last executing test programs: 2.747915566s ago: executing program 4 (id=1105): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1, @ANYBLOB="020027bd7000fddbdf25"], 0x14}}, 0x200c000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.563459416s ago: executing program 4 (id=1108): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.400124042s ago: executing program 4 (id=1111): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/84, 0x54}, 0x85ae}], 0x2, 0x60010020, 0x0) unshare(0x2c060400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x70}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x80, 0x0, 0x4, 0x5, 0x0, 0x0, 0x5, 0x1000b}, [@FRA_DST={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x8800) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x23, 0x80805, 0x0) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x34, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) 2.134472756s ago: executing program 1 (id=1115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0xff, 0x0, 0xfe, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x50, 0x29, 0x43}}, @ip_tos_u8={{0x24, 0x29, 0x3b}}, @ip_tos_u8], 0x50}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0xfffffffffffffe7a, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x0, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'veth0\x00', &(0x7f0000002fc0)=@ethtool_stats={0x33}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 1.830551095s ago: executing program 1 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7d6ea349d9c45293a1c35087", @ANYRES16=r4, @ANYBLOB="d15e22ebe79f4d03df250500fa9100000000000000000500050009000000050005000800000008000300080000000d00018008000300e01000024000018008000300e0"], 0x80}}, 0x44880) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000000)) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000540)) write$cgroup_int(r6, &(0x7f0000000100), 0x1001) bind$bt_l2cap(r6, &(0x7f0000000500)={0x1f, 0x101, @any, 0x52e4, 0x2}, 0xe) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, 0x0, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x884) 1.687351176s ago: executing program 0 (id=1121): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.460509849s ago: executing program 4 (id=1124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c0008000000000000007fff080001000000000044000780", @ANYRES32, @ANYBLOB="38000100", @ANYRES32, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) 1.356032211s ago: executing program 0 (id=1126): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000181100000000000000d7e6dd1f", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = gettid() sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r8}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x44}}, 0x4008040) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xb, 0xfb6}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 1.322481165s ago: executing program 3 (id=1127): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x10001, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48", 0x7}], 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x12, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) listen(r5, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r6) 1.308786413s ago: executing program 4 (id=1128): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}, {0x12, 0x7c, 0x0, @multicast2}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0xffff0000) 1.289079667s ago: executing program 2 (id=1129): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0xff, 0x0, 0xfe, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x50, 0x29, 0x43}}, @ip_tos_u8={{0x24, 0x29, 0x3b}}, @ip_tos_u8], 0x50}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0xfffffffffffffe7a, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x0, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'veth0\x00', &(0x7f0000002fc0)=@ethtool_stats={0x33}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 1.227962437s ago: executing program 0 (id=1130): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r1], 0x44}}, 0x0) 1.144556471s ago: executing program 4 (id=1131): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x20008000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x891c) shutdown(0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)="b970f6aa2bfdc9d7afbfe5c81e0b9b00b49015199ee375d7bd1e9a044aead3faf4a0f39154893e76f7c07b1ef464add3dac1272dfb540106eff5d18585394f8978a2a6e597b9479e904e68cfe4474d047fbd2a138da70c600c760ce32fdd162b9866cd8b1d2908ea2599011aba31a4b1193250944e602609300cbbb8f2bd89acef5fd0471e96cd071c31f8", 0x8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) shutdown(r4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4040850) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.144109804s ago: executing program 2 (id=1132): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000b000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 1.097185656s ago: executing program 3 (id=1133): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1, @ANYBLOB="020027bd7000fddbdf25"], 0x14}}, 0x200c000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 871.549787ms ago: executing program 0 (id=1134): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x7800, 0x80, 0xfffffffa, 0x4, {{0x1c, 0x4, 0x2, 0x0, 0x70, 0x66, 0x0, 0x5, 0x2f, 0x0, @local, @loopback, {[@ssrr={0x89, 0xf, 0xb7, [@multicast2, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x1c, 0x3c, 0x1, 0x6, [{@multicast2, 0x9}, {@remote, 0x7ff}, {@rand_addr=0x64010102, 0x7}]}, @rr={0x7, 0xb, 0xf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @lsrr={0x83, 0x23, 0x5e, [@empty, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010102, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @local]}, @noop]}}}}}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="ac4f23ab17", 0x5}, 0x1, 0x0, 0x0, 0x1}, 0x20040080) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1, 0x0, 0xfe], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000cc0)={'gretap0\x00', &(0x7f0000000c00)={'gre0\x00', r1, 0x7, 0x47299fd98f1d29ab, 0xd7e, 0x4050, {{0x27, 0x4, 0x0, 0x3a, 0x9c, 0x67, 0x0, 0x70, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @lsrr={0x83, 0x7, 0x96, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0xd2, 0x3, 0x8, [{@local, 0x2d}]}, @noop, @cipso={0x86, 0x3a, 0x0, [{0x4, 0x10, "55ae9da98f847b1420ea4deb0654"}, {0x7, 0x3, "fa"}, {0x1, 0xf, "b62de277d1091f8d1ccc9f003d"}, {0x0, 0x12, "172ac5549cb54ad93a09e2e9ba5c06af"}]}, @timestamp_prespec={0x44, 0x14, 0x2, 0x3, 0xc, [{@multicast2, 0x27b6943d}, {@remote, 0x5}]}, @timestamp={0x44, 0xc, 0x21, 0x0, 0x8, [0x0, 0x2]}, @end, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x2, 0x10, "ee895035d93b03b2917154138412"}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x7c, 0x12, 0x8, 0x70bd2a, 0x25dfdbfc, {0xb, 0x7, 0x6, 0x1e, {0x4e23, 0x4e21, [0x7, 0x9, 0x9, 0x8e], [0x1, 0x401, 0x7, 0x100], r6, [0x3b3, 0x8]}, 0xffffffff, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "60ce7aed12c309535ff8bf2c199abead287d70f918160ea5a3fb16bc50f8e5ecbf15afb44206bf6b3e"}]}, 0x7c}}, 0x844) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x3, 0x8, @remote, 0x7}, 0x1c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) readv(r0, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/163, 0xa3}, {&(0x7f0000000780)=""/206, 0xce}, {&(0x7f0000000880)=""/43, 0x2b}, {&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000980)=""/189, 0xbd}, {&(0x7f0000000a40)=""/230, 0xe6}], 0x6) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRESHEX=r9, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="9c59adc94d01eecbe0ddca9fa9665e5c9b680060e39ac304c9ea762325f8bebab4531a02bb478b5622e2c915b6726dd59ca2ece011d6d49704ffcff3fdf8457a0606013bad9e5f5eba3c663408fa30bc38036b14da7bb7ea495a9103d37e6a2d66c576948769997a1a7a5539", 0x6c}, {&(0x7f0000000180)="a9155fd613a4c6c9972c4a56e191f39aa78d9ed679abaf156a094c76bb76c38e4df0c4c627b66c723bf11230195ef4403e54653100138f4f63a3810844825400baccf93cd799e46785f53dd5ec2c962d6194af92ef62db60f514a7134bda691e7f516e598e8b50e9f3a52e327c02b5be311ece2627e1e74648f97f17c1c0b6b5c2a98ffa44a6d5935b78386816dfda9e4ae4a262b4cff1daa8fa73b0f52a7167c5e2b957af399acd43885e8fc98eed678e42eb9a622166527b45050c60184446f0c8c320607f288509203be16fe7fd8eda50d9da925119e52ed5acdb07bfa2eef370a5fa3d2da7c0888e6172", 0xec}, {&(0x7f0000000280)="3b99122a2005d22aef73d1caf291d4ba98a9ca37284a5f10ea2f040ee69a446710b1c0457413163ac2cd1cd801cec128baa1cc93ff3ee5179e9739dac7d7515d7af428aed0d8967724ccfb5d96676883ad1c31b5688bd3e4bc1b2f8bbc77d40c509d832f0cf8a641b709f84d0e8a9fb6b9738f62a855bd8f68b517784d9700071dfe662495a88533f5e06c9e1db94d17d082c0421a1b4ab5a63f9678f5dd0045a5e7dd6540229c7b2b0b30bc9934", 0xae}, {&(0x7f0000000340)="ec117928675dba98125fe1937051d2c1b95e6ee21f8859efdef2dd1452b20f54f9df5c86a2336cb79bd49b97d9e1812ffc9bb8e4f6cc2a2f3c9428061d54b470ab071963aea7d9abb6056ae8bda7300e8a4d1e6e483e1c73a06559011c5d690ad601138a04a0962eb95e47ee188992754dfce43ae491eb660c11cd249c0cb13cad53ad2685e9ebd1c6ccecccfec606a2c1a8cdceacdc447558d4a00fcfd18119b2f793c2aa534d616d268c", 0xab}], 0x4, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x58, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x18, 0xce, 0x0, 0x7, [0x80, 0x9, 0x727, 0x28d, 0x4]}, @generic={0x89, 0xa, "e7f1422eab99184a"}, @timestamp_addr={0x44, 0x24, 0x16, 0x1, 0x9, [{@multicast2, 0x4}, {@empty, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@empty, 0x9}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x3, 0x61}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}], 0xf0}}], 0x2, 0x4000800) 858.021847ms ago: executing program 1 (id=1135): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 797.569971ms ago: executing program 3 (id=1136): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000180)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) shutdown(r2, 0x1) 797.389326ms ago: executing program 2 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 680.049066ms ago: executing program 2 (id=1138): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54095}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000ffff000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x50}, 0x20000000) 601.429185ms ago: executing program 1 (id=1139): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9255bb992464e73a02159d3720df19f7a1dfec3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 600.632031ms ago: executing program 3 (id=1140): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x700, &(0x7f0000000100)={0x0, 0x2c6a707e, 0x6, 0x9}, &(0x7f0000000140)=0x10) 400.021119ms ago: executing program 2 (id=1141): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000181100000000000000d7e6dd1f", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = gettid() sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r8}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x44}}, 0x4008040) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xb, 0xfb6}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r8, r9, 0x0, 0x0, 0x0}, 0x30) 339.373813ms ago: executing program 0 (id=1142): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x10001, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48", 0x7}], 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x12, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) listen(r5, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r6) 337.193814ms ago: executing program 3 (id=1143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0xff, 0x0, 0xfe, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x50, 0x29, 0x43}}, @ip_tos_u8={{0x24, 0x29, 0x3b}}, @ip_tos_u8], 0x50}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0xfffffffffffffe7a, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x0, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'veth0\x00', &(0x7f0000002fc0)=@ethtool_stats={0x33}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 280.182917ms ago: executing program 1 (id=1144): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x10001, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000ba82557621ec4cf49be349e4b83e1330cfe5048a6b61fb4a0270904f71b86acae6d9fd62745233beac10e587df9e3417e1e501ccdb7815b2e3ad40601b75ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48", 0x7}], 0x1}], 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000200060025e100000018090000a73266bfa6bddfe0f153c86a047f3f434f6fc37dec8a6a978be24e9d787e512db64f890063136be2b34ffc48a784190f2d5166acd2aac669b7a78cd3df993c73af81043e6dac6171449bea7ef2281bea4a0cad9f577e4874887e09a13a64c01e8e44042785b5d69e20c6e61036a6750e0f7720088f78f2a5505e415fee168df4080e84240a7438ec79268ed9cfc2e8a8f08c9de13e5bd137c8ae185ffb5a48290a8843101abac1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x24, 0x12, 0x1, 0x0, 0x8000, "", [@typed={0x14, 0x95, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x24}], 0x1, 0x0, 0x0, 0x8001}, 0x0) r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r5, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f0000000680)="55a2ae03111e00e24e5aad7e4dd40500000015000000ff7fed80ffff0000000000007376dca5fa2b91dc9d98086da9cefd4bd4a2c5350fac4c389ba3d9a53a315207f6aab9a0b5a4a5d8341635eaa9b541e384e83fbe5eec07000000ffff00007cfb50c5a7a41974953b53dbf304d1a3b14d5577bdcd084cd44f75aa18a8cebb1bab1e4aa70cc38d84edc99024e7ce3e2a31761e2e52a7a822bd6be717778d0a8625a18df3f6ee00000000a42d2ce1e15713a1534a667919ca8e7b5a3ba4f311513aa65bd0d527a8105ba8a9a0c073773f00"/221, 0xdd, 0x20004840, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x35, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x12, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) socket$inet6_mptcp(0xa, 0x1, 0x106) 175.712463ms ago: executing program 0 (id=1145): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0x8002}, {0x6, 0x36, 0x0, 0x8}]}, 0x10) r0 = socket$inet6(0xa, 0xa, 0xa) sendto$inet6(r0, &(0x7f0000000040)="e94e7a3e4031dc063bcb9025b58c5071bd68ab8569e69d2010d6696d1fc368655af5997bd7c93114334f2737e262b4731cee6b0b5094969a7bcc9288a507ce4e3e04943f2fda71fbe9cc66ad1408c1aa0cd7f5e6de7c578eaca58a229b35c1f102ee9d1d161ab135aabe9bc0c07d008c43329af68e206868c175ec700c", 0x7d, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @remote}, 0x1c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000b00)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000b40)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001"], 0x38}, 0x20000081) shutdown(0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000001a00)={0xa, 0x4e20, 0x6, @mcast1, 0x4}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@empty, @in=@local}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000d00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d40), &(0x7f0000000d80)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="31032fbd74000000f0ff0700000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000dc0)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 170.838485ms ago: executing program 2 (id=1146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r4, 0xd456100da20768b2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000004c0)={0xe8, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xcc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 56.069161ms ago: executing program 3 (id=1147): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1, @ANYBLOB="020027bd7000fddbdf25"], 0x14}}, 0x200c000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 0s ago: executing program 1 (id=1148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.171781][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.180386][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.213273][ T5848] Bluetooth: hci3: command tx timeout [ 63.213291][ T5845] Bluetooth: hci1: command tx timeout [ 63.213323][ T5845] Bluetooth: hci4: command tx timeout [ 63.218707][ T5848] Bluetooth: hci2: command tx timeout [ 63.259156][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.285905][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.292919][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.303948][ T5848] Bluetooth: hci0: command tx timeout [ 63.324020][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.432186][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.473785][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.481245][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.495878][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.640333][ T5942] netlink: 'syz.0.12': attribute type 32 has an invalid length. [ 63.664105][ T5940] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.11'. [ 63.997474][ T5955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15'. [ 64.034757][ T5955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15'. [ 64.186850][ T5963] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 64.375236][ T5963] team0: Port device wlan1 added [ 64.402218][ T5968] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 64.553326][ T5962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.612316][ T5968] team0: Port device wlan1 added [ 64.768477][ T5967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.852080][ T5976] warning: `syz.1.