last executing test programs: 3.235100617s ago: executing program 2 (id=868): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.057217827s ago: executing program 2 (id=872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x0) 2.914696591s ago: executing program 2 (id=876): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) 2.811328963s ago: executing program 2 (id=878): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) socket$nl_route(0x10, 0x3, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000006000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1.975026579s ago: executing program 3 (id=899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x6000000000000001, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0812080003000601ff1fbdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x24000810) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x5, 0x60ff, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3acf1ec7ae70bb24"}}, 0x48}}, 0x0) r5 = gettid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r9 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000000400)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000001f80)="1a7554681345ba30013529bca047fa1bd416597e56244d479f7502e27fc37dbf9d01def369e9348e19064b24ada5d2ace7defd436591d652b289f8da304aad663e59f68a66308e2943fd4818a91fa0fb02ebd583098b20acb2f3102ebf2722c2c904bd67279f467b2ed3629d17230512c7b3a1219417279b0e71f1bddb2de99cba34081426e593d588b065ee5421425574a5c22e1f4d746452ec25c5fdf38688174607a2174da0d8de069e213959a7cb33d7129eb03f4367193365499460186c84352b23b18dc9aae55fb6ab39df866c4af226d9a19f5eb5ad33f7178d0cc03be0dbb5caed254c7a6357063b0216ee3f6b51530a3e1a21ac16612614d799ec84b49300ed5344c7482b0d587291bfcebed3d774c390240ca8aef1046eacd99b50327b1018747274e848d9276998555ea09691235cf3b7cb327264cadb14f9ed82b443edf28034be10793e73e4290d113cd4a8a8eea2ed34eb988518e35c3136c94ccf3572c51fa6a6d890f625d0cbbbe6731ab02d6f924efbb65a97433c5d057f75f7f1f9d63400cf3024a59972638555659cf4718d8aa9a8e319e7b2beefec83c34ae5fe9c190a8e833682f39da612998ef60ce03b4e3b63a8307114ffed1dc1a05d88913878ddd1147fc5f4665e0671993e3fefeaf701390f9ebf3e186a44f58cb1abc37b185e4a78b45666bff60ccd123c552bebd229202f3c5c9e24058055524ff12dfac85d60dbade118a376e8f190580d50de88ef3d9f2eb43a994dee92bf85e19aa57e08b1bb426bbcb2c53d4bcd9dc962f535e6afd873a24ce8ced398220418082f89338d7ed9958d474dfa7f20bba11f96f90867e8702a3a7240a42cb12810bc335c1d3521c142b92a564c0ae0a64d8c961267461cda7376e94d8a59e8520d1916a4216701017f44e80e09ed5e723b578aac87b35828ffd5e41fc9c3af5c265ba11cb4eca52b3290d25eeaef6f98ceee8abcc5bc829465411ac068dc9d4c5e337f82ca6a360acd89370500e574427f1ca86014eb42053ca0214ffac0a6a25365d57ecc8aea748d14605bbfb89a4edfca11f07db1369d79535a467e23141adf6c798caa0726cd5d95f7cbd1b42c65eea26d3e30779340f67579bce36c26bc7cbfdea732d49c56d9ed191fb93984e55f833a0334b6e5b359f9c873001d278267b68742af4907deafa562d70d3eea750f562251364aeea5ed6d2634d1af1321a8f4635e42337441e2bbfa40fe770326eca0e04004cc272530ee93c6a77e86f0bfc2fe0bfbaf1f43440bcc47ed21ea0cae01d1e1d693ccccdc933ed690bd304b65bb8c48bc00f1cb0d28e3f65c9e6b584ac948d6084c72be0f8ec2082836bea50b930e31639d4c79b9350dd6a7dcf74e79cec6ce7d80c4ce4e0ae63d8575dc663b5651a92f4410e89fae04a7a5605d9a13e1f07e27b0a3d1274b034cdf8203804c7be31b7e00e8b99117fa6ddf0d1a20fb1bbbb4ef533798e15d83158c7212b4f6261a4a1044f659355cd47f2d7cab66ac66b6e0e042735b95f2575e1545ea30a9db9c984ead6a3b1919efd441135a7cae5389b162df86637cd3aae32c608ddba3091f80b111f8d0be91e30f2562072071867c539be261297b7c09e8d2bdfde4c1911fe9f1c00e92e1e3b4d012741b5052b4f7e4bad323c28f2dda9fdf10250314de8b056f556d615924e13955b179d16bfbb594afa5701b067f6987220ec77c157e25660c290eb47739e50e1308dd0b31a1a675787f78c0efa2839730902e04678f72e7357f8144133718f02ae3e818bec502d85c886d0fbd83cece6a55bd84f6b5fea46accdbd562f9a9ed3b4e1bd16ed738a9d701944dfaacd762497d5978547b9d851e265e0521196383fb01b491d19f862f35534a33fa57accf40d41effcb81e5826bcab6006ff54e1716b093cafabacb194a854be38e745f6ef8552e39e827df33b888ace4f9749e7c9758c57b7d10484ff74551ef45374dc67b4c1f83df502daf2737393b16959bc22157a35d68fb95549fd673688caa56b5ee39f78307daf6a72ec2b2d267f204e7ddc986345a372fc1505dfb5bce8058b2e868d221c5cf59f7c824e653d700c068ff2534b31df6be2a32334e3ea30a008c8d9af89cce2faca12597c3bdcbbbe971b91a9cdd063971497b014b5ed8510ea9ae5b2f4dd44a0ebfd94d547a38a1792b6cd6ae084d3e8b06f1dd8beb642402d124f9f426657c089b46247a4e8307827f3f40cbd2461a491a06e3f5ac100856e9f9d867f0e72248b673463beae2fefe512f9e6f31e1bb000c320e9cde4c73412d991a30e046ded54919323edcfb88e13f7b13762955a3dccf87f0218e427d8a2beeaa0dbca2985a5894ee9f874c19b77a4327b2cbea95300ef19b93ce2d6ef3b0080c874d380494e3020a118d817b7f97c848b5a5d6908b5986b4262fa612d631486ba5293e79b7e1d2482eb9ecb28f7e15f08943a84222f5da294d62d0e0e99325fc0af6443cdfb0eb40c62f2257db1301a9ea4b51c5146775495a53eaa55bc981de1eb1bc913fe09fe863a582b98b635a272c9b4889dfbe654a695bfaa1289b393452c38673a4982fff910224493316da010525c70bf2801bbfe46af0079fb20f6d453362b9027e9a872708e428f881cce1f025b6eafaa43fe155f96eb1cd69a7ed2265e7df606bd80ee4fed7f5607d7cb5eb9eb77e87ad4bae803989d3eb2bbcd58ccba4f229fbf6e5f642a7a501852ca23bde5b29c790acdf2299def8e9f74f61277e4dcf189bd9a89c03c37b860a609cd68207031ede694deea002e1e978edf7829ecdb6c444e2339820a3448e6e8a0ee6233987c9af26243873f139790bca34746993d6f24a2c136464f76ba30bebc95972f2d9917f875fa952da780cc94df82cf126486d4329271cc246ef8d3893081378e8eb538f3e9a433225da6b74cc2c49f26aa281a7e34b9d405cbb0927c16ee76fb9459ed6cb7d3e340d25d6c0b0d39dd35574ac1818df7daf26da7859cdac4b4c6dd3037e80e6e5ff5af2d2a6dcfc2ec470c4aad4f2945c8d9ae7dc3a3f55f570a373e5524864f94823dac7847670db501bc01aced1c6fc03410b522a6b88a8d3e6ed0d2fdfeb92064bfe8efa5d94932301a4df3bd6e7c90598dc4a1896be9308394edc4baa7586e87604a92024917c1c61dd4d3811a72ae929e320658b6420d741a9864b3503c2da9d2e707c1897cb89bc93df5d9ec5ab848da8b4bc327c005fffc4e4e3e6bfe292d3ea1cac177316917686bd938a99ed2ace5a10d512029d0382b2a1f3f75056c2d41c20d5a3393152f1a0cc25d76c542fe5b55880645670f1358d975bd130ad6d21464e2f24cb652bac99f68a1792ad608ce839d7699b1eee996adc22617233685582a4fa37ec5d07ddacb3a266e48b68b8e5562dce0997774d4f830f1e5cef572fc383166e91187ce4470b1552d9661e9256f0a2867c96a35c0e40368eb531ed0ae1be6298b1bb0a8ce86ca7b707f4762f437f5bdb4eba490efc491f1d2be137b66545f205b8237ae79ab9b55a8f745eded68225d5102f349ae98a98e691e1b3bc140edd3b182fc5ca6ba57c312b466a809eb49c1f547626b284248c3dc05f8a7d76a0031d59fa4e2f185fbe8b82c3a50e59f47d48edf61e95956526e17839ef0bb8d2fecc95a16ab946f783279070fa07638aaae38a5d6ad9ba50f34a0fe046695ec023b5d9bf04c827d8c46f3694a5d9c55139f97e3d57053d197de9c0e587d999b286cf958d453706ad054a7d347957e2ba38024b6446f3303bf23daa16b1432459225917fb0219cff6665bbc9d4c1239eb45855500d2c2821ed692900e74446817a0752450ec18082658150b6457c8833a8c0ee4fd29dd9066ec8d9d064e6901ea5c570a132a0db9d03cb379b97c1f939f8547fb29c7edcded011954d89838a65bf896b1604bf4b5b75b5fe39522bf0f3f7a65e3eb15b2d79a8568c43191680e991230b27877cb91c0fa7406c6f767c88f36c1b162349c0b630a33126b39aab779180fc50a57fce2cd76cd0c6162d22c1e5e62ed6de31440922c86e96a0d2977dfa242ae1319feb918efb9f6946def1d1af39fb538bfc8ad0abe8451c8688ff67169ac0f10b4ddc2d1a316d7ebb4e2ea6ec4896d990ff7d8faa556a13f099578b75e71339d56e7c056125e91dafb669ba5be79ca093090b12bc896092abe9260691010ea81ad6cb80d366940f19b5c7d40803b9313e957f42b87cb4873b9d96c7d72786cecdbd59132cdd01905bf34bf2eb865ef81617a91c8ef98a3d1e93fa3aa0d1660770d0ef9e23fdb7f726aee2848e2752d55bd5935eb451190d0a0047e71d82b21ed78fe1e7f518c5c3a60d4e86a7560eafc867314b1dd26553e7c5dacba95efe52c4acf55c0be99a77049102cdd4f283efaa540867bb308afbf1e77e109597692b2374ebabdc357cc53eaacdd13fff6b8d5c59d224555b0188012e48f20384d9a0368d7286b964147f7d6c18474ba57a22ea54942e8b31b50c6f76db4e93b592ad75355ee5c2135c69b466c20239be9ce9e761137b4a1223ed7435a27bf5a9838ced25869759afe2bae0483e39a628e4e4186eb8536f6f74ec8cb340e040f16c8d94af004fa750400c2ca9c94a480bdddb3df0c10836f77e7ca48e48de188d061f29b3071f724ab35efe3232ae82f63173239902dcf75d0e9f4b7d306c9bd06c5196dc6808e005075e898233f0a80bc294acb08650b0cee93aba362bf44c27f7415094043506457e0d15d10fd31019019ac1a17bc56d912713fa9ef6c257301898aee5af8e2da969dd27f2db65b6f3c62a8640fe83f2587895ebbf946ef44b26f2fa1575e1db95c7610e7da73c6e2eab0cf9f733b329fa8ac80a18d3b9d837f61fa2a8817b9b6bf7db299238b134b28c70dec93e71be30aa0d4c4be4cc3654afde89d2f29276d97b7acc660741b5e10d0f8977f6228f9ecc6943efbf54c47719f031f49bc294ccee302aab5a3d38d7cafd8d022eaa950164409574353f316b45a339aa06323e20052e331e4894c5a52da92824c5b398e2dd6f482448c3bf919e4c49ff29d6439b5c18550351386055119af7062f1075949c32fc205a1b183eca805205d3a33db26f452df639178aab101d58f9b0833e90828ca1101ba0a48610827bb13fafb325985dc2ed1384e9aa15647e424463df36a673dd6fd9e8e87902adaa6838e3acb82c2ea32a464bb4f2faef6a3b5093b440f9af26d949509b6c716fa9ef533f9cc4719f691ce6b8bc6c279063ab003cac1667f9c2a7b2de589dedafe5ba650ab72b05d8b80a2d24bba1e20c386bf757fd78618c9905680ad68f91338cfbfebf96941e39d56c26fafa4ea9f444d613270459d94da6f5e9ede2db754032dbf7e0bdf16b28b767866efdce452d144d254044621d8953d58a3e4e49320aceaecc2f637badcda7866dfeec9485b6baf2528945c877d8cb95f39239dce2a649f755c660c5a0b8ecb56aa216e60a0881130e0aaaac3f03c366d4419480ba39c0600932dde1ff80ced3ceaea6e5f9442b7e9e36fcb1b4d3caf359bf55560bbc40d64b2468e6952006115081f4bb0dbf5e20c8e9b285e2d664cf1e8263bc444b836e7066d9325e0f8036bc6979acf7330125b4c0d0c3e87c2e5fdf3de8d504d68613293dd615f38fec9e1d69c21ec863f0d44e57633fc0e1984c79116fe294ec11ae4dd2fdb4d97ffa3041d639718c8b3ac0bf28aa216c2852b925ff32e05e5cacd641be92fc3502efefb71ea06f4c5409615da61167fea7749c23bcc3ad9cc", 0x1000}, {&(0x7f0000000180)="f9c29cfdcd9ff5b17402f4b58cb82c4d14bce3fe4e1ad66db32660684b7ab56c4e75623f8a27425c32c6a04da6fa87891fad7d516463d21f4ac0d5c9933a287554c3abfca62121c0b99f6c239d26e9613a225ab5137a507977e30452243335554d1c258da19e72c3bca0466f0f2b", 0x6e}], 0x2, &(0x7f0000000500)=[@rights={{0x30, 0x1, 0x1, [r3, r4, r0, r1, r1, r1, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r7, r0, r1, r8, r9, r1, r1, r0, r0]}}], 0x88, 0x4000081}}], 0x1, 0x8081) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80, 0x0, @void, @value}, 0x1f) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r10, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001006962000034000280080003006400000008000400090000000800030051bd000008000300fc00000008000300a90f0000080001001b0000000c00098008000200000000001c000980080002000e00000008000200e5d8000008000200060000005c0004800900010073797a31000000002c000780080002000300000008000400f50c00000800020005000000080001000000000008000100100000000900010073797a31000000001300010062726f6164636173742d6c696e6b0000e8000280080001000300000008000200020000004c000380080002008100000008000200ff01000008000100000400000800010008000000080002000000000008000100ffff00000800020005000000080002005d0000000800010001000100040004002c0003800800020007000000080001000000000008000100aede010008000100ff7f000008000100810000001c0003800800010007000000080001000600000008000200050000003c000380080002000200000008000100b73500000800010007000000080002000002000008000100ae0d0000080002000700000008000100090000001400028008000100fdffffff08000100060000000c000980080002005b000000600005800800010065746800080001006574680007000100696200003c000280080004000000004008000400040000000800010011000000080002007f000000080003"], 0x2ac}}, 0x0) 1.866313626s ago: executing program 2 (id=901): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x2b8, 0x2b8, 0x130, 0x2b8, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0xffffffff, 0xffffffff, 'bond_slave_0\x00', 'bridge0\x00', {}, {0xc10c421ca43f3e7e}, 0x88, 0x3, 0xb3}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x29}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0xff, 'wg2\x00', 'macvlan0\x00', {}, {}, 0xff, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x0, 'veth0_to_bond\x00', 'gre0\x00', {}, {}, 0x89, 0x1, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x44}, 0xffffff00, 0xffffff00, 'batadv0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x2f, 0x7, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000000)=0xd, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x40000c, 0x0, 0x0, 0x41000, 0x56, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r7, 0x89e1, &(0x7f0000001080)) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r8) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x18, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000005c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 1.723024735s ago: executing program 3 (id=903): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x5, 0x81, 0x1, 0x8}, {0x8, 0x7, 0x5, 0x4}, {0x2, 0xf9, 0x2, 0x6}, {0x5, 0xe4, 0x6, 0x8}, {0x4a, 0x75, 0x3, 0xdb8}, {0x4, 0xe, 0x5c, 0x5}]}) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f0000000300), 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="140002000000000000000000f1"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x5, 0x81, 0x1, 0x8}, {0x8, 0x7, 0x5, 0x4}, {0x2, 0xf9, 0x2, 0x6}, {0x5, 0xe4, 0x6, 0x8}, {0x4a, 0x75, 0x3, 0xdb8}, {0x4, 0xe, 0x5c, 0x5}]}) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f0000000300), 0x0}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="140002000000000000000000f1"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) (async) 1.551469174s ago: executing program 3 (id=907): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f00000007c0)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7, 0x0, 0x0, 0x1000000}, 0x7f}], 0x4, 0x4022, 0x0) 1.343745192s ago: executing program 3 (id=910): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000030000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = accept4(r3, &(0x7f00000000c0)=@hci, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, 0x0, 0x1001) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) bind$xdp(r7, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r8, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 1.343089111s ago: executing program 1 (id=911): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r4, 0x108, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x12}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x70}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000003c00), 0x0, &(0x7f0000000200)=[@iv={0x78, 0x117, 0x2, 0x61, "8c8c0918aaf356f55041fc7f3be580b3862d2ead3c57c25d6561d8f00c23eb291dba5da11e92ee45fd4c03d984c2b3b8c9aec806a88a06b19ce3b3db5149a9dfa6f077b50bafcf1ce7b8a9d3b8b7cf02897de2e7e6413e3a1b2742e643dcc28a07"}], 0x78}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r6 = socket$inet(0x2, 0x2, 0x0) bind$rose(r5, &(0x7f0000000540)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @null}, 0x1c) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a000100800000000000000281"], 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x0, @default, @rose={'rose', 0x0}, 0x3, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x401, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1.342256768s ago: executing program 0 (id=912): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="04002cbd0104fcdbdf25860000000800a0000700000005001821300000000800a000000000000800273f5422c500080026006c090000050019010600000008002600b414000008009f0005090000a0007ba55e9035d86b4b3b9a4c33009a96fc60565892e61a0e1d434c2441e17b44c0c0744876a5b5740f17b9d5c2713bf5854ffbab7aa8229a625635f80e0ebf1b65"], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x20004845) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000340)="ea", 0x1}, {&(0x7f00000006c0)="8634e401a03b5471c97ea9e855bcc2428057a2f8bfe642caf2f49451fe53151232d8718f395aee70b3568041cbb5aecc5844f192390ca0714e3cb6bcf28a59e11e7a59d8ede6fc5e626ee16b94691c933ea78ef57cc7c8ff8df970442d9f8a04270554bdab9adcd6be7d244f5de0d16075b9d12285923b189677d0c24423e29a54fd09f5f431b04b09f239b561b47eb8d9222ea3ddddd0d6025448059c5e5d0afb6c8aed8c6f8b1a66b2ee55736fbed61cf9fee7b4dfd4638f", 0xb9}, {&(0x7f0000000780)="0a26f5bf9760e4df2c796ffe4d94dae31ff546a0029360543343ad32137e7b50515c519046ee461a5255a6c57b5b4a5e20bb405519748926463e9d7c995b10eb47efd283da2109d0bdc6ea85bc2eb7f33d97c00a64fbb0cc0aa6274e3750d8855a7c91338cb2189f3dff8763fc3f37592328c72c2832dc605a32cb8a14327d0058089613fcc755f207aa1e61291f9f0df92bd2275c", 0x95}, {&(0x7f00000003c0)="d7f3d227fad68dc277504463cda64b538d012b9bd2439cc3234d840759c960b7b9cfd5e29995ef5d6333", 