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.140465][ T8055] ? do_sys_openat2+0x17a/0x1d0 [ 168.140523][ T8055] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.140558][ T8055] ? do_syscall_64+0x100/0x230 [ 168.140587][ T8055] ? do_syscall_64+0xb6/0x230 [ 168.140614][ T8055] do_syscall_64+0xf3/0x230 [ 168.140639][ T8055] ? clear_bhb_loop+0x35/0x90 [ 168.140672][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.140701][ T8055] RIP: 0033:0x7f8aea78d169 [ 168.140720][ T8055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.140739][ T8055] RSP: 002b:00007f8aeb54b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.140770][ T8055] RAX: ffffffffffffffda RBX: 00007f8aea9a5fa0 RCX: 00007f8aea78d169 [ 168.140786][ T8055] RDX: 0000000000000000 RSI: 0000400000000480 RDI: 0000000000000007 [ 168.140799][ T8055] RBP: 00007f8aeb54b090 R08: 0000000000000000 R09: 0000000000000000 [ 168.140811][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.140823][ T8055] R13: 0000000000000000 R14: 00007f8aea9a5fa0 R15: 00007ffd7ccffe88 [ 168.140851][ T8055] [ 168.588386][ T8059] FAULT_INJECTION: forcing a failure. [ 168.588386][ T8059] name failslab, interval 1, probability 0, space 0, times 0 [ 168.665884][ T8060] tipc: Started in network mode [ 168.670848][ T8060] tipc: Node identity , cluster identity 4711 [ 168.677095][ T8060] tipc: Failed to obtain node identity [ 168.681814][ T8059] CPU: 0 UID: 0 PID: 8059 Comm: syz.4.695 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 168.681848][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.681862][ T8059] Call Trace: [ 168.681871][ T8059] [ 168.681880][ T8059] dump_stack_lvl+0x241/0x360 [ 168.681917][ T8059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.681943][ T8059] ? __pfx__printk+0x10/0x10 [ 168.681968][ T8059] ? __kmalloc_cache_noprof+0x48/0x390 [ 168.682002][ T8059] ? __pfx___might_resched+0x10/0x10 [ 168.682040][ T8059] should_fail_ex+0x40a/0x550 [ 168.682079][ T8059] should_failslab+0xac/0x100 [ 168.682111][ T8059] __kmalloc_cache_noprof+0x70/0x390 [ 168.682140][ T8059] ? allocate_file_region_entries+0x204/0x670 [ 168.682173][ T8059] allocate_file_region_entries+0x204/0x670 [ 168.682214][ T8059] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 168.682256][ T8059] region_chg+0x2b4/0x390 [ 168.682296][ T8059] __vma_reservation_common+0x3c1/0x7e0 [ 168.682340][ T8059] ? __pfx___vma_reservation_common+0x10/0x10 [ 168.682376][ T8059] ? __pfx_lock_release+0x10/0x10 [ 168.682419][ T8059] alloc_hugetlb_folio+0x312/0x1830 [ 168.682457][ T8059] ? filemap_get_entry+0x328/0x3b0 [ 168.682490][ T8059] ? filemap_get_entry+0x123/0x3b0 [ 168.682523][ T8059] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 168.682549][ T8059] ? register_lock_class+0x102/0x980 [ 168.682587][ T8059] ? __pfx_down_read+0x10/0x10 [ 168.682617][ T8059] ? huge_pte_alloc+0x37b/0x520 [ 168.682657][ T8059] ? __lock_acquire+0x1397/0x2100 [ 168.682707][ T8059] hugetlb_fault+0x24f7/0x3360 [ 168.682768][ T8059] ? __pfx_hugetlb_fault+0x10/0x10 [ 168.682799][ T8059] ? __pfx___might_resched+0x10/0x10 [ 168.682834][ T8059] ? mt_find+0x6c8/0x920 [ 168.682886][ T8059] ? __get_user_pages+0x17c9/0x4140 [ 168.682927][ T8059] ? __up_read+0x2c2/0x6b0 [ 168.682956][ T8059] handle_mm_fault+0x742/0x8d0 [ 168.683003][ T8059] __get_user_pages+0x1a92/0x4140 [ 168.683051][ T8059] ? mark_lock+0x9a/0x360 [ 168.683102][ T8059] ? __pfx___get_user_pages+0x10/0x10 [ 168.683142][ T8059] ? __pfx_down_read_killable+0x10/0x10 [ 168.683176][ T8059] ? __pfx_lock_acquire+0x10/0x10 [ 168.683209][ T8059] ? try_get_folio+0xf1/0x6f0 [ 168.683233][ T8059] ? __pfx_lock_release+0x10/0x10 [ 168.683275][ T8059] __gup_longterm_locked+0xe64/0x17f0 [ 168.683314][ T8059] ? mark_lock+0x9a/0x360 [ 168.683341][ T8059] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 168.683374][ T8059] ? __pfx___gup_longterm_locked+0x10/0x10 [ 168.683401][ T8059] ? sanity_check_pinned_pages+0x11b2/0x12a0 [ 168.683447][ T8059] gup_fast_fallback+0x2266/0x29c0 [ 168.683469][ T8059] ? ima_match_policy+0x114/0x2100 [ 168.683529][ T8059] ? __pfx_gup_fast_fallback+0x10/0x10 [ 168.683558][ T8059] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 168.683595][ T8059] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.683636][ T8059] ? lockdep_hardirqs_on+0x99/0x150 [ 168.683686][ T8059] ? is_valid_gup_args+0x124/0x200 [ 168.683712][ T8059] pin_user_pages_fast+0xcc/0x160 [ 168.683740][ T8059] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 168.683763][ T8059] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 168.683801][ T8059] iov_iter_extract_pages+0x3bb/0x5c0 [ 168.683841][ T8059] extract_iter_to_sg+0xea6/0x2650 [ 168.683870][ T8059] ? sg_next+0x7d/0xb0 [ 168.683914][ T8059] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 168.683940][ T8059] ? unpin_user_page+0xe0/0x1e0 [ 168.683973][ T8059] ? __pfx_unpin_user_page+0x10/0x10 [ 168.684004][ T8059] ? __local_bh_enable_ip+0x168/0x200 [ 168.684034][ T8059] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 168.684062][ T8059] ? do_raw_spin_unlock+0x13c/0x8b0 [ 168.684096][ T8059] ? __asan_memset+0x23/0x50 [ 168.684122][ T8059] hash_sendmsg+0x513/0x1140 [ 168.684180][ T8059] ? __pfx_hash_sendmsg+0x10/0x10 [ 168.684208][ T8059] __sock_sendmsg+0x221/0x270 [ 168.684243][ T8059] ____sys_sendmsg+0x53a/0x860 [ 168.684278][ T8059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.684300][ T8059] ? __fget_files+0x2a/0x410 [ 168.684336][ T8059] ? __fget_files+0x2a/0x410 [ 168.684379][ T8059] __sys_sendmsg+0x269/0x350 [ 168.684409][ T8059] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.684448][ T8059] ? do_sys_openat2+0x17a/0x1d0 [ 168.684513][ T8059] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.684548][ T8059] ? do_syscall_64+0x100/0x230 [ 168.684580][ T8059] ? do_syscall_64+0xb6/0x230 [ 168.684610][ T8059] do_syscall_64+0xf3/0x230 [ 168.684636][ T8059] ? clear_bhb_loop+0x35/0x90 [ 168.684681][ T8059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.684711][ T8059] RIP: 0033:0x7f6958d8d169 [ 168.684732][ T8059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.684751][ T8059] RSP: 002b:00007f6959c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.684775][ T8059] RAX: ffffffffffffffda RBX: 00007f6958fa6080 RCX: 00007f6958d8d169 [ 168.684791][ T8059] RDX: 0000000000000000 RSI: 0000400000008dc0 RDI: 0000000000000006 [ 168.684806][ T8059] RBP: 00007f6959c57090 R08: 0000000000000000 R09: 0000000000000000 [ 168.684819][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.684832][ T8059] R13: 0000000000000000 R14: 00007f6958fa6080 R15: 00007fffd774a838 [ 168.684867][ T8059] [ 169.205215][ T8060] tipc: Enabling of bearer rejected, failed to enable media [ 169.285783][ T8064] lo speed is unknown, defaulting to 1000 [ 169.639532][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 169.900234][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 170.090849][ T8064] lo speed is unknown, defaulting to 1000 [ 170.401386][ T8108] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.710'. [ 170.950900][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 171.216686][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 171.558882][ T8135] bridge0: port 3(dummy0) entered blocking state [ 171.570165][ T8135] bridge0: port 3(dummy0) entered disabled state [ 171.589689][ T8135] dummy0: entered allmulticast mode [ 171.625839][ T8135] dummy0: entered promiscuous mode [ 171.670584][ T8135] bridge0: port 3(dummy0) entered blocking state [ 171.677135][ T8135] bridge0: port 3(dummy0) entered forwarding state [ 171.928177][ T8146] lo speed is unknown, defaulting to 1000 [ 172.061116][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 172.418688][ T8162] IPVS: Scheduler module ip_vs_sip not found [ 172.632120][ T8146] lo speed is unknown, defaulting to 1000 [ 172.681536][ T8172] FAULT_INJECTION: forcing a failure. [ 172.681536][ T8172] name failslab, interval 1, probability 0, space 0, times 0 [ 172.735079][ T8172] CPU: 1 UID: 0 PID: 8172 Comm: syz.2.732 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 172.735112][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.735126][ T8172] Call Trace: [ 172.735133][ T8172] [ 172.735142][ T8172] dump_stack_lvl+0x241/0x360 [ 172.735175][ T8172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.735199][ T8172] ? __pfx__printk+0x10/0x10 [ 172.735222][ T8172] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 172.735253][ T8172] ? __pfx___might_resched+0x10/0x10 [ 172.735285][ T8172] should_fail_ex+0x40a/0x550 [ 172.735321][ T8172] should_failslab+0xac/0x100 [ 172.735351][ T8172] __kmalloc_node_noprof+0xe1/0x4d0 [ 172.735380][ T8172] ? __kvmalloc_node_noprof+0x72/0x190 [ 172.735427][ T8172] __kvmalloc_node_noprof+0x72/0x190 [ 172.735461][ T8172] bpf_test_run_xdp_live+0x290/0x2220 [ 172.735491][ T8172] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 172.735511][ T8172] ? lockdep_hardirqs_on+0x99/0x150 [ 172.735535][ T8172] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 172.735556][ T8172] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 172.735586][ T8172] ? __mutex_unlock_slowpath+0x798/0x800 [ 172.735620][ T8172] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 172.735649][ T8172] ? synchronize_rcu+0x11b/0x360 [ 172.735673][ T8172] ? __pfx_synchronize_rcu+0x10/0x10 [ 172.735721][ T8172] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 172.735752][ T8172] ? 0xffffffffa0000948 [ 172.735770][ T8172] ? 0xffffffffa0001b68 [ 172.735807][ T8172] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 172.735854][ T8172] ? _copy_from_user+0x95/0xb0 [ 172.735883][ T8172] ? bpf_test_init+0x137/0x160 [ 172.735908][ T8172] ? xdp_convert_md_to_buff+0x5b/0x330 [ 172.735940][ T8172] bpf_prog_test_run_xdp+0x805/0x11e0 [ 172.735976][ T8172] ? __pfx_lock_release+0x10/0x10 [ 172.736015][ T8172] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 172.736044][ T8172] ? __fget_files+0x2a/0x410 [ 172.736080][ T8172] ? __fget_files+0x2a/0x410 [ 172.736113][ T8172] ? fput+0x21b/0x290 [ 172.736139][ T8172] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 172.736171][ T8172] bpf_prog_test_run+0x2e4/0x360 [ 172.736204][ T8172] __sys_bpf+0x487/0x820 [ 172.736235][ T8172] ? __pfx___sys_bpf+0x10/0x10 [ 172.736273][ T8172] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 172.736302][ T8172] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.736333][ T8172] ? do_syscall_64+0x100/0x230 [ 172.736361][ T8172] __x64_sys_bpf+0x7c/0x90 [ 172.736388][ T8172] do_syscall_64+0xf3/0x230 [ 172.736425][ T8172] ? clear_bhb_loop+0x35/0x90 [ 172.736457][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.736484][ T8172] RIP: 0033:0x7f970c98d169 [ 172.736502][ T8172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.736520][ T8172] RSP: 002b:00007f970a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.736542][ T8172] RAX: ffffffffffffffda RBX: 00007f970cba5fa0 RCX: 00007f970c98d169 [ 172.736558][ T8172] RDX: 0000000000000050 RSI: 0000400000000000 RDI: 000000000000000a [ 172.736571][ T8172] RBP: 00007f970a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.736584][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.736597][ T8172] R13: 0000000000000000 R14: 00007f970cba5fa0 R15: 00007ffc67996df8 [ 172.736626][ T8172] [ 173.682650][ T8205] sctp: [Deprecated]: syz.4.740 (pid 8205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.682650][ T8205] Use struct sctp_sack_info instead [ 173.713644][ T8152] netlink: 200 bytes leftover after parsing attributes in process `syz.0.726'. [ 173.939952][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 174.500308][ T8231] FAULT_INJECTION: forcing a failure. [ 174.500308][ T8231] name failslab, interval 1, probability 0, space 0, times 0 [ 174.555268][ T8231] CPU: 0 UID: 0 PID: 8231 Comm: syz.2.748 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 174.555300][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.555312][ T8231] Call Trace: [ 174.555319][ T8231] [ 174.555328][ T8231] dump_stack_lvl+0x241/0x360 [ 174.555360][ T8231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.555384][ T8231] ? __pfx__printk+0x10/0x10 [ 174.555408][ T8231] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 174.555439][ T8231] ? __pfx___might_resched+0x10/0x10 [ 174.555470][ T8231] should_fail_ex+0x40a/0x550 [ 174.555505][ T8231] should_failslab+0xac/0x100 [ 174.555536][ T8231] __kmalloc_node_noprof+0xe1/0x4d0 [ 174.555564][ T8231] ? __kvmalloc_node_noprof+0x72/0x190 [ 174.555603][ T8231] __kvmalloc_node_noprof+0x72/0x190 [ 174.555636][ T8231] bpf_test_run_xdp_live+0x290/0x2220 [ 174.555667][ T8231] ? __pfx_lock_release+0x10/0x10 [ 174.555704][ T8231] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 174.555729][ T8231] ? __pfx___might_resched+0x10/0x10 [ 174.555761][ T8231] ? __mutex_unlock_slowpath+0x227/0x800 [ 174.555797][ T8231] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 174.555825][ T8231] ? synchronize_rcu+0x11b/0x360 [ 174.555849][ T8231] ? __pfx_synchronize_rcu+0x10/0x10 [ 174.555896][ T8231] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 174.555926][ T8231] ? 