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.857728][ T5975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.947070][ T5975] ip6tnl1: entered promiscuous mode [ 64.952335][ T5975] ip6tnl1: entered allmulticast mode [ 65.178835][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 65.194199][ T5983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21'. [ 65.240890][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 65.253801][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 65.295015][ T5834] Bluetooth: hci4: command tx timeout [ 65.295044][ T5148] Bluetooth: hci1: command tx timeout [ 65.301460][ T5848] Bluetooth: hci2: command tx timeout [ 65.306906][ T5845] Bluetooth: hci3: command tx timeout [ 65.374112][ T5845] Bluetooth: hci0: command tx timeout [ 65.382224][ T5987] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 65.395166][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 65.418963][ T5986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.634781][ T5998] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.26'. [ 65.644333][ T5998] netlink: zone id is out of range [ 65.649505][ T5998] netlink: zone id is out of range [ 65.681087][ T5998] netlink: zone id is out of range [ 65.706512][ T5998] netlink: get zone limit has 8 unknown bytes [ 65.750114][ T5998] 0·: renamed from hsr0 (while UP) [ 65.757639][ T5998] 0·: entered allmulticast mode [ 65.762530][ T5998] hsr_slave_0: entered allmulticast mode [ 65.768795][ T5998] hsr_slave_1: entered allmulticast mode [ 65.777805][ T5998] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 66.158923][ T6017] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.253565][ T6017] netlink: 'syz.3.33': attribute type 10 has an invalid length. [ 66.262163][ T6017] team0: entered promiscuous mode [ 66.270026][ T6017] team_slave_0: entered promiscuous mode [ 66.296987][ T6017] team_slave_1: entered promiscuous mode [ 66.311689][ T6017] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 66.353339][ T6017] bridge0: port 3(team0) entered blocking state [ 66.400031][ T6017] bridge0: port 3(team0) entered disabled state [ 66.436098][ T6017] team0: entered allmulticast mode [ 66.452949][ T6017] team_slave_0: entered allmulticast mode [ 66.458738][ T6017] team_slave_1: entered allmulticast mode [ 66.493645][ T6017] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 66.524822][ T6017] bridge0: port 3(team0) entered blocking state [ 66.531367][ T6017] bridge0: port 3(team0) entered forwarding state [ 66.672013][ T6035] bridge_slave_0: left allmulticast mode [ 66.691419][ T6035] bridge_slave_0: left promiscuous mode [ 66.708178][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.732598][ T6035] bridge_slave_1: left allmulticast mode [ 66.747455][ T6035] bridge_slave_1: left promiscuous mode [ 66.757019][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.777620][ T6035] bond0: (slave bond_slave_0): Releasing backup interface [ 66.811208][ T6035] bond0: (slave bond_slave_1): Releasing backup interface [ 66.832398][ T6008] dccp_close: ABORT with 28 bytes unread [ 66.958425][ T6035] team0: Port device team_slave_0 removed [ 67.011676][ T6035] team0: Port device team_slave_1 removed [ 67.020833][ T6035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.040895][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.061065][ T6035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.076691][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.653555][ T6065] syz.2.48 uses obsolete (PF_INET,SOCK_PACKET) [ 67.787762][ T6073] __nla_validate_parse: 3 callbacks suppressed [ 67.787781][ T6073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.51'. [ 67.899164][ T6076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'. [ 68.103962][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 68.467975][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 68.488335][ T6089] netlink: 80 bytes leftover after parsing attributes in process `syz.4.57'. [ 68.514102][ T6088] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 68.583269][ T6092] Zero length message leads to an empty skb [ 69.344729][ T6112] Cannot find add_set index 0 as target [ 69.645217][ T6116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.66'. [ 69.672958][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.66'. [ 69.689814][ T6116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.66'. [ 69.751703][ T6116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.66'. [ 69.841277][ T6120] FAULT_INJECTION: forcing a failure. [ 69.841277][ T6120] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.885382][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.2.67 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 69.885406][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.885420][ T6120] Call Trace: [ 69.885426][ T6120] [ 69.885433][ T6120] dump_stack_lvl+0x241/0x360 [ 69.885466][ T6120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.885484][ T6120] ? __pfx__printk+0x10/0x10 [ 69.885503][ T6120] ? __pfx_lock_release+0x10/0x10 [ 69.885532][ T6120] should_fail_ex+0x40a/0x550 [ 69.885559][ T6120] _copy_from_user+0x2d/0xb0 [ 69.885580][ T6120] copy_msghdr_from_user+0xae/0x680 [ 69.885607][ T6120] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 69.885625][ T6120] ? __fget_files+0x2a/0x410 [ 69.885649][ T6120] ? __fget_files+0x2a/0x410 [ 69.885678][ T6120] __sys_sendmsg+0x209/0x350 [ 69.885700][ T6120] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.885729][ T6120] ? do_sys_openat2+0x17a/0x1d0 [ 69.885774][ T6120] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.885797][ T6120] ? do_syscall_64+0x100/0x230 [ 69.885819][ T6120] ? do_syscall_64+0xb6/0x230 [ 69.885839][ T6120] do_syscall_64+0xf3/0x230 [ 69.885857][ T6120] ? clear_bhb_loop+0x35/0x90 [ 69.885881][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.885903][ T6120] RIP: 0033:0x7f9fd678d169 [ 69.885921][ T6120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.885934][ T6120] RSP: 002b:00007f9fd753d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.885953][ T6120] RAX: ffffffffffffffda RBX: 00007f9fd69a5fa0 RCX: 00007f9fd678d169 [ 69.885964][ T6120] RDX: 0000000000000000 RSI: 00004000000003c0 RDI: 0000000000000004 [ 69.885973][ T6120] RBP: 00007f9fd753d090 R08: 0000000000000000 R09: 0000000000000000 [ 69.885983][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.885992][ T6120] R13: 0000000000000000 R14: 00007f9fd69a5fa0 R15: 00007ffe07c374d8 [ 69.886017][ T6120] [ 70.389158][ T6126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.409436][ T6126] team0: Port device bond2 added [ 70.645972][ T6133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.73'. [ 70.708249][ T6135] netlink: 'syz.4.74': attribute type 1 has an invalid length. [ 70.766143][ T6133] bond0: (slave bond_slave_0): Releasing backup interface [ 71.016726][ T6148] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 71.049257][ T6150] FAULT_INJECTION: forcing a failure. [ 71.049257][ T6150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.107387][ T6150] CPU: 1 UID: 0 PID: 6150 Comm: syz.2.77 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 71.107412][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.107422][ T6150] Call Trace: [ 71.107427][ T6150] [ 71.107435][ T6150] dump_stack_lvl+0x241/0x360 [ 71.107460][ T6150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.107477][ T6150] ? __pfx__printk+0x10/0x10 [ 71.107495][ T6150] ? __pfx_lock_release+0x10/0x10 [ 71.107524][ T6150] should_fail_ex+0x40a/0x550 [ 71.107550][ T6150] _copy_from_user+0x2d/0xb0 [ 71.107571][ T6150] copy_msghdr_from_user+0xae/0x680 [ 71.107597][ T6150] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 71.107616][ T6150] ? __fget_files+0x2a/0x410 [ 71.107640][ T6150] ? __fget_files+0x2a/0x410 [ 71.107668][ T6150] __sys_sendmsg+0x209/0x350 [ 71.107689][ T6150] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.107717][ T6150] ? do_sys_openat2+0x17a/0x1d0 [ 71.107761][ T6150] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.107784][ T6150] ? do_syscall_64+0x100/0x230 [ 71.107805][ T6150] ? do_syscall_64+0xb6/0x230 [ 71.107825][ T6150] do_syscall_64+0xf3/0x230 [ 71.107843][ T6150] ? clear_bhb_loop+0x35/0x90 [ 71.107867][ T6150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.107886][ T6150] RIP: 0033:0x7f9fd678d169 [ 71.107900][ T6150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.107913][ T6150] RSP: 002b:00007f9fd753d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.107931][ T6150] RAX: ffffffffffffffda RBX: 00007f9fd69a5fa0 RCX: 00007f9fd678d169 [ 71.107942][ T6150] RDX: 0000000000000040 RSI: 0000400000000840 RDI: 0000000000000003 [ 71.107952][ T6150] RBP: 00007f9fd753d090 R08: 0000000000000000 R09: 0000000000000000 [ 71.107962][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.107978][ T6150] R13: 0000000000000000 R14: 00007f9fd69a5fa0 R15: 00007ffe07c374d8 [ 71.108003][ T6150] [ 71.127126][ T6148] team0: Port device wlan1 added [ 71.338325][ T6147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.416636][ T6159] xt_TCPMSS: Only works on TCP SYN packets [ 71.577627][ T6162] FAULT_INJECTION: forcing a failure. [ 71.577627][ T6162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.619205][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.626261][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.632076][ T6162] CPU: 1 UID: 0 PID: 6162 Comm: syz.1.82 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 71.632099][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.632108][ T6162] Call Trace: [ 71.632114][ T6162] [ 71.632121][ T6162] dump_stack_lvl+0x241/0x360 [ 71.632145][ T6162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.632162][ T6162] ? __pfx__printk+0x10/0x10 [ 71.632179][ T6162] ? __pfx_lock_release+0x10/0x10 [ 71.632215][ T6162] should_fail_ex+0x40a/0x550 [ 71.632240][ T6162] _copy_from_user+0x2d/0xb0 [ 71.632260][ T6162] copy_msghdr_from_user+0xae/0x680 [ 71.632285][ T6162] ? __pfx___might_resched+0x10/0x10 [ 71.632307][ T6162] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 71.632329][ T6162] ? __sys_sendmmsg+0x392/0x720 [ 71.632346][ T6162] ? __might_fault+0xaa/0x120 [ 71.632365][ T6162] __sys_sendmmsg+0x32b/0x720 [ 71.632391][ T6162] ? __pfx___sys_sendmmsg+0x10/0x10 [ 71.632416][ T6162] ? __pfx_lock_release+0x10/0x10 [ 71.632435][ T6162] ? kstrtouint_from_user+0x128/0x190 [ 71.632471][ T6162] ? ksys_write+0x22a/0x2b0 [ 71.632487][ T6162] ? __pfx_lock_release+0x10/0x10 [ 71.632511][ T6162] ? sb_end_write+0xe9/0x1c0 [ 71.632532][ T6162] ? vfs_write+0x7fa/0xd10 [ 71.632549][ T6162] ? __mutex_unlock_slowpath+0x227/0x800 [ 71.632589][ T6162] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 71.632613][ T6162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.632634][ T6162] ? do_syscall_64+0x100/0x230 [ 71.632654][ T6162] __x64_sys_sendmmsg+0xa0/0xb0 [ 71.632672][ T6162] do_syscall_64+0xf3/0x230 [ 71.632690][ T6162] ? clear_bhb_loop+0x35/0x90 [ 71.632712][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.632731][ T6162] RIP: 0033:0x7ff22eb8d169 [ 71.632745][ T6162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.632762][ T6162] RSP: 002b:00007ff22fa52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 71.632779][ T6162] RAX: ffffffffffffffda RBX: 00007ff22eda5fa0 RCX: 00007ff22eb8d169 [ 71.632790][ T6162] RDX: 0400000000000159 RSI: 0000400000001c00 RDI: 0000000000000003 [ 71.632800][ T6162] RBP: 00007ff22fa52090 R08: 0000000000000000 R09: 0000000000000000 [ 71.632810][ T6162] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 71.632819][ T6162] R13: 0000000000000000 R14: 00007ff22eda5fa0 R15: 00007fff90b62e68 [ 71.632842][ T6162] [ 71.923766][ T6170] Illegal XDP return value 4294967274 on prog (id 73) dev N/A, expect packet loss! [ 72.158307][ T6180] netlink: 'syz.2.88': attribute type 12 has an invalid length. [ 72.228292][ T6186] netlink: 'syz.0.90': attribute type 178 has an invalid length. [ 72.291587][ T6186] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 72.305516][ T6184] tipc: Started in network mode [ 72.311519][ T6184] tipc: Node identity dab79523dde9, cluster identity 4711 [ 72.331662][ T6184] tipc: Enabled bearer , priority 0 [ 72.517711][ T6184] syzkaller0: entered promiscuous mode [ 72.524653][ T6184] syzkaller0: entered allmulticast mode [ 72.530841][ T6184] tipc: Resetting bearer [ 72.685078][ T6199] netlink: 'syz.4.93': attribute type 10 has an invalid length. [ 73.383783][ T5885] tipc: Node number set to 123639075 [ 73.491478][ T6207] FAULT_INJECTION: forcing a failure. [ 73.491478][ T6207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.502085][ T6198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.506373][ T6207] CPU: 1 UID: 0 PID: 6207 Comm: syz.3.95 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 73.506397][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.506406][ T6207] Call Trace: [ 73.506412][ T6207] [ 73.506418][ T6207] dump_stack_lvl+0x241/0x360 [ 73.506443][ T6207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.506463][ T6207] ? __pfx__printk+0x10/0x10 [ 73.506480][ T6207] ? __pfx_lock_release+0x10/0x10 [ 73.506509][ T6207] should_fail_ex+0x40a/0x550 [ 73.506534][ T6207] _copy_from_user+0x2d/0xb0 [ 73.506554][ T6207] copy_msghdr_from_user+0xae/0x680 [ 73.506579][ T6207] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 73.506596][ T6207] ? __fget_files+0x2a/0x410 [ 73.506620][ T6207] ? __fget_files+0x2a/0x410 [ 73.506647][ T6207] __sys_sendmsg+0x209/0x350 [ 73.506667][ T6207] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.506695][ T6207] ? do_sys_openat2+0x17a/0x1d0 [ 73.506737][ T6207] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.506759][ T6207] ? do_syscall_64+0x100/0x230 [ 73.506779][ T6207] ? do_syscall_64+0xb6/0x230 [ 73.506798][ T6207] do_syscall_64+0xf3/0x230 [ 73.506816][ T6207] ? clear_bhb_loop+0x35/0x90 [ 73.506837][ T6207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.506856][ T6207] RIP: 0033:0x7feef758d169 [ 73.506869][ T6207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.506882][ T6207] RSP: 002b:00007feef8444038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.506899][ T6207] RAX: ffffffffffffffda RBX: 00007feef77a5fa0 RCX: 00007feef758d169 [ 73.506910][ T6207] RDX: 0000000000040000 RSI: 0000400000000100 RDI: 0000000000000004 [ 73.506920][ T6207] RBP: 00007feef8444090 R08: 0000000000000000 R09: 0000000000000000 [ 73.506929][ T6207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.506938][ T6207] R13: 0000000000000000 R14: 00007feef77a5fa0 R15: 00007ffdb60fc808 [ 73.506962][ T6207] [ 74.422574][ T6199] team0: Port device wlan1 added [ 74.451225][ T6183] tipc: Resetting bearer [ 75.921007][ T6183] tipc: Disabling bearer [ 76.032340][ T6229] netlink: 'syz.0.103': attribute type 10 has an invalid length. [ 76.075458][ T6231] FAULT_INJECTION: forcing a failure. [ 76.075458][ T6231] name failslab, interval 1, probability 0, space 0, times 1 [ 76.080444][ T6229] veth0_vlan: left promiscuous mode [ 76.088393][ T6231] CPU: 1 UID: 0 PID: 6231 Comm: syz.2.104 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 76.088415][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.088424][ T6231] Call Trace: [ 76.088430][ T6231] [ 76.088438][ T6231] dump_stack_lvl+0x241/0x360 [ 76.088462][ T6231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.088479][ T6231] ? __pfx__printk+0x10/0x10 [ 76.088503][ T6231] should_fail_ex+0x40a/0x550 [ 76.088530][ T6231] should_failslab+0xac/0x100 [ 76.088551][ T6231] ? skb_clone+0x20c/0x390 [ 76.088567][ T6231] kmem_cache_alloc_noprof+0x70/0x380 [ 76.088593][ T6231] skb_clone+0x20c/0x390 [ 76.088607][ T6231] ? dev_queue_xmit_nit+0x4f8/0xca0 [ 76.088631][ T6231] dev_queue_xmit_nit+0x249/0xca0 [ 76.088655][ T6231] ? dev_queue_xmit_nit+0x2b/0xca0 [ 76.088678][ T6231] ? validate_xmit_skb+0x9b8/0xff0 [ 76.088699][ T6231] dev_hard_start_xmit+0x15f/0x7d0 [ 76.088718][ T6231] ? __pfx_validate_xmit_skb+0x10/0x10 [ 76.088745][ T6231] __dev_queue_xmit+0x1b73/0x3f40 [ 76.088777][ T6231] ? __dev_queue_xmit+0x2f4/0x3f40 [ 76.088798][ T6231] ? __pfx___dev_queue_xmit+0x10/0x10 [ 76.088838][ T6231] ? mark_lock+0x9a/0x360 [ 76.088864][ T6231] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.088890][ T6231] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 76.088913][ T6231] ? ip6_finish_output2+0x103a/0x17c0 [ 76.088937][ T6231] ip6_finish_output2+0x127d/0x17c0 [ 76.088961][ T6231] ? ip6_finish_output2+0x63b/0x17c0 [ 76.088989][ T6231] ? __pfx_ip6_finish_output2+0x10/0x10 [ 76.089016][ T6231] ? ip6_mtu+0x81/0x3f0 [ 76.089037][ T6231] ip6_finish_output+0x41e/0x840 [ 76.089061][ T6231] ip6_xmit+0x1108/0x1a20 [ 76.089094][ T6231] ? __pfx_ip6_xmit+0x10/0x10 [ 76.089112][ T6231] ? inet6_csk_route_socket+0x625/0xe30 [ 76.089135][ T6231] ? inet6_csk_route_socket+0x402/0xe30 [ 76.089169][ T6231] inet6_csk_xmit+0x468/0x710 [ 76.089194][ T6231] ? inet6_csk_xmit+0x1be/0x710 [ 76.089213][ T6231] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 76.089248][ T6231] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 76.089270][ T6231] __tcp_transmit_skb+0x1f3c/0x3a60 [ 76.089302][ T6231] ? __build_skb_around+0x245/0x3d0 [ 76.089330][ T6231] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 76.089353][ T6231] ? apparmor_capable+0x13b/0x1b0 [ 76.089379][ T6231] ? tcp_send_window_probe+0x26d/0x470 [ 76.089400][ T6231] do_tcp_setsockopt+0x19d8/0x24c0 [ 76.089426][ T6231] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 76.089452][ T6231] ? __pfx_aa_sk_perm+0x10/0x10 [ 76.089475][ T6231] ? __pfx_lock_acquire+0x10/0x10 [ 76.089493][ T6231] ? aa_sock_opt_perm+0x79/0x120 [ 76.089513][ T6231] ? tcp_setsockopt+0x3e/0xf0 [ 76.089535][ T6231] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 76.089554][ T6231] do_sock_setsockopt+0x3af/0x720 [ 76.089576][ T6231] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 76.089597][ T6231] ? __fget_files+0x395/0x410 [ 76.089616][ T6231] ? __fget_files+0x2a/0x410 [ 76.089644][ T6231] __x64_sys_setsockopt+0x1ee/0x280 [ 76.089667][ T6231] do_syscall_64+0xf3/0x230 [ 76.089685][ T6231] ? clear_bhb_loop+0x35/0x90 [ 76.089708][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.089727][ T6231] RIP: 0033:0x7f9fd678d169 [ 76.089742][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.089754][ T6231] RSP: 002b:00007f9fd753d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.089772][ T6231] RAX: ffffffffffffffda RBX: 00007f9fd69a5fa0 RCX: 00007f9fd678d169 [ 76.089783][ T6231] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 76.089792][ T6231] RBP: 00007f9fd753d090 R08: 0000000000000004 R09: 0000000000000000 [ 76.089801][ T6231] R10: 0000400000000140 R11: 0000000000000246 R12: 0000000000000001 [ 76.089811][ T6231] R13: 0000000000000000 R14: 00007f9fd69a5fa0 R15: 00007ffe07c374d8 [ 76.089837][ T6231] [ 76.249121][ T6238] __nla_validate_parse: 12 callbacks suppressed [ 76.249138][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.105'. [ 76.265696][ T6229] veth0_vlan: entered promiscuous mode [ 76.377934][ T6240] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 76.389468][ T6229] team0: Device veth0_vlan failed to register rx_handler [ 76.587471][ T6239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.692490][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'. [ 76.750580][ T57] cfg80211: failed to load regulatory.db [ 76.873578][ T6260] netlink: 'syz.2.110': attribute type 1 has an invalid length. [ 77.026922][ T6269] bond0: option mode: unable to set because the bond device is up [ 77.500682][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 77.572903][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 77.790150][ T6290] netlink: 'syz.2.124': attribute type 10 has an invalid length. [ 77.861570][ T6290] team0: Port device wlan1 added [ 77.892270][ T6288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.080149][ T6300] netlink: 68 bytes leftover after parsing attributes in process `syz.3.127'. [ 78.103879][ T6310] FAULT_INJECTION: forcing a failure. [ 78.103879][ T6310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.159572][ T6310] CPU: 1 UID: 0 PID: 6310 Comm: syz.4.126 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 78.159598][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.159608][ T6310] Call Trace: [ 78.159614][ T6310] [ 78.159621][ T6310] dump_stack_lvl+0x241/0x360 [ 78.159646][ T6310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.159664][ T6310] ? __pfx__printk+0x10/0x10 [ 78.159682][ T6310] ? __pfx_lock_release+0x10/0x10 [ 78.159712][ T6310] should_fail_ex+0x40a/0x550 [ 78.159746][ T6310] _copy_from_user+0x2d/0xb0 [ 78.159767][ T6310] copy_msghdr_from_user+0xae/0x680 [ 78.159794][ T6310] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 78.159812][ T6310] ? __fget_files+0x2a/0x410 [ 78.159836][ T6310] ? __fget_files+0x2a/0x410 [ 78.159863][ T6310] __sys_sendmsg+0x209/0x350 [ 78.159885][ T6310] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.159912][ T6310] ? do_sys_openat2+0x17a/0x1d0 [ 78.159957][ T6310] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.159980][ T6310] ? do_syscall_64+0x100/0x230 [ 78.160001][ T6310] ? do_syscall_64+0xb6/0x230 [ 78.160021][ T6310] do_syscall_64+0xf3/0x230 [ 78.160037][ T6310] ? clear_bhb_loop+0x35/0x90 [ 78.160059][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.160077][ T6310] RIP: 0033:0x7f98a558d169 [ 78.160091][ T6310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.160103][ T6310] RSP: 002b:00007f98a33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.160120][ T6310] RAX: ffffffffffffffda RBX: 00007f98a57a6160 RCX: 00007f98a558d169 [ 78.160132][ T6310] RDX: 0000000000000000 RSI: 0000400000000d00 RDI: 000000000000000c [ 78.160141][ T6310] RBP: 00007f98a33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 78.160151][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.160160][ T6310] R13: 0000000000000000 R14: 00007f98a57a6160 R15: 00007fff4f990968 [ 78.160185][ T6310] [ 78.544205][ T6326] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.565563][ T6326] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.581575][ T6326] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 78.624670][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 78.659002][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 78.852710][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 78.936384][ T6346] netlink: 112 bytes leftover after parsing attributes in process `syz.2.143'. [ 79.148871][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 79.753490][ T6386] FAULT_INJECTION: forcing a failure. [ 79.753490][ T6386] name failslab, interval 1, probability 0, space 0, times 0 [ 79.800936][ T6382] xt_CT: No such helper "netbios-ns" [ 79.809057][ T6386] CPU: 0 UID: 0 PID: 6386 Comm: syz.4.161 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 79.809083][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.809093][ T6386] Call Trace: [ 79.809099][ T6386] [ 79.809106][ T6386] dump_stack_lvl+0x241/0x360 [ 79.809132][ T6386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.809150][ T6386] ? __pfx__printk+0x10/0x10 [ 79.809168][ T6386] ? __kmalloc_noprof+0xb5/0x4c0 [ 79.809190][ T6386] ? __pfx___might_resched+0x10/0x10 [ 79.809214][ T6386] should_fail_ex+0x40a/0x550 [ 79.809240][ T6386] should_failslab+0xac/0x100 [ 79.809261][ T6386] __kmalloc_noprof+0xdd/0x4c0 [ 79.809280][ T6386] ? security_sk_alloc+0x53/0x360 [ 79.809303][ T6386] security_sk_alloc+0x53/0x360 [ 79.809323][ T6386] sk_prot_alloc+0xfa/0x210 [ 79.809339][ T6386] ? sk_alloc+0x27/0x370 [ 79.809356][ T6386] sk_alloc+0x3e/0x370 [ 79.809374][ T6386] __netlink_create+0x65/0x260 [ 79.809394][ T6386] ? __pfx_genl_release+0x10/0x10 [ 79.809410][ T6386] netlink_create+0x3ab/0x560 [ 79.809432][ T6386] ? __pfx_genl_unbind+0x10/0x10 [ 79.809446][ T6386] ? __pfx_genl_bind+0x10/0x10 [ 79.809464][ T6386] __sock_create+0x4c0/0xa30 [ 79.809492][ T6386] __sys_socket+0x150/0x3c0 [ 79.809514][ T6386] ? __pfx___sys_socket+0x10/0x10 [ 79.809535][ T6386] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.809558][ T6386] ? exc_page_fault+0x590/0x8b0 [ 79.809579][ T6386] __x64_sys_socket+0x7a/0x90 [ 79.809600][ T6386] do_syscall_64+0xf3/0x230 [ 79.809627][ T6386] ? clear_bhb_loop+0x35/0x90 [ 79.809651][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.809671][ T6386] RIP: 0033:0x7f98a558f087 [ 79.809686][ T6386] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.809699][ T6386] RSP: 002b:00007f98a6321fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 79.809717][ T6386] RAX: ffffffffffffffda RBX: 00007f98a57a5fa0 RCX: 00007f98a558f087 [ 79.809728][ T6386] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 79.809738][ T6386] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 79.809748][ T6386] R10: 0000400000000240 R11: 0000000000000286 R12: 0000000000000001 [ 79.809758][ T6386] R13: 0000000000000000 R14: 00007f98a57a5fa0 R15: 00007fff4f990968 [ 79.809783][ T6386] [ 80.110487][ T6392] netlink: 'syz.3.163': attribute type 10 has an invalid length. [ 80.185420][ T6394] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 80.263034][ T6400] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 80.393148][ T6402] Cannot find add_set index 0 as target [ 80.410625][ T6409] FAULT_INJECTION: forcing a failure. [ 80.410625][ T6409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.457886][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz.3.170 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 80.457909][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.457919][ T6409] Call Trace: [ 80.457925][ T6409] [ 80.457933][ T6409] dump_stack_lvl+0x241/0x360 [ 80.457958][ T6409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.457975][ T6409] ? __pfx__printk+0x10/0x10 [ 80.457992][ T6409] ? __pfx_lock_release+0x10/0x10 [ 80.458020][ T6409] should_fail_ex+0x40a/0x550 [ 80.458045][ T6409] _copy_from_user+0x2d/0xb0 [ 80.458064][ T6409] move_addr_to_kernel+0x82/0x150 [ 80.458085][ T6409] copy_msghdr_from_user+0x43e/0x680 [ 80.458110][ T6409] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 80.458127][ T6409] ? __fget_files+0x2a/0x410 [ 80.458149][ T6409] ? __fget_files+0x2a/0x410 [ 80.458174][ T6409] __sys_sendmsg+0x209/0x350 [ 80.458194][ T6409] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.458222][ T6409] ? do_sys_openat2+0x17a/0x1d0 [ 80.458265][ T6409] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.458287][ T6409] ? do_syscall_64+0x100/0x230 [ 80.458307][ T6409] ? do_syscall_64+0xb6/0x230 [ 80.458326][ T6409] do_syscall_64+0xf3/0x230 [ 80.458341][ T6409] ? clear_bhb_loop+0x35/0x90 [ 80.458364][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.458381][ T6409] RIP: 0033:0x7feef758d169 [ 80.458395][ T6409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.458407][ T6409] RSP: 002b:00007feef8444038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.458425][ T6409] RAX: ffffffffffffffda RBX: 00007feef77a5fa0 RCX: 00007feef758d169 [ 80.458436][ T6409] RDX: 0000000004000000 RSI: 0000400000000600 RDI: 0000000000000003 [ 80.458446][ T6409] RBP: 00007feef8444090 R08: 0000000000000000 R09: 0000000000000000 [ 80.458455][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.458463][ T6409] R13: 0000000000000000 R14: 00007feef77a5fa0 R15: 00007ffdb60fc808 [ 80.458489][ T6409] [ 81.297796][ T6431] FAULT_INJECTION: forcing a failure. [ 81.297796][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 81.315659][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.3.179 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 81.315684][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.315694][ T6431] Call Trace: [ 81.315700][ T6431] [ 81.315706][ T6431] dump_stack_lvl+0x241/0x360 [ 81.315732][ T6431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.315748][ T6431] ? __pfx__printk+0x10/0x10 [ 81.315767][ T6431] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 81.315788][ T6431] ? __pfx___might_resched+0x10/0x10 [ 81.315813][ T6431] should_fail_ex+0x40a/0x550 [ 81.315840][ T6431] should_failslab+0xac/0x100 [ 81.315862][ T6431] kmem_cache_alloc_node_noprof+0x77/0x380 [ 81.315882][ T6431] ? __alloc_skb+0x1c3/0x440 [ 81.315901][ T6431] __alloc_skb+0x1c3/0x440 [ 81.315921][ T6431] ? __pfx___alloc_skb+0x10/0x10 [ 81.315939][ T6431] ? netlink_autobind+0xd6/0x2f0 [ 81.315958][ T6431] ? netlink_autobind+0x2b0/0x2f0 [ 81.315982][ T6431] netlink_sendmsg+0x634/0xcb0 [ 81.316011][ T6431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.316035][ T6431] ? aa_sock_msg_perm+0x91/0x160 [ 81.316062][ T6431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.316081][ T6431] __sock_sendmsg+0x221/0x270 [ 81.316104][ T6431] ____sys_sendmsg+0x53a/0x860 [ 81.316128][ T6431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.316143][ T6431] ? __fget_files+0x2a/0x410 [ 81.316166][ T6431] ? __fget_files+0x2a/0x410 [ 81.316193][ T6431] __sys_sendmsg+0x269/0x350 [ 81.316215][ T6431] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.316251][ T6431] ? do_sys_openat2+0x17a/0x1d0 [ 81.316295][ T6431] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.316318][ T6431] ? do_syscall_64+0x100/0x230 [ 81.316339][ T6431] ? do_syscall_64+0xb6/0x230 [ 81.316359][ T6431] do_syscall_64+0xf3/0x230 [ 81.316377][ T6431] ? clear_bhb_loop+0x35/0x90 [ 81.316399][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.316419][ T6431] RIP: 0033:0x7feef758d169 [ 81.316433][ T6431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.316446][ T6431] RSP: 002b:00007feef8444038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.316464][ T6431] RAX: ffffffffffffffda RBX: 00007feef77a5fa0 RCX: 00007feef758d169 [ 81.316476][ T6431] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 81.316486][ T6431] RBP: 00007feef8444090 R08: 0000000000000000 R09: 0000000000000000 [ 81.316495][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.316505][ T6431] R13: 0000000000000000 R14: 00007feef77a5fa0 R15: 00007ffdb60fc808 [ 81.316530][ T6431] [ 81.600572][ T6433] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 81.709669][ T6439] __nla_validate_parse: 6 callbacks suppressed [ 81.709688][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 81.739125][ T6440] netlink: 112 bytes leftover after parsing attributes in process `syz.0.183'. [ 82.012166][ T6461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.187'. [ 82.170449][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 82.205598][ T6470] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.214727][ T6470] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.223524][ T6470] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.232231][ T6470] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.305422][ T6470] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.313212][ T6479] FAULT_INJECTION: forcing a failure. [ 82.313212][ T6479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.314538][ T6470] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.336466][ T6470] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.345441][ T6470] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.347046][ T6479] CPU: 1 UID: 0 PID: 6479 Comm: syz.2.194 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 82.347067][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.347076][ T6479] Call Trace: [ 82.347082][ T6479] [ 82.347088][ T6479] dump_stack_lvl+0x241/0x360 [ 82.347113][ T6479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.347130][ T6479] ? __pfx__printk+0x10/0x10 [ 82.347148][ T6479] ? __pfx_lock_release+0x10/0x10 [ 82.347183][ T6479] should_fail_ex+0x40a/0x550 [ 82.347215][ T6479] _copy_from_user+0x2d/0xb0 [ 82.347236][ T6479] copy_msghdr_from_user+0xae/0x680 [ 82.347262][ T6479] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 82.347279][ T6479] ? __fget_files+0x2a/0x410 [ 82.347303][ T6479] ? __fget_files+0x2a/0x410 [ 82.347329][ T6479] __sys_sendmsg+0x209/0x350 [ 82.347350][ T6479] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.347376][ T6479] ? do_sys_openat2+0x17a/0x1d0 [ 82.347418][ T6479] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.347439][ T6479] ? do_syscall_64+0x100/0x230 [ 82.347460][ T6479] ? do_syscall_64+0xb6/0x230 [ 82.347479][ T6479] do_syscall_64+0xf3/0x230 [ 82.347496][ T6479] ? clear_bhb_loop+0x35/0x90 [ 82.347518][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.347536][ T6479] RIP: 0033:0x7f9fd678d169 [ 82.347550][ T6479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.347563][ T6479] RSP: 002b:00007f9fd753d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.347581][ T6479] RAX: ffffffffffffffda RBX: 00007f9fd69a5fa0 RCX: 00007f9fd678d169 [ 82.347591][ T6479] RDX: 0000000000000080 RSI: 0000400000000180 RDI: 0000000000000004 [ 82.347601][ T6479] RBP: 00007f9fd753d090 R08: 0000000000000000 R09: 0000000000000000 [ 82.347611][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.347619][ T6479] R13: 0000000000000000 R14: 00007f9fd69a5fa0 R15: 00007ffe07c374d8 [ 82.347643][ T6479] [ 82.434835][ T6480] netlink: 'syz.4.193': attribute type 10 has an invalid length. [ 82.619358][ T6484] netlink: 112 bytes leftover after parsing attributes in process `syz.2.196'. [ 82.653111][ T6478] batadv_slave_1: entered promiscuous mode [ 82.681663][ T6478] batadv_slave_1: entered allmulticast mode [ 82.700518][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.709763][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.725455][ T6478] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 82.925433][ T6491] syzkaller0: entered promiscuous mode [ 82.930953][ T6491] syzkaller0: entered allmulticast mode [ 83.071958][ T6502] netlink: 'syz.0.203': attribute type 10 has an invalid length. [ 83.146268][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 84.390314][ T6502] team0: Device ipvlan1 failed to register rx_handler [ 84.539568][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 84.560240][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 84.641264][ T6518] netlink: 'syz.0.208': attribute type 10 has an invalid length. [ 84.667576][ T6518] team0: Device veth1_macvtap failed to register rx_handler [ 84.718428][ T6522] netlink: 112 bytes leftover after parsing attributes in process `syz.2.210'. [ 84.739980][ T6518] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 84.754098][ T6518] netlink: 224 bytes leftover after parsing attributes in process `syz.0.208'. [ 84.791679][ T6529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.208'. [ 85.022958][ T6543] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 85.077725][ T5845] block nbd0: Receive control failed (result -107) [ 85.864439][ T6586] netlink: 'syz.2.235': attribute type 10 has an invalid length. [ 85.889826][ T6584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.907050][ T6588] sctp: [Deprecated]: syz.3.239 (pid 6588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.907050][ T6588] Use struct sctp_sack_info instead [ 85.940154][ T6584] tipc: Started in network mode [ 85.956332][ T6584] tipc: Node identity 7, cluster identity 4711 [ 85.962557][ T6584] tipc: Node number set to 7 [ 86.000552][ T6584] tipc: Cannot configure node identity twice [ 86.046460][ T6588] siw: device registration error -23 [ 86.062460][ T6597] FAULT_INJECTION: forcing a failure. [ 86.062460][ T6597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.098763][ T6597] CPU: 1 UID: 0 PID: 6597 Comm: syz.2.240 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 86.098788][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.098797][ T6597] Call Trace: [ 86.098803][ T6597] [ 86.098809][ T6597] dump_stack_lvl+0x241/0x360 [ 86.098835][ T6597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.098852][ T6597] ? __pfx__printk+0x10/0x10 [ 86.098869][ T6597] ? tomoyo_path_number_perm+0x5dd/0x770 [ 86.098906][ T6597] should_fail_ex+0x40a/0x550 [ 86.098932][ T6597] _copy_from_user+0x2d/0xb0 [ 86.098952][ T6597] get_user_ifreq+0xc3/0x200 [ 86.098974][ T6597] sock_do_ioctl+0x1a5/0x460 [ 86.098998][ T6597] ? __pfx_sock_do_ioctl+0x10/0x10 [ 86.099035][ T6597] sock_ioctl+0x626/0x8e0 [ 86.099055][ T6597] ? __pfx_sock_ioctl+0x10/0x10 [ 86.099074][ T6597] ? __fget_files+0x2a/0x410 [ 86.099096][ T6597] ? __fget_files+0x2a/0x410 [ 86.099120][ T6597] ? __pfx_sock_ioctl+0x10/0x10 [ 86.099140][ T6597] __se_sys_ioctl+0xf5/0x170 [ 86.099160][ T6597] do_syscall_64+0xf3/0x230 [ 86.099179][ T6597] ? clear_bhb_loop+0x35/0x90 [ 86.099201][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.099221][ T6597] RIP: 0033:0x7f9fd678d169 [ 86.099236][ T6597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.099249][ T6597] RSP: 002b:00007f9fd753d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.099267][ T6597] RAX: ffffffffffffffda RBX: 00007f9fd69a5fa0 RCX: 00007f9fd678d169 [ 86.099279][ T6597] RDX: 0000400000000200 RSI: 0000000000008946 RDI: 0000000000000003 [ 86.099288][ T6597] RBP: 00007f9fd753d090 R08: 0000000000000000 R09: 0000000000000000 [ 86.099297][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.099304][ T6597] R13: 0000000000000000 R14: 00007f9fd69a5fa0 R15: 00007ffe07c374d8 [ 86.099325][ T6597] [ 86.629665][ T6625] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 86.721312][ T6629] __nla_validate_parse: 8 callbacks suppressed [ 86.721330][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 86.743922][ T6631] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 86.759780][ T6629] nbd: nbd0 already in use [ 86.861923][ T6640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.257'. [ 87.012407][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'. [ 87.060270][ T6646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.080578][ T6646] bond2: entered promiscuous mode [ 87.101867][ T6646] bond2: entered allmulticast mode [ 87.111766][ T6646] team0: Port device bond2 added [ 87.189346][ T6654] netlink: 'syz.4.260': attribute type 2 has an invalid length. [ 87.218171][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 87.463260][ T6659] netlink: 'syz.1.265': attribute type 10 has an invalid length. [ 87.483657][ T6661] netlink: 'syz.3.264': attribute type 11 has an invalid length. [ 89.286257][ T6707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.276'. [ 89.491529][ T6722] netlink: 'syz.2.280': attribute type 21 has an invalid length. [ 89.560792][ T6722] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 89.680645][ T6727] Bluetooth: MGMT ver 1.23 [ 90.256810][ T6752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.293'. [ 90.329449][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 90.426943][ T6763] openvswitch: netlink: Missing key (keys=40, expected=100) [ 90.917147][ T6786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.307'. [ 90.969120][ T6786] FAULT_INJECTION: forcing a failure. [ 90.969120][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 91.023282][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.3.307 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 91.023307][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.023317][ T6786] Call Trace: [ 91.023323][ T6786] [ 91.023330][ T6786] dump_stack_lvl+0x241/0x360 [ 91.023356][ T6786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.023374][ T6786] ? __pfx__printk+0x10/0x10 [ 91.023393][ T6786] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 91.023432][ T6786] ? __pfx___might_resched+0x10/0x10 [ 91.023458][ T6786] should_fail_ex+0x40a/0x550 [ 91.023485][ T6786] should_failslab+0xac/0x100 [ 91.023508][ T6786] __kmalloc_node_noprof+0xe1/0x4d0 [ 91.023527][ T6786] ? __kvmalloc_node_noprof+0x72/0x190 [ 91.023555][ T6786] __kvmalloc_node_noprof+0x72/0x190 [ 91.023575][ T6786] alloc_netdev_mqs+0xce7/0x1210 [ 91.023597][ T6786] rtnl_create_link+0x2f9/0xc90 [ 91.023619][ T6786] rtnl_newlink_create+0x2e1/0xbd0 [ 91.023648][ T6786] ? __pfx_aa_get_newest_label+0x10/0x10 [ 91.023675][ T6786] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 91.023701][ T6786] ? __pfx___mutex_lock+0x10/0x10 [ 91.023737][ T6786] ? ns_capable+0x8a/0xf0 [ 91.023760][ T6786] rtnl_newlink+0x167a/0x1d90 [ 91.023783][ T6786] ? stack_depot_save_flags+0x37/0x940 [ 91.023825][ T6786] ? __pfx_rtnl_newlink+0x10/0x10 [ 91.023845][ T6786] ? __netlink_deliver_tap+0x561/0x7f0 [ 91.023866][ T6786] ? __pfx_validate_chain+0x10/0x10 [ 91.023882][ T6786] ? __sock_sendmsg+0x221/0x270 [ 91.023901][ T6786] ? ____sys_sendmsg+0x53a/0x860 [ 91.023916][ T6786] ? __sys_sendmsg+0x269/0x350 [ 91.023930][ T6786] ? do_syscall_64+0xf3/0x230 [ 91.023947][ T6786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.023998][ T6786] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 91.024023][ T6786] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.024053][ T6786] ? mark_lock+0x9a/0x360 [ 91.024073][ T6786] ? __lock_acquire+0x1397/0x2100 [ 91.024127][ T6786] ? __pfx_lock_release+0x10/0x10 [ 91.024165][ T6786] ? __pfx_rtnl_newlink+0x10/0x10 [ 91.024187][ T6786] rtnetlink_rcv_msg+0x791/0xcf0 [ 91.024206][ T6786] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 91.024232][ T6786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.024260][ T6786] ? ref_tracker_free+0x643/0x7e0 [ 91.024282][ T6786] netlink_rcv_skb+0x206/0x480 [ 91.024304][ T6786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.024330][ T6786] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.024374][ T6786] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.024397][ T6786] netlink_unicast+0x7f6/0x990 [ 91.024426][ T6786] ? __pfx_netlink_unicast+0x10/0x10 [ 91.024442][ T6786] ? __virt_addr_valid+0x45f/0x530 [ 91.024459][ T6786] ? __phys_addr_symbol+0x2f/0x70 [ 91.024474][ T6786] ? __check_object_size+0x47a/0x730 [ 91.024499][ T6786] netlink_sendmsg+0x8de/0xcb0 [ 91.024533][ T6786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.024557][ T6786] ? aa_sock_msg_perm+0x91/0x160 [ 91.024585][ T6786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.024603][ T6786] __sock_sendmsg+0x221/0x270 [ 91.024627][ T6786] ____sys_sendmsg+0x53a/0x860 [ 91.024654][ T6786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.024669][ T6786] ? __fget_files+0x2a/0x410 [ 91.024693][ T6786] ? __fget_files+0x2a/0x410 [ 91.024723][ T6786] __sys_sendmsg+0x269/0x350 [ 91.024746][ T6786] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.024777][ T6786] ? do_sys_openat2+0x17a/0x1d0 [ 91.024831][ T6786] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.024854][ T6786] ? do_syscall_64+0x100/0x230 [ 91.024876][ T6786] ? do_syscall_64+0xb6/0x230 [ 91.024897][ T6786] do_syscall_64+0xf3/0x230 [ 91.024915][ T6786] ? clear_bhb_loop+0x35/0x90 [ 91.024938][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.024958][ T6786] RIP: 0033:0x7feef758d169 [ 91.024973][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.024986][ T6786] RSP: 002b:00007feef8444038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.025004][ T6786] RAX: ffffffffffffffda RBX: 00007feef77a5fa0 RCX: 00007feef758d169 [ 91.025015][ T6786] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 91.025025][ T6786] RBP: 00007feef8444090 R08: 0000000000000000 R09: 0000000000000000 [ 91.025035][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.025044][ T6786] R13: 0000000000000000 R14: 00007feef77a5fa0 R15: 00007ffdb60fc808 [ 91.025072][ T6786] [ 91.652315][ T6797] netlink: 104 bytes leftover after parsing attributes in process `syz.4.312'. [ 91.882396][ T6810] FAULT_INJECTION: forcing a failure. [ 91.882396][ T6810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.969088][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.2.313 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 91.969114][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.969124][ T6810] Call Trace: [ 91.969130][ T6810] [ 91.969137][ T6810] dump_stack_lvl+0x241/0x360 [ 91.969163][ T6810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.969181][ T6810] ? __pfx__printk+0x10/0x10 [ 91.969200][ T6810] ? __pfx_lock_release+0x10/0x10 [ 91.969222][ T6810] ? __lock_acquire+0x1397/0x2100 [ 91.969250][ T6810] should_fail_ex+0x40a/0x550 [ 91.969278][ T6810] _copy_from_user+0x2d/0xb0 [ 91.969299][ T6810] kstrtouint_from_user+0xc6/0x190 [ 91.969319][ T6810] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 91.969338][ T6810] ? __pfx_lock_acquire+0x10/0x10 [ 91.969367][ T6810] proc_fail_nth_write+0xaa/0x2d0 [ 91.969388][ T6810] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 91.969407][ T6810] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.969443][ T6810] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.969465][ T6810] vfs_write+0x29f/0xd10 [ 91.969484][ T6810] ? fdget_pos+0x254/0x320 [ 91.969505][ T6810] ? __mutex_unlock_slowpath+0x227/0x800 [ 91.969527][ T6810] ? __pfx_vfs_write+0x10/0x10 [ 91.969542][ T6810] ? do_sys_openat2+0x17a/0x1d0 [ 91.969566][ T6810] ? __fget_files+0x2a/0x410 [ 91.969589][ T6810] ? __fget_files+0x395/0x410 [ 91.969607][ T6810] ? __fget_files+0x2a/0x410 [ 91.969636][ T6810] ksys_write+0x18f/0x2b0 [ 91.969656][ T6810] ? __pfx_ksys_write+0x10/0x10 [ 91.969673][ T6810] ? do_syscall_64+0x100/0x230 [ 91.969694][ T6810] ? do_syscall_64+0xb6/0x230 [ 91.969715][ T6810] do_syscall_64+0xf3/0x230 [ 91.969734][ T6810] ? clear_bhb_loop+0x35/0x90 [ 91.969758][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.969778][ T6810] RIP: 0033:0x7f9fd678bc1f [ 91.969793][ T6810] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 91.969806][ T6810] RSP: 002b:00007f9fd751c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 91.969824][ T6810] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9fd678bc1f [ 91.969835][ T6810] RDX: 0000000000000001 RSI: 00007f9fd751c0a0 RDI: 0000000000000003 [ 91.969845][ T6810] RBP: 00007f9fd751c090 R08: 0000000000000000 R09: 0000000000000000 [ 91.969855][ T6810] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 91.969864][ T6810] R13: 0000000000000000 R14: 00007f9fd69a6080 R15: 00007ffe07c374d8 [ 91.969891][ T6810] [ 92.613305][ T6820] netlink: 56 bytes leftover after parsing attributes in process `syz.0.315'. [ 93.014754][ T6843] openvswitch: netlink: IP tunnel dst address not specified [ 93.023366][ T6847] FAULT_INJECTION: forcing a failure. [ 93.023366][ T6847] name failslab, interval 1, probability 0, space 0, times 0 [ 93.062508][ T6847] CPU: 0 UID: 0 PID: 6847 Comm: syz.4.327 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 93.062535][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.062546][ T6847] Call Trace: [ 93.062552][ T6847] [ 93.062559][ T6847] dump_stack_lvl+0x241/0x360 [ 93.062585][ T6847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.062602][ T6847] ? __pfx__printk+0x10/0x10 [ 93.062620][ T6847] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 93.062642][ T6847] ? __pfx___might_resched+0x10/0x10 [ 93.062667][ T6847] should_fail_ex+0x40a/0x550 [ 93.062694][ T6847] should_failslab+0xac/0x100 [ 93.062716][ T6847] kmem_cache_alloc_node_noprof+0x77/0x380 [ 93.062737][ T6847] ? __alloc_skb+0x1c3/0x440 [ 93.062759][ T6847] __alloc_skb+0x1c3/0x440 [ 93.062776][ T6847] ? __pfx___alloc_skb+0x10/0x10 [ 93.062792][ T6847] ? netlink_autobind+0xd6/0x2f0 [ 93.062809][ T6847] ? netlink_autobind+0x2b0/0x2f0 [ 93.062832][ T6847] netlink_sendmsg+0x634/0xcb0 [ 93.062863][ T6847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.062887][ T6847] ? aa_sock_msg_perm+0x91/0x160 [ 93.062915][ T6847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.062934][ T6847] __sock_sendmsg+0x221/0x270 [ 93.062958][ T6847] ____sys_sendmsg+0x53a/0x860 [ 93.062983][ T6847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.062998][ T6847] ? __fget_files+0x2a/0x410 [ 93.063021][ T6847] ? __fget_files+0x2a/0x410 [ 93.063050][ T6847] __sys_sendmsg+0x269/0x350 [ 93.063072][ T6847] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.063100][ T6847] ? do_sys_openat2+0x17a/0x1d0 [ 93.063144][ T6847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.063167][ T6847] ? do_syscall_64+0x100/0x230 [ 93.063188][ T6847] ? do_syscall_64+0xb6/0x230 [ 93.063208][ T6847] do_syscall_64+0xf3/0x230 [ 93.063225][ T6847] ? clear_bhb_loop+0x35/0x90 [ 93.063249][ T6847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.063269][ T6847] RIP: 0033:0x7f98a558d169 [ 93.063284][ T6847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.063297][ T6847] RSP: 002b:00007f98a6323038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.063315][ T6847] RAX: ffffffffffffffda RBX: 00007f98a57a5fa0 RCX: 00007f98a558d169 [ 93.063327][ T6847] RDX: 0000000000000040 RSI: 0000400000000840 RDI: 0000000000000003 [ 93.063337][ T6847] RBP: 00007f98a6323090 R08: 0000000000000000 R09: 0000000000000000 [ 93.063347][ T6847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.063356][ T6847] R13: 0000000000000000 R14: 00007f98a57a5fa0 R15: 00007fff4f990968 [ 93.063387][ T6847] [ 93.648036][ T6857] netlink: 'syz.3.329': attribute type 9 has an invalid length. [ 93.662943][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 93.718919][ T6857] hsr0: entered promiscuous mode [ 93.753059][ T6857] macvlan2: entered promiscuous mode [ 93.758544][ T6857] macvlan2: entered allmulticast mode [ 93.767579][ T6857] hsr0: entered allmulticast mode [ 93.773014][ T6857] hsr_slave_0: entered allmulticast mode [ 93.778882][ T6857] hsr_slave_1: entered allmulticast mode [ 93.973004][ T6866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.332'. [ 94.153713][ T6876] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 94.201661][ T6876] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3) [ 94.340842][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 94.405479][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 94.435154][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 94.458626][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 94.481499][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 94.505090][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 94.534040][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 94.555729][ T6889] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 94.973683][ T6912] FAULT_INJECTION: forcing a failure. [ 94.973683][ T6912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.989804][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.1.349 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 94.989828][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.989838][ T6912] Call Trace: [ 94.989844][ T6912] [ 94.989850][ T6912] dump_stack_lvl+0x241/0x360 [ 94.989875][ T6912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.989892][ T6912] ? __pfx__printk+0x10/0x10 [ 94.989910][ T6912] ? __pfx_lock_release+0x10/0x10 [ 94.989933][ T6912] ? vfs_write+0x7fa/0xd10 [ 94.989953][ T6912] should_fail_ex+0x40a/0x550 [ 94.989979][ T6912] _copy_from_user+0x2d/0xb0 [ 94.989999][ T6912] move_addr_to_kernel+0x82/0x150 [ 94.990020][ T6912] __sys_connect+0xb6/0x2d0 [ 94.990040][ T6912] ? __fget_files+0x2a/0x410 [ 94.990059][ T6912] ? __pfx___sys_connect+0x10/0x10 [ 94.990089][ T6912] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.990112][ T6912] ? do_syscall_64+0x100/0x230 [ 94.990135][ T6912] __x64_sys_connect+0x7a/0x90 [ 94.990157][ T6912] do_syscall_64+0xf3/0x230 [ 94.990174][ T6912] ? clear_bhb_loop+0x35/0x90 [ 94.990198][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.990217][ T6912] RIP: 0033:0x7ff22eb8d169 [ 94.990232][ T6912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.990252][ T6912] RSP: 002b:00007ff22fa52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 94.990270][ T6912] RAX: ffffffffffffffda RBX: 00007ff22eda5fa0 RCX: 00007ff22eb8d169 [ 94.990281][ T6912] RDX: 000000000000002e RSI: 0000400000000000 RDI: 0000000000000006 [ 94.990291][ T6912] RBP: 00007ff22fa52090 R08: 0000000000000000 R09: 0000000000000000 [ 94.990300][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.990309][ T6912] R13: 0000000000000000 R14: 00007ff22eda5fa0 R15: 00007fff90b62e68 [ 94.990332][ T6912] [ 95.639013][ T6944] pimreg: entered allmulticast mode [ 95.763178][ T6955] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 96.266211][ T6983] bridge0: entered promiscuous mode [ 96.271815][ T6983] macvlan2: entered promiscuous mode [ 96.420006][ T6989] FAULT_INJECTION: forcing a failure. [ 96.420006][ T6989] name failslab, interval 1, probability 0, space 0, times 0 [ 96.433573][ T6989] CPU: 1 UID: 0 PID: 6989 Comm: syz.2.379 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 96.433596][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.433605][ T6989] Call Trace: [ 96.433611][ T6989] [ 96.433618][ T6989] dump_stack_lvl+0x241/0x360 [ 96.433644][ T6989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.433661][ T6989] ? __pfx__printk+0x10/0x10 [ 96.433679][ T6989] ? fs_reclaim_acquire+0x93/0x130 [ 96.433697][ T6989] ? __pfx___might_resched+0x10/0x10 [ 96.433721][ T6989] should_fail_ex+0x40a/0x550 [ 96.433747][ T6989] should_failslab+0xac/0x100 [ 96.433768][ T6989] __kmalloc_noprof+0xdd/0x4c0 [ 96.433787][ T6989] ? kstrtouint_from_user+0x128/0x190 [ 96.433802][ T6989] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 96.433824][ T6989] tomoyo_realpath_from_path+0xcf/0x5e0 [ 96.433852][ T6989] tomoyo_path_number_perm+0x239/0x770 [ 96.433871][ T6989] ? __lock_acquire+0x1397/0x2100 [ 96.433896][ T6989] ? tomoyo_path_number_perm+0x209/0x770 [ 96.433918][ T6989] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 96.433993][ T6989] ? __fget_files+0x2a/0x410 [ 96.434016][ T6989] ? __fget_files+0x2a/0x410 [ 96.434041][ T6989] security_file_ioctl+0xc6/0x2a0 [ 96.434062][ T6989] __se_sys_ioctl+0x46/0x170 [ 96.434082][ T6989] do_syscall_64+0xf3/0x230 [ 96.434101][ T6989] ? clear_bhb_loop+0x35/0x90 [ 96.434188][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.434209][ T6989] RIP: 0033:0x7f9fd678d169 [ 96.434225][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.434238][ T6989] RSP: 002b:00007f9fd753d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.434255][ T6989] RAX: ffffffffffffffda RBX: 00007f9fd69a5fa0 RCX: 00007f9fd678d169 [ 96.434266][ T6989] RDX: 0000400000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 96.434277][ T6989] RBP: 00007f9fd753d090 R08: 0000000000000000 R09: 0000000000000000 [ 96.434287][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.434296][ T6989] R13: 0000000000000000 R14: 00007f9fd69a5fa0 R15: 00007ffe07c374d8 [ 96.434323][ T6989] [ 96.434332][ T6989] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.058034][ T7005] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 97.741673][ T7034] __nla_validate_parse: 18 callbacks suppressed [ 97.741685][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 97.967336][ T7042] ip6tnl1: entered promiscuous mode [ 97.972667][ T7042] ip6tnl1: entered allmulticast mode [ 98.084626][ T7045] FAULT_INJECTION: forcing a failure. [ 98.084626][ T7045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.105715][ T7045] CPU: 0 UID: 0 PID: 7045 Comm: syz.0.397 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 98.105741][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.105751][ T7045] Call Trace: [ 98.105756][ T7045] [ 98.105763][ T7045] dump_stack_lvl+0x241/0x360 [ 98.105787][ T7045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.105804][ T7045] ? __pfx__printk+0x10/0x10 [ 98.105822][ T7045] ? __pfx_lock_release+0x10/0x10 [ 98.105850][ T7045] should_fail_ex+0x40a/0x550 [ 98.105876][ T7045] _copy_from_user+0x2d/0xb0 [ 98.105896][ T7045] sctp_getsockopt_rtoinfo+0xc4/0x760 [ 98.105916][ T7045] ? __local_bh_enable_ip+0x168/0x200 [ 98.105936][ T7045] ? __pfx_sctp_getsockopt_rtoinfo+0x10/0x10 [ 98.105963][ T7045] sctp_getsockopt+0x91a/0xbb0 [ 98.105982][ T7045] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 98.106004][ T7045] do_sock_getsockopt+0x38e/0x740 [ 98.106044][ T7045] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 98.106058][ T7045] ? __fget_files+0x2a/0x410 [ 98.106078][ T7045] ? __fget_files+0x395/0x410 [ 98.106097][ T7045] ? __fget_files+0x2a/0x410 [ 98.106123][ T7045] __x64_sys_getsockopt+0x2a1/0x370 [ 98.106146][ T7045] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 98.106164][ T7045] ? do_syscall_64+0x100/0x230 [ 98.106185][ T7045] ? do_syscall_64+0xb6/0x230 [ 98.106206][ T7045] do_syscall_64+0xf3/0x230 [ 98.106224][ T7045] ? clear_bhb_loop+0x35/0x90 [ 98.106246][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.106265][ T7045] RIP: 0033:0x7f5cd5f8d169 [ 98.106279][ T7045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.106291][ T7045] RSP: 002b:00007f5cd6e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 98.106308][ T7045] RAX: ffffffffffffffda RBX: 00007f5cd61a5fa0 RCX: 00007f5cd5f8d169 [ 98.106319][ T7045] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000004 [ 98.106328][ T7045] RBP: 00007f5cd6e98090 R08: 0000400000000140 R09: 0000000000000000 [ 98.106338][ T7045] R10: 0000400000000100 R11: 0000000000000246 R12: 0000000000000001 [ 98.106348][ T7045] R13: 0000000000000000 R14: 00007f5cd61a5fa0 R15: 00007ffdfc69ae38 [ 98.106371][ T7045] [ 98.506742][ T7039] batadv_slave_1: entered promiscuous mode [ 98.512647][ T7039] batadv_slave_1: entered allmulticast mode [ 98.535918][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.543510][ T7039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.551467][ T7039] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 98.559093][ T7056] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 98.700128][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'. [ 98.710307][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 98.906920][ T7067] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 98.915216][ T7067] netlink: 2 bytes leftover after parsing attributes in process `syz.0.407'. [ 98.927781][ T7067] team0: entered promiscuous mode [ 98.952062][ T7067] team_slave_0: entered promiscuous mode [ 98.980595][ T7067] team_slave_1: entered promiscuous mode [ 98.986638][ T7067] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 98.994259][ T7067] bridge0: port 3(team0) entered blocking state [ 99.000617][ T7067] bridge0: port 3(team0) entered disabled state [ 99.010095][ T7067] team0: entered allmulticast mode [ 99.022002][ T7067] team_slave_0: entered allmulticast mode [ 99.029298][ T7067] team_slave_1: entered allmulticast mode [ 99.049707][ T7067] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 99.061105][ T7067] bridge0: port 3(team0) entered blocking state [ 99.067484][ T7067] bridge0: port 3(team0) entered forwarding state [ 99.180188][ T7082] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.407'. [ 100.128742][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 100.137721][ T7116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.428'. [ 100.146844][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 100.163257][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 100.931561][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 100.957618][ T7149] netlink: 'syz.3.443': attribute type 7 has an invalid length. [ 100.993217][ T7149] netlink: 'syz.3.443': attribute type 8 has an invalid length. [ 101.655263][ T7173] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 101.672142][ T7173] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 102.261792][ T7187] vlan2: entered promiscuous mode [ 102.275396][ T7187] batadv0: entered promiscuous mode [ 102.296372][ T7187] team0: Port device vlan2 added [ 102.312691][ T7188] raw_sendmsg: syz.2.460 forgot to set AF_INET. Fix it! [ 102.568530][ T7199] dvmrp5: entered allmulticast mode [ 102.576312][ T7199] dvmrp5: left allmulticast mode [ 102.721024][ T7204] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 102.729319][ T7204] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 103.159166][ T7215] Cannot find add_set index 0 as target [ 103.279997][ T7219] FAULT_INJECTION: forcing a failure. [ 103.279997][ T7219] name failslab, interval 1, probability 0, space 0, times 0 [ 103.305556][ T7219] CPU: 1 UID: 0 PID: 7219 Comm: syz.3.473 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 103.305581][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.305590][ T7219] Call Trace: [ 103.305596][ T7219] [ 103.305603][ T7219] dump_stack_lvl+0x241/0x360 [ 103.305635][ T7219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.305653][ T7219] ? __pfx__printk+0x10/0x10 [ 103.305672][ T7219] ? __kmalloc_noprof+0xb5/0x4c0 [ 103.305694][ T7219] ? __pfx___might_resched+0x10/0x10 [ 103.305720][ T7219] should_fail_ex+0x40a/0x550 [ 103.305746][ T7219] should_failslab+0xac/0x100 [ 103.305767][ T7219] __kmalloc_noprof+0xdd/0x4c0 [ 103.305786][ T7219] ? sock_kmalloc+0xd7/0x160 [ 103.305808][ T7219] sock_kmalloc+0xd7/0x160 [ 103.305827][ T7219] ____sys_sendmsg+0x231/0x860 [ 103.305853][ T7219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.305867][ T7219] ? __fget_files+0x2a/0x410 [ 103.305891][ T7219] ? __fget_files+0x2a/0x410 [ 103.305920][ T7219] __sys_sendmsg+0x269/0x350 [ 103.305941][ T7219] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.305970][ T7219] ? do_sys_openat2+0x17a/0x1d0 [ 103.306016][ T7219] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.306040][ T7219] ? do_syscall_64+0x100/0x230 [ 103.306062][ T7219] ? do_syscall_64+0xb6/0x230 [ 103.306082][ T7219] do_syscall_64+0xf3/0x230 [ 103.306100][ T7219] ? clear_bhb_loop+0x35/0x90 [ 103.306123][ T7219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.306142][ T7219] RIP: 0033:0x7feef758d169 [ 103.306158][ T7219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.306170][ T7219] RSP: 002b:00007feef8444038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.306188][ T7219] RAX: ffffffffffffffda RBX: 00007feef77a5fa0 RCX: 00007feef758d169 [ 103.306200][ T7219] RDX: 0000000004000000 RSI: 0000400000000600 RDI: 0000000000000003 [ 103.306211][ T7219] RBP: 00007feef8444090 R08: 0000000000000000 R09: 0000000000000000 [ 103.306221][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.306230][ T7219] R13: 0000000000000000 R14: 00007feef77a5fa0 R15: 00007ffdb60fc808 [ 103.306256][ T7219] [ 105.249673][ T7295] __nla_validate_parse: 15 callbacks suppressed [ 105.249690][ T7295] netlink: 356 bytes leftover after parsing attributes in process `syz.2.499'. [ 105.282703][ T7295] netlink: 356 bytes leftover after parsing attributes in process `syz.2.499'. [ 105.561973][ T7306] netlink: 'syz.3.504': attribute type 10 has an invalid length. [ 105.571430][ T7306] netlink: 2 bytes leftover after parsing attributes in process `syz.3.504'. [ 105.748818][ T7324] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.504'. [ 106.155378][ T7330] FAULT_INJECTION: forcing a failure. [ 106.155378][ T7330] name failslab, interval 1, probability 0, space 0, times 0 [ 106.192725][ T7330] CPU: 0 UID: 0 PID: 7330 Comm: syz.0.512 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 106.192754][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.192764][ T7330] Call Trace: [ 106.192770][ T7330] [ 106.192777][ T7330] dump_stack_lvl+0x241/0x360 [ 106.192803][ T7330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.192820][ T7330] ? __pfx__printk+0x10/0x10 [ 106.192836][ T7330] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 106.192858][ T7330] ? __pfx___might_resched+0x10/0x10 [ 106.192883][ T7330] should_fail_ex+0x40a/0x550 [ 106.192909][ T7330] should_failslab+0xac/0x100 [ 106.192930][ T7330] kmem_cache_alloc_node_noprof+0x77/0x380 [ 106.192950][ T7330] ? __alloc_skb+0x1c3/0x440 [ 106.192969][ T7330] __alloc_skb+0x1c3/0x440 [ 106.192990][ T7330] ? __pfx___alloc_skb+0x10/0x10 [ 106.193007][ T7330] ? netlink_autobind+0xd6/0x2f0 [ 106.193027][ T7330] ? netlink_autobind+0x2b0/0x2f0 [ 106.193052][ T7330] netlink_sendmsg+0x634/0xcb0 [ 106.193084][ T7330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.193109][ T7330] ? aa_sock_msg_perm+0x91/0x160 [ 106.193137][ T7330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.193156][ T7330] __sock_sendmsg+0x221/0x270 [ 106.193180][ T7330] ____sys_sendmsg+0x53a/0x860 [ 106.193212][ T7330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.193226][ T7330] ? __fget_files+0x2a/0x410 [ 106.193264][ T7330] ? __fget_files+0x2a/0x410 [ 106.193291][ T7330] __sys_sendmsg+0x269/0x350 [ 106.193313][ T7330] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.193346][ T7330] ? do_sys_openat2+0x17a/0x1d0 [ 106.193401][ T7330] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.193425][ T7330] ? do_syscall_64+0x100/0x230 [ 106.193447][ T7330] ? do_syscall_64+0xb6/0x230 [ 106.193468][ T7330] do_syscall_64+0xf3/0x230 [ 106.193486][ T7330] ? clear_bhb_loop+0x35/0x90 [ 106.193509][ T7330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.193529][ T7330] RIP: 0033:0x7f5cd5f8d169 [ 106.193543][ T7330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.193556][ T7330] RSP: 002b:00007f5cd6e98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.193573][ T7330] RAX: ffffffffffffffda RBX: 00007f5cd61a5fa0 RCX: 00007f5cd5f8d169 [ 106.193584][ T7330] RDX: 0000000000000080 RSI: 0000400000000180 RDI: 0000000000000004 [ 106.193594][ T7330] RBP: 00007f5cd6e98090 R08: 0000000000000000 R09: 0000000000000000 [ 106.193603][ T7330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.193612][ T7330] R13: 0000000000000000 R14: 00007f5cd61a5fa0 R15: 00007ffdfc69ae38 [ 106.193636][ T7330] [ 106.693757][ T7338] FAULT_INJECTION: forcing a failure. [ 106.693757][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 106.707356][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.1.513 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 106.707376][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.707384][ T7338] Call Trace: [ 106.707390][ T7338] [ 106.707398][ T7338] dump_stack_lvl+0x241/0x360 [ 106.707424][ T7338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.707443][ T7338] ? __pfx__printk+0x10/0x10 [ 106.707462][ T7338] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 106.707484][ T7338] ? __pfx___might_resched+0x10/0x10 [ 106.707502][ T7338] ? rcu_is_watching+0x15/0xb0 [ 106.707525][ T7338] should_fail_ex+0x40a/0x550 [ 106.707552][ T7338] should_failslab+0xac/0x100 [ 106.707573][ T7338] __kmalloc_node_noprof+0xe1/0x4d0 [ 106.707620][ T7338] ? __kvmalloc_node_noprof+0x72/0x190 [ 106.707648][ T7338] __kvmalloc_node_noprof+0x72/0x190 [ 106.707672][ T7338] nf_hook_entries_grow+0x288/0x720 [ 106.707704][ T7338] __nf_register_net_hook+0x278/0x8d0 [ 106.707736][ T7338] nf_register_net_hook+0xb0/0x190 [ 106.707758][ T7338] nf_register_net_hooks+0x41/0x1a0 [ 106.707780][ T7338] nf_ct_netns_do_get+0x20a/0x630 [ 106.707800][ T7338] ? __pfx_lock_release+0x10/0x10 [ 106.707823][ T7338] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 106.707840][ T7338] ? rcu_is_watching+0x15/0xb0 [ 106.707858][ T7338] ? trace_contention_end+0x3c/0x120 [ 106.707877][ T7338] ? __mutex_lock+0x397/0x1010 [ 106.707905][ T7338] helper_mt_check+0x75/0x150 [ 106.707924][ T7338] xt_check_match+0x368/0xa40 [ 106.707948][ T7338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.707968][ T7338] ? __pfx_xt_check_match+0x10/0x10 [ 106.708003][ T7338] ? xt_find_match+0x1df/0x230 [ 106.708032][ T7338] translate_table+0x1704/0x2490 [ 106.708080][ T7338] ? __pfx_translate_table+0x10/0x10 [ 106.708100][ T7338] ? __might_fault+0xaa/0x120 [ 106.708117][ T7338] ? __pfx_lock_release+0x10/0x10 [ 106.708143][ T7338] ? __virt_addr_valid+0x183/0x530 [ 106.708162][ T7338] ? __might_fault+0xc6/0x120 [ 106.708184][ T7338] ? copy_from_sockptr_offset+0x6b/0xb0 [ 106.708204][ T7338] do_ip6t_set_ctl+0xe4c/0x1270 [ 106.708228][ T7338] ? nf_setsockopt+0x240/0x2c0 [ 106.708249][ T7338] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 106.708268][ T7338] ? rcu_is_watching+0x15/0xb0 [ 106.708286][ T7338] ? trace_contention_end+0x3c/0x120 [ 106.708313][ T7338] ? __mutex_unlock_slowpath+0x227/0x800 [ 106.708340][ T7338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.708365][ T7338] ? __lock_acquire+0x1397/0x2100 [ 106.708394][ T7338] nf_setsockopt+0x295/0x2c0 [ 106.708420][ T7338] dccp_setsockopt+0x17c/0x1140 [ 106.708441][ T7338] ? __pfx_aa_sk_perm+0x10/0x10 [ 106.708462][ T7338] ? __pfx_dccp_setsockopt+0x10/0x10 [ 106.708479][ T7338] ? __pfx_lock_acquire+0x10/0x10 [ 106.708497][ T7338] ? aa_sock_opt_perm+0x79/0x120 [ 106.708519][ T7338] ? sock_common_setsockopt+0x37/0xc0 [ 106.708542][ T7338] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 106.708563][ T7338] do_sock_setsockopt+0x3af/0x720 [ 106.708592][ T7338] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 106.708614][ T7338] ? __fget_files+0x395/0x410 [ 106.708634][ T7338] ? __fget_files+0x2a/0x410 [ 106.708662][ T7338] __x64_sys_setsockopt+0x1ee/0x280 [ 106.708686][ T7338] do_syscall_64+0xf3/0x230 [ 106.708704][ T7338] ? clear_bhb_loop+0x35/0x90 [ 106.708725][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.708740][ T7338] RIP: 0033:0x7ff22eb8d169 [ 106.708753][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.708763][ T7338] RSP: 002b:00007ff22fa52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.708778][ T7338] RAX: ffffffffffffffda RBX: 00007ff22eda5fa0 RCX: 00007ff22eb8d169 [ 106.708787][ T7338] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 106.708794][ T7338] RBP: 00007ff22fa52090 R08: 0000000000000550 R09: 0000000000000000 [ 106.708802][ T7338] R10: 0000400000000780 R11: 0000000000000246 R12: 0000000000000002 [ 106.708810][ T7338] R13: 0000000000000000 R14: 00007ff22eda5fa0 R15: 00007fff90b62e68 [ 106.708830][ T7338] [ 106.709248][ T7338] xt_helper: cannot load conntrack support for proto=10 [ 106.742399][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 107.137789][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 107.147144][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 107.157322][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 107.238468][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'. [ 107.329840][ T7349] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.445323][ T7349] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.561801][ T7349] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.662152][ T7358] netlink: 36 bytes leftover after parsing attributes in process `syz.0.524'. [ 107.724896][ T7349] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.895015][ T7349] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.927528][ T7349] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.983674][ T7349] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.094498][ T7349] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.184714][ T7376] netlink: 'syz.2.532': attribute type 29 has an invalid length. [ 108.289475][ T7380] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 108.477374][ T7380] tipc: Started in network mode [ 108.493356][ T7380] tipc: Node identity 8, cluster identity 4711 [ 108.526520][ T7380] tipc: Node number set to 8 [ 109.589686][ T7409] bridge_slave_0: left allmulticast mode [ 109.638334][ T7409] bridge_slave_0: left promiscuous mode [ 109.655168][ T7409] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.696905][ T7409] bridge_slave_1: left allmulticast mode [ 109.717794][ T7409] bridge_slave_1: left promiscuous mode [ 109.733581][ T7409] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.769452][ T7409] bond0: (slave bond_slave_1): Releasing backup interface [ 109.818227][ T7409] team0: Port device team_slave_0 removed [ 109.830622][ T7409] team0: Port device team_slave_1 removed [ 109.838373][ T7409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.846510][ T7409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.874367][ T7409] team0: Port device wlan1 removed [ 109.887665][ T7413] team0: left allmulticast mode [ 109.898555][ T7413] team_slave_0: left allmulticast mode [ 109.915593][ T7413] team_slave_1: left allmulticast mode [ 109.936332][ T7413] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 109.953119][ T7413] bridge0: port 3(team0) entered disabled state [ 109.979206][ T7413] bridge_slave_0: left allmulticast mode [ 109.998145][ T7413] bridge_slave_0: left promiscuous mode [ 110.033084][ T7413] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.056442][ T7413] bridge_slave_1: left allmulticast mode [ 110.069169][ T7413] bridge_slave_1: left promiscuous mode [ 110.078503][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.092935][ T7413] bond0: (slave bond_slave_0): Releasing backup interface [ 110.105584][ T7413] bond0: (slave bond_slave_1): Releasing backup interface [ 110.138776][ T7413] team_slave_0: left promiscuous mode [ 110.159718][ T7413] team0: Port device team_slave_0 removed [ 110.167823][ T7413] team_slave_1: left promiscuous mode [ 110.180883][ T7413] team0: Port device team_slave_1 removed [ 110.188645][ T7413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.197254][ T7413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.217662][ T7413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.231611][ T7413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.266016][ T7413] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 110.279726][ T7413] team0: Port device wlan1 removed [ 110.685863][ T7442] FAULT_INJECTION: forcing a failure. [ 110.685863][ T7442] name failslab, interval 1, probability 0, space 0, times 0 [ 110.702643][ T7442] CPU: 1 UID: 0 PID: 7442 Comm: syz.1.554 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 110.702668][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.702678][ T7442] Call Trace: [ 110.702683][ T7442] [ 110.702690][ T7442] dump_stack_lvl+0x241/0x360 [ 110.702716][ T7442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.702737][ T7442] ? __pfx__printk+0x10/0x10 [ 110.702754][ T7442] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 110.702776][ T7442] ? __pfx___might_resched+0x10/0x10 [ 110.702797][ T7442] should_fail_ex+0x40a/0x550 [ 110.702824][ T7442] should_failslab+0xac/0x100 [ 110.702844][ T7442] __kmalloc_node_noprof+0xe1/0x4d0 [ 110.702862][ T7442] ? allocate_slab+0x179/0x3a0 [ 110.702882][ T7442] allocate_slab+0x179/0x3a0 [ 110.702901][ T7442] ___slab_alloc+0xc27/0x14a0 [ 110.702929][ T7442] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 110.702955][ T7442] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 110.702974][ T7442] __slab_alloc+0x58/0xa0 [ 110.702998][ T7442] __kmalloc_cache_noprof+0x27b/0x390 [ 110.703016][ T7442] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 110.703040][ T7442] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 110.703074][ T7442] genl_rcv_msg+0xb1f/0xec0 [ 110.703108][ T7442] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.703153][ T7442] ? __pfx_lock_acquire+0x10/0x10 [ 110.703175][ T7442] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 110.703197][ T7442] ? __pfx___might_resched+0x10/0x10 [ 110.703227][ T7442] netlink_rcv_skb+0x206/0x480 [ 110.703249][ T7442] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.703267][ T7442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.703301][ T7442] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 110.703336][ T7442] genl_rcv+0x28/0x40 [ 110.703350][ T7442] netlink_unicast+0x7f6/0x990 [ 110.703378][ T7442] ? __pfx_netlink_unicast+0x10/0x10 [ 110.703394][ T7442] ? __virt_addr_valid+0x45f/0x530 [ 110.703410][ T7442] ? __phys_addr_symbol+0x2f/0x70 [ 110.703425][ T7442] ? __check_object_size+0x47a/0x730 [ 110.703449][ T7442] netlink_sendmsg+0x8de/0xcb0 [ 110.703479][ T7442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.703504][ T7442] ? aa_sock_msg_perm+0x91/0x160 [ 110.703532][ T7442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.703551][ T7442] __sock_sendmsg+0x221/0x270 [ 110.703575][ T7442] ____sys_sendmsg+0x53a/0x860 [ 110.703601][ T7442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.703616][ T7442] ? __fget_files+0x2a/0x410 [ 110.703639][ T7442] ? __fget_files+0x2a/0x410 [ 110.703667][ T7442] __sys_sendmsg+0x269/0x350 [ 110.703688][ T7442] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.703716][ T7442] ? do_sys_openat2+0x17a/0x1d0 [ 110.703763][ T7442] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.703786][ T7442] ? do_syscall_64+0x100/0x230 [ 110.703808][ T7442] ? do_syscall_64+0xb6/0x230 [ 110.703828][ T7442] do_syscall_64+0xf3/0x230 [ 110.703846][ T7442] ? clear_bhb_loop+0x35/0x90 [ 110.703870][ T7442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.703889][ T7442] RIP: 0033:0x7ff22eb8d169 [ 110.703904][ T7442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.703916][ T7442] RSP: 002b:00007ff22fa52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.703934][ T7442] RAX: ffffffffffffffda RBX: 00007ff22eda5fa0 RCX: 00007ff22eb8d169 [ 110.703945][ T7442] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 110.703955][ T7442] RBP: 00007ff22fa52090 R08: 0000000000000000 R09: 0000000000000000 [ 110.703965][ T7442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.703974][ T7442] R13: 0000000000000000 R14: 00007ff22eda5fa0 R15: 00007fff90b62e68 [ 110.704001][ T7442] [ 111.071054][ T7442] netlink: set zone limit has 8 unknown bytes [ 111.354836][ T7451] __nla_validate_parse: 10 callbacks suppressed [ 111.354855][ T7451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.558'. [ 111.515047][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 111.553798][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 111.573022][ T7452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.557'. [ 111.593488][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 111.602493][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 111.800224][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.562'. [ 111.818242][ T7465] Bluetooth: MGMT ver 1.23 [ 112.243269][ T7490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.574'. [ 112.352368][ T7494] netlink: 'syz.2.575': attribute type 10 has an invalid length. [ 112.361356][ T7494] netlink: 2 bytes leftover after parsing attributes in process `syz.2.575'. [ 112.376583][ T7494] team0: entered promiscuous mode [ 112.382186][ T7494] bridge0: port 1(team0) entered blocking state [ 112.391807][ T7494] bridge0: port 1(team0) entered disabled state [ 112.407312][ T7494] team0: entered allmulticast mode [ 112.461511][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 112.470502][ T7501] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 112.518705][ T5845] block nbd1: Receive control failed (result -107) [ 112.800459][ T7510] gretap0: entered promiscuous mode [ 112.825589][ T7510] gretap0: left promiscuous mode [ 113.568298][ T7534] dummy0: entered promiscuous mode [ 113.578002][ T7534] macvtap1: entered promiscuous mode [ 113.587319][ T7534] macvtap1: entered allmulticast mode [ 113.598196][ T7534] dummy0: entered allmulticast mode [ 114.882159][ T7582] bridge0: entered promiscuous mode [ 114.909477][ T7577] bridge0: left promiscuous mode [ 115.221044][ T7596] FAULT_INJECTION: forcing a failure. [ 115.221044][ T7596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.242076][ T7595] bond8: entered promiscuous mode [ 115.256905][ T7595] 8021q: adding VLAN 0 to HW filter on device bond8 [ 115.267475][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.3.620 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 115.267496][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.267504][ T7596] Call Trace: [ 115.267510][ T7596] [ 115.267517][ T7596] dump_stack_lvl+0x241/0x360 [ 115.267542][ T7596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.267558][ T7596] ? __pfx__printk+0x10/0x10 [ 115.267579][ T7596] ? __pfx_lock_release+0x10/0x10 [ 115.267616][ T7596] should_fail_ex+0x40a/0x550 [ 115.267643][ T7596] _copy_from_user+0x2d/0xb0 [ 115.267664][ T7596] copy_msghdr_from_user+0xae/0x680 [ 115.267691][ T7596] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 115.267710][ T7596] ? __fget_files+0x2a/0x410 [ 115.267733][ T7596] ? __fget_files+0x2a/0x410 [ 115.267759][ T7596] __sys_sendmsg+0x209/0x350 [ 115.267780][ T7596] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.267808][ T7596] ? do_sys_openat2+0x17a/0x1d0 [ 115.267859][ T7596] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.267882][ T7596] ? do_syscall_64+0x100/0x230 [ 115.267904][ T7596] ? do_syscall_64+0xb6/0x230 [ 115.267925][ T7596] do_syscall_64+0xf3/0x230 [ 115.267943][ T7596] ? clear_bhb_loop+0x35/0x90 [ 115.267967][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.267986][ T7596] RIP: 0033:0x7feef758d169 [ 115.268007][ T7596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.268020][ T7596] RSP: 002b:00007feef8444038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.268039][ T7596] RAX: ffffffffffffffda RBX: 00007feef77a5fa0 RCX: 00007feef758d169 [ 115.268051][ T7596] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 000000000000000f [ 115.268061][ T7596] RBP: 00007feef8444090 R08: 0000000000000000 R09: 0000000000000000 [ 115.268071][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.268080][ T7596] R13: 0000000000000000 R14: 00007feef77a5fa0 R15: 00007ffdb60fc808 [ 115.268106][ T7596] [ 115.911468][ T7611] Cannot find add_set index 0 as target [ 116.260275][ T7622] FAULT_INJECTION: forcing a failure. [ 116.260275][ T7622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.308769][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.1.629 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 116.308796][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.308805][ T7622] Call Trace: [ 116.308811][ T7622] [ 116.308818][ T7622] dump_stack_lvl+0x241/0x360 [ 116.308843][ T7622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.308859][ T7622] ? __pfx__printk+0x10/0x10 [ 116.308877][ T7622] ? __pfx_lock_release+0x10/0x10 [ 116.308909][ T7622] ? __lock_acquire+0x1397/0x2100 [ 116.308936][ T7622] should_fail_ex+0x40a/0x550 [ 116.308962][ T7622] _copy_from_user+0x2d/0xb0 [ 116.308983][ T7622] dev_ethtool+0xe7/0x1d70 [ 116.309008][ T7622] ? __pfx_lock_acquire+0x10/0x10 [ 116.309029][ T7622] ? dev_load+0x21/0x1f0 [ 116.309049][ T7622] ? __pfx_dev_ethtool+0x10/0x10 [ 116.309065][ T7622] ? tomoyo_path_number_perm+0x5dd/0x770 [ 116.309098][ T7622] ? dev_load+0x21/0x1f0 [ 116.309119][ T7622] dev_ioctl+0x785/0x1340 [ 116.309143][ T7622] sock_do_ioctl+0x240/0x460 [ 116.309168][ T7622] ? __pfx_sock_do_ioctl+0x10/0x10 [ 116.309206][ T7622] sock_ioctl+0x626/0x8e0 [ 116.309226][ T7622] ? __pfx_sock_ioctl+0x10/0x10 [ 116.309245][ T7622] ? __fget_files+0x2a/0x410 [ 116.309270][ T7622] ? __fget_files+0x2a/0x410 [ 116.309294][ T7622] ? __pfx_sock_ioctl+0x10/0x10 [ 116.309315][ T7622] __se_sys_ioctl+0xf5/0x170 [ 116.309334][ T7622] do_syscall_64+0xf3/0x230 [ 116.309353][ T7622] ? clear_bhb_loop+0x35/0x90 [ 116.309377][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.309397][ T7622] RIP: 0033:0x7ff22eb8d169 [ 116.309411][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.309424][ T7622] RSP: 002b:00007ff22fa52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.309442][ T7622] RAX: ffffffffffffffda RBX: 00007ff22eda5fa0 RCX: 00007ff22eb8d169 [ 116.309454][ T7622] RDX: 0000400000000200 RSI: 0000000000008946 RDI: 0000000000000003 [ 116.309465][ T7622] RBP: 00007ff22fa52090 R08: 0000000000000000 R09: 0000000000000000 [ 116.309475][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.309484][ T7622] R13: 0000000000000000 R14: 00007ff22eda5fa0 R15: 00007fff90b62e68 [ 116.309510][ T7622] [ 116.656026][ T7631] __nla_validate_parse: 19 callbacks suppressed [ 116.656044][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 116.736562][ T7632] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 116.760689][ T7631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.632'. [ 116.785988][ T7633] bond5 (unregistering): Released all slaves [ 116.802956][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 116.820027][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 116.852356][ T7635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.634'. [ 116.932713][ T7640] netlink: 56 bytes leftover after parsing attributes in process `syz.4.636'. [ 116.947474][ T7640] netlink: 56 bytes leftover after parsing attributes in process `syz.4.636'. [ 116.958257][ T7640] netlink: 'syz.4.636': attribute type 4 has an invalid length. [ 117.036205][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 117.077935][ T7642] nbd: nbd0 already in use [ 117.233937][ T7652] netlink: 'syz.0.641': attribute type 10 has an invalid length. [ 117.265114][ T7652] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 117.279576][ T7652] team0: Port device wlan1 added [ 117.344273][ T7654] netlink: 'syz.1.642': attribute type 10 has an invalid length. [ 117.596192][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 117.650350][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 117.662393][ T7664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 117.702178][ T7664] bond5: entered promiscuous mode [ 117.709115][ T7664] bond5: entered allmulticast mode [ 117.715169][ T7664] team0: Port device bond5 added [ 117.940060][ T7686] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 118.286818][ T7699] netlink: 'syz.4.659': attribute type 10 has an invalid length. [ 118.310134][ T7699] team0: entered promiscuous mode [ 118.320310][ T7699] team_slave_0: entered promiscuous mode [ 118.328154][ T7699] team_slave_1: entered promiscuous mode [ 118.338516][ T7706] sctp: [Deprecated]: syz.2.663 (pid 7706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.338516][ T7706] Use struct sctp_sack_info instead [ 118.342549][ T7699] bond2: entered promiscuous mode [ 118.365282][ T7699] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 118.375638][ T7699] bridge0: port 3(team0) entered blocking state [ 118.383310][ T7699] bridge0: port 3(team0) entered disabled state [ 118.390122][ T7699] team0: entered allmulticast mode [ 118.396013][ T7699] team_slave_0: entered allmulticast mode [ 118.402391][ T7699] team_slave_1: entered allmulticast mode [ 118.409956][ T7699] bond2: entered allmulticast mode [ 118.415859][ T7699] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 118.423867][ T7699] vlan2: entered allmulticast mode [ 118.429174][ T7699] batadv0: entered allmulticast mode [ 118.440197][ T7699] bridge0: port 3(team0) entered blocking state [ 118.446650][ T7699] bridge0: port 3(team0) entered forwarding state [ 118.586324][ T7716] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 118.675565][ T5845] block nbd2: Receive control failed (result -107) [ 118.980738][ T7725] netem: incorrect gi model size [ 118.988772][ T7725] netem: change failed [ 119.464942][ T7740] FAULT_INJECTION: forcing a failure. [ 119.464942][ T7740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.494006][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.2.674 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 119.494030][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.494040][ T7740] Call Trace: [ 119.494046][ T7740] [ 119.494053][ T7740] dump_stack_lvl+0x241/0x360 [ 119.494077][ T7740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.494093][ T7740] ? __pfx__printk+0x10/0x10 [ 119.494111][ T7740] ? __pfx_lock_release+0x10/0x10 [ 119.494140][ T7740] should_fail_ex+0x40a/0x550 [ 119.494166][ T7740] _copy_from_user+0x2d/0xb0 [ 119.494186][ T7740] copy_msghdr_from_user+0xae/0x680 [ 119.494205][ T7740] ? __pfx___might_resched+0x10/0x10 [ 119.494226][ T7740] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 119.494249][ T7740] ? __sys_sendmmsg+0x392/0x720 [ 119.494263][ T7740] ? __might_fault+0xaa/0x120 [ 119.494281][ T7740] __sys_sendmmsg+0x32b/0x720 [ 119.494306][ T7740] ? __pfx___sys_sendmmsg+0x10/0x10 [ 119.494332][ T7740] ? __pfx_lock_release+0x10/0x10 [ 119.494349][ T7740] ? kstrtouint_from_user+0x128/0x190 [ 119.494386][ T7740] ? ksys_write+0x22a/0x2b0 [ 119.494402][ T7740] ? __pfx_lock_release+0x10/0x10 [ 119.494427][ T7740] ? sb_end_write+0xe9/0x1c0 [ 119.494456][ T7740] ? vfs_write+0x7fa/0xd10 [ 119.494474][ T7740] ? __mutex_unlock_slowpath+0x227/0x800 [ 119.494512][ T7740] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.494531][ T7740] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.494549][ T7740] ? do_syscall_64+0x100/0x230 [ 119.494566][ T7740] __x64_sys_sendmmsg+0xa0/0xb0 [ 119.494581][ T7740] do_syscall_64+0xf3/0x230 [ 119.494595][ T7740] ? clear_bhb_loop+0x35/0x90 [ 119.494614][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.494629][ T7740] RIP: 0033:0x7f9fd678d169 [ 119.494641][ T7740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.494652][ T7740] RSP: 002b:00007f9fd753d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.494667][ T7740] RAX: ffffffffffffffda RBX: 00007f9fd69a5fa0 RCX: 00007f9fd678d169 [ 119.494677][ T7740] RDX: 0400000000000159 RSI: 0000400000001c00 RDI: 0000000000000003 [ 119.494686][ T7740] RBP: 00007f9fd753d090 R08: 0000000000000000 R09: 0000000000000000 [ 119.494694][ T7740] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 119.494702][ T7740] R13: 0000000000000000 R14: 00007f9fd69a5fa0 R15: 00007ffe07c374d8 [ 119.494721][ T7740] [ 119.747017][ T7742] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 120.542203][ T7778] netlink: 'syz.2.688': attribute type 13 has an invalid length. [ 120.639858][ T7782] openvswitch: netlink: Missing key (keys=40, expected=100) [ 120.742266][ T7788] bond0: option mode: unable to set because the bond device has slaves [ 120.927336][ T7798] FAULT_INJECTION: forcing a failure. [ 120.927336][ T7798] name failslab, interval 1, probability 0, space 0, times 0 [ 120.960966][ T7798] CPU: 0 UID: 0 PID: 7798 Comm: syz.3.697 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 120.960992][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.961003][ T7798] Call Trace: [ 120.961009][ T7798] [ 120.961016][ T7798] dump_stack_lvl+0x241/0x360 [ 120.961042][ T7798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.961059][ T7798] ? __pfx__printk+0x10/0x10 [ 120.961078][ T7798] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 120.961102][ T7798] ? __pfx___might_resched+0x10/0x10 [ 120.961127][ T7798] should_fail_ex+0x40a/0x550 [ 120.961154][ T7798] should_failslab+0xac/0x100 [ 120.961175][ T7798] kmem_cache_alloc_node_noprof+0x77/0x380 [ 120.961196][ T7798] ? __alloc_skb+0x1c3/0x440 [ 120.961215][ T7798] __alloc_skb+0x1c3/0x440 [ 120.961234][ T7798] ? __pfx___alloc_skb+0x10/0x10 [ 120.961249][ T7798] ? __pfx_rtnl_newlink+0x10/0x10 [ 120.961274][ T7798] ? netlink_ack_tlv_len+0x6e/0x200 [ 120.961296][ T7798] netlink_ack+0x145/0xa60 [ 120.961314][ T7798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.961341][ T7798] ? ref_tracker_free+0x643/0x7e0 [ 120.961363][ T7798] netlink_rcv_skb+0x294/0x480 [ 120.961384][ T7798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.961407][ T7798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.961448][ T7798] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.961471][ T7798] netlink_unicast+0x7f6/0x990 [ 120.961499][ T7798] ? __pfx_netlink_unicast+0x10/0x10 [ 120.961516][ T7798] ? __virt_addr_valid+0x45f/0x530 [ 120.961533][ T7798] ? __phys_addr_symbol+0x2f/0x70 [ 120.961554][ T7798] ? __check_object_size+0x47a/0x730 [ 120.961579][ T7798] netlink_sendmsg+0x8de/0xcb0 [ 120.961610][ T7798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.961635][ T7798] ? aa_sock_msg_perm+0x91/0x160 [ 120.961664][ T7798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.961682][ T7798] __sock_sendmsg+0x221/0x270 [ 120.961706][ T7798] ____sys_sendmsg+0x53a/0x860 [ 120.961732][ T7798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.961747][ T7798] ? __fget_files+0x2a/0x410 [ 120.961772][ T7798] ? __fget_files+0x2a/0x410 [ 120.961800][ T7798] __sys_sendmsg+0x269/0x350 [ 120.961823][ T7798] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.961852][ T7798] ? do_sys_openat2+0x17a/0x1d0 [ 120.961898][ T7798] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.961922][ T7798] ? do_syscall_64+0x100/0x230 [ 120.961944][ T7798] ? do_syscall_64+0xb6/0x230 [ 120.961965][ T7798] do_syscall_64+0xf3/0x230 [ 120.961984][ T7798] ? clear_bhb_loop+0x35/0x90 [ 120.962012][ T7798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.962032][ T7798] RIP: 0033:0x7feef758d169 [ 120.962047][ T7798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.962061][ T7798] RSP: 002b:00007feef8444038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.962079][ T7798] RAX: ffffffffffffffda RBX: 00007feef77a5fa0 RCX: 00007feef758d169 [ 120.962092][ T7798] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 120.962102][ T7798] RBP: 00007feef8444090 R08: 0000000000000000 R09: 0000000000000000 [ 120.962112][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.962122][ T7798] R13: 0000000000000000 R14: 00007feef77a5fa0 R15: 00007ffdb60fc808 [ 120.962148][ T7798] [ 121.816630][ T7827] __nla_validate_parse: 18 callbacks suppressed [ 121.816650][ T7827] netlink: 256 bytes leftover after parsing attributes in process `syz.3.703'. [ 121.844586][ T7827] netlink: 136 bytes leftover after parsing attributes in process `syz.3.703'. [ 122.652458][ T7858] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.713'. [ 122.834543][ T7865] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.716'. [ 123.053065][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 123.498294][ T7896] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.726'. [ 123.883862][ T7913] netlink: 'syz.0.731': attribute type 10 has an invalid length. [ 123.966618][ T7913] veth0_vlan: left promiscuous mode [ 123.993725][ T7913] veth0_vlan: entered promiscuous mode [ 124.060346][ T7913] team0: Device veth0_vlan failed to register rx_handler [ 124.096557][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 124.111043][ T7923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.735'. [ 124.122249][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 124.132935][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 124.814185][ T7949] netlink: 'syz.4.745': attribute type 39 has an invalid length. [ 125.036052][ T7960] netlink: 'syz.2.750': attribute type 10 has an invalid length. [ 126.023779][ T7997] netlink: 'syz.3.765': attribute type 4 has an invalid length. [ 126.781302][ T8029] veth1_macvtap: left promiscuous mode [ 126.787175][ T8029] macsec0: entered promiscuous mode [ 126.879367][ T8029] veth1_macvtap: entered promiscuous mode [ 126.885808][ T8029] macsec0: left promiscuous mode [ 126.996792][ T8040] __nla_validate_parse: 12 callbacks suppressed [ 126.996812][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 127.018486][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 127.130035][ T8045] FAULT_INJECTION: forcing a failure. [ 127.130035][ T8045] name failslab, interval 1, probability 0, space 0, times 0 [ 127.153647][ T8045] CPU: 0 UID: 0 PID: 8045 Comm: syz.3.783 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 127.153672][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.153682][ T8045] Call Trace: [ 127.153688][ T8045] [ 127.153696][ T8045] dump_stack_lvl+0x241/0x360 [ 127.153720][ T8045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.153739][ T8045] ? __pfx__printk+0x10/0x10 [ 127.153758][ T8045] ? fs_reclaim_acquire+0x93/0x130 [ 127.153776][ T8045] ? __pfx___might_resched+0x10/0x10 [ 127.153795][ T8045] ? dynamic_dname+0x144/0x1b0 [ 127.153815][ T8045] should_fail_ex+0x40a/0x550 [ 127.153843][ T8045] should_failslab+0xac/0x100 [ 127.153872][ T8045] __kmalloc_noprof+0xdd/0x4c0 [ 127.153893][ T8045] ? tomoyo_encode+0x26f/0x540 [ 127.153914][ T8045] tomoyo_encode+0x26f/0x540 [ 127.153931][ T8045] ? __pfx_sockfs_dname+0x10/0x10 [ 127.153954][ T8045] tomoyo_realpath_from_path+0x59e/0x5e0 [ 127.153982][ T8045] tomoyo_path_number_perm+0x239/0x770 [ 127.154003][ T8045] ? __lock_acquire+0x1397/0x2100 [ 127.154028][ T8045] ? tomoyo_path_number_perm+0x209/0x770 [ 127.154050][ T8045] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.154112][ T8045] ? __fget_files+0x2a/0x410 [ 127.154136][ T8045] ? __fget_files+0x2a/0x410 [ 127.154162][ T8045] security_file_ioctl+0xc6/0x2a0 [ 127.154184][ T8045] __se_sys_ioctl+0x46/0x170 [ 127.154205][ T8045] do_syscall_64+0xf3/0x230 [ 127.154225][ T8045] ? clear_bhb_loop+0x35/0x90 [ 127.154249][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.154268][ T8045] RIP: 0033:0x7feef758d169 [ 127.154283][ T8045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.154297][ T8045] RSP: 002b:00007feef8444038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.154315][ T8045] RAX: ffffffffffffffda RBX: 00007feef77a5fa0 RCX: 00007feef758d169 [ 127.154328][ T8045] RDX: 0000400000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 127.154338][ T8045] RBP: 00007feef8444090 R08: 0000000000000000 R09: 0000000000000000 [ 127.154349][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.154359][ T8045] R13: 0000000000000000 R14: 00007feef77a5fa0 R15: 00007ffdb60fc808 [ 127.154386][ T8045] [ 127.154402][ T8045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.842885][ T8067] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 128.730769][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 128.756526][ T8097] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 128.899363][ T8104] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 129.410319][ T8120] netlink: 'syz.1.813': attribute type 9 has an invalid length. [ 129.464814][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 129.503494][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.812'. [ 129.527112][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 129.542946][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 129.729250][ T8128] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.816'. [ 129.961345][ T8140] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 130.296385][ T8155] netlink: 'syz.1.827': attribute type 10 has an invalid length. [ 130.305237][ T8155] netlink: 2 bytes leftover after parsing attributes in process `syz.1.827'. [ 130.314164][ T8155] team0: entered promiscuous mode [ 130.319256][ T8155] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 130.357873][ T8160] netlink: 'syz.2.830': attribute type 72 has an invalid length. [ 130.381329][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 130.928700][ T8180] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 131.414696][ T8201] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 132.191754][ T8226] openvswitch: netlink: IP tunnel dst address not specified [ 132.261910][ T8229] __nla_validate_parse: 6 callbacks suppressed [ 132.261928][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 132.292922][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.864'. [ 132.305392][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 132.315213][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 132.850986][ T8243] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.869'. [ 133.056290][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.203898][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 133.884618][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 133.912796][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.871'. [ 133.921707][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 133.982913][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 134.177196][ T8283] openvswitch: netlink: IP tunnel dst address not specified [ 135.643806][ T8305] xt_hashlimit: invalid rate [ 136.207787][ T8331] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 136.273798][ T8331] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3) [ 136.373991][ T8337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.383781][ T8337] bond0: (slave bond4): Enslaving as an active interface with an up link [ 136.701857][ T8354] netlink: 'syz.4.903': attribute type 10 has an invalid length. [ 137.615354][ T8395] __nla_validate_parse: 9 callbacks suppressed [ 137.615366][ T8395] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.920'. [ 137.729121][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.921'. [ 138.124581][ T8410] netlink: 'syz.0.927': attribute type 10 has an invalid length. [ 138.133831][ T8410] team0: left promiscuous mode [ 138.138716][ T8410] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 138.152940][ T8410] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.162207][ T8410] bond0: (slave team0): Enslaving as an active interface with an up link [ 138.202278][ T8410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.927'. [ 138.563335][ T8420] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.931'. [ 138.796670][ T8427] xt_CT: No such helper "snmp" [ 138.815658][ T8428] xt_CT: No such helper "snmp" [ 139.387963][ T8457] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.944'. [ 139.648254][ T8467] netlink: 148 bytes leftover after parsing attributes in process `syz.2.947'. [ 139.660380][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 139.684670][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 140.730336][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.955'. [ 140.766664][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.955'. [ 140.796385][ T8484] netlink: 'syz.1.955': attribute type 6 has an invalid length. [ 141.177719][ T8507] pimreg: left allmulticast mode [ 141.764941][ T8536] bond7: entered promiscuous mode [ 141.770509][ T8536] 8021q: adding VLAN 0 to HW filter on device bond7 [ 141.942132][ T8536] batadv0: entered promiscuous mode [ 141.968352][ T8536] batadv0: left promiscuous mode [ 142.294703][ T8551] xt_SECMARK: invalid mode: 0 [ 142.299510][ T8551] FAULT_INJECTION: forcing a failure. [ 142.299510][ T8551] name failslab, interval 1, probability 0, space 0, times 0 [ 142.389301][ T8551] CPU: 1 UID: 0 PID: 8551 Comm: syz.0.983 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 142.389328][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.389338][ T8551] Call Trace: [ 142.389344][ T8551] [ 142.389352][ T8551] dump_stack_lvl+0x241/0x360 [ 142.389379][ T8551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.389396][ T8551] ? __pfx__printk+0x10/0x10 [ 142.389414][ T8551] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 142.389437][ T8551] ? __pfx___might_resched+0x10/0x10 [ 142.389464][ T8551] should_fail_ex+0x40a/0x550 [ 142.389492][ T8551] should_failslab+0xac/0x100 [ 142.389515][ T8551] __kmalloc_node_noprof+0xe1/0x4d0 [ 142.389535][ T8551] ? __kvmalloc_node_noprof+0x72/0x190 [ 142.389568][ T8551] __kvmalloc_node_noprof+0x72/0x190 [ 142.389593][ T8551] __nf_hook_entries_try_shrink+0x330/0x730 [ 142.389625][ T8551] __nf_unregister_net_hook+0x5cf/0x800 [ 142.389654][ T8551] nf_unregister_net_hooks+0xd0/0x140 [ 142.389678][ T8551] nf_ct_netns_put+0x370/0x510 [ 142.389696][ T8551] ? __pfx_helper_mt_destroy+0x10/0x10 [ 142.389716][ T8551] translate_table+0x1d7f/0x2490 [ 142.389766][ T8551] ? __pfx_translate_table+0x10/0x10 [ 142.389789][ T8551] ? __pfx_lock_release+0x10/0x10 [ 142.389815][ T8551] ? __virt_addr_valid+0x183/0x530 [ 142.389833][ T8551] ? __might_fault+0xc6/0x120 [ 142.389853][ T8551] ? copy_from_sockptr_offset+0x6b/0xb0 [ 142.389874][ T8551] do_ip6t_set_ctl+0xe4c/0x1270 [ 142.389899][ T8551] ? nf_setsockopt+0x240/0x2c0 [ 142.389919][ T8551] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 142.389938][ T8551] ? rcu_is_watching+0x15/0xb0 [ 142.389956][ T8551] ? trace_contention_end+0x3c/0x120 [ 142.389984][ T8551] ? __mutex_unlock_slowpath+0x227/0x800 [ 142.390012][ T8551] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.390041][ T8551] ? __lock_acquire+0x1397/0x2100 [ 142.390070][ T8551] nf_setsockopt+0x295/0x2c0 [ 142.390098][ T8551] dccp_setsockopt+0x17c/0x1140 [ 142.390117][ T8551] ? __pfx_aa_sk_perm+0x10/0x10 [ 142.390142][ T8551] ? __pfx_dccp_setsockopt+0x10/0x10 [ 142.390159][ T8551] ? __pfx_lock_acquire+0x10/0x10 [ 142.390178][ T8551] ? aa_sock_opt_perm+0x79/0x120 [ 142.390196][ T8551] ? sock_common_setsockopt+0x37/0xc0 [ 142.390219][ T8551] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 142.390237][ T8551] do_sock_setsockopt+0x3af/0x720 [ 142.390256][ T8551] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 142.390273][ T8551] ? __fget_files+0x395/0x410 [ 142.390290][ T8551] ? __fget_files+0x2a/0x410 [ 142.390313][ T8551] __x64_sys_setsockopt+0x1ee/0x280 [ 142.390331][ T8551] do_syscall_64+0xf3/0x230 [ 142.390349][ T8551] ? clear_bhb_loop+0x35/0x90 [ 142.390368][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.390383][ T8551] RIP: 0033:0x7f5cd5f8d169 [ 142.390397][ T8551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.390409][ T8551] RSP: 002b:00007f5cd6e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.390426][ T8551] RAX: ffffffffffffffda RBX: 00007f5cd61a5fa0 RCX: 00007f5cd5f8d169 [ 142.390437][ T8551] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 142.390445][ T8551] RBP: 00007f5cd6e98090 R08: 0000000000000550 R09: 0000000000000000 [ 142.390454][ T8551] R10: 0000400000000780 R11: 0000000000000246 R12: 0000000000000002 [ 142.390463][ T8551] R13: 0000000000000000 R14: 00007f5cd61a5fa0 R15: 00007ffdfc69ae38 [ 142.390487][ T8551] [ 142.824859][ T8557] __nla_validate_parse: 4 callbacks suppressed [ 142.824879][ T8557] netlink: 96 bytes leftover after parsing attributes in process `syz.4.985'. [ 143.113850][ T8571] tipc: Enabled bearer , priority 0 [ 143.304010][ T8560] tipc: Resetting bearer [ 143.329129][ T8583] netlink: 'syz.0.995': attribute type 10 has an invalid length. [ 143.337050][ T8583] netlink: 2 bytes leftover after parsing attributes in process `syz.0.995'. [ 143.563561][ T8598] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.995'. [ 144.411116][ T8608] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1003'. [ 144.431726][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1003'. [ 144.448657][ T8608] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1003'. [ 144.458524][ T8608] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1003'. [ 145.790970][ T8560] tipc: Disabling bearer [ 145.799725][ T8583] team0: entered promiscuous mode [ 145.810568][ T8583] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 145.818812][ T8583] bond0: (slave team0): Releasing backup interface [ 145.836716][ T8583] bridge0: port 1(team0) entered blocking state [ 145.848043][ T8583] bridge0: port 1(team0) entered disabled state [ 145.857177][ T8583] team0: entered allmulticast mode [ 145.862328][ T8583] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 146.550233][ T8640] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1015'. [ 146.726453][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 146.758357][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1016'. [ 147.261485][ T8669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.995501][ T8698] FAULT_INJECTION: forcing a failure. [ 147.995501][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 148.044626][ T8698] CPU: 1 UID: 0 PID: 8698 Comm: syz.3.1040 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 148.044652][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.044663][ T8698] Call Trace: [ 148.044668][ T8698] [ 148.044675][ T8698] dump_stack_lvl+0x241/0x360 [ 148.044701][ T8698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.044718][ T8698] ? __pfx__printk+0x10/0x10 [ 148.044737][ T8698] ? __kmalloc_cache_noprof+0x48/0x390 [ 148.044759][ T8698] ? __pfx___might_resched+0x10/0x10 [ 148.044776][ T8698] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 148.044794][ T8698] should_fail_ex+0x40a/0x550 [ 148.044816][ T8698] should_failslab+0xac/0x100 [ 148.044834][ T8698] __kmalloc_cache_noprof+0x70/0x390 [ 148.044849][ T8698] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 148.044868][ T8698] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 148.044896][ T8698] genl_rcv_msg+0xb1f/0xec0 [ 148.044916][ T8698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.044949][ T8698] ? __pfx_lock_acquire+0x10/0x10 [ 148.044967][ T8698] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 148.044984][ T8698] ? __pfx___might_resched+0x10/0x10 [ 148.045007][ T8698] netlink_rcv_skb+0x206/0x480 [ 148.045024][ T8698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.045038][ T8698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.045068][ T8698] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 148.045099][ T8698] genl_rcv+0x28/0x40 [ 148.045111][ T8698] netlink_unicast+0x7f6/0x990 [ 148.045132][ T8698] ? __pfx_netlink_unicast+0x10/0x10 [ 148.045145][ T8698] ? __virt_addr_valid+0x45f/0x530 [ 148.045158][ T8698] ? __phys_addr_symbol+0x2f/0x70 [ 148.045169][ T8698] ? __check_object_size+0x47a/0x730 [ 148.045189][ T8698] netlink_sendmsg+0x8de/0xcb0 [ 148.045214][ T8698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.045234][ T8698] ? aa_sock_msg_perm+0x91/0x160 [ 148.045256][ T8698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.045271][ T8698] __sock_sendmsg+0x221/0x270 [ 148.045290][ T8698] ____sys_sendmsg+0x53a/0x860 [ 148.045309][ T8698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.045321][ T8698] ? __fget_files+0x2a/0x410 [ 148.045340][ T8698] ? __fget_files+0x2a/0x410 [ 148.045363][ T8698] __sys_sendmsg+0x269/0x350 [ 148.045381][ T8698] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.045404][ T8698] ? do_sys_openat2+0x17a/0x1d0 [ 148.045443][ T8698] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.045461][ T8698] ? do_syscall_64+0x100/0x230 [ 148.045478][ T8698] ? do_syscall_64+0xb6/0x230 [ 148.045494][ T8698] do_syscall_64+0xf3/0x230 [ 148.045508][ T8698] ? clear_bhb_loop+0x35/0x90 [ 148.045527][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.045542][ T8698] RIP: 0033:0x7feef758d169 [ 148.045555][ T8698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.045565][ T8698] RSP: 002b:00007feef8444038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.045581][ T8698] RAX: ffffffffffffffda RBX: 00007feef77a5fa0 RCX: 00007feef758d169 [ 148.045590][ T8698] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 148.045598][ T8698] RBP: 00007feef8444090 R08: 0000000000000000 R09: 0000000000000000 [ 148.045606][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.045619][ T8698] R13: 0000000000000000 R14: 00007feef77a5fa0 R15: 00007ffdb60fc808 [ 148.045639][ T8698] [ 148.429898][ T8700] __nla_validate_parse: 4 callbacks suppressed [ 148.429916][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 148.455996][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1042'. [ 148.467325][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 148.479168][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 148.686209][ T8724] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 148.701837][ T8717] netlink: 'syz.0.1048': attribute type 10 has an invalid length. [ 148.757649][ T8717] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1048'. [ 148.767853][ T8717] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.806214][ T8728] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 148.955082][ T8734] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1048'. [ 149.216538][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 149.250955][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 149.290307][ T8736] netlink: 'syz.3.1054': attribute type 1 has an invalid length. [ 149.328410][ T8736] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1054'. [ 149.395399][ T5848] block nbd3: Receive control failed (result -107) [ 149.632141][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 149.659925][ T8750] dummy0: entered promiscuous mode [ 149.693071][ T8750] macvtap1: entered promiscuous mode [ 149.698615][ T8750] macvtap1: entered allmulticast mode [ 149.713370][ T8750] dummy0: entered allmulticast mode [ 151.438241][ T8817] netlink: 'syz.3.1088': attribute type 5 has an invalid length. [ 152.646051][ T8863] netlink: 'syz.4.1108': attribute type 72 has an invalid length. [ 153.137817][ T8880] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 153.201357][ T8884] bond6 (unregistering): Released all slaves [ 153.548142][ T8895] netlink: 'syz.3.1122': attribute type 7 has an invalid length. [ 153.580169][ T8895] __nla_validate_parse: 25 callbacks suppressed [ 153.580187][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 153.625297][ T8893] netlink: 'syz.0.1121': attribute type 72 has an invalid length. [ 153.657579][ T8898] netlink: 'syz.3.1122': attribute type 3 has an invalid length. [ 153.681344][ T8898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 153.738783][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 153.758055][ T8900] nbd: nbd0 already in use [ 153.915953][ T8909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1129'. [ 153.940276][ T8910] netlink: 'syz.3.1127': attribute type 10 has an invalid length. [ 154.058033][ T8918] netlink: 'syz.2.1132': attribute type 10 has an invalid length. [ 154.061114][ T8912] 8021q: adding VLAN 0 to HW filter on device bond8 [ 154.066077][ T8918] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1132'. [ 154.104726][ T8912] bond8: entered promiscuous mode [ 154.112300][ T8916] netlink: 'syz.4.1131': attribute type 10 has an invalid length. [ 154.118807][ T8912] bond8: entered allmulticast mode [ 154.132890][ T8916] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1131'. [ 154.142094][ T8912] team0: Port device bond8 added [ 154.178907][ T8918] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 154.192101][ T8918] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 154.202270][ T8918] team0: Port device netdevsim0 added [ 154.306076][ T8924] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.370778][ T8930] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1131'. [ 154.914572][ T8945] netlink: 'syz.0.1142': attribute type 10 has an invalid length. [ 154.972048][ T8949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1143'. [ 155.102043][ T8955] team0: left allmulticast mode [ 155.119409][ T8955] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 [ 155.150030][ T8955] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 8955, name: syz.2.1146 [ 155.189358][ T8955] preempt_count: 0, expected: 0 [ 155.202450][ T8955] RCU nest depth: 1, expected: 0 [ 155.213847][ T8955] 2 locks held by syz.2.1146/8955: [ 155.224975][ T8955] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 155.234337][ T8955] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 155.247096][ T8955] CPU: 0 UID: 0 PID: 8955 Comm: syz.2.1146 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 155.247123][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.247135][ T8955] Call Trace: [ 155.247143][ T8955] [ 155.247151][ T8955] dump_stack_lvl+0x241/0x360 [ 155.247178][ T8955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.247197][ T8955] ? __pfx__printk+0x10/0x10 [ 155.247224][ T8955] __might_resched+0x5d4/0x780 [ 155.247243][ T8955] ? __wake_up_klogd+0xd5/0x110 [ 155.247267][ T8955] ? __wake_up_klogd+0x1c/0x110 [ 155.247287][ T8955] ? __pfx___might_resched+0x10/0x10 [ 155.247308][ T8955] ? do_setlink+0xfee/0x40f0 [ 155.247333][ T8955] ? __lock_acquire+0x1397/0x2100 [ 155.247363][ T8955] __mutex_lock+0x126/0x1010 [ 155.247393][ T8955] ? dev_set_allmulti+0x11c/0x270 [ 155.247420][ T8955] ? __pfx___mutex_lock+0x10/0x10 [ 155.247440][ T8955] ? __pfx_lock_acquire+0x10/0x10 [ 155.247466][ T8955] ? netdev_info+0x122/0x170 [ 155.247484][ T8955] ? netif_set_allmulti+0x1a2/0x380 [ 155.247511][ T8955] dev_set_allmulti+0x11c/0x270 [ 155.247540][ T8955] team_change_rx_flags+0x1a8/0x330 [ 155.247562][ T8955] ? team_change_rx_flags+0x29/0x330 [ 155.247585][ T8955] ? __pfx_team_change_rx_flags+0x10/0x10 [ 155.247605][ T8955] netif_set_allmulti+0x20e/0x380 [ 155.247638][ T8955] dev_set_allmulti+0x143/0x270 [ 155.247668][ T8955] del_nbp+0xce/0xb40 [ 155.247693][ T8955] br_del_if+0x145/0x320 [ 155.247708][ T8955] ? br_del_slave+0x12/0x30 [ 155.247731][ T8955] do_set_master+0x349/0x730 [ 155.247764][ T8955] do_setlink+0xfee/0x40f0 [ 155.247809][ T8955] ? __pfx_do_setlink+0x10/0x10 [ 155.247845][ T8955] ? __pfx___might_resched+0x10/0x10 [ 155.247868][ T8955] ? __pfx___mutex_trylock_common+0x10/0x10 [ 155.247891][ T8955] ? rcu_is_watching+0x15/0xb0 [ 155.247910][ T8955] ? trace_contention_end+0x3c/0x120 [ 155.247930][ T8955] ? __mutex_lock+0x397/0x1010 [ 155.247952][ T8955] ? __pfx_aa_get_newest_label+0x10/0x10 [ 155.247983][ T8955] ? rtnl_newlink+0xc4c/0x1d90 [ 155.248006][ T8955] ? __pfx___mutex_lock+0x10/0x10 [ 155.248036][ T8955] ? ns_capable+0x8a/0xf0 [ 155.248065][ T8955] ? rtnl_link_get_net_capable+0x168/0x340 [ 155.248094][ T8955] rtnl_newlink+0x141c/0x1d90 [ 155.248116][ T8955] ? stack_depot_save_flags+0x37/0x940 [ 155.248156][ T8955] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.248181][ T8955] ? __netlink_deliver_tap+0x561/0x7f0 [ 155.248204][ T8955] ? __pfx_validate_chain+0x10/0x10 [ 155.248221][ T8955] ? __sock_sendmsg+0x221/0x270 [ 155.248241][ T8955] ? ____sys_sendmsg+0x53a/0x860 [ 155.248257][ T8955] ? __sys_sendmsg+0x269/0x350 [ 155.248272][ T8955] ? do_syscall_64+0xf3/0x230 [ 155.248290][ T8955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.248333][ T8955] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.248360][ T8955] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.248393][ T8955] ? mark_lock+0x9a/0x360 [ 155.248413][ T8955] ? __lock_acquire+0x1397/0x2100 [ 155.248465][ T8955] ? __pfx_lock_release+0x10/0x10 [ 155.248504][ T8955] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.248528][ T8955] rtnetlink_rcv_msg+0x791/0xcf0 [ 155.248547][ T8955] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 155.248572][ T8955] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.248600][ T8955] ? ref_tracker_free+0x643/0x7e0 [ 155.248622][ T8955] netlink_rcv_skb+0x206/0x480 [ 155.248644][ T8955] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.248667][ T8955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.248710][ T8955] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.248733][ T8955] netlink_unicast+0x7f6/0x990 [ 155.248760][ T8955] ? __pfx_netlink_unicast+0x10/0x10 [ 155.248776][ T8955] ? __virt_addr_valid+0x45f/0x530 [ 155.248793][ T8955] ? __phys_addr_symbol+0x2f/0x70 [ 155.248809][ T8955] ? __check_object_size+0x47a/0x730 [ 155.248835][ T8955] netlink_sendmsg+0x8de/0xcb0 [ 155.248871][ T8955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.248896][ T8955] ? aa_sock_msg_perm+0x91/0x160 [ 155.248925][ T8955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.248944][ T8955] __sock_sendmsg+0x221/0x270 [ 155.248970][ T8955] ____sys_sendmsg+0x53a/0x860 [ 155.248995][ T8955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.249011][ T8955] ? __fget_files+0x2a/0x410 [ 155.249037][ T8955] ? __fget_files+0x2a/0x410 [ 155.249077][ T8955] __sys_sendmsg+0x269/0x350 [ 155.249098][ T8955] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.249158][ T8955] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.249184][ T8955] ? do_syscall_64+0x100/0x230 [ 155.249206][ T8955] ? do_syscall_64+0xb6/0x230 [ 155.249227][ T8955] do_syscall_64+0xf3/0x230 [ 155.249246][ T8955] ? clear_bhb_loop+0x35/0x90 [ 155.249270][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.249289][ T8955] RIP: 0033:0x7f9fd678d169 [ 155.249304][ T8955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.249318][ T8955] RSP: 002b:00007f9fd753d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.249338][ T8955] RAX: ffffffffffffffda RBX: 00007f9fd69a5fa0 RCX: 00007f9fd678d169 [ 155.249350][ T8955] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000004 [ 155.249361][ T8955] RBP: 00007f9fd680e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.249372][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.249381][ T8955] R13: 0000000000000000 R14: 00007f9fd69a5fa0 R15: 00007ffe07c374d8 [ 155.249408][ T8955] [ 155.250067][ T8955] [ 155.769797][ T8955] ============================= [ 155.774641][ T8955] [ BUG: Invalid wait context ] [ 155.779486][ T8955] 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 Tainted: G W [ 155.788068][ T8955] ----------------------------- [ 155.792910][ T8955] syz.2.1146/8955 is trying to lock: [ 155.798190][ T8955] ffff8880790e4d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 155.807093][ T8955] other info that might help us debug this: [ 155.812979][ T8955] context-{5:5} [ 155.816434][ T8955] 2 locks held by syz.2.1146/8955: [ 155.821536][ T8955] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 155.830621][ T8955] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 155.840478][ T8955] stack backtrace: [ 155.844195][ T8955] CPU: 0 UID: 0 PID: 8955 Comm: syz.2.1146 Tainted: G W 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 155.844220][ T8955] Tainted: [W]=WARN [ 155.844225][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.844235][ T8955] Call Trace: [ 155.844241][ T8955] [ 155.844248][ T8955] dump_stack_lvl+0x241/0x360 [ 155.844271][ T8955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.844289][ T8955] ? __pfx__printk+0x10/0x10 [ 155.844310][ T8955] __lock_acquire+0x15a8/0x2100 [ 155.844341][ T8955] lock_acquire+0x1ed/0x550 [ 155.844363][ T8955] ? dev_set_allmulti+0x11c/0x270 [ 155.844389][ T8955] ? __pfx_lock_acquire+0x10/0x10 [ 155.844411][ T8955] ? __wake_up_klogd+0x1c/0x110 [ 155.844432][ T8955] ? __pfx___might_resched+0x10/0x10 [ 155.844452][ T8955] ? do_setlink+0xfee/0x40f0 [ 155.844476][ T8955] ? __lock_acquire+0x1397/0x2100 [ 155.844501][ T8955] __mutex_lock+0x19c/0x1010 [ 155.844518][ T8955] ? dev_set_allmulti+0x11c/0x270 [ 155.844546][ T8955] ? dev_set_allmulti+0x11c/0x270 [ 155.844569][ T8955] ? __pfx___mutex_lock+0x10/0x10 [ 155.844586][ T8955] ? __pfx_lock_acquire+0x10/0x10 [ 155.844608][ T8955] ? netdev_info+0x122/0x170 [ 155.844624][ T8955] ? netif_set_allmulti+0x1a2/0x380 [ 155.844648][ T8955] dev_set_allmulti+0x11c/0x270 [ 155.844673][ T8955] team_change_rx_flags+0x1a8/0x330 [ 155.844693][ T8955] ? team_change_rx_flags+0x29/0x330 [ 155.844713][ T8955] ? __pfx_team_change_rx_flags+0x10/0x10 [ 155.844732][ T8955] netif_set_allmulti+0x20e/0x380 [ 155.844758][ T8955] dev_set_allmulti+0x143/0x270 [ 155.844783][ T8955] del_nbp+0xce/0xb40 [ 155.844802][ T8955] br_del_if+0x145/0x320 [ 155.844818][ T8955] ? br_del_slave+0x12/0x30 [ 155.844843][ T8955] do_set_master+0x349/0x730 [ 155.844868][ T8955] do_setlink+0xfee/0x40f0 [ 155.844900][ T8955] ? __pfx_do_setlink+0x10/0x10 [ 155.844927][ T8955] ? __pfx___might_resched+0x10/0x10 [ 155.844948][ T8955] ? __pfx___mutex_trylock_common+0x10/0x10 [ 155.844969][ T8955] ? rcu_is_watching+0x15/0xb0 [ 155.844988][ T8955] ? trace_contention_end+0x3c/0x120 [ 155.845006][ T8955] ? __mutex_lock+0x397/0x1010 [ 155.845025][ T8955] ? __pfx_aa_get_newest_label+0x10/0x10 [ 155.845051][ T8955] ? rtnl_newlink+0xc4c/0x1d90 [ 155.845073][ T8955] ? __pfx___mutex_lock+0x10/0x10 [ 155.845095][ T8955] ? ns_capable+0x8a/0xf0 [ 155.845114][ T8955] ? rtnl_link_get_net_capable+0x168/0x340 [ 155.845138][ T8955] rtnl_newlink+0x141c/0x1d90 [ 155.845158][ T8955] ? stack_depot_save_flags+0x37/0x940 [ 155.845187][ T8955] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.845207][ T8955] ? __netlink_deliver_tap+0x561/0x7f0 [ 155.845229][ T8955] ? __pfx_validate_chain+0x10/0x10 [ 155.845247][ T8955] ? __sock_sendmsg+0x221/0x270 [ 155.845266][ T8955] ? ____sys_sendmsg+0x53a/0x860 [ 155.845282][ T8955] ? __sys_sendmsg+0x269/0x350 [ 155.845298][ T8955] ? do_syscall_64+0xf3/0x230 [ 155.845316][ T8955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.845345][ T8955] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.845370][ T8955] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.845395][ T8955] ? mark_lock+0x9a/0x360 [ 155.845411][ T8955] ? __lock_acquire+0x1397/0x2100 [ 155.845446][ T8955] ? __pfx_lock_release+0x10/0x10 [ 155.845473][ T8955] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.845495][ T8955] rtnetlink_rcv_msg+0x791/0xcf0 [ 155.845517][ T8955] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 155.845540][ T8955] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.845564][ T8955] ? ref_tracker_free+0x643/0x7e0 [ 155.845582][ T8955] netlink_rcv_skb+0x206/0x480 [ 155.845604][ T8955] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.845626][ T8955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.845655][ T8955] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.845677][ T8955] netlink_unicast+0x7f6/0x990 [ 155.845698][ T8955] ? __pfx_netlink_unicast+0x10/0x10 [ 155.845715][ T8955] ? __virt_addr_valid+0x45f/0x530 [ 155.845731][ T8955] ? __phys_addr_symbol+0x2f/0x70 [ 155.845745][ T8955] ? __check_object_size+0x47a/0x730 [ 155.845767][ T8955] netlink_sendmsg+0x8de/0xcb0 [ 155.845793][ T8955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.845815][ T8955] ? aa_sock_msg_perm+0x91/0x160 [ 155.845847][ T8955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.845867][ T8955] __sock_sendmsg+0x221/0x270 [ 155.845889][ T8955] ____sys_sendmsg+0x53a/0x860 [ 155.845910][ T8955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.845926][ T8955] ? __fget_files+0x2a/0x410 [ 155.845949][ T8955] ? __fget_files+0x2a/0x410 [ 155.845973][ T8955] __sys_sendmsg+0x269/0x350 [ 155.845992][ T8955] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.846026][ T8955] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.846048][ T8955] ? do_syscall_64+0x100/0x230 [ 155.846068][ T8955] ? do_syscall_64+0xb6/0x230 [ 155.846087][ T8955] do_syscall_64+0xf3/0x230 [ 155.846106][ T8955] ? clear_bhb_loop+0x35/0x90 [ 155.846128][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.846150][ T8955] RIP: 0033:0x7f9fd678d169 [ 155.846164][ T8955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.846180][ T8955] RSP: 002b:00007f9fd753d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.846197][ T8955] RAX: ffffffffffffffda RBX: 00007f9fd69a5fa0 RCX: 00007f9fd678d169 [ 155.846210][ T8955] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000004 [ 155.846221][ T8955] RBP: 00007f9fd680e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.846232][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.846243][ T8955] R13: 0000000000000000 R14: 00007f9fd69a5fa0 R15: 00007ffe07c374d8 [ 155.846261][ T8955] [ 156.387787][ T8955] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 156.395778][ T8955] bridge0: port 1(team0) entered disabled state [ 156.416666][ T8955] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 156.436180][ T8955] team0: Port device netdevsim0 removed [ 156.448716][ T8955] bond0: (slave bond4): Releasing backup interface [ 156.471990][ T8961] team0: Mode changed to "loadbalance"