0x2a}, {&(0x7f0000000400)="cdf7a4479c5dfaefc9efbf4323ce3cc947bf4cb8abf2b581a6802668f277c112f8dae4379bc1dcda61dd91", 0x2b}], 0x5}}], 0x1, 0x0) shutdown(r7, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000017000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r11, 0x89e0, 0x1000000000000) 1.239347911s ago: executing program 4 (id=913): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e2c, @dev={0xac, 0x14, 0x14, 0x20}}, 0x4, 0x4, 0x4, 0x4}}, 0x26) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 1.14448654s ago: executing program 1 (id=914): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800000000000000010000", @ANYRES64=r0], 0x80}}, 0x400) 1.126043745s ago: executing program 4 (id=915): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x4040004) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x58}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}]}}]}, 0x88}}, 0x24040084) (fail_nth: 5) 1.078069864s ago: executing program 0 (id=916): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x174, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2c00}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xc4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8a3313bd55416542e1f15e200c9b84a566fcdbc86be79ef49da55d165e98c37e"}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7ced7b03c73db68d57126e6aac8f30d0f607483d725825e381ae2be540c32093"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffaa71}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x174}}, 0x41) 692.226577ms ago: executing program 0 (id=917): syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "af", "dd"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0x0, 0x70bd2c, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x212, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x78}}, 0x404c) 658.934568ms ago: executing program 4 (id=918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000400040000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 657.588093ms ago: executing program 2 (id=919): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$rds(0x15, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x20, 0x8, 0xfffffff7, 0x80000000, {{0x4a, 0x4, 0x0, 0x3f, 0x128, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0x2b, 0x8c, [@dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010100, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x2, 0x0}, @remote, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x39}]}, @ssrr={0x89, 0x7, 0x62, [@private=0xa010101]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x5c, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x18, 0x2, [{0x0, 0x2}, {0x6, 0xa, "d5d194f5ab80d43d"}, {0x6, 0x6, "6d021480"}]}, @cipso={0x86, 0x26, 0xffffffffffffffff, [{0x5, 0x11, "11ce9ec5efcbdf104b26566da7f1ff"}, {0x5, 0x5, "e48d6d"}, {0x0, 0xa, "3ad127d2b55e5a48"}]}, @lsrr={0x83, 0x1f, 0xfb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @cipso={0x86, 0x43, 0x3, [{0x0, 0xd, "1cdca5a5348d51ffc33b8e"}, {0x5, 0xc, "0a6ac5ed4a85c96702b4"}, {0x7, 0x12, "e818bf814a9a2ff6e11b44ad25f197f2"}, {0x0, 0x8, "5193fe3e0d14"}, {0x6, 0xa, "ad12e9a8fa8ccc86"}]}, @timestamp_prespec={0x44, 0x34, 0x9a, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@local, 0x1}, {@multicast1, 0x1}, {@remote, 0x8}, {@private=0xa010100, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x66}]}]}}}}}) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@report={0x4c, 0x20, 0x400, 0x70bd29, 0x25dfdbfc, {0xff, {@in=@multicast2, @in=@loopback, 0x4e24, 0x7, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x16, 0x0, r9}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x801) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000940)=@updpolicy={0xc8, 0x19, 0x200, 0x70bd28, 0x25dfdbfc, {{@in6=@local, @in6=@private1, 0x4e24, 0x4c, 0x4e21, 0xf, 0xa, 0x5951c5ef696abf28, 0x80, 0x33, r7, r9}, {0x2, 0x6, 0x895, 0x8000, 0xff, 0x0, 0x766, 0x4}, {0x8, 0x5, 0xd, 0x9}, 0x31, 0x6e6bb8, 0x2, 0x0, 0x4, 0x2}, [@replay_val={0x10, 0xa, {0x70bd29, 0x70bd2c, 0x80}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44}, 0x44000) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fff7fff, 0x4) 535.508695ms ago: executing program 3 (id=920): syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x2, 0x56d, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x20}}, 0x4040004) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000340), 0x1000, r0, 0x0, 0x1000000}, 0x38) 535.271809ms ago: executing program 1 (id=921): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}]}, 0x40}}, 0x0) 494.432679ms ago: executing program 1 (id=922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0xc00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x4, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) 425.086281ms ago: executing program 0 (id=923): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000008000000060000000100009308000000020000000800000004000000002e2e3e005f2e"], 0x0, 0x38, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x8848, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000000000000000000000000000000008"], 0x38}}, 0x0) (async, rerun: 32) write$cgroup_int(r0, &(0x7f0000000200), 0x12) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 351.397716ms ago: executing program 4 (id=924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0xa00, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0) 331.643335ms ago: executing program 1 (id=925): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e2c, @dev={0xac, 0x14, 0x14, 0x20}}, 0x4, 0x4, 0x4, 0x4}}, 0x26) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 231.284993ms ago: executing program 4 (id=926): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000015000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 163.278188ms ago: executing program 0 (id=927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x174, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2c00}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xc4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8a3313bd55416542e1f15e200c9b84a566fcdbc86be79ef49da55d165e98c37e"}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7ced7b03c73db68d57126e6aac8f30d0f607483d725825e381ae2be540c32093"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffaa71}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x174}}, 0x41) 157.157268ms ago: executing program 3 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130007000000080014"], 0x4c}}, 0x0) (fail_nth: 2) 102.975464ms ago: executing program 1 (id=929): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x14}, [@RTA_GATEWAY={0x8, 0x1d, @loopback}]}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb547, 0x5d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x60000081) 7.882791ms ago: executing program 4 (id=930): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0xfe, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 0 (id=931): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8, 0x1d, @loopback}]}, 0x24}}, 0x0) 0s ago: executing program 1 (id=933): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8, 0x1d, @loopback}]}, 0x24}}, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. [ 74.305334][ T5820] cgroup: Unknown subsys name 'net' [ 74.452223][ T5820] cgroup: Unknown subsys name 'cpuset' [ 74.461115][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.885756][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.634787][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.649193][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.657332][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.671389][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.689234][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.710523][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.729124][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.730613][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.744968][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.749293][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.753774][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.760657][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.774446][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.774966][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.783304][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.790829][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.796765][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.803735][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.811124][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.824736][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.825732][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.849893][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.857766][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.867698][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.870591][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.509565][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 80.582452][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 80.699152][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 80.727150][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 80.816117][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 80.892604][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.899983][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.907646][ T5832] bridge_slave_0: entered allmulticast mode [ 80.915346][ T5832] bridge_slave_0: entered promiscuous mode [ 80.958094][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.965403][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.973070][ T5832] bridge_slave_1: entered allmulticast mode [ 80.980818][ T5832] bridge_slave_1: entered promiscuous mode [ 81.015239][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.022625][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.029910][ T5837] bridge_slave_0: entered allmulticast mode [ 81.036887][ T5837] bridge_slave_0: entered promiscuous mode [ 81.077971][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.085443][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.093487][ T5837] bridge_slave_1: entered allmulticast mode [ 81.100521][ T5837] bridge_slave_1: entered promiscuous mode [ 81.135219][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.142636][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.149893][ T5840] bridge_slave_0: entered allmulticast mode [ 81.156828][ T5840] bridge_slave_0: entered promiscuous mode [ 81.191878][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.199321][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.206580][ T5842] bridge_slave_0: entered allmulticast mode [ 81.215260][ T5842] bridge_slave_0: entered promiscuous mode [ 81.226635][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.239195][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.254246][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.261881][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.270507][ T5840] bridge_slave_1: entered allmulticast mode [ 81.277716][ T5840] bridge_slave_1: entered promiscuous mode [ 81.297560][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.305215][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.312644][ T5842] bridge_slave_1: entered allmulticast mode [ 81.319665][ T5842] bridge_slave_1: entered promiscuous mode [ 81.365268][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.431329][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.455748][ T5832] team0: Port device team_slave_0 added [ 81.465999][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.476158][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.484063][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.491770][ T5830] bridge_slave_0: entered allmulticast mode [ 81.499267][ T5830] bridge_slave_0: entered promiscuous mode [ 81.509394][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.522144][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.545509][ T5832] team0: Port device team_slave_1 added [ 81.554281][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.580409][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.587558][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.595380][ T5830] bridge_slave_1: entered allmulticast mode [ 81.603183][ T5830] bridge_slave_1: entered promiscuous mode [ 81.674308][ T5842] team0: Port device team_slave_0 added [ 81.711339][ T5837] team0: Port device team_slave_0 added [ 81.718260][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.725520][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.752044][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.765917][ T5842] team0: Port device team_slave_1 added [ 81.813668][ T5840] team0: Port device team_slave_0 added [ 81.821872][ T5837] team0: Port device team_slave_1 added [ 81.832151][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.839782][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.866826][ T5839] Bluetooth: hci0: command tx timeout [ 81.870479][ T5839] Bluetooth: hci1: command tx timeout [ 81.872701][ T51] Bluetooth: hci3: command tx timeout [ 81.884104][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.912639][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.919715][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.945700][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.956335][ T51] Bluetooth: hci4: command tx timeout [ 81.958486][ T5839] Bluetooth: hci2: command tx timeout [ 81.965367][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.981078][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.992127][ T5840] team0: Port device team_slave_1 added [ 82.064425][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.072785][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.098993][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.164304][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.172491][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.199839][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.230281][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.237248][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.263947][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.277743][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.285226][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.312571][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.341138][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.348204][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.378152][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.405784][ T5830] team0: Port device team_slave_0 added [ 82.426110][ T5832] hsr_slave_0: entered promiscuous mode [ 82.433925][ T5832] hsr_slave_1: entered promiscuous mode [ 82.446747][ T5830] team0: Port device team_slave_1 added [ 82.572862][ T5842] hsr_slave_0: entered promiscuous mode [ 82.579520][ T5842] hsr_slave_1: entered promiscuous mode [ 82.585618][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.593706][ T5842] Cannot create hsr debugfs directory [ 82.609001][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.616395][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.642484][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.660979][ T5840] hsr_slave_0: entered promiscuous mode [ 82.667337][ T5840] hsr_slave_1: entered promiscuous mode [ 82.673679][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.681834][ T5840] Cannot create hsr debugfs directory [ 82.718792][ T5837] hsr_slave_0: entered promiscuous mode [ 82.725208][ T5837] hsr_slave_1: entered promiscuous mode [ 82.731944][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.740194][ T5837] Cannot create hsr debugfs directory [ 82.746643][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.754408][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.780907][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.923194][ T5830] hsr_slave_0: entered promiscuous mode [ 82.929745][ T5830] hsr_slave_1: entered promiscuous mode [ 