last executing test programs: 4.660719507s ago: executing program 0 (id=1021): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r0, 0x401, 0x6, 0x2}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1404, 0x832, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xa, 0xa, 0x9, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x4, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000091}, 0x4004004) close(0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000600)="7c4d248064cdfe7bff5525b4c1a1036b4f2cddb55a4b7abaa2ce682394381e7a60aa872d49a113a7581474b451f35a1056f601100c5be6eed986013e49458ce3f237929384358c6b5e8d21faad0ef48e2320293f08c1000d226c50fb859b05ab0302afd83591df", 0x67}, {&(0x7f0000000680)="eccf2a1cc6d6025d1ad5c437fb71dca017e999d0fcae2c3614127eeed63069282481c43bf26834f9b16c607f73fee21b4e13a984d43a8e719a925e1e36b9ede7a55f017c1dfa3f04689c296f0f51bf2385b330fcff19b1266c7c15d13d2ab8d7cf201d66738cf6442a74a79b205b05d27ad9c075c77da227d3208e40b8f10e9b2f6ea56eed3974a12b2c4125958bef88", 0x90}, {&(0x7f0000000740)="9e877a6a9bf68b0e721a1522cd3ef44cac0d5ebf96d9f69deb5e3436cf63a51ae9f22095bef4b6d9127068686197afaf94dd9aa339cdfb106ebcdfb6da50023c9b67bb3c55202ecfcdfbeb43147e34a85e9c7af27023ad90e6cda6593a5420c2410fd4f97bbb5f4bd1c90b08e287ed9c1bd5", 0x72}, {&(0x7f00000007c0)="db72132a6ceab56e8bd803fc44dcd9e4a67b1335476cebb6274036c2b28793aeee1576dc311ce946dd04d259d8e25e10807017c9237f23a1fc444c4105236e8d45f56e86ee467ea3fc861cdea4d002412e5a9ec472ace74d977b6246590a0995cd191a3bf6e1c8a30f3ddaad7e137d2251aca13f1c568ca2501e7cc9e5363d5b65b6a4c8", 0x84}, {&(0x7f0000000880)="bbd8936045441904bfdf3e5bc7be22e6b02542b33d61a6393d8278cb750b0043aec8148aadeab82fad500183c2e6145c400d6bc8d2a5cfedf89e3a19da2e96f6a905488af744d7e0c247bd348417c63ad51c291494d21aeec6d5a7c59201fcda523fe77b12c618c816f0887a8e61cdfb7fee", 0x72}, {&(0x7f0000000900)="ad5e01d73016aac68b6cd970051b25bb9635788eb2241427d2c5fe2922dccb5e0c9ad2daf5b2d7fa2320f2ecf47186c2a5a4bf2641724b02488fa90a408b13c6e7fb02884f893218d746ec739d81e051ec09261e667b864e5b0cd76b7227a2e3b4a72d1d16f2929a364e4dff37314c5ff586401da74c07f06c5f09ed25d379cc15b20d2e8fb12b143dff71dbb5faa3500374a7d7edc3d5db81e182181bda0f7d40831e6c5c09ae6a197e456b63553fb35612cda6b9984a099fc3d713cee67bfd3ae1fc5a21f7", 0xc6}, {&(0x7f0000000a00)="ebe7d619cee18f5048f6c1182d7bd1cc3d322518abb67831b8790bef88", 0x1d}, {&(0x7f0000000a40)="074f8dc78fc89c0e3cb5e451e419e0a7", 0x10}], 0x8}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000b40)=[@in6={0xa, 0x4e23, 0xdd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb7b}, @in6={0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, @in6={0xa, 0x4e23, 0xd0, @remote}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0xffffffff, @remote, 0xa8}], 0xb0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r3, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000001000)=[0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000001080)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0x43, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1, 0x25, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xff}, @exit, @tail_call, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='GPL\x00', 0x6, 0x9d, &(0x7f0000000e40)=""/157, 0x0, 0x18, '\x00', 0x0, @fallback=0x1a, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f80)={0x0, 0x4, 0x5, 0x7}, 0x10, r7, r3, 0x4, &(0x7f00000012c0)=[r3, r3, r6, r3, r3], &(0x7f0000001300)=[{0x5, 0x4, 0x4, 0xb}, {0x1, 0x3, 0x2, 0xa}, {0x2, 0x1, 0x7, 0x9}, {0x2, 0x4, 0x9, 0x6}], 0x10, 0x4, @void, @value}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000001400), r4) mkdirat$cgroup(r0, &(0x7f0000001440)='syz0\x00', 0x1ff) 3.939046238s ago: executing program 0 (id=1028): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="1c9ca1fb88a402aed73a4364a5593768ae", 0x11}, {&(0x7f0000000080)="ed463b47a5e15be18f0190e400a6cb790b1936018db66b35d292824c728b1517f91069e7ab23b11bef629a69498cb6a195b05d6aaf8673b3b0bfc4b0eed382c042f46c74b3eee646bc39bda0a9dac149e13d8bed49c206c5b5c84608062af97bde88ec091389baddaf5532323d70a984e14fd56d45b29cd049143c68cbfdf7bce491b98a03eb43e6cb5bc05444d32c79635c7c24e1ba8b256efa97cd013f129613fafdf274e7c365b4841b17b72331183df97b540eb25880548b2941fee9ef4bb4092693f348cc251b834b0f3ef456", 0xcf}, {&(0x7f0000000180)="089ac0c1e955ef204d91740257a17cc3fac9babd1c46685d45f5a83a57fc1f304d66f7a02562a67b601fff40b9d4d33750784dd41e2370f96cd64db637f2f0e1c2a9cd22bb3c50c52b5a2d92e17cde2cc5e10fc9a3c2310e576efefe1320e13e3ffaec8c97b930e56806ec3e54eeecc16511f9c8b6d9d4a0e00475554c53d6e15dead20608c4ad45337ef5a5f75716e97d28f6f07c5b7ce6136d8bc3433069a2ad2c76dd", 0xa4}, {&(0x7f0000000240)="ff52b31410d9bc32656fe6e33de3a8667b01f76b553c389d85235d3a29272e1b5e45da102d3619080bcccc57d12ac1740468589b29ba0da2c5d1258aca5a11b4a086949792fe4b212660a595f6ccfc815906a1ca3df268f38ff5ebef22fea176051bdca251679870b33901d8dd9a01d70231e231000137818f4f1a0dba3814e6b4f30856d470dc0109e7b1de08061c2420c8271bdd4906ec67e1cef27ebdac482cf978477f21a5c0ccea64ece13d4595a5af818817b4ace348ba3a9e496f461dd87b46703be45be02f1542f3d7df72e3ed491f5aee7ea0822abcb2a3f641031323e0ed221eaa28500eb98838cc0884b5d379", 0xf2}, {&(0x7f0000000340)="c83c", 0x2}], 0x5}, 0x20000090) 3.787428603s ago: executing program 0 (id=1030): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.624959146s ago: executing program 0 (id=1032): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000", 0x17}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c40)=ANY=[@ANYBLOB="0e6e0959933ce48551fb6e612f2d828b6aca008a66049026ea24c71d1cd79afb0b3777a979e828784df6a25104abebcce6b1d233649e8906462d905b485367bdb3ed57337743e2f40cb6b2cab1813678448eecb7cb3f05344d96d2e0cdf0878ac4ffce542da1ca0763532e36cf5edea0b4b25aefa1d60941ab55c86bdd6d038f38dbbe6f0ee8a0d9f888f1adbe3dc31c1de37d09db5d0d43998cbcf9", @ANYRES16=r4, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb}, {0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0xfc}}, 0xe8) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) socket$caif_stream(0x25, 0x1, 0x20000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000340)={r12}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000000c0)={r12, @in6={{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}}, [0x9, 0x6, 0x0, 0x1ff, 0x5, 0x11a8, 0x0, 0x2, 0x3ff, 0xfffffffffffffffb, 0x6, 0xffffffffffffffff, 0x6, 0x8, 0x2]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={r13, 0xca3, 0x2, 0xfffa, 0x8, 0x81, 0x40, 0xace, {r14, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x40}}, 0x5, 0x1, 0x0, 0xfffffc00, 0xfe9}}, &(0x7f0000000240)=0xb0) 3.624252838s ago: executing program 3 (id=1033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001000000000000000000000000000600030000ff"], 0x24}}, 0x8004) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000000100)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f00000005c0)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x305, 0x4, 0x7, 0x73, 0x2, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000600), &(0x7f00000000c0)=0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x439, 0x70bd27, 0x200001, {0x0, 0x0, 0x0, r10, 0x0, 0x8412}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff3, 0xfffffffe}}]}]}]}, 0x34}}, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r12, r8, 0x0, 0x8) ioctl$PPPIOCCONNECT(r8, 0x4004743a, &(0x7f0000000040)=0x1) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000000d000000050007001200000005001800010000000600080000000000050017000000000006200a00ffff00000500190004000000", @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 3.39034043s ago: executing program 3 (id=1037): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a001400", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) 3.241300041s ago: executing program 4 (id=1040): r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 3.050319101s ago: executing program 3 (id=1042): r0 = socket$kcm(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="63ce2e88626ff019a592a1faaa30606614baeaef770465257840ae8f02ce892875a9f6e5f40cd87b765acf2da11a69bb49199b4edf44d31a3c9d73f67dc2d7c7453d1dc43b8b74d96e30f7b67032c3611f017ebd3962c42f64174f91f244d50f57873444282103a1ee59b8fb29c92b148600ea95964445f7a6180d38e7834d0732189b9263648675d4332c8253af6aaef3fe5d2dacfef7e832f5efc1b7a32b6332ae5ddc7c943cef2f1c9d9187347f285bfe5577b8caa751a2fc09349166bc23", 0xc0}], 0x1}}], 0x1, 0x880) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r3, r5, 0x2f, 0x18, 0x4, @void, @value=r5}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f00000005c0)=@tcp6=r1, 0x4}, 0x20) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0, 0x0, 0x0, 0x68}, 0x40044) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000340)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000a400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) 2.855206268s ago: executing program 3 (id=1045): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x5, 0x10, r3, 0x59ae2000) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0xc, @empty, 0xb}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x8044}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa4000000000000070400", @ANYRES32=r5, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000021}, 0x20008894) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvfrom$rose(r2, &(0x7f00000000c0)=""/69, 0x45, 0x0, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="0078e16ddea900"], 0x48) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000000), 0x4) 2.630257488s ago: executing program 2 (id=1046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) (fail_nth: 8) 2.046621898s ago: executing program 2 (id=1047): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r0, 0x401, 0x6, 0x2}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1404, 0x832, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xa, 0xa, 0x9, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x4, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000091}, 0x4004004) close(0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000600)="7c4d248064cdfe7bff5525b4c1a1036b4f2cddb55a4b7abaa2ce682394381e7a60aa872d49a113a7581474b451f35a1056f601100c5be6eed986013e49458ce3f237929384358c6b5e8d21faad0ef48e2320293f08c1000d226c50fb859b05ab0302afd83591df", 0x67}, {&(0x7f0000000680)="eccf2a1cc6d6025d1ad5c437fb71dca017e999d0fcae2c3614127eeed63069282481c43bf26834f9b16c607f73fee21b4e13a984d43a8e719a925e1e36b9ede7a55f017c1dfa3f04689c296f0f51bf2385b330fcff19b1266c7c15d13d2ab8d7cf201d66738cf6442a74a79b205b05d27ad9c075c77da227d3208e40b8f10e9b2f6ea56eed3974a12b2c4125958bef88", 0x90}, {&(0x7f0000000740)="9e877a6a9bf68b0e721a1522cd3ef44cac0d5ebf96d9f69deb5e3436cf63a51ae9f22095bef4b6d9127068686197afaf94dd9aa339cdfb106ebcdfb6da50023c9b67bb3c55202ecfcdfbeb43147e34a85e9c7af27023ad90e6cda6593a5420c2410fd4f97bbb5f4bd1c90b08e287ed9c1bd5", 0x72}, {&(0x7f00000007c0)="db72132a6ceab56e8bd803fc44dcd9e4a67b1335476cebb6274036c2b28793aeee1576dc311ce946dd04d259d8e25e10807017c9237f23a1fc444c4105236e8d45f56e86ee467ea3fc861cdea4d002412e5a9ec472ace74d977b6246590a0995cd191a3bf6e1c8a30f3ddaad7e137d2251aca13f1c568ca2501e7cc9e5363d5b65b6a4c8", 0x84}, {&(0x7f0000000880)="bbd8936045441904bfdf3e5bc7be22e6b02542b33d61a6393d8278cb750b0043aec8148aadeab82fad500183c2e6145c400d6bc8d2a5cfedf89e3a19da2e96f6a905488af744d7e0c247bd348417c63ad51c291494d21aeec6d5a7c59201fcda523fe77b12c618c816f0887a8e61cdfb7fee", 0x72}, {&(0x7f0000000900)="ad5e01d73016aac68b6cd970051b25bb9635788eb2241427d2c5fe2922dccb5e0c9ad2daf5b2d7fa2320f2ecf47186c2a5a4bf2641724b02488fa90a408b13c6e7fb02884f893218d746ec739d81e051ec09261e667b864e5b0cd76b7227a2e3b4a72d1d16f2929a364e4dff37314c5ff586401da74c07f06c5f09ed25d379cc15b20d2e8fb12b143dff71dbb5faa3500374a7d7edc3d5db81e182181bda0f7d40831e6c5c09ae6a197e456b63553fb35612cda6b9984a099fc3d713cee67bfd3ae1fc5a21f7", 0xc6}, {&(0x7f0000000a00)="ebe7d619cee18f5048f6c1182d7bd1cc3d322518abb67831b8790bef88", 0x1d}, {&(0x7f0000000a40)="074f8dc78fc89c0e3cb5e451e419e0a7", 0x10}], 0x8}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000b40)=[@in6={0xa, 0x4e23, 0xdd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb7b}, @in6={0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, @in6={0xa, 0x4e23, 0xd0, @remote}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0xffffffff, @remote, 0xa8}], 0xb0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r3, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000001000)=[0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000001080)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0x43, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1, 0x25, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xff}, @exit, @tail_call, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='GPL\x00', 0x6, 0x9d, &(0x7f0000000e40)=""/157, 0x0, 0x18, '\x00', 0x0, @fallback=0x1a, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f80)={0x0, 0x4, 0x5, 0x7}, 0x10, r7, r3, 0x4, &(0x7f00000012c0)=[r3, r3, r6, r3, r3], &(0x7f0000001300)=[{0x5, 0x4, 0x4, 0xb}, {0x1, 0x3, 0x2, 0xa}, {0x2, 0x1, 0x7, 0x9}, {0x2, 0x4, 0x9, 0x6}], 0x10, 0x4, @void, @value}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000001400), r4) mkdirat$cgroup(r0, &(0x7f0000001440)='syz0\x00', 0x1ff) 2.046318328s ago: executing program 4 (id=1048): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="cd0026bd7000000000ea3b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000002c00330020a80300ffffffff"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.966236583s ago: executing program 4 (id=1049): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4044800}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0xb}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x1, 0x1b02}}, @TCA_TBF_PBURST={0x8, 0x7, 0x2064}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4044800}, 0x10) (async) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0xb}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x1, 0x1b02}}, @TCA_TBF_PBURST={0x8, 0x7, 0x2064}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async) 1.896905026s ago: executing program 0 (id=1050): unshare(0x26020480) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, r0, 0x2f, 0x0, 0x4, @void, @value}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, "590210a9909e0fcb377e3b3090b2e44b718ddb35e89c50886f313af3e06dcbc7c70c1a2c96eb188ff666915eabb0e74dad573cd38521471dc82a1341ea314ce9"}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800e683ad3a047db1eb00000000080071107f00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={r3, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$unix(0x1, 0x1, 0x0) writev(r7, &(0x7f0000000240)=[{&(0x7f0000001300)="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", 0xe00}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, 0x1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r8, 0x0, 0x0) listen(r8, 0x1ff) sendto$inet(r8, &(0x7f00000004c0)="ab", 0x1, 0x20c0, 0x0, 0x0) 1.872236474s ago: executing program 1 (id=1051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) sendto$inet6(r0, &(0x7f0000003380)='K', 0xfffffe42, 0x44008011, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xba}]}, 0x28}}, 0x0) 1.762636524s ago: executing program 4 (id=1052): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 1.762191472s ago: executing program 3 (id=1053): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xf, 0x6, 0x1) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="fdbd1f3e79751946bb241817b8865ca2fd42abec7dcf4fd792c540bc284d18f171ff3f40cdc95b8099be0c36f3c62426c30ad8fc72517956cd5b3568291439e07b4b32f9bb6ac0876f643995b46702ba7dbba92ee14781f6c5229ad7e971dd7d5d4aa373f70169695412b3314e6b6fc7713f705fca96bcbfca15ac608930e0875c135108334d920c0d0229b5881a9311d8d49b1b7d04688c45e7d949e2f8f9ef57e97c6c300356e113e36950688ff9513a706899e8ea2e0153e42d3b111fab36d03102fc05af5bbcee477b64c4981a611de1cf6a4c3efadf88018210b0ad8a8e5c9a680f08d1f60e833eec", @ANYRESDEC=r2], 0x34}, 0x1, 0x0, 0x0, 0x20001045}, 0x20040000) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x1, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0) 1.682996494s ago: executing program 2 (id=1054): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d003f00000000000000000004000080450011802fe5afbf24fbcccc55761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840c09650dbe70d6147f9cdbd"], 0x5c}], 0x1}, 0x0) 1.63088939s ago: executing program 1 (id=1055): r0 = socket$kcm(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="63ce2e88626ff019a592a1faaa30606614baeaef770465257840ae8f02ce892875a9f6e5f40cd87b765acf2da11a69bb49199b4edf44d31a3c9d73f67dc2d7c7453d1dc43b8b74d96e30f7b67032c3611f017ebd3962c42f64174f91f244d50f57873444282103a1ee59b8fb29c92b148600ea95964445f7a6180d38e7834d0732189b9263648675d4332c8253af6aaef3fe5d2dacfef7e832f5efc1b7a32b6332ae5ddc7c943cef2f1c9d9187347f285bfe5577b8caa751a2fc09349166bc23", 0xc0}], 0x1}}], 0x1, 0x880) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r3, r5, 0x2f, 0x18, 0x4, @void, @value=r5}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f00000005c0)=@tcp6=r1, 0x4}, 0x20) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0, 0x0, 0x0, 0x68}, 0x40044) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000340)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000a400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) 1.574585184s ago: executing program 4 (id=1056): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004240)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x142, 0x0, 0x1, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @pid}]}]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'geneve0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r8 = socket(0x10, 0x80803, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000040)) recvmmsg(r8, &(0x7f0000001bc0)=[{{0x0, 0x700, 0x0}}], 0x7, 0x0, 0x0) close(r3) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1000, 0x4, 0x3ff}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r10, @in6={{0xa, 0x4e22, 0x10000, @empty, 0xb2e}}, 0x7a44, 0x0, 0x6, 0x4, 0x0, 0x6, 0x4}, 0x9c) 1.474087152s ago: executing program 1 (id=1057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x21, 0x6, 0x6, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x41}, 0x40, 0x20, 0x4, 0x6}}) sendto$packet(r1, &(0x7f0000000280)="25e1fd0db597252cc915f404a24c591f10317a623a3b35b9038411", 0x1b, 0x48c4, &(0x7f0000000500)={0x11, 0x1c, r2, 0x1, 0x7, 