last executing test programs: 9.104884474s ago: executing program 3 (id=369): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x805}], 0x1, 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x9) listen(r3, 0x47) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) recvmmsg(r2, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 4.777721826s ago: executing program 2 (id=407): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0x2, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0xd0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffff00, 0xffffff00, 'vlan0\x00', 'veth1\x00', {0xff}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe22b2fed862424b7, 0x0, 0x2, 0x6, 0x2, 0x5], 0x6, 0x3}, {0x1, [0x2, 0x3, 0x3, 0x2, 0x2, 0x2], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "054c8af2222159b9fd2186755c86ac2fb42a7580c4fc65a6d8d922fb59f8"}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@remote, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) 4.657395955s ago: executing program 2 (id=408): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0x10, 0xd}, {0xfff1, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0x80, 0x40000004, 0x0, 0x40, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 2) 4.33887388s ago: executing program 2 (id=409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x60, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 4.13800416s ago: executing program 2 (id=411): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/224, 0xe0}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/183, 0xb7}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/108, 0x6c}, {&(0x7f00000007c0)=""/50, 0x32}], 0xa, 0x2, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) 4.047580765s ago: executing program 2 (id=412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x8007}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.909220714s ago: executing program 4 (id=414): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB='\b\x00N'], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x5) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0xfffffff3}, 0x1, 0x0, 0x0, 0xc000}, 0x48880) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf250600000006000b000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4880) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448d4, &(0x7f00000002c0)={0x4, 0x2, '\x00', 0x0, 0x4}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x44, 0xfffffffa, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x0, 0x20, 0x3, 0x6}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@private2, @in6=@mcast1, 0x6, 0x5, 0x4e20, 0x12, 0x2, 0xa0, 0x80, 0x21, r9, r10}, {0x1, 0x1, 0x60c, 0x800, 0x2, 0x2, 0x1200000000, 0x4}, {0x7ff, 0x7, 0xb, 0x6}, 0x3, 0x6e6bba, 0x2, 0x0, 0x3, 0x3}, {{@in=@local, 0x4d3, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x3507, 0x3, 0x0, 0x7, 0xab, 0x8000, 0x2}}, 0xe8) 3.808136558s ago: executing program 4 (id=416): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x2c, 0x3c, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@nested={0x18, 0x48, 0x0, 0x1, [@nested={0x14, 0x8, 0x0, 0x1, [@typed={0xe, 0x16, 0x0, 0x0, @str='-&]#\xae**$$\x00'}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) 3.728655425s ago: executing program 2 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f00000007c0), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x20048041) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0xa74dac616485594d, 0x1, 0xaa1, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0), &(0x7f0000000400), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x10, r2}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="c9ba0000bf230000000000ea450700b35fa6e821c8d16aed8701c2c4ed0000", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r4], 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e24, @loopback}}, 0xf, 0x4926, 0x10, 0x7, 0x80, 0x5, 0x8}, &(0x7f0000000040)=0x9c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x26, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}, "eaa2d7e2"}}}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis128)\x00'}, 0x58) socket$key(0xf, 0x3, 0x2) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 3.387522456s ago: executing program 1 (id=420): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt(r0, 0x9, 0x8, &(0x7f0000000040)=""/43, &(0x7f0000000080)=0x2b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$pptp(0x18, 0x1, 0x2) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010079797a3000000000080003400000f10a140000001100010000000000000000000000000a"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x1) 3.378275103s ago: executing program 3 (id=421): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66, 0x8}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x1c, r3, 0x201, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 3.333149344s ago: executing program 4 (id=422): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d0000001400000011000100"], 0xf0}}, 0x0) socket(0x11, 0x4, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a020000000000000000000003000000000300000003"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0x11, 0x4, 0x2, 0x2b, 0x44, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0xb, 0x7d, [@empty, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x38, 0x3, 0x8, [{@broadcast, 0x6d}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010100, 0x9}]}]}}}}}) r4 = socket$inet6(0xa, 0x80003, 0xff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r6, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 3.187533673s ago: executing program 3 (id=424): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812002b08020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000040100000f1f7000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x1009, &(0x7f0000002a80)=""/4105, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18023284890000080000000000000000000000b534f7c100000000"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x14c}}, 0x0) r4 = socket$inet_sctp(0x2, 0x8201ad65c48ccfb3, 0x84) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmmsg$inet6(r3, &(0x7f0000001e80)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xffffffb8, @remote, 0xa330}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000180)="13cfd4565aa9fbb7f39f67df47b5cb0960ca0296a87b0fa67eac2cbd0feeb22ed41e67df4816895626d87acf0237f65270016195d9f87cf5b20ec3b6bcce893f5046818354bb9f1528929d415af68f38057611d325f400e08f18bd51c4c85b6b", 0x60}, {&(0x7f0000000200)="668e9b0e11a820cc65560ad83c552fe1c2f3a2b3cc8fcacfde2b513933fb0f", 0x1f}, {&(0x7f0000000240)="bfa6cf8fd250e5b3dd8311f0c9e7a74ffdbfa30e608dea5e6f80d5d43a87e05e2077a3e60cd40c23a7720cf0cd7a9ad381c4bb917ddd038c0b868373ef2daf46bfec81959984bbc7a77236fa11783b2cf6ac77dc6767366006d79cfe047d676e77918f1fd72b80ba8352bc058c2eaf7ba65508dac65ea341a016ce54a73f4c0f81dbad1c79ba50637487c86baf4ad9a176e3688e068297cb44546bdb32edb70c3076c195", 0xa4}, {&(0x7f0000000340)="a399244282e1f0dbface4c0b9c0fdab1c3bcd412c40ed74a8784f4d8d1f175513a88689c08305062ebad2bd8054baf2fe8c722b7e79d6df66478cf5e18", 0x3d}, {&(0x7f00000004c0)="61651aec220a38ae691cbaf6b41258001e470e954c7ef27f372ad90db9f86a84bbdf", 0x22}, {&(0x7f0000000500)="af427239b57f66339a305dbbf359c04ce75d4818ebae14915cf0f68ed6ccb9bf90197704db73ae27f7e0e1512df938956e49c68b043e1d4ae262ecd6e946c09e75762e654bdf99101a2c7bdb77ea2c363f62fcf3ba67af0ad6d620ae0013f50702f4766f50737164e573f5f02ac8d5015753b554a8fa4cf8b5ab4c292f8f8a6723524e9c53f36a3edf78189a4a3d95c3bae96fac137e0605bc2147c7fcd087c04a7cdb4a09964fe9a2cfe94141beaf2bc9be4ea6d70601b6e0127873cd3eda7ff302bdeefa1b32045cf9205860e87c6bdc87ab0ce664", 0xd6}, {&(0x7f0000000600)="2bf6e5b3d08281e9331671731f4d0a45e0d3101494ee0a8ae981c4f373e1ce2fe25a3715997e96ad14cc78b3208b1b7cae2753441ea0dc5832962dd8cba8f8d1dc8a544b2c5e375ebb833c18cc3d2c4eaeb4bfea423252dff6a81313ed1bcef35d37eb2a6a4e6776313d683fd1", 0x6d}, {&(0x7f0000000680)="c08d3d101d41d0fa311bed0b1b6e6b6000e0595f88daf51ee7", 0x19}], 0x8, &(0x7f0000000740)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8001}}], 0x30}}, {{&(0x7f0000000780)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f00000007c0)="0d89d48904c39a3fc00d8038a73cf61666598a5a6e6df2814d9f98cf8b3eb2eb53db98b6271423896d93fdc33c597839f4fbe0e1c8148454188a9b9381be3f123fcaa838abbead5c95e029532bb6b62921ef4ef325fb05f63a391facb56ea14046e835b486ce82836d345717d0fa65e35011ff0ff0a9e0a5160c275d8d6ef89c516c8bf17d91cee9b0bbe026d12dbb1d4358b1d0f4a700c4", 0x98}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000000880)="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", 0xfa}, {&(0x7f0000000980)="04cc0d72a82da364dde6341664d0ec982c20c6e523e0516b38d859cb847630a9675674761adcd7d8bf4d6424facf5bccc0fe020ebf1b0163d5aed211876c8608f7fe22a94f32a52a694bf68d54473fba77860341f8c1048266114f58761dd34952aaed7ec1f58ba3abfa6fd6c385f2859941a17d578e13f5800d48b11a5f09772ddbb42cf5cca2c528c3510bec31", 0x8e}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="679bf9efb856d9ca87a341f83869c99c8fd902e5ca6a675151f08c9255c11bbc2d682010c7fff0d4d1e8601de2df2b060cfa173ec593bb002a4e4abba3b37cc0da6d2da76458bb21492db1f97d6b1dff692ceec9d7c55eb4779c08d41748a95f9981e5d832d76b5071eb143a16c214b1a23af6e6218b9716f5c349357f9b303c34b699d2902ed3f3bec4a109842db9d832cebf995ed0cd7dffcfd66ec8026ea50fd69ca84be3d565a38116cb0fed60befcf2324e1b04739af3353273ecd5b05dda87a99ce5c352dd12d497e37d726fc56bf72fe825", 0xd5}, {&(0x7f0000001c00)="2f200a3aadbe474a742df335f3f0d0f0642a590dc8c66707b3f6c77adab5271efbbf783a94c0f2abc5db59063a453c7fba9102e79b49f88bb423d31160025f7ef9623f6ccb8e7d425f14589d816da957dc5aa615f5a6e143a40b803465ad0f5d2d68aa44448beb509601080dd009aabd6f71d7c6aee0fc50a7f03aad5d78e4b9a164c70991a0a1320203b48ce64dbc315e60c835a0f69a2668d73e7a278582620f2527", 0xa3}, {&(0x7f0000000b80)="d22555e3f535995cf917e86ba2f7e9ae975ca1c97af36a92d9", 0x19}, {&(0x7f0000001cc0)="38c8dac2ea039c98da6d25d56b1ed472ae87de6ce1b58ad1438d85f9ddc88e9bd014af3d89dfe55f58c4363ffa48588b7dec878319dab7aeff6cc404445792a6bd6267c17f325b1a5fca7191213462264c05b2835715cac0bff6190bca031fde1f6c22bac8555cd52622b55a9d28acc7ae8a81c86f38b66941de6a05c25130d391c6fa4c7a6d9f8bf04db9a63923b05bd59ccdab9117b90c3f37ebb70498f0446dddcfe04057972338d2b8000142ae5e2abc37dfd81ff8b7e1cdd8ed97b663eba1dff20436426b5de25d00735a3d300c05e97ff64e9f0d21ebf31df600000000000000", 0xe3}], 0x9}}], 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4) write(r5, &(0x7f0000000000)="0a000000010001", 0x7) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000a40)={0x6e, 0x8, 0xa, 0x9, 0x6, 0x81}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a400000000009000200737d7a31000000000900010073797a30000000000800054000000025140011800a0001006c696d6974000000040001"], 0x98}, 0x1, 0x0, 0x0, 0x810}, 0xc4) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="000000f4519658bdb84cd68a00", @ANYRES16=r9, @ANYBLOB="01000000000000000000020202000900010073797a3000000000140002006272696467655f736c6176655f300000"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x40080) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)={0x20, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x4}]}]}, 0x20}}, 0x0) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) 3.085078661s ago: executing program 1 (id=425): r0 = socket$kcm(0x29, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/243, &(0x7f0000000040)=0xf3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000500), 0x7, r2}, 0x38) unshare(0x26020480) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@ax25={{0x3, @rose}, [@bcast, @netrom, @null, @netrom, @default, @rose, @null, @rose]}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000600)=""/222, 0xde}], 0x2}, 0x40) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'gre0\x00'}) r3 = socket(0x28, 0x1, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) 3.024771433s ago: executing program 0 (id=426): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x800a801) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000003c0)="342c5a6f61db", 0x6}, {&(0x7f0000000200)="facde9f8ac79774b83abd29892dfe4b4388fee3b7db42115f5b5789c", 0x1c}], 0x3}}], 0x1, 0x404000c) 2.818245491s ago: executing program 0 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x40880) 2.434319857s ago: executing program 0 (id=428): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32, @ANYBLOB="38002f8020eb03800c0005000800000000000000050002000300000008000100030000000c0002000201aaaaaaaaaaaa0800010006000000"], 0x54}, 0x1, 0x0, 0x0, 0x5396ebcfacd993b0}, 0x10) 2.267846699s ago: executing program 0 (id=429): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_type(r1, &(0x7f0000000000), 0x9) r2 = socket(0x28, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@report={0x4c, 0x20, 0x1, 0x70bd25, 0x25dfdbfd, {0x6c, {@in=@multicast2, @in=@private=0xa010100, 0x4e20, 0x0, 0x4e20, 0x2, 0x2, 0x20, 0x80, 0x4, 0x0, r6}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x20000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}, {{0x0, 0x0, 0x0}, 0x85ae}], 0x2, 0x60010020, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000000440)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}, {0x0}], 0x2}}], 0x1, 0x80) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000300)={0x9, &(0x7f0000000280)=[{0x3ff, 0x2, 0x5, 0x5}, {0x6, 0xf7, 0x9, 0x1}, {0x0, 0x4, 0x5c, 0xe}, {0xee65, 0xfc, 0x9, 0x4a02}, {0x7, 0x6, 0x5d, 0x30b}, {0x80, 0xb8, 0xcc, 0xffffffff}, {0x4, 0x1, 0x4, 0x1d}, {0xa, 0x40, 0x1, 0x81}, {0x5, 0xcb, 0x7, 0x4}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'vlan1\x00'}) 2.171873195s ago: executing program 4 (id=430): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04090000000000000002000000380004494c4717294f892cc8a6b41e6d689663395176b7256b5a34a68034000180090001006861680000000024000280080004400000080008000340000000ba080001400000001008000240000000000900010073797a30000000000900c5edc60cd02e88e98f8f2de6a5d59f020073797a32000000001400000011f33ac15000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r6, &(0x7f00000001c0)=""/64, 0x40) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0x47}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffd, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x6c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x19}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x80}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x6c}}, 0x0) 2.159912382s ago: executing program 1 (id=431): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x80000008, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@local, 0x4d2, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x5, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.487093023s