0xffffffffa000094c [ 174.555965][ T8231] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 174.556012][ T8231] ? _copy_from_user+0x95/0xb0 [ 174.556040][ T8231] ? bpf_test_init+0x137/0x160 [ 174.556064][ T8231] ? xdp_convert_md_to_buff+0x5b/0x330 [ 174.556096][ T8231] bpf_prog_test_run_xdp+0x805/0x11e0 [ 174.556131][ T8231] ? __pfx_lock_release+0x10/0x10 [ 174.556171][ T8231] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 174.556202][ T8231] ? __fget_files+0x2a/0x410 [ 174.556247][ T8231] ? __fget_files+0x2a/0x410 [ 174.556280][ T8231] ? fput+0x21b/0x290 [ 174.556307][ T8231] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 174.556338][ T8231] bpf_prog_test_run+0x2e4/0x360 [ 174.556374][ T8231] __sys_bpf+0x487/0x820 [ 174.556406][ T8231] ? __pfx___sys_bpf+0x10/0x10 [ 174.556448][ T8231] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.556484][ T8231] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.556517][ T8231] ? do_syscall_64+0x100/0x230 [ 174.556547][ T8231] __x64_sys_bpf+0x7c/0x90 [ 174.556574][ T8231] do_syscall_64+0xf3/0x230 [ 174.556600][ T8231] ? clear_bhb_loop+0x35/0x90 [ 174.556632][ T8231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.556660][ T8231] RIP: 0033:0x7f970c98d169 [ 174.556677][ T8231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.556696][ T8231] RSP: 002b:00007f970a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.556718][ T8231] RAX: ffffffffffffffda RBX: 00007f970cba5fa0 RCX: 00007f970c98d169 [ 174.556733][ T8231] RDX: 0000000000000050 RSI: 0000400000000080 RDI: 000000000000000a [ 174.556746][ T8231] RBP: 00007f970a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.556759][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.556771][ T8231] R13: 0000000000000000 R14: 00007f970cba5fa0 R15: 00007ffc67996df8 [ 174.556801][ T8231] [ 175.027031][ T8238] tun0: tun_chr_ioctl cmd 1074025673 [ 175.076807][ T8243] netlink: 120 bytes leftover after parsing attributes in process `syz.0.754'. [ 175.094289][ T8243] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 175.199087][ T8244] !€ÿ: renamed from sit0 (while UP) [ 175.211170][ T8254] FAULT_INJECTION: forcing a failure. [ 175.211170][ T8254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.225032][ T8254] CPU: 0 UID: 0 PID: 8254 Comm: syz.3.757 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 175.225060][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.225073][ T8254] Call Trace: [ 175.225080][ T8254] [ 175.225089][ T8254] dump_stack_lvl+0x241/0x360 [ 175.225121][ T8254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.225145][ T8254] ? __pfx__printk+0x10/0x10 [ 175.225168][ T8254] ? __pfx_lock_release+0x10/0x10 [ 175.225208][ T8254] should_fail_ex+0x40a/0x550 [ 175.225244][ T8254] _copy_from_iter+0x1df/0x1c40 [ 175.225268][ T8254] ? __virt_addr_valid+0x183/0x530 [ 175.225289][ T8254] ? __pfx_lock_release+0x10/0x10 [ 175.225324][ T8254] ? tcp_leave_memory_pressure+0xe8/0x100 [ 175.225349][ T8254] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 175.225385][ T8254] ? __pfx__copy_from_iter+0x10/0x10 [ 175.225413][ T8254] ? __virt_addr_valid+0x183/0x530 [ 175.225432][ T8254] ? __virt_addr_valid+0x183/0x530 [ 175.225451][ T8254] ? __virt_addr_valid+0x45f/0x530 [ 175.225472][ T8254] ? __phys_addr_symbol+0x2f/0x70 [ 175.225492][ T8254] ? __check_object_size+0x47a/0x730 [ 175.225526][ T8254] tcp_sendmsg_locked+0x18a1/0x4fd0 [ 175.225549][ T8254] ? mark_lock+0x9a/0x360 [ 175.225622][ T8254] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 175.225651][ T8254] ? tcp_sendmsg+0x22/0x50 [ 175.225675][ T8254] ? do_raw_spin_unlock+0x13c/0x8b0 [ 175.225712][ T8254] tcp_sendmsg+0x30/0x50 [ 175.225736][ T8254] __sock_sendmsg+0x1a6/0x270 [ 175.225769][ T8254] ____sys_sendmsg+0x53a/0x860 [ 175.225801][ T8254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.225822][ T8254] ? __fget_files+0x2a/0x410 [ 175.225856][ T8254] ? __fget_files+0x2a/0x410 [ 175.225895][ T8254] __sys_sendmsg+0x269/0x350 [ 175.225924][ T8254] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.225962][ T8254] ? do_sys_openat2+0x17a/0x1d0 [ 175.226021][ T8254] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.226055][ T8254] ? do_syscall_64+0x100/0x230 [ 175.226083][ T8254] ? do_syscall_64+0xb6/0x230 [ 175.226111][ T8254] do_syscall_64+0xf3/0x230 [ 175.226136][ T8254] ? clear_bhb_loop+0x35/0x90 [ 175.226169][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.226197][ T8254] RIP: 0033:0x7f8aea78d169 [ 175.226215][ T8254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.226233][ T8254] RSP: 002b:00007f8aeb54b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.226255][ T8254] RAX: ffffffffffffffda RBX: 00007f8aea9a5fa0 RCX: 00007f8aea78d169 [ 175.226270][ T8254] RDX: 00000000000052cc RSI: 0000400000000040 RDI: 0000000000000005 [ 175.226284][ T8254] RBP: 00007f8aeb54b090 R08: 0000000000000000 R09: 0000000000000000 [ 175.226296][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.226308][ T8254] R13: 0000000000000000 R14: 00007f8aea9a5fa0 R15: 00007ffd7ccffe88 [ 175.226340][ T8254] [ 175.231804][ T8249] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 175.564124][ T8247] team0: No ports can be present during mode change [ 175.609051][ T11] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.610086][ T8255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.657597][ T8267] netlink: 'syz.2.759': attribute type 3 has an invalid length. [ 175.698364][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 175.732105][ T8267] netlink: 'syz.2.759': attribute type 3 has an invalid length. [ 175.898076][ T11] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.958385][ T8243] veth3: entered promiscuous mode [ 176.152014][ T8263] lo speed is unknown, defaulting to 1000 [ 176.277915][ T8284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.760'. [ 176.297402][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.760'. [ 176.341948][ T8284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.760'. [ 176.377514][ T8284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.760'. [ 176.689486][ T8263] lo speed is unknown, defaulting to 1000 [ 176.748659][ T8299] syz_tun: entered allmulticast mode [ 176.783170][ T8299] syz_tun: left allmulticast mode [ 177.238234][ T8310] dummy0: left allmulticast mode [ 177.255135][ T8310] dummy0: left promiscuous mode [ 177.261384][ T8310] bridge0: port 1(dummy0) entered disabled state [ 177.395125][ T5880] lo speed is unknown, defaulting to 1000 [ 177.422210][ T8317] netlink: 'syz.3.770': attribute type 29 has an invalid length. [ 177.431863][ T8318] netlink: 'syz.3.770': attribute type 29 has an invalid length. [ 178.194078][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 178.546910][ T8362] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.778'. [ 178.728988][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.782'. [ 178.918478][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'. [ 180.705737][ T8348] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.778'. [ 180.724735][ T8367] veth0: entered promiscuous mode [ 180.737682][ T8367] veth0: left promiscuous mode [ 180.905318][ T8391] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 180.935411][ T8391] netlink: 224 bytes leftover after parsing attributes in process `syz.3.786'. [ 181.123127][ T8403] FAULT_INJECTION: forcing a failure. [ 181.123127][ T8403] name failslab, interval 1, probability 0, space 0, times 0 [ 181.185246][ T8403] CPU: 0 UID: 0 PID: 8403 Comm: syz.0.789 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 181.185278][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.185291][ T8403] Call Trace: [ 181.185297][ T8403] [ 181.185307][ T8403] dump_stack_lvl+0x241/0x360 [ 181.185352][ T8403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.185375][ T8403] ? __pfx__printk+0x10/0x10 [ 181.185398][ T8403] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 181.185430][ T8403] ? __pfx___might_resched+0x10/0x10 [ 181.185462][ T8403] should_fail_ex+0x40a/0x550 [ 181.185499][ T8403] should_failslab+0xac/0x100 [ 181.185528][ T8403] __kmalloc_node_noprof+0xe1/0x4d0 [ 181.185557][ T8403] ? __kvmalloc_node_noprof+0x72/0x190 [ 181.185595][ T8403] __kvmalloc_node_noprof+0x72/0x190 [ 181.185629][ T8403] bpf_test_run_xdp_live+0x290/0x2220 [ 181.185661][ T8403] ? __pfx_lock_release+0x10/0x10 [ 181.185698][ T8403] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 181.185723][ T8403] ? __pfx___might_resched+0x10/0x10 [ 181.185755][ T8403] ? __mutex_unlock_slowpath+0x227/0x800 [ 181.185788][ T8403] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 181.185812][ T8403] ? synchronize_rcu+0x11b/0x360 [ 181.185835][ T8403] ? __pfx_synchronize_rcu+0x10/0x10 [ 181.185886][ T8403] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 181.185915][ T8403] ? 0xffffffffa0000954 [ 181.185956][ T8403] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 181.186000][ T8403] ? _copy_from_user+0x95/0xb0 [ 181.186027][ T8403] ? bpf_test_init+0x137/0x160 [ 181.186052][ T8403] ? xdp_convert_md_to_buff+0x5b/0x330 [ 181.186082][ T8403] bpf_prog_test_run_xdp+0x805/0x11e0 [ 181.186116][ T8403] ? __pfx_lock_release+0x10/0x10 [ 181.186154][ T8403] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 181.186183][ T8403] ? __fget_files+0x2a/0x410 [ 181.186217][ T8403] ? __fget_files+0x2a/0x410 [ 181.186251][ T8403] ? fput+0x21b/0x290 [ 181.186283][ T8403] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 181.186315][ T8403] bpf_prog_test_run+0x2e4/0x360 [ 181.186351][ T8403] __sys_bpf+0x487/0x820 [ 181.186383][ T8403] ? __pfx___sys_bpf+0x10/0x10 [ 181.186425][ T8403] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 181.186459][ T8403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.186493][ T8403] ? do_syscall_64+0x100/0x230 [ 181.186524][ T8403] __x64_sys_bpf+0x7c/0x90 [ 181.186550][ T8403] do_syscall_64+0xf3/0x230 [ 181.186576][ T8403] ? clear_bhb_loop+0x35/0x90 [ 181.186609][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.186638][ T8403] RIP: 0033:0x7fa7af58d169 [ 181.186656][ T8403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.186674][ T8403] RSP: 002b:00007fa7b0494038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.186706][ T8403] RAX: ffffffffffffffda RBX: 00007fa7af7a5fa0 RCX: 00007fa7af58d169 [ 181.186722][ T8403] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 181.186735][ T8403] RBP: 00007fa7b0494090 R08: 0000000000000000 R09: 0000000000000000 [ 181.186748][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.186760][ T8403] R13: 0000000000000000 R14: 00007fa7af7a5fa0 R15: 00007fff5c381e78 [ 181.186791][ T8403] [ 181.544593][ T8411] FAULT_INJECTION: forcing a failure. [ 181.544593][ T8411] name failslab, interval 1, probability 0, space 0, times 0 [ 181.560839][ T8411] CPU: 0 UID: 0 PID: 8411 Comm: syz.3.792 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 181.560866][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.560879][ T8411] Call Trace: [ 181.560886][ T8411] [ 181.560903][ T8411] dump_stack_lvl+0x241/0x360 [ 181.560936][ T8411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.560960][ T8411] ? __pfx__printk+0x10/0x10 [ 181.560983][ T8411] ? __kmalloc_noprof+0xb5/0x4c0 [ 181.561014][ T8411] ? __pfx___might_resched+0x10/0x10 [ 181.561040][ T8411] ? aa_get_newest_label+0xff/0x6f0 [ 181.561077][ T8411] should_fail_ex+0x40a/0x550 [ 181.561112][ T8411] should_failslab+0xac/0x100 [ 181.561142][ T8411] __kmalloc_noprof+0xdd/0x4c0 [ 181.561171][ T8411] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 181.561193][ T8411] ? apparmor_capable+0x13b/0x1b0 [ 181.561219][ T8411] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 181.561249][ T8411] genl_rcv_msg+0x80b/0xec0 [ 181.561281][ T8411] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.561334][ T8411] ? __pfx_lock_acquire+0x10/0x10 [ 181.561366][ T8411] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 181.561400][ T8411] ? __pfx___might_resched+0x10/0x10 [ 181.561437][ T8411] netlink_rcv_skb+0x206/0x480 [ 181.561468][ T8411] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.561492][ T8411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.561547][ T8411] genl_rcv+0x28/0x40 [ 181.561566][ T8411] netlink_unicast+0x7f6/0x990 [ 181.561601][ T8411] ? __pfx_netlink_unicast+0x10/0x10 [ 181.561625][ T8411] ? __virt_addr_valid+0x45f/0x530 [ 181.561647][ T8411] ? __phys_addr_symbol+0x2f/0x70 [ 181.561666][ T8411] ? __check_object_size+0x47a/0x730 [ 181.561700][ T8411] netlink_sendmsg+0x8de/0xcb0 [ 181.561743][ T8411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.561777][ T8411] ? aa_sock_msg_perm+0x91/0x160 [ 181.561814][ T8411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.561841][ T8411] __sock_sendmsg+0x221/0x270 [ 181.561874][ T8411] ____sys_sendmsg+0x53a/0x860 [ 181.561918][ T8411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.561938][ T8411] ? __fget_files+0x2a/0x410 [ 181.561971][ T8411] ? __fget_files+0x2a/0x410 [ 181.562011][ T8411] __sys_sendmsg+0x269/0x350 [ 181.562039][ T8411] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.562078][ T8411] ? do_sys_openat2+0x17a/0x1d0 [ 181.562138][ T8411] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.562173][ T8411] ? do_syscall_64+0x100/0x230 [ 181.562203][ T8411] ? do_syscall_64+0xb6/0x230 [ 181.562231][ T8411] do_syscall_64+0xf3/0x230 [ 181.562256][ T8411] ? clear_bhb_loop+0x35/0x90 [ 181.562289][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.562317][ T8411] RIP: 0033:0x7f8aea78d169 [ 181.562337][ T8411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.562355][ T8411] RSP: 002b:00007f8aeb54b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.562378][ T8411] RAX: ffffffffffffffda RBX: 00007f8aea9a5fa0 RCX: 00007f8aea78d169 [ 181.562392][ T8411] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000009 [ 181.562405][ T8411] RBP: 00007f8aeb54b090 R08: 0000000000000000 R09: 0000000000000000 [ 181.562415][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.562427][ T8411] R13: 0000000000000000 R14: 00007f8aea9a5fa0 R15: 00007ffd7ccffe88 [ 181.562460][ T8411] [ 181.586498][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 182.141891][ T8428] FAULT_INJECTION: forcing a failure. [ 182.141891][ T8428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.315008][ T8428] CPU: 1 UID: 0 PID: 8428 Comm: syz.0.798 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 182.315039][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.315053][ T8428] Call Trace: [ 182.315061][ T8428] [ 182.315070][ T8428] dump_stack_lvl+0x241/0x360 [ 182.315103][ T8428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.315126][ T8428] ? __pfx__printk+0x10/0x10 [ 182.315154][ T8428] ? snprintf+0xda/0x120 [ 182.315189][ T8428] should_fail_ex+0x40a/0x550 [ 182.315225][ T8428] _copy_to_user+0x31/0xb0 [ 182.315256][ T8428] simple_read_from_buffer+0xca/0x150 [ 182.315289][ T8428] proc_fail_nth_read+0x1e9/0x250 [ 182.315321][ T8428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.315354][ T8428] ? rw_verify_area+0x243/0x630 [ 182.315375][ T8428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.315406][ T8428] vfs_read+0x1f8/0xb40 [ 182.315430][ T8428] ? fdget_pos+0x254/0x320 [ 182.315461][ T8428] ? __pfx___mutex_lock+0x10/0x10 [ 182.315487][ T8428] ? __pfx_vfs_read+0x10/0x10 [ 182.315515][ T8428] ? do_sys_openat2+0x17a/0x1d0 [ 182.315549][ T8428] ? __fget_files+0x2a/0x410 [ 182.315580][ T8428] ? __fget_files+0x395/0x410 [ 182.315608][ T8428] ? __fget_files+0x2a/0x410 [ 182.315648][ T8428] ksys_read+0x18f/0x2b0 [ 182.315673][ T8428] ? __pfx_ksys_read+0x10/0x10 [ 182.315696][ T8428] ? do_syscall_64+0x100/0x230 [ 182.315724][ T8428] ? do_syscall_64+0xb6/0x230 [ 182.315752][ T8428] do_syscall_64+0xf3/0x230 [ 182.315779][ T8428] ? clear_bhb_loop+0x35/0x90 [ 182.315811][ T8428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.315840][ T8428] RIP: 0033:0x7fa7af58bb7c [ 182.315859][ T8428] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.315876][ T8428] RSP: 002b:00007fa7b0494030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.315899][ T8428] RAX: ffffffffffffffda RBX: 00007fa7af7a5fa0 RCX: 00007fa7af58bb7c [ 182.315914][ T8428] RDX: 000000000000000f RSI: 00007fa7b04940a0 RDI: 0000000000000004 [ 182.315927][ T8428] RBP: 00007fa7b0494090 R08: 0000000000000000 R09: 0000000000000000 [ 182.315940][ T8428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.315952][ T8428] R13: 0000000000000000 R14: 00007fa7af7a5fa0 R15: 00007fff5c381e78 [ 182.315983][ T8428] [ 182.631504][ T8433] netlink: 292 bytes leftover after parsing attributes in process `syz.3.800'. [ 182.703224][ T8435] FAULT_INJECTION: forcing a failure. [ 182.703224][ T8435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.815104][ T8435] CPU: 1 UID: 0 PID: 8435 Comm: syz.3.802 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 182.815136][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.815150][ T8435] Call Trace: [ 182.815157][ T8435] [ 182.815167][ T8435] dump_stack_lvl+0x241/0x360 [ 182.815199][ T8435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.815223][ T8435] ? __pfx__printk+0x10/0x10 [ 182.815251][ T8435] ? snprintf+0xda/0x120 [ 182.815285][ T8435] should_fail_ex+0x40a/0x550 [ 182.815321][ T8435] _copy_to_user+0x31/0xb0 [ 182.815352][ T8435] simple_read_from_buffer+0xca/0x150 [ 182.815383][ T8435] proc_fail_nth_read+0x1e9/0x250 [ 182.815415][ T8435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.815447][ T8435] ? rw_verify_area+0x243/0x630 [ 182.815468][ T8435] ? aa_sk_perm+0x96d/0xab0 [ 182.815495][ T8435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.815526][ T8435] vfs_read+0x1f8/0xb40 [ 182.815552][ T8435] ? __pfx_netlink_bind+0x10/0x10 [ 182.815583][ T8435] ? __pfx_vfs_read+0x10/0x10 [ 182.815601][ T8435] ? do_sys_openat2+0x17a/0x1d0 [ 182.815636][ T8435] ? __sys_bind+0x20a/0x290 [ 182.815668][ T8435] ? __pfx___sys_bind+0x10/0x10 [ 182.815712][ T8435] ksys_read+0x18f/0x2b0 [ 182.815737][ T8435] ? __pfx_ksys_read+0x10/0x10 [ 182.815759][ T8435] ? do_syscall_64+0x100/0x230 [ 182.815787][ T8435] ? do_syscall_64+0xb6/0x230 [ 182.815815][ T8435] do_syscall_64+0xf3/0x230 [ 182.815839][ T8435] ? clear_bhb_loop+0x35/0x90 [ 182.815873][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.815901][ T8435] RIP: 0033:0x7f8aea78bb7c [ 182.815919][ T8435] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.815937][ T8435] RSP: 002b:00007f8aeb54b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.815959][ T8435] RAX: ffffffffffffffda RBX: 00007f8aea9a5fa0 RCX: 00007f8aea78bb7c [ 182.815975][ T8435] RDX: 000000000000000f RSI: 00007f8aeb54b0a0 RDI: 0000000000000004 [ 182.815988][ T8435] RBP: 00007f8aeb54b090 R08: 0000000000000000 R09: 0000000000000000 [ 182.816001][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.816013][ T8435] R13: 0000000000000000 R14: 00007f8aea9a5fa0 R15: 00007ffd7ccffe88 [ 182.816042][ T8435] [ 183.048793][ T8422] lo speed is unknown, defaulting to 1000 [ 183.184108][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 183.636691][ T8422] lo speed is unknown, defaulting to 1000 [ 183.677079][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 183.715936][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 183.797207][ T8453] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 183.821265][ T8456] lo speed is unknown, defaulting to 1000 [ 183.967096][ T8461] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 184.272400][ T8456] lo speed is unknown, defaulting to 1000 [ 184.558085][ T8477] team0: No ports can be present during mode change [ 184.772336][ T8488] FAULT_INJECTION: forcing a failure. [ 184.772336][ T8488] name failslab, interval 1, probability 0, space 0, times 0 [ 184.787009][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.1.821 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 184.787040][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.787054][ T8488] Call Trace: [ 184.787061][ T8488] [ 184.787070][ T8488] dump_stack_lvl+0x241/0x360 [ 184.787103][ T8488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.787126][ T8488] ? __pfx__printk+0x10/0x10 [ 184.787150][ T8488] ? __kmalloc_noprof+0xb5/0x4c0 [ 184.787180][ T8488] ? __pfx___might_resched+0x10/0x10 [ 184.787212][ T8488] should_fail_ex+0x40a/0x550 [ 184.787248][ T8488] should_failslab+0xac/0x100 [ 184.787278][ T8488] __kmalloc_noprof+0xdd/0x4c0 [ 184.787306][ T8488] ? iovec_from_user+0x87/0x240 [ 184.787339][ T8488] iovec_from_user+0x87/0x240 [ 184.787364][ T8488] ? __pfx___might_resched+0x10/0x10 [ 184.787404][ T8488] __import_iovec+0x175/0x830 [ 184.787443][ T8488] import_iovec+0xeb/0x120 [ 184.787475][ T8488] copy_msghdr_from_user+0x52f/0x680 [ 184.787511][ T8488] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 184.787538][ T8488] ? __fget_files+0x2a/0x410 [ 184.787571][ T8488] ? __fget_files+0x2a/0x410 [ 184.787608][ T8488] __sys_sendmsg+0x209/0x350 [ 184.787635][ T8488] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.787669][ T8488] ? do_sys_openat2+0x17a/0x1d0 [ 184.787723][ T8488] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.787757][ T8488] ? do_syscall_64+0x100/0x230 [ 184.787785][ T8488] ? do_syscall_64+0xb6/0x230 [ 184.787813][ T8488] do_syscall_64+0xf3/0x230 [ 184.787837][ T8488] ? clear_bhb_loop+0x35/0x90 [ 184.787864][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.787887][ T8488] RIP: 0033:0x7f4d87f8d169 [ 184.787902][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.787916][ T8488] RSP: 002b:00007f4d88dea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.787934][ T8488] RAX: ffffffffffffffda RBX: 00007f4d881a5fa0 RCX: 00007f4d87f8d169 [ 184.787947][ T8488] RDX: 0000000000020001 RSI: 0000400000000d40 RDI: 0000000000000003 [ 184.787958][ T8488] RBP: 00007f4d88dea090 R08: 0000000000000000 R09: 0000000000000000 [ 184.787968][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.787978][ T8488] R13: 0000000000000000 R14: 00007f4d881a5fa0 R15: 00007fffbcb6f078 [ 184.788001][ T8488] [ 184.844639][ T8484] syzkaller0: entered promiscuous mode [ 185.037212][ T8484] syzkaller0: entered allmulticast mode [ 185.044625][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.820'. [ 185.073473][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 185.419227][ T8494] bond0: (slave bond_slave_0): Releasing backup interface [ 187.758438][ T8517] team0: Mode "b" not found [ 187.817658][ T8523] netlink: 188 bytes leftover after parsing attributes in process `syz.4.835'. [ 187.834211][ T8523] netlink: 'syz.4.835': attribute type 1 has an invalid length. [ 187.875839][ T8523] netlink: 56 bytes leftover after parsing attributes in process `syz.4.835'. [ 187.927712][ T8525] lo speed is unknown, defaulting to 1000 [ 188.628944][ T8551] netlink: 132 bytes leftover after parsing attributes in process `syz.3.840'. [ 188.946464][ T8525] lo speed is unknown, defaulting to 1000 [ 189.012381][ T8556] netlink: 'syz.3.840': attribute type 11 has an invalid length. [ 189.020546][ T8539] lo speed is unknown, defaulting to 1000 [ 189.608202][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 189.651393][ T8574] netlink: 96 bytes leftover after parsing attributes in process `syz.4.846'. [ 190.088466][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 190.107801][ T8539] lo speed is unknown, defaulting to 1000 [ 190.230668][ T8586] Cannot find add_set index 0 as target [ 190.242491][ T8586] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 190.250694][ T8586] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 190.576964][ T8594] FAULT_INJECTION: forcing a failure. [ 190.576964][ T8594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.631181][ T8594] CPU: 1 UID: 0 PID: 8594 Comm: syz.0.853 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 190.631213][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.631225][ T8594] Call Trace: [ 190.631233][ T8594] [ 190.631242][ T8594] dump_stack_lvl+0x241/0x360 [ 190.631274][ T8594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.631298][ T8594] ? __pfx__printk+0x10/0x10 [ 190.631331][ T8594] should_fail_ex+0x40a/0x550 [ 190.631367][ T8594] _copy_from_user+0x2d/0xb0 [ 190.631396][ T8594] copy_from_sockptr_offset+0x6b/0xb0 [ 190.631432][ T8594] do_tcp_setsockopt+0x496/0x24c0 [ 190.631467][ T8594] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 190.631500][ T8594] ? vfs_write+0x7fa/0xd10 [ 190.631524][ T8594] ? do_sys_openat2+0x17a/0x1d0 [ 190.631555][ T8594] ? aa_sock_opt_perm+0x79/0x120 [ 190.631586][ T8594] ? tcp_setsockopt+0x3e/0xf0 [ 190.631617][ T8594] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 190.631670][ T8594] do_sock_setsockopt+0x3af/0x720 [ 190.631699][ T8594] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 190.631728][ T8594] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 190.631769][ T8594] __x64_sys_setsockopt+0x1ee/0x280 [ 190.631797][ T8594] do_syscall_64+0xf3/0x230 [ 190.631823][ T8594] ? clear_bhb_loop+0x35/0x90 [ 190.631856][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.631895][ T8594] RIP: 0033:0x7fa7af58d169 [ 190.631914][ T8594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.631932][ T8594] RSP: 002b:00007fa7b0494038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.631955][ T8594] RAX: ffffffffffffffda RBX: 00007fa7af7a5fa0 RCX: 00007fa7af58d169 [ 190.631971][ T8594] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000003 [ 190.631983][ T8594] RBP: 00007fa7b0494090 R08: 0000000000000020 R09: 0000000000000000 [ 190.631996][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.632008][ T8594] R13: 0000000000000000 R14: 00007fa7af7a5fa0 R15: 00007fff5c381e78 [ 190.632039][ T8594] [ 190.985206][ T8603] netlink: 32 bytes leftover after parsing attributes in process `syz.4.855'. [ 191.082841][ T8608] netlink: 96 bytes leftover after parsing attributes in process `syz.1.857'. [ 191.104605][ T8603] vti0: entered promiscuous mode [ 191.163281][ T8611] lo: entered allmulticast mode [ 191.316294][ T8613] FAULT_INJECTION: forcing a failure. [ 191.316294][ T8613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.348088][ T8613] CPU: 1 UID: 0 PID: 8613 Comm: syz.1.859 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 191.348120][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.348133][ T8613] Call Trace: [ 191.348140][ T8613] [ 191.348149][ T8613] dump_stack_lvl+0x241/0x360 [ 191.348181][ T8613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.348206][ T8613] ? __pfx__printk+0x10/0x10 [ 191.348232][ T8613] ? snprintf+0xda/0x120 [ 191.348267][ T8613] should_fail_ex+0x40a/0x550 [ 191.348302][ T8613] _copy_to_user+0x31/0xb0 [ 191.348332][ T8613] simple_read_from_buffer+0xca/0x150 [ 191.348363][ T8613] proc_fail_nth_read+0x1e9/0x250 [ 191.348393][ T8613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.348425][ T8613] ? rw_verify_area+0x243/0x630 [ 191.348446][ T8613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.348476][ T8613] vfs_read+0x1f8/0xb40 [ 191.348498][ T8613] ? fdget_pos+0x254/0x320 [ 191.348529][ T8613] ? __pfx___mutex_lock+0x10/0x10 [ 191.348555][ T8613] ? __pfx_vfs_read+0x10/0x10 [ 191.348580][ T8613] ? __fget_files+0x2a/0x410 [ 191.348611][ T8613] ? __fget_files+0x395/0x410 [ 191.348639][ T8613] ? __fget_files+0x2a/0x410 [ 191.348678][ T8613] ksys_read+0x18f/0x2b0 [ 191.348702][ T8613] ? __pfx_ksys_read+0x10/0x10 [ 191.348725][ T8613] ? do_syscall_64+0x100/0x230 [ 191.348754][ T8613] ? do_syscall_64+0xb6/0x230 [ 191.348781][ T8613] do_syscall_64+0xf3/0x230 [ 191.348805][ T8613] ? clear_bhb_loop+0x35/0x90 [ 191.348837][ T8613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.348865][ T8613] RIP: 0033:0x7f4d87f8bb7c [ 191.348884][ T8613] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 191.348902][ T8613] RSP: 002b:00007f4d88dea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.348925][ T8613] RAX: ffffffffffffffda RBX: 00007f4d881a5fa0 RCX: 00007f4d87f8bb7c [ 191.348940][ T8613] RDX: 000000000000000f RSI: 00007f4d88dea0a0 RDI: 0000000000000003 [ 191.348953][ T8613] RBP: 00007f4d88dea090 R08: 0000000000000000 R09: 0000000000000000 [ 191.348966][ T8613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.348985][ T8613] R13: 0000000000000000 R14: 00007f4d881a5fa0 R15: 00007fffbcb6f078 [ 191.349016][ T8613] [ 191.767567][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 192.255558][ T8632] FAULT_INJECTION: forcing a failure. [ 192.255558][ T8632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.305152][ T8632] CPU: 0 UID: 0 PID: 8632 Comm: syz.1.866 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 192.305184][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.305197][ T8632] Call Trace: [ 192.305205][ T8632] [ 192.305214][ T8632] dump_stack_lvl+0x241/0x360 [ 192.305246][ T8632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.305271][ T8632] ? __pfx__printk+0x10/0x10 [ 192.305293][ T8632] ? __pfx_lock_release+0x10/0x10 [ 192.305345][ T8632] should_fail_ex+0x40a/0x550 [ 192.305381][ T8632] _copy_from_user+0x2d/0xb0 [ 192.305410][ T8632] copy_msghdr_from_user+0xae/0x680 [ 192.305440][ T8632] ? read_tsc+0x9/0x20 [ 192.305464][ T8632] ? timespec64_add_safe+0x1be/0x220 [ 192.305500][ T8632] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 192.305527][ T8632] ? __fget_files+0x2a/0x410 [ 192.305561][ T8632] ? __fget_files+0x2a/0x410 [ 192.305598][ T8632] do_recvmmsg+0x3bd/0xab0 [ 192.305633][ T8632] ? __pfx_do_recvmmsg+0x10/0x10 [ 192.305682][ T8632] ? __pfx___might_resched+0x10/0x10 [ 192.305711][ T8632] ? __might_fault+0xaa/0x120 [ 192.305732][ T8632] ? __pfx_lock_release+0x10/0x10 [ 192.305764][ T8632] ? vfs_write+0x7fa/0xd10 [ 192.305802][ T8632] ? get_timespec64+0x19c/0x280 [ 192.305849][ T8632] __x64_sys_recvmmsg+0x1b8/0x250 [ 192.305876][ T8632] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 192.305901][ T8632] ? do_syscall_64+0x100/0x230 [ 192.305930][ T8632] ? do_syscall_64+0xb6/0x230 [ 192.305958][ T8632] do_syscall_64+0xf3/0x230 [ 192.305989][ T8632] ? clear_bhb_loop+0x35/0x90 [ 192.306023][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.306053][ T8632] RIP: 0033:0x7f4d87f8d169 [ 192.306072][ T8632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.306090][ T8632] RSP: 002b:00007f4d88dea038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 192.306112][ T8632] RAX: ffffffffffffffda RBX: 00007f4d881a5fa0 RCX: 00007f4d87f8d169 [ 192.306126][ T8632] RDX: 04000000000003b4 RSI: 00004000000037c0 RDI: 0000000000000003 [ 192.306138][ T8632] RBP: 00007f4d88dea090 R08: 0000400000003700 R09: 0000000000000000 [ 192.306151][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.306163][ T8632] R13: 0000000000000000 R14: 00007f4d881a5fa0 R15: 00007fffbcb6f078 [ 192.306191][ T8632] [ 192.872152][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.869'. [ 192.925118][ T8645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.869'. [ 194.609483][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.616118][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.711273][ T8606] Set syz1 is full, maxelem 65536 reached [ 194.832977][ T8660] FAULT_INJECTION: forcing a failure. [ 194.832977][ T8660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.851588][ T8660] CPU: 0 UID: 0 PID: 8660 Comm: syz.3.871 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 194.851619][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.851631][ T8660] Call Trace: [ 194.851640][ T8660] [ 194.851650][ T8660] dump_stack_lvl+0x241/0x360 [ 194.851679][ T8660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.851700][ T8660] ? __pfx__printk+0x10/0x10 [ 194.851731][ T8660] ? __pfx_lock_release+0x10/0x10 [ 194.851767][ T8660] should_fail_ex+0x40a/0x550 [ 194.851800][ T8660] _copy_to_iter+0x1df/0x1c40 [ 194.851822][ T8660] ? __virt_addr_valid+0x183/0x530 [ 194.851840][ T8660] ? __pfx_lock_release+0x10/0x10 [ 194.851874][ T8660] ? mark_lock+0x9a/0x360 [ 194.851892][ T8660] ? __pfx__copy_to_iter+0x10/0x10 [ 194.851915][ T8660] ? __virt_addr_valid+0x183/0x530 [ 194.851932][ T8660] ? __virt_addr_valid+0x183/0x530 [ 194.851948][ T8660] ? __virt_addr_valid+0x45f/0x530 [ 194.851968][ T8660] ? __check_object_size+0x47a/0x730 [ 194.851998][ T8660] __skb_datagram_iter+0x3c6/0x900 [ 194.852030][ T8660] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 194.852060][ T8660] skb_copy_datagram_iter+0xd1/0x250 [ 194.852086][ T8660] mptcp_recvmsg+0x5ba/0x2610 [ 194.852143][ T8660] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 194.852171][ T8660] ? aa_sk_perm+0x96d/0xab0 [ 194.852200][ T8660] ? sock_rps_record_flow+0x1a/0x400 [ 194.852219][ T8660] ? inet_recvmsg+0xde/0x2d0 [ 194.852238][ T8660] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 194.852257][ T8660] inet_recvmsg+0x2b5/0x2d0 [ 194.852280][ T8660] ? __pfx_inet_recvmsg+0x10/0x10 [ 194.852299][ T8660] ? aa_sock_msg_perm+0x91/0x160 [ 194.852328][ T8660] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 194.852355][ T8660] sock_recvmsg+0x1ae/0x280 [ 194.852385][ T8660] ____sys_recvmsg+0x1c6/0x480 [ 194.852415][ T8660] ? __pfx_____sys_recvmsg+0x10/0x10 [ 194.852458][ T8660] do_recvmmsg+0x426/0xab0 [ 194.852492][ T8660] ? __pfx_do_recvmmsg+0x10/0x10 [ 194.852533][ T8660] ? ksys_write+0x22a/0x2b0 [ 194.852553][ T8660] ? __pfx_lock_release+0x10/0x10 [ 194.852586][ T8660] ? sb_end_write+0xe9/0x1c0 [ 194.852612][ T8660] ? vfs_write+0x7fa/0xd10 [ 194.852634][ T8660] ? __mutex_unlock_slowpath+0x227/0x800 [ 194.852666][ T8660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.852686][ T8660] ? __fget_files+0x2a/0x410 [ 194.852739][ T8660] __x64_sys_recvmmsg+0x199/0x250 [ 194.852764][ T8660] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 194.852786][ T8660] ? do_syscall_64+0x100/0x230 [ 194.852812][ T8660] ? do_syscall_64+0xb6/0x230 [ 194.852837][ T8660] do_syscall_64+0xf3/0x230 [ 194.852859][ T8660] ? clear_bhb_loop+0x35/0x90 [ 194.852895][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.852921][ T8660] RIP: 0033:0x7f8aea78d169 [ 194.852940][ T8660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.852956][ T8660] RSP: 002b:00007f8aeb54b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 194.852977][ T8660] RAX: ffffffffffffffda RBX: 00007f8aea9a5fa0 RCX: 00007f8aea78d169 [ 194.852991][ T8660] RDX: 0000000000000001 RSI: 00004000000048c0 RDI: 0000000000000005 [ 194.853002][ T8660] RBP: 00007f8aeb54b090 R08: 0000000000000000 R09: 0000000000000000 [ 194.853014][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.853030][ T8660] R13: 0000000000000000 R14: 00007f8aea9a5fa0 R15: 00007ffd7ccffe88 [ 194.853058][ T8660] [ 195.330820][ T8662] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 196.100700][ T8662] veth0_vlan: left promiscuous mode [ 196.167495][ T8667] FAULT_INJECTION: forcing a failure. [ 196.167495][ T8667] name failslab, interval 1, probability 0, space 0, times 0 [ 196.177730][ T8662] veth0_vlan: entered promiscuous mode [ 196.219235][ T8662] team0: Device veth0_vlan failed to register rx_handler [ 196.226521][ T8667] CPU: 0 UID: 0 PID: 8667 Comm: syz.1.873 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 196.226548][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.226561][ T8667] Call Trace: [ 196.226569][ T8667] [ 196.226577][ T8667] dump_stack_lvl+0x241/0x360 [ 196.226606][ T8667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.226628][ T8667] ? __pfx__printk+0x10/0x10 [ 196.226660][ T8667] should_fail_ex+0x40a/0x550 [ 196.226695][ T8667] should_failslab+0xac/0x100 [ 196.226724][ T8667] ? dst_alloc+0x12b/0x190 [ 196.226746][ T8667] kmem_cache_alloc_noprof+0x70/0x380 [ 196.226781][ T8667] dst_alloc+0x12b/0x190 [ 196.226809][ T8667] ip_route_output_key_hash_rcu+0x1378/0x2290 [ 196.226846][ T8667] ip_route_output_key_hash+0x193/0x2b0 [ 196.226868][ T8667] ? ip_route_output_key_hash+0xdf/0x2b0 [ 196.226889][ T8667] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 196.226909][ T8667] ? widen_string+0x3a/0x280 [ 196.226932][ T8667] ? ip4_addr_string+0x1ab/0x200 [ 196.226966][ T8667] ip_route_output_flow+0x29/0x140 [ 196.227001][ T8667] udp_sendmsg+0x17d2/0x2c90 [ 196.227023][ T8667] ? look_up_lock_class+0x77/0x170 [ 196.227069][ T8667] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 196.227092][ T8667] ? __pfx_udp_sendmsg+0x10/0x10 [ 196.227121][ T8667] ? __pfx_validate_chain+0x10/0x10 [ 196.227152][ T8667] ? __lock_acquire+0x1397/0x2100 [ 196.227192][ T8667] ? mark_lock+0x9a/0x360 [ 196.227217][ T8667] ? __lock_acquire+0x1397/0x2100 [ 196.227261][ T8667] udpv6_sendmsg+0xe4a/0x3070 [ 196.227292][ T8667] ? release_sock+0x30/0x1f0 [ 196.227349][ T8667] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 196.227379][ T8667] ? inet_send_prepare+0x1b7/0x260 [ 196.227403][ T8667] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.227450][ T8667] ? inet_send_prepare+0x1b7/0x260 [ 196.227472][ T8667] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 196.227497][ T8667] ? inet_send_prepare+0x1b7/0x260 [ 196.227518][ T8667] ? do_raw_spin_unlock+0x13c/0x8b0 [ 196.227555][ T8667] ? inet_send_prepare+0x1b7/0x260 [ 196.227588][ T8667] __sock_sendmsg+0xef/0x270 [ 196.227620][ T8667] __sys_sendto+0x363/0x4c0 [ 196.227659][ T8667] ? __pfx___sys_sendto+0x10/0x10 [ 196.227706][ T8667] ? __fget_files+0x2a/0x410 [ 196.227748][ T8667] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.227784][ T8667] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.227823][ T8667] __x64_sys_sendto+0xde/0x100 [ 196.227848][ T8667] do_syscall_64+0xf3/0x230 [ 196.227873][ T8667] ? clear_bhb_loop+0x35/0x90 [ 196.227906][ T8667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.227934][ T8667] RIP: 0033:0x7f4d87f8d169 [ 196.227953][ T8667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.227971][ T8667] RSP: 002b:00007f4d88dea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 196.227994][ T8667] RAX: ffffffffffffffda RBX: 00007f4d881a5fa0 RCX: 00007f4d87f8d169 [ 196.228009][ T8667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 196.228022][ T8667] RBP: 00007f4d88dea090 R08: 0000400000000540 R09: 000000000000001c [ 196.228036][ T8667] R10: 0000000000040894 R11: 0000000000000246 R12: 0000000000000001 [ 196.228048][ T8667] R13: 0000000000000000 R14: 00007f4d881a5fa0 R15: 00007fffbcb6f078 [ 196.228080][ T8667] [ 196.575952][ T8663] lo speed is unknown, defaulting to 1000 [ 196.726136][ T8663] lo speed is unknown, defaulting to 1000 [ 196.992673][ T8680] lo speed is unknown, defaulting to 1000 [ 197.095631][ T8690] lo: entered allmulticast mode [ 197.105316][ T8690] lo: left allmulticast mode [ 197.162512][ T8692] netlink: 96 bytes leftover after parsing attributes in process `syz.2.879'. [ 197.258276][ T8694] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1668575341) [ 197.270509][ T8694] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 197.282977][ T8694] netlink: 'syz.1.883': attribute type 10 has an invalid length. [ 197.323265][ T8694] team0: Device hsr_slave_0 failed to register rx_handler [ 197.603387][ T8687] lo speed is unknown, defaulting to 1000 [ 197.623402][ T8680] lo speed is unknown, defaulting to 1000 [ 197.728985][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'. [ 197.973934][ T8687] lo speed is unknown, defaulting to 1000 [ 198.091687][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 198.337705][ T8712] bridge0: port 1(dummy0) entered blocking state [ 198.344525][ T8712] bridge0: port 1(dummy0) entered disabled state [ 198.386278][ T8713] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 198.397450][ T8712] dummy0: entered allmulticast mode [ 198.475405][ T8712] dummy0: entered promiscuous mode [ 198.494005][ T8712] bridge0: port 1(dummy0) entered blocking state [ 198.500580][ T8712] bridge0: port 1(dummy0) entered forwarding state [ 198.602612][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 198.763897][ T8726] FAULT_INJECTION: forcing a failure. [ 198.763897][ T8726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.838581][ T8726] CPU: 0 UID: 0 PID: 8726 Comm: syz.4.893 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 198.838614][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.838627][ T8726] Call Trace: [ 198.838635][ T8726] [ 198.838644][ T8726] dump_stack_lvl+0x241/0x360 [ 198.838676][ T8726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.838700][ T8726] ? __pfx__printk+0x10/0x10 [ 198.838728][ T8726] ? snprintf+0xda/0x120 [ 198.838761][ T8726] should_fail_ex+0x40a/0x550 [ 198.838797][ T8726] _copy_to_user+0x31/0xb0 [ 198.838827][ T8726] simple_read_from_buffer+0xca/0x150 [ 198.838859][ T8726] proc_fail_nth_read+0x1e9/0x250 [ 198.838891][ T8726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.838923][ T8726] ? rw_verify_area+0x243/0x630 [ 198.838945][ T8726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.838975][ T8726] vfs_read+0x1f8/0xb40 [ 198.838998][ T8726] ? fdget_pos+0x254/0x320 [ 198.839030][ T8726] ? __pfx___mutex_lock+0x10/0x10 [ 198.839055][ T8726] ? __pfx_vfs_read+0x10/0x10 [ 198.839074][ T8726] ? do_sys_openat2+0x17a/0x1d0 [ 198.839107][ T8726] ? __fget_files+0x2a/0x410 [ 198.839146][ T8726] ? __fget_files+0x395/0x410 [ 198.839174][ T8726] ? __fget_files+0x2a/0x410 [ 198.839214][ T8726] ksys_read+0x18f/0x2b0 [ 198.839238][ T8726] ? __pfx_ksys_read+0x10/0x10 [ 198.839261][ T8726] ? do_syscall_64+0x100/0x230 [ 198.839290][ T8726] ? do_syscall_64+0xb6/0x230 [ 198.839318][ T8726] do_syscall_64+0xf3/0x230 [ 198.839343][ T8726] ? clear_bhb_loop+0x35/0x90 [ 198.839376][ T8726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.839403][ T8726] RIP: 0033:0x7f6958d8bb7c [ 198.839421][ T8726] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 198.839439][ T8726] RSP: 002b:00007f6959c78030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.839461][ T8726] RAX: ffffffffffffffda RBX: 00007f6958fa5fa0 RCX: 00007f6958d8bb7c [ 198.839477][ T8726] RDX: 000000000000000f RSI: 00007f6959c780a0 RDI: 0000000000000004 [ 198.839490][ T8726] RBP: 00007f6959c78090 R08: 0000000000000000 R09: 0000000000000000 [ 198.839502][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.839515][ T8726] R13: 0000000000000000 R14: 00007f6958fa5fa0 R15: 00007fffd774a838 [ 198.839545][ T8726] [ 199.246776][ T8736] team0: Device gtp0 is of different type [ 199.371720][ T8741] lo speed is unknown, defaulting to 1000 [ 199.407884][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'. [ 199.521264][ T8745] FAULT_INJECTION: forcing a failure. [ 199.521264][ T8745] name failslab, interval 1, probability 0, space 0, times 0 [ 199.552027][ T8745] CPU: 0 UID: 0 PID: 8745 Comm: syz.0.900 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 199.552058][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.552071][ T8745] Call Trace: [ 199.552079][ T8745] [ 199.552088][ T8745] dump_stack_lvl+0x241/0x360 [ 199.552121][ T8745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.552145][ T8745] ? __pfx__printk+0x10/0x10 [ 199.552169][ T8745] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 199.552200][ T8745] ? __pfx___might_resched+0x10/0x10 [ 199.552234][ T8745] should_fail_ex+0x40a/0x550 [ 199.552278][ T8745] should_failslab+0xac/0x100 [ 199.552308][ T8745] kmem_cache_alloc_node_noprof+0x77/0x380 [ 199.552337][ T8745] ? __alloc_skb+0x1c3/0x440 [ 199.552356][ T8745] ? genl_rcv_msg+0x894/0xec0 [ 199.552382][ T8745] __alloc_skb+0x1c3/0x440 [ 199.552400][ T8745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.552436][ T8745] ? __pfx___alloc_skb+0x10/0x10 [ 199.552467][ T8745] netlink_dump+0x239/0xe10 [ 199.552510][ T8745] ? __pfx_netlink_dump+0x10/0x10 [ 199.552553][ T8745] ? __asan_memset+0x23/0x50 [ 199.552573][ T8745] ? genl_start+0x4ae/0x6d0 [ 199.552605][ T8745] __netlink_dump_start+0x5a2/0x790 [ 199.552643][ T8745] genl_rcv_msg+0x894/0xec0 [ 199.552675][ T8745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.552705][ T8745] ? __pfx_genl_start+0x10/0x10 [ 199.552725][ T8745] ? __pfx_genl_dumpit+0x10/0x10 [ 199.552744][ T8745] ? __pfx_genl_done+0x10/0x10 [ 199.552785][ T8745] ? __pfx_lock_acquire+0x10/0x10 [ 199.552817][ T8745] ? __pfx_ip_vs_genl_dump_services+0x10/0x10 [ 199.552842][ T8745] ? __pfx___might_resched+0x10/0x10 [ 199.552882][ T8745] netlink_rcv_skb+0x206/0x480 [ 199.552911][ T8745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.552935][ T8745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.552979][ T8745] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 199.553024][ T8745] genl_rcv+0x28/0x40 [ 199.553044][ T8745] netlink_unicast+0x7f6/0x990 [ 199.553080][ T8745] ? __pfx_netlink_unicast+0x10/0x10 [ 199.553104][ T8745] ? __virt_addr_valid+0x45f/0x530 [ 199.553126][ T8745] ? __phys_addr_symbol+0x2f/0x70 [ 199.553145][ T8745] ? __check_object_size+0x47a/0x730 [ 199.553178][ T8745] netlink_sendmsg+0x8de/0xcb0 [ 199.553221][ T8745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.553255][ T8745] ? aa_sock_msg_perm+0x91/0x160 [ 199.553300][ T8745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.553328][ T8745] __sock_sendmsg+0x221/0x270 [ 199.553360][ T8745] ____sys_sendmsg+0x53a/0x860 [ 199.553393][ T8745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.553413][ T8745] ? __fget_files+0x2a/0x410 [ 199.553448][ T8745] ? __fget_files+0x2a/0x410 [ 199.553487][ T8745] __sys_sendmsg+0x269/0x350 [ 199.553516][ T8745] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.553554][ T8745] ? do_sys_openat2+0x17a/0x1d0 [ 199.553613][ T8745] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.553646][ T8745] ? do_syscall_64+0x100/0x230 [ 199.553675][ T8745] ? do_syscall_64+0xb6/0x230 [ 199.553704][ T8745] do_syscall_64+0xf3/0x230 [ 199.553729][ T8745] ? clear_bhb_loop+0x35/0x90 [ 199.553762][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.553790][ T8745] RIP: 0033:0x7fa7af58d169 [ 199.553808][ T8745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.553826][ T8745] RSP: 002b:00007fa7b0494038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.553849][ T8745] RAX: ffffffffffffffda RBX: 00007fa7af7a5fa0 RCX: 00007fa7af58d169 [ 199.553865][ T8745] RDX: 0000000000000000 RSI: 0000400000000680 RDI: 0000000000000003 [ 199.553878][ T8745] RBP: 00007fa7b0494090 R08: 0000000000000000 R09: 0000000000000000 [ 199.553890][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.553902][ T8745] R13: 0000000000000000 R14: 00007fa7af7a5fa0 R15: 00007fff5c381e78 [ 199.553934][ T8745] [ 200.025792][ T8753] FAULT_INJECTION: forcing a failure. [ 200.025792][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 200.040261][ T8753] CPU: 1 UID: 0 PID: 8753 Comm: syz.3.903 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 200.040293][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.040306][ T8753] Call Trace: [ 200.040314][ T8753] [ 200.040323][ T8753] dump_stack_lvl+0x241/0x360 [ 200.040355][ T8753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.040379][ T8753] ? __pfx__printk+0x10/0x10 [ 200.040402][ T8753] ? __kmalloc_cache_noprof+0x48/0x390 [ 200.040433][ T8753] ? __pfx___might_resched+0x10/0x10 [ 200.040460][ T8753] ? unwind_get_return_address+0x4d/0x90 [ 200.040498][ T8753] should_fail_ex+0x40a/0x550 [ 200.040533][ T8753] should_failslab+0xac/0x100 [ 200.040563][ T8753] __kmalloc_cache_noprof+0x70/0x390 [ 200.040592][ T8753] ? rtnl_newlink+0x13e/0x1d90 [ 200.040626][ T8753] rtnl_newlink+0x13e/0x1d90 [ 200.040655][ T8753] ? stack_depot_save_flags+0x37/0x940 [ 200.040695][ T8753] ? kasan_save_track+0x51/0x80 [ 200.040717][ T8753] ? kasan_save_free_info+0x40/0x50 [ 200.040747][ T8753] ? __kasan_slab_free+0x59/0x70 [ 200.040769][ T8753] ? kmem_cache_free+0x195/0x410 [ 200.040798][ T8753] ? __pfx_rtnl_newlink+0x10/0x10 [ 200.040826][ T8753] ? __netlink_deliver_tap+0x561/0x7f0 [ 200.040856][ T8753] ? __pfx_validate_chain+0x10/0x10 [ 200.040878][ T8753] ? __sock_sendmsg+0x221/0x270 [ 200.040904][ T8753] ? ____sys_sendmsg+0x53a/0x860 [ 200.040924][ T8753] ? __sys_sendmsg+0x269/0x350 [ 200.040943][ T8753] ? do_syscall_64+0xf3/0x230 [ 200.040967][ T8753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.041022][ T8753] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 200.041058][ T8753] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.041097][ T8753] ? mark_lock+0x9a/0x360 [ 200.041121][ T8753] ? __lock_acquire+0x1397/0x2100 [ 200.041184][ T8753] ? __pfx_lock_release+0x10/0x10 [ 200.041235][ T8753] ? __pfx_rtnl_newlink+0x10/0x10 [ 200.041266][ T8753] rtnetlink_rcv_msg+0x791/0xcf0 [ 200.041294][ T8753] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 200.041329][ T8753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.041366][ T8753] ? ref_tracker_free+0x643/0x7e0 [ 200.041393][ T8753] netlink_rcv_skb+0x206/0x480 [ 200.041422][ T8753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.041454][ T8753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.041506][ T8753] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.041538][ T8753] netlink_unicast+0x7f6/0x990 [ 200.041572][ T8753] ? __pfx_netlink_unicast+0x10/0x10 [ 200.041596][ T8753] ? __virt_addr_valid+0x45f/0x530 [ 200.041617][ T8753] ? __phys_addr_symbol+0x2f/0x70 [ 200.041637][ T8753] ? __check_object_size+0x47a/0x730 [ 200.041670][ T8753] netlink_sendmsg+0x8de/0xcb0 [ 200.041711][ T8753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.041745][ T8753] ? aa_sock_msg_perm+0x91/0x160 [ 200.041783][ T8753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.041810][ T8753] __sock_sendmsg+0x221/0x270 [ 200.041841][ T8753] ____sys_sendmsg+0x53a/0x860 [ 200.041873][ T8753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.041893][ T8753] ? __fget_files+0x2a/0x410 [ 200.041926][ T8753] ? __fget_files+0x2a/0x410 [ 200.041965][ T8753] __sys_sendmsg+0x269/0x350 [ 200.041992][ T8753] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.042034][ T8753] ? do_sys_openat2+0x17a/0x1d0 [ 200.042091][ T8753] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.042124][ T8753] ? do_syscall_64+0x100/0x230 [ 200.042153][ T8753] ? do_syscall_64+0xb6/0x230 [ 200.042180][ T8753] do_syscall_64+0xf3/0x230 [ 200.042205][ T8753] ? clear_bhb_loop+0x35/0x90 [ 200.042238][ T8753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.042267][ T8753] RIP: 0033:0x7f8aea78d169 [ 200.042285][ T8753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.042303][ T8753] RSP: 002b:00007f8aeb52a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.042325][ T8753] RAX: ffffffffffffffda RBX: 00007f8aea9a6080 RCX: 00007f8aea78d169 [ 200.042341][ T8753] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 200.042354][ T8753] RBP: 00007f8aeb52a090 R08: 0000000000000000 R09: 0000000000000000 [ 200.042367][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.042379][ T8753] R13: 0000000000000000 R14: 00007f8aea9a6080 R15: 00007ffd7ccffe88 [ 200.042409][ T8753] [ 200.044457][ T8741] lo speed is unknown, defaulting to 1000 [ 200.101409][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 200.362251][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.822358][ T8764] lo speed is unknown, defaulting to 1000 [ 201.065112][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 201.493938][ T8764] lo speed is unknown, defaulting to 1000 [ 202.365354][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 202.365379][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 202.371593][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 203.037632][ T8816] Cannot find add_set index 0 as target [ 203.553250][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.927'. [ 203.603812][ T8826] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 203.826946][ T8831] netlink: 'syz.1.927': attribute type 1 has an invalid length. [ 203.889189][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.898505][ T8830] bond1: (slave gretap1): making interface the new active one [ 203.906909][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.907664][ T8830] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 203.922993][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.932861][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.942050][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 203.949898][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.050799][ T8833] lo speed is unknown, defaulting to 1000 [ 204.136083][ T8840] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 204.218003][ T8840] netlink: 80 bytes leftover after parsing attributes in process `syz.3.930'. [ 204.231250][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 204.241064][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 204.246929][ T8833] lo speed is unknown, defaulting to 1000 [ 204.250831][ T8840] netlink: 'syz.3.930': attribute type 12 has an invalid length. [ 204.564778][ T8844] bridge0: port 3(dummy0) entered blocking state [ 204.571605][ T8844] bridge0: port 3(dummy0) entered disabled state [ 204.579710][ T8844] dummy0: entered allmulticast mode [ 204.586563][ T8844] dummy0: entered promiscuous mode [ 204.626719][ T8849] lo speed is unknown, defaulting to 1000 [ 204.757369][ T8833] chnl_net:caif_netlink_parms(): no params data found [ 204.868314][ T8849] lo speed is unknown, defaulting to 1000 [ 204.987458][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.005834][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.019940][ T8833] bridge_slave_0: entered allmulticast mode [ 205.031007][ T8833] bridge_slave_0: entered promiscuous mode [ 205.046910][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.054590][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.064332][ T8833] bridge_slave_1: entered allmulticast mode [ 205.072365][ T8833] bridge_slave_1: entered promiscuous mode [ 205.121657][ T8833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.135978][ T8833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.279036][ T8833] team0: Port device team_slave_0 added [ 205.384206][ T8833] team0: Port device team_slave_1 added [ 205.600461][ T8865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'. [ 205.652521][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.699508][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.752093][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.936'. [ 205.776444][ T8833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.892750][ T8865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.008676][ T8868] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 206.045197][ T5832] Bluetooth: hci0: command tx timeout [ 206.056598][ T8868] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 206.076573][ T8882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.942'. [ 206.145952][ T8874] vlan3: entered promiscuous mode [ 206.151169][ T8874] bond2: entered promiscuous mode [ 206.169548][ T8874] batadv1: entered promiscuous mode [ 206.210563][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.218993][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.303629][ T8833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.407459][ T8888] netlink: 'syz.2.945': attribute type 1 has an invalid length. [ 206.415297][ T8888] netlink: 236 bytes leftover after parsing attributes in process `syz.2.945'. [ 206.424284][ T8888] NCSI netlink: No device for ifindex 813332851 [ 206.562274][ T8833] hsr_slave_0: entered promiscuous mode [ 206.596407][ T8833] hsr_slave_1: entered promiscuous mode [ 206.602619][ T8833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.635195][ T8833] Cannot create hsr debugfs directory [ 206.820356][ T8910] FAULT_INJECTION: forcing a failure. [ 206.820356][ T8910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.921624][ T8910] CPU: 0 UID: 0 PID: 8910 Comm: syz.4.951 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 206.921658][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.921672][ T8910] Call Trace: [ 206.921679][ T8910] [ 206.921688][ T8910] dump_stack_lvl+0x241/0x360 [ 206.921722][ T8910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.921746][ T8910] ? __pfx__printk+0x10/0x10 [ 206.921770][ T8910] ? __pfx_lock_release+0x10/0x10 [ 206.921801][ T8910] ? __lock_acquire+0x1397/0x2100 [ 206.921841][ T8910] should_fail_ex+0x40a/0x550 [ 206.921877][ T8910] _copy_from_user+0x2d/0xb0 [ 206.921906][ T8910] kstrtouint_from_user+0xc6/0x190 [ 206.921933][ T8910] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 206.921960][ T8910] ? __pfx_lock_acquire+0x10/0x10 [ 206.922003][ T8910] proc_fail_nth_write+0xaa/0x2d0 [ 206.922032][ T8910] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 206.922059][ T8910] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 206.922095][ T8910] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 206.922126][ T8910] vfs_write+0x29f/0xd10 [ 206.922151][ T8910] ? fdget_pos+0x254/0x320 [ 206.922180][ T8910] ? __mutex_unlock_slowpath+0x227/0x800 [ 206.922210][ T8910] ? __pfx_vfs_write+0x10/0x10 [ 206.922229][ T8910] ? do_sys_openat2+0x17a/0x1d0 [ 206.922261][ T8910] ? __fget_files+0x2a/0x410 [ 206.922292][ T8910] ? __fget_files+0x395/0x410 [ 206.922320][ T8910] ? __fget_files+0x2a/0x410 [ 206.922360][ T8910] ksys_write+0x18f/0x2b0 [ 206.922385][ T8910] ? __pfx_ksys_write+0x10/0x10 [ 206.922408][ T8910] ? do_syscall_64+0x100/0x230 [ 206.922437][ T8910] ? do_syscall_64+0xb6/0x230 [ 206.922466][ T8910] do_syscall_64+0xf3/0x230 [ 206.922491][ T8910] ? clear_bhb_loop+0x35/0x90 [ 206.922522][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.922551][ T8910] RIP: 0033:0x7f6958d8bc1f [ 206.922569][ T8910] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 206.922587][ T8910] RSP: 002b:00007f6959c78030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 206.922619][ T8910] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6958d8bc1f [ 206.922634][ T8910] RDX: 0000000000000001 RSI: 00007f6959c780a0 RDI: 0000000000000005 [ 206.922647][ T8910] RBP: 00007f6959c78090 R08: 0000000000000000 R09: 0000000000000000 [ 206.922660][ T8910] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 206.922672][ T8910] R13: 0000000000000000 R14: 00007f6958fa5fa0 R15: 00007fffd774a838 [ 206.922704][ T8910] [ 207.287870][ T8918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.953'. [ 207.421462][ T8833] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.680328][ T8936] netlink: 116 bytes leftover after parsing attributes in process `syz.1.956'. [ 207.691698][ T8833] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.796109][ T8940] team0: left promiscuous mode [ 207.801055][ T8940] team_slave_0: left promiscuous mode [ 207.817358][ T8940] team_slave_1: left promiscuous mode [ 208.125364][ T5832] Bluetooth: hci0: command tx timeout [ 208.236372][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 208.251808][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 208.292475][ T8941] netlink: 'syz.4.960': attribute type 15 has an invalid length. [ 208.307867][ T8833] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.418301][ T8833] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.938148][ T8833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.994146][ T8833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.042567][ T8966] lo speed is unknown, defaulting to 1000 [ 209.049023][ T8833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.068426][ T8833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.352877][ T8984] __nla_validate_parse: 1 callbacks suppressed [ 209.352899][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.967'. [ 209.482777][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.677908][ T8833] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.802520][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.810898][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.879805][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.887037][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.955636][ T9023] FAULT_INJECTION: forcing a failure. [ 209.955636][ T9023] name failslab, interval 1, probability 0, space 0, times 0 [ 210.045331][ T9023] CPU: 0 UID: 0 PID: 9023 Comm: syz.2.969 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 210.045375][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.045389][ T9023] Call Trace: [ 210.045397][ T9023] [ 210.045406][ T9023] dump_stack_lvl+0x241/0x360 [ 210.045439][ T9023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.045463][ T9023] ? __pfx__printk+0x10/0x10 [ 210.045486][ T9023] ? __kmalloc_noprof+0xb5/0x4c0 [ 210.045517][ T9023] ? __pfx___might_resched+0x10/0x10 [ 210.045543][ T9023] ? aa_get_newest_label+0xff/0x6f0 [ 210.045610][ T9023] should_fail_ex+0x40a/0x550 [ 210.045645][ T9023] should_failslab+0xac/0x100 [ 210.045676][ T9023] __kmalloc_noprof+0xdd/0x4c0 [ 210.045705][ T9023] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 210.045729][ T9023] ? apparmor_capable+0x13b/0x1b0 [ 210.045757][ T9023] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 210.045789][ T9023] genl_rcv_msg+0x80b/0xec0 [ 210.045821][ T9023] ? __pfx_genl_rcv_msg+0x10/0x10 [ 210.045874][ T9023] ? __pfx_lock_acquire+0x10/0x10 [ 210.045905][ T9023] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 210.045935][ T9023] ? __pfx_nl80211_new_mpath+0x10/0x10 [ 210.045961][ T9023] ? __pfx_nl80211_post_doit+0x10/0x10 [ 210.045992][ T9023] ? __pfx___might_resched+0x10/0x10 [ 210.046031][ T9023] netlink_rcv_skb+0x206/0x480 [ 210.046061][ T9023] ? __pfx_genl_rcv_msg+0x10/0x10 [ 210.046085][ T9023] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.046128][ T9023] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 210.046174][ T9023] genl_rcv+0x28/0x40 [ 210.046194][ T9023] netlink_unicast+0x7f6/0x990 [ 210.046230][ T9023] ? __pfx_netlink_unicast+0x10/0x10 [ 210.046254][ T9023] ? __virt_addr_valid+0x45f/0x530 [ 210.046276][ T9023] ? __phys_addr_symbol+0x2f/0x70 [ 210.046296][ T9023] ? __check_object_size+0x47a/0x730 [ 210.046329][ T9023] netlink_sendmsg+0x8de/0xcb0 [ 210.046379][ T9023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.046414][ T9023] ? aa_sock_msg_perm+0x91/0x160 [ 210.046452][ T9023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.046480][ T9023] __sock_sendmsg+0x221/0x270 [ 210.046513][ T9023] ____sys_sendmsg+0x53a/0x860 [ 210.046545][ T9023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.046566][ T9023] ? __fget_files+0x2a/0x410 [ 210.046600][ T9023] ? __fget_files+0x2a/0x410 [ 210.046640][ T9023] __sys_sendmsg+0x269/0x350 [ 210.046669][ T9023] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.046706][ T9023] ? do_sys_openat2+0x17a/0x1d0 [ 210.046765][ T9023] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.046800][ T9023] ? do_syscall_64+0x100/0x230 [ 210.046829][ T9023] ? do_syscall_64+0xb6/0x230 [ 210.046857][ T9023] do_syscall_64+0xf3/0x230 [ 210.046882][ T9023] ? clear_bhb_loop+0x35/0x90 [ 210.046916][ T9023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.046944][ T9023] RIP: 0033:0x7f970c98d169 [ 210.046963][ T9023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.046981][ T9023] RSP: 002b:00007f970a7d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.047004][ T9023] RAX: ffffffffffffffda RBX: 00007f970cba6080 RCX: 00007f970c98d169 [ 210.047019][ T9023] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 0000000000000003 [ 210.047032][ T9023] RBP: 00007f970a7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 210.047045][ T9023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.047057][ T9023] R13: 0000000000000001 R14: 00007f970cba6080 R15: 00007ffc67996df8 [ 210.047089][ T9023] [ 210.400134][ T9018] lo speed is unknown, defaulting to 1000 [ 210.406781][ T8966] lo speed is unknown, defaulting to 1000 [ 210.495206][ T5832] Bluetooth: hci0: command tx timeout [ 210.657881][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 210.872930][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 211.220544][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.348236][ T9039] netlink: 32 bytes leftover after parsing attributes in process `syz.2.971'. [ 211.385283][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 211.570163][ T9018] lo speed is unknown, defaulting to 1000 [ 211.884947][ T8833] veth0_vlan: entered promiscuous mode [ 211.948905][ T8833] veth1_vlan: entered promiscuous mode [ 212.099729][ T8833] veth0_macvtap: entered promiscuous mode [ 212.162839][ T8833] veth1_macvtap: entered promiscuous mode [ 212.184429][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.195403][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.213008][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.224207][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.252057][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.271700][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.294649][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.324342][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.346382][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.364690][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.375659][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.387227][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.398383][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.409843][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.420789][ T9054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.976'. [ 212.433294][ T8833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.447998][ T8833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.458200][ T8833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.467386][ T8833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.525436][ T5832] Bluetooth: hci0: command tx timeout [ 212.654792][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.676642][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.767049][ T9059] FAULT_INJECTION: forcing a failure. [ 212.767049][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 212.772570][ T964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.812815][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: syz.1.978 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 212.812846][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.812860][ T9059] Call Trace: [ 212.812868][ T9059] [ 212.812886][ T9059] dump_stack_lvl+0x241/0x360 [ 212.812919][ T9059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.812943][ T9059] ? __pfx__printk+0x10/0x10 [ 212.812967][ T9059] ? __kmalloc_noprof+0xb5/0x4c0 [ 212.812997][ T9059] ? __pfx___might_resched+0x10/0x10 [ 212.813025][ T9059] ? aa_get_newest_label+0xff/0x6f0 [ 212.813062][ T9059] should_fail_ex+0x40a/0x550 [ 212.813099][ T9059] should_failslab+0xac/0x100 [ 212.813129][ T9059] __kmalloc_noprof+0xdd/0x4c0 [ 212.813157][ T9059] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 212.813181][ T9059] ? apparmor_capable+0x13b/0x1b0 [ 212.813210][ T9059] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 212.813242][ T9059] genl_rcv_msg+0x80b/0xec0 [ 212.813274][ T9059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.813327][ T9059] ? __pfx_lock_acquire+0x10/0x10 [ 212.813358][ T9059] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 212.813388][ T9059] ? __pfx_nl80211_associate+0x10/0x10 [ 212.813416][ T9059] ? __pfx_nl80211_post_doit+0x10/0x10 [ 212.813447][ T9059] ? __pfx___might_resched+0x10/0x10 [ 212.813486][ T9059] netlink_rcv_skb+0x206/0x480 [ 212.813517][ T9059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.813542][ T9059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.813585][ T9059] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 212.813631][ T9059] genl_rcv+0x28/0x40 [ 212.813650][ T9059] netlink_unicast+0x7f6/0x990 [ 212.813687][ T9059] ? __pfx_netlink_unicast+0x10/0x10 [ 212.813711][ T9059] ? __virt_addr_valid+0x45f/0x530 [ 212.813732][ T9059] ? __phys_addr_symbol+0x2f/0x70 [ 212.813752][ T9059] ? __check_object_size+0x47a/0x730 [ 212.813785][ T9059] netlink_sendmsg+0x8de/0xcb0 [ 212.813829][ T9059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.813864][ T9059] ? aa_sock_msg_perm+0x91/0x160 [ 212.813909][ T9059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.813935][ T9059] __sock_sendmsg+0x221/0x270 [ 212.813966][ T9059] ____sys_sendmsg+0x53a/0x860 [ 212.813999][ T9059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.814019][ T9059] ? __fget_files+0x2a/0x410 [ 212.814060][ T9059] ? __fget_files+0x2a/0x410 [ 212.814098][ T9059] __sys_sendmsg+0x269/0x350 [ 212.814126][ T9059] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.814162][ T9059] ? do_sys_openat2+0x17a/0x1d0 [ 212.814221][ T9059] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.814255][ T9059] ? do_syscall_64+0x100/0x230 [ 212.814284][ T9059] ? do_syscall_64+0xb6/0x230 [ 212.814313][ T9059] do_syscall_64+0xf3/0x230 [ 212.814338][ T9059] ? clear_bhb_loop+0x35/0x90 [ 212.814370][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.814398][ T9059] RIP: 0033:0x7f4d87f8d169 [ 212.814417][ T9059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.814436][ T9059] RSP: 002b:00007f4d88dea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.814459][ T9059] RAX: ffffffffffffffda RBX: 00007f4d881a5fa0 RCX: 00007f4d87f8d169 [ 212.814473][ T9059] RDX: 0000000004000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 212.814487][ T9059] RBP: 00007f4d88dea090 R08: 0000000000000000 R09: 0000000000000000 [ 212.814500][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.814510][ T9059] R13: 0000000000000000 R14: 00007f4d881a5fa0 R15: 00007fffbcb6f078 [ 212.814542][ T9059] [ 212.839413][ T964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.346504][ T9064] netlink: 'syz.3.981': attribute type 10 has an invalid length. [ 213.368846][ T9070] lo speed is unknown, defaulting to 1000 [ 213.405980][ T9064] team0: Device veth1_macvtap failed to register rx_handler [ 213.520355][ T9073] ip6tnl1: entered promiscuous mode [ 213.525794][ T9073] ip6tnl1: entered allmulticast mode [ 213.536215][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 213.876773][ T9070] lo speed is unknown, defaulting to 1000 [ 213.883070][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.989'. [ 214.021870][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 214.085811][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 214.152011][ T9010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.455387][ T5880] IPVS: starting estimator thread 0... [ 214.475942][ T9084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.533136][ T9089] vlan0: entered promiscuous mode [ 214.555157][ T9098] IPVS: using max 20 ests per chain, 48000 per kthread [ 214.576106][ T9089] bond1: entered promiscuous mode [ 214.667173][ T9010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.921969][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.931326][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.938822][ T9010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.953265][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.961498][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.969652][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.978502][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.101486][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.173946][ T9010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.262531][ T9120] syz_tun: entered allmulticast mode [ 215.282211][ T9109] lo speed is unknown, defaulting to 1000 [ 215.297558][ T9120] syz_tun: left allmulticast mode [ 215.420877][ T9010] bridge_slave_1: left allmulticast mode [ 215.445818][ T9010] bridge_slave_1: left promiscuous mode [ 215.478863][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.502692][ T9010] bridge_slave_0: left allmulticast mode [ 215.512963][ T9010] bridge_slave_0: left promiscuous mode [ 215.530565][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.541742][ T9130] __nla_validate_parse: 1 callbacks suppressed [ 215.541764][ T9130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1002'. [ 216.030524][ T9010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.050415][ T9010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.061924][ T9010] bond0 (unregistering): Released all slaves [ 216.074841][ T9109] lo speed is unknown, defaulting to 1000 [ 216.085179][ T9133] syz_tun: entered allmulticast mode [ 216.092240][ T9135] syz_tun: left allmulticast mode [ 216.496337][ T9153] netlink: 1500 bytes leftover after parsing attributes in process `syz.2.1007'. [ 216.840929][ T9155] syzkaller0: entered promiscuous mode [ 216.846650][ T9155] syzkaller0: entered allmulticast mode [ 217.468563][ T9190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1015'. [ 217.868118][ T9200] xt_TCPMSS: Only works on TCP SYN packets [ 219.480824][ T9109] chnl_net:caif_netlink_parms(): no params data found [ 219.497865][ T9010] hsr_slave_0: left promiscuous mode [ 219.504029][ T9010] hsr_slave_1: left promiscuous mode [ 219.510492][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.534239][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.551964][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.562144][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.602160][ T9010] veth1_macvtap: left promiscuous mode [ 219.608648][ T9010] veth0_macvtap: left promiscuous mode [ 219.614293][ T9010] veth1_vlan: left promiscuous mode [ 219.621096][ T9010] veth0_vlan: left promiscuous mode [ 220.104308][ T9010] team0 (unregistering): Port device team_slave_1 removed [ 220.151571][ T9010] team0 (unregistering): Port device team_slave_0 removed [ 