0x6, @remote}, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r3, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="000229bd7000fddbdf250100000028000680060001000a00000014000400fc010000000000000000000000000001060005004e240000300006800800060000000000050002008100000008000300ac1414aa14000400ff02000000000000000000000000000108000300030000004000068008000700", @ANYRES32=r6, @ANYBLOB="0800f300", @ANYRES32=r7, @ANYBLOB="14000400ff010000000000000000000000000001060005004e21000006000100020000000800060013000000050005000600000008000300020000000800020001000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000081}, 0x40015) 1.385561388s ago: executing program 2 (id=1058): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a00003f", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f"], 0x48}}, 0x0) 1.232001297s ago: executing program 1 (id=1059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001000000000000000000000000000600030000ff"], 0x24}}, 0x8004) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000000100)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f00000005c0)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x305, 0x4, 0x7, 0x73, 0x2, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000600), &(0x7f00000000c0)=0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x439, 0x70bd27, 0x200001, {0x0, 0x0, 0x0, r10, 0x0, 0x8412}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff3, 0xfffffffe}}]}]}]}, 0x34}}, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r12, r8, 0x0, 0x8) ioctl$PPPIOCCONNECT(r8, 0x4004743a, &(0x7f0000000040)=0x1) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000000d000000050007001200000005001800010000000600080000000000050017000000000006200a00ffff00000500190004000000", @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 1.185930632s ago: executing program 4 (id=1060): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000", 0x17}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c40)=ANY=[@ANYBLOB="0e6e0959933ce48551fb6e612f2d828b6aca008a66049026ea24c71d1cd79afb0b3777a979e828784df6a25104abebcce6b1d233649e8906462d905b485367bdb3ed57337743e2f40cb6b2cab1813678448eecb7cb3f05344d96d2e0cdf0878ac4ffce542da1ca0763532e36cf5edea0b4b25aefa1d60941ab55c86bdd6d038f38dbbe6f0ee8a0d9f888f1adbe3dc31c1de37d09db5d0d43998cbcf9", @ANYRES16=r4, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb}, {0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0xfc}}, 0xe8) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) socket$caif_stream(0x25, 0x1, 0x20000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000340)={r12}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000000c0)={r12, @in6={{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}}, [0x9, 0x6, 0x0, 0x1ff, 0x5, 0x11a8, 0x0, 0x2, 0x3ff, 0xfffffffffffffffb, 0x6, 0xffffffffffffffff, 0x6, 0x8, 0x2]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={r13, 0xca3, 0x2, 0xfffa, 0x8, 0x81, 0x40, 0xace, {r14, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x40}}, 0x5, 0x1, 0x0, 0xfffffc00, 0xfe9}}, &(0x7f0000000240)=0xb0) 1.130577527s ago: executing program 2 (id=1061): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000042000b0026bd70000040000003", @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x24000091}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000490001002bbd70000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r7, 0x0, 0xce, &(0x7f0000000000), &(0x7f0000000200)=0xfffffffffffffea4) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x4000) socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00'}) 951.408403ms ago: executing program 1 (id=1062): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0xa00}, 0x1c) shutdown(r0, 0x1) 721.86163ms ago: executing program 3 (id=1063): bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x9c, 0x86, 0x6, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x87b1, 0x7, 0x7, 0x4}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="060000000010"}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/118, 0x76}, 0x6}], 0x1, 0x2043, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket(0x200000100000011, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x7, 0x6, @multicast}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4e21, 0x0, 0x4e20, 0x1, 0x56f3ed7e68b9d2ff, 0x20, 0x80, 0x2b, r8, r9}, {0x1c6, 0x8000000008000000, 0x6, 0x19d3, 0x8000000000000000, 0x9, 0x80, 0xffffffffffffffc0}, {0x7, 0x4, 0x488c9d6b}, 0x10000, 0x0, 0x1, 0x1, 0x2, 0x3}, {{@in=@local, 0x4d5, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3502, 0x4, 0x0, 0x5, 0x1, 0x2, 0x8}}, 0xe8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) 603.263716ms ago: executing program 1 (id=1064): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x62, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x50, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x50}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x20000) 600.708408ms ago: executing program 0 (id=1065): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x23, 0x0, &(0x7f0000000000)="b9ff03318944268cb89914f00800d33440bad025cf373ac94a934c37bffd501784f13c", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000002540)=""/4089, 0xff9}, {&(0x7f0000000140)=""/4084, 0xff4}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/140, 0x8c}, {&(0x7f0000000080)=""/53, 0x35}], 0x5}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) socket(0x10, 0x80002, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x0, 0x20000000}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) 0s ago: executing program 2 (id=1066): r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff03c}, {0x6, 0x0, 0x4, 0xfffffff9}]}, 0x10) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00'}) kernel console output (not intermixed with test programs): ac addresses unique to avoid problems! [ 88.022261][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.040297][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.053261][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.069664][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.080664][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.098111][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.109297][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.120514][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.141095][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.150802][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.150902][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.168568][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.169545][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.177677][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.196663][ T5921] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 88.211999][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.216557][ T5921] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 88.221744][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.238451][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.251315][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.271808][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.282569][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.293592][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.307014][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 88.316889][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.327403][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6'. [ 88.337190][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.349508][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.359802][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.373935][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.385732][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.431852][ T5921] syzkaller1: entered promiscuous mode [ 88.438113][ T5921] syzkaller1: entered allmulticast mode [ 88.473607][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.482624][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.493651][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.504116][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.714883][ T5929] netlink: 'syz.3.4': attribute type 39 has an invalid length. [ 88.753556][ T5929] veth0_macvtap: left promiscuous mode [ 88.920798][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.951064][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.994758][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.022891][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.137519][ T5844] Bluetooth: hci0: command tx timeout [ 89.145409][ T5844] Bluetooth: hci4: command tx timeout [ 89.151337][ T5848] Bluetooth: hci2: command tx timeout [ 89.151488][ T5836] Bluetooth: hci3: command tx timeout [ 89.158423][ T5848] Bluetooth: hci1: command tx timeout [ 89.194178][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.235693][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.281003][ T5936] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 89.323914][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.385237][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.439644][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.485114][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.603559][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.640452][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.708187][ T5940] sctp: [Deprecated]: syz.3.11 (pid 5940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.708187][ T5940] Use struct sctp_sack_info instead [ 89.994276][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 90.026103][ T5954] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13'. [ 90.485246][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 90.580453][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.602925][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.639968][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.654819][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 90.668287][ T5979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20'. [ 90.675418][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.423672][ T6001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23'. [ 91.784504][ T2149] cfg80211: failed to load regulatory.db [ 92.542017][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 92.615499][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.632523][ T12] bond0 (unregistering): Released all slaves [ 93.673135][ T6064] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 93.711785][ T6064] netlink: 208 bytes leftover after parsing attributes in process `syz.0.31'. [ 93.869564][ T6062] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 93.916289][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 94.232499][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.337126][ T6089] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 94.389315][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.41'. [ 94.543683][ T6094] netlink: 36 bytes leftover after parsing attributes in process `syz.3.42'. [ 95.391982][ T6123] netlink: 36 bytes leftover after parsing attributes in process `syz.1.48'. [ 95.501048][ T6126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.58'. [ 95.716807][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 95.851481][ T1162] bond0 (unregistering): Released all slaves [ 96.153677][ T6116] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 96.420068][ T6105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.038389][ T6157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.52'. [ 97.380986][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.54'. [ 97.699071][ T6182] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 97.715239][ T6182] netlink: 208 bytes leftover after parsing attributes in process `syz.1.55'. [ 98.365523][ T6201] netlink: 'syz.4.60': attribute type 10 has an invalid length. [ 98.421482][ T6201] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.114621][ T6223] __nla_validate_parse: 2 callbacks suppressed [ 99.114641][ T6223] netlink: 36 bytes leftover after parsing attributes in process `syz.1.65'. [ 99.395542][ T6232] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 99.464524][ T6232] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.519646][ T6239] Zero length message leads to an empty skb [ 99.761841][ T6245] Bluetooth: MGMT ver 1.23 [ 99.787028][ T6246] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 99.966004][ T6251] netlink: 244 bytes leftover after parsing attributes in process `syz.3.72'. [ 100.327588][ T6264] netlink: 'syz.2.73': attribute type 1 has an invalid length. [ 100.346127][ T6266] netlink: 'syz.4.75': attribute type 39 has an invalid length. [ 100.359987][ T6264] netlink: 208 bytes leftover after parsing attributes in process `syz.2.73'. [ 100.403722][ T6266] veth0_macvtap: left promiscuous mode [ 100.816372][ T6274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.78'. [ 101.252776][ T6292] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 101.333910][ T6291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 101.356477][ T6296] netlink: 36 bytes leftover after parsing attributes in process `syz.1.79'. [ 101.371589][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.80'. [ 101.374145][ T6291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 101.489487][ T6291] dummy0: entered promiscuous mode [ 101.529586][ T6291] dummy0: left promiscuous mode [ 102.752605][ T6336] netlink: 244 bytes leftover after parsing attributes in process `syz.3.88'. [ 102.847255][ T6340] netlink: 36 bytes leftover after parsing attributes in process `syz.4.90'. [ 103.296943][ T6357] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 104.055523][ T6382] netlink: 'syz.2.98': attribute type 10 has an invalid length. [ 104.256926][ T6390] __nla_validate_parse: 2 callbacks suppressed [ 104.256945][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 104.331000][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'. [ 104.583064][ T6407] netlink: 'syz.3.102': attribute type 39 has an invalid length. [ 105.500448][ T6425] netlink: 244 bytes leftover after parsing attributes in process `syz.2.106'. [ 105.733366][ T6436] netlink: 'syz.0.111': attribute type 10 has an invalid length. [ 105.783488][ T6436] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.988769][ T6444] netlink: 40 bytes leftover after parsing attributes in process `syz.4.113'. [ 106.020405][ T6441] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 106.044099][ T6441] netlink: 208 bytes leftover after parsing attributes in process `syz.3.109'. [ 106.093532][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 106.104031][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.114'. [ 106.135364][ T6414] warning: `syz.1.103' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.540422][ T6460] netlink: 244 bytes leftover after parsing attributes in process `syz.0.116'. [ 106.763712][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 106.783680][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 106.938962][ T6468] team0: entered promiscuous mode [ 106.999659][ T6468] team_slave_0: entered promiscuous mode [ 107.023831][ T6468] team_slave_1: entered promiscuous mode [ 107.108900][ T6468] bridge0: entered promiscuous mode [ 107.231417][ T6477] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 107.327102][ T6477] syzkaller1: entered promiscuous mode [ 107.340469][ T6477] syzkaller1: entered allmulticast mode [ 107.979439][ T6499] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 109.983023][ T6545] __nla_validate_parse: 7 callbacks suppressed [ 109.983043][ T6545] netlink: 244 bytes leftover after parsing attributes in process `syz.2.142'. [ 111.019025][ T6555] netlink: 'syz.4.145': attribute type 10 has an invalid length. [ 111.576130][ T6583] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 111.595325][ T6583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.147'. [ 111.795495][ T6591] bridge0: entered promiscuous mode [ 111.812059][ T6591] macvlan2: entered promiscuous mode [ 111.844815][ T6591] bridge0: port 3(macvlan2) entered blocking state [ 111.869985][ T6591] bridge0: port 3(macvlan2) entered disabled state [ 111.893130][ T6599] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 111.897684][ T6591] macvlan2: entered allmulticast mode [ 111.917164][ T6591] bridge0: entered allmulticast mode [ 111.933368][ T6600] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 111.942235][ T6600] netlink: 208 bytes leftover after parsing attributes in process `syz.1.157'. [ 111.964463][ T6591] macvlan2: left allmulticast mode [ 111.971171][ T6591] bridge0: left allmulticast mode [ 111.986664][ T6591] bridge0: left promiscuous mode [ 112.948780][ T6627] netlink: 'syz.0.168': attribute type 1 has an invalid length. [ 112.980236][ T6627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'. [ 113.130766][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 113.172687][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.171'. [ 114.009418][ T6662] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 114.023115][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.182'. [ 114.092723][ T6664] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 114.100625][ T6664] netlink: 208 bytes leftover after parsing attributes in process `syz.1.179'. [ 114.262068][ T6674] netlink: 'syz.3.184': attribute type 39 has an invalid length. [ 114.333073][ T6678] netlink: 36 bytes leftover after parsing attributes in process `syz.0.187'. [ 115.730148][ T6719] netlink: 68 bytes leftover after parsing attributes in process `syz.1.202'. [ 115.812477][ T6725] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 115.849153][ T6725] netlink: 208 bytes leftover after parsing attributes in process `syz.4.201'. [ 117.086099][ T6774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'. [ 117.086478][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 117.130791][ T6775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.158264][ T6775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.206416][ T6775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.214210][ T6775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.348966][ T6781] netlink: 68 bytes leftover after parsing attributes in process `syz.4.216'. [ 117.389920][ T6784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 118.242004][ T6808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'. [ 118.302824][ T6808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'. [ 118.812782][ T6819] bridge0: entered promiscuous mode [ 118.852674][ T6819] macvlan2: entered promiscuous mode [ 118.881826][ T6819] bridge0: port 3(macvlan2) entered blocking state [ 118.913258][ T6819] bridge0: port 3(macvlan2) entered