ago: executing program 1 (id=432): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.386576213s ago: executing program 1 (id=433): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xa9) ioctl$FIONCLEX(r0, 0x5450) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x200) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic='\t']}, 0x14}], 0x1}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000013c00000c0004802c2006"], 0x20}, 0x1, 0x0, 0x0, 0x300408a5}, 0xc000) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) 1.108753974s ago: executing program 4 (id=434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40080) shutdown(r0, 0x1) 1.040953791s ago: executing program 3 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x4000, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r1, 0x6a98047402e98331, 0x0, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 1.007445246s ago: executing program 0 (id=436): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x1, 0x9}, {0x35, 0x0, 0x0, 0xffffffff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000020, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, 0x0, 0x0) close(r3) shutdown(r2, 0x0) close(r1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0xf, 0x10}, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x54, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40844) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=@deltfilter={0x86c, 0x2d, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0x2, 0xe}, {0xfff9, 0x1}}, [@f_rsvp={{0x9}, {0x83c, 0x2, [@TCA_RSVP_POLICE={0x838, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x2, 0x800, 0xc0e, 0x6, 0x3, 0x21e9, 0x9, 0x4, 0x2, 0x51, 0x3, 0x8, 0xa7, 0x10, 0xb0000000, 0xffffff01, 0x3, 0x1, 0xf6, 0xfff, 0x4, 0x4, 0xfffffffa, 0x8001, 0xf5, 0x7, 0x80, 0x7, 0x3, 0xe, 0x7, 0x83a0, 0x700, 0x2, 0x6, 0x8, 0x401, 0xab4, 0x1, 0x4, 0x2, 0x5, 0x2, 0xfffffff7, 0x8, 0x100, 0x7, 0x40, 0x0, 0xa1, 0x33d, 0x4, 0x7, 0x81, 0x9, 0xcf, 0xb3, 0x2, 0xa, 0xfffffff8, 0x0, 0x0, 0x4, 0x2, 0xffffff29, 0x4, 0x40, 0x9, 0xb4, 0x1, 0x1ff, 0x5, 0x3, 0x9e8, 0x2, 0x1, 0x7, 0x10000000, 0x10, 0x3, 0x961, 0x0, 0xc, 0xfffff9d6, 0x9, 0x200, 0xffff, 0x7, 0x459, 0x400000, 0xffffffff, 0x8, 0x8, 0x4, 0x3, 0x2, 0x4, 0x80000000, 0x1, 0x3, 0x10, 0x111d451, 0x0, 0x0, 0x400, 0x65240faf, 0x3, 0x8, 0x8, 0x9, 0xf8, 0x9, 0x6, 0x4, 0x5, 0x7, 0x100, 0xe1e, 0x401, 0x0, 0xdff, 0x3, 0x1, 0x4, 0xa8, 0x8, 0x9, 0x4, 0x0, 0x80, 0x5, 0xff, 0x400, 0xa9, 0x5, 0x6, 0x2, 0x40, 0xfffffffe, 0x2, 0x7ff, 0x9, 0x2, 0x7, 0x0, 0x7, 0x267, 0x80, 0x5, 0x4, 0x4, 0x0, 0x3, 0x7, 0x9, 0x6, 0x9, 0x7, 0x4, 0x7, 0x8, 0x2, 0xffffffff, 0xfffffffd, 0x4, 0xa5, 0x8, 0x5, 0x4, 0x6, 0x2, 0x2, 0x7, 0x7, 0x9, 0x76, 0x10000, 0x5, 0x5, 0x6, 0x2, 0x2, 0x75, 0x7f, 0x4, 0x5, 0x8, 0x0, 0x80000000, 0x1, 0x9, 0xf, 0x0, 0x6, 0x9, 0x7, 0x3ff, 0x28000, 0x0, 0xfffffffb, 0x7fffffff, 0xce1e, 0x8, 0x4, 0xb5, 0x3, 0xb, 0x3, 0x19a0000, 0x47, 0xb, 0x7fff, 0x3, 0x1, 0x5, 0xd, 0xfffffffa, 0x8, 0x200, 0x795, 0x5, 0x9, 0x7fff, 0xa9b1, 0xc8, 0x10, 0x7ff, 0x18a4, 0x8, 0x8, 0xf, 0x7fff, 0x1, 0x3, 0x4, 0x1, 0x40, 0x7, 0x1000, 0x5, 0x3f, 0x88d8, 0x5, 0x9, 0xdf5a, 0xffff6a8c, 0x5, 0x4, 0x2, 0x100, 0x1, 0x7fffffff, 0x8, 0x81]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5ce}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x0, 0x3, 0x8, 0xd1, 0xe, 0xffffffff, 0x101, 0x7, 0x10, 0x400, 0x8, 0x2, 0x9917, 0xe, 0xac, 0x1ff, 0xa, 0x1, 0x3136b09d, 0x2, 0x0, 0x4, 0x0, 0x0, 0x3, 0x401, 0x100, 0x5, 0x2, 0x401, 0x6, 0x0, 0x7, 0xfffffffe, 0x8001, 0x7, 0xff0, 0x9, 0x7, 0x10000, 0x4, 0x7fffffff, 0x10, 0x8, 0x8001, 0xe, 0x8, 0x7, 0x0, 0x8, 0x0, 0xe, 0xb, 0x7, 0x7, 0x8001, 0x4, 0x101, 0x5, 0xe442, 0x2, 0xfffffff9, 0x9, 0x1, 0x8, 0x4, 0x1, 0x6, 0xffff, 0x9, 0xfd, 0x5, 0x101, 0x4, 0x7, 0xb9a0, 0x4, 0x17b, 0x4, 0xf0, 0x8, 0x2c2, 0x2, 0x6, 0x8, 0x8, 0xffffffff, 0xfd5, 0x800, 0x9, 0xb49, 0x1, 0x9, 0x8000, 0xc25d, 0x0, 0x401, 0x1, 0x10000, 0x80000, 0x7, 0x7, 0x8, 0xe, 0x2, 0x80000000, 0x0, 0x15c2c7cb, 0x2, 0x7, 0xa, 0xfe, 0x4, 0x4, 0x19b2, 0x2, 0x7, 0x8, 0x7f, 0x80, 0x1, 0x5, 0x5, 0x9, 0x8, 0x1, 0xebd, 0x7, 0x9, 0x100, 0x4, 0x8, 0x3, 0x3, 0x5, 0x3, 0x6, 0xa, 0x9, 0x8, 0x5, 0x4, 0x4, 0xd, 0x7, 0x8, 0xcd, 0x9, 0x2, 0x0, 0x9, 0xfffff001, 0x6, 0x1, 0x7fffffff, 0x101, 0x2, 0x9c, 0x7, 0x1, 0xbdc4, 0x88d1, 0x7, 0x9, 0x4, 0x1ff, 0x1, 0x1ff, 0x7, 0x10001, 0x8, 0x6, 0x2, 0x9, 0x100, 0x3, 0x6, 0x2, 0x1, 0xfffffff9, 0x8, 0x3, 0x3ff, 0xffff35dc, 0x6, 0x800, 0x9, 0x0, 0x3, 0x81, 0x40, 0x1, 0xe269, 0x7, 0x7, 0x3, 0x1, 0x4, 0x3, 0x9, 0xfff, 0xaac, 0x5, 0x1, 0x100, 0x0, 0x1, 0xfe6, 0xfffffffa, 0xc8000000, 0x8, 0x1, 0x8, 0x4, 0x1000, 0x4, 0x0, 0x9, 0x80000000, 0xfffffffa, 0x7, 0x4, 0x3, 0x6, 0x6, 0x7, 0x5, 0x1, 0x5, 0xffffffff, 0x5, 0x5, 0x5, 0xdf4c, 0x0, 0x8000, 0x2, 0x6, 0x6, 0x1, 0x8, 0x2, 0xa, 0x1, 0x200, 0x5, 0x4, 0xde, 0x1, 0x3, 0x4, 0x4, 0x0, 0x10e, 0x86ad]}]}]}}]}, 0x86c}, 0x1, 0x0, 0x0, 0x1}, 0x41) 953.363296ms ago: executing program 4 (id=437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c000480280001800d00010073796e70726f78790000000014000280080003400000000008000340000000130900010073797a30000000"], 0xc8}}, 0x0) unshare(0x2a020400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d0001"], 0xcc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4048880) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000)) 822.627795ms ago: executing program 3 (id=438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x40880) 727.255677ms ago: executing program 1 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="604000000206010400000200000000000300000014000780080006400000000308000840001d009e050005000400000000000900020073797a310000000011000300686173683a6e65742c6e4d740000000049023eee7bac5ef02eadd5cf72deaeb44ab5c64b2d209d72ea310a239cbd7f80c0b048f4f3886f54e9630a1319ff5c1f384fb1d7807ab3aa8613aff30531056d21b7769263fc204dfa6cbcfd56df565333a3a5f9850f652a7ed59fd8642fba54a4e9916500000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2701000068c7"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feba1001800"], 0x0, 0x32, 0x0, 0x8, 0xfffffffc, 0x0, @void, @value}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000100)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 551.677346ms ago: executing program 3 (id=440): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60}, 0x50) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001402300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x10, 0x70bd27, 0x25dfdbff, {0xa, 0x6f, 0xa0, 0xfe, r4}, [@IFA_TARGET_NETNSID={0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000906010200000000000000000200ffff09000200000024000780180001801400024000000000000000000000000000000000050003000200"/76], 0x4c}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000140)={0x4, &(0x7f0000000500)=[{}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}]}) socket(0x2, 0x5, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x58, r8, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x6}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x32, @val={0x8c, 0x18, {0x77, "245271fd63c1", @long="778789bfa5ce70db359d885eaa2e95a6"}}}}]}, 0x58}}, 0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="120033"], 0x50}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x3, 0x40000121, 0x0) 0s ago: executing program 0 (id=441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974"], 0xdc}}, 0x0) (fail_nth: 16) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts. [ 83.762852][ T5830] cgroup: Unknown subsys name 'net' [ 83.954440][ T5830] cgroup: Unknown subsys name 'cpuset' [ 83.965549][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.601662][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.917147][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.934628][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.942342][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.950729][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.977710][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.985837][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.994333][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.002286][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.010719][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.017392][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.021261][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.026226][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.032526][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.042267][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.047538][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.053291][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.062268][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.070549][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.076967][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.085505][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.088811][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.096372][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.105489][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.116296][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.158282][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.804809][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.900776][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 90.932651][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 90.975445][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 91.103846][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 91.241367][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.248645][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.259411][ T5846] bridge_slave_0: entered allmulticast mode [ 91.266887][ T5846] bridge_slave_0: entered promiscuous mode [ 91.336829][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.344416][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.351714][ T5846] bridge_slave_1: entered allmulticast mode [ 91.358976][ T5846] bridge_slave_1: entered promiscuous mode [ 91.380179][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.387300][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.394869][ T5851] bridge_slave_0: entered allmulticast mode [ 91.403198][ T5851] bridge_slave_0: entered promiscuous mode [ 91.417721][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.425000][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.432355][ T5841] bridge_slave_0: entered allmulticast mode [ 91.439999][ T5841] bridge_slave_0: entered promiscuous mode [ 91.473854][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.481298][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.488488][ T5851] bridge_slave_1: entered allmulticast mode [ 91.496039][ T5851] bridge_slave_1: entered promiscuous mode [ 91.508616][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.515879][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.523634][ T5841] bridge_slave_1: entered allmulticast mode [ 91.531876][ T5841] bridge_slave_1: entered promiscuous mode [ 91.539099][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.546365][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.553633][ T5843] bridge_slave_0: entered allmulticast mode [ 91.561636][ T5843] bridge_slave_0: entered promiscuous mode [ 91.573019][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.586480][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.630166][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.637384][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.644806][ T5843] bridge_slave_1: entered allmulticast mode [ 91.652472][ T5843] bridge_slave_1: entered promiscuous mode [ 91.744101][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.771797][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.801299][ T5846] team0: Port device team_slave_0 added [ 91.811937][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.822069][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.829349][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.836559][ T5856] bridge_slave_0: entered allmulticast mode [ 91.844497][ T5856] bridge_slave_0: entered promiscuous mode [ 91.855119][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.881986][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.897480][ T5846] team0: Port device team_slave_1 added [ 91.905878][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.928852][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.936302][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.943708][ T5856] bridge_slave_1: entered allmulticast mode [ 91.951703][ T5856] bridge_slave_1: entered promiscuous mode [ 91.972720][ T974] cfg80211: failed to load regulatory.db [ 92.088248][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.103750][ T5841] team0: Port device team_slave_0 added [ 92.111273][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.118254][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.145464][ T5153] Bluetooth: hci0: command tx timeout [ 92.149179][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.151595][ T5853] Bluetooth: hci2: command tx timeout [ 92.170580][ T5843] team0: Port device team_slave_0 added [ 92.182939][ T5851] team0: Port device team_slave_0 added [ 92.192482][ T5851] team0: Port device team_slave_1 added [ 92.209468][ T5853] Bluetooth: hci4: command tx timeout [ 92.209537][ T5153] Bluetooth: hci1: command tx timeout [ 92.219592][ T5853] Bluetooth: hci3: command tx timeout [ 92.245604][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.256839][ T5841] team0: Port device team_slave_1 added [ 92.278150][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.285267][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.311472][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.333941][ T5843] team0: Port device team_slave_1 added [ 92.343889][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.351087][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.377375][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.433091][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.440563][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.467423][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.499789][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.506777][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.533288][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.546389][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.553944][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.580172][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.606331][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.613447][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.639396][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.656580][ T5856] team0: Port device team_slave_0 added [ 92.683867][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.691010][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.716991][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.741429][ T5856] team0: Port device team_slave_1 added [ 92.768417][ T5846] hsr_slave_0: entered promiscuous mode [ 92.775345][ T5846] hsr_slave_1: entered promiscuous mode [ 92.936960][ T5843] hsr_slave_0: entered promiscuous mode [ 92.944709][ T5843] hsr_slave_1: entered promiscuous mode [ 92.951774][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.960184][ T5843] Cannot create hsr debugfs directory [ 92.971584][ T5851] hsr_slave_0: entered promiscuous mode [ 92.978033][ T5851] hsr_slave_1: entered promiscuous mode [ 92.984612][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.992477][ T5851] Cannot create hsr debugfs directory [ 92.998544][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.006018][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.032393][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.070863][ T5841] hsr_slave_0: entered promiscuous mode [ 93.077469][ T5841] hsr_slave_1: entered promiscuous mode [ 93.084162][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.096240][ T5841] Cannot create hsr debugfs directory [ 93.127719][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.135063][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.161909][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.428817][ T5856] hsr_slave_0: entered promiscuous mode [ 93.435328][ T5856] hsr_slave_1: entered promiscuous mode [ 93.442065][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.449901][ T5856] Cannot create hsr debugfs directory [ 93.744873][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.763988][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.795157][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.829902][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.915689][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.927900][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.956992][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.980970][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.043330][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.055133][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.072251][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.085586][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.220121][ T5853] Bluetooth: hci2: command tx timeout [ 94.224243][ T5153] Bluetooth: hci0: command tx timeout [ 94.233589][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.248075][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.284146][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.291242][ T5153] Bluetooth: hci1: command tx timeout [ 94.299447][ T5153] Bluetooth: hci3: command tx timeout [ 94.304897][ T5153] Bluetooth: hci4: command tx timeout [ 94.314276][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.419168][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.492647][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.518886][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.526416][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.540563][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.555531][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.568924][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.594518][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.601899][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.642561][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.663419][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.670615][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.717895][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.764799][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.772040][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.809680][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.816907][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.833353][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.865613][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.882801][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.890011][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.908808][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.915986][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.975495][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.027652][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.034899][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.095941][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.103190][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.162413][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.264750][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.401062][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.408261][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.425349][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.448305][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.524344][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.531588][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.628617][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.801128][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.894932][ T5851] veth0_vlan: entered promiscuous mode [ 95.918577][ T5851] veth1_vlan: entered promiscuous mode [ 96.039900][ T5843] veth0_vlan: entered promiscuous mode [ 96.094505][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.106168][ T5843] veth1_vlan: entered promiscuous mode [ 96.174034][ T5851] veth0_macvtap: entered promiscuous mode [ 96.197497][ T5851] veth1_macvtap: entered promiscuous mode [ 96.262550][ T5846] veth0_vlan: entered promiscuous mode [ 96.275151][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.290216][ T5153] Bluetooth: hci2: command tx timeout [ 96.290230][ T5853] Bluetooth: hci0: command tx timeout [ 96.294357][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.316694][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.346642][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.355811][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.367056][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.369824][ T5153] Bluetooth: hci4: command tx timeout [ 96.376783][ T5853] Bluetooth: hci3: command tx timeout [ 96.381539][ T55] Bluetooth: hci1: command tx timeout [ 96.388759][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.403022][ T5841] veth0_vlan: entered promiscuous mode [ 96.416968][ T5846] veth1_vlan: entered promiscuous mode [ 96.430878][ T5843] veth0_macvtap: entered promiscuous mode [ 96.466943][ T5843] veth1_macvtap: entered promiscuous mode [ 96.510647][ T5841] veth1_vlan: entered promiscuous mode [ 96.596569][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.607616][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.621704][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.629797][ T5841] veth0_macvtap: entered promiscuous mode [ 96.658607][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.669988][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.684654][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.695633][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.708196][ T5846] veth0_macvtap: entered promiscuous mode [ 96.714522][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.735051][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.744424][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.754081][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.762935][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.774833][ T5841] veth1_macvtap: entered promiscuous mode [ 96.792819][ T5856] veth0_vlan: entered promiscuous mode [ 96.831625][ T5846] veth1_macvtap: entered promiscuous mode [ 96.865551][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.876156][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.886861][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.897363][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.909116][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.924530][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.932122][ T5856] veth1_vlan: entered promiscuous mode [ 96.933742][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.955619][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.966289][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.976743][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.987409][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.998622][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.017325][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.029008][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.038985][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.049620][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.060409][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.072350][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.084915][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.118962][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.138342][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.147745][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.158032][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.190829][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.197852][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.202240][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.226900][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.237428][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.247436][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.258204][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.272958][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.285869][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.294741][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.304089][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.312905][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.349051][ T5856] veth0_macvtap: entered promiscuous mode [ 97.398565][ T5856] veth1_macvtap: entered promiscuous mode [ 97.530030][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.534548][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.541839][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.551401][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.557774][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.573191][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.606814][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.629911][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.645059][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.656574][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.666672][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.677212][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.690389][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.713875][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.728619][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.745304][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.756116][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.766339][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.777233][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.787126][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.797661][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.808978][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.847289][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.863052][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.872649][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.881574][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.914386][ T748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.927089][ T748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.943052][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.953480][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.086818][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.099813][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.121836][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.142891][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.219203][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.242258][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.376785][ T55] Bluetooth: hci0: command tx timeout [ 98.388035][ T5153] Bluetooth: hci2: command tx timeout [ 98.407102][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.415841][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.451575][ T55] Bluetooth: hci3: command tx timeout [ 98.457048][ T55] Bluetooth: hci1: command tx timeout [ 98.463442][ T5153] Bluetooth: hci4: command tx timeout [ 98.502576][ T5937] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.089020][ T5954] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.430541][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11'. [ 99.773731][ T5973] warning: `syz.4.