82.935921][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.943530][ T5830] Cannot create hsr debugfs directory [ 83.429402][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.455858][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.474269][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.491788][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.565140][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.575714][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.602060][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.633142][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.706349][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.734443][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.763723][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.779862][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.877923][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.906018][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.916303][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.928235][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.936649][ T5839] Bluetooth: hci3: command tx timeout [ 83.936729][ T5834] Bluetooth: hci0: command tx timeout [ 83.943344][ T51] Bluetooth: hci1: command tx timeout [ 83.977443][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.009112][ T51] Bluetooth: hci2: command tx timeout [ 84.009804][ T5834] Bluetooth: hci4: command tx timeout [ 84.056942][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.084273][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.100518][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.111623][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.144650][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.156299][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.179999][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.187201][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.246369][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.253574][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.272076][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.308994][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.316202][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.357364][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.364554][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.506059][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.538130][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.610732][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.642079][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.678811][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.693000][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.700198][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.747776][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.754988][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.797041][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.804234][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.830737][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.846058][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.853358][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.880439][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.887713][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.952099][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.959231][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.983838][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.078406][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.344724][ T5840] veth0_vlan: entered promiscuous mode [ 85.395924][ T5840] veth1_vlan: entered promiscuous mode [ 85.531628][ T5840] veth0_macvtap: entered promiscuous mode [ 85.564447][ T5840] veth1_macvtap: entered promiscuous mode [ 85.662226][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.678079][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.735880][ T5832] veth0_vlan: entered promiscuous mode [ 85.752382][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.765545][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.775842][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.784894][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.794623][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.816262][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.834925][ T5832] veth1_vlan: entered promiscuous mode [ 85.901645][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.912263][ T5832] veth0_macvtap: entered promiscuous mode [ 85.959517][ T5832] veth1_macvtap: entered promiscuous mode [ 85.991501][ T5842] veth0_vlan: entered promiscuous mode [ 86.014110][ T5834] Bluetooth: hci1: command tx timeout [ 86.014136][ T5839] Bluetooth: hci0: command tx timeout [ 86.025437][ T51] Bluetooth: hci3: command tx timeout [ 86.073811][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.082312][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.091618][ T5839] Bluetooth: hci2: command tx timeout [ 86.097233][ T51] Bluetooth: hci4: command tx timeout [ 86.109242][ T5837] veth0_vlan: entered promiscuous mode [ 86.116482][ T5842] veth1_vlan: entered promiscuous mode [ 86.132303][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.175786][ T5830] veth0_vlan: entered promiscuous mode [ 86.202142][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.215151][ T5830] veth1_vlan: entered promiscuous mode [ 86.229031][ T5837] veth1_vlan: entered promiscuous mode [ 86.238405][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.246610][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.256843][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.265800][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.276650][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.285858][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.336117][ T5842] veth0_macvtap: entered promiscuous mode [ 86.368206][ T5842] veth1_macvtap: entered promiscuous mode [ 86.386277][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.440963][ T5830] veth0_macvtap: entered promiscuous mode [ 86.456165][ T5837] veth0_macvtap: entered promiscuous mode [ 86.487902][ T5830] veth1_macvtap: entered promiscuous mode [ 86.545440][ T5837] veth1_macvtap: entered promiscuous mode [ 86.565976][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.589410][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.597277][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.616230][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.637205][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.660254][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.685361][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.694345][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.703173][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.715290][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.737808][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.755033][ T4572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.756935][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.770724][ T4572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.795506][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.805374][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.815584][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.824625][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.836510][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.846521][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.855514][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.864693][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.904400][ T1211] cfg80211: failed to load regulatory.db [ 87.084842][ T4572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.100577][ T4572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.130405][ T4572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.143684][ T4572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.175891][ T5962] syzkaller0: entered promiscuous mode [ 87.181579][ T5962] syzkaller0: entered allmulticast mode [ 87.227247][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.237111][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.597096][ T5966] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6'. [ 88.090916][ T51] Bluetooth: hci1: command tx timeout [ 88.095528][ T5834] Bluetooth: hci0: command tx timeout [ 88.103887][ T5839] Bluetooth: hci3: command tx timeout [ 88.181199][ T5839] Bluetooth: hci4: command tx timeout [ 88.181215][ T5834] Bluetooth: hci2: command tx timeout [ 88.502824][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.520826][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.573554][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.585610][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.725101][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.749316][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.995228][ T5976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.317752][ T5987] netlink: 'syz.0.10': attribute type 39 has an invalid length. [ 89.422367][ T5988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.455777][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12'. [ 89.722376][ T5996] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 89.780209][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.788827][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.824974][ T5996] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 89.889199][ T6006] tipc: Can't bind to reserved service type 0 [ 90.037375][ T6013] Cannot find set identified by id 0 to match [ 90.075098][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.088359][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.170716][ T5994] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.181786][ T5994] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.190741][ T5994] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.200267][ T5994] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.416982][ T5994] syz.1.13 (5994) used greatest stack depth: 20008 bytes left [ 90.483726][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 90.502265][ T6020] netlink: 192 bytes leftover after parsing attributes in process `syz.3.20'. [ 90.544819][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 90.561891][ T6025] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 90.590014][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.597908][ T6021] Zero length message leads to an empty skb [ 90.673537][ T6020] xt_CT: No such helper "snmp" [ 91.097787][ T6033] netlink: 'syz.1.22': attribute type 11 has an invalid length. [ 91.106082][ T6033] netlink: 224 bytes leftover after parsing attributes in process `syz.1.22'. [ 91.150014][ T6036] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 91.569927][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.26'. [ 92.290700][ T6066] netlink: 56 bytes leftover after parsing attributes in process `syz.1.29'. [ 92.321314][ T6066] netlink: 56 bytes leftover after parsing attributes in process `syz.1.29'. [ 92.636009][ T6073] xt_CT: No such helper "pptp" [ 93.849173][ T6118] IPv6: Can't replace route, no match found [ 93.994453][ T6114] xt_CT: No such helper "pptp" [ 94.040251][ T6126] FAULT_INJECTION: forcing a failure. [ 94.040251][ T6126] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.124304][ T6126] CPU: 0 UID: 0 PID: 6126 Comm: syz.3.46 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 94.124330][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.124347][ T6126] Call Trace: [ 94.124354][ T6126] [ 94.124362][ T6126] dump_stack_lvl+0x189/0x250 [ 94.124398][ T6126] ? __pfx____ratelimit+0x10/0x10 [ 94.124419][ T6126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.124439][ T6126] ? __pfx__printk+0x10/0x10 [ 94.124456][ T6126] ? __might_fault+0xb0/0x130 [ 94.124480][ T6126] should_fail_ex+0x414/0x560 [ 94.124504][ T6126] _copy_from_user+0x2d/0xb0 [ 94.124522][ T6126] do_sock_getsockopt+0x1cd/0x650 [ 94.124541][ T6126] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 94.124561][ T6126] ? __pfx_do_syscall_64+0x10/0x10 [ 94.124584][ T6126] ? ksys_write+0x1e1/0x250 [ 94.124613][ T6126] __x64_sys_getsockopt+0x1a5/0x250 [ 94.124630][ T6126] ? __pfx_do_syscall_64+0x10/0x10 [ 94.124652][ T6126] ? __pfx_do_syscall_64+0x10/0x10 [ 94.124675][ T6126] do_syscall_64+0xfa/0x3b0 [ 94.124693][ T6126] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.124712][ T6126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.124728][ T6126] ? clear_bhb_loop+0x60/0xb0 [ 94.124747][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.124761][ T6126] RIP: 0033:0x7f578d38e929 [ 94.124780][ T6126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.124792][ T6126] RSP: 002b:00007f578e282038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 94.124811][ T6126] RAX: ffffffffffffffda RBX: 00007f578d5b5fa0 RCX: 00007f578d38e929 [ 94.124823][ T6126] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005 [ 94.124833][ T6126] RBP: 00007f578e282090 R08: 0000200000000640 R09: 0000000000000000 [ 94.124844][ T6126] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 94.124861][ T6126] R13: 0000000000000000 R14: 00007f578d5b5fa0 R15: 00007ffcd81ca9e8 [ 94.124888][ T6126] [ 94.625366][ T6140] netlink: 'syz.4.52': attribute type 2 has an invalid length. [ 94.638805][ T6140] netlink: 316 bytes leftover after parsing attributes in process `syz.4.52'. [ 94.862848][ T6145] warning: `syz.4.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.362566][ T6172] FAULT_INJECTION: forcing a failure. [ 95.362566][ T6172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.407975][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: syz.2.65 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 95.408004][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.408014][ T6172] Call Trace: [ 95.408022][ T6172] [ 95.408029][ T6172] dump_stack_lvl+0x189/0x250 [ 95.408060][ T6172] ? __pfx____ratelimit+0x10/0x10 [ 95.408082][ T6172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.408103][ T6172] ? __pfx__printk+0x10/0x10 [ 95.408132][ T6172] should_fail_ex+0x414/0x560 [ 95.408157][ T6172] _copy_to_user+0x31/0xb0 [ 95.408175][ T6172] simple_read_from_buffer+0xe1/0x170 [ 95.408196][ T6172] proc_fail_nth_read+0x1df/0x250 [ 95.408218][ T6172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.408241][ T6172] ? rw_verify_area+0x258/0x650 [ 95.408265][ T6172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.408286][ T6172] vfs_read+0x200/0x980 [ 95.408308][ T6172] ? __pfx___mutex_lock+0x10/0x10 [ 95.408330][ T6172] ? __pfx_vfs_read+0x10/0x10 [ 95.408347][ T6172] ? __fget_files+0x2a/0x420 [ 95.408371][ T6172] ? __fget_files+0x3a0/0x420 [ 95.408388][ T6172] ? __fget_files+0x2a/0x420 [ 95.408418][ T6172] ksys_read+0x145/0x250 [ 95.408430][ T6172] ? __fget_files+0x2a/0x420 [ 95.408448][ T6172] ? __pfx_ksys_read+0x10/0x10 [ 95.408466][ T6172] ? do_syscall_64+0xbe/0x3b0 [ 95.408490][ T6172] do_syscall_64+0xfa/0x3b0 [ 95.408507][ T6172] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.408526][ T6172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.408542][ T6172] ? clear_bhb_loop+0x60/0xb0 [ 95.408562][ T6172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.408578][ T6172] RIP: 0033:0x7f7a62b8d33c [ 95.408593][ T6172] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.408606][ T6172] RSP: 002b:00007f7a63ab4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.408624][ T6172] RAX: ffffffffffffffda RBX: 00007f7a62db5fa0 RCX: 00007f7a62b8d33c [ 95.408637][ T6172] RDX: 000000000000000f RSI: 00007f7a63ab40a0 RDI: 0000000000000006 [ 95.408647][ T6172] RBP: 00007f7a63ab4090 R08: 0000000000000000 R09: 0000000000000000 [ 95.408658][ T6172] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.408674][ T6172] R13: 0000000000000000 R14: 00007f7a62db5fa0 R15: 00007fffcd16da18 [ 95.408703][ T6172] [ 95.715781][ T6182] FAULT_INJECTION: forcing a failure. [ 95.715781][ T6182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.732812][ T6182] CPU: 0 UID: 0 PID: 6182 Comm: syz.3.68 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 95.732837][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.732847][ T6182] Call Trace: [ 95.732854][ T6182] [ 95.732862][ T6182] dump_stack_lvl+0x189/0x250 [ 95.732891][ T6182] ? __pfx____ratelimit+0x10/0x10 [ 95.732913][ T6182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.732935][ T6182] ? __pfx__printk+0x10/0x10 [ 95.732964][ T6182] should_fail_ex+0x414/0x560 [ 95.732991][ T6182] _copy_to_user+0x31/0xb0 [ 95.733012][ T6182] sk_getsockopt+0x1a75/0x2530 [ 95.733036][ T6182] ? __pfx_sk_getsockopt+0x10/0x10 [ 95.733050][ T6182] ? __pfx_do_syscall_64+0x10/0x10 [ 95.733082][ T6182] ? __lock_acquire+0xab9/0xd20 [ 95.733113][ T6182] ? __might_fault+0xb0/0x130 [ 95.733149][ T6182] do_sock_getsockopt+0x275/0x650 [ 95.733165][ T6182] ? __pfx_do_syscall_64+0x10/0x10 [ 95.733186][ T6182] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 95.733201][ T6182] ? __pfx_do_syscall_64+0x10/0x10 [ 95.733220][ T6182] ? __fget_files+0x3a0/0x420 [ 95.733237][ T6182] ? __fget_files+0x2a/0x420 [ 95.733261][ T6182] __x64_sys_getsockopt+0x1a5/0x250 [ 95.733276][ T6182] ? __pfx_do_syscall_64+0x10/0x10 [ 95.733297][ T6182] ? __pfx_do_syscall_64+0x10/0x10 [ 95.733320][ T6182] do_syscall_64+0xfa/0x3b0 [ 95.733339][ T6182] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.733356][ T6182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.733371][ T6182] ? clear_bhb_loop+0x60/0xb0 [ 95.733389][ T6182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.733405][ T6182] RIP: 0033:0x7f578d38e929 [ 95.733419][ T6182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.733430][ T6182] RSP: 002b:00007f578e282038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 95.733448][ T6182] RAX: ffffffffffffffda RBX: 00007f578d5b5fa0 RCX: 00007f578d38e929 [ 95.733458][ T6182] RDX: 000000000000000c RSI: 0000000000000001 RDI: 0000000000000003 [ 95.733466][ T6182] RBP: 00007f578e282090 R08: 0000200000001dc0 R09: 0000000000000000 [ 95.733475][ T6182] R10: 0000200000001d00 R11: 0000000000000246 R12: 0000000000000001 [ 95.733484][ T6182] R13: 0000000000000000 R14: 00007f578d5b5fa0 R15: 00007ffcd81ca9e8 [ 95.733509][ T6182] [ 96.133264][ T6188] FAULT_INJECTION: forcing a failure. [ 96.133264][ T6188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.152031][ T6188] CPU: 0 UID: 0 PID: 6188 Comm: syz.2.71 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 96.152058][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.152068][ T6188] Call Trace: [ 96.152076][ T6188] [ 96.152083][ T6188] dump_stack_lvl+0x189/0x250 [ 96.152112][ T6188] ? __pfx____ratelimit+0x10/0x10 [ 96.152134][ T6188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.152157][ T6188] ? __pfx__printk+0x10/0x10 [ 96.152177][ T6188] ? __might_fault+0xb0/0x130 [ 96.152205][ T6188] should_fail_ex+0x414/0x560 [ 96.152232][ T6188] _copy_from_user+0x2d/0xb0 [ 96.152251][ T6188] ___sys_recvmsg+0x12e/0x510 [ 96.152276][ T6188] ? __pfx____sys_recvmsg+0x10/0x10 [ 96.152326][ T6188] ? __might_fault+0xb0/0x130 [ 96.152347][ T6188] do_recvmmsg+0x307/0x770 [ 96.152375][ T6188] ? __pfx_do_recvmmsg+0x10/0x10 [ 96.152405][ T6188] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.152445][ T6188] __x64_sys_recvmmsg+0x190/0x240 [ 96.152467][ T6188] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 96.152484][ T6188] ? rcu_is_watching+0x15/0xb0 [ 96.152507][ T6188] ? do_syscall_64+0xbe/0x3b0 [ 96.152532][ T6188] do_syscall_64+0xfa/0x3b0 [ 96.152552][ T6188] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.152572][ T6188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.152593][ T6188] ? clear_bhb_loop+0x60/0xb0 [ 96.152614][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.152630][ T6188] RIP: 0033:0x7f7a62b8e929 [ 96.152651][ T6188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.152664][ T6188] RSP: 002b:00007f7a63ab4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 96.152683][ T6188] RAX: ffffffffffffffda RBX: 00007f7a62db5fa0 RCX: 00007f7a62b8e929 [ 96.152696][ T6188] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 96.152707][ T6188] RBP: 00007f7a63ab4090 R08: 0000000000000000 R09: 0000000000000000 [ 96.152718][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.152728][ T6188] R13: 0000000000000000 R14: 00007f7a62db5fa0 R15: 00007fffcd16da18 [ 96.152755][ T6188] [ 96.535441][ T6195] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 96.571332][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 96.622002][ T6197] vlan2: entered promiscuous mode [ 96.655653][ T6197] gretap0: entered promiscuous mode [ 96.670198][ T6195] xt_CT: No such helper "pptp" [ 96.822927][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 96.843763][ T6211] FAULT_INJECTION: forcing a failure. [ 96.843763][ T6211] name failslab, interval 1, probability 0, space 0, times 1 [ 96.888262][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.3.81 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 96.888290][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.888300][ T6211] Call Trace: [ 96.888307][ T6211] [ 96.888315][ T6211] dump_stack_lvl+0x189/0x250 [ 96.888344][ T6211] ? __pfx____ratelimit+0x10/0x10 [ 96.888367][ T6211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.888391][ T6211] ? __pfx__printk+0x10/0x10 [ 96.888418][ T6211] ? __pfx___might_resched+0x10/0x10 [ 96.888431][ T6211] ? fs_reclaim_acquire+0x7d/0x100 [ 96.888454][ T6211] should_fail_ex+0x414/0x560 [ 96.888478][ T6211] should_failslab+0xa8/0x100 [ 96.888505][ T6211] __kmalloc_cache_noprof+0x70/0x3d0 [ 96.888522][ T6211] ? genl_start+0x1c9/0x6c0 [ 96.888547][ T6211] genl_start+0x1c9/0x6c0 [ 96.888565][ T6211] ? netlink_lookup+0x30/0x200 [ 96.888592][ T6211] __netlink_dump_start+0x469/0x7e0 [ 96.888620][ T6211] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 96.888645][ T6211] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 96.888665][ T6211] ? genl_get_cmd+0x7d9/0x910 [ 96.888690][ T6211] ? __pfx_genl_start+0x10/0x10 [ 96.888708][ T6211] ? __pfx_genl_dumpit+0x10/0x10 [ 96.888726][ T6211] ? __pfx_genl_done+0x10/0x10 [ 96.888761][ T6211] genl_rcv_msg+0x5da/0x790 [ 96.888789][ T6211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.888806][ T6211] ? ref_tracker_free+0x63a/0x7d0 [ 96.888828][ T6211] ? __pfx_nl80211_get_reg_dump+0x10/0x10 [ 96.888853][ T6211] ? __pfx_ref_tracker_free+0x10/0x10 [ 96.888886][ T6211] netlink_rcv_skb+0x208/0x470 [ 96.888904][ T6211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.888927][ T6211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.888962][ T6211] ? down_read+0x1ad/0x2e0 [ 96.888988][ T6211] genl_rcv+0x28/0x40 [ 96.889007][ T6211] netlink_unicast+0x75b/0x8d0 [ 96.889041][ T6211] netlink_sendmsg+0x805/0xb30 [ 96.889069][ T6211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.889089][ T6211] ? aa_sock_msg_perm+0x94/0x160 [ 96.889113][ T6211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 96.889133][ T6211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.889152][ T6211] __sock_sendmsg+0x219/0x270 [ 96.889177][ T6211] ____sys_sendmsg+0x505/0x830 [ 96.889202][ T6211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.889230][ T6211] ? import_iovec+0x74/0xa0 [ 96.889251][ T6211] ___sys_sendmsg+0x21f/0x2a0 [ 96.889273][ T6211] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.889329][ T6211] ? __fget_files+0x2a/0x420 [ 96.889348][ T6211] ? __fget_files+0x3a0/0x420 [ 96.889378][ T6211] __x64_sys_sendmsg+0x19b/0x260 [ 96.889400][ T6211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.889429][ T6211] ? __pfx_ksys_write+0x10/0x10 [ 96.889443][ T6211] ? rcu_is_watching+0x15/0xb0 [ 96.889465][ T6211] ? do_syscall_64+0xbe/0x3b0 [ 96.889491][ T6211] do_syscall_64+0xfa/0x3b0 [ 96.889517][ T6211] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.889537][ T6211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.889554][ T6211] ? clear_bhb_loop+0x60/0xb0 [ 96.889574][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.889590][ T6211] RIP: 0033:0x7f578d38e929 [ 96.889607][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.889620][ T6211] RSP: 002b:00007f578e282038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.889639][ T6211] RAX: ffffffffffffffda RBX: 00007f578d5b5fa0 RCX: 00007f578d38e929 [ 96.889652][ T6211] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 96.889663][ T6211] RBP: 00007f578e282090 R08: 0000000000000000 R09: 0000000000000000 [ 96.889673][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.889683][ T6211] R13: 0000000000000000 R14: 00007f578d5b5fa0 R15: 00007ffcd81ca9e8 [ 96.889711][ T6211] [ 97.307930][ T6221] netlink: 'syz.1.85': attribute type 12 has an invalid length. [ 97.317407][ T6221] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.85'. [ 97.533373][ T6225] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 97.555043][ T6235] netlink: 'syz.3.89': attribute type 3 has an invalid length. [ 98.180204][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 98.778725][ T6273] netlink: 21 bytes leftover after parsing attributes in process `syz.0.101'. [ 98.971889][ T6286] netlink: 21 bytes leftover after parsing attributes in process `syz.4.105'. [ 98.993077][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.001394][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.471368][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.507685][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.804333][ T6251] netdevsim netdevsim2 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.813519][ T6251] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.826033][ T6251] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.835358][ T6251] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.984586][ T6294] netlink: 44 bytes leftover after parsing attributes in process `syz.0.101'. [ 99.997277][ T6297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.105'. [ 100.099089][ T6318] netlink: 'syz.0.111': attribute type 4 has an invalid length. [ 100.134925][ T6318] xt_hashlimit: size too large, truncated to 1048576 [ 100.309932][ T6333] : renamed from vxcan1 (while UP) [ 100.533892][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.117'. [ 100.706875][ T6349] netlink: 256 bytes leftover after parsing attributes in process `syz.2.120'. [ 100.731986][ T6350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.119'. [ 100.740828][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.120'. [ 100.805153][ T6356] netlink: 21 bytes leftover after parsing attributes in process `syz.0.122'. [ 101.032556][ T6364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.122'. [ 101.069408][ T6356] netlink: 44 bytes leftover after parsing attributes in process `syz.0.122'. [ 101.277241][ T6377] IPv6: Can't replace route, no match found [ 101.421448][ T6381] netlink: 'syz.4.130': attribute type 2 has an invalid length. [ 101.675835][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 101.699775][ T6390] netlink: 'syz.1.135': attribute type 58 has an invalid length. [ 101.803244][ T6394] set match dimension is over the limit! [ 102.032241][ T6407] netlink: 'syz.1.143': attribute type 2 has an invalid length. [ 102.069886][ T6404] xt_CT: No such helper "snmp" [ 102.211337][ T6420] FAULT_INJECTION: forcing a failure. [ 102.211337][ T6420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.260916][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz.1.146 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 102.260945][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.260955][ T6420] Call Trace: [ 102.260969][ T6420] [ 102.260976][ T6420] dump_stack_lvl+0x189/0x250 [ 102.261006][ T6420] ? __pfx____ratelimit+0x10/0x10 [ 102.261028][ T6420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.261052][ T6420] ? __pfx__printk+0x10/0x10 [ 102.261070][ T6420] ? __might_fault+0xb0/0x130 [ 102.261099][ T6420] should_fail_ex+0x414/0x560 [ 102.261126][ T6420] _copy_from_user+0x2d/0xb0 [ 102.261145][ T6420] generic_map_update_batch+0x572/0x7f0 [ 102.261177][ T6420] ? __pfx_generic_map_update_batch+0x10/0x10 [ 102.261195][ T6420] ? __fget_files+0x2a/0x420 [ 102.261221][ T6420] ? __pfx_generic_map_update_batch+0x10/0x10 [ 102.261239][ T6420] bpf_map_do_batch+0x36c/0x5f0 [ 102.261267][ T6420] __sys_bpf+0x384/0x860 [ 102.261291][ T6420] ? __pfx___sys_bpf+0x10/0x10 [ 102.261325][ T6420] ? ksys_write+0x22a/0x250 [ 102.261344][ T6420] ? __pfx_ksys_write+0x10/0x10 [ 102.261358][ T6420] ? rcu_is_watching+0x15/0xb0 [ 102.261382][ T6420] __x64_sys_bpf+0x7c/0x90 [ 102.261403][ T6420] do_syscall_64+0xfa/0x3b0 [ 102.261423][ T6420] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.261443][ T6420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.261460][ T6420] ? clear_bhb_loop+0x60/0xb0 [ 102.261480][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.261497][ T6420] RIP: 0033:0x7f7c5f18e929 [ 102.261513][ T6420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.261526][ T6420] RSP: 002b:00007f7c5ff42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.261545][ T6420] RAX: ffffffffffffffda RBX: 00007f7c5f3b6080 RCX: 00007f7c5f18e929 [ 102.261557][ T6420] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 102.261568][ T6420] RBP: 00007f7c5ff42090 R08: 0000000000000000 R09: 0000000000000000 [ 102.261579][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.261589][ T6420] R13: 0000000000000001 R14: 00007f7c5f3b6080 R15: 00007ffebb390e98 [ 102.261616][ T6420] [ 102.815827][ T5834] Bluetooth: hci3: command 0x0405 tx timeout [ 103.593341][ T30] audit: type=1107 audit(1749677453.419:2): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 103.713824][ T6475] openvswitch: netlink: Flow key attr not present in new flow. [ 103.882842][ T6484] vcan0: tx drop: invalid sa for name 0x0000000000000005 [ 103.929824][ T6483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.975430][ T6492] tipc: Started in network mode [ 103.982432][ T6492] tipc: Node identity 228849c22dc1, cluster identity 4711 [ 103.990652][ T6492] tipc: Enabled bearer , priority 0 [ 104.021955][ T6483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.047211][ T6485] tipc: Disabling bearer [ 104.091852][ T6483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.225476][ T6483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.298963][ T6504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.306223][ T6504] IPv6: NLM_F_CREATE should be set when creating new route [ 104.429097][ T6483] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.481843][ T6483] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.544462][ T6483] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.602002][ T6516] syzkaller1: entered promiscuous mode [ 104.609634][ T6516] syzkaller1: entered allmulticast mode [ 104.641142][ T6483] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.785876][ T6526] netlink: 'syz.3.193': attribute type 4 has an invalid length. [ 105.156896][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.183567][ T6545] team0: Port device batadv1 added [ 105.563587][ T6568] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 105.587014][ T6568] __nla_validate_parse: 12 callbacks suppressed [ 105.587035][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 105.655301][ T6574] IPv6: addrconf: prefix option has invalid lifetime [ 105.742223][ T6579] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 105.769086][ T6579] netlink: 40 bytes leftover after parsing attributes in process `syz.2.218'. [ 106.232182][ T6613] netlink: 736 bytes leftover after parsing attributes in process `syz.4.233'. [ 106.853823][ T6636] Driver unsupported XDP return value 0 on prog (id 83) dev N/A, expect packet loss! [ 107.409709][ T6658] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 107.416702][ T10] IPVS: starting estimator thread 0... [ 107.431815][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.258'. [ 107.472629][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.258'. [ 107.509044][ T6664] IPVS: using max 35 ests per chain, 84000 per