disabled state [ 118.930435][ T6819] macvlan2: entered allmulticast mode [ 118.957490][ T6819] bridge0: entered allmulticast mode [ 118.962134][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 119.003355][ T6819] macvlan2: left allmulticast mode [ 119.017983][ T6819] bridge0: left allmulticast mode [ 119.034401][ T6819] bridge0: left promiscuous mode [ 119.226408][ T6827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.228'. [ 119.433598][ T6838] netlink: 'syz.3.231': attribute type 10 has an invalid length. [ 120.741320][ T6869] netlink: 'syz.2.241': attribute type 1 has an invalid length. [ 120.834304][ T6869] bond2: entered promiscuous mode [ 120.840670][ T6869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.868479][ T6869] __nla_validate_parse: 3 callbacks suppressed [ 120.868499][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.241'. [ 121.305470][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 121.317003][ T6887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.247'. [ 121.337218][ T6885] netlink: 40 bytes leftover after parsing attributes in process `syz.4.246'. [ 121.419341][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.697868][ T6906] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 121.906124][ T6906] bond1: entered promiscuous mode [ 121.959206][ T6906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.120714][ T6908] bond1: (slave bridge1): making interface the new active one [ 122.128525][ T6908] bridge1: entered promiscuous mode [ 122.135752][ T6908] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 122.629280][ T36] bond0 (unregistering): Released all slaves [ 122.688010][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 122.689772][ T6918] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 122.725155][ T6922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 122.866107][ T6927] netlink: 68 bytes leftover after parsing attributes in process `syz.4.256'. [ 122.931584][ T6920] syzkaller1: entered promiscuous mode [ 122.962867][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 122.983993][ T6920] syzkaller1: entered allmulticast mode [ 123.164437][ T6912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.546174][ T6947] netlink: 36 bytes leftover after parsing attributes in process `syz.2.261'. [ 124.417579][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.4.265'. [ 124.447435][ T6960] bridge0: entered promiscuous mode [ 124.464991][ T6960] macvlan2: entered promiscuous mode [ 124.472617][ T6967] netlink: 'syz.1.262': attribute type 1 has an invalid length. [ 124.489080][ T6960] bridge0: port 3(macvlan2) entered blocking state [ 124.520103][ T6960] bridge0: port 3(macvlan2) entered disabled state [ 124.537612][ T6960] macvlan2: entered allmulticast mode [ 124.545493][ T6960] bridge0: entered allmulticast mode [ 124.560749][ T6960] macvlan2: left allmulticast mode [ 124.593397][ T6960] bridge0: left allmulticast mode [ 124.621625][ T6960] bridge0: left promiscuous mode [ 124.831347][ T6972] syzkaller1: entered promiscuous mode [ 124.843124][ T6972] syzkaller1: entered allmulticast mode [ 125.428230][ T6984] netlink: 'syz.2.268': attribute type 1 has an invalid length. [ 125.593712][ T6984] bond3: entered promiscuous mode [ 125.643632][ T6984] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.039981][ T7001] __nla_validate_parse: 6 callbacks suppressed [ 126.040000][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 126.096415][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 126.941322][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.275'. [ 126.986546][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.275'. [ 127.073992][ T7008] team0: entered promiscuous mode [ 127.131491][ T7008] team_slave_0: entered promiscuous mode [ 127.177394][ T7008] team_slave_1: entered promiscuous mode [ 127.211051][ T7008] bridge0: entered promiscuous mode [ 127.277339][ T7008] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 127.327971][ T7008] Cannot create hsr debugfs directory [ 127.386543][ T7027] netlink: 'syz.4.280': attribute type 1 has an invalid length. [ 127.394249][ T7027] netlink: 208 bytes leftover after parsing attributes in process `syz.4.280'. [ 127.697034][ T7038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.289'. [ 127.733774][ T7039] syzkaller1: entered promiscuous mode [ 127.748958][ T7039] syzkaller1: entered allmulticast mode [ 127.908248][ T7042] netlink: 36 bytes leftover after parsing attributes in process `syz.2.291'. [ 128.192141][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.294'. [ 128.417891][ T7060] netlink: 'syz.0.295': attribute type 10 has an invalid length. [ 128.521800][ T5848] Bluetooth: hci4: link tx timeout [ 128.528058][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.918829][ T7073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.312'. [ 129.304932][ T7084] syzkaller1: entered promiscuous mode [ 129.321409][ T7084] syzkaller1: entered allmulticast mode [ 129.329538][ T7086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.314'. [ 129.849331][ T7093] netlink: 'syz.0.305': attribute type 39 has an invalid length. [ 129.897227][ T7093] veth0_macvtap: left promiscuous mode [ 130.185424][ T7101] netlink: 'syz.3.307': attribute type 1 has an invalid length. [ 130.515653][ T7101] bond2: entered promiscuous mode [ 130.521681][ T7101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.575209][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 130.645785][ T7107] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 131.229869][ T7120] __nla_validate_parse: 3 callbacks suppressed [ 131.229891][ T7120] netlink: 36 bytes leftover after parsing attributes in process `syz.3.318'. [ 131.494273][ T7134] netlink: 244 bytes leftover after parsing attributes in process `syz.2.320'. [ 131.517045][ T7141] netlink: 'syz.1.322': attribute type 39 has an invalid length. [ 131.565344][ T7142] netlink: 40 bytes leftover after parsing attributes in process `syz.4.323'. [ 131.589405][ T7141] veth0_macvtap: left promiscuous mode [ 132.462718][ T7153] netlink: 68 bytes leftover after parsing attributes in process `syz.2.324'. [ 132.597728][ T7157] netlink: 36 bytes leftover after parsing attributes in process `syz.1.327'. [ 132.748963][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.832645][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.328'. [ 132.841953][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.328'. [ 132.901431][ T7167] team0: entered promiscuous mode [ 132.927320][ T7167] team_slave_0: entered promiscuous mode [ 132.937700][ T7167] team_slave_1: entered promiscuous mode [ 132.988748][ T7167] bridge0: entered promiscuous mode [ 133.004391][ T7161] netlink: 36 bytes leftover after parsing attributes in process `syz.4.329'. [ 133.048254][ T7167] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 133.093997][ T7167] Cannot create hsr debugfs directory [ 133.557417][ T7175] netlink: 'syz.0.330': attribute type 39 has an invalid length. [ 134.230979][ T7185] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 134.285373][ T7185] netlink: 208 bytes leftover after parsing attributes in process `syz.3.333'. [ 134.625438][ T7192] netlink: 'syz.1.335': attribute type 39 has an invalid length. [ 134.863556][ T7198] openvswitch: netlink: Message has 4 unknown bytes. [ 134.870824][ T7198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.255691][ T7207] netlink: 244 bytes leftover after parsing attributes in process `syz.3.341'. [ 135.746019][ T7217] gretap0: entered promiscuous mode [ 136.132822][ T7231] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 136.235717][ T7233] Cannot find add_set index 0 as target [ 136.263641][ T7235] xt_socket: unknown flags 0xfc [ 136.353377][ T7235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.490737][ T7235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.526091][ T7243] netlink: 'syz.0.355': attribute type 39 has an invalid length. [ 136.688684][ T7235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.928126][ T7235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.017312][ T7248] __nla_validate_parse: 3 callbacks suppressed [ 137.017333][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.357'. [ 137.241076][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.360'. [ 137.272818][ T7235] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.319080][ T7235] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.367518][ T7235] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.425900][ T7235] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.557013][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.359'. [ 137.615482][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.359'. [ 137.661996][ T7272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.366'. [ 138.423757][ T7285] netlink: 244 bytes leftover after parsing attributes in process `syz.3.368'. [ 138.544516][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.2.369'. [ 138.904204][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.371'. [ 139.446764][ T7301] netlink: 'syz.1.372': attribute type 39 has an invalid length. [ 139.916497][ T7311] netlink: 'syz.0.378': attribute type 1 has an invalid length. [ 140.001280][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.378'. [ 140.360639][ T7325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 141.044692][ T7353] netlink: 'syz.0.394': attribute type 39 has an invalid length. [ 141.561536][ T7362] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 141.566497][ T7364] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.242509][ T7377] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.304814][ T7377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.314989][ T7377] bond0: (slave bond1): Enslaving as an active interface with an up link [ 142.544290][ T7389] __nla_validate_parse: 5 callbacks suppressed [ 142.544309][ T7389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.407'. [ 142.561429][ T7388] netlink: 40 bytes leftover after parsing attributes in process `syz.3.410'. [ 142.624352][ T7391] netlink: 36 bytes leftover after parsing attributes in process `syz.4.411'. [ 142.812100][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 142.866167][ T7401] netlink: 'syz.3.412': attribute type 39 has an invalid length. [ 142.884706][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 142.928421][ T7403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.413'. [ 143.350514][ T7417] syzkaller1: entered promiscuous mode [ 143.374515][ T7417] syzkaller1: entered allmulticast mode [ 143.416447][ T7417] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 143.427719][ T7417] netlink: 224 bytes leftover after parsing attributes in process `syz.0.416'. [ 143.442748][ T7416] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 143.464850][ T7416] netlink: 224 bytes leftover after parsing attributes in process `syz.0.416'. [ 144.010401][ T7431] netlink: 'syz.4.417': attribute type 1 has an invalid length. [ 144.040443][ T7431] netlink: 208 bytes leftover after parsing attributes in process `syz.4.417'. [ 144.119130][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 144.158127][ T7438] bond0: entered promiscuous mode [ 144.165356][ T7438] bond_slave_0: entered promiscuous mode [ 144.192190][ T7438] bond_slave_1: entered promiscuous mode [ 144.215709][ T7438] dummy0: entered promiscuous mode [ 144.235178][ T7438] bond0: left promiscuous mode [ 144.240109][ T7438] bond_slave_0: left promiscuous mode [ 144.251037][ T7438] bond_slave_1: left promiscuous mode [ 144.259642][ T7438] dummy0: left promiscuous mode [ 144.579380][ T7419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.951633][ T7474] netlink: 'syz.2.428': attribute type 39 has an invalid length. [ 145.014197][ T7474] veth0_macvtap: left promiscuous mode [ 145.693007][ T7441] bond0 (unregistering): Released all slaves [ 146.214138][ T7508] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 146.407887][ T7512] ip6gretap0: entered promiscuous mode [ 146.440761][ T7512] ip6gretap0: left promiscuous mode [ 146.524162][ T7520] FAULT_INJECTION: forcing a failure. [ 146.524162][ T7520] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 146.540319][ T7520] CPU: 1 UID: 0 PID: 7520 Comm: syz.0.443 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 146.540348][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 146.540364][ T7520] Call Trace: [ 146.540375][ T7520] [ 146.540384][ T7520] dump_stack_lvl+0x189/0x250 [ 146.540425][ T7520] ? __lock_acquire+0xaac/0xd20 [ 146.540455][ T7520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.540483][ T7520] ? __pfx__printk+0x10/0x10 [ 146.540501][ T7520] ? __might_fault+0xb0/0x130 [ 146.540537][ T7520] should_fail_ex+0x414/0x560 [ 146.540572][ T7520] _copy_from_user+0x2d/0xb0 [ 146.540599][ T7520] ___sys_sendmsg+0x158/0x2a0 [ 146.540634][ T7520] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.540696][ T7520] ? __fget_files+0x2a/0x420 [ 146.540720][ T7520] ? __fget_files+0x3a0/0x420 [ 146.540755][ T7520] __sys_sendmmsg+0x227/0x430 [ 146.540785][ T7520] ? __pfx___sys_sendmmsg+0x10/0x10 [ 146.540820][ T7520] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.540868][ T7520] ? ksys_write+0x1f0/0x250 [ 146.540888][ T7520] ? rcu_is_watching+0x15/0xb0 [ 146.540927][ T7520] __x64_sys_sendmmsg+0xa0/0xc0 [ 146.540955][ T7520] do_syscall_64+0xf6/0x210 [ 146.540985][ T7520] ? clear_bhb_loop+0x45/0xa0 [ 146.541009][ T7520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.541026][ T7520] RIP: 0033:0x7fdab038e969 [ 146.541051][ T7520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.541066][ T7520] RSP: 002b:00007fdab119a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 146.541093][ T7520] RAX: ffffffffffffffda RBX: 00007fdab05b5fa0 RCX: 00007fdab038e969 [ 146.541107][ T7520] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 146.541118][ T7520] RBP: 00007fdab119a090 R08: 0000000000000000 R09: 0000000000000000 [ 146.541129][ T7520] R10: 0000000024004044 R11: 0000000000000246 R12: 0000000000000001 [ 146.541140][ T7520] R13: 0000000000000000 R14: 00007fdab05b5fa0 R15: 00007fffac7868d8 [ 146.541168][ T7520] [ 146.547155][ T7521] FAULT_INJECTION: forcing a failure. [ 146.547155][ T7521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.770185][ T7521] CPU: 0 UID: 0 PID: 7521 Comm: syz.4.444 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 146.770212][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 146.770224][ T7521] Call Trace: [ 146.770232][ T7521] [ 146.770241][ T7521] dump_stack_lvl+0x189/0x250 [ 146.770272][ T7521] ? __lock_acquire+0xaac/0xd20 [ 146.770302][ T7521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.770330][ T7521] ? __pfx__printk+0x10/0x10 [ 146.770349][ T7521] ? __might_fault+0xb0/0x130 [ 146.770384][ T7521] should_fail_ex+0x414/0x560 [ 146.770420][ T7521] _copy_from_user+0x2d/0xb0 [ 146.770446][ T7521] ___sys_sendmsg+0x158/0x2a0 [ 146.770475][ T7521] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.770534][ T7521] ? __fget_files+0x2a/0x420 [ 146.770559][ T7521] ? __fget_files+0x3a0/0x420 [ 146.770593][ T7521] __sys_sendmmsg+0x227/0x430 [ 146.770623][ T7521] ? __pfx___sys_sendmmsg+0x10/0x10 [ 146.770655][ T7521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.770699][ T7521] ? ksys_write+0x1f0/0x250 [ 146.770718][ T7521] ? rcu_is_watching+0x15/0xb0 [ 146.770772][ T7521] __x64_sys_sendmmsg+0xa0/0xc0 [ 146.770794][ T7521] do_syscall_64+0xf6/0x210 [ 146.770819][ T7521] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 146.770836][ T7521] ? clear_bhb_loop+0x45/0xa0 [ 146.770863][ T7521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.770878][ T7521] RIP: 0033:0x7ff05d38e969 [ 146.770893][ T7521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.770906][ T7521] RSP: 002b:00007ff05e218038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 146.770923][ T7521] RAX: ffffffffffffffda RBX: 00007ff05d5b5fa0 RCX: 00007ff05d38e969 [ 146.770935][ T7521] RDX: 0000000000000051 RSI: 0000200000000100 RDI: 0000000000000003 [ 146.770945][ T7521] RBP: 00007ff05e218090 R08: 0000000000000000 R09: 0000000000000000 [ 146.770954][ T7521] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000001 [ 146.770964][ T7521] R13: 0000000000000000 R14: 00007ff05d5b5fa0 R15: 00007ffcb6526218 [ 146.770991][ T7521] [ 146.986621][ T7524] netlink: 'syz.0.445': attribute type 39 has an invalid length. [ 147.149715][ T7517] block nbd0: server does not support multiple connections per device. [ 147.188680][ T7517] block nbd0: shutting down sockets [ 147.514622][ T7531] team0: entered promiscuous mode [ 147.523132][ T7531] team_slave_0: entered promiscuous mode [ 147.529717][ T7531] team_slave_1: entered promiscuous mode [ 147.538203][ T7531] bridge0: entered promiscuous mode [ 147.544381][ T7531] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 147.570528][ T7531] Cannot create hsr debugfs directory [ 147.571002][ T7539] openvswitch: netlink: Message has 24 unknown bytes. [ 147.618745][ T7539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.641015][ T7535] __nla_validate_parse: 9 callbacks suppressed [ 147.641034][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 147.658684][ T7544] FAULT_INJECTION: forcing a failure. [ 147.658684][ T7544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.705527][ T7544] CPU: 1 UID: 0 PID: 7544 Comm: syz.0.452 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 147.705558][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 147.705569][ T7544] Call Trace: [ 147.705577][ T7544] [ 147.705586][ T7544] dump_stack_lvl+0x189/0x250 [ 147.705618][ T7544] ? __lock_acquire+0xaac/0xd20 [ 147.705648][ T7544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.705677][ T7544] ? __pfx__printk+0x10/0x10 [ 147.705697][ T7544] ? __might_fault+0xb0/0x130 [ 147.705735][ T7544] should_fail_ex+0x414/0x560 [ 147.705772][ T7544] _copy_from_user+0x2d/0xb0 [ 147.705805][ T7544] ___sys_sendmsg+0x158/0x2a0 [ 147.705834][ T7544] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.705898][ T7544] ? __fget_files+0x2a/0x420 [ 147.705923][ T7544] ? __fget_files+0x3a0/0x420 [ 147.705959][ T7544] __x64_sys_sendmsg+0x19b/0x260 [ 147.705988][ T7544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.706032][ T7544] ? do_syscall_64+0xba/0x210 [ 147.706066][ T7544] do_syscall_64+0xf6/0x210 [ 147.706097][ T7544] ? clear_bhb_loop+0x45/0xa0 [ 147.706121][ T7544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.706139][ T7544] RIP: 0033:0x7fdab038e969 [ 147.706157][ T7544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.706173][ T7544] RSP: 002b:00007fdab119a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.706193][ T7544] RAX: ffffffffffffffda RBX: 00007fdab05b5fa0 RCX: 00007fdab038e969 [ 147.706207][ T7544] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 147.706219][ T7544] RBP: 00007fdab119a090 R08: 0000000000000000 R09: 0000000000000000 [ 147.706231][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.706242][ T7544] R13: 0000000000000000 R14: 00007fdab05b5fa0 R15: 00007fffac7868d8 [ 147.706272][ T7544] [ 147.906056][ T7547] netlink: 'syz.0.452': attribute type 10 has an invalid length. [ 147.914284][ T7547] netlink: 40 bytes leftover after parsing attributes in process `syz.0.452'. [ 147.925358][ T7547] batadv0: entered promiscuous mode [ 148.004079][ T7547] batadv0: entered allmulticast mode [ 148.056427][ T7547] bridge0: port 3(batadv0) entered blocking state [ 148.125441][ T7547] bridge0: port 3(batadv0) entered disabled state [ 148.176938][ T7547] bridge0: port 3(batadv0) entered blocking state [ 148.183684][ T7547] bridge0: port 3(batadv0) entered forwarding state [ 148.239702][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 148.315363][ T7550] netlink: 'syz.4.454': attribute type 10 has an invalid length. [ 148.323258][ T7550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.454'. [ 148.398667][ T7554] bridge0: entered promiscuous mode [ 148.445428][ T7554] macvlan2: entered promiscuous mode [ 148.452851][ T7554] bridge0: port 3(macvlan2) entered blocking state [ 148.464106][ T7554] bridge0: port 3(macvlan2) entered disabled state [ 148.505562][ T7554] macvlan2: entered allmulticast mode [ 148.525225][ T7554] bridge0: entered allmulticast mode [ 148.528189][ T7439] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 148.540552][ T7439] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 148.557299][ T7554] macvlan2: left allmulticast mode [ 148.583843][ T7554] bridge0: left allmulticast mode [ 148.607000][ T7554] bridge0: left promiscuous mode [ 148.640728][ T7567] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 148.649242][ T7567] netlink: 208 bytes leftover after parsing attributes in process `syz.0.457'. [ 148.723304][ T7550] batadv0: entered promiscuous mode [ 148.772124][ T7550] batadv0: entered allmulticast mode [ 148.794554][ T7550] bridge0: port 3(batadv0) entered blocking state [ 148.824797][ T7550] bridge0: port 3(batadv0) entered disabled state [ 148.861141][ T7550] bridge0: port 3(batadv0) entered blocking state [ 148.867849][ T7550] bridge0: port 3(batadv0) entered forwarding state [ 149.035561][ T3004] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 149.044894][ T3004] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 149.239840][ T7577] netlink: 'syz.2.462': attribute type 39 has an invalid length. [ 149.260364][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 149.505992][ T7561] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 149.508843][ T7578] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 149.568061][ T7586] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.464'. [ 150.173356][ T7609] FAULT_INJECTION: forcing a failure. [ 150.173356][ T7609] name failslab, interval 1, probability 0, space 0, times 0 [ 150.227408][ T7609] CPU: 1 UID: 0 PID: 7609 Comm: syz.2.469 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 150.227437][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 150.227448][ T7609] Call Trace: [ 150.227456][ T7609] [ 150.227465][ T7609] dump_stack_lvl+0x189/0x250 [ 150.227503][ T7609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.227532][ T7609] ? __pfx__printk+0x10/0x10 [ 150.227559][ T7609] ? __pfx___might_resched+0x10/0x10 [ 150.227576][ T7609] ? fs_reclaim_acquire+0x7d/0x100 [ 150.227611][ T7609] should_fail_ex+0x414/0x560 [ 150.227656][ T7609] should_failslab+0xa8/0x100 [ 150.227683][ T7609] __kmalloc_noprof+0xcb/0x4f0 [ 150.227706][ T7609] ? kfree+0x4d/0x440 [ 150.227725][ T7609] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 150.227754][ T7609] tomoyo_realpath_from_path+0xe3/0x5d0 [ 150.227780][ T7609] ? tomoyo_domain+0xda/0x130 [ 150.227814][ T7609] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 150.227845][ T7609] tomoyo_path_number_perm+0x1e8/0x5a0 [ 150.227879][ T7609] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 150.227930][ T7609] ? __lock_acquire+0xaac/0xd20 [ 150.227978][ T7609] ? __fget_files+0x2a/0x420 [ 150.228008][ T7609] ? __fget_files+0x3a0/0x420 [ 150.228031][ T7609] ? __fget_files+0x2a/0x420 [ 150.228060][ T7609] security_file_ioctl+0xcb/0x2d0 [ 150.228092][ T7609] __se_sys_ioctl+0x47/0x170 [ 150.228115][ T7609] do_syscall_64+0xf6/0x210 [ 150.228147][ T7609] ? clear_bhb_loop+0x45/0xa0 [ 150.228172][ T7609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.228191][ T7609] RIP: 0033:0x7f1fb0b8e969 [ 150.228209][ T7609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.228224][ T7609] RSP: 002b:00007f1fb1a21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.228245][ T7609] RAX: ffffffffffffffda RBX: 00007f1fb0db5fa0 RCX: 00007f1fb0b8e969 [ 150.228259][ T7609] RDX: 0000200000000440 RSI: 00000000800442d2 RDI: 0000000000000004 [ 150.228272][ T7609] RBP: 00007f1fb1a21090 R08: 0000000000000000 R09: 0000000000000000 [ 150.228284][ T7609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.228295][ T7609] R13: 0000000000000000 R14: 00007f1fb0db5fa0 R15: 00007ffc6c22e998 [ 150.228327][ T7609] [ 150.228335][ T7609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.543759][ T7614] netlink: 60 bytes leftover after parsing attributes in process `syz.4.471'. [ 150.553610][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 150.563052][ T7614] netlink: 60 bytes leftover after parsing attributes in process `syz.4.471'. [ 150.798015][ T7620] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$Uvyآ' [ 150.839489][ T7620] CPU: 1 UID: 0 PID: 7620 Comm: syz.2.475 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 150.839521][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 150.839535][ T7620] Call Trace: [ 150.839543][ T7620] [ 150.839551][ T7620] dump_stack_lvl+0x189/0x250 [ 150.839595][ T7620] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.839626][ T7620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.839656][ T7620] ? __pfx__printk+0x10/0x10 [ 150.839681][ T7620] ? kernfs_path_from_node+0x2b/0x260 [ 150.839713][ T7620] ? kernfs_path_from_node+0x216/0x260 [ 150.839745][ T7620] sysfs_warn_dup+0x8e/0xa0 [ 150.839771][ T7620] sysfs_do_create_link_sd+0xc0/0x110 [ 150.839801][ T7620] device_add_class_symlinks+0x1cf/0x240 [ 150.839830][ T7620] device_add+0x475/0xb50 [ 150.839858][ T7620] wiphy_register+0x199a/0x26b0 [ 150.839899][ T7620] ? __pfx_wiphy_register+0x10/0x10 [ 150.839918][ T7620] ? minstrel_ht_alloc+0x893/0x990 [ 150.839951][ T7620] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 150.839982][ T7620] ieee80211_register_hw+0x334b/0x4060 [ 150.840026][ T7620] ? ieee80211_register_hw+0x14d1/0x4060 [ 150.840065][ T7620] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 150.840096][ T7620] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 150.840132][ T7620] ? __hrtimer_setup+0x187/0x210 [ 150.840160][ T7620] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 150.840185][ T7620] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 150.840251][ T7620] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 150.840281][ T7620] ? trace_kmalloc+0x1f/0xd0 [ 150.840303][ T7620] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 150.840328][ T7620] ? kstrndup+0xbf/0x160 [ 150.840359][ T7620] hwsim_new_radio_nl+0xea4/0x1b10 [ 150.840394][ T7620] ? __pfx___nla_validate_parse+0x10/0x10 [ 150.840435][ T7620] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 150.840480][ T7620] ? __nla_parse+0x40/0x60 [ 150.840508][ T7620] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 150.840548][ T7620] genl_family_rcv_msg_doit+0x212/0x300 [ 150.840595][ T7620] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 150.840640][ T7620] ? bpf_lsm_capable+0x9/0x20 [ 150.840667][ T7620] ? security_capable+0x7e/0x2e0 [ 150.840707][ T7620] genl_rcv_msg+0x60e/0x790 [ 150.840744][ T7620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.840772][ T7620] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 150.840820][ T7620] netlink_rcv_skb+0x219/0x490 [ 150.840844][ T7620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.840876][ T7620] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.840938][ T7620] ? down_read+0x1ad/0x2e0 [ 150.840960][ T7620] genl_rcv+0x28/0x40 [ 150.840991][ T7620] netlink_unicast+0x758/0x8d0 [ 150.841024][ T7620] netlink_sendmsg+0x805/0xb30 [ 150.841066][ T7620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.841095][ T7620] ? aa_sock_msg_perm+0x94/0x160 [ 150.841119][ T7620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.841141][ T7620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.841166][ T7620] __sock_sendmsg+0x219/0x270 [ 150.841202][ T7620] ____sys_sendmsg+0x505/0x830 [ 150.841236][ T7620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.841273][ T7620] ? import_iovec+0x74/0xa0 [ 150.841305][ T7620] ___sys_sendmsg+0x21f/0x2a0 [ 150.841334][ T7620] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.841404][ T7620] ? __fget_files+0x2a/0x420 [ 150.841429][ T7620] ? __fget_files+0x3a0/0x420 [ 150.841468][ T7620] __x64_sys_sendmsg+0x19b/0x260 [ 150.841497][ T7620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.841544][ T7620] ? do_syscall_64+0xba/0x210 [ 150.841579][ T7620] do_syscall_64+0xf6/0x210 [ 150.841617][ T7620] ? clear_bhb_loop+0x45/0xa0 [ 150.841643][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.841663][ T7620] RIP: 0033:0x7f1fb0b8e969 [ 150.841681][ T7620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.841698][ T7620] RSP: 002b:00007f1fb1a21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.841721][ T7620] RAX: ffffffffffffffda RBX: 00007f1fb0db5fa0 RCX: 00007f1fb0b8e969 [ 150.841735][ T7620] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 150.841747][ T7620] RBP: 00007f1fb0c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 150.841760][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.841771][ T7620] R13: 0000000000000000 R14: 00007f1fb0db5fa0 R15: 00007ffc6c22e998 [ 150.841804][ T7620] [ 151.422550][ T7637] netlink: 'syz.2.479': attribute type 39 has an invalid length. [ 152.346578][ T7654] netlink: 'syz.3.485': attribute type 10 has an invalid length. [ 152.467917][ T7663] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.648619][ T7670] tipc: Started in network mode [ 152.670281][ T7670] tipc: Node identity ac1414aa, cluster identity 4711 [ 152.694744][ T7670] tipc: Enabled bearer , priority 10 [ 152.750235][ T7679] __nla_validate_parse: 3 callbacks suppressed [ 152.750253][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.486'. [ 152.778914][ T7680] netlink: 64 bytes leftover after parsing attributes in process `syz.3.494'. [ 152.819739][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.486'. [ 152.839270][ T7684] netlink: 36 bytes leftover after parsing attributes in process `syz.2.496'. [ 152.927110][ T7679] team0: entered promiscuous mode [ 152.989309][ T7679] team_slave_0: entered promiscuous mode [ 153.028444][ T7694] netlink: 'syz.1.497': attribute type 39 has an invalid length. [ 153.054395][ T7679] team_slave_1: entered promiscuous mode [ 153.107360][ T7679] bridge0: entered promiscuous mode [ 153.179042][ T7679] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 153.256935][ T7679] Cannot create hsr debugfs directory [ 153.806959][ T9] tipc: Node number set to 2886997162 [ 153.943830][ T7704] vlan2: entered promiscuous mode [ 153.969407][ T7704] bond0: entered promiscuous mode [ 153.974497][ T7704] bond_slave_0: entered promiscuous mode [ 154.005931][ T7704] bond_slave_1: entered promiscuous mode [ 154.030678][ T7704] dummy0: entered promiscuous mode [ 154.046629][ T7704] vlan2: entered allmulticast mode [ 154.052106][ T7704] bond0: entered allmulticast mode [ 154.059293][ T7704] bond_slave_0: entered allmulticast mode [ 154.066508][ T7704] bond_slave_1: entered allmulticast mode [ 154.072397][ T7704] dummy0: entered allmulticast mode [ 154.161239][ T7709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.167891][ T7718] FAULT_INJECTION: forcing a failure. [ 154.167891][ T7718] name failslab, interval 1, probability 0, space 0, times 0 [ 154.182981][ T7718] CPU: 1 UID: 0 PID: 7718 Comm: syz.2.503 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 154.183009][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 154.183021][ T7718] Call Trace: [ 154.183028][ T7718] [ 154.183035][ T7718] dump_stack_lvl+0x189/0x250 [ 154.183072][ T7718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.183101][ T7718] ? __pfx__printk+0x10/0x10 [ 154.183127][ T7718] ? ref_tracker_alloc+0x318/0x460 [ 154.183151][ T7718] should_fail_ex+0x414/0x560 [ 154.183187][ T7718] should_failslab+0xa8/0x100 [ 154.183215][ T7718] kmem_cache_alloc_noprof+0x73/0x3c0 [ 154.183239][ T7718] ? skb_clone+0x212/0x3a0 [ 154.183273][ T7718] skb_clone+0x212/0x3a0 [ 154.183326][ T7718] __netlink_deliver_tap+0x404/0x850 [ 154.183362][ T7718] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.183385][ T7718] netlink_deliver_tap+0x19c/0x1b0 [ 154.183407][ T7718] netlink_unicast+0x72f/0x8d0 [ 154.183438][ T7718] netlink_sendmsg+0x805/0xb30 [ 154.183469][ T7718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.183494][ T7718] ? aa_sock_msg_perm+0x94/0x160 [ 154.183516][ T7718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.183537][ T7718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.183561][ T7718] __sock_sendmsg+0x219/0x270 [ 154.183595][ T7718] ____sys_sendmsg+0x505/0x830 [ 154.183626][ T7718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.183661][ T7718] ? import_iovec+0x74/0xa0 [ 154.183690][ T7718] ___sys_sendmsg+0x21f/0x2a0 [ 154.183717][ T7718] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.183781][ T7718] ? __fget_files+0x2a/0x420 [ 154.183805][ T7718] ? __fget_files+0x3a0/0x420 [ 154.183841][ T7718] __x64_sys_sendmsg+0x19b/0x260 [ 154.183870][ T7718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.183913][ T7718] ? do_syscall_64+0xba/0x210 [ 154.183947][ T7718] do_syscall_64+0xf6/0x210 [ 154.183976][ T7718] ? clear_bhb_loop+0x45/0xa0 [ 154.184000][ T7718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.184018][ T7718] RIP: 0033:0x7f1fb0b8e969 [ 154.184035][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.184049][ T7718] RSP: 002b:00007f1fb1a21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.184067][ T7718] RAX: ffffffffffffffda RBX: 00007f1fb0db5fa0 RCX: 00007f1fb0b8e969 [ 154.184080][ T7718] RDX: 0000000024040800 RSI: 0000200000000280 RDI: 0000000000000003 [ 154.184092][ T7718] RBP: 00007f1fb1a21090 R08: 0000000000000000 R09: 0000000000000000 [ 154.184103][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.184113][ T7718] R13: 0000000000000000 R14: 00007f1fb0db5fa0 R15: 00007ffc6c22e998 [ 154.184143][ T7718] [ 154.448542][ T7709] bond0: (slave bond2): Enslaving as an active interface with an up link [ 154.457824][ T7711] veth1_to_bond: entered allmulticast mode [ 154.463935][ T7707] netlink: 88 bytes leftover after parsing attributes in process `syz.0.499'. [ 154.524535][ T7713] veth1_to_bond: entered promiscuous mode [ 154.543832][ T7718] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 154.599170][ T7713] veth1_to_bond: left promiscuous mode [ 154.605294][ T7713] veth1_to_bond: left allmulticast mode [ 154.964078][ T7736] netlink: 'syz.2.510': attribute type 39 has an invalid length. [ 155.050448][ T7738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.511'. [ 155.123459][ T7742] veth0: entered promiscuous mode [ 155.162948][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.513'. [ 155.244264][ T7741] veth0: left promiscuous mode [ 155.252299][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.512'. [ 155.373351][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.512'. [ 155.654320][ T7750] FAULT_INJECTION: forcing a failure. [ 155.654320][ T7750] name failslab, interval 1, probability 0, space 0, times 0 [ 155.701054][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.0.515 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 155.701081][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 155.701091][ T7750] Call Trace: [ 155.701098][ T7750] [ 155.701106][ T7750] dump_stack_lvl+0x189/0x250 [ 155.701142][ T7750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.701171][ T7750] ? __pfx__printk+0x10/0x10 [ 155.701197][ T7750] ? __pfx___might_resched+0x10/0x10 [ 155.701214][ T7750] ? fs_reclaim_acquire+0x7d/0x100 [ 155.701247][ T7750] should_fail_ex+0x414/0x560 [ 155.701286][ T7750] should_failslab+0xa8/0x100 [ 155.701314][ T7750] __kmalloc_noprof+0xcb/0x4f0 [ 155.701337][ T7750] ? ioctl_standard_iw_point+0x4d5/0xd40 [ 155.701365][ T7750] ioctl_standard_iw_point+0x4d5/0xd40 [ 155.701403][ T7750] ? __pfx_cfg80211_wext_siwgenie+0x10/0x10 [ 155.701423][ T7750] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 155.701445][ T7750] ? __pfx___mutex_lock+0x10/0x10 [ 155.701478][ T7750] ? full_name_hash+0x92/0xe0 [ 155.701505][ T7750] ? __pfx_cfg80211_wext_siwgenie+0x10/0x10 [ 155.701525][ T7750] ioctl_standard_call+0xaf/0x1b0 [ 155.701548][ T7750] ? __pfx_cfg80211_wext_siwgenie+0x10/0x10 [ 155.701567][ T7750] wext_ioctl_dispatch+0xeb/0x410 [ 155.701587][ T7750] ? __pfx_ioctl_standard_call+0x10/0x10 [ 155.701612][ T7750] wext_handle_ioctl+0x100/0x1c0 [ 155.701635][ T7750] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 155.701673][ T7750] sock_ioctl+0x15f/0x790 [ 155.701705][ T7750] ? __pfx_sock_ioctl+0x10/0x10 [ 155.701738][ T7750] ? __fget_files+0x3a0/0x420 [ 155.701763][ T7750] ? __fget_files+0x2a/0x420 [ 155.701792][ T7750] ? bpf_lsm_file_ioctl+0x9/0x20 [ 155.701818][ T7750] ? __pfx_sock_ioctl+0x10/0x10 [ 155.701846][ T7750] __se_sys_ioctl+0xf9/0x170 [ 155.701869][ T7750] do_syscall_64+0xf6/0x210 [ 155.701901][ T7750] ? clear_bhb_loop+0x45/0xa0 [ 155.701925][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.701943][ T7750] RIP: 0033:0x7fdab038e969 [ 155.701961][ T7750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.701977][ T7750] RSP: 002b:00007fdab119a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.702003][ T7750] RAX: ffffffffffffffda RBX: 00007fdab05b5fa0 RCX: 00007fdab038e969 [ 155.702016][ T7750] RDX: 0000200000000040 RSI: 0000000000008b30 RDI: 0000000000000004 [ 155.702032][ T7750] RBP: 