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.823252][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 99.865117][ T5977] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 99.915562][ T5977] netlink: 80 bytes leftover after parsing attributes in process `syz.1.18'. [ 100.056037][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 100.106776][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 100.200757][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 100.247215][ T5987] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 100.289064][ T5990] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 100.343060][ T5990] netlink: 80 bytes leftover after parsing attributes in process `syz.1.24'. [ 100.359446][ T5987] netlink: 80 bytes leftover after parsing attributes in process `syz.4.23'. [ 100.393200][ T5987] netlink: 80 bytes leftover after parsing attributes in process `syz.4.23'. [ 100.402829][ T5990] netlink: 80 bytes leftover after parsing attributes in process `syz.1.24'. [ 101.328963][ T6023] Zero length message leads to an empty skb [ 101.362362][ T10] IPVS: starting estimator thread 0... [ 101.395869][ T6020] netlink: 'syz.0.36': attribute type 3 has an invalid length. [ 101.444590][ T6020] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 101.560960][ T6025] IPVS: using max 25 ests per chain, 60000 per kthread [ 102.413006][ T6052] syzkaller1: entered promiscuous mode [ 102.418546][ T6052] syzkaller1: entered allmulticast mode [ 104.695186][ T6113] __nla_validate_parse: 2 callbacks suppressed [ 104.695207][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 105.408044][ T6127] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 105.612923][ T6129] syz.3.79 uses obsolete (PF_INET,SOCK_PACKET) [ 105.662766][ T6129] netlink: 5 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.695767][ T6131] syzkaller0: entered promiscuous mode [ 105.709388][ T6131] syzkaller0: entered allmulticast mode [ 106.111702][ T24] IPVS: starting estimator thread 0... [ 106.118611][ T6141] netlink: 'syz.1.82': attribute type 3 has an invalid length. [ 106.159721][ T6141] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 106.209459][ T6145] IPVS: using max 29 ests per chain, 69600 per kthread [ 108.355363][ T6006] Set syz1 is full, maxelem 65536 reached [ 108.616483][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 109.076661][ T6206] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 109.127526][ T6206] netlink: 80 bytes leftover after parsing attributes in process `syz.3.104'. [ 109.153691][ T6206] netlink: 80 bytes leftover after parsing attributes in process `syz.3.104'. [ 110.017449][ T6233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.349893][ T6240] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 110.390357][ T6240] netlink: 80 bytes leftover after parsing attributes in process `syz.2.119'. [ 110.419891][ T6240] netlink: 80 bytes leftover after parsing attributes in process `syz.2.119'. [ 110.554676][ T6246] syzkaller1: entered promiscuous mode [ 110.587696][ T6246] syzkaller1: entered allmulticast mode [ 110.867535][ T6257] tipc: Enabling of bearer rejected, failed to enable media [ 111.355018][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 112.056939][ T6303] FAULT_INJECTION: forcing a failure. [ 112.056939][ T6303] name failslab, interval 1, probability 0, space 0, times 1 [ 112.084657][ T6303] CPU: 0 UID: 0 PID: 6303 Comm: syz.4.141 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 112.084688][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.084705][ T6303] Call Trace: [ 112.084714][ T6303] [ 112.084723][ T6303] dump_stack_lvl+0x241/0x360 [ 112.084773][ T6303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.084803][ T6303] ? __pfx__printk+0x10/0x10 [ 112.084838][ T6303] ? __pfx___might_resched+0x10/0x10 [ 112.084870][ T6303] should_fail_ex+0x424/0x570 [ 112.084895][ T6303] should_failslab+0xac/0x100 [ 112.084925][ T6303] kmem_cache_alloc_noprof+0x78/0x390 [ 112.084952][ T6303] ? skb_clone+0x20c/0x390 [ 112.084981][ T6303] skb_clone+0x20c/0x390 [ 112.085008][ T6303] pfkey_sendmsg+0x48d/0x1140 [ 112.085037][ T6303] ? __pfx___might_resched+0x10/0x10 [ 112.085069][ T6303] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 112.085111][ T6303] ? __pfx_aa_sk_perm+0x10/0x10 [ 112.085142][ T6303] ? __import_iovec+0x585/0x830 [ 112.085173][ T6303] ? aa_sock_msg_perm+0x91/0x160 [ 112.085208][ T6303] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 112.085253][ T6303] __sock_sendmsg+0x221/0x270 [ 112.085284][ T6303] ____sys_sendmsg+0x523/0x860 [ 112.085316][ T6303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.085336][ T6303] ? __fget_files+0x2a/0x420 [ 112.085359][ T6303] ? __fget_files+0x2a/0x420 [ 112.085387][ T6303] __sys_sendmmsg+0x3a0/0x7b0 [ 112.085423][ T6303] ? __pfx___sys_sendmmsg+0x10/0x10 [ 112.085484][ T6303] ? rcu_read_lock_any_held+0xbb/0x160 [ 112.085512][ T6303] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 112.085542][ T6303] ? vfs_write+0xb29/0xd10 [ 112.085577][ T6303] ? ksys_write+0x24e/0x2d0 [ 112.085603][ T6303] ? __mutex_unlock_slowpath+0x229/0x800 [ 112.085662][ T6303] ? ksys_write+0x275/0x2d0 [ 112.085699][ T6303] __x64_sys_sendmmsg+0xa0/0xb0 [ 112.085724][ T6303] do_syscall_64+0xf3/0x230 [ 112.085750][ T6303] ? clear_bhb_loop+0x45/0xa0 [ 112.085775][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.085795][ T6303] RIP: 0033:0x7f4c17d8d169 [ 112.085820][ T6303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.085837][ T6303] RSP: 002b:00007f4c18ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 112.085860][ T6303] RAX: ffffffffffffffda RBX: 00007f4c17fa5fa0 RCX: 00007f4c17d8d169 [ 112.085875][ T6303] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 112.085888][ T6303] RBP: 00007f4c18ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 112.085901][ T6303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.085912][ T6303] R13: 0000000000000000 R14: 00007f4c17fa5fa0 R15: 00007ffde17f40d8 [ 112.085944][ T6303] [ 112.601612][ C1] af_packet: tpacket_rcv: packet too big, clamped from 65550 to 3710. macoff=82 [ 112.954363][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 113.084467][ T6319] syzkaller1: entered promiscuous mode [ 113.094070][ T6319] syzkaller1: entered allmulticast mode [ 113.150371][ T6327] syzkaller0: entered promiscuous mode [ 113.156896][ T6327] syzkaller0: entered allmulticast mode [ 113.330211][ T6338] syzkaller0: entered promiscuous mode [ 113.336385][ T6338] syzkaller0: entered allmulticast mode [ 114.103247][ T6362] syzkaller0: entered promiscuous mode [ 114.124648][ T6359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.137538][ T6362] syzkaller0: entered allmulticast mode [ 114.172528][ T6367] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 114.186760][ T6367] netlink: 80 bytes leftover after parsing attributes in process `syz.0.158'. [ 114.195960][ T6367] netlink: 80 bytes leftover after parsing attributes in process `syz.0.158'. [ 114.319205][ T6371] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 114.381251][ T6371] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 114.399686][ T6374] tipc: Enabling of bearer rejected, failed to enable media [ 114.444165][ T6371] veth3: entered promiscuous mode [ 114.453423][ T6371] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 114.462891][ T6376] FAULT_INJECTION: forcing a failure. [ 114.462891][ T6376] name failslab, interval 1, probability 0, space 0, times 0 [ 114.476834][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.2.161 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 114.476862][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.476875][ T6376] Call Trace: [ 114.476883][ T6376] [ 114.476892][ T6376] dump_stack_lvl+0x241/0x360 [ 114.476931][ T6376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.476962][ T6376] ? __pfx__printk+0x10/0x10 [ 114.476990][ T6376] ? arch_stack_walk+0xff/0x150 [ 114.477021][ T6376] ? __pfx___might_resched+0x10/0x10 [ 114.477051][ T6376] should_fail_ex+0x424/0x570 [ 114.477079][ T6376] should_failslab+0xac/0x100 [ 114.477110][ T6376] kmem_cache_alloc_noprof+0x78/0x390 [ 114.477139][ T6376] ? radix_tree_node_alloc+0x8b/0x3c0 [ 114.477168][ T6376] radix_tree_node_alloc+0x8b/0x3c0 [ 114.477201][ T6376] idr_get_free+0x296/0xac0 [ 114.477238][ T6376] idr_alloc_u32+0x197/0x330 [ 114.477268][ T6376] ? __pfx_idr_alloc_u32+0x10/0x10 [ 114.477296][ T6376] ? tcf_idr_check_alloc+0xce/0x930 [ 114.477324][ T6376] tcf_idr_check_alloc+0x6f3/0x930 [ 114.477347][ T6376] ? tcf_idr_check_alloc+0xce/0x930 [ 114.477371][ T6376] ? load_metalist+0x134/0x500 [ 114.477402][ T6376] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 114.477424][ T6376] ? do_raw_read_unlock+0x3c/0x80 [ 114.477456][ T6376] ? load_metalist+0x4a9/0x500 [ 114.477489][ T6376] tcf_ife_init+0x401/0xfc0 [ 114.477531][ T6376] ? __pfx_tcf_ife_init+0x10/0x10 [ 114.477579][ T6376] ? nla_memcpy+0x5a/0xb0 [ 114.477612][ T6376] ? __pfx_tcf_ife_init+0x10/0x10 [ 114.477640][ T6376] tcf_action_init_1+0x5d9/0x900 [ 114.477674][ T6376] ? __pfx_tcf_action_init_1+0x10/0x10 [ 114.477696][ T6376] ? _raw_read_unlock+0x28/0x50 [ 114.477716][ T6376] ? tc_action_load_ops+0x247/0x530 [ 114.477761][ T6376] ? __nla_parse+0x40/0x60 [ 114.477789][ T6376] tcf_action_init+0x2e9/0xae0 [ 114.477839][ T6376] ? __pfx_tcf_action_init+0x10/0x10 [ 114.477934][ T6376] ? apparmor_capable+0x13b/0x1b0 [ 114.477967][ T6376] tc_ctl_action+0x47f/0xcf0 [ 114.478006][ T6376] ? __pfx_tc_ctl_action+0x10/0x10 [ 114.478104][ T6376] ? __pfx_tc_ctl_action+0x10/0x10 [ 114.478131][ T6376] rtnetlink_rcv_msg+0x7c2/0xd70 [ 114.478158][ T6376] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 114.478192][ T6376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.478229][ T6376] ? ref_tracker_free+0x63e/0x7e0 [ 114.478260][ T6376] netlink_rcv_skb+0x208/0x480 [ 114.478290][ T6376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.478321][ T6376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.478370][ T6376] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.478402][ T6376] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.478434][ T6376] netlink_unicast+0x7f8/0x9a0 [ 114.478470][ T6376] ? __pfx_netlink_unicast+0x10/0x10 [ 114.478499][ T6376] ? skb_put+0x114/0x1f0 [ 114.478524][ T6376] netlink_sendmsg+0x8c3/0xcd0 [ 114.478568][ T6376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.478603][ T6376] ? aa_sock_msg_perm+0x91/0x160 [ 114.478638][ T6376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.478665][ T6376] __sock_sendmsg+0x221/0x270 [ 114.478696][ T6376] ____sys_sendmsg+0x523/0x860 [ 114.478729][ T6376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.478749][ T6376] ? __fget_files+0x2a/0x420 [ 114.478772][ T6376] ? __fget_files+0x2a/0x420 [ 114.478802][ T6376] __sys_sendmsg+0x271/0x360 [ 114.478838][ T6376] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.478920][ T6376] ? do_syscall_64+0xb6/0x230 [ 114.478950][ T6376] do_syscall_64+0xf3/0x230 [ 114.478975][ T6376] ? clear_bhb_loop+0x45/0xa0 [ 114.479000][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.479020][ T6376] RIP: 0033:0x7fba6598d169 [ 114.479039][ T6376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.479056][ T6376] RSP: 002b:00007fba66779038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.479078][ T6376] RAX: ffffffffffffffda RBX: 00007fba65ba5fa0 RCX: 00007fba6598d169 [ 114.479094][ T6376] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 114.479106][ T6376] RBP: 00007fba66779090 R08: 0000000000000000 R09: 0000000000000000 [ 114.479119][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.479131][ T6376] R13: 0000000000000000 R14: 00007fba65ba5fa0 R15: 00007ffe41fb79c8 [ 114.479162][ T6376] [ 115.164703][ T6385] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.192685][ T6386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.166'. [ 115.483010][ T6394] syzkaller0: entered promiscuous mode [ 115.488558][ T6394] syzkaller0: entered allmulticast mode [ 115.606525][ T6404] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 115.635881][ T6404] netlink: 244 bytes leftover after parsing attributes in process `syz.1.172'. [ 115.703727][ T6402] netlink: 'syz.3.173': attribute type 4 has an invalid length. [ 115.853079][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 115.875111][ T6415] FAULT_INJECTION: forcing a failure. [ 115.875111][ T6415] name failslab, interval 1, probability 0, space 0, times 0 [ 115.927490][ T6415] CPU: 0 UID: 0 PID: 6415 Comm: syz.4.175 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 115.927521][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.927532][ T6415] Call Trace: [ 115.927540][ T6415] [ 115.927549][ T6415] dump_stack_lvl+0x241/0x360 [ 115.927588][ T6415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.927616][ T6415] ? __pfx__printk+0x10/0x10 [ 115.927649][ T6415] ? __pfx___might_resched+0x10/0x10 [ 115.927681][ T6415] should_fail_ex+0x424/0x570 [ 115.927709][ T6415] should_failslab+0xac/0x100 [ 115.927740][ T6415] kmem_cache_alloc_noprof+0x78/0x390 [ 115.927768][ T6415] ? skb_clone+0x20c/0x390 [ 115.927796][ T6415] skb_clone+0x20c/0x390 [ 115.927824][ T6415] nfnetlink_rcv+0x52b/0x28f0 [ 115.927850][ T6415] ? __dev_queue_xmit+0x2f9/0x3f60 [ 115.927879][ T6415] ? __dev_queue_xmit+0x2f9/0x3f60 [ 115.927902][ T6415] ? __dev_queue_xmit+0x2f9/0x3f60 [ 115.927934][ T6415] ? __dev_queue_xmit+0x1780/0x3f60 [ 115.927955][ T6415] ? kasan_save_track+0x3f/0x80 [ 115.927976][ T6415] ? __kasan_slab_alloc+0x66/0x80 [ 115.928006][ T6415] ? do_syscall_64+0xf3/0x230 [ 115.928035][ T6415] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 115.928085][ T6415] ? ref_tracker_free+0x63e/0x7e0 [ 115.928109][ T6415] ? __asan_memcpy+0x40/0x70 [ 115.928128][ T6415] ? __pfx_ref_tracker_free+0x10/0x10 [ 115.928149][ T6415] ? __skb_clone+0x5c/0x6d0 [ 115.928188][ T6415] ? skb_clone+0x240/0x390 [ 115.928223][ T6415] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.928254][ T6415] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.928286][ T6415] netlink_unicast+0x7f8/0x9a0 [ 115.928322][ T6415] ? __pfx_netlink_unicast+0x10/0x10 [ 115.928349][ T6415] ? skb_put+0x114/0x1f0 [ 115.928373][ T6415] netlink_sendmsg+0x8c3/0xcd0 [ 115.928421][ T6415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.928455][ T6415] ? aa_sock_msg_perm+0x91/0x160 [ 115.928491][ T6415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.928523][ T6415] __sock_sendmsg+0x221/0x270 [ 115.928554][ T6415] ____sys_sendmsg+0x523/0x860 [ 115.928586][ T6415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.928606][ T6415] ? __fget_files+0x2a/0x420 [ 115.928629][ T6415] ? __fget_files+0x2a/0x420 [ 115.928656][ T6415] __sys_sendmsg+0x271/0x360 [ 115.928682][ T6415] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.928757][ T6415] ? do_syscall_64+0xb6/0x230 [ 115.928785][ T6415] do_syscall_64+0xf3/0x230 [ 115.928810][ T6415] ? clear_bhb_loop+0x45/0xa0 [ 115.928835][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.928855][ T6415] RIP: 0033:0x7f4c17d8d169 [ 115.928873][ T6415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.928890][ T6415] RSP: 002b:00007f4c18ca8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.928912][ T6415] RAX: ffffffffffffffda RBX: 00007f4c17fa5fa0 RCX: 00007f4c17d8d169 [ 115.928934][ T6415] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 115.928947][ T6415] RBP: 00007f4c18ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 115.928959][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.928970][ T6415] R13: 0000000000000000 R14: 00007f4c17fa5fa0 R15: 00007ffde17f40d8 [ 115.929000][ T6415] [ 116.530322][ T6429] bridge_slave_0: default FDB implementation only supports local addresses [ 116.589740][ T6432] FAULT_INJECTION: forcing a failure. [ 116.589740][ T6432] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.606605][ T6432] CPU: 1 UID: 0 