220.211174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.667620][ T9196] FAULT_INJECTION: forcing a failure. [ 220.667620][ T9196] name failslab, interval 1, probability 0, space 0, times 0 [ 220.685511][ T5502] [ 220.687169][ T9196] CPU: 0 UID: 0 PID: 9196 Comm: syz.3.1017 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 220.687198][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.687213][ T9196] Call Trace: [ 220.687221][ T9196] [ 220.687230][ T9196] dump_stack_lvl+0x241/0x360 [ 220.687262][ T9196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.687286][ T9196] ? __pfx__printk+0x10/0x10 [ 220.687308][ T9196] ? __kmalloc_cache_noprof+0x48/0x390 [ 220.687340][ T9196] ? __pfx___might_resched+0x10/0x10 [ 220.687368][ T9196] ? netdev_run_todo+0xeac/0xf30 [ 220.687392][ T9196] ? smc_pnet_add+0x44f/0x1350 [ 220.687423][ T9196] should_fail_ex+0x40a/0x550 [ 220.687466][ T9196] should_failslab+0xac/0x100 [ 220.687495][ T9196] __kmalloc_cache_noprof+0x70/0x390 [ 220.687525][ T9196] ? smc_pnet_add+0x4a3/0x1350 [ 220.687554][ T9196] smc_pnet_add+0x4a3/0x1350 [ 220.687587][ T9196] ? __pfx_smc_pnet_add+0x10/0x10 [ 220.687617][ T9196] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 220.687647][ T9196] genl_rcv_msg+0xb1f/0xec0 [ 220.687674][ T9196] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.687712][ T9196] ? __pfx_lock_acquire+0x10/0x10 [ 220.687744][ T9196] ? __pfx_smc_pnet_add+0x10/0x10 [ 220.687772][ T9196] ? __pfx___might_resched+0x10/0x10 [ 220.687806][ T9196] netlink_rcv_skb+0x206/0x480 [ 220.687837][ T9196] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.687859][ T9196] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.687901][ T9196] genl_rcv+0x28/0x40 [ 220.687922][ T9196] netlink_unicast+0x7f6/0x990 [ 220.687954][ T9196] ? __pfx_netlink_unicast+0x10/0x10 [ 220.687979][ T9196] ? __virt_addr_valid+0x45f/0x530 [ 220.688003][ T9196] ? __phys_addr_symbol+0x2f/0x70 [ 220.688022][ T9196] ? __check_object_size+0x47a/0x730 [ 220.688053][ T9196] netlink_sendmsg+0x8de/0xcb0 [ 220.688089][ T9196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.688122][ T9196] ? aa_sock_msg_perm+0x91/0x160 [ 220.688171][ T9196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.688199][ T9196] __sock_sendmsg+0x221/0x270 [ 220.688230][ T9196] ____sys_sendmsg+0x53a/0x860 [ 220.688257][ T9196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.688278][ T9196] ? __fget_files+0x2a/0x410 [ 220.688310][ T9196] ? __fget_files+0x2a/0x410 [ 220.688344][ T9196] __sys_sendmsg+0x269/0x350 [ 220.688370][ T9196] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.688399][ T9196] ? do_sys_openat2+0x17a/0x1d0 [ 220.688451][ T9196] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.688484][ T9196] ? do_syscall_64+0x100/0x230 [ 220.688512][ T9196] ? do_syscall_64+0xb6/0x230 [ 220.688538][ T9196] do_syscall_64+0xf3/0x230 [ 220.688564][ T9196] ? clear_bhb_loop+0x35/0x90 [ 220.688596][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.688626][ T9196] RIP: 0033:0x7f8aea78d169 [ 220.688645][ T9196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.688664][ T9196] RSP: 002b:00007f8aeb54b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.688689][ T9196] RAX: ffffffffffffffda RBX: 00007f8aea9a5fa0 RCX: 00007f8aea78d169 [ 220.688705][ T9196] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000004 [ 220.688719][ T9196] RBP: 00007f8aeb54b090 R08: 0000000000000000 R09: 0000000000000000 [ 220.688732][ T9196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.688745][ T9196] R13: 0000000000000000 R14: 00007f8aea9a5fa0 R15: 00007ffd7ccffe88 [ 220.688768][ T9196] [ 221.019997][ T5502] ============================================ [ 221.026150][ T5502] WARNING: possible recursive locking detected [ 221.032302][ T5502] 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 Not tainted [ 221.039419][ T5502] -------------------------------------------- [ 221.045571][ T5502] dhcpcd/5502 is trying to acquire lock: [ 221.051205][ T5502] ffff888060a5ad28 (&dev->lock){+.+.}-{4:4}, at: register_netdevice+0x12d8/0x1b70 [ 221.060536][ T5502] [ 221.060536][ T5502] but task is already holding lock: [ 221.067995][ T5502] ffff88805d504d28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 221.076894][ T5502] [ 221.076894][ T5502] other info that might help us debug this: [ 221.084962][ T5502] Possible unsafe locking scenario: [ 221.084962][ T5502] [ 221.092416][ T5502] CPU0 [ 221.095697][ T5502] ---- [ 221.098976][ T5502] lock(&dev->lock); [ 221.102966][ T5502] lock(&dev->lock); [ 221.106954][ T5502] [ 221.106954][ T5502] *** DEADLOCK *** [ 221.106954][ T5502] [ 221.115096][ T5502] May be due to missing lock nesting notation [ 221.115096][ T5502] [ 221.123416][ T5502] 2 locks held by dhcpcd/5502: [ 221.128270][ T5502] #0: ffffffff8fed6848 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34c/0x1d80 [ 221.137438][ T5502] #1: ffff88805d504d28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 221.146781][ T5502] [ 221.146781][ T5502] stack backtrace: [ 221.152681][ T5502] CPU: 1 UID: 0 PID: 5502 Comm: dhcpcd Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 221.152702][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.152713][ T5502] Call Trace: [ 221.152718][ T5502] [ 221.152726][ T5502] dump_stack_lvl+0x241/0x360 [ 221.152747][ T5502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.152765][ T5502] ? __pfx__printk+0x10/0x10 [ 221.152780][ T5502] ? lockdep_unlock+0x16a/0x300 [ 221.152807][ T5502] print_deadlock_bug+0x483/0x620 [ 221.152826][ T5502] ? lockdep_unlock+0x16a/0x300 [ 221.152849][ T5502] validate_chain+0x15e2/0x5920 [ 221.152877][ T5502] ? __pfx_validate_chain+0x10/0x10 [ 221.152897][ T5502] ? __pfx_validate_chain+0x10/0x10 [ 221.152917][ T5502] ? look_up_lock_class+0x77/0x170 [ 221.152937][ T5502] ? register_lock_class+0x102/0x980 [ 221.152963][ T5502] ? __pfx_register_lock_class+0x10/0x10 [ 221.152989][ T5502] ? mark_lock+0x9a/0x360 [ 221.153005][ T5502] __lock_acquire+0x1397/0x2100 [ 221.153036][ T5502] lock_acquire+0x1ed/0x550 [ 221.153060][ T5502] ? register_netdevice+0x12d8/0x1b70 [ 221.153082][ T5502] ? __pfx_lock_acquire+0x10/0x10 [ 221.153107][ T5502] ? __pfx___might_resched+0x10/0x10 [ 221.153128][ T5502] ? __pfx_lock_release+0x10/0x10 [ 221.153157][ T5502] __mutex_lock+0x19c/0x1010 [ 221.153175][ T5502] ? register_netdevice+0x12d8/0x1b70 [ 221.153194][ T5502] ? __mutex_unlock_slowpath+0x227/0x800 [ 221.153216][ T5502] ? _raw_spin_lock_irq+0xdf/0x120 [ 221.153232][ T5502] ? register_netdevice+0x12d8/0x1b70 [ 221.153249][ T5502] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 221.153269][ T5502] ? __pfx___mutex_lock+0x10/0x10 [ 221.153286][ T5502] ? _raw_spin_unlock_irq+0x23/0x50 [ 221.153307][ T5502] ? netdev_register_kobject+0x2b0/0x2f0 [ 221.153326][ T5502] register_netdevice+0x12d8/0x1b70 [ 221.153351][ T5502] ? __pfx_register_netdevice+0x10/0x10 [ 221.153375][ T5502] bpq_device_event+0x4b1/0x8d0 [ 221.153399][ T5502] ? lockdep_rtnl_is_held+0x26/0x40 [ 221.153419][ T5502] notifier_call_chain+0x1a5/0x3f0 [ 221.153445][ T5502] __dev_notify_flags+0x207/0x400 [ 221.153466][ T5502] ? dev_set_rx_mode+0xb8/0x2e0 [ 221.153493][ T5502] ? __pfx___dev_notify_flags+0x10/0x10 [ 221.153517][ T5502] ? __dev_change_flags+0x515/0x6f0 [ 221.153533][ T5502] ? __pfx___mutex_lock+0x10/0x10 [ 221.153553][ T5502] ? __pfx___dev_change_flags+0x10/0x10 [ 221.153570][ T5502] ? __pfx___mutex_lock+0x10/0x10 [ 221.153589][ T5502] netif_change_flags+0xf0/0x1a0 [ 221.153607][ T5502] dev_change_flags+0x146/0x270 [ 221.153635][ T5502] devinet_ioctl+0xea2/0x1d80 [ 221.153662][ T5502] ? __pfx_devinet_ioctl+0x10/0x10 [ 221.153686][ T5502] ? get_user_ifreq+0x1bb/0x200 [ 221.153707][ T5502] inet_ioctl+0x3d7/0x4f0 [ 221.153726][ T5502] ? __pfx_inet_ioctl+0x10/0x10 [ 221.153744][ T5502] ? tomoyo_path_number_perm+0x5dd/0x770 [ 221.153777][ T5502] sock_do_ioctl+0x158/0x460 [ 221.153800][ T5502] ? __pfx_sock_do_ioctl+0x10/0x10 [ 221.153822][ T5502] ? __pfx_lock_release+0x10/0x10 [ 221.153850][ T5502] sock_ioctl+0x626/0x8e0 [ 221.153871][ T5502] ? __pfx_sock_ioctl+0x10/0x10 [ 221.153892][ T5502] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 221.153918][ T5502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.153944][ T5502] ? __pfx_sock_ioctl+0x10/0x10 [ 221.153964][ T5502] __se_sys_ioctl+0xf5/0x170 [ 221.153982][ T5502] do_syscall_64+0xf3/0x230 [ 221.154002][ T5502] ? clear_bhb_loop+0x35/0x90 [ 221.154026][ T5502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.154049][ T5502] RIP: 0033:0x7faf27438d49 [ 221.154064][ T5502] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 221.154078][ T5502] RSP: 002b:00007fff5b80ee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.154094][ T5502] RAX: ffffffffffffffda RBX: 00007faf2736a6c0 RCX: 00007faf27438d49 [ 221.154107][ T5502] RDX: 00007fff5b81f048 RSI: 0000000000008914 RDI: 000000000000000f [ 221.154118][ T5502] RBP: 00007fff5b82f208 R08: 00007fff5b81f008 R09: 00007fff5b81efb8 [ 221.154130][ T5502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.154139][ T5502] R13: 00007fff5b81f048 R14: 0000000000000028 R15: 0000000000008914 [ 221.154156][ T5502] SYZFAIL: failed to send rpc fd=3 want=192 sent=0 n=-1 (errno 32: Broken pipe) [ 221.703376][ T9204] syz_tun: entered allmulticast mode [ 221.732079][ T9204] syz_tun: left allmulticast mode [ 222.233203][ T9208] syz_tun: left promiscuous mode [ 222.409861][ T9010] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.479654][ T9010] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.539323][ T9010] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.579068][ T9010] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.646726][ T9010] dummy0: left allmulticast mode [ 222.654644][ T9010] dummy0: left promiscuous mode [ 222.662666][ T9010] bridge0: port 3(dummy0) entered disabled state [ 222.675149][ T9010] bridge_slave_1: left allmulticast mode [ 222.680845][ T9010] bridge_slave_1: left promiscuous mode [ 222.689624][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.698267][ T9010] bridge_slave_0: left allmulticast mode [ 222.704115][ T9010] bridge_slave_0: left promiscuous mode [ 222.713716][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.830336][ T9010] bond1 (unregistering): (slave gretap1): Releasing active interface [ 223.048016][ T9010] bond0 (unregistering): Released all slaves [ 223.061479][ T9010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.071456][ T9010] bond0 (unregistering): Released all slaves [ 223.080581][ T9010] bond1 (unregistering): Released all slaves [ 223.186918][ T9010] IPVS: stopping backup sync thread 8826 ... [ 223.527048][ T9010] hsr_slave_0: left promiscuous mode [ 223.532854][ T9010] hsr_slave_1: left promiscuous mode [ 223.539388][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.547375][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.555497][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.562941][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.575122][ T9010] veth0_macvtap: left promiscuous mode [ 223.580743][ T9010] veth1_vlan: left promiscuous mode [ 223.586812][ T9010] veth0_vlan: left promiscuous mode [ 224.331869][ T9010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.392093][ T9010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.463524][ T9010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.541321][ T9010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.624653][ T9010] dummy0: left allmulticast mode [ 224.648257][ T9010] dummy0: left promiscuous mode [ 224.653346][ T9010] bridge0: port 1(dummy0) entered disabled state [ 224.943977][ T9010] bond0 (unregistering): left promiscuous mode [ 224.950699][ T9010] bond0 (unregistering): Released all slaves [ 225.078089][ T9010] bond1 (unregistering): left promiscuous mode [ 225.094322][ T9010] bond1 (unregistering): Released all slaves [ 225.364105][ T9010] batadv0: left promiscuous mode [ 225.374550][ T9010] hsr_slave_0: left promiscuous mode [ 225.380782][ T9010] hsr_slave_1: left promiscuous mode [ 225.393292][ T9010] veth1_macvtap: left promiscuous mode [ 225.399188][ T9010] veth0_macvtap: left promiscuous mode [ 225.407252][ T9010] veth1_vlan: left promiscuous mode [ 225.412557][ T9010] veth0_vlan: left promiscuous mode [ 225.811513][ T9000] smc: removing ib device  [ 225.826610][ T5878] lo speed is unknown, defaulting to 1000