00007fdab119a090 R08: 0000000000000000 R09: 0000000000000000 [ 155.702044][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.702056][ T7750] R13: 0000000000000000 R14: 00007fdab05b5fa0 R15: 00007fffac7868d8 [ 155.702088][ T7750] [ 156.205857][ T7759] FAULT_INJECTION: forcing a failure. [ 156.205857][ T7759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.225095][ T7757] FAULT_INJECTION: forcing a failure. [ 156.225095][ T7757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.238253][ T7757] CPU: 0 UID: 0 PID: 7757 Comm: syz.1.517 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 156.238280][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 156.238292][ T7757] Call Trace: [ 156.238300][ T7757] [ 156.238308][ T7757] dump_stack_lvl+0x189/0x250 [ 156.238345][ T7757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.238373][ T7757] ? __pfx__printk+0x10/0x10 [ 156.238408][ T7757] should_fail_ex+0x414/0x560 [ 156.238445][ T7757] _copy_from_user+0x2d/0xb0 [ 156.238472][ T7757] __copy_msghdr+0x3c5/0x5b0 [ 156.238503][ T7757] ___sys_sendmsg+0x1a5/0x2a0 [ 156.238530][ T7757] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.238595][ T7757] ? __fget_files+0x2a/0x420 [ 156.238619][ T7757] ? __fget_files+0x3a0/0x420 [ 156.238656][ T7757] __sys_sendmmsg+0x227/0x430 [ 156.238687][ T7757] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.238723][ T7757] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.238772][ T7757] ? ksys_write+0x1f0/0x250 [ 156.238793][ T7757] ? rcu_is_watching+0x15/0xb0 [ 156.238833][ T7757] __x64_sys_sendmmsg+0xa0/0xc0 [ 156.238861][ T7757] do_syscall_64+0xf6/0x210 [ 156.238892][ T7757] ? clear_bhb_loop+0x45/0xa0 [ 156.238916][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.238935][ T7757] RIP: 0033:0x7f7a3598e969 [ 156.238953][ T7757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.238969][ T7757] RSP: 002b:00007f7a368a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.238989][ T7757] RAX: ffffffffffffffda RBX: 00007f7a35bb5fa0 RCX: 00007f7a3598e969 [ 156.239003][ T7757] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 156.239015][ T7757] RBP: 00007f7a368a0090 R08: 0000000000000000 R09: 0000000000000000 [ 156.239027][ T7757] R10: 0000000024004044 R11: 0000000000000246 R12: 0000000000000001 [ 156.239038][ T7757] R13: 0000000000000000 R14: 00007f7a35bb5fa0 R15: 00007ffcc4d8e248 [ 156.239069][ T7757] [ 156.254275][ T7759] CPU: 1 UID: 0 PID: 7759 Comm: syz.2.516 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 156.254306][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 156.254317][ T7759] Call Trace: [ 156.254326][ T7759] [ 156.254334][ T7759] dump_stack_lvl+0x189/0x250 [ 156.254373][ T7759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.254403][ T7759] ? __pfx__printk+0x10/0x10 [ 156.254439][ T7759] should_fail_ex+0x414/0x560 [ 156.254478][ T7759] _copy_from_user+0x2d/0xb0 [ 156.254506][ T7759] sctp_setsockopt+0x19f/0x1200 [ 156.254530][ T7759] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 156.254555][ T7759] do_sock_setsockopt+0x257/0x3e0 [ 156.254584][ T7759] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 156.254612][ T7759] ? __fget_files+0x2a/0x420 [ 156.254643][ T7759] ? __fget_files+0x3a0/0x420 [ 156.254668][ T7759] ? __fget_files+0x2a/0x420 [ 156.254703][ T7759] __x64_sys_setsockopt+0x18b/0x220 [ 156.254735][ T7759] do_syscall_64+0xf6/0x210 [ 156.254768][ T7759] ? clear_bhb_loop+0x45/0xa0 [ 156.254794][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.254813][ T7759] RIP: 0033:0x7f1fb0b8e969 [ 156.254830][ T7759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.254848][ T7759] RSP: 002b:00007f1fb1a00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.254870][ T7759] RAX: ffffffffffffffda RBX: 00007f1fb0db6080 RCX: 00007f1fb0b8e969 [ 156.254886][ T7759] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 156.254899][ T7759] RBP: 00007f1fb1a00090 R08: 0000000000000008 R09: 0000000000000000 [ 156.254912][ T7759] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 156.254924][ T7759] R13: 0000000000000000 R14: 00007f1fb0db6080 R15: 00007ffc6c22e998 [ 156.254956][ T7759] [ 156.340284][ T7762] FAULT_INJECTION: forcing a failure. [ 156.340284][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 156.644292][ T7762] CPU: 1 UID: 0 PID: 7762 Comm: syz.4.519 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 156.644318][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 156.644329][ T7762] Call Trace: [ 156.644337][ T7762] [ 156.644345][ T7762] dump_stack_lvl+0x189/0x250 [ 156.644381][ T7762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.644410][ T7762] ? __pfx__printk+0x10/0x10 [ 156.644431][ T7762] ? __pfx___might_resched+0x10/0x10 [ 156.644449][ T7762] ? fs_reclaim_acquire+0x7d/0x100 [ 156.644483][ T7762] should_fail_ex+0x414/0x560 [ 156.644519][ T7762] should_failslab+0xa8/0x100 [ 156.644545][ T7762] __kmalloc_noprof+0xcb/0x4f0 [ 156.644568][ T7762] ? tomoyo_encode+0x28b/0x550 [ 156.644596][ T7762] tomoyo_encode+0x28b/0x550 [ 156.644624][ T7762] tomoyo_realpath_from_path+0x58d/0x5d0 [ 156.644649][ T7762] ? tomoyo_domain+0xda/0x130 [ 156.644675][ T7762] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 156.644704][ T7762] tomoyo_path_number_perm+0x1e8/0x5a0 [ 156.644736][ T7762] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.644784][ T7762] ? __lock_acquire+0xaac/0xd20 [ 156.644828][ T7762] ? __fget_files+0x2a/0x420 [ 156.644855][ T7762] ? __fget_files+0x3a0/0x420 [ 156.644878][ T7762] ? __fget_files+0x2a/0x420 [ 156.644906][ T7762] security_file_ioctl+0xcb/0x2d0 [ 156.644937][ T7762] __se_sys_ioctl+0x47/0x170 [ 156.644960][ T7762] do_syscall_64+0xf6/0x210 [ 156.645003][ T7762] ? clear_bhb_loop+0x45/0xa0 [ 156.645027][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.645044][ T7762] RIP: 0033:0x7ff05d38e969 [ 156.645060][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.645075][ T7762] RSP: 002b:00007ff05e218038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.645095][ T7762] RAX: ffffffffffffffda RBX: 00007ff05d5b5fa0 RCX: 00007ff05d38e969 [ 156.645109][ T7762] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 156.645120][ T7762] RBP: 00007ff05e218090 R08: 0000000000000000 R09: 0000000000000000 [ 156.645131][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.645141][ T7762] R13: 0000000000000000 R14: 00007ff05d5b5fa0 R15: 00007ffcb6526218 [ 156.645171][ T7762] [ 156.916440][ T7769] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 156.925201][ T7762] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.938035][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.522'. [ 156.955506][ T7762] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 157.010906][ T7774] FAULT_INJECTION: forcing a failure. [ 157.010906][ T7774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.029407][ T7774] CPU: 1 UID: 0 PID: 7774 Comm: syz.3.525 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 157.029435][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 157.029446][ T7774] Call Trace: [ 157.029454][ T7774] [ 157.029471][ T7774] dump_stack_lvl+0x189/0x250 [ 157.029507][ T7774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.029536][ T7774] ? __pfx__printk+0x10/0x10 [ 157.029569][ T7774] should_fail_ex+0x414/0x560 [ 157.029606][ T7774] _copy_to_user+0x31/0xb0 [ 157.029635][ T7774] simple_read_from_buffer+0xe1/0x170 [ 157.029665][ T7774] proc_fail_nth_read+0x1df/0x250 [ 157.029696][ T7774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.029727][ T7774] ? rw_verify_area+0x258/0x650 [ 157.029747][ T7774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.029776][ T7774] vfs_read+0x1fd/0x980 [ 157.029803][ T7774] ? __pfx___mutex_lock+0x10/0x10 [ 157.029834][ T7774] ? __pfx_vfs_read+0x10/0x10 [ 157.029863][ T7774] ? __fget_files+0x2a/0x420 [ 157.029894][ T7774] ? __fget_files+0x3a0/0x420 [ 157.029917][ T7774] ? __fget_files+0x2a/0x420 [ 157.029952][ T7774] ksys_read+0x145/0x250 [ 157.029972][ T7774] ? rcu_is_watching+0x15/0xb0 [ 157.030003][ T7774] ? __pfx_ksys_read+0x10/0x10 [ 157.030028][ T7774] ? do_syscall_64+0xba/0x210 [ 157.030062][ T7774] do_syscall_64+0xf6/0x210 [ 157.030092][ T7774] ? clear_bhb_loop+0x45/0xa0 [ 157.030117][ T7774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.030136][ T7774] RIP: 0033:0x7fa39258d37c [ 157.030153][ T7774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.030168][ T7774] RSP: 002b:00007fa393478030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.030189][ T7774] RAX: ffffffffffffffda RBX: 00007fa3927b5fa0 RCX: 00007fa39258d37c [ 157.030203][ T7774] RDX: 000000000000000f RSI: 00007fa3934780a0 RDI: 0000000000000005 [ 157.030214][ T7774] RBP: 00007fa393478090 R08: 0000000000000000 R09: 0000000000000000 [ 157.030226][ T7774] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000001 [ 157.030237][ T7774] R13: 0000000000000000 R14: 00007fa3927b5fa0 R15: 00007ffcbdb806a8 [ 157.030268][ T7774] [ 157.349963][ T7780] netlink: 'syz.1.528': attribute type 72 has an invalid length. [ 157.360008][ T7777] vlan0: entered promiscuous mode [ 157.360692][ T7782] FAULT_INJECTION: forcing a failure. [ 157.360692][ T7782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.382458][ T7782] CPU: 1 UID: 0 PID: 7782 Comm: syz.3.529 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 157.382485][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 157.382497][ T7782] Call Trace: [ 157.382504][ T7782] [ 157.382512][ T7782] dump_stack_lvl+0x189/0x250 [ 157.382543][ T7782] ? __lock_acquire+0xaac/0xd20 [ 157.382572][ T7782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.382599][ T7782] ? __pfx__printk+0x10/0x10 [ 157.382619][ T7782] ? __might_fault+0xb0/0x130 [ 157.382656][ T7782] should_fail_ex+0x414/0x560 [ 157.382692][ T7782] _copy_from_iter+0x1db/0x15a0 [ 157.382727][ T7782] ? __pfx__copy_from_iter+0x10/0x10 [ 157.382755][ T7782] ? dev_get_by_index+0x22/0x2e0 [ 157.382784][ T7782] ? dev_get_by_index+0x22/0x2e0 [ 157.382818][ T7782] packet_sendmsg+0x3322/0x5400 [ 157.382844][ T7782] ? aa_label_sk_perm+0x413/0x560 [ 157.382892][ T7782] ? __pfx___might_resched+0x10/0x10 [ 157.382911][ T7782] ? __lock_acquire+0xaac/0xd20 [ 157.382950][ T7782] ? __pfx_packet_sendmsg+0x10/0x10 [ 157.382972][ T7782] ? aa_sk_perm+0x81e/0x950 [ 157.382997][ T7782] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 157.383028][ T7782] ? aa_sock_msg_perm+0x94/0x160 [ 157.383050][ T7782] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.383072][ T7782] ? __pfx_packet_sendmsg+0x10/0x10 [ 157.383106][ T7782] __sock_sendmsg+0x219/0x270 [ 157.383140][ T7782] __sys_sendto+0x3bd/0x520 [ 157.383166][ T7782] ? __pfx___sys_sendto+0x10/0x10 [ 157.383186][ T7782] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 157.383229][ T7782] ? __fget_files+0x3a0/0x420 [ 157.383266][ T7782] ? ksys_write+0x1f0/0x250 [ 157.383297][ T7782] ? rcu_is_watching+0x15/0xb0 [ 157.383336][ T7782] __x64_sys_sendto+0xde/0x100 [ 157.383362][ T7782] do_syscall_64+0xf6/0x210 [ 157.383393][ T7782] ? clear_bhb_loop+0x45/0xa0 [ 157.383418][ T7782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.383436][ T7782] RIP: 0033:0x7fa39258e969 [ 157.383454][ T7782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.383470][ T7782] RSP: 002b:00007fa393478038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 157.383491][ T7782] RAX: ffffffffffffffda RBX: 00007fa3927b5fa0 RCX: 00007fa39258e969 [ 157.383505][ T7782] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000004 [ 157.383517][ T7782] RBP: 00007fa393478090 R08: 0000200000000140 R09: 0000000000000014 [ 157.383529][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.383540][ T7782] R13: 0000000000000000 R14: 00007fa3927b5fa0 R15: 00007ffcbdb806a8 [ 157.383570][ T7782] [ 157.645578][ T7785] netlink: 'syz.4.526': attribute type 39 has an invalid length. [ 157.771083][ T7791] __nla_validate_parse: 3 callbacks suppressed [ 157.793392][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.530'. [ 157.987073][ T7798] netlink: 68 bytes leftover after parsing attributes in process `syz.3.531'. [ 158.449732][ T7812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.538'. [ 158.485775][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 158.509322][ T7814] bond0: (slave dummy0): Releasing backup interface [ 158.520954][ T7814] bridge0: port 3(batadv0) entered disabled state [ 158.530072][ T7808] netlink: 'syz.4.537': attribute type 10 has an invalid length. [ 158.591118][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 158.602105][ T7819] netlink: 'syz.1.536': attribute type 10 has an invalid length. [ 158.615798][ T7814] bridge_slave_0: left allmulticast mode [ 158.621524][ T7814] bridge_slave_0: left promiscuous mode [ 158.626861][ T7819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.536'. [ 158.651887][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.666046][ T7814] bridge_slave_1: left allmulticast mode [ 158.672077][ T7814] bridge_slave_1: left promiscuous mode [ 158.680119][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.693687][ T7814] bond0: (slave bond_slave_0): Releasing backup interface [ 158.705453][ T7825] netlink: 260 bytes leftover after parsing attributes in process `syz.0.540'. [ 158.719287][ T7814] bond0: (slave bond_slave_1): Releasing backup interface [ 158.729728][ T7814] team_slave_0: left promiscuous mode [ 158.745873][ T7814] team0: Port device team_slave_0 removed [ 158.752930][ T7814] team_slave_1: left promiscuous mode [ 158.763634][ T7814] team0: Port device team_slave_1 removed [ 158.770631][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.778720][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.788461][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.797096][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.813724][ T7814] bond0: (slave bond1): Releasing backup interface [ 158.871805][ T7808] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 158.882500][ T7819] batadv0: entered promiscuous mode [ 158.888185][ T7819] batadv0: entered allmulticast mode [ 158.904898][ T7819] bridge0: port 3(batadv0) entered blocking state [ 158.911896][ T7819] bridge0: port 3(batadv0) entered disabled state [ 158.927343][ T7808] syz.4.537 (7808) used greatest stack depth: 20168 bytes left [ 158.950109][ T7819] bridge0: port 3(batadv0) entered blocking state [ 158.956786][ T7819] bridge0: port 3(batadv0) entered forwarding state [ 159.143819][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.542'. [ 159.181448][ T7838] FAULT_INJECTION: forcing a failure. [ 159.181448][ T7838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.195876][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.4.545 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 159.195901][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 159.195911][ T7838] Call Trace: [ 159.195917][ T7838] [ 159.195924][ T7838] dump_stack_lvl+0x189/0x250 [ 159.195962][ T7838] ? __lock_acquire+0xaac/0xd20 [ 159.195986][ T7838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.196010][ T7838] ? __pfx__printk+0x10/0x10 [ 159.196027][ T7838] ? __might_fault+0xb0/0x130 [ 159.196059][ T7838] should_fail_ex+0x414/0x560 [ 159.196092][ T7838] _copy_from_user+0x2d/0xb0 [ 159.196116][ T7838] ___sys_sendmsg+0x158/0x2a0 [ 159.196139][ T7838] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.196188][ T7838] ? __fget_files+0x2a/0x420 [ 159.196208][ T7838] ? __fget_files+0x3a0/0x420 [ 159.196238][ T7838] __x64_sys_sendmsg+0x19b/0x260 [ 159.196262][ T7838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.196297][ T7838] ? do_syscall_64+0xba/0x210 [ 159.196325][ T7838] do_syscall_64+0xf6/0x210 [ 159.196350][ T7838] ? clear_bhb_loop+0x45/0xa0 [ 159.196372][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.196388][ T7838] RIP: 0033:0x7ff05d38e969 [ 159.196404][ T7838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.196418][ T7838] RSP: 002b:00007ff05e218038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.196436][ T7838] RAX: ffffffffffffffda RBX: 00007ff05d5b5fa0 RCX: 00007ff05d38e969 [ 159.196447][ T7838] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 159.196457][ T7838] RBP: 00007ff05e218090 R08: 0000000000000000 R09: 0000000000000000 [ 159.196466][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.196475][ T7838] R13: 0000000000000000 R14: 00007ff05d5b5fa0 R15: 00007ffcb6526218 [ 159.196500][ T7838] [ 159.409260][ T7448] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 159.418566][ T7448] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 159.449088][ T7842] netlink: 'syz.1.543': attribute type 39 has an invalid length. [ 159.529915][ T7841] block nbd3: not configured, cannot reconfigure [ 159.589892][ T7845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.549'. [ 159.619200][ T7848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.550'. [ 160.366984][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.375576][ T7861] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.877268][ T7861] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.906929][ T7861] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.915988][ T7861] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.924933][ T7861] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.520505][ T7923] netlink: 'syz.2.564': attribute type 39 has an invalid length. [ 162.532882][ T7951] netlink: 'syz.4.575': attribute type 26 has an invalid length. [ 162.789877][ T7966] __nla_validate_parse: 8 callbacks suppressed [ 162.789898][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.576'. [ 163.043297][ T7981] netlink: 'syz.4.582': attribute type 39 has an invalid length. [ 163.103303][ T7987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.585'. [ 163.833723][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.587'. [ 163.847608][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.587'. [ 163.864159][ T8015] dummy0: entered promiscuous mode [ 163.871553][ T8020] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 163.883887][ T8015] dummy0: left promiscuous mode [ 164.022647][ T8024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.591'. [ 164.072418][ T8026] Bluetooth: MGMT ver 1.23 [ 164.092545][ T8026] netlink: 'syz.4.592': attribute type 10 has an invalid length. [ 164.117961][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 164.129198][ T8026] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 164.139807][ T8031] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 164.309081][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 164.470025][ T8048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.479091][ T8052] netlink: 68 bytes leftover after parsing attributes in process `syz.2.598'. [ 164.569629][ T8048] Bluetooth: MGMT ver 1.23 [ 164.743592][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'. [ 164.775174][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'. [ 164.816601][ T8049] geneve2: entered promiscuous mode [ 164.827611][ T8049] geneve2: entered allmulticast mode [ 164.851254][ T8065] dummy0: entered promiscuous mode [ 164.881276][ T8065] dummy0: left promiscuous mode [ 165.482317][ T8098] xt_connbytes: Forcing CT accounting to be enabled [ 165.549976][ T8098] Cannot find add_set index 0 as target [ 165.562455][ T8105] FAULT_INJECTION: forcing a failure. [ 165.562455][ T8105] name failslab, interval 1, probability 0, space 0, times 0 [ 165.588456][ T8105] CPU: 0 UID: 0 PID: 8105 Comm: syz.3.613 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 165.588484][ T8105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 165.588496][ T8105] Call Trace: [ 165.588504][ T8105] [ 165.588513][ T8105] dump_stack_lvl+0x189/0x250 [ 165.588551][ T8105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.588580][ T8105] ? __pfx__printk+0x10/0x10 [ 165.588606][ T8105] ? __pfx___might_resched+0x10/0x10 [ 165.588630][ T8105] should_fail_ex+0x414/0x560 [ 165.588667][ T8105] should_failslab+0xa8/0x100 [ 165.588696][ T8105] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 165.588722][ T8105] ? __alloc_skb+0x112/0x2d0 [ 165.588750][ T8105] __alloc_skb+0x112/0x2d0 [ 165.588777][ T8105] netlink_sendmsg+0x5c6/0xb30 [ 165.588811][ T8105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.588838][ T8105] ? aa_sock_msg_perm+0x94/0x160 [ 165.588861][ T8105] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.588883][ T8105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.588907][ T8105] __sock_sendmsg+0x219/0x270 [ 165.588942][ T8105] ____sys_sendmsg+0x505/0x830 [ 165.588974][ T8105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.589010][ T8105] ? import_iovec+0x74/0xa0 [ 165.589041][ T8105] ___sys_sendmsg+0x21f/0x2a0 [ 165.589069][ T8105] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.589134][ T8105] ? __fget_files+0x2a/0x420 [ 165.589159][ T8105] ? __fget_files+0x3a0/0x420 [ 165.589196][ T8105] __x64_sys_sendmsg+0x19b/0x260 [ 165.589226][ T8105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 165.589270][ T8105] ? do_syscall_64+0xba/0x210 [ 165.589313][ T8105] do_syscall_64+0xf6/0x210 [ 165.589342][ T8105] ? clear_bhb_loop+0x45/0xa0 [ 165.589366][ T8105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.589385][ T8105] RIP: 0033:0x7fa39258e969 [ 165.589403][ T8105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.589419][ T8105] RSP: 002b:00007fa393478038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.589444][ T8105] RAX: ffffffffffffffda RBX: 00007fa3927b5fa0 RCX: 00007fa39258e969 [ 165.589458][ T8105] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 165.589469][ T8105] RBP: 00007fa393478090 R08: 0000000000000000 R09: 0000000000000000 [ 165.589480][ T8105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.589491][ T8105] R13: 0000000000000000 R14: 00007fa3927b5fa0 R15: 00007ffcbdb806a8 [ 165.589522][ T8105] [ 166.389338][ T8122] dummy0: entered promiscuous mode [ 166.431223][ T8122] dummy0: left promiscuous mode [ 166.520477][ T8132] FAULT_INJECTION: forcing a failure. [ 166.520477][ T8132] name failslab, interval 1, probability 0, space 0, times 0 [ 166.570148][ T8132] CPU: 0 UID: 0 PID: 8132 Comm: syz.0.619 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 166.570187][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 166.570198][ T8132] Call Trace: [ 166.570206][ T8132] [ 166.570213][ T8132] dump_stack_lvl+0x189/0x250 [ 166.570247][ T8132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.570274][ T8132] ? __pfx__printk+0x10/0x10 [ 166.570294][ T8132] ? __pfx___might_resched+0x10/0x10 [ 166.570311][ T8132] ? fs_reclaim_acquire+0x7d/0x100 [ 166.570341][ T8132] should_fail_ex+0x414/0x560 [ 166.570376][ T8132] should_failslab+0xa8/0x100 [ 166.570401][ T8132] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 166.570423][ T8132] ? __alloc_skb+0x112/0x2d0 [ 166.570448][ T8132] __alloc_skb+0x112/0x2d0 [ 166.570471][ T8132] alloc_skb_with_frags+0xca/0x890 [ 166.570492][ T8132] ? __might_fault+0xb0/0x130 [ 166.570543][ T8132] sock_alloc_send_pskb+0x857/0x990 [ 166.570589][ T8132] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 166.570621][ T8132] ? is_bpf_text_address+0x26/0x2b0 [ 166.570651][ T8132] ? iov_iter_advance+0x8b/0x1c0 [ 166.570676][ T8132] tun_get_user+0x9c9/0x3c20 [ 166.570723][ T8132] ? aa_file_perm+0x11f/0xed0 [ 166.570745][ T8132] ? __pfx_tun_get_user+0x10/0x10 [ 166.570769][ T8132] ? aa_file_perm+0x11f/0xed0 [ 166.570789][ T8132] ? aa_file_perm+0x3e7/0xed0 [ 166.570821][ T8132] ? ref_tracker_alloc+0x318/0x460 [ 166.570844][ T8132] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 166.570869][ T8132] ? tun_get+0x1c/0x2f0 [ 166.570901][ T8132] ? tun_get+0x1c/0x2f0 [ 166.570925][ T8132] ? tun_get+0x1c/0x2f0 [ 166.570954][ T8132] tun_chr_write_iter+0x113/0x200 [ 166.570982][ T8132] vfs_write+0x548/0xa90 [ 166.571020][ T8132] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 166.571045][ T8132] ? __pfx_vfs_write+0x10/0x10 [ 166.571092][ T8132] ? __fget_files+0x2a/0x420 [ 166.571126][ T8132] ksys_write+0x145/0x250 [ 166.571146][ T8132] ? rcu_is_watching+0x15/0xb0 [ 166.571188][ T8132] ? __pfx_ksys_write+0x10/0x10 [ 166.571213][ T8132] ? do_syscall_64+0xba/0x210 [ 166.571247][ T8132] do_syscall_64+0xf6/0x210 [ 166.571276][ T8132] ? clear_bhb_loop+0x45/0xa0 [ 166.571298][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.571316][ T8132] RIP: 0033:0x7fdab038e969 [ 166.571333][ T8132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.571349][ T8132] RSP: 002b:00007fdab119a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.571369][ T8132] RAX: ffffffffffffffda RBX: 00007fdab05b5fa0 RCX: 00007fdab038e969 [ 166.571382][ T8132] RDX: 0000000000000042 RSI: 0000200000000280 RDI: 0000000000000004 [ 166.571393][ T8132] RBP: 00007fdab119a090 R08: 0000000000000000 R09: 0000000000000000 [ 166.571404][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.571415][ T8132] R13: 0000000000000000 R14: 00007fdab05b5fa0 R15: 00007fffac7868d8 [ 166.571445][ T8132] [ 167.000300][ T8149] netlink: 'syz.1.624': attribute type 11 has an invalid length. [ 167.083103][ T8134] syzkaller1: entered promiscuous mode [ 167.114722][ T8134] syzkaller1: entered allmulticast mode [ 167.381748][ T8165] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 167.609285][ T8173] netlink: 'syz.3.627': attribute type 1 has an invalid length. [ 168.172144][ T8189] netlink: 'syz.4.635': attribute type 10 has an invalid length. [ 168.255781][ T8191] __nla_validate_parse: 9 callbacks suppressed [ 168.255800][ T8191] netlink: 36 bytes leftover after parsing attributes in process `syz.0.636'. [ 168.977038][ T8216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.645'. [ 168.986278][ T8216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.645'. [ 169.183146][ T8219] ip6gre1: entered promiscuous mode [ 169.510512][ T8229] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 169.543611][ T8233] netlink: 'syz.2.653': attribute type 39 has an invalid length. [ 169.740323][ T8247] netlink: 244 bytes leftover after parsing attributes in process `syz.0.650'. [ 169.865600][ T8251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.656'. [ 170.065903][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 170.158601][ T8251] vlan2: entered allmulticast mode [ 170.163900][ T8251] veth1: entered allmulticast mode [ 170.292315][ T8257] netlink: 'syz.4.658': attribute type 3 has an invalid length. [ 170.397477][ T8262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.660'. [ 170.877788][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 170.902494][ T8289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.946874][ T8294] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 170.972527][ T8294] FAULT_INJECTION: forcing a failure. [ 170.972527][ T8294] name failslab, interval 1, probability 0, space 0, times 0 [ 171.018364][ T8294] CPU: 1 UID: 0 PID: 8294 Comm: syz.1.668 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 171.018394][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 171.018407][ T8294] Call Trace: [ 171.018415][ T8294] [ 171.018424][ T8294] dump_stack_lvl+0x189/0x250 [ 171.018461][ T8294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.018490][ T8294] ? __pfx__printk+0x10/0x10 [ 171.018507][ T8294] ? __lock_acquire+0xaac/0xd20 [ 171.018548][ T8294] should_fail_ex+0x414/0x560 [ 171.018585][ T8294] should_failslab+0xa8/0x100 [ 171.018614][ T8294] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 171.018639][ T8294] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 171.018668][ T8294] ? __alloc_skb+0x112/0x2d0 [ 171.018695][ T8294] __alloc_skb+0x112/0x2d0 [ 171.018722][ T8294] rtmsg_ifinfo_build_skb+0x84/0x260 [ 171.018761][ T8294] rtmsg_ifinfo+0x8c/0x1a0 [ 171.018797][ T8294] __dev_notify_flags+0xf4/0x2e0 [ 171.018825][ T8294] ? __pfx___dev_notify_flags+0x10/0x10 [ 171.018847][ T8294] ? __dev_change_flags+0x4cc/0x6d0 [ 171.018877][ T8294] ? __pfx___dev_change_flags+0x10/0x10 [ 171.018899][ T8294] ? dev_ioctl+0x7a4/0x1150 [ 171.018918][ T8294] ? full_name_hash+0x92/0xe0 [ 171.018954][ T8294] netif_change_flags+0xe8/0x1a0 [ 171.018985][ T8294] dev_change_flags+0x130/0x260 [ 171.019018][ T8294] dev_ioctl+0x7b4/0x1150 [ 171.019042][ T8294] sock_do_ioctl+0x22c/0x300 [ 171.019076][ T8294] ? __pfx_sock_do_ioctl+0x10/0x10 [ 171.019125][ T8294] sock_ioctl+0x576/0x790 [ 171.019156][ T8294] ? __pfx_sock_ioctl+0x10/0x10 [ 171.019194][ T8294] ? __fget_files+0x3a0/0x420 [ 171.019219][ T8294] ? __fget_files+0x2a/0x420 [ 171.019248][ T8294] ? bpf_lsm_file_ioctl+0x9/0x20 [ 171.019274][ T8294] ? __pfx_sock_ioctl+0x10/0x10 [ 171.019302][ T8294] __se_sys_ioctl+0xf9/0x170 [ 171.019326][ T8294] do_syscall_64+0xf6/0x210 [ 171.019358][ T8294] ? clear_bhb_loop+0x45/0xa0 [ 171.019382][ T8294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.019400][ T8294] RIP: 0033:0x7f7a3598e969 [ 171.019417][ T8294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.019433][ T8294] RSP: 002b:00007f7a368a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.019454][ T8294] RAX: ffffffffffffffda RBX: 00007f7a35bb5fa0 RCX: 00007f7a3598e969 [ 171.019468][ T8294] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 171.019481][ T8294] RBP: 00007f7a368a0090 R08: 0000000000000000 R09: 0000000000000000 [ 171.019493][ T8294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.019504][ T8294] R13: 0000000000000000 R14: 00007f7a35bb5fa0 R15: 00007ffcc4d8e248 [ 171.019535][ T8294] [ 171.088970][ T8298] netlink: 244 bytes leftover after parsing attributes in process `syz.0.669'. [ 171.624616][ T8312] netlink: 264 bytes leftover after parsing attributes in process `syz.4.674'. [ 171.875496][ T8312] Unknown status report in ack skb [ 172.103663][ T8329] FAULT_INJECTION: forcing a failure. [ 172.103663][ T8329] name failslab, interval 1, probability 0, space 0, times 0 [ 172.120392][ T8329] CPU: 0 UID: 0 PID: 8329 Comm: syz.0.678 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 172.120421][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 172.120433][ T8329] Call Trace: [ 172.120441][ T8329] [ 172.120449][ T8329] dump_stack_lvl+0x189/0x250 [ 172.120487][ T8329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.120515][ T8329] ? __pfx__printk+0x10/0x10 [ 172.120542][ T8329] ? __pfx___might_resched+0x10/0x10 [ 172.120560][ T8329] ? fs_reclaim_acquire+0x7d/0x100 [ 172.120595][ T8329] should_fail_ex+0x414/0x560 [ 172.120632][ T8329] should_failslab+0xa8/0x100 [ 172.120660][ T8329] __kmalloc_noprof+0xcb/0x4f0 [ 172.120685][ T8329] ? kernfs_fop_write_iter+0x158/0x4f0 [ 172.120711][ T8329] kernfs_fop_write_iter+0x158/0x4f0 [ 172.120741][ T8329] iter_file_splice_write+0x937/0x1000 [ 172.120804][ T8329] ? __pfx_iter_file_splice_write+0x10/0x10 [ 172.120833][ T8329] ? rcu_read_lock_any_held+0xb3/0x120 [ 172.120869][ T8329] ? __pfx_iter_file_splice_write+0x10/0x10 [ 172.120893][ T8329] do_splice+0xc76/0x1660 [ 172.120946][ T8329] ? __pfx_do_splice+0x10/0x10 [ 172.120981][ T8329] __se_sys_splice+0x2e1/0x460 [ 172.121013][ T8329] ? __pfx___se_sys_splice+0x10/0x10 [ 172.121043][ T8329] ? __x64_sys_splice+0x21/0xf0 [ 172.121072][ T8329] do_syscall_64+0xf6/0x210 [ 172.121103][ T8329] ? clear_bhb_loop+0x45/0xa0 [ 172.121128][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.121147][ T8329] RIP: 0033:0x7fdab038e969 [ 172.121164][ T8329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.121181][ T8329] RSP: 002b:00007fdab119a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 172.121201][ T8329] RAX: ffffffffffffffda RBX: 00007fdab05b5fa0 RCX: 00007fdab038e969 [ 172.121215][ T8329] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000006 [ 172.121226][ T8329] RBP: 00007fdab119a090 R08: 0000000000000008 R09: 0000000000000000 [ 172.121237][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.121249][ T8329] R13: 0000000000000000 R14: 00007fdab05b5fa0 R15: 00007fffac7868d8 [ 172.121281][ T8329] [ 172.809771][ T8332] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.821064][ T8332] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.836844][ T8332] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.847669][ T8332] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.287903][ T8367] __nla_validate_parse: 3 callbacks suppressed [ 173.287922][ T8367] netlink: 244 bytes leftover after parsing attributes in process `syz.0.688'. [ 173.473334][ T8375] syz_tun: refused to change device tx_queue_len [ 173.489124][ T8375] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 173.570471][ T8381] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 173.600778][ T8381] netlink: 208 bytes leftover after parsing attributes in process `syz.2.694'. [ 173.611716][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 173.690400][ T8386] syzkaller1: entered promiscuous mode [ 173.702797][ T8386] syzkaller1: entered allmulticast mode [ 173.758076][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.698'. [ 174.125840][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.703'. [ 174.145642][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 174.292879][ T8400] FAULT_INJECTION: forcing a failure. [ 174.292879][ T8400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.350534][ T8400] CPU: 0 UID: 0 PID: 8400 Comm: syz.0.706 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 174.350564][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 174.350575][ T8400] Call Trace: [ 174.350583][ T8400] [ 174.350592][ T8400] dump_stack_lvl+0x189/0x250 [ 174.350628][ T8400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.350663][ T8400] ? __pfx__printk+0x10/0x10 [ 174.350696][ T8400] should_fail_ex+0x414/0x560 [ 174.350733][ T8400] _copy_to_user+0x31/0xb0 [ 174.350763][ T8400] bnep_get_connlist+0x106/0x270 [ 174.350793][ T8400] ? __pfx_bnep_get_connlist+0x10/0x10 [ 174.350833][ T8400] do_bnep_sock_ioctl+0x32d/0x640 [ 174.350863][ T8400] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 174.350897][ T8400] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 174.350929][ T8400] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 174.350961][ T8400] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 174.351003][ T8400] sock_do_ioctl+0xd9/0x300 [ 174.351036][ T8400] ? __pfx_sock_do_ioctl+0x10/0x10 [ 174.351066][ T8400] ? __lock_acquire+0xaac/0xd20 [ 174.351106][ T8400] sock_ioctl+0x576/0x790 [ 174.351137][ T8400] ? __pfx_sock_ioctl+0x10/0x10 [ 174.351169][ T8400] ? __fget_files+0x3a0/0x420 [ 174.351193][ T8400] ? __fget_files+0x2a/0x420 [ 174.351221][ T8400] ? bpf_lsm_file_ioctl+0x9/0x20 [ 174.351247][ T8400] ? __pfx_sock_ioctl+0x10/0x10 [ 174.351274][ T8400] __se_sys_ioctl+0xf9/0x170 [ 174.351297][ T8400] do_syscall_64+0xf6/0x210 [ 174.351328][ T8400] ? clear_bhb_loop+0x45/0xa0 [ 174.351351][ T8400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.351369][ T8400] RIP: 0033:0x7fdab038e969 [ 174.351387][ T8400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.351402][ T8400] RSP: 002b:00007fdab119a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.351422][ T8400] RAX: ffffffffffffffda RBX: 00007fdab05b5fa0 RCX: 00007fdab038e969 [ 174.351436][ T8400] RDX: 0000200000000440 RSI: 00000000800442d2 RDI: 0000000000000004 [ 174.351466][ T8400] RBP: 00007fdab119a090 R08: 0000000000000000 R09: 0000000000000000 [ 174.351477][ T8400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.351488][ T8400] R13: 0000000000000000 R14: 00007fdab05b5fa0 R15: 00007fffac7868d8 [ 174.351520][ T8400] [ 174.632130][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 174.870134][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 175.102551][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.716'. [ 175.206018][ T8438] netlink: 'syz.4.717': attribute type 1 has an invalid length. [ 175.266149][ T8438] netlink: 208 bytes leftover after parsing attributes in process `syz.4.717'. [ 175.607328][ T8451] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 175.632600][ T8451] batman_adv: batadv0: Adding interface: ip6gretap1 [ 175.653853][ T8451] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.701751][ T8451] batman_adv: batadv0: Interface activated: ip6gretap1 [ 175.980347][ T8476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.989466][ T8476] bond0: (slave bond3): Enslaving as an active interface with an up link [ 176.273426][ T8493] netlink: 'syz.1.741': attribute type 23 has an invalid length. [ 176.532628][ T8512] IPVS: length: 175 != 8 [ 176.634270][ T8517] netlink: 'syz.1.748': attribute type 11 has an invalid length. [ 176.645587][ T8516] netlink: 'syz.2.749': attribute type 10 has an invalid length. [ 176.665295][ T8516] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.810304][ T8523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.894296][ T8523] syz.1.751 (8523) used greatest stack depth: 19640 bytes left [ 177.019329][ T7880] IPVS: starting estimator thread 0... [ 177.026888][ T8534] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:0 [ 177.033245][ T8534] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:0 [ 177.072167][ T8534] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:0 [ 177.089896][ T8534] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:0 [ 177.100977][ T8534] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:0 [ 177.108634][ T8534] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:0 [ 177.151880][ T8534] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:0 [ 177.206665][ T8535] IPVS: using max 27 ests per chain, 64800 per kthread [ 178.129331][ T8573] FAULT_INJECTION: forcing a failure. [ 178.129331][ T8573] name failslab, interval 1, probability 0, space 0, times 0 [ 178.143829][ T8573] CPU: 0 UID: 0 PID: 8573 Comm: syz.4.768 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 178.143857][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 178.143869][ T8573] Call Trace: [ 178.143877][ T8573] [ 178.143885][ T8573] dump_stack_lvl+0x189/0x250 [ 178.143924][ T8573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.143954][ T8573] ? __pfx__printk+0x10/0x10 [ 178.143971][ T8573] ? __lock_acquire+0xaac/0xd20 [ 178.144015][ T8573] should_fail_ex+0x414/0x560 [ 178.144053][ T8573] should_failslab+0xa8/0x100 [ 178.144081][ T8573] kmem_cache_alloc_noprof+0x73/0x3c0 [ 178.144106][ T8573] ? batadv_tt_local_event+0x53/0x650 [ 178.144136][ T8573] batadv_tt_local_event+0x53/0x650 [ 178.144174][ T8573] batadv_tt_local_remove+0x11d/0x230 [ 178.144206][ T8573] batadv_meshif_destroy_vlan+0x8a/0x240 [ 178.144231][ T8573] batadv_meshif_destroy_netlink+0xea/0x270 [ 178.144256][ T8573] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 178.144276][ T8573] rtnl_dellink+0x474/0x710 [ 178.144295][ T8573] ? is_bpf_text_address+0x26/0x2b0 [ 178.144329][ T8573] ? __pfx_rtnl_dellink+0x10/0x10 [ 178.144354][ T8573] ? __lock_acquire+0xaac/0xd20 [ 178.144483][ T8573] ? __pfx_rtnl_dellink+0x10/0x10 [ 178.144503][ T8573] rtnetlink_rcv_msg+0x7cc/0xb70 [ 178.144527][ T8573] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 178.144546][ T8573] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.144568][ T8573] ? __lock_acquire+0xaac/0xd20 [ 178.144608][ T8573] netlink_rcv_skb+0x219/0x490 [ 178.144638][ T8573] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.144660][ T8573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.144703][ T8573] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.144724][ T8573] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.144752][ T8573] netlink_unicast+0x758/0x8d0 [ 178.144783][ T8573] netlink_sendmsg+0x805/0xb30 [ 178.144816][ T8573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.144842][ T8573] ? aa_sock_msg_perm+0x94/0x160 [ 178.144869][ T8573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.144890][ T8573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.144912][ T8573] __sock_sendmsg+0x219/0x270 [ 178.144947][ T8573] ____sys_sendmsg+0x505/0x830 [ 178.144978][ T8573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.145011][ T8573] ? import_iovec+0x74/0xa0 [ 178.145040][ T8573] ___sys_sendmsg+0x21f/0x2a0 [ 178.145068][ T8573] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.145150][ T8573] ? __fget_files+0x2a/0x420 [ 178.145174][ T8573] ? __fget_files+0x3a0/0x420 [ 178.145210][ T8573] __x64_sys_sendmsg+0x19b/0x260 [ 178.145257][ T8573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.145299][ T8573] ? do_syscall_64+0xba/0x210 [ 178.145330][ T8573] do_syscall_64+0xf6/0x210 [ 178.145357][ T8573] ? clear_bhb_loop+0x45/0xa0 [ 178.145380][ T8573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.145398][ T8573] RIP: 0033:0x7ff05d38e969 [ 178.145414][ T8573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.145429][ T8573] RSP: 002b:00007ff05e1f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.145448][ T8573] RAX: ffffffffffffffda RBX: 00007ff05d5b6080 RCX: 00007ff05d38e969 [ 178.145462][ T8573] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 178.145473][ T8573] RBP: 00007ff05e1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.145483][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.145493][ T8573] R13: 0000000000000000 R14: 00007ff05d5b6080 R15: 00007ffcb6526218 [ 178.145524][ T8573] [ 179.018998][ T8596] __nla_validate_parse: 10 callbacks suppressed [ 179.019029][ T8596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.775'. [ 179.540617][ T8619] bridge_slave_0: left allmulticast mode [ 179.548616][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.781'. [ 179.557857][ T8619] bridge_slave_0: left promiscuous mode [ 179.563732][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.571313][ T8616] netlink: 'syz.3.780': attribute type 10 has an invalid length. [ 179.583197][ T8619] bridge_slave_1: left allmulticast mode [ 179.591436][ T8619] bridge_slave_1: left promiscuous mode [ 179.645420][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.696790][ T8619] bond0: (slave bond_slave_0): Releasing backup interface [ 179.748241][ T8619] bond0: (slave bond_slave_1): Releasing backup interface [ 179.761256][ T8619] team_slave_0: left promiscuous mode [ 179.783751][ T8619] team0: Port device team_slave_0 removed [ 179.791335][ T8619] team_slave_1: left promiscuous mode [ 179.802475][ T8619] team0: Port device team_slave_1 removed [ 179.823417][ T8619] bond0: (slave bond3): Releasing backup interface [ 179.896143][ T8616] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 180.853803][ T8674] netlink: 'syz.1.797': attribute type 10 has an invalid length. [ 181.101347][ T8683] netlink: 'syz.2.800': attribute type 26 has an invalid length. [ 181.421478][ T8697] netlink: 'syz.1.804': attribute type 39 has an invalid length. [ 181.533732][ T8705] netlink: 36 bytes leftover after parsing attributes in process `syz.2.808'. [ 181.666555][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.809'. [ 181.683884][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.809'. [ 182.124203][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.815'. [ 182.208397][ T8727] netlink: 'syz.1.817': attribute type 39 has an invalid length. [ 182.283624][ T8730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.344319][ T8735] netlink: 'syz.0.818': attribute type 4 has an invalid length. [ 182.381844][ T8735] netlink: 152 bytes leftover after parsing attributes in process `syz.0.818'. [ 182.461872][ T8735] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 182.678018][ T8746] netlink: 'syz.0.823': attribute type 23 has an invalid length. [ 182.966502][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'. [ 183.030374][ T8733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.049623][ T8758] netlink: 72 bytes leftover after parsing attributes in process `syz.1.825'. [ 183.163552][ T8764] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$Uvyآ' [ 183.179015][ T8764] CPU: 1 UID: 0 PID: 8764 Comm: syz.0.829 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 183.179047][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 183.179080][ T8764] Call Trace: [ 183.179089][ T8764] [ 183.179098][ T8764] dump_stack_lvl+0x189/0x250 [ 183.179134][ T8764] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.179165][ T8764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.179194][ T8764] ? __pfx__printk+0x10/0x10 [ 183.179220][ T8764] ? kernfs_path_from_node+0x2b/0x260 [ 183.179251][ T8764] ? kernfs_path_from_node+0x216/0x260 [ 183.179283][ T8764] sysfs_warn_dup+0x8e/0xa0 [ 183.179309][ T8764] sysfs_do_create_link_sd+0xc0/0x110 [ 183.179338][ T8764] device_add_class_symlinks+0x1cf/0x240 [ 183.179367][ T8764] device_add+0x475/0xb50 [ 183.179394][ T8764] wiphy_register+0x199a/0x26b0 [ 183.179435][ T8764] ? __pfx_wiphy_register+0x10/0x10 [ 183.179453][ T8764] ? minstrel_ht_alloc+0x893/0x990 [ 183.179487][ T8764] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 183.179516][ T8764] ieee80211_register_hw+0x334b/0x4060 [ 183.179557][ T8764] ? ieee80211_register_hw+0x14d1/0x4060 [ 183.179596][ T8764] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 183.179627][ T8764] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 183.179662][ T8764] ? __hrtimer_setup+0x187/0x210 [ 183.179690][ T8764] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 183.179715][ T8764] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 183.179780][ T8764] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 183.179809][ T8764] ? trace_kmalloc+0x1f/0xd0 [ 183.179831][ T8764] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 183.179857][ T8764] ? kstrndup+0xbf/0x160 [ 183.179887][ T8764] hwsim_new_radio_nl+0xea4/0x1b10 [ 183.179921][ T8764] ? __pfx___nla_validate_parse+0x10/0x10 [ 183.179960][ T8764] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.180006][ T8764] ? __nla_parse+0x40/0x60 [ 183.180034][ T8764] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 183.180086][ T8764] genl_family_rcv_msg_doit+0x212/0x300 [ 183.180124][ T8764] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.180167][ T8764] ? bpf_lsm_capable+0x9/0x20 [ 183.180193][ T8764] ? security_capable+0x7e/0x2e0 [ 183.180222][ T8764] genl_rcv_msg+0x60e/0x790 [ 183.180258][ T8764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.180285][ T8764] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.180332][ T8764] netlink_rcv_skb+0x219/0x490 [ 183.180356][ T8764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.180386][ T8764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.180436][ T8764] ? down_read+0x1ad/0x2e0 [ 183.180458][ T8764] genl_rcv+0x28/0x40 [ 183.180482][ T8764] netlink_unicast+0x758/0x8d0 [ 183.180515][ T8764] netlink_sendmsg+0x805/0xb30 [ 183.180547][ T8764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.180579][ T8764] ? aa_sock_msg_perm+0x94/0x160 [ 183.180603][ T8764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.180624][ T8764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.180648][ T8764] __sock_sendmsg+0x219/0x270 [ 183.180682][ T8764] ____sys_sendmsg+0x505/0x830 [ 183.180713][ T8764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.180749][ T8764] ? import_iovec+0x74/0xa0 [ 183.180780][ T8764] ___sys_sendmsg+0x21f/0x2a0 [ 183.180809][ T8764] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.180876][ T8764] ? __fget_files+0x2a/0x420 [ 183.180900][ T8764] ? __fget_files+0x3a0/0x420 [ 183.180934][ T8764] __x64_sys_sendmsg+0x19b/0x260 [ 183.180964][ T8764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.181009][ T8764] ? do_syscall_64+0xba/0x210 [ 183.181044][ T8764] do_syscall_64+0xf6/0x210 [ 183.181084][ T8764] ? clear_bhb_loop+0x45/0xa0 [ 183.181109][ T8764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.181128][ T8764] RIP: 0033:0x7fdab038e969 [ 183.181147][ T8764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.181163][ T8764] RSP: 002b:00007fdab119a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.181184][ T8764] RAX: ffffffffffffffda RBX: 00007fdab05b5fa0 RCX: 00007fdab038e969 [ 183.181199][ T8764] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 183.181211][ T8764] RBP: 00007fdab0410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 183.181223][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.181235][ T8764] R13: 0000000000000000 R14: 00007fdab05b5fa0 R15: 00007fffac7868d8 [ 183.181268][ T8764] [ 183.813559][ T8774] netlink: 'syz.3.831': attribute type 39 has an invalid length. [ 184.142281][ T1162] bond0 (unregistering): Released all slaves [ 184.152378][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.836'. [ 184.357590][ T8798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.370435][ T8798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.400345][ T8798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.434886][ T8798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.470275][ T8798] bridge0: port 3(batadv0) entered disabled state [ 184.497100][ T8798] bridge0: port 3(batadv0) entered disabled state [ 184.524613][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.843'. [ 184.811759][ T8818] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 184.821094][ T8818] netlink: 240 bytes leftover after parsing attributes in process `syz.3.849'. [ 184.842376][ T8818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.849'. [ 184.904031][ T8824] syzkaller1: entered promiscuous mode [ 184.913074][ T8824] syzkaller1: entered allmulticast mode [ 184.937485][ T8818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.849'. [ 185.229756][ T8834] syzkaller1: entered promiscuous mode [ 185.252922][ T8834] syzkaller1: entered allmulticast mode [ 185.294086][ T8840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.545725][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 185.581733][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'. [ 185.646311][ T8815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.670758][ T8857] netlink: 'syz.3.862': attribute type 97 has an invalid length. [ 185.726534][ T8863] netlink: 'syz.2.864': attribute type 26 has an invalid length. [ 186.173544][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.870'. [ 186.196791][ T67] bond0 (unregistering): Released all slaves [ 186.279055][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 186.299218][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 186.643322][ T8902] netlink: 'syz.4.876': attribute type 1 has an invalid length. [ 186.863272][ T8908] netlink: 'syz.2.882': attribute type 10 has an invalid length. [ 186.878423][ T8908] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.897007][ T8908] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.915847][ T8908] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.924344][ T8908] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.954017][ T8908] geneve0: entered promiscuous mode [ 186.973783][ T8908] team0: Port device geneve0 added [ 187.086354][ T8916] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 187.359868][ T8927] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.369078][ T8927] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.377973][ T8927] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.386932][ T8927] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.399208][ T8920] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 187.419028][ T8927] vxlan0: entered promiscuous mode [ 187.430383][ T8927] vxlan0: entered allmulticast mode [ 187.515260][ T8927] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.523669][ T8927] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.532254][ T8927] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.540741][ T8927] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.559178][ T8935] netlink: 'syz.3.891': attribute type 10 has an invalid length. [ 187.590526][ T8935] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.712784][ T8938] gretap0: left promiscuous mode [ 187.816179][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.824133][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.182886][ T8938] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.192126][ T8938] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.212639][ T8938] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.229688][ T8938] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.252878][ T8938] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 188.333608][ T8938] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 188.360138][ T8938] vlan2: left promiscuous mode [ 188.367516][ T8938] bond0: left promiscuous mode [ 188.372506][ T8938] bond_slave_0: left promiscuous mode [ 188.379213][ T8938] bond_slave_1: left promiscuous mode [ 188.388650][ T8938] dummy0: left promiscuous mode [ 188.397694][ T8938] vlan2: left allmulticast mode [ 188.420957][ T8938] bond0: left allmulticast mode [ 188.433171][ T8938] bond_slave_0: left allmulticast mode [ 188.449191][ T8938] bond_slave_1: left allmulticast mode [ 188.468257][ T8938] dummy0: left allmulticast mode [ 188.810382][ T8963] netlink: 'syz.2.897': attribute type 39 has an invalid length. [ 188.984583][ T8969] bond4: entered promiscuous mode [ 188.992567][ T8976] Cannot find add_set index 0 as target [ 189.017601][ T8969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.073060][ T8978] bridge2: entered promiscuous mode [ 189.123471][ T8978] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 189.161592][ T8979] bond4: left promiscuous mode [ 189.172289][ T8979] bridge2: left promiscuous mode [ 189.284954][ T8989] netlink: 'syz.4.909': attribute type 10 has an invalid length. [ 189.316312][ T8989] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 189.423040][ T8999] __nla_validate_parse: 8 callbacks suppressed [ 189.423061][ T8999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.912'. [ 189.453968][ T8997] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 190.482925][ T9039] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 190.501572][ T9039] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.554649][ T9041] syzkaller1: entered promiscuous mode [ 190.562686][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.925'. [ 190.570171][ T9041] syzkaller1: entered allmulticast mode [ 190.778120][ T9049] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 190.838738][ T9049] bond5: entered promiscuous mode [ 190.844834][ T9049] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.854385][ T9052] Cannot find add_set index 0 as target [ 190.914408][ T9049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.927'. [ 190.962115][ T9057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.931'. [ 190.969340][ T9053] bridge3: entered promiscuous mode [ 191.021772][ T9053] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 191.034927][ T9049] bond5: left promiscuous mode [ 191.044208][ T9049] bridge3: left promiscuous mode [ 191.332372][ T9075] netlink: 256 bytes leftover after parsing attributes in process `syz.3.934'. [ 191.392601][ T9075] netlink: 52 bytes leftover after parsing attributes in process `syz.3.934'. [ 191.422364][ T9080] netlink: 'syz.0.936': attribute type 10 has an invalid length. [ 191.431584][ T9080] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.434043][ T9079] netlink: 264 bytes leftover after parsing attributes in process `syz.1.935'. [ 191.543929][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'. [ 191.564203][ T9082] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 191.931701][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 192.304365][ T9112] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 192.314853][ T9112] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 192.587093][ T9129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.954'. [ 192.954544][ T9146] Unsupported ieee802154 address type: 0 [ 193.588517][ T9156] netlink: 'syz.1.962': attribute type 10 has an invalid length. [ 193.613772][ T9156] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.838537][ T9167] vlan3: entered allmulticast mode [ 193.875640][ T9168] netlink: 'syz.0.967': attribute type 5 has an invalid length. [ 194.185017][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.459918][ T9193] __nla_validate_parse: 1 callbacks suppressed [ 194.459938][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 194.753851][ T9199] netlink: 36 bytes leftover after parsing attributes in process `syz.1.975'. [ 194.961603][ T9202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.982519][ T9202] bond0: (slave bond4): Enslaving as an active interface with an up link [ 195.103237][ T9209] FAULT_INJECTION: forcing a failure. [ 195.103237][ T9209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.133059][ T9209] CPU: 0 UID: 0 PID: 9209 Comm: syz.2.977 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 195.133090][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 195.133103][ T9209] Call Trace: [ 195.133111][ T9209] [ 195.133120][ T9209] dump_stack_lvl+0x189/0x250 [ 195.133152][ T9209] ? __lock_acquire+0xaac/0xd20 [ 195.133183][ T9209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.133212][ T9209] ? __pfx__printk+0x10/0x10 [ 195.133232][ T9209] ? __might_fault+0xb0/0x130 [ 195.133279][ T9209] should_fail_ex+0x414/0x560 [ 195.133317][ T9209] _copy_from_iter+0x575/0x15a0 [ 195.133355][ T9209] ? __pfx__copy_from_iter+0x10/0x10 [ 195.133379][ T9209] ? ip_route_output_key_hash+0xde/0x2e0 [ 195.133415][ T9209] ? skb_put+0x11b/0x210 [ 195.133443][ T9209] raw_send_hdrinc+0x925/0x14c0 [ 195.133489][ T9209] ? __pfx_raw_send_hdrinc+0x10/0x10 [ 195.133527][ T9209] raw_sendmsg+0x1340/0x18a0 [ 195.133571][ T9209] ? __pfx_raw_sendmsg+0x10/0x10 [ 195.133615][ T9209] ? aa_sk_perm+0x81e/0x950 [ 195.133642][ T9209] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 195.133671][ T9209] ? sock_rps_record_flow+0x19/0x410 [ 195.133704][ T9209] ? inet_sendmsg+0x2f4/0x370 [ 195.133732][ T9209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.133759][ T9209] __sock_sendmsg+0x19c/0x270 [ 195.133796][ T9209] ____sys_sendmsg+0x52d/0x830 [ 195.133828][ T9209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.133864][ T9209] ? import_iovec+0x74/0xa0 [ 195.133895][ T9209] ___sys_sendmsg+0x21f/0x2a0 [ 195.133924][ T9209] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.133989][ T9209] ? __fget_files+0x2a/0x420 [ 195.134015][ T9209] ? __fget_files+0x3a0/0x420 [ 195.134052][ T9209] __sys_sendmmsg+0x227/0x430 [ 195.134085][ T9209] ? __pfx___sys_sendmmsg+0x10/0x10 [ 195.134122][ T9209] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.134172][ T9209] ? ksys_write+0x1f0/0x250 [ 195.134194][ T9209] ? rcu_is_watching+0x15/0xb0 [ 195.134235][ T9209] __x64_sys_sendmmsg+0xa0/0xc0 [ 195.134270][ T9209] do_syscall_64+0xf6/0x210 [ 195.134302][ T9209] ? clear_bhb_loop+0x45/0xa0 [ 195.134326][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.134345][ T9209] RIP: 0033:0x7f1fb0b8e969 [ 195.134362][ T9209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.134379][ T9209] RSP: 002b:00007f1fb1a21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 195.134399][ T9209] RAX: ffffffffffffffda RBX: 00007f1fb0db5fa0 RCX: 00007f1fb0b8e969 [ 195.134415][ T9209] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 195.134427][ T9209] RBP: 00007f1fb1a21090 R08: 0000000000000000 R09: 0000000000000000 [ 195.134439][ T9209] R10: 0000000024004044 R11: 0000000000000246 R12: 0000000000000001 [ 195.134452][ T9209] R13: 0000000000000000 R14: 00007f1fb0db5fa0 R15: 00007ffc6c22e998 [ 195.134483][ T9209] [ 195.521853][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 195.820235][ T9222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.981'. [ 196.147653][ T9230] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 196.158090][ T9230] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.694422][ T9243] netlink: 'syz.3.986': attribute type 15 has an invalid length. [ 196.911039][ T9246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.988'. [ 197.284205][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 197.628052][ T9259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.991'. [ 197.900855][ T9269] netlink: 'syz.3.995': attribute type 10 has an invalid length. [ 197.920152][ T9269] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.988939][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.993'. [ 198.930107][ T9293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.999'. [ 199.273066][ T9305] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1005'. [ 199.543070][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1008'. [ 199.552564][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1008'. [ 199.567669][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'. [ 199.739993][ T9320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1009'. [ 199.902072][ T9146] Set syz1 is full, maxelem 65536 reached [ 200.107015][ T9332] netlink: 'syz.4.1011': attribute type 6 has an invalid length. [ 200.138147][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 200.211616][ T9334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1012'. [ 200.799858][ T9349] netlink: 'syz.4.1016': attribute type 10 has an invalid length. [ 200.826645][ T9349] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 201.045982][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1020'. [ 201.055269][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1020'. [ 201.076089][ T9359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1022'. [ 201.503962][ T9377] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1026'. [ 201.833787][ T9385] netlink: 'syz.3.1029': attribute type 10 has an invalid length. [ 201.843009][ T9385] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 202.768105][ T9421] netlink: 'syz.2.1043': attribute type 10 has an invalid length. [ 202.808625][ T9421] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.150977][ T9435] FAULT_INJECTION: forcing a failure. [ 203.150977][ T9435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.215033][ T9435] CPU: 1 UID: 0 PID: 9435 Comm: syz.2.1046 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 203.215062][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 203.215074][ T9435] Call Trace: [ 203.215082][ T9435] [ 203.215090][ T9435] dump_stack_lvl+0x189/0x250 [ 203.215128][ T9435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.215157][ T9435] ? __pfx__printk+0x10/0x10 [ 203.215192][ T9435] should_fail_ex+0x414/0x560 [ 203.215230][ T9435] _copy_to_user+0x31/0xb0 [ 203.215260][ T9435] simple_read_from_buffer+0xe1/0x170 [ 203.215290][ T9435] proc_fail_nth_read+0x1df/0x250 [ 203.215322][ T9435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.215354][ T9435] ? rw_verify_area+0x258/0x650 [ 203.215377][ T9435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.215407][ T9435] vfs_read+0x1fd/0x980 [ 203.215435][ T9435] ? __pfx___mutex_lock+0x10/0x10 [ 203.215467][ T9435] ? __pfx_vfs_read+0x10/0x10 [ 203.215492][ T9435] ? __fget_files+0x2a/0x420 [ 203.215523][ T9435] ? __fget_files+0x3a0/0x420 [ 203.215547][ T9435] ? __fget_files+0x2a/0x420 [ 203.215582][ T9435] ksys_read+0x145/0x250 [ 203.215608][ T9435] ? __pfx_ksys_read+0x10/0x10 [ 203.215636][ T9435] ? do_syscall_64+0xba/0x210 [ 203.215675][ T9435] do_syscall_64+0xf6/0x210 [ 203.215706][ T9435] ? clear_bhb_loop+0x45/0xa0 [ 203.215730][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.215749][ T9435] RIP: 0033:0x7f1fb0b8d37c [ 203.215766][ T9435] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 203.215783][ T9435] RSP: 002b:00007f1fb1a21030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.215804][ T9435] RAX: ffffffffffffffda RBX: 00007f1fb0db5fa0 RCX: 00007f1fb0b8d37c [ 203.215818][ T9435] RDX: 000000000000000f RSI: 00007f1fb1a210a0 RDI: 0000000000000004 [ 203.215830][ T9435] RBP: 00007f1fb1a21090 R08: 0000000000000000 R09: 0000000000000000 [ 203.215842][ T9435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.215853][ T9435] R13: 0000000000000000 R14: 00007f1fb0db5fa0 R15: 00007ffc6c22e998 [ 203.215886][ T9435] [ 203.706941][ T9443] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 203.735572][ T9444] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 204.009377][ T9457] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$UvyآDUDw}zR3 [ 204.151605][ T9462] netlink: 'syz.4.1056': attribute type 10 has an invalid length. [ 204.188796][ T9462] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.548190][ T9484] __nla_validate_parse: 11 callbacks suppressed [ 204.548210][ T9484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1061'. [ 205.454064][ T9508] bridge0: port 1(hsr0) entered blocking state [ 205.473195][ T9508] bridge0: port 1(hsr0) entered disabled state [ 205.497414][ T9508] hsr0: entered allmulticast mode [ 205.502510][ T9508] hsr_slave_0: entered allmulticast mode [ 205.510485][ T9508] hsr_slave_1: entered allmulticast mode [ 205.549706][ T9508] hsr0: entered promiscuous mode [ 205.562366][ T9508] bridge0: port 1(hsr0) entered blocking state [ 205.568982][ T9508] bridge0: port 1(hsr0) entered forwarding state [ 205.685488][ T7884] [ 205.687896][ T7884] ============================================ [ 205.694065][ T7884] WARNING: possible recursive locking detected [ 205.700246][ T7884] 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 Not tainted [ 205.707376][ T7884] -------------------------------------------- [ 205.713549][ T7884] kworker/0:9/7884 is trying to acquire lock: [ 205.719639][ T7884] ffff888021b32f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 205.728791][ T7884] [ 205.728791][ T7884] but task is already holding lock: [ 205.736182][ T7884] ffff88805acbaf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 205.745301][ T7884] [ 205.745301][ T7884] other info that might help us debug this: [ 205.753380][ T7884] Possible unsafe locking scenario: [ 205.753380][ T7884] [ 205.761201][ T7884] CPU0 [ 205.764492][ T7884] ---- [ 205.767777][ T7884] lock(&hsr->seqnr_lock); [ 205.772288][ T7884] lock(&hsr->seqnr_lock); [ 205.776795][ T7884] [ 205.776795][ T7884] *** DEADLOCK *** [ 205.776795][ T7884] [ 205.784938][ T7884] May be due to missing lock nesting notation [ 205.784938][ T7884] [ 205.793343][ T7884] 11 locks held by kworker/0:9/7884: [ 205.798628][ T7884] #0: ffff88802ff0a948 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 205.809367][ T7884] #1: ffffc90002e87c60 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 205.822512][ T7884] #2: ffff88805b385538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xde0 [ 205.831745][ T7884] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80 [ 205.840978][ T7884] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 205.850843][ T7884] #5: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 205.860780][ T7884] #6: ffff88805acbaf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 205.870280][ T7884] #7: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 205.879778][ T7884] #8: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 205.889719][ T7884] #9: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 205.898958][ T7884] #10: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 205.908979][ T7884] [ 205.908979][ T7884] stack backtrace: [ 205.914878][ T7884] CPU: 0 UID: 0 PID: 7884 Comm: kworker/0:9 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 205.914900][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 205.914912][ T7884] Workqueue: mld mld_ifc_work [ 205.914933][ T7884] Call Trace: [ 205.914942][ T7884] [ 205.914950][ T7884] dump_stack_lvl+0x189/0x250 [ 205.914978][ T7884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.915005][ T7884] ? __pfx__printk+0x10/0x10 [ 205.915022][ T7884] ? print_lock_name+0xde/0x100 [ 205.915038][ T7884] print_deadlock_bug+0x28b/0x2a0 [ 205.915055][ T7884] validate_chain+0x1a3f/0x2140 [ 205.915077][ T7884] ? __lock_acquire+0xaac/0xd20 [ 205.915100][ T7884] __lock_acquire+0xaac/0xd20 [ 205.915123][ T7884] ? hsr_dev_xmit+0x19a/0x220 [ 205.915141][ T7884] lock_acquire+0x120/0x360 [ 205.915161][ T7884] ? hsr_dev_xmit+0x19a/0x220 [ 205.915184][ T7884] ? hsr_dev_xmit+0x19a/0x220 [ 205.915201][ T7884] _raw_spin_lock_bh+0x36/0x50 [ 205.915221][ T7884] ? hsr_dev_xmit+0x19a/0x220 [ 205.915238][ T7884] hsr_dev_xmit+0x19a/0x220 [ 205.915257][ T7884] dev_hard_start_xmit+0x2d4/0x830 [ 205.915279][ T7884] ? rcu_read_lock_bh_held+0x79/0xe0 [ 205.915300][ T7884] __dev_queue_xmit+0x1adf/0x3a70 [ 205.915326][ T7884] ? __dev_queue_xmit+0x27e/0x3a70 [ 205.915350][ T7884] ? __local_bh_enable_ip+0x12d/0x1c0 [ 205.915375][ T7884] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.915400][ T7884] ? __pfx___dev_queue_xmit+0x10/0x10 [ 205.915424][ T7884] ? do_raw_read_unlock+0x3d/0x80 [ 205.915448][ T7884] ? ebt_do_table+0x265b/0x2820 [ 205.915481][ T7884] br_dev_queue_push_xmit+0x6c5/0x890 [ 205.915509][ T7884] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 205.915536][ T7884] ? NF_HOOK+0x9e/0x3c0 [ 205.915558][ T7884] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 205.915582][ T7884] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 205.915606][ T7884] NF_HOOK+0x31d/0x3c0 [ 205.915631][ T7884] ? NF_HOOK+0x9e/0x3c0 [ 205.915654][ T7884] ? __pfx_NF_HOOK+0x10/0x10 [ 205.915677][ T7884] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 205.915708][ T7884] br_forward_finish+0xd3/0x130 [ 205.915730][ T7884] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 205.915755][ T7884] ? __pfx_br_forward_finish+0x10/0x10 [ 205.915778][ T7884] ? __pfx_br_forward_finish+0x10/0x10 [ 205.915801][ T7884] NF_HOOK+0x31d/0x3c0 [ 205.915825][ T7884] ? NF_HOOK+0x9e/0x3c0 [ 205.915847][ T7884] ? __pfx_NF_HOOK+0x10/0x10 [ 205.915869][ T7884] ? br_multicast_count+0xf2/0xdc0 [ 205.915885][ T7884] ? __pfx_br_forward_finish+0x10/0x10 [ 205.915914][ T7884] __br_forward+0x41e/0x600 [ 205.915927][ T7884] ? __pfx_br_forward_finish+0x10/0x10 [ 205.915950][ T7884] ? maybe_deliver+0xfe/0x160 [ 205.915965][ T7884] ? __pfx___br_forward+0x10/0x10 [ 205.915981][ T7884] ? br_dev_xmit+0x185/0x1840 [ 205.916000][ T7884] br_dev_xmit+0x11b3/0x1840 [ 205.916017][ T7884] ? arch_stack_walk+0x11c/0x150 [ 205.916037][ T7884] ? br_dev_xmit+0x185/0x1840 [ 205.916058][ T7884] ? __pfx_br_dev_xmit+0x10/0x10 [ 205.916076][ T7884] ? __pfx_skb_network_protocol+0x10/0x10 [ 205.916099][ T7884] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 205.916123][ T7884] ? __pfx_passthru_features_check+0x10/0x10 [ 205.916150][ T7884] dev_hard_start_xmit+0x2d4/0x830 [ 205.916172][ T7884] ? rcu_read_lock_bh_held+0x79/0xe0 [ 205.916191][ T7884] __dev_queue_xmit+0x1adf/0x3a70 [ 205.916217][ T7884] ? __dev_queue_xmit+0x27e/0x3a70 [ 205.916241][ T7884] ? rcu_is_watching+0x15/0xb0 [ 205.916265][ T7884] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 205.916283][ T7884] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 205.916304][ T7884] ? __pfx___dev_queue_xmit+0x10/0x10 [ 205.916326][ T7884] ? __copy_skb_header+0xa7/0x550 [ 205.916347][ T7884] ? __asan_memcpy+0x40/0x70 [ 205.916362][ T7884] ? __pskb_copy_fclone+0x960/0xf90 [ 205.916385][ T7884] ? __asan_memcpy+0x40/0x70 [ 205.916400][ T7884] ? __pskb_copy_fclone+0x960/0xf90 [ 205.916423][ T7884] ? hsr_create_tagged_frame+0x449/0xc30 [ 205.916452][ T7884] ? __asan_memmove+0x40/0x70 [ 205.916467][ T7884] ? hsr_addr_subst_dest+0x307/0xac0 [ 205.916489][ T7884] hsr_forward_skb+0x158b/0x2860 [ 205.916515][ T7884] ? hsr_forward_skb+0x9e/0x2860 [ 205.916537][ T7884] ? __pfx_hsr_forward_skb+0x10/0x10 [ 205.916558][ T7884] ? do_raw_spin_lock+0x121/0x290 [ 205.916575][ T7884] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 205.916595][ T7884] ? hsr_dev_xmit+0x19a/0x220 [ 205.916614][ T7884] hsr_dev_xmit+0x1a5/0x220 [ 205.916633][ T7884] dev_hard_start_xmit+0x2d4/0x830 [ 205.916654][ T7884] ? rcu_read_lock_bh_held+0x79/0xe0 [ 205.916674][ T7884] __dev_queue_xmit+0x1adf/0x3a70 [ 205.916697][ T7884] ? register_lock_class+0x51/0x320 [ 205.916721][ T7884] ? __dev_queue_xmit+0x27e/0x3a70 [ 205.916765][ T7884] ? __pfx___dev_queue_xmit+0x10/0x10 [ 205.916787][ T7884] ? read_seqbegin+0x122/0x250 [ 205.916802][ T7884] ? neigh_connected_output+0x1ea/0x460 [ 205.916817][ T7884] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.916839][ T7884] ? read_seqbegin+0x1ac/0x250 [ 205.916853][ T7884] ? __pfx_read_seqbegin+0x10/0x10 [ 205.916867][ T7884] ? eth_header+0x11b/0x200 [ 205.916888][ T7884] ? __asan_memcpy+0x40/0x70 [ 205.916902][ T7884] ? eth_header+0x11b/0x200 [ 205.916921][ T7884] ? __pfx_eth_header+0x10/0x10 [ 205.916941][ T7884] ? neigh_connected_output+0x3b6/0x460 [ 205.916964][ T7884] ip6_finish_output2+0x11fb/0x16a0 [ 205.916986][ T7884] ? ip6_finish_output2+0x701/0x16a0 [ 205.917009][ T7884] ? __pfx_ip6_finish_output2+0x10/0x10 [ 205.917029][ T7884] ? ip6_mtu+0x7d/0x3f0 [ 205.917046][ T7884] ? ip6_mtu+0x7d/0x3f0 [ 205.917064][ T7884] ip6_finish_output+0x234/0x7d0 [ 205.917082][ T7884] NF_HOOK+0x9e/0x380 [ 205.917101][ T7884] ? NF_HOOK+0x101/0x380 [ 205.917118][ T7884] ? __pfx_NF_HOOK+0x10/0x10 [ 205.917137][ T7884] ? __pfx_dst_output+0x10/0x10 [ 205.917154][ T7884] ? icmp6_dst_alloc+0x3a5/0x420 [ 205.917171][ T7884] ? icmp6_dst_alloc+0x3a5/0x420 [ 205.917190][ T7884] mld_sendpack+0x800/0xd80 [ 205.917215][ T7884] ? mld_sendpack+0x1de/0xd80 [ 205.917234][ T7884] ? __pfx_mld_sendpack+0x10/0x10 [ 205.917260][ T7884] mld_ifc_work+0x835/0xde0 [ 205.917279][ T7884] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.917299][ T7884] ? process_scheduled_works+0x9ec/0x17a0 [ 205.917324][ T7884] process_scheduled_works+0xadb/0x17a0 [ 205.917360][ T7884] ? __pfx_process_scheduled_works+0x10/0x10 [ 205.917391][ T7884] worker_thread+0x8a0/0xda0 [ 205.917417][ T7884] kthread+0x70e/0x8a0 [ 205.917443][ T7884] ? __pfx_worker_thread+0x10/0x10 [ 205.917457][ T7884] ? __pfx_kthread+0x10/0x10 [ 205.917475][ T7884] ? __pfx_kthread+0x10/0x10 [ 205.917492][ T7884] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.917511][ T7884] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.917533][ T7884] ? __pfx_kthread+0x10/0x10 [ 205.917550][ T7884] ret_from_fork+0x4b/0x80 [ 205.917565][ T7884] ? __pfx_kthread+0x10/0x10 [ 205.917582][ T7884] ret_from_fork_asm+0x1a/0x30 [ 205.917603][ T7884] [ 206.610152][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 206.616234][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 206.622259][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 206.627256][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 206.700822][ T9527] Cannot find del_set index 4 as target