PID: 6432 Comm: syz.4.181 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 116.606636][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.606649][ T6432] Call Trace: [ 116.606656][ T6432] [ 116.606665][ T6432] dump_stack_lvl+0x241/0x360 [ 116.606713][ T6432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.606744][ T6432] ? __pfx__printk+0x10/0x10 [ 116.606786][ T6432] should_fail_ex+0x424/0x570 [ 116.606814][ T6432] _copy_to_user+0x31/0xb0 [ 116.606848][ T6432] simple_read_from_buffer+0xc4/0x170 [ 116.606884][ T6432] proc_fail_nth_read+0x1ef/0x260 [ 116.606909][ T6432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.606935][ T6432] ? rw_verify_area+0x246/0x630 [ 116.606958][ T6432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.606981][ T6432] vfs_read+0x21f/0xb90 [ 116.607011][ T6432] ? __pfx___mutex_lock+0x10/0x10 [ 116.607038][ T6432] ? __pfx_vfs_read+0x10/0x10 [ 116.607065][ T6432] ? __fget_files+0x2a/0x420 [ 116.607086][ T6432] ? __fget_files+0x39d/0x420 [ 116.607103][ T6432] ? __fget_files+0x2a/0x420 [ 116.607132][ T6432] ksys_read+0x19d/0x2d0 [ 116.607159][ T6432] ? __pfx_ksys_read+0x10/0x10 [ 116.607189][ T6432] ? do_syscall_64+0xb6/0x230 [ 116.607218][ T6432] do_syscall_64+0xf3/0x230 [ 116.607243][ T6432] ? clear_bhb_loop+0x45/0xa0 [ 116.607268][ T6432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.607288][ T6432] RIP: 0033:0x7f4c17d8bb7c [ 116.607307][ T6432] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 116.607324][ T6432] RSP: 002b:00007f4c18ca8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.607346][ T6432] RAX: ffffffffffffffda RBX: 00007f4c17fa5fa0 RCX: 00007f4c17d8bb7c [ 116.607365][ T6432] RDX: 000000000000000f RSI: 00007f4c18ca80a0 RDI: 0000000000000004 [ 116.607377][ T6432] RBP: 00007f4c18ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 116.607388][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.607400][ T6432] R13: 0000000000000000 R14: 00007f4c17fa5fa0 R15: 00007ffde17f40d8 [ 116.607432][ T6432] [ 117.154802][ T6441] FAULT_INJECTION: forcing a failure. [ 117.154802][ T6441] name failslab, interval 1, probability 0, space 0, times 0 [ 117.176574][ T6441] CPU: 1 UID: 0 PID: 6441 Comm: syz.1.185 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 117.176612][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.176625][ T6441] Call Trace: [ 117.176633][ T6441] [ 117.176642][ T6441] dump_stack_lvl+0x241/0x360 [ 117.176682][ T6441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.176712][ T6441] ? __pfx__printk+0x10/0x10 [ 117.176747][ T6441] ? __pfx___might_resched+0x10/0x10 [ 117.176778][ T6441] should_fail_ex+0x424/0x570 [ 117.176806][ T6441] should_failslab+0xac/0x100 [ 117.176837][ T6441] __kmalloc_cache_noprof+0x73/0x370 [ 117.176866][ T6441] ? ethnl_tsinfo_start+0xcf/0x2d0 [ 117.176900][ T6441] ethnl_tsinfo_start+0xcf/0x2d0 [ 117.176926][ T6441] ? genl_start+0x4b8/0x6d0 [ 117.176950][ T6441] genl_start+0x4dc/0x6d0 [ 117.176982][ T6441] __netlink_dump_start+0x45c/0x790 [ 117.177023][ T6441] genl_rcv_msg+0x8a4/0xf00 [ 117.177056][ T6441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.177075][ T6441] ? __dev_queue_xmit+0x1780/0x3f60 [ 117.177107][ T6441] ? __pfx_genl_start+0x10/0x10 [ 117.177126][ T6441] ? __pfx_genl_dumpit+0x10/0x10 [ 117.177145][ T6441] ? __pfx_genl_done+0x10/0x10 [ 117.177184][ T6441] ? __lock_acquire+0xad5/0xd80 [ 117.177207][ T6441] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 117.177233][ T6441] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 117.177257][ T6441] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 117.177301][ T6441] netlink_rcv_skb+0x208/0x480 [ 117.177331][ T6441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.177355][ T6441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.177407][ T6441] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.177443][ T6441] genl_rcv+0x28/0x40 [ 117.177462][ T6441] netlink_unicast+0x7f8/0x9a0 [ 117.177498][ T6441] ? __pfx_netlink_unicast+0x10/0x10 [ 117.177532][ T6441] ? skb_put+0x114/0x1f0 [ 117.177558][ T6441] netlink_sendmsg+0x8c3/0xcd0 [ 117.177609][ T6441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.177644][ T6441] ? aa_sock_msg_perm+0x91/0x160 [ 117.177680][ T6441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.177706][ T6441] __sock_sendmsg+0x221/0x270 [ 117.177738][ T6441] ____sys_sendmsg+0x523/0x860 [ 117.177771][ T6441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.177791][ T6441] ? __fget_files+0x2a/0x420 [ 117.177814][ T6441] ? __fget_files+0x2a/0x420 [ 117.177845][ T6441] __sys_sendmsg+0x271/0x360 [ 117.177873][ T6441] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.177957][ T6441] ? do_syscall_64+0xb6/0x230 [ 117.177987][ T6441] do_syscall_64+0xf3/0x230 [ 117.178013][ T6441] ? clear_bhb_loop+0x45/0xa0 [ 117.178038][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.178058][ T6441] RIP: 0033:0x7f66ac38d169 [ 117.178076][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.178093][ T6441] RSP: 002b:00007f66ad1f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.178115][ T6441] RAX: ffffffffffffffda RBX: 00007f66ac5a5fa0 RCX: 00007f66ac38d169 [ 117.178130][ T6441] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 117.178144][ T6441] RBP: 00007f66ad1f4090 R08: 0000000000000000 R09: 0000000000000000 [ 117.178156][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.178168][ T6441] R13: 0000000000000000 R14: 00007f66ac5a5fa0 R15: 00007ffe1e378938 [ 117.178201][ T6441] [ 117.683752][ T6450] syzkaller1: entered promiscuous mode [ 117.689367][ T6450] syzkaller1: entered allmulticast mode [ 117.850374][ T6451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.876863][ T6455] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.886037][ T6455] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.895186][ T6455] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.903981][ T6455] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.923816][ T6455] vxlan0: entered promiscuous mode [ 117.929027][ T6455] vxlan0: entered allmulticast mode [ 117.992542][ T6451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.132399][ T6451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.342679][ T6451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.652610][ T6451] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.726008][ T6451] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.827806][ T6451] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.888308][ T6451] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.606351][ T6510] FAULT_INJECTION: forcing a failure. [ 119.606351][ T6510] name failslab, interval 1, probability 0, space 0, times 0 [ 119.626309][ T6510] CPU: 1 UID: 0 PID: 6510 Comm: syz.2.211 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 119.626340][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.626353][ T6510] Call Trace: [ 119.626362][ T6510] [ 119.626370][ T6510] dump_stack_lvl+0x241/0x360 [ 119.626409][ T6510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.626440][ T6510] ? __pfx__printk+0x10/0x10 [ 119.626475][ T6510] ? __pfx___might_resched+0x10/0x10 [ 119.626505][ T6510] should_fail_ex+0x424/0x570 [ 119.626534][ T6510] should_failslab+0xac/0x100 [ 119.626565][ T6510] __kmalloc_cache_noprof+0x73/0x370 [ 119.626594][ T6510] ? ethnl_tsinfo_start+0xcf/0x2d0 [ 119.626634][ T6510] ethnl_tsinfo_start+0xcf/0x2d0 [ 119.626659][ T6510] ? genl_start+0x4b8/0x6d0 [ 119.626684][ T6510] genl_start+0x4dc/0x6d0 [ 119.626715][ T6510] __netlink_dump_start+0x45c/0x790 [ 119.626755][ T6510] genl_rcv_msg+0x8a4/0xf00 [ 119.626789][ T6510] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.626808][ T6510] ? __dev_queue_xmit+0x1780/0x3f60 [ 119.626839][ T6510] ? __pfx_genl_start+0x10/0x10 [ 119.626858][ T6510] ? __pfx_genl_dumpit+0x10/0x10 [ 119.626877][ T6510] ? __pfx_genl_done+0x10/0x10 [ 119.626916][ T6510] ? __lock_acquire+0xad5/0xd80 [ 119.626940][ T6510] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 119.626965][ T6510] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 119.626989][ T6510] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 119.627032][ T6510] netlink_rcv_skb+0x208/0x480 [ 119.627062][ T6510] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.627086][ T6510] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.627139][ T6510] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.627175][ T6510] genl_rcv+0x28/0x40 [ 119.627195][ T6510] netlink_unicast+0x7f8/0x9a0 [ 119.627230][ T6510] ? __pfx_netlink_unicast+0x10/0x10 [ 119.627259][ T6510] ? skb_put+0x114/0x1f0 [ 119.627289][ T6510] netlink_sendmsg+0x8c3/0xcd0 [ 119.627333][ T6510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.627368][ T6510] ? aa_sock_msg_perm+0x91/0x160 [ 119.627404][ T6510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.627431][ T6510] __sock_sendmsg+0x221/0x270 [ 119.627462][ T6510] ____sys_sendmsg+0x523/0x860 [ 119.627495][ T6510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.627515][ T6510] ? __fget_files+0x2a/0x420 [ 119.627538][ T6510] ? __fget_files+0x2a/0x420 [ 119.627568][ T6510] __sys_sendmsg+0x271/0x360 [ 119.627597][ T6510] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.627688][ T6510] ? do_syscall_64+0xb6/0x230 [ 119.627718][ T6510] do_syscall_64+0xf3/0x230 [ 119.627744][ T6510] ? clear_bhb_loop+0x45/0xa0 [ 119.627769][ T6510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.627789][ T6510] RIP: 0033:0x7fba6598d169 [ 119.627807][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.627824][ T6510] RSP: 002b:00007fba66779038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.627847][ T6510] RAX: ffffffffffffffda RBX: 00007fba65ba5fa0 RCX: 00007fba6598d169 [ 119.627863][ T6510] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 119.627876][ T6510] RBP: 00007fba66779090 R08: 0000000000000000 R09: 0000000000000000 [ 119.627889][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.627901][ T6510] R13: 0000000000000000 R14: 00007fba65ba5fa0 R15: 00007ffe41fb79c8 [ 119.627933][ T6510] [ 119.664457][ T6515] FAULT_INJECTION: forcing a failure. [ 119.664457][ T6515] name failslab, interval 1, probability 0, space 0, times 0 [ 119.975030][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.4.212 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 119.975056][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.975066][ T6515] Call Trace: [ 119.975073][ T6515] [ 119.975080][ T6515] dump_stack_lvl+0x241/0x360 [ 119.975113][ T6515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.975141][ T6515] ? __pfx__printk+0x10/0x10 [ 119.975172][ T6515] ? __pfx___might_resched+0x10/0x10 [ 119.975200][ T6515] should_fail_ex+0x424/0x570 [ 119.975227][ T6515] should_failslab+0xac/0x100 [ 119.975257][ T6515] __kvmalloc_node_noprof+0x170/0x5a0 [ 119.975287][ T6515] ? bpf_test_run_xdp_live+0x21f/0x2220 [ 119.975322][ T6515] bpf_test_run_xdp_live+0x21f/0x2220 [ 119.975350][ T6515] ? arch_stack_walk+0xff/0x150 [ 119.975389][ T6515] ? stack_trace_save+0x11a/0x1d0 [ 119.975421][ T6515] ? __pfx_stack_trace_save+0x10/0x10 [ 119.975452][ T6515] ? stack_depot_save_flags+0x44/0x940 [ 119.975475][ T6515] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 119.975501][ T6515] ? is_bpf_text_address+0x26/0x2a0 [ 119.975562][ T6515] ? __lock_acquire+0xad5/0xd80 [ 119.975603][ T6515] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 119.975650][ T6515] ? _copy_from_user+0x95/0xb0 [ 119.975680][ T6515] ? bpf_test_init+0x130/0x170 [ 119.975703][ T6515] ? xdp_convert_md_to_buff+0x5b/0x330 [ 119.975733][ T6515] bpf_prog_test_run_xdp+0x809/0x1200 [ 119.975781][ T6515] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 119.975811][ T6515] ? __fget_files+0x2a/0x420 [ 119.975832][ T6515] ? __fget_files+0x2a/0x420 [ 119.975855][ T6515] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 119.975884][ T6515] bpf_prog_test_run+0x2e4/0x360 [ 119.975911][ T6515] __sys_bpf+0x4ee/0x8b0 [ 119.975935][ T6515] ? __pfx___sys_bpf+0x10/0x10 [ 119.975969][ T6515] ? ksys_write+0x275/0x2d0 [ 119.976005][ T6515] __x64_sys_bpf+0x7c/0x90 [ 119.976036][ T6515] do_syscall_64+0xf3/0x230 [ 119.976066][ T6515] ? clear_bhb_loop+0x45/0xa0 [ 119.976091][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.976110][ T6515] RIP: 0033:0x7f4c17d8d169 [ 119.976127][ T6515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.976144][ T6515] RSP: 002b:00007f4c18ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.976165][ T6515] RAX: ffffffffffffffda RBX: 00007f4c17fa5fa0 RCX: 00007f4c17d8d169 [ 119.976180][ T6515] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 119.976192][ T6515] RBP: 00007f4c18ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 119.976205][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.976216][ T6515] R13: 0000000000000000 R14: 00007f4c17fa5fa0 R15: 00007ffde17f40d8 [ 119.976247][ T6515] [ 120.733370][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 120.760064][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 121.039055][ T6551] syzkaller0: entered promiscuous mode [ 121.063735][ T6551] syzkaller0: entered allmulticast mode [ 121.935440][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 122.658167][ T6622] netlink: 48 bytes leftover after parsing attributes in process `syz.2.251'. [ 122.723850][ T6625] netlink: 216 bytes leftover after parsing attributes in process `syz.1.253'. [ 122.734406][ T6622] netlink: 68 bytes leftover after parsing attributes in process `syz.2.251'. [ 122.824692][ T6617] netlink: 72 bytes leftover after parsing attributes in process `syz.2.251'. [ 122.832372][ T6630] FAULT_INJECTION: forcing a failure. [ 122.832372][ T6630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.888903][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.4.256 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 122.888936][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.888949][ T6630] Call Trace: [ 122.888958][ T6630] [ 122.888967][ T6630] dump_stack_lvl+0x241/0x360 [ 122.889016][ T6630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.889046][ T6630] ? __pfx__printk+0x10/0x10 [ 122.889094][ T6630] should_fail_ex+0x424/0x570 [ 122.889123][ T6630] _copy_to_user+0x31/0xb0 [ 122.889156][ T6630] simple_read_from_buffer+0xc4/0x170 [ 122.889191][ T6630] proc_fail_nth_read+0x1ef/0x260 [ 122.889217][ T6630] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.889247][ T6630] ? rw_verify_area+0x246/0x630 [ 122.889269][ T6630] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.889291][ T6630] vfs_read+0x21f/0xb90 [ 122.889319][ T6630] ? __pfx___mutex_lock+0x10/0x10 [ 122.889346][ T6630] ? __pfx_vfs_read+0x10/0x10 [ 122.889373][ T6630] ? __fget_files+0x2a/0x420 [ 122.889394][ T6630] ? __fget_files+0x39d/0x420 [ 122.889411][ T6630] ? __fget_files+0x2a/0x420 [ 122.889440][ T6630] ksys_read+0x19d/0x2d0 [ 122.889466][ T6630] ? __pfx_ksys_read+0x10/0x10 [ 122.889497][ T6630] ? do_syscall_64+0xb6/0x230 [ 122.889525][ T6630] do_syscall_64+0xf3/0x230 [ 122.889550][ T6630] ? clear_bhb_loop+0x45/0xa0 [ 122.889575][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.889595][ T6630] RIP: 0033:0x7f4c17d8bb7c [ 122.889619][ T6630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.889635][ T6630] RSP: 002b:00007f4c18ca8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.889666][ T6630] RAX: ffffffffffffffda RBX: 00007f4c17fa5fa0 RCX: 00007f4c17d8bb7c [ 122.889681][ T6630] RDX: 000000000000000f RSI: 00007f4c18ca80a0 RDI: 0000000000000004 [ 122.889694][ T6630] RBP: 00007f4c18ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 122.889706][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.889718][ T6630] R13: 0000000000000000 R14: 00007f4c17fa5fa0 R15: 00007ffde17f40d8 [ 122.889751][ T6630] [ 123.406983][ T6653] FAULT_INJECTION: forcing a failure. [ 123.406983][ T6653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.420380][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 123.569480][ T6653] CPU: 0 UID: 0 PID: 6653 Comm: syz.1.263 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 123.569511][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.569524][ T6653] Call Trace: [ 123.569536][ T6653] [ 123.569544][ T6653] dump_stack_lvl+0x241/0x360 [ 123.569583][ T6653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.569614][ T6653] ? __pfx__printk+0x10/0x10 [ 123.569657][ T6653] should_fail_ex+0x424/0x570 [ 123.569684][ T6653] _copy_from_user+0x2d/0xb0 [ 123.569716][ T6653] copy_msghdr_from_user+0xb3/0x580 [ 123.569751][ T6653] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.569777][ T6653] ? __fget_files+0x2a/0x420 [ 123.569800][ T6653] ? __fget_files+0x2a/0x420 [ 123.569829][ T6653] __sys_sendmsg+0x20a/0x360 [ 123.569858][ T6653] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.569938][ T6653] ? do_syscall_64+0xb6/0x230 [ 123.569968][ T6653] do_syscall_64+0xf3/0x230 [ 123.569993][ T6653] ? clear_bhb_loop+0x45/0xa0 [ 123.570019][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.570039][ T6653] RIP: 0033:0x7f66ac38d169 [ 123.570057][ T6653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.570075][ T6653] RSP: 002b:00007f66ad1f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.570097][ T6653] RAX: ffffffffffffffda RBX: 00007f66ac5a5fa0 RCX: 00007f66ac38d169 [ 123.570113][ T6653] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 123.570126][ T6653] RBP: 00007f66ad1f4090 R08: 0000000000000000 R09: 0000000000000000 [ 123.570138][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.570150][ T6653] R13: 0000000000000000 R14: 00007f66ac5a5fa0 R15: 00007ffe1e378938 [ 123.570183][ T6653] [ 124.271530][ T6674] netlink: 'syz.4.270': attribute type 8 has an invalid length. [ 124.744536][ T6698] netlink: 248 bytes leftover after parsing attributes in process `syz.3.278'. [ 124.843405][ T6704] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 125.023404][ T6704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.081231][ T6714] netlink: 'syz.0.282': attribute type 1 has an invalid length. [ 125.278940][ T6721] FAULT_INJECTION: forcing a failure. [ 125.278940][ T6721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.305658][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.1.283 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 125.305690][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.305703][ T6721] Call Trace: [ 125.305711][ T6721] [ 125.305719][ T6721] dump_stack_lvl+0x241/0x360 [ 125.305757][ T6721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.305786][ T6721] ? __pfx__printk+0x10/0x10 [ 125.305827][ T6721] should_fail_ex+0x424/0x570 [ 125.305853][ T6721] _copy_from_user+0x2d/0xb0 [ 125.305885][ T6721] copy_msghdr_from_user+0xb3/0x580 [ 125.305919][ T6721] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 125.305944][ T6721] ? __fget_files+0x2a/0x420 [ 125.305967][ T6721] ? __fget_files+0x2a/0x420 [ 125.305996][ T6721] __sys_sendmmsg+0x361/0x7b0 [ 125.306032][ T6721] ? __pfx___sys_sendmmsg+0x10/0x10 [ 125.306093][ T6721] ? rcu_read_lock_any_held+0xbb/0x160 [ 125.306127][ T6721] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 125.306159][ T6721] ? vfs_write+0xb29/0xd10 [ 125.306200][ T6721] ? ksys_write+0x24e/0x2d0 [ 125.306228][ T6721] ? __mutex_unlock_slowpath+0x229/0x800 [ 125.306286][ T6721] ? ksys_write+0x275/0x2d0 [ 125.306322][ T6721] __x64_sys_sendmmsg+0xa0/0xb0 [ 125.306347][ T6721] do_syscall_64+0xf3/0x230 [ 125.306373][ T6721] ? clear_bhb_loop+0x45/0xa0 [ 125.306397][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.306417][ T6721] RIP: 0033:0x7f66ac38d169 [ 125.306436][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.306453][ T6721] RSP: 002b:00007f66ad1d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 125.306475][ T6721] RAX: ffffffffffffffda RBX: 00007f66ac5a6080 RCX: 00007f66ac38d169 [ 125.306490][ T6721] RDX: 0000000000000001 RSI: 0000200000004240 RDI: 0000000000000004 [ 125.306502][ T6721] RBP: 00007f66ad1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 125.306515][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.306526][ T6721] R13: 0000000000000001 R14: 00007f66ac5a6080 R15: 00007ffe1e378938 [ 125.306557][ T6721] [ 125.907497][ T6742] FAULT_INJECTION: forcing a failure. [ 125.907497][ T6742] name failslab, interval 1, probability 0, space 0, times 0 [ 125.957796][ T6742] CPU: 1 UID: 0 PID: 6742 Comm: syz.2.290 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 125.957828][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.957841][ T6742] Call Trace: [ 125.957850][ T6742] [ 125.957858][ T6742] dump_stack_lvl+0x241/0x360 [ 125.957907][ T6742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.957937][ T6742] ? __pfx__printk+0x10/0x10 [ 125.957972][ T6742] ? __pfx___might_resched+0x10/0x10 [ 125.958003][ T6742] should_fail_ex+0x424/0x570 [ 125.958031][ T6742] should_failslab+0xac/0x100 [ 125.958063][ T6742] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 125.958094][ T6742] ? __alloc_skb+0x1c2/0x480 [ 125.958111][ T6742] ? tcp_current_mss+0x29d/0x4d0 [ 125.958146][ T6742] __alloc_skb+0x1c2/0x480 [ 125.958171][ T6742] ? __pfx___alloc_skb+0x10/0x10 [ 125.958190][ T6742] ? kernel_text_address+0xa7/0xe0 [ 125.958219][ T6742] tcp_stream_alloc_skb+0x3d/0x310 [ 125.958248][ T6742] tcp_sendmsg_locked+0xd96/0x5030 [ 125.958328][ T6742] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 125.958358][ T6742] ? tcp_sendmsg+0x22/0x50 [ 125.958381][ T6742] ? do_raw_spin_unlock+0x13c/0x8b0 [ 125.958428][ T6742] tcp_sendmsg+0x30/0x50 [ 125.958453][ T6742] __sock_sendmsg+0xef/0x270 [ 125.958485][ T6742] __sys_sendto+0x365/0x4c0 [ 125.958524][ T6742] ? __pfx___sys_sendto+0x10/0x10 [ 125.958571][ T6742] ? __fget_files+0x2a/0x420 [ 125.958602][ T6742] ? ksys_write+0x275/0x2d0 [ 125.958638][ T6742] __x64_sys_sendto+0xde/0x100 [ 125.958662][ T6742] do_syscall_64+0xf3/0x230 [ 125.958694][ T6742] ? clear_bhb_loop+0x45/0xa0 [ 125.958719][ T6742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.958739][ T6742] RIP: 0033:0x7fba6598d169 [ 125.958758][ T6742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.958775][ T6742] RSP: 002b:00007fba66779038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 125.958798][ T6742] RAX: ffffffffffffffda RBX: 00007fba65ba5fa0 RCX: 00007fba6598d169 [ 125.958814][ T6742] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 125.958827][ T6742] RBP: 00007fba66779090 R08: 0000000000000000 R09: 0000000000000000 [ 125.958840][ T6742] R10: 0000000000044001 R11: 0000000000000246 R12: 0000000000000001 [ 125.958852][ T6742] R13: 0000000000000000 R14: 00007fba65ba5fa0 R15: 00007ffe41fb79c8 [ 125.958896][ T6742] [ 126.534081][ T6761] FAULT_INJECTION: forcing a failure. [ 126.534081][ T6761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.559448][ T6761] CPU: 0 UID: 0 PID: 6761 Comm: syz.0.295 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 126.559480][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.559493][ T6761] Call Trace: [ 126.559501][ T6761] [ 126.559510][ T6761] dump_stack_lvl+0x241/0x360 [ 126.559548][ T6761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.559578][ T6761] ? __pfx__printk+0x10/0x10 [ 126.559622][ T6761] should_fail_ex+0x424/0x570 [ 126.559650][ T6761] _copy_from_user+0x2d/0xb0 [ 126.559682][ T6761] copy_msghdr_from_user+0xb3/0x580 [ 126.559717][ T6761] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 126.559742][ T6761] ? __fget_files+0x2a/0x420 [ 126.559766][ T6761] ? __fget_files+0x2a/0x420 [ 126.559795][ T6761] __sys_sendmsg+0x20a/0x360 [ 126.559824][ T6761] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.559914][ T6761] ? do_syscall_64+0xb6/0x230 [ 126.559943][ T6761] do_syscall_64+0xf3/0x230 [ 126.559969][ T6761] ? clear_bhb_loop+0x45/0xa0 [ 126.559994][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.560015][ T6761] RIP: 0033:0x7f21eb78d169 [ 126.560033][ T6761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.560051][ T6761] RSP: 002b:00007f21ec5bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.560073][ T6761] RAX: ffffffffffffffda RBX: 00007f21eb9a5fa0 RCX: 00007f21eb78d169 [ 126.560089][ T6761] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004 [ 126.560103][ T6761] RBP: 00007f21ec5bb090 R08: 0000000000000000 R09: 0000000000000000 [ 126.560116][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.560128][ T6761] R13: 0000000000000000 R14: 00007f21eb9a5fa0 R15: 00007fffc6418aa8 [ 126.560160][ T6761] [ 126.566526][ T6759] netlink: 'syz.4.294': attribute type 1 has an invalid length. [ 126.683636][ T6762] FAULT_INJECTION: forcing a failure. [ 126.683636][ T6762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.766125][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.297'. [ 126.789263][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.297'. [ 126.807412][ T6764] netlink: 'syz.3.297': attribute type 4 has an invalid length. [ 126.872585][ T6762] CPU: 0 UID: 0 PID: 6762 Comm: syz.1.296 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 126.872617][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.872630][ T6762] Call Trace: [ 126.872638][ T6762] [ 126.872647][ T6762] dump_stack_lvl+0x241/0x360 [ 126.872687][ T6762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.872718][ T6762] ? __pfx__printk+0x10/0x10 [ 126.872759][ T6762] should_fail_ex+0x424/0x570 [ 126.872787][ T6762] _copy_to_user+0x31/0xb0 [ 126.872830][ T6762] simple_read_from_buffer+0xc4/0x170 [ 126.872866][ T6762] proc_fail_nth_read+0x1ef/0x260 [ 126.872892][ T6762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.872918][ T6762] ? rw_verify_area+0x246/0x630 [ 126.872940][ T6762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.872964][ T6762] vfs_read+0x21f/0xb90 [ 126.872993][ T6762] ? __pfx___mutex_lock+0x10/0x10 [ 126.873021][ T6762] ? __pfx_vfs_read+0x10/0x10 [ 126.873048][ T6762] ? __fget_files+0x2a/0x420 [ 126.873069][ T6762] ? __fget_files+0x39d/0x420 [ 126.873087][ T6762] ? __fget_files+0x2a/0x420 [ 126.873117][ T6762] ksys_read+0x19d/0x2d0 [ 126.873143][ T6762] ? __pfx_ksys_read+0x10/0x10 [ 126.873174][ T6762] ? do_syscall_64+0xb6/0x230 [ 126.873203][ T6762] do_syscall_64+0xf3/0x230 [ 126.873228][ T6762] ? clear_bhb_loop+0x45/0xa0 [ 126.873254][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.873274][ T6762] RIP: 0033:0x7f66ac38bb7c [ 126.873293][ T6762] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.873310][ T6762] RSP: 002b:00007f66ad1d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.873332][ T6762] RAX: ffffffffffffffda RBX: 00007f66ac5a6080 RCX: 00007f66ac38bb7c [ 126.873347][ T6762] RDX: 000000000000000f RSI: 00007f66ad1d30a0 RDI: 0000000000000004 [ 126.873358][ T6762] RBP: 00007f66ad1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 126.873371][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.873382][ T6762] R13: 0000000000000001 R14: 00007f66ac5a6080 R15: 00007ffe1e378938 [ 126.873413][ T6762] [ 126.890130][ T6764] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.138987][ T6776] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 127.184090][ T6764] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 127.265706][ T6780] netlink: 72 bytes leftover after parsing attributes in process `syz.0.302'. [ 127.880536][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 128.277270][ T6820] ip6gre1: entered promiscuous mode [ 128.419490][ T6849] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 128.490215][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 128.763586][ T6862] netlink: 52 bytes leftover after parsing attributes in process `syz.1.312'. [ 128.907789][ T6867] tipc: Enabling of bearer rejected, failed to enable media [ 128.955485][ T6867] syzkaller0: entered promiscuous mode [ 128.974810][ T6867] syzkaller0: entered allmulticast mode [ 129.345221][ T6879] sctp: [Deprecated]: syz.1.316 (pid 6879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.345221][ T6879] Use struct sctp_sack_info instead [ 130.352358][ T6922] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.386375][ T6924] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.330'. [ 130.416546][ T6922] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.772435][ T6932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.917815][ T6942] Cannot find add_set index 0 as target [ 131.005529][ T6942] syzkaller1: entered promiscuous mode [ 131.020947][ T6942] syzkaller1: entered allmulticast mode [ 131.146754][ T6947] FAULT_INJECTION: forcing a failure. [ 131.146754][ T6947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.187388][ T6947] CPU: 1 UID: 0 PID: 6947 Comm: syz.4.336 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 131.187421][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.187433][ T6947] Call Trace: [ 131.187441][ T6947] [ 131.187450][ T6947] dump_stack_lvl+0x241/0x360 [ 131.187489][ T6947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.187520][ T6947] ? __pfx__printk+0x10/0x10 [ 131.187564][ T6947] should_fail_ex+0x424/0x570 [ 131.187591][ T6947] _copy_from_user+0x2d/0xb0 [ 131.187623][ T6947] copy_msghdr_from_user+0xb3/0x580 [ 131.187658][ T6947] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 131.187684][ T6947] ? __fget_files+0x2a/0x420 [ 131.187707][ T6947] ? __fget_files+0x2a/0x420 [ 131.187743][ T6947] __sys_sendmsg+0x20a/0x360 [ 131.187771][ T6947] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.187852][ T6947] ? do_syscall_64+0xb6/0x230 [ 131.187882][ T6947] do_syscall_64+0xf3/0x230 [ 131.187907][ T6947] ? clear_bhb_loop+0x45/0xa0 [ 131.187933][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.187953][ T6947] RIP: 0033:0x7f4c17d8d169 [ 131.187971][ T6947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.187988][ T6947] RSP: 002b:00007f4c18ca8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.188011][ T6947] RAX: ffffffffffffffda RBX: 00007f4c17fa5fa0 RCX: 00007f4c17d8d169 [ 131.188026][ T6947] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 131.188037][ T6947] RBP: 00007f4c18ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 131.188049][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.188060][ T6947] R13: 0000000000000000 R14: 00007f4c17fa5fa0 R15: 00007ffde17f40d8 [ 131.188091][ T6947] [ 131.634054][ T6961] bridge0: port 3(batadv1) entered blocking state [ 131.641013][ T6961] bridge0: port 3(batadv1) entered disabled state [ 131.647739][ T6961] batadv1: entered allmulticast mode [ 131.658099][ T6961] batadv1: entered promiscuous mode [ 131.675226][ T6962] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.342'. [ 131.709842][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 131.722904][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.890847][ T6961] bridge_slave_1 (unregistering): left allmulticast mode [ 131.898081][ T6961] bridge_slave_1 (unregistering): left promiscuous mode [ 131.907380][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.135169][ T2986] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 132.144867][ T2986] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 132.157773][ T6979] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.388515][ T6998] FAULT_INJECTION: forcing a failure. [ 132.388515][ T6998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.403832][ T6998] CPU: 0 UID: 0 PID: 6998 Comm: syz.2.351 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 132.403861][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.403872][ T6998] Call Trace: [ 132.403879][ T6998] [ 132.403887][ T6998] dump_stack_lvl+0x241/0x360 [ 132.403922][ T6998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.403949][ T6998] ? __pfx__printk+0x10/0x10 [ 132.403990][ T6998] should_fail_ex+0x424/0x570 [ 132.404017][ T6998] _copy_from_user+0x2d/0xb0 [ 132.404048][ T6998] copy_msghdr_from_user+0xb3/0x580 [ 132.404082][ T6998] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 132.404107][ T6998] ? __fget_files+0x2a/0x420 [ 132.404130][ T6998] ? __fget_files+0x2a/0x420 [ 132.404158][ T6998] __sys_sendmsg+0x20a/0x360 [ 132.404187][ T6998] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.404267][ T6998] ? do_syscall_64+0xb6/0x230 [ 132.404295][ T6998] do_syscall_64+0xf3/0x230 [ 132.404319][ T6998] ? clear_bhb_loop+0x45/0xa0 [ 132.404344][ T6998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.404364][ T6998] RIP: 0033:0x7fba6598d169 [ 132.404382][ T6998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.404399][ T6998] RSP: 002b:00007fba66779038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.404422][ T6998] RAX: ffffffffffffffda RBX: 00007fba65ba5fa0 RCX: 00007fba6598d169 [ 132.404437][ T6998] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 132.404450][ T6998] RBP: 00007fba66779090 R08: 0000000000000000 R09: 0000000000000000 [ 132.404463][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.404475][ T6998] R13: 0000000000000000 R14: 00007fba65ba5fa0 R15: 00007ffe41fb79c8 [ 132.404505][ T6998] [ 132.705001][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.352'. [ 132.768599][ T7005] netlink: 52 bytes leftover after parsing attributes in process `syz.2.355'. [ 132.866254][ T7008] FAULT_INJECTION: forcing a failure. [ 132.866254][ T7008] name failslab, interval 1, probability 0, space 0, times 0 [ 132.880197][ T7008] CPU: 0 UID: 0 PID: 7008 Comm: syz.2.357 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 132.880242][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.880255][ T7008] Call Trace: [ 132.880285][ T7008] [ 132.880294][ T7008] dump_stack_lvl+0x241/0x360 [ 132.880331][ T7008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.880360][ T7008] ? __pfx__printk+0x10/0x10 [ 132.880393][ T7008] ? __pfx___might_resched+0x10/0x10 [ 132.880423][ T7008] should_fail_ex+0x424/0x570 [ 132.880449][ T7008] should_failslab+0xac/0x100 [ 132.880481][ T7008] __kmalloc_node_noprof+0xe7/0x4d0 [ 132.880512][ T7008] ? crypto_create_tfm_node+0x8a/0x3d0 [ 132.880548][ T7008] crypto_create_tfm_node+0x8a/0x3d0 [ 132.880577][ T7008] crypto_spawn_tfm2+0x5c/0x90 [ 132.880607][ T7008] crypto_authenc_init_tfm+0x46/0x220 [ 132.880635][ T7008] crypto_create_tfm_node+0x16c/0x3d0 [ 132.880665][ T7008] crypto_alloc_tfm_node+0x15d/0x3a0 [ 132.880700][ T7008] esp6_init_state+0x627/0x1180 [ 132.880729][ T7008] ? __sock_sendmsg+0x221/0x270 [ 132.880752][ T7008] ? ____sys_sendmsg+0x523/0x860 [ 132.880778][ T7008] ? __pfx_esp6_init_state+0x10/0x10 [ 132.880830][ T7008] ? __xfrm_init_state+0x6d9/0x1050 [ 132.880853][ T7008] ? __xfrm_init_state+0x6d9/0x1050 [ 132.880876][ T7008] __xfrm_init_state+0x7ac/0x1050 [ 132.880903][ T7008] xfrm_add_sa+0x2fb9/0x4230 [ 132.880933][ T7008] ? __pfx_xfrm_add_sa+0x10/0x10 [ 132.880958][ T7008] ? __nla_parse+0x40/0x60 [ 132.880982][ T7008] xfrm_user_rcv_msg+0x9c3/0xca0 [ 132.881008][ T7008] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 132.881059][ T7008] ? __mutex_trylock_common+0x184/0x2e0 [ 132.881087][ T7008] ? __pfx___mutex_trylock_common+0x10/0x10 [ 132.881118][ T7008] netlink_rcv_skb+0x208/0x480 [ 132.881143][ T7008] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 132.881165][ T7008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.881206][ T7008] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.881233][ T7008] xfrm_netlink_rcv+0x79/0x90 [ 132.881254][ T7008] netlink_unicast+0x7f8/0x9a0 [ 132.881284][ T7008] ? __pfx_netlink_unicast+0x10/0x10 [ 132.881307][ T7008] ? skb_put+0x114/0x1f0 [ 132.881326][ T7008] netlink_sendmsg+0x8c3/0xcd0 [ 132.881360][ T7008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.881388][ T7008] ? aa_sock_msg_perm+0x91/0x160 [ 132.881416][ T7008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.881437][ T7008] __sock_sendmsg+0x221/0x270 [ 132.881461][ T7008] ____sys_sendmsg+0x523/0x860 [ 132.881487][ T7008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.881502][ T7008] ? __fget_files+0x2a/0x420 [ 132.881520][ T7008] ? __fget_files+0x2a/0x420 [ 132.881549][ T7008] __sys_sendmsg+0x271/0x360 [ 132.881571][ T7008] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.881634][ T7008] ? do_syscall_64+0xb6/0x230 [ 132.881657][ T7008] do_syscall_64+0xf3/0x230 [ 132.881677][ T7008] ? clear_bhb_loop+0x45/0xa0 [ 132.881697][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.881712][ T7008] RIP: 0033:0x7fba6598d169 [ 132.881728][ T7008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.881742][ T7008] RSP: 002b:00007fba66779038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.881760][ T7008] RAX: ffffffffffffffda RBX: 00007fba65ba5fa0 RCX: 00007fba6598d169 [ 132.881772][ T7008] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 132.881782][ T7008] RBP: 00007fba66779090 R08: 0000000000000000 R09: 0000000000000000 [ 132.881792][ T7008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.881801][ T7008] R13: 0000000000000000 R14: 00007fba65ba5fa0 R15: 00007ffe41fb79c8 [ 132.881826][ T7008] [ 133.244407][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.251110][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.388742][ T7013] tipc: Enabling not permitted [ 133.394581][ T7013] tipc: Enabling of bearer rejected, failed to enable media [ 133.620289][ T7016] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.356'. [ 133.712264][ T7023] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.829793][ T7025] netlink: 'syz.4.362': attribute type 39 has an invalid length. [ 134.228770][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 135.444727][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 135.987877][ T7079] FAULT_INJECTION: forcing a failure. [ 135.987877][ T7079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.017270][ T7079] CPU: 0 UID: 0 PID: 7079 Comm: syz.1.380 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 136.017309][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.017323][ T7079] Call Trace: [ 136.017331][ T7079] [ 136.017341][ T7079] dump_stack_lvl+0x241/0x360 [ 136.017381][ T7079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.017412][ T7079] ? __pfx__printk+0x10/0x10 [ 136.017456][ T7079] should_fail_ex+0x424/0x570 [ 136.017484][ T7079] _copy_from_user+0x2d/0xb0 [ 136.017517][ T7079] copy_msghdr_from_user+0xb3/0x580 [ 136.017553][ T7079] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 136.017599][ T7079] __sys_sendmmsg+0x361/0x7b0 [ 136.017636][ T7079] ? __pfx___sys_sendmmsg+0x10/0x10 [ 136.017698][ T7079] ? rcu_read_lock_any_held+0xbb/0x160 [ 136.017728][ T7079] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 136.017760][ T7079] ? vfs_write+0xb29/0xd10 [ 136.017795][ T7079] ? ksys_write+0x24e/0x2d0 [ 136.017823][ T7079] ? __mutex_unlock_slowpath+0x229/0x800 [ 136.017883][ T7079] ? ksys_write+0x275/0x2d0 [ 136.017921][ T7079] __x64_sys_sendmmsg+0xa0/0xb0 [ 136.017946][ T7079] do_syscall_64+0xf3/0x230 [ 136.017972][ T7079] ? clear_bhb_loop+0x45/0xa0 [ 136.017997][ T7079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.018017][ T7079] RIP: 0033:0x7f66ac38d169 [ 136.018036][ T7079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.018053][ T7079] RSP: 002b:00007f66ad1f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.018075][ T7079] RAX: ffffffffffffffda RBX: 00007f66ac5a5fa0 RCX: 00007f66ac38d169 [ 136.018090][ T7079] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 136.018104][ T7079] RBP: 00007f66ad1f4090 R08: 0000000000000000 R09: 0000000000000000 [ 136.018117][ T7079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.018129][ T7079] R13: 0000000000000000 R14: 00007f66ac5a5fa0 R15: 00007ffe1e378938 [ 136.018165][ T7079] [ 136.295415][ T7068] team0 (unregistering): Port device team_slave_0 removed [ 136.308891][ T7068] team0 (unregistering): Port device team_slave_1 removed [ 136.470967][ T7081] netlink: 'syz.1.381': attribute type 39 has an invalid length. [ 136.930886][ T7096] netlink: 44 bytes leftover after parsing attributes in process `syz.1.385'. [ 137.077858][ T7103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.385'. [ 137.408095][ T7109] netlink: 'syz.2.389': attribute type 10 has an invalid length. [ 137.439123][ T7109] team0: Port device dummy0 added [ 137.444092][ T7110] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.477792][ T7109] team0: Port device dummy0 removed [ 137.488338][ T7109] bridge_slave_0: left allmulticast mode [ 137.494447][ T7109] bridge_slave_0: left promiscuous mode [ 137.501538][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.539831][ T7109] bond0: (slave bond_slave_0): Releasing backup interface [ 137.579931][ T7109] bond0: (slave bond_slave_1): Releasing backup interface [ 137.612489][ T7109] team0: Port device team_slave_0 removed [ 137.638563][ T7109] team0: Port device team_slave_1 removed [ 137.645573][ T7109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.653401][ T7109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.694391][ T7109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.702701][ T7109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.739135][ T7109] batadv1: left allmulticast mode [ 137.745708][ T7109] batadv1: left promiscuous mode [ 137.750982][ T7109] bridge0: port 3(batadv1) entered disabled state [ 137.892992][ T7114] netlink: 96 bytes leftover after parsing attributes in process `syz.4.391'. [ 137.976849][ T7114] pim6reg1: entered promiscuous mode [ 137.999493][ T7114] pim6reg1: entered allmulticast mode [ 138.535308][ T7140] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.399'. [ 138.793908][ T7154] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.803627][ T7154] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.813541][ T7154] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.822982][ T7154] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.998582][ T7164] FAULT_INJECTION: forcing a failure. [ 138.998582][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 139.019423][ T7164] CPU: 0 UID: 0 PID: 7164 Comm: syz.2.408 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 139.019455][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.019468][ T7164] Call Trace: [ 139.019476][ T7164] [ 139.019485][ T7164] dump_stack_lvl+0x241/0x360 [ 139.019523][ T7164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.019552][ T7164] ? __pfx__printk+0x10/0x10 [ 139.019586][ T7164] ? __pfx___might_resched+0x10/0x10 [ 139.019617][ T7164] should_fail_ex+0x424/0x570 [ 139.019644][ T7164] should_failslab+0xac/0x100 [ 139.019676][ T7164] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 139.019706][ T7164] ? __alloc_skb+0x1c2/0x480 [ 139.019730][ T7164] __alloc_skb+0x1c2/0x480 [ 139.019777][ T7164] ? __pfx___alloc_skb+0x10/0x10 [ 139.019798][ T7164] ? netlink_autobind+0xd6/0x2f0 [ 139.019832][ T7164] ? netlink_autobind+0x2b0/0x2f0 [ 139.019877][ T7164] netlink_sendmsg+0x638/0xcd0 [ 139.019918][ T7164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.019969][ T7164] ? aa_sock_msg_perm+0x91/0x160 [ 139.020004][ T7164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.020031][ T7164] __sock_sendmsg+0x221/0x270 [ 139.020062][ T7164] ____sys_sendmsg+0x523/0x860 [ 139.020094][ T7164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.020114][ T7164] ? __fget_files+0x2a/0x420 [ 139.020137][ T7164] ? __fget_files+0x2a/0x420 [ 139.020166][ T7164] __sys_sendmmsg+0x3a0/0x7b0 [ 139.020200][ T7164] ? __pfx___sys_sendmmsg+0x10/0x10 [ 139.020259][ T7164] ? rcu_read_lock_any_held+0xbb/0x160 [ 139.020288][ T7164] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 139.020320][ T7164] ? vfs_write+0xb29/0xd10 [ 139.020354][ T7164] ? ksys_write+0x24e/0x2d0 [ 139.020381][ T7164] ? __mutex_unlock_slowpath+0x229/0x800 [ 139.020439][ T7164] ? ksys_write+0x275/0x2d0 [ 139.020476][ T7164] __x64_sys_sendmmsg+0xa0/0xb0 [ 139.020501][ T7164] do_syscall_64+0xf3/0x230 [ 139.020527][ T7164] ? clear_bhb_loop+0x45/0xa0 [ 139.020552][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.020572][ T7164] RIP: 0033:0x7fba6598d169 [ 139.020591][ T7164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.020608][ T7164] RSP: 002b:00007fba66779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 139.020630][ T7164] RAX: ffffffffffffffda RBX: 00007fba65ba5fa0 RCX: 00007fba6598d169 [ 139.020645][ T7164] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 139.020659][ T7164] RBP: 00007fba66779090 R08: 0000000000000000 R09: 0000000000000000 [ 139.020671][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.020683][ T7164] R13: 0000000000000000 R14: 00007fba65ba5fa0 R15: 00007ffe41fb79c8 [ 139.020715][ T7164] [ 139.422617][ T7162] geneve2: entered promiscuous mode [ 139.427901][ T7162] geneve2: entered allmulticast mode [ 139.452889][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 139.559376][ T7166] syz_tun: entered promiscuous mode [ 139.592505][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 139.679203][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 139.812502][ T7161] syz_tun: left promiscuous mode [ 140.152445][ T748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.267891][ T748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.452937][ T748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.717571][ T748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.039780][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 141.201527][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.219092][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.246968][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.262395][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.271030][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.594916][ T7218] netlink: 'syz.4.430': attribute type 3 has an invalid length. [ 141.642146][ T7198] Bluetooth: MGMT ver 1.23 [ 142.328663][ T748] bond0 (unregistering): Released all slaves [ 142.350381][ T7198] netlink: 'syz.3.424': attribute type 6 has an invalid length. [ 142.358341][ T7218] netlink: 'syz.4.430': attribute type 3 has an invalid length. [ 142.384302][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.430'. [ 142.407393][ T7222] ipip0: entered promiscuous mode [ 142.437651][ T7222] ipip0: entered allmulticast mode [ 142.782843][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 142.822784][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 142.997359][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 143.008585][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 143.136963][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 143.174488][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 143.273343][ T7258] netlink: 44 bytes leftover after parsing attributes in process `syz.3.440'. [ 143.330122][ T55] Bluetooth: hci3: command tx timeout [ 143.357712][ T748] hsr_slave_0: left promiscuous mode [ 143.369001][ T748] hsr_slave_1: left promiscuous mode [ 143.395872][ T748] veth1_macvtap: left promiscuous mode [ 143.408346][ T748] veth0_macvtap: left promiscuous mode [ 143.411030][ T7265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.440'. [ 143.415305][ T748] veth1_vlan: left promiscuous mode [ 143.433524][ T748] veth0_vlan: left promiscuous mode [ 143.673638][ T748] [ 143.676023][ T748] ====================================================== [ 143.683065][ T748] WARNING: possible circular locking dependency detected [ 143.690115][ T748] 6.14.0-syzkaller-13305-g61f96e684edd #0 Not tainted [ 143.696896][ T748] ------------------------------------------------------ [ 143.703938][ T748] kworker/u8:5/748 is trying to acquire lock: [ 143.710029][ T748] ffff888034938e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0 [ 143.720186][ T748] [ 143.720186][ T748] but task is already holding lock: [ 143.727572][ T748] ffff8880355b0d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 143.739208][ T748] [ 143.739208][ T748] which lock already depends on the new lock. [ 143.739208][ T748] [ 143.749623][ T748] [ 143.749623][ T748] the existing dependency chain (in reverse order) is: [ 143.758638][ T748] [ 143.758638][ T748] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 143.767088][ T748] lock_acquire+0x116/0x2f0 [ 143.772121][ T748] __mutex_lock+0x1a5/0x10c0 [ 143.777234][ T748] dev_set_mtu+0x11c/0x270 [ 143.782183][ T748] team_add_slave+0x83b/0x28b0 [ 143.787477][ T748] do_set_master+0x579/0x730 [ 143.792597][ T748] do_setlink+0x111d/0x43a0 [ 143.797632][ T748] rtnl_newlink+0x17e2/0x1fe0 [ 143.802835][ T748] rtnetlink_rcv_msg+0x80f/0xd70 [ 143.808300][ T748] netlink_rcv_skb+0x208/0x480 [ 143.813591][ T748] netlink_unicast+0x7f8/0x9a0 [ 143.818881][ T748] netlink_sendmsg+0x8c3/0xcd0 [ 143.824172][ T748] __sock_sendmsg+0x221/0x270 [ 143.829373][ T748] ____sys_sendmsg+0x523/0x860 [ 143.834664][ T748] __sys_sendmsg+0x271/0x360 [ 143.839771][ T748] do_syscall_64+0xf3/0x230 [ 143.844798][ T748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.851217][ T748] [ 143.851217][ T748] -> #0 (team->team_lock_key#4){+.+.}-{4:4}: [ 143.859406][ T748] validate_chain+0xa69/0x24e0 [ 143.864698][ T748] __lock_acquire+0xad5/0xd80 [ 143.869894][ T748] lock_acquire+0x116/0x2f0 [ 143.874915][ T748] __mutex_lock+0x1a5/0x10c0 [ 143.880205][ T748] team_vlan_rx_kill_vid+0x36/0xe0 [ 143.885836][ T748] vlan_vid_del+0x483/0x770 [ 143.890866][ T748] vlan_device_event+0x23c/0x1e00 [ 143.896419][ T748] notifier_call_chain+0x1a5/0x3f0 [ 143.902070][ T748] dev_close_many+0x33e/0x4c0 [ 143.907326][ T748] unregister_netdevice_many_notify+0x628/0x2510 [ 143.914194][ T748] default_device_exit_batch+0x7ff/0x880 [ 143.920362][ T748] cleanup_net+0x8af/0xd60 [ 143.925305][ T748] process_scheduled_works+0xac3/0x18e0 [ 143.931375][ T748] worker_thread+0x870/0xd50 [ 143.936493][ T748] kthread+0x7b7/0x940 [ 143.941096][ T748] ret_from_fork+0x4b/0x80 [ 143.946036][ T748] ret_from_fork_asm+0x1a/0x30 [ 143.951322][ T748] [ 143.951322][ T748] other info that might help us debug this: [ 143.951322][ T748] [ 143.961549][ T748] Possible unsafe locking scenario: [ 143.961549][ T748] [ 143.968999][ T748] CPU0 CPU1 [ 143.974362][ T748] ---- ---- [ 143.979813][ T748] lock(&dev_instance_lock_key#3); [ 143.985027][ T748] lock(team->team_lock_key#4); [ 143.992497][ T748] lock(&dev_instance_lock_key#3); [ 144.000229][ T748] lock(team->team_lock_key#4); [ 144.005177][ T748] [ 144.005177][ T748] *** DEADLOCK *** [ 144.005177][ T748] [ 144.013319][ T748] 5 locks held by kworker/u8:5/748: [ 144.018524][ T748] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 144.029449][ T748] #1: ffffc900033cfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 144.040097][ T748] #2: ffffffff900efe90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 144.049524][ T748] #3: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 144.059563][ T748] #4: ffff8880355b0d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 144.071605][ T748] [ 144.071605][ T748] stack backtrace: [ 144.077501][ T748] CPU: 0 UID: 0 PID: 748 Comm: kworker/u8:5 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 144.077522][ T748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.077533][ T748] Workqueue: netns cleanup_net [ 144.077560][ T748] Call Trace: [ 144.077567][ T748] [ 144.077587][ T748] dump_stack_lvl+0x241/0x360 [ 144.077619][ T748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.077641][ T748] ? __pfx__printk+0x10/0x10 [ 144.077681][ T748] ? print_lock+0x171/0x1a0 [ 144.077702][ T748] print_circular_bug+0x2e1/0x300 [ 144.077726][ T748] check_noncircular+0x142/0x160 [ 144.077750][ T748] validate_chain+0xa69/0x24e0 [ 144.077781][ T748] __lock_acquire+0xad5/0xd80 [ 144.077801][ T748] lock_acquire+0x116/0x2f0 [ 144.077817][ T748] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 144.077838][ T748] __mutex_lock+0x1a5/0x10c0 [ 144.077859][ T748] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 144.077877][ T748] ? __cancel_work+0x24c/0x390 [ 144.077899][ T748] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 144.077913][ T748] ? __cancel_work+0x2f0/0x390 [ 144.077933][ T748] ? __pfx___mutex_lock+0x10/0x10 [ 144.077952][ T748] ? __pfx___cancel_work+0x10/0x10 [ 144.077974][ T748] ? do_raw_spin_unlock+0x13c/0x8b0 [ 144.078001][ T748] team_vlan_rx_kill_vid+0x36/0xe0 [ 144.078022][ T748] vlan_vid_del+0x483/0x770 [ 144.078051][ T748] vlan_device_event+0x23c/0x1e00 [ 144.078078][ T748] ? br_device_event+0x28f/0xae0 [ 144.078099][ T748] ? __pfx_phonet_device_notify+0x10/0x10 [ 144.078115][ T748] ? __pfx_vlan_device_event+0x10/0x10 [ 144.078139][ T748] ? __pfx_br_device_event+0x10/0x10 [ 144.078159][ T748] ? raw_notifier+0x9d/0x740 [ 144.078180][ T748] ? isotp_notifier+0xa4/0x6b0 [ 144.078195][ T748] ? cgw_notifier+0xd8/0x3b0 [ 144.078208][ T748] ? packet_notifier+0x76/0xa30 [ 144.078230][ T748] notifier_call_chain+0x1a5/0x3f0 [ 144.078253][ T748] dev_close_many+0x33e/0x4c0 [ 144.078278][ T748] ? __pfx_dev_close_many+0x10/0x10 [ 144.078304][ T748] unregister_netdevice_many_notify+0x628/0x2510 [ 144.078327][ T748] ? lockdep_hardirqs_on+0x9d/0x150 [ 144.078351][ T748] ? __local_bh_enable_ip+0x168/0x200 [ 144.078369][ T748] ? batadv_tt_local_remove+0x119/0x230 [ 144.078385][ T748] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 144.078400][ T748] ? batadv_tt_local_remove+0x119/0x230 [ 144.078415][ T748] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 144.078440][ T748] ? unregister_netdevice_queue+0x2c4/0x400 [ 144.078467][ T748] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 144.078491][ T748] default_device_exit_batch+0x7ff/0x880 [ 144.078520][ T748] ? __pfx_default_device_exit_batch+0x10/0x10 [ 144.078544][ T748] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 144.078568][ T748] ? cfg802154_pernet_exit+0xc3/0xe0 [ 144.078582][ T748] ? __pfx_default_device_exit_batch+0x10/0x10 [ 144.078613][ T748] cleanup_net+0x8af/0xd60 [ 144.078645][ T748] ? __pfx_cleanup_net+0x10/0x10 [ 144.078673][ T748] ? process_scheduled_works+0x9cb/0x18e0 [ 144.078691][ T748] process_scheduled_works+0xac3/0x18e0 [ 144.078722][ T748] ? __pfx_process_scheduled_works+0x10/0x10 [ 144.078744][ T748] ? assign_work+0x367/0x3d0 [ 144.078763][ T748] worker_thread+0x870/0xd50 [ 144.078788][ T748] ? __kthread_parkme+0x1a8/0x200 [ 144.078808][ T748] ? __pfx_worker_thread+0x10/0x10 [ 144.078827][ T748] kthread+0x7b7/0x940 [ 144.078850][ T748] ? __pfx_worker_thread+0x10/0x10 [ 144.078870][ T748] ? __pfx_kthread+0x10/0x10 [ 144.078890][ T748] ? __pfx_kthread+0x10/0x10 [ 144.078912][ T748] ? __pfx_kthread+0x10/0x10 [ 144.078933][ T748] ? __pfx_kthread+0x10/0x10 [ 144.078954][ T748] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.078969][ T748] ? lockdep_hardirqs_on+0x9d/0x150 [ 144.078986][ T748] ? __pfx_kthread+0x10/0x10 [ 144.079008][ T748] ret_from_fork+0x4b/0x80 [ 144.079024][ T748] ? __pfx_kthread+0x10/0x10 [ 144.079046][ T748] ret_from_fork_asm+0x1a/0x30 [ 144.079067][ T748] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 144.475723][ T7274] netlink: 80 bytes leftover after parsing attributes in process `syz.0.441'. [ 144.484831][ T7274] netlink: 80 bytes leftover after parsing attributes in process `syz.0.441'. [ 144.493991][ T7274] FAULT_INJECTION: forcing a failure. [ 144.493991][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 144.506672][ T7274] CPU: 0 UID: 0 PID: 7274 Comm: syz.0.441 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 144.506700][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.506713][ T7274] Call Trace: [ 144.506721][ T7274] [ 144.506729][ T7274] dump_stack_lvl+0x241/0x360 [ 144.506766][ T7274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.506795][ T7274] ? __pfx__printk+0x10/0x10 [ 144.506820][ T7274] ? rcu_is_watching+0x15/0xb0 [ 144.506848][ T7274] ? __pfx___might_resched+0x10/0x10 [ 144.506875][ T7274] should_fail_ex+0x424/0x570 [ 144.506898][ T7274] should_failslab+0xac/0x100 [ 144.506927][ T7274] __kvmalloc_node_noprof+0x170/0x5a0 [ 144.506957][ T7274] ? __nf_hook_entries_try_shrink+0x32c/0x740 [ 144.506988][ T7274] __nf_hook_entries_try_shrink+0x32c/0x740 [ 144.507021][ T7274] __nf_unregister_net_hook+0x5da/0x810 [ 144.507052][ T7274] nf_unregister_net_hooks+0xd0/0x140 [ 144.507080][ T7274] nf_ct_netns_put+0x3bc/0x510 [ 144.507106][ T7274] ? __pfx_nft_masq_ipv4_destroy+0x10/0x10 [ 144.507135][ T7274] nf_tables_rule_destroy+0x111/0x1c0 [ 144.507167][ T7274] nf_tables_newrule+0x2537/0x2980 [ 144.507206][ T7274] ? __pfx_nf_tables_newrule+0x10/0x10 [ 144.507242][ T7274] ? nfnl_pernet+0x23/0x240 [ 144.507266][ T7274] ? __nla_parse+0x40/0x60 [ 144.507292][ T7274] nfnetlink_rcv+0x12eb/0x28f0 [ 144.507330][ T7274] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 144.507376][ T7274] ? skb_clone+0x240/0x390 [ 144.507401][ T7274] ? rcu_is_watching+0x15/0xb0 [ 144.507427][ T7274] ? lock_release+0x4e/0x3e0 [ 144.507449][ T7274] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.507477][ T7274] netlink_unicast+0x7f8/0x9a0 [ 144.507504][ T7274] ? __pfx_netlink_unicast+0x10/0x10 [ 144.507529][ T7274] ? skb_put+0x114/0x1f0 [ 144.507547][ T7274] netlink_sendmsg+0x8c3/0xcd0 [ 144.507580][ T7274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.507606][ T7274] ? __might_fault+0xaa/0x120 [ 144.507635][ T7274] ? aa_sock_msg_perm+0x91/0x160 [ 144.507672][ T7274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.507698][ T7274] __sock_sendmsg+0x221/0x270 [ 144.507725][ T7274] ____sys_sendmsg+0x523/0x860 [ 144.507750][ T7274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.507768][ T7274] ? __fget_files+0x2a/0x420 [ 144.507785][ T7274] ? __fget_files+0x2a/0x420 [ 144.507814][ T7274] __sys_sendmsg+0x271/0x360 [ 144.507832][ T7274] ? ksys_write+0x24e/0x2d0 [ 144.507854][ T7274] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.507873][ T7274] ? vfs_write+0xb29/0xd10 [ 144.507917][ T7274] ? rcu_is_watching+0x15/0xb0 [ 144.507942][ T7274] ? rcu_is_watching+0x15/0xb0 [ 144.507969][ T7274] do_syscall_64+0xf3/0x230 [ 144.507994][ T7274] ? clear_bhb_loop+0x45/0xa0 [ 144.508016][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.508034][ T7274] RIP: 0033:0x7f21eb78d169 [ 144.508051][ T7274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.508067][ T7274] RSP: 002b:00007f21ec5bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.508089][ T7274] RAX: ffffffffffffffda RBX: 00007f21eb9a5fa0 RCX: 00007f21eb78d169 [ 144.508104][ T7274] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 144.508117][ T7274] RBP: 00007f21ec5bb090 R08: 0000000000000000 R09: 0000000000000000 [ 144.508130][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.508142][ T7274] R13: 0000000000000000 R14: 00007f21eb9a5fa0 R15: 00007fffc6418aa8 [ 144.508164][ T7274] [ 145.419379][ T55] Bluetooth: hci3: command tx timeout