kthread [ 107.752337][ T6676] netlink: 'syz.4.263': attribute type 10 has an invalid length. [ 107.797428][ T6676] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.321703][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.279'. [ 108.400305][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.280'. [ 108.573277][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 108.588577][ T6723] netlink: 'syz.4.286': attribute type 1 has an invalid length. [ 108.608833][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 108.666940][ T6730] geneve2: entered promiscuous mode [ 108.844060][ T6723] veth3: entered promiscuous mode [ 108.863567][ T6723] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 109.081947][ T6752] Bluetooth: MGMT ver 1.23 [ 109.120472][ T6755] netlink: 'syz.2.301': attribute type 29 has an invalid length. [ 109.170365][ T6758] syz_tun: entered allmulticast mode [ 109.221738][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 109.231512][ T6757] syz_tun: left allmulticast mode [ 109.282673][ T6765] netlink: 'syz.2.306': attribute type 10 has an invalid length. [ 109.295826][ T6765] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.755618][ T1578] IPVS: starting estimator thread 0... [ 109.869472][ T6792] IPVS: using max 26 ests per chain, 62400 per kthread [ 110.708233][ T6829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.335'. [ 110.745543][ T6829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.335'. [ 110.782350][ T6829] netlink: 'syz.0.335': attribute type 4 has an invalid length. [ 110.865356][ T6841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.341'. [ 112.139802][ T6900] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 112.439633][ T6916] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 112.608663][ T6924] geneve2: entered promiscuous mode [ 112.747992][ T6932] tipc: Started in network mode [ 112.783328][ T6932] tipc: Node identity 4, cluster identity 4711 [ 112.797115][ T6932] tipc: Node number set to 4 [ 112.819939][ T6941] bridge_slave_0: left allmulticast mode [ 112.833062][ T6941] bridge_slave_0: left promiscuous mode [ 112.849190][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.867809][ T6941] bridge_slave_1: left allmulticast mode [ 112.877403][ T6941] bridge_slave_1: left promiscuous mode [ 112.907978][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.934933][ T6941] bond0: (slave bond_slave_0): Releasing backup interface [ 112.945100][ T6941] bond0: (slave bond_slave_1): Releasing backup interface [ 112.957848][ T6941] team0: Port device team_slave_0 removed [ 112.974032][ T6941] team0: Port device team_slave_1 removed [ 112.988827][ T6941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.009905][ T6941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.035875][ T6941] team0: Port device batadv1 removed [ 113.238575][ T6961] netlink: 'syz.0.394': attribute type 29 has an invalid length. [ 113.339413][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 113.574364][ T6979] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 113.826730][ T6992] netlink: 'syz.1.409': attribute type 29 has an invalid length. [ 114.436587][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 114.722403][ T7039] xt_CT: No such helper "pptp" [ 114.787994][ T7047] netlink: 'syz.2.433': attribute type 11 has an invalid length. [ 114.977683][ T7058] netlink: 'syz.2.438': attribute type 62 has an invalid length. [ 115.560742][ T7085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.620655][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'. [ 116.536393][ T7131] xt_CT: No such helper "pptp" [ 116.637145][ T7145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 116.646552][ T7145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 116.659413][ T7145] netlink: 76 bytes leftover after parsing attributes in process `syz.2.476'. [ 116.757147][ T7151] netlink: 36 bytes leftover after parsing attributes in process `syz.4.480'. [ 116.774483][ T7153] netlink: 36 bytes leftover after parsing attributes in process `syz.4.480'. [ 117.013872][ T7169] netlink: 48 bytes leftover after parsing attributes in process `syz.1.485'. [ 117.038291][ T7170] netlink: 21 bytes leftover after parsing attributes in process `syz.4.487'. [ 117.174458][ T7177] netlink: 44 bytes leftover after parsing attributes in process `syz.4.487'. [ 117.205941][ T7170] netlink: 44 bytes leftover after parsing attributes in process `syz.4.487'. [ 117.298657][ T7180] xt_CT: No such helper "pptp" [ 117.417460][ T7186] netlink: del zone limit has 4 unknown bytes [ 117.586838][ T7195] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 117.610738][ T7195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.497'. [ 117.642610][ T7195] dummy0: entered promiscuous mode [ 117.675364][ T7195] bridge0: port 3(dummy0) entered blocking state [ 117.689443][ T7195] bridge0: port 3(dummy0) entered disabled state [ 117.696040][ T7195] dummy0: entered allmulticast mode [ 117.727028][ T7195] bridge0: port 3(dummy0) entered blocking state [ 117.733615][ T7195] bridge0: port 3(dummy0) entered forwarding state [ 118.067415][ T7213] xt_CT: No such helper "pptp" [ 118.797794][ T7268] gtp0: entered promiscuous mode [ 118.822544][ T7264] delete_channel: no stack [ 118.846758][ T7266] xt_CT: No such helper "pptp" [ 119.453008][ T7309] xt_CT: No such helper "pptp" [ 119.607310][ T7325] netlink: 'syz.3.546': attribute type 7 has an invalid length. [ 120.280635][ T7354] set match dimension is over the limit! [ 121.077856][ T7379] netlink: 'syz.4.568': attribute type 4 has an invalid length. [ 121.281071][ T7381] syzkaller0: entered promiscuous mode [ 121.307929][ T7381] syzkaller0: entered allmulticast mode [ 121.633745][ T7411] set match dimension is over the limit! [ 122.250581][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 122.865154][ T7415] __nla_validate_parse: 12 callbacks suppressed [ 122.865174][ T7415] netlink: 300 bytes leftover after parsing attributes in process `syz.0.584'. [ 123.561452][ T7459] netlink: 68 bytes leftover after parsing attributes in process `syz.0.602'. [ 123.791988][ T7475] set match dimension is over the limit! [ 123.908941][ T7481] netlink: 'syz.3.612': attribute type 2 has an invalid length. [ 123.915142][ T7478] netlink: del zone limit has 4 unknown bytes [ 124.067563][ T7478] bridge0: port 3(dummy0) entered disabled state [ 124.074143][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.078547][ T7487] IPv6: Can't replace route, no match found [ 124.081994][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.258180][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.288111][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.425265][ T7478] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.434059][ T7478] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.443032][ T7478] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.453087][ T7478] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.462049][ T7478] geneve2: left promiscuous mode [ 124.472211][ T7495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.616'. [ 124.503199][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.616'. [ 125.169100][ T7525] syz.1.627 (7525) used obsolete PPPIOCDETACH ioctl [ 125.186560][ T7525] x_tables: ip_tables: ah match: only valid for protocol 51 [ 125.306663][ T7534] netlink: 192 bytes leftover after parsing attributes in process `syz.4.631'. [ 125.318313][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 125.339184][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 125.425597][ T7534] xt_CT: No such helper "snmp" [ 125.944662][ T5897] IPVS: starting estimator thread 0... [ 126.061729][ T7575] IPVS: using max 26 ests per chain, 62400 per kthread [ 126.359814][ T7597] sit0: entered promiscuous mode [ 126.393406][ T7597] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 126.428764][ T7597] netlink: 1 bytes leftover after parsing attributes in process `syz.3.655'. [ 126.851090][ T7621] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 126.903689][ T7629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.666'. [ 126.923571][ T7621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.973414][ T7632] netlink: 'syz.4.668': attribute type 10 has an invalid length. [ 126.990920][ T7630] veth3: entered promiscuous mode [ 127.002510][ T7630] bond1: (slave veth3): Enslaving as an active interface with a down link [ 127.005487][ T7632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.668'. [ 127.028084][ T7632] dummy0: entered promiscuous mode [ 127.035536][ T7632] bond0: (slave dummy0): Releasing backup interface [ 127.048066][ T7632] bridge0: port 3(dummy0) entered blocking state [ 127.056160][ T7632] bridge0: port 3(dummy0) entered disabled state [ 127.063135][ T7632] dummy0: entered allmulticast mode [ 127.075533][ T7621] erspan0: entered allmulticast mode [ 127.083713][ T7621] bond1: (slave erspan0): making interface the new active one [ 127.092844][ T7621] erspan0: entered promiscuous mode [ 127.098760][ T7621] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 127.761028][ T7662] FAULT_INJECTION: forcing a failure. [ 127.761028][ T7662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.796895][ T7662] CPU: 0 UID: 0 PID: 7662 Comm: syz.4.679 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 127.796921][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.796932][ T7662] Call Trace: [ 127.796939][ T7662] [ 127.796946][ T7662] dump_stack_lvl+0x189/0x250 [ 127.796974][ T7662] ? __pfx____ratelimit+0x10/0x10 [ 127.796994][ T7662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.797018][ T7662] ? __pfx__printk+0x10/0x10 [ 127.797036][ T7662] ? __might_fault+0xb0/0x130 [ 127.797064][ T7662] should_fail_ex+0x414/0x560 [ 127.797090][ T7662] _copy_from_user+0x2d/0xb0 [ 127.797107][ T7662] ___sys_recvmsg+0x12e/0x510 [ 127.797132][ T7662] ? __pfx____sys_recvmsg+0x10/0x10 [ 127.797179][ T7662] ? __might_fault+0xb0/0x130 [ 127.797198][ T7662] do_recvmmsg+0x307/0x770 [ 127.797226][ T7662] ? __pfx_do_recvmmsg+0x10/0x10 [ 127.797255][ T7662] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.797294][ T7662] __x64_sys_recvmmsg+0x190/0x240 [ 127.797317][ T7662] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 127.797334][ T7662] ? rcu_is_watching+0x15/0xb0 [ 127.797355][ T7662] ? do_syscall_64+0xbe/0x3b0 [ 127.797379][ T7662] do_syscall_64+0xfa/0x3b0 [ 127.797398][ T7662] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.797418][ T7662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.797433][ T7662] ? clear_bhb_loop+0x60/0xb0 [ 127.797459][ T7662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.797475][ T7662] RIP: 0033:0x7fc304d8e929 [ 127.797490][ T7662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.797506][ T7662] RSP: 002b:00007fc305bc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 127.797525][ T7662] RAX: ffffffffffffffda RBX: 00007fc304fb5fa0 RCX: 00007fc304d8e929 [ 127.797536][ T7662] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 127.797546][ T7662] RBP: 00007fc305bc4090 R08: 0000000000000000 R09: 0000000000000000 [ 127.797555][ T7662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.797564][ T7662] R13: 0000000000000000 R14: 00007fc304fb5fa0 R15: 00007ffd15400728 [ 127.797587][ T7662] [ 128.487451][ T7691] netlink: 'syz.1.687': attribute type 3 has an invalid length. [ 128.664786][ T7702] __nla_validate_parse: 2 callbacks suppressed [ 128.664805][ T7702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.694'. [ 128.765658][ T7704] xt_CT: No such helper "pptp" [ 128.892597][ T7712] FAULT_INJECTION: forcing a failure. [ 128.892597][ T7712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.927975][ T7712] CPU: 0 UID: 0 PID: 7712 Comm: syz.1.698 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 128.928003][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.928014][ T7712] Call Trace: [ 128.928021][ T7712] [ 128.928029][ T7712] dump_stack_lvl+0x189/0x250 [ 128.928146][ T7712] ? __pfx____ratelimit+0x10/0x10 [ 128.928171][ T7712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.928195][ T7712] ? __pfx__printk+0x10/0x10 [ 128.928226][ T7712] should_fail_ex+0x414/0x560 [ 128.928253][ T7712] _copy_to_user+0x31/0xb0 [ 128.928271][ T7712] simple_read_from_buffer+0xe1/0x170 [ 128.928291][ T7712] proc_fail_nth_read+0x1df/0x250 [ 128.928312][ T7712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.928333][ T7712] ? rw_verify_area+0x258/0x650 [ 128.928354][ T7712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.928374][ T7712] vfs_read+0x200/0x980 [ 128.928395][ T7712] ? __pfx___mutex_lock+0x10/0x10 [ 128.928422][ T7712] ? __pfx_vfs_read+0x10/0x10 [ 128.928438][ T7712] ? __fget_files+0x2a/0x420 [ 128.928459][ T7712] ? __fget_files+0x3a0/0x420 [ 128.928475][ T7712] ? __fget_files+0x2a/0x420 [ 128.928502][ T7712] ksys_read+0x145/0x250 [ 128.928521][ T7712] ? __pfx_ksys_read+0x10/0x10 [ 128.928534][ T7712] ? rcu_is_watching+0x15/0xb0 [ 128.928556][ T7712] ? do_syscall_64+0xbe/0x3b0 [ 128.928582][ T7712] do_syscall_64+0xfa/0x3b0 [ 128.928601][ T7712] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.928622][ T7712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.928640][ T7712] ? clear_bhb_loop+0x60/0xb0 [ 128.928662][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.928678][ T7712] RIP: 0033:0x7f7c5f18d33c [ 128.928695][ T7712] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 128.928709][ T7712] RSP: 002b:00007f7c5ff63030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.928728][ T7712] RAX: ffffffffffffffda RBX: 00007f7c5f3b5fa0 RCX: 00007f7c5f18d33c [ 128.928741][ T7712] RDX: 000000000000000f RSI: 00007f7c5ff630a0 RDI: 0000000000000004 [ 128.928753][ T7712] RBP: 00007f7c5ff63090 R08: 0000000000000000 R09: 0000000000000000 [ 128.928764][ T7712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.928774][ T7712] R13: 0000000000000000 R14: 00007f7c5f3b5fa0 R15: 00007ffebb390e98 [ 128.928803][ T7712] [ 129.280429][ T7727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.703'. [ 129.310580][ T7727] dummy0: entered promiscuous mode [ 129.325862][ T7727] dummy0: left promiscuous mode [ 129.781081][ T7745] FAULT_INJECTION: forcing a failure. [ 129.781081][ T7745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.798038][ T7745] CPU: 0 UID: 0 PID: 7745 Comm: syz.4.710 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 129.798057][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.798063][ T7745] Call Trace: [ 129.798067][ T7745] [ 129.798073][ T7745] dump_stack_lvl+0x189/0x250 [ 129.798093][ T7745] ? __pfx____ratelimit+0x10/0x10 [ 129.798107][ T7745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.798120][ T7745] ? __pfx__printk+0x10/0x10 [ 129.798131][ T7745] ? __might_fault+0xb0/0x130 [ 129.798146][ T7745] should_fail_ex+0x414/0x560 [ 129.798162][ T7745] _copy_from_user+0x2d/0xb0 [ 129.798173][ T7745] do_ip_vs_set_ctl+0x2d3/0xa60 [ 129.798189][ T7745] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 129.798199][ T7745] ? rcu_is_watching+0x15/0xb0 [ 129.798217][ T7745] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 129.798233][ T7745] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.798251][ T7745] ? aa_sk_perm+0x81e/0x950 [ 129.798265][ T7745] ? __pfx_aa_sk_perm+0x10/0x10 [ 129.798279][ T7745] nf_setsockopt+0x26f/0x290 [ 129.798291][ T7745] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 129.798306][ T7745] do_sock_setsockopt+0x25a/0x3e0 [ 129.798318][ T7745] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 129.798330][ T7745] ? __fget_files+0x2a/0x420 [ 129.798345][ T7745] __x64_sys_setsockopt+0x18b/0x220 [ 129.798358][ T7745] do_syscall_64+0xfa/0x3b0 [ 129.798369][ T7745] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.798381][ T7745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.798390][ T7745] ? clear_bhb_loop+0x60/0xb0 [ 129.798401][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.798416][ T7745] RIP: 0033:0x7fc304d8e929 [ 129.798430][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.798442][ T7745] RSP: 002b:00007fc305bc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 129.798458][ T7745] RAX: ffffffffffffffda RBX: 00007fc304fb5fa0 RCX: 00007fc304d8e929 [ 129.798469][ T7745] RDX: 0000000000000488 RSI: 0000000000000000 RDI: 0000000000000003 [ 129.798478][ T7745] RBP: 00007fc305bc4090 R08: 0000000000000044 R09: 0000000000000000 [ 129.798488][ T7745] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 129.798497][ T7745] R13: 0000000000000000 R14: 00007fc304fb5fa0 R15: 00007ffd15400728 [ 129.798523][ T7745] [ 130.151640][ T7749] netlink: 21 bytes leftover after parsing attributes in process `syz.2.712'. [ 130.300913][ T7759] netlink: 44 bytes leftover after parsing attributes in process `syz.2.712'. [ 130.314919][ T7749] netlink: 44 bytes leftover after parsing attributes in process `syz.2.712'. [ 130.333860][ T7761] netlink: 17 bytes leftover after parsing attributes in process `syz.1.716'. [ 130.369856][ T7762] netlink: 'syz.4.717': attribute type 12 has an invalid length. [ 130.391602][ T7762] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.717'. [ 130.628350][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 130.975558][ T5897] IPVS: starting estimator thread 0... [ 131.088533][ T7790] IPVS: using max 31 ests per chain, 74400 per kthread [ 131.687396][ T7822] FAULT_INJECTION: forcing a failure. [ 131.687396][ T7822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.727806][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.0.737 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 131.727832][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.727842][ T7822] Call Trace: [ 131.727849][ T7822] [ 131.727857][ T7822] dump_stack_lvl+0x189/0x250 [ 131.727886][ T7822] ? __pfx____ratelimit+0x10/0x10 [ 131.727907][ T7822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.727931][ T7822] ? __pfx__printk+0x10/0x10 [ 131.727949][ T7822] ? __might_fault+0xb0/0x130 [ 131.727978][ T7822] should_fail_ex+0x414/0x560 [ 131.728004][ T7822] _copy_from_iter+0x1db/0x16f0 [ 131.728032][ T7822] ? rcu_is_watching+0x15/0xb0 [ 131.728050][ T7822] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 131.728069][ T7822] ? __pfx__copy_from_iter+0x10/0x10 [ 131.728095][ T7822] ? __build_skb_around+0x257/0x3e0 [ 131.728115][ T7822] ? netlink_sendmsg+0x642/0xb30 [ 131.728130][ T7822] ? skb_put+0x11b/0x210 [ 131.728150][ T7822] netlink_sendmsg+0x6b2/0xb30 [ 131.728176][ T7822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.728196][ T7822] ? aa_sock_msg_perm+0x94/0x160 [ 131.728219][ T7822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.728240][ T7822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.728257][ T7822] __sock_sendmsg+0x219/0x270 [ 131.728282][ T7822] ____sys_sendmsg+0x505/0x830 [ 131.728306][ T7822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.728333][ T7822] ? import_iovec+0x74/0xa0 [ 131.728354][ T7822] ___sys_sendmsg+0x21f/0x2a0 [ 131.728375][ T7822] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.728427][ T7822] ? __fget_files+0x2a/0x420 [ 131.728443][ T7822] ? __fget_files+0x3a0/0x420 [ 131.728468][ T7822] __x64_sys_sendmsg+0x19b/0x260 [ 131.728486][ T7822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.728511][ T7822] ? __pfx_ksys_write+0x10/0x10 [ 131.728532][ T7822] ? do_syscall_64+0xbe/0x3b0 [ 131.728557][ T7822] do_syscall_64+0xfa/0x3b0 [ 131.728578][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.728594][ T7822] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.728611][ T7822] ? clear_bhb_loop+0x60/0xb0 [ 131.728630][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.728646][ T7822] RIP: 0033:0x7f649ed8e929 [ 131.728662][ T7822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.728675][ T7822] RSP: 002b:00007f649fc59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.728694][ T7822] RAX: ffffffffffffffda RBX: 00007f649efb5fa0 RCX: 00007f649ed8e929 [ 131.728706][ T7822] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000007 [ 131.728717][ T7822] RBP: 00007f649fc59090 R08: 0000000000000000 R09: 0000000000000000 [ 131.728727][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.728737][ T7822] R13: 0000000000000000 R14: 00007f649efb5fa0 R15: 00007ffeaba49e68 [ 131.728770][ T7822] [ 131.744027][ T7824] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 131.821858][ T7827] FAULT_INJECTION: forcing a failure. [ 131.821858][ T7827] name failslab, interval 1, probability 0, space 0, times 0 [ 131.883097][ T7824] macvtap1: entered allmulticast mode [ 131.883145][ T7824] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 131.885042][ T7824] batman_adv: batadv0: Adding interface: macvtap1 [ 131.910837][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.0.741 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 131.910864][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.910875][ T7827] Call Trace: [ 131.910882][ T7827] [ 131.910889][ T7827] dump_stack_lvl+0x189/0x250 [ 131.910918][ T7827] ? __pfx____ratelimit+0x10/0x10 [ 131.910938][ T7827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.910961][ T7827] ? __pfx__printk+0x10/0x10 [ 131.910984][ T7827] ? __pfx___might_resched+0x10/0x10 [ 131.911004][ T7827] should_fail_ex+0x414/0x560 [ 131.911030][ T7827] should_failslab+0xa8/0x100 [ 131.911051][ T7827] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 131.911068][ T7827] ? __get_vm_area_node+0x13f/0x300 [ 131.911090][ T7827] __get_vm_area_node+0x13f/0x300 [ 131.911111][ T7827] __vmalloc_node_range_noprof+0x301/0x12f0 [ 131.911130][ T7827] ? __do_replace+0xab/0x970 [ 131.911154][ T7827] ? kfree+0x4d/0x440 [ 131.911166][ T7827] ? xt_check_table_hooks+0x12c/0x7d0 [ 131.911189][ T7827] ? translate_table+0x1d47/0x2000 [ 131.911214][ T7827] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.911238][ T7827] ? __do_replace+0xab/0x970 [ 131.911254][ T7827] vzalloc_noprof+0xb2/0xf0 [ 131.911271][ T7827] ? __do_replace+0xab/0x970 [ 131.911288][ T7827] __do_replace+0xab/0x970 [ 131.911315][ T7827] ? __pfx___do_replace+0x10/0x10 [ 131.911333][ T7827] ? _copy_from_user+0x94/0xb0 [ 131.911355][ T7827] do_ipt_set_ctl+0xa0d/0xcd0 [ 131.911377][ T7827] ? rcu_is_watching+0x15/0xb0 [ 131.911393][ T7827] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 131.911427][ T7827] ? __pfx___mutex_lock+0x10/0x10 [ 131.911447][ T7827] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.911467][ T7827] ? aa_sk_perm+0x81e/0x950 [ 131.911491][ T7827] ? __pfx_aa_sk_perm+0x10/0x10 [ 131.911527][ T7827] nf_setsockopt+0x26f/0x290 [ 131.911547][ T7827] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 131.911572][ T7827] do_sock_setsockopt+0x25a/0x3e0 [ 131.911591][ T7827] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 131.911612][ T7827] ? __fget_files+0x2a/0x420 [ 131.911638][ T7827] __x64_sys_setsockopt+0x18b/0x220 [ 131.911660][ T7827] do_syscall_64+0xfa/0x3b0 [ 131.911687][ T7827] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.911706][ T7827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.911722][ T7827] ? clear_bhb_loop+0x60/0xb0 [ 131.911741][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.911756][ T7827] RIP: 0033:0x7f649ed8e929 [ 131.911772][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.911785][ T7827] RSP: 002b:00007f649fc59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 131.911803][ T7827] RAX: ffffffffffffffda RBX: 00007f649efb5fa0 RCX: 00007f649ed8e929 [ 131.911818][ T7827] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 131.911829][ T7827] RBP: 00007f649fc59090 R08: 0000000000000268 R09: 0000000000000000 [ 131.911839][ T7827] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.911849][ T7827] R13: 0000000000000000 R14: 00007f649efb5fa0 R15: 00007ffeaba49e68 [ 131.911874][ T7827] [ 131.914346][ T7827] syz.0.741: vmalloc error: size 131072, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 131.924383][ T7824] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.939226][ T7827] ,cpuset= [ 131.994791][ T7824] batman_adv: batadv0: Interface activated: macvtap1 [ 132.056811][ T7827] /,mems_allowed=0-1 [ 132.417379][ T7827] CPU: 0 UID: 0 PID: 7827 Comm: syz.0.741 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 132.417404][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.417415][ T7827] Call Trace: [ 132.417422][ T7827] [ 132.417430][ T7827] dump_stack_lvl+0x189/0x250 [ 132.417459][ T7827] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 132.417482][ T7827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.417506][ T7827] ? __pfx__printk+0x10/0x10 [ 132.417525][ T7827] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 132.417544][ T7827] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 132.417577][ T7827] warn_alloc+0x214/0x310 [ 132.417604][ T7827] ? __pfx_warn_alloc+0x10/0x10 [ 132.417631][ T7827] ? __get_vm_area_node+0x13f/0x300 [ 132.417654][ T7827] ? __get_vm_area_node+0x2b5/0x300 [ 132.417679][ T7827] __vmalloc_node_range_noprof+0x326/0x12f0 [ 132.417708][ T7827] ? kfree+0x4d/0x440 [ 132.417722][ T7827] ? xt_check_table_hooks+0x12c/0x7d0 [ 132.417745][ T7827] ? translate_table+0x1d47/0x2000 [ 132.417771][ T7827] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.417797][ T7827] ? __do_replace+0xab/0x970 [ 132.417814][ T7827] vzalloc_noprof+0xb2/0xf0 [ 132.417833][ T7827] ? __do_replace+0xab/0x970 [ 132.417850][ T7827] __do_replace+0xab/0x970 [ 132.417878][ T7827] ? __pfx___do_replace+0x10/0x10 [ 132.417897][ T7827] ? _copy_from_user+0x94/0xb0 [ 132.417920][ T7827] do_ipt_set_ctl+0xa0d/0xcd0 [ 132.417943][ T7827] ? rcu_is_watching+0x15/0xb0 [ 132.417958][ T7827] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 132.417994][ T7827] ? __pfx___mutex_lock+0x10/0x10 [ 132.418016][ T7827] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.418036][ T7827] ? aa_sk_perm+0x81e/0x950 [ 132.418061][ T7827] ? __pfx_aa_sk_perm+0x10/0x10 [ 132.418088][ T7827] nf_setsockopt+0x26f/0x290 [ 132.418109][ T7827] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 132.418134][ T7827] do_sock_setsockopt+0x25a/0x3e0 [ 132.418155][ T7827] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 132.418176][ T7827] ? __fget_files+0x2a/0x420 [ 132.418204][ T7827] __x64_sys_setsockopt+0x18b/0x220 [ 132.418228][ T7827] do_syscall_64+0xfa/0x3b0 [ 132.418249][ T7827] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.418269][ T7827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.418283][ T7827] ? clear_bhb_loop+0x60/0xb0 [ 132.418303][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.418320][ T7827] RIP: 0033:0x7f649ed8e929 [ 132.418336][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.418349][ T7827] RSP: 002b:00007f649fc59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.418367][ T7827] RAX: ffffffffffffffda RBX: 00007f649efb5fa0 RCX: 00007f649ed8e929 [ 132.418379][ T7827] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 132.418390][ T7827] RBP: 00007f649fc59090 R08: 0000000000000268 R09: 0000000000000000 [ 132.418401][ T7827] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.418414][ T7827] R13: 0000000000000000 R14: 00007f649efb5fa0 R15: 00007ffeaba49e68 [ 132.418436][ T7827] [ 132.739170][ T7827] Mem-Info: [ 132.742323][ T7827] active_anon:3681 inactive_anon:0 isolated_anon:0 [ 132.742323][ T7827] active_file:1486 inactive_file:39841 isolated_file:0 [ 132.742323][ T7827] unevictable:768 dirty:395 writeback:0 [ 132.742323][ T7827] slab_reclaimable:10860 slab_unreclaimable:97859 [ 132.742323][ T7827] mapped:29096 shmem:1379 pagetables:981 [ 132.742323][ T7827] sec_pagetables:0 bounce:0 [ 132.742323][ T7827] kernel_misc_reclaimable:0 [ 132.742323][ T7827] free:1331957 free_pcp:18768 free_cma:0 [ 132.874564][ T7827] Node 0 active_anon:14624kB inactive_anon:0kB active_file:5944kB inactive_file:159164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116484kB dirty:1580kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11540kB pagetables:3748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.936908][ T7827] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.990619][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.997281][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.008689][ T7827] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 133.067125][ T7827] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 133.073195][ T7827] Node 0 DMA32 free:1408420kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14344kB inactive_anon:0kB active_file:5944kB inactive_file:157344kB unevictable:1536kB writepending:1580kB present:3129332kB managed:2561076kB mlocked:0kB bounce:0kB free_pcp:60184kB local_pcp:39092kB free_cma:0kB [ 133.128657][ T7827] lowmem_reserve[]: 0 0 1 1 1 [ 133.133418][ T7827] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 133.179494][ T7827] lowmem_reserve[]: 0 0 0 0 0 [ 133.184256][ T7827] Node 1 Normal free:3903892kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17764kB local_pcp:9444kB free_cma:0kB [ 133.256926][ T7827] lowmem_reserve[]: 0 0 0 0 0 [ 133.282698][ T7827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 133.302788][ T7827] Node 0 DMA32: 1939*4kB (UM) 1221*8kB (UME) 111*16kB (ME) 130*32kB (UME) 501*64kB (UME) 80*128kB (UME) 45*256kB (UME) 12*512kB (UME) 12*1024kB (UME) 11*2048kB (UME) 315*4096kB (M) = 1408484kB [ 133.322131][ T7827] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 133.348594][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 133.357654][ T7827] Node 1 Normal: 205*4kB (UME) 44*8kB (UME) 44*16kB (UME) 78*32kB (UME) 26*64kB (UME) 8*128kB (UME) 4*256kB (ME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3903892kB [ 133.419899][ T7827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.433312][ T7827] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.444092][ T7827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.466797][ T7827] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.498552][ T7827] 42718 total pagecache pages [ 133.503277][ T7827] 0 pages in swap cache [ 133.507443][ T7827] Free swap = 124996kB [ 133.516602][ T7827] Total swap = 124996kB [ 133.518367][ T7860] netlink: 256 bytes leftover after parsing attributes in process `syz.1.752'. [ 133.521096][ T7827] 2097051 pages RAM [ 133.583191][ T7827] 0 pages HighMem/MovableOnly [ 133.587904][ T7827] 424676 pages reserved [ 133.605916][ T7827] 0 pages cma reserved [ 133.666710][ T7866] netlink: 'syz.1.757': attribute type 2 has an invalid length. [ 133.684433][ T7866] __nla_validate_parse: 2 callbacks suppressed [ 133.684453][ T7866] netlink: 284 bytes leftover after parsing attributes in process `syz.1.757'. [ 133.690866][ T5834] Bluetooth: hci3: command 0x0405 tx timeout [ 133.917238][ T7881] FAULT_INJECTION: forcing a failure. [ 133.917238][ T7881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.982347][ T7881] CPU: 0 UID: 0 PID: 7881 Comm: syz.4.762 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 133.982375][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.982385][ T7881] Call Trace: [ 133.982392][ T7881] [ 133.982400][ T7881] dump_stack_lvl+0x189/0x250 [ 133.982429][ T7881] ? __pfx____ratelimit+0x10/0x10 [ 133.982450][ T7881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.982481][ T7881] ? __pfx__printk+0x10/0x10 [ 133.982500][ T7881] ? __might_fault+0xb0/0x130 [ 133.982528][ T7881] should_fail_ex+0x414/0x560 [ 133.982555][ T7881] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 133.982575][ T7881] ? __kasan_slab_free+0x62/0x70 [ 133.982593][ T7881] ? arch_do_signal_or_restart+0x9a/0x750 [ 133.982613][ T7881] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 133.982640][ T7881] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 133.982685][ T7881] ? fpu__alloc_mathframe+0xad/0x130 [ 133.982709][ T7881] get_sigframe+0x58d/0x7d0 [ 133.982734][ T7881] ? __pfx_get_sigframe+0x10/0x10 [ 133.982753][ T7881] ? kmem_cache_free+0x18f/0x400 [ 133.982782][ T7881] x64_setup_rt_frame+0x15b/0xd40 [ 133.982809][ T7881] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.982836][ T7881] ? _raw_spin_unlock_irq+0x2e/0x50 [ 133.982854][ T7881] ? get_signal+0x1151/0x1340 [ 133.982884][ T7881] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 133.982915][ T7881] arch_do_signal_or_restart+0x3d7/0x750 [ 133.982941][ T7881] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 133.982974][ T7881] ? exit_to_user_mode_loop+0x40/0x110 [ 133.982998][ T7881] exit_to_user_mode_loop+0x75/0x110 [ 133.983018][ T7881] do_syscall_64+0x2bd/0x3b0 [ 133.983038][ T7881] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.983058][ T7881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.983074][ T7881] ? clear_bhb_loop+0x60/0xb0 [ 133.983094][ T7881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.983110][ T7881] RIP: 0033:0x7fc304d8e929 [ 133.983125][ T7881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.983137][ T7881] RSP: 002b:00007fc305bc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 133.983155][ T7881] RAX: ffffffffffffffea RBX: 00007fc304fb5fa0 RCX: 00007fc304d8e929 [ 133.983168][ T7881] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005 [ 133.983178][ T7881] RBP: 00007fc305bc4090 R08: 0000200000000640 R09: 0000000000000000 [ 133.983188][ T7881] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 133.983199][ T7881] R13: 0000000000000000 R14: 00007fc304fb5fa0 R15: 00007ffd15400728 [ 133.983227][ T7881] [ 134.262625][ T7888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.766'. [ 134.654862][ T7912] netlink: 36 bytes leftover after parsing attributes in process `syz.0.772'. [ 134.662540][ T7913] FAULT_INJECTION: forcing a failure. [ 134.662540][ T7913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.683210][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'. [ 134.692325][ T7913] CPU: 1 UID: 0 PID: 7913 Comm: syz.1.776 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 134.692350][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.692358][ T7913] Call Trace: [ 134.692365][ T7913] [ 134.692372][ T7913] dump_stack_lvl+0x189/0x250 [ 134.692400][ T7913] ? __pfx____ratelimit+0x10/0x10 [ 134.692420][ T7913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.692443][ T7913] ? __pfx__printk+0x10/0x10 [ 134.692461][ T7913] ? __might_fault+0xb0/0x130 [ 134.692488][ T7913] should_fail_ex+0x414/0x560 [ 134.692514][ T7913] _copy_from_user+0x2d/0xb0 [ 134.692533][ T7913] __sys_connect+0x123/0x440 [ 134.692556][ T7913] ? __fget_files+0x3a0/0x420 [ 134.692575][ T7913] ? __pfx___sys_connect+0x10/0x10 [ 134.692612][ T7913] ? __pfx_ksys_write+0x10/0x10 [ 134.692624][ T7913] ? rcu_is_watching+0x15/0xb0 [ 134.692646][ T7913] __x64_sys_connect+0x7a/0x90 [ 134.692670][ T7913] do_syscall_64+0xfa/0x3b0 [ 134.692689][ T7913] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.692707][ T7913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.692723][ T7913] ? clear_bhb_loop+0x60/0xb0 [ 134.692744][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.692767][ T7913] RIP: 0033:0x7f7c5f18e929 [ 134.692783][ T7913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.692796][ T7913] RSP: 002b:00007f7c5ff63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 134.692815][ T7913] RAX: ffffffffffffffda RBX: 00007f7c5f3b5fa0 RCX: 00007f7c5f18e929 [ 134.692827][ T7913] RDX: 0000000000000032 RSI: 00002000000002c0 RDI: 0000000000000005 [ 134.692837][ T7913] RBP: 00007f7c5ff63090 R08: 0000000000000000 R09: 0000000000000000 [ 134.692848][ T7913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.692858][ T7913] R13: 0000000000000000 R14: 00007f7c5f3b5fa0 R15: 00007ffebb390e98 [ 134.692886][ T7913] [ 134.693498][ T7912] netlink: 36 bytes leftover after parsing attributes in process `syz.0.772'. [ 134.912912][ T7923] netlink: 21 bytes leftover after parsing attributes in process `syz.1.777'. [ 134.964693][ T7914] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 134.997719][ T7926] netlink: 44 bytes leftover after parsing attributes in process `syz.1.777'. [ 135.026492][ T7923] netlink: 44 bytes leftover after parsing attributes in process `syz.1.777'. [ 135.550045][ T7950] netlink: 21 bytes leftover after parsing attributes in process `syz.3.790'. [ 135.718147][ T7955] netlink: 44 bytes leftover after parsing attributes in process `syz.3.790'. [ 136.444916][ T7974] xt_CT: No such helper "pptp" [ 137.054780][ T8006] xt_CT: No such helper "pptp" [ 137.301868][ T8019] netlink: 'syz.2.815': attribute type 10 has an invalid length. [ 137.321310][ T8019] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.338854][ T8019] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.352756][ T8019] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.363810][ T8019] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.405167][ T8019] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 137.428809][ T8019] team0: Failed to send options change via netlink (err -105) [ 137.436668][ T8019] team0: Port device geneve0 added [ 137.502510][ T8029] : entered promiscuous mode [ 138.042036][ T8048] xt_CT: No such helper "pptp" [ 138.741259][ T8091] gtp0: entered promiscuous mode [ 138.752582][ T8091] gtp0: entered allmulticast mode [ 138.773041][ T8090] delete_channel: no stack [ 139.384063][ T8134] __nla_validate_parse: 11 callbacks suppressed [ 139.384083][ T8134] netlink: 36 bytes leftover after parsing attributes in process `syz.3.862'. [ 139.581994][ T8139] xt_CT: No such helper "pptp" [ 139.812517][ T12] erspan0: left promiscuous mode [ 139.827393][ T8165] netlink: 'syz.4.874': attribute type 72 has an invalid length. [ 139.846877][ T8165] netlink: 1016 bytes leftover after parsing attributes in process `syz.4.874'. [ 140.014647][ T8178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.878'. [ 140.041668][ T8178] dummy0: entered promiscuous mode [ 140.053956][ T8178] dummy0: left promiscuous mode [ 140.116497][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 140.392177][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.889'. [ 140.789371][ T8216] lo speed is unknown, defaulting to 1000 [ 140.824840][ T8216] lo speed is unknown, defaulting to 1000 [ 140.837556][ T8218] netlink: 44 bytes leftover after parsing attributes in process `syz.3.899'. [ 140.862188][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 140.895724][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.899'. [ 140.905035][ T8216] lo speed is unknown, defaulting to 1000 [ 140.970263][ T8216] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.043037][ T8230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.903'. [ 141.064167][ T8216] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 141.157461][ T8216] lo speed is unknown, defaulting to 1000 [ 141.192274][ T8216] lo speed is unknown, defaulting to 1000 [ 141.207293][ T8216] lo speed is unknown, defaulting to 1000 [ 141.223020][ T8216] lo speed is unknown, defaulting to 1000 [ 141.245005][ T8216] lo speed is unknown, defaulting to 1000 [ 141.493871][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 141.655904][ T8258] FAULT_INJECTION: forcing a failure. [ 141.655904][ T8258] name failslab, interval 1, probability 0, space 0, times 0 [ 141.682998][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz.4.915 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 141.683022][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.683032][ T8258] Call Trace: [ 141.683039][ T8258] [ 141.683047][ T8258] dump_stack_lvl+0x189/0x250 [ 141.683075][ T8258] ? __pfx____ratelimit+0x10/0x10 [ 141.683096][ T8258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.683115][ T8258] ? __pfx__printk+0x10/0x10 [ 141.683137][ T8258] ? ref_tracker_alloc+0x318/0x460 [ 141.683163][ T8258] should_fail_ex+0x414/0x560 [ 141.683188][ T8258] should_failslab+0xa8/0x100 [ 141.683207][ T8258] kmem_cache_alloc_noprof+0x73/0x3c0 [ 141.683224][ T8258] ? skb_clone+0x212/0x3a0 [ 141.683248][ T8258] skb_clone+0x212/0x3a0 [ 141.683270][ T8258] __netlink_deliver_tap+0x404/0x850 [ 141.683300][ T8258] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.683318][ T8258] netlink_deliver_tap+0x19c/0x1b0 [ 141.683335][ T8258] netlink_unicast+0x72f/0x8d0 [ 141.683368][ T8258] netlink_sendmsg+0x805/0xb30 [ 141.683392][ T8258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.683408][ T8258] ? aa_sock_msg_perm+0x94/0x160 [ 141.683430][ T8258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.683449][ T8258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.683466][ T8258] __sock_sendmsg+0x219/0x270 [ 141.683491][ T8258] ____sys_sendmsg+0x505/0x830 [ 141.683513][ T8258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.683540][ T8258] ? import_iovec+0x74/0xa0 [ 141.683562][ T8258] ___sys_sendmsg+0x21f/0x2a0 [ 141.683583][ T8258] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.683638][ T8258] ? __fget_files+0x2a/0x420 [ 141.683656][ T8258] ? __fget_files+0x3a0/0x420 [ 141.683685][ T8258] __x64_sys_sendmsg+0x19b/0x260 [ 141.683706][ T8258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.683735][ T8258] ? __pfx_ksys_write+0x10/0x10 [ 141.683760][ T8258] ? rcu_is_watching+0x15/0xb0 [ 141.683782][ T8258] ? do_syscall_64+0xbe/0x3b0 [ 141.683808][ T8258] do_syscall_64+0xfa/0x3b0 [ 141.683828][ T8258] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.683846][ T8258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.683863][ T8258] ? clear_bhb_loop+0x60/0xb0 [ 141.683883][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.683899][ T8258] RIP: 0033:0x7fc304d8e929 [ 141.683915][ T8258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.683928][ T8258] RSP: 002b:00007fc305bc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.683946][ T8258] RAX: ffffffffffffffda RBX: 00007fc304fb5fa0 RCX: 00007fc304d8e929 [ 141.683956][ T8258] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000007 [ 141.683966][ T8258] RBP: 00007fc305bc4090 R08: 0000000000000000 R09: 0000000000000000 [ 141.683976][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.683985][ T8258] R13: 0000000000000000 R14: 00007fc304fb5fa0 R15: 00007ffd15400728 [ 141.684011][ T8258] [ 142.695665][ T8295] FAULT_INJECTION: forcing a failure. [ 142.695665][ T8295] name failslab, interval 1, probability 0, space 0, times 0 [ 142.733193][ T8295] CPU: 1 UID: 0 PID: 8295 Comm: syz.3.928 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 142.733220][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.733230][ T8295] Call Trace: [ 142.733237][ T8295] [ 142.733245][ T8295] dump_stack_lvl+0x189/0x250 [ 142.733275][ T8295] ? __pfx____ratelimit+0x10/0x10 [ 142.733297][ T8295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.733320][ T8295] ? __pfx__printk+0x10/0x10 [ 142.733343][ T8295] ? __pfx___might_resched+0x10/0x10 [ 142.733363][ T8295] should_fail_ex+0x414/0x560 [ 142.733390][ T8295] should_failslab+0xa8/0x100 [ 142.733411][ T8295] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 142.733430][ T8295] ? __alloc_skb+0x112/0x2d0 [ 142.733449][ T8295] __alloc_skb+0x112/0x2d0 [ 142.733469][ T8295] netlink_sendmsg+0x5c6/0xb30 [ 142.733495][ T8295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.733516][ T8295] ? aa_sock_msg_perm+0x94/0x160 [ 142.733538][ T8295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.733558][ T8295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.733576][ T8295] __sock_sendmsg+0x219/0x270 [ 142.733610][ T8295] ____sys_sendmsg+0x505/0x830 [ 142.733633][ T8295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.733660][ T8295] ? import_iovec+0x74/0xa0 [ 142.733682][ T8295] ___sys_sendmsg+0x21f/0x2a0 [ 142.733702][ T8295] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.733755][ T8295] ? __fget_files+0x2a/0x420 [ 142.733773][ T8295] ? __fget_files+0x3a0/0x420 [ 142.733802][ T8295] __x64_sys_sendmsg+0x19b/0x260 [ 142.733823][ T8295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.733850][ T8295] ? __pfx_ksys_write+0x10/0x10 [ 142.733864][ T8295] ? rcu_is_watching+0x15/0xb0 [ 142.733885][ T8295] ? do_syscall_64+0xbe/0x3b0 [ 142.733910][ T8295] do_syscall_64+0xfa/0x3b0 [ 142.733930][ T8295] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.733950][ T8295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.733966][ T8295] ? clear_bhb_loop+0x60/0xb0 [ 142.733986][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.734002][ T8295] RIP: 0033:0x7f578d38e929 [ 142.734018][ T8295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.734030][ T8295] RSP: 002b:00007f578e282038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.734048][ T8295] RAX: ffffffffffffffda RBX: 00007f578d5b5fa0 RCX: 00007f578d38e929 [ 142.734060][ T8295] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 142.734071][ T8295] RBP: 00007f578e282090 R08: 0000000000000000 R09: 0000000000000000 [ 142.734081][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.734091][ T8295] R13: 0000000000000000 R14: 00007f578d5b5fa0 R15: 00007ffcd81ca9e8 [ 142.734118][ T8295] [ 142.864519][ T8303] FAULT_INJECTION: forcing a failure. [ 142.864519][ T8303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.865344][ T8303] [ 142.865354][ T8303] ====================================================== [ 142.865360][ T8303] WARNING: possible circular locking dependency detected [ 142.865372][ T8303] 6.15.0-syzkaller-12463-g0097c4195b1d #0 Not tainted [ 142.865381][ T8303] ------------------------------------------------------ [ 142.865387][ T8303] syz.1.933/8303 is trying to acquire lock: [ 142.865396][ T8303] ffffffff8e133280 (console_owner){-...}-{0:0}, at: vprintk_emit+0x444/0x7a0 [ 142.865437][ T8303] [ 142.865437][ T8303] but task is already holding lock: [ 142.865464][ T8303] ffff8880b863b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 142.865505][ T8303] [ 142.865505][ T8303] which lock already depends on the new lock. [ 142.865505][ T8303] [ 142.865510][ T8303] [ 142.865510][ T8303] the existing dependency chain (in reverse order) is: [ 142.865516][ T8303] [ 142.865516][ T8303] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 142.865536][ T8303] lock_acquire+0x120/0x360 [ 142.865555][ T8303] _raw_spin_lock_nested+0x32/0x50 [ 142.865572][ T8303] raw_spin_rq_lock_nested+0x2a/0x140 [ 142.865591][ T8303] task_rq_lock+0xbc/0x470 [ 142.865610][ T8303] cgroup_move_task+0x9a/0x590 [ 142.865623][ T8303] css_set_move_task+0x658/0x9e0 [ 142.865638][ T8303] cgroup_post_fork+0x1ef/0x790 [ 142.865652][ T8303] copy_process+0x3862/0x3c00 [ 142.865665][ T8303] kernel_clone+0x21e/0x870 [ 142.865679][ T8303] user_mode_thread+0xdd/0x140 [ 142.865693][ T8303] rest_init+0x23/0x300 [ 142.865705][ T8303] start_kernel+0x47d/0x500 [ 142.865721][ T8303] x86_64_start_reservations+0x24/0x30 [ 142.865741][ T8303] x86_64_start_kernel+0x143/0x1c0 [ 142.865761][ T8303] common_startup_64+0x13e/0x147 [ 142.865776][ T8303] [ 142.865776][ T8303] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 142.865796][ T8303] lock_acquire+0x120/0x360 [ 142.865813][ T8303] _raw_spin_lock_irqsave+0xa7/0xf0 [ 142.865834][ T8303] try_to_wake_up+0x6e/0x1290 [ 142.865848][ T8303] __wake_up_common_lock+0x134/0x1f0 [ 142.865865][ T8303] tty_port_default_wakeup+0xa2/0xf0 [ 142.865882][ T8303] serial8250_tx_chars+0x72e/0x970 [ 142.865896][ T8303] serial8250_handle_irq+0x633/0xbb0 [ 142.865910][ T8303] serial8250_default_handle_irq+0xbf/0x1b0 [ 142.865928][ T8303] serial8250_interrupt+0xa2/0x1d0 [ 142.865947][ T8303] __handle_irq_event_percpu+0x28c/0x980 [ 142.865964][ T8303] handle_irq_event+0x8b/0x1e0 [ 142.865979][ T8303] handle_edge_irq+0x267/0x9c0 [ 142.865992][ T8303] __common_interrupt+0x143/0x250 [ 142.866009][ T8303] common_interrupt+0xb6/0xe0 [ 142.866022][ T8303] asm_common_interrupt+0x26/0x40 [ 142.866036][ T8303] pv_native_safe_halt+0x13/0x20 [ 142.866051][ T8303] default_idle+0x13/0x20 [ 142.866070][ T8303] default_idle_call+0x74/0xb0 [ 142.866089][ T8303] do_idle+0x1e8/0x510 [ 142.866101][ T8303] cpu_startup_entry+0x44/0x60 [ 142.866113][ T8303] rest_init+0x2de/0x300 [ 142.866125][ T8303] start_kernel+0x47d/0x500 [ 142.866140][ T8303] x86_64_start_reservations+0x24/0x30 [ 142.866159][ T8303] x86_64_start_kernel+0x143/0x1c0 [ 142.866179][ T8303] common_startup_64+0x13e/0x147 [ 142.866193][ T8303] [ 142.866193][ T8303] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 142.866214][ T8303] lock_acquire+0x120/0x360 [ 142.866231][ T8303] _raw_spin_lock_irqsave+0xa7/0xf0 [ 142.866247][ T8303] __wake_up_common_lock+0x2f/0x1f0 [ 142.866262][ T8303] tty_port_default_wakeup+0xa2/0xf0 [ 142.866278][ T8303] serial8250_tx_chars+0x72e/0x970 [ 142.866292][ T8303] serial8250_handle_irq+0x633/0xbb0 [ 142.866306][ T8303] serial8250_default_handle_irq+0xbf/0x1b0 [ 142.866323][ T8303] serial8250_interrupt+0xa2/0x1d0 [ 142.866342][ T8303] __handle_irq_event_percpu+0x28c/0x980 [ 142.866357][ T8303] handle_irq_event+0x8b/0x1e0 [ 142.866372][ T8303] handle_edge_irq+0x267/0x9c0 [ 142.866385][ T8303] __common_interrupt+0x143/0x250 [ 142.866402][ T8303] common_interrupt+0xb6/0xe0 [ 142.866414][ T8303] asm_common_interrupt+0x26/0x40 [ 142.866427][ T8303] pv_native_safe_halt+0x13/0x20 [ 142.866443][ T8303] default_idle+0x13/0x20 [ 142.866461][ T8303] default_idle_call+0x74/0xb0 [ 142.866479][ T8303] do_idle+0x1e8/0x510 [ 142.866491][ T8303] cpu_startup_entry+0x44/0x60 [ 142.866503][ T8303] rest_init+0x2de/0x300 [ 142.866514][ T8303] start_kernel+0x47d/0x500 [ 142.866527][ T8303] x86_64_start_reservations+0x24/0x30 [ 142.866543][ T8303] x86_64_start_kernel+0x143/0x1c0 [ 142.866559][ T8303] common_startup_64+0x13e/0x147 [ 142.866571][ T8303] [ 142.866571][ T8303] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 142.866589][ T8303] lock_acquire+0x120/0x360 [ 142.866604][ T8303] _raw_spin_lock_irqsave+0xa7/0xf0 [ 142.866618][ T8303] serial8250_console_write+0x17e/0x1ba0 [ 142.866631][ T8303] console_flush_all+0x728/0xc40 [ 142.866643][ T8303] console_unlock+0xc4/0x270 [ 142.866654][ T8303] vprintk_emit+0x5b7/0x7a0 [ 142.866666][ T8303] _printk+0xcf/0x120 [ 142.866677][ T8303] register_console+0xa8b/0xf90 [ 142.866689][ T8303] univ8250_console_init+0x52/0x90 [ 142.866705][ T8303] console_init+0x1a1/0x670 [ 142.866720][ T8303] start_kernel+0x2cc/0x500 [ 142.866732][ T8303] x86_64_start_reservations+0x24/0x30 [ 142.866749][ T8303] x86_64_start_kernel+0x143/0x1c0 [ 142.866765][ T8303] common_startup_64+0x13e/0x147 [ 142.866776][ T8303] [ 142.866776][ T8303] -> #0 (console_owner){-...}-{0:0}: [ 142.866793][ T8303] validate_chain+0xb9b/0x2140 [ 142.866803][ T8303] __lock_acquire+0xab9/0xd20 [ 142.866824][ T8303] lock_acquire+0x120/0x360 [ 142.866838][ T8303] vprintk_emit+0x460/0x7a0 [ 142.866848][ T8303] _printk+0xcf/0x120 [ 142.866859][ T8303] should_fail_ex+0x3f5/0x560 [ 142.866873][ T8303] strncpy_from_user+0x36/0x290 [ 142.866886][ T8303] strncpy_from_user_nofault+0x72/0x150 [ 142.866903][ T8303] bpf_probe_read_user_str+0x2a/0x70 [ 142.866920][ T8303] bpf_prog_9deb4dd9eeaa7b3b+0x46/0x4e [ 142.866929][ T8303] bpf_trace_run4+0x28b/0x4a0 [ 142.866942][ T8303] __bpf_trace_sched_switch+0x17a/0x1e0 [ 142.866954][ T8303] __traceiter_sched_switch+0x9d/0xd0 [ 142.866968][ T8303] __schedule+0x2328/0x4d00 [ 142.866980][ T8303] schedule+0x165/0x360 [ 142.866991][ T8303] irqentry_exit_to_user_mode+0x5d/0x120 [ 142.867006][ T8303] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.867018][ T8303] [ 142.867018][ T8303] other info that might help us debug this: [ 142.867018][ T8303] [ 142.867022][ T8303] Chain exists of: [ 142.867022][ T8303] console_owner --> &p->pi_lock --> &rq->__lock [ 142.867022][ T8303] [ 142.867041][ T8303] Possible unsafe locking scenario: [ 142.867041][ T8303] [ 142.867045][ T8303] CPU0 CPU1 [ 142.867050][ T8303] ---- ---- [ 142.867053][ T8303] lock(&rq->__lock); [ 142.867061][ T8303] lock(&p->pi_lock); [ 142.867070][ T8303] lock(&rq->__lock); [ 142.867079][ T8303] lock(console_owner); [ 142.867087][ T8303] [ 142.867087][ T8303] *** DEADLOCK *** [ 142.867087][ T8303] [ 142.867091][ T8303] 2 locks held by syz.1.933/8303: [ 142.867098][ T8303] #0: ffff8880b863b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 142.867132][ T8303] #1: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 142.867162][ T8303] [ 142.867162][ T8303] stack backtrace: [ 142.867170][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.1.933 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 142.867184][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.867192][ T8303] Call Trace: [ 142.867197][ T8303] [ 142.867203][ T8303] dump_stack_lvl+0x189/0x250 [ 142.867223][ T8303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.867241][ T8303] ? __pfx__printk+0x10/0x10 [ 142.867254][ T8303] ? print_lock_name+0xde/0x100 [ 142.867268][ T8303] print_circular_bug+0x2ee/0x310 [ 142.867282][ T8303] check_noncircular+0x134/0x160 [ 142.867296][ T8303] validate_chain+0xb9b/0x2140 [ 142.867315][ T8303] __lock_acquire+0xab9/0xd20 [ 142.867333][ T8303] ? vprintk_emit+0x444/0x7a0 [ 142.867344][ T8303] lock_acquire+0x120/0x360 [ 142.867360][ T8303] ? vprintk_emit+0x444/0x7a0 [ 142.867374][ T8303] ? do_raw_spin_unlock+0x122/0x240 [ 142.867388][ T8303] ? vprintk_emit+0x444/0x7a0 [ 142.867399][ T8303] vprintk_emit+0x460/0x7a0 [ 142.867408][ T8303] ? vprintk_emit+0x444/0x7a0 [ 142.867417][ T8303] ? __pfx_vprintk_emit+0x10/0x10 [ 142.867429][ T8303] _printk+0xcf/0x120 [ 142.867437][ T8303] ? __pfx____ratelimit+0x10/0x10 [ 142.867449][ T8303] ? __pfx__printk+0x10/0x10 [ 142.867458][ T8303] ? nmi_uaccess_okay+0x75/0xb0 [ 142.867468][ T8303] ? bpf_send_signal_common+0x434/0x540 [ 142.867480][ T8303] should_fail_ex+0x3f5/0x560 [ 142.867492][ T8303] strncpy_from_user+0x36/0x290 [ 142.867503][ T8303] strncpy_from_user_nofault+0x72/0x150 [ 142.867515][ T8303] bpf_probe_read_user_str+0x2a/0x70 [ 142.867528][ T8303] bpf_prog_9deb4dd9eeaa7b3b+0x46/0x4e [ 142.867536][ T8303] bpf_trace_run4+0x28b/0x4a0 [ 142.867546][ T8303] ? bpf_trace_run4+0x19c/0x4a0 [ 142.867556][ T8303] ? __pfx_bpf_trace_run4+0x10/0x10 [ 142.867566][ T8303] ? kvm_sched_clock_read+0x11/0x20 [ 142.867580][ T8303] ? sched_clock_cpu+0x74/0x430 [ 142.867594][ T8303] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 142.867605][ T8303] __bpf_trace_sched_switch+0x17a/0x1e0 [ 142.867616][ T8303] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 142.867625][ T8303] ? psi_group_change+0xbc7/0x1210 [ 142.867634][ T8303] ? rcu_read_lock_sched_held+0x89/0x100 [ 142.867643][ T8303] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 142.867652][ T8303] ? psi_task_switch+0x314/0x6d0 [ 142.867661][ T8303] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 142.867672][ T8303] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 142.867682][ T8303] __traceiter_sched_switch+0x9d/0xd0 [ 142.867693][ T8303] __schedule+0x2328/0x4d00 [ 142.867706][ T8303] ? sched_clock_cpu+0x74/0x430 [ 142.867718][ T8303] ? lapic_next_event+0x11/0x20 [ 142.867730][ T8303] ? schedule+0x165/0x360 [ 142.867740][ T8303] ? __pfx_sched_clock_cpu+0x10/0x10 [ 142.867752][ T8303] ? __pfx___schedule+0x10/0x10 [ 142.867764][ T8303] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 142.867777][ T8303] schedule+0x165/0x360 [ 142.867787][ T8303] irqentry_exit_to_user_mode+0x5d/0x120 [ 142.867799][ T8303] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.867808][ T8303] RIP: 0033:0x7f7c5f18d3df [ 142.867824][ T8303] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 142.867831][ T8303] RSP: 002b:00007f7c5ff63030 EFLAGS: 00000293 [ 142.867839][ T8303] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00007f7c5f18d3df [ 142.867846][ T8303] RDX: 0000000000000001 RSI: 00007f7c5ff63090 RDI: 0000000000000004 [ 142.867851][ T8303] RBP: 00007f7c5ff63090 R08: 0000000000000000 R09: 00007f7c5ff62df7 [ 142.867857][ T8303] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 142.867863][ T8303] R13: 0000000000000000 R14: 00007f7c5f3b5fa0 R15: 00007ffebb390e98 [ 142.867872][ T8303] [ 144.115265][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.1.933 Not tainted 6.15.0-syzkaller-12463-g0097c4195b1d #0 PREEMPT(full) [ 144.115280][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.115286][ T8303] Call Trace: [ 144.115293][ T8303] [ 144.115300][ T8303] dump_stack_lvl+0x189/0x250 [ 144.115320][ T8303] ? __pfx____ratelimit+0x10/0x10 [ 144.115334][ T8303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.115347][ T8303] ? __pfx__printk+0x10/0x10 [ 144.115357][ T8303] ? nmi_uaccess_okay+0x75/0xb0 [ 144.115368][ T8303] ? bpf_send_signal_common+0x434/0x540 [ 144.115381][ T8303] should_fail_ex+0x414/0x560 [ 144.115394][ T8303] strncpy_from_user+0x36/0x290 [ 144.115407][ T8303] strncpy_from_user_nofault+0x72/0x150 [ 144.115427][ T8303] bpf_probe_read_user_str+0x2a/0x70 [ 144.115442][ T8303] bpf_prog_9deb4dd9eeaa7b3b+0x46/0x4e [ 144.115451][ T8303] bpf_trace_run4+0x28b/0x4a0 [ 144.115463][ T8303] ? bpf_trace_run4+0x19c/0x4a0 [ 144.115473][ T8303] ? __pfx_bpf_trace_run4+0x10/0x10 [ 144.115482][ T8303] ? kvm_sched_clock_read+0x11/0x20 [ 144.115493][ T8303] ? sched_clock_cpu+0x74/0x430 [ 144.115536][ T8303] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 144.115549][ T8303] __bpf_trace_sched_switch+0x17a/0x1e0 [ 144.115560][ T8303] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 144.115570][ T8303] ? psi_group_change+0xbc7/0x1210 [ 144.115579][ T8303] ? rcu_read_lock_sched_held+0x89/0x100 [ 144.115588][ T8303] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 144.115598][ T8303] ? psi_task_switch+0x314/0x6d0 [ 144.115607][ T8303] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 144.115619][ T8303] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 144.115629][ T8303] __traceiter_sched_switch+0x9d/0xd0 [ 144.115640][ T8303] __schedule+0x2328/0x4d00 [ 144.115654][ T8303] ? sched_clock_cpu+0x74/0x430 [ 144.115667][ T8303] ? lapic_next_event+0x11/0x20 [ 144.115679][ T8303] ? schedule+0x165/0x360 [ 144.115689][ T8303] ? __pfx_sched_clock_cpu+0x10/0x10 [ 144.115701][ T8303] ? __pfx___schedule+0x10/0x10 [ 144.115713][ T8303] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 144.115726][ T8303] schedule+0x165/0x360 [ 144.115736][ T8303] irqentry_exit_to_user_mode+0x5d/0x120 [ 144.115748][ T8303] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.115760][ T8303] RIP: 0033:0x7f7c5f18d3df [ 144.115771][ T8303] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 144.115778][ T8303] RSP: 002b:00007f7c5ff63030 EFLAGS: 00000293 [ 144.115788][ T8303] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00007f7c5f18d3df [ 144.115794][ T8303] RDX: 0000000000000001 RSI: 00007f7c5ff63090 RDI: 0000000000000004 [ 144.115800][ T8303] RBP: 00007f7c5ff63090 R08: 0000000000000000 R09: 00007f7c5ff62df7 [ 144.115806][ T8303] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 144.115811][ T8303] R13: 0000000000000000 R14: 00007f7c5f3b5fa0 R15: 00007ffebb390e98 [ 144.115820][ T8303] [ 144.412604][ T8303] netlink: 'syz.1.933': attribute type 29 has an invalid length. SYZFAIL: failed to send rpc fd=3 want=184 sent=0 n=-1 (errno 32: Broken pipe) [ 144.791245][ T8304] lo speed is unknown, defaulting to 1000 [ 145.103447][ T4572] dummy0: left allmulticast mode [ 145.108607][ T4572] dummy0: left promiscuous mode [ 145.113951][ T4572] bridge0: port 3(dummy0) entered disabled state [ 145.122624][ T4572] bridge_slave_1: left allmulticast mode [ 145.128303][ T4572] bridge_slave_1: left promiscuous mode [ 145.135963][ T4572] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.144756][ T4572] bridge_slave_0: left allmulticast mode [ 145.150851][ T4572] bridge_slave_0: left promiscuous mode [ 145.156709][ T4572] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.404605][ T4572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.414480][ T4572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.423765][ T4572] bond0 (unregistering): Released all slaves [ 145.630385][ T4572] hsr_slave_0: left promiscuous mode [ 145.636562][ T4572] hsr_slave_1: left promiscuous mode [ 145.642889][ T4572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.650657][ T4572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.870056][ T4572] team0 (unregistering): Port device team_slave_1 removed [ 145.899784][ T4572] team0 (unregistering): Port device team_slave_0 removed [ 146.506585][ T4572] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.571846][ T4572] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.652433][ T4572] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.713005][ T4572] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.775509][ T4572] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.812118][ T4572] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.862408][ T4572] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.911859][ T4572] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.142637][ T4572] dummy0: left allmulticast mode [ 147.148134][ T4572] bridge0: port 3(dummy0) entered disabled state [ 147.155435][ T4572] bridge_slave_1: left allmulticast mode [ 147.161338][ T4572] bridge_slave_1: left promiscuous mode [ 147.167014][ T4572] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.175185][ T4572] bridge_slave_0: left allmulticast mode [ 147.182151][ T4572] bridge_slave_0: left promiscuous mode [ 147.188055][ T4572] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.197183][ T4572] bridge_slave_1: left allmulticast mode [ 147.203504][ T4572] bridge_slave_1: left promiscuous mode [ 147.209311][ T4572] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.217413][ T4572] bridge_slave_0: left allmulticast mode [ 147.223234][ T4572] bridge_slave_0: left promiscuous mode [ 147.228979][ T4572] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.328971][ T4572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.340025][ T4572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.349605][ T4572] bond0 (unregistering): Released all slaves [ 147.359950][ T4572] bond1 (unregistering): (slave veth3): Releasing backup interface [ 147.369180][ T4572] bond1 (unregistering): Released all slaves [ 147.553707][ T4572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.564169][ T4572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.573575][ T4572] bond0 (unregistering): Released all slaves [ 147.751249][ T4572] bond0 (unregistering): Released all slaves [ 147.827035][ T4572] : left promiscuous mode [ 147.859707][ T4572] tipc: Left network mode [ 147.971886][ T4572] batman_adv: batadv0: Interface deactivated: macvtap1 [ 147.979372][ T4572] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode [ 147.994036][ T4572] batman_adv: batadv0: Removing interface: macvtap1 [ 148.299598][ T4572] hsr_slave_0: left promiscuous mode [ 148.305427][ T4572] hsr_slave_1: left promiscuous mode [ 148.311347][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.319139][ T4572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.327132][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.334923][ T4572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.345747][ T4572] hsr_slave_0: left promiscuous mode [ 148.352063][ T4572] hsr_slave_1: left promiscuous mode [ 148.357847][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.365348][ T4572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.373365][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.380861][ T4572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.391655][ T4572] hsr_slave_0: left promiscuous mode [ 148.397468][ T4572] hsr_slave_1: left promiscuous mode [ 148.406976][ T4572] veth1_macvtap: left promiscuous mode [ 148.412600][ T4572] veth0_macvtap: left promiscuous mode [ 148.418245][ T4572] veth1_vlan: left promiscuous mode [ 148.423551][ T4572] veth0_vlan: left promiscuous mode [ 148.429711][ T4572] veth1_macvtap: left promiscuous mode [ 148.435326][ T4572] veth0_macvtap: left promiscuous mode [ 148.441253][ T4572] veth1_vlan: left promiscuous mode [ 148.446472][ T4572] veth0_vlan: left promiscuous mode [ 148.616318][ T4572] team0 (unregistering): Port device team_slave_1 removed [ 148.627938][ T4572] team0 (unregistering): Port device team_slave_0 removed [ 148.792549][ T4572] team0 (unregistering): Port device team_slave_1 removed [ 148.813220][ T4572] team0 (unregistering): Port device team_slave_0 removed [ 149.998007][ T4572] IPVS: stop unused estimator thread 0... [ 150.004529][ T4572] IPVS: stop unused estimator thread 0... [ 150.011021][ T4572] IPVS: stop unused estimator thread 0...