last executing test programs: 7.271311594s ago: executing program 4 (id=1347): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev, @remote}, &(0x7f0000000100)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x80, 0x101, 0x9, {{0xe, 0x4, 0x0, 0x2a, 0x38, 0x67, 0x0, 0xec, 0x29, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x23, 0xfffffffffffffffc, [{0x6, 0x8, "d8d0e7bcc02e"}, {0x0, 0x8, "866eb7d01462"}, {0x7, 0xd, "6a464ba448fb90836c03a6"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x81) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xfffa}, {}, {0xfff2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}}, 0x24000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x1, 0xf, 0x1e, @mcast2, @remote, 0x40, 0x7800, 0x0, 0x9}}) r16 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r17, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x224, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4}, 0x8840) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000e80)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000008500000095000000950000000000000026410d8f1b8e4bd38c8c78a4bc023076f6250485357d0a3fa21f6da1ee28302e0d01c71661c0f60e6776b31a11c8d55ab35ee990c1cf9e52750e9a6db7d5bb30"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r18 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_xfrm(r12, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@newspdinfo={0x24, 0x24, 0x100, 0x70bd27, 0x25dfdbfd, 0x7, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r18, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x410, 0x108, 0x218, 0x218, 0x328, 0x218, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x4, {0x7}}}}, {{@arp={@remote, @broadcast, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@remote, {[0x0, 0x0, 0xff, 0x0, 0x60645ae6b93fcf65]}}, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xefd, 0x0, 0x3, 0x7ff, 0xffff, 0xd6, 'team0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x0, 0x238}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@local, @private=0xa010100, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8a2c49155956", @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.187757069s ago: executing program 4 (id=1351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000240)) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) pselect6(0x40, &(0x7f0000000140)={0x6, 0xa44, 0xffff, 0x585e, 0x1ff, 0x80f, 0x2, 0x1cf}, &(0x7f0000000180)={0x2, 0x100, 0x7, 0xe3, 0x8, 0x5, 0x7}, &(0x7f00000001c0)={0x40, 0x8000000000000001, 0x7, 0xfffffffffffffff8, 0x8000000000000003, 0x4, 0x10, 0x481}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @loopback, 0x9}, 0x39) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000500)={0x0, 0x3}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000580)=r4, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "372a31a11e03279cec094e071cc80f218d360356a936a7e3971a8c35c47e5804", "400100", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r5 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000009", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000180100002020782500000000002000bfdeb0ce6600000007010000f8ffffffb702000008000000b50a000000000000850000004b0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$tipc(r6, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063012f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x90) 6.986312888s ago: executing program 4 (id=1355): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10) getsockname$llc(r0, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$isdn(0x22, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000800)="ff", 0x1}], 0x1}}], 0x2, 0x931766f6119eed40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000003c0), 0x4) sendfile(r2, r3, &(0x7f0000000100)=0x8, 0x3d) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x1e, "4376bf8285f3599ec23f39ebd116dd06175c69becfbc1c9de06166171496"}}) 6.663216776s ago: executing program 4 (id=1360): r0 = socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r2, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="fed44a3aae02f9bdcd03d25a474aa24d6693ac3027d426cb00ef9bbb1d3893a16d94b832b4a533aba6e7fb6e4f175c3ecae5fbbd7bec", 0x36}, {&(0x7f0000000100)="ac3b83a1201304b6624bbe00d969e8824786ddc7989c22cd500847113e878700a84f9c6bc8c5db4c29778d55891a06f171542094812ba20da7774b08597dcb0cf09e5171fab3089e7442db0161", 0x4d}, {&(0x7f0000000180)="cad690f09f0a9e3c20cac6a42e7ebac7588ab8dc90a889890615e186f2923dd4e54102e4c900745bccfb1d91d8e278ee50f76a0e5df0c43932289427aab204cb44e9694bf6fd50045f8884d69400f15e4ed982439aa400b2ba22a85d0f5f020ab32494a926e224becdbd3078b24413b9e42b2fa8bf24a9c92017e9d13f022e0ecdccddebb4", 0x85}, {&(0x7f0000000240)="413d66e734e27b8720bd76e832246248b93f657423d77ca9ac3fb611b5bf5f2a7c575c609ac728fa9174087fcee8deb348310a9016508ea1c4adb80f9b753357885ac47aca5fe0d808ea2b42379601cf80a338809b850431fa4322e9a836a340a3496c953cb32cdb95563001db7b8805cb6aca94a8b51a9450318e35546ef07f17c9ad6d7914d1785da3ee160a25e533aa54ad1a53c51b5334f845b4e662f2d28027525ec7a1fead5290e97321c1af7b5361ad395c4e22ae2a0aedcee99cb3ed42679fd3165e670f56c97444f7a419ba8c4a4f5482e12a4c844da1e651d14587f16235da19e460732b3015ee026233edb6860daf0d60c9e96759", 0xfa}, {&(0x7f0000000340)="cd40aa778fd7d0e43bc5eaf58d1775ba66e5025d6e75fe8aabdacc687ef1786e61ae87efec5f97b9332e3c69c7c3a5641db5ff4f7b08bd384769d75755afc3e534f75f67f50da6ac3e5420e13aa8755ed17407a2c308c674872de4ab623176e585fd957bb1cb0ca76786f4cdb5605a7d49a337f8d5fd12c9e85913d603a6475e1a456d0189e6b7abb802c6cfd3d2af48592452cbd5c986d7619619fe3a6b87", 0x9f}], 0x5}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000001380)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) recvmmsg(r4, &(0x7f0000001040)=[{{&(0x7f0000000180)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f00000002c0)=""/15, 0xf}], 0x3, &(0x7f0000000480)=""/38, 0x26}, 0x6}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/115, 0x73}, {&(0x7f0000000780)=""/191, 0xbf}, {&(0x7f0000000940)=""/225, 0xe1}, {&(0x7f0000000a40)=""/75, 0x4b}, {&(0x7f0000000600)=""/60, 0x3c}, {&(0x7f0000000ac0)=""/198, 0xc6}, {&(0x7f0000000c00)=""/171, 0xab}], 0x7, &(0x7f0000000840)=""/6, 0x6}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)=""/57, 0x39}], 0x1, &(0x7f0000000e40)=""/182, 0xb6}}, {{&(0x7f0000000f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f80)=""/22, 0x16}], 0x1, &(0x7f0000001000)=""/61, 0x3d}, 0x400}], 0x4, 0x2041, &(0x7f0000001140)={0x0, 0x989680}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f0000000400), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x4, &(0x7f0000001180)=@raw=[@generic={0x4, 0x0, 0x0, 0x5166}, @jmp={0x5, 0x1, 0xd, 0x1, 0xb, 0x100}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9d}], &(0x7f00000011c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001240)={0x1, 0x10, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001280)=[{0x5, 0x2, 0x4, 0x4}, {0x2, 0x4, 0x3, 0x5}, {0x4, 0x2, 0xa, 0x8}], 0x10, 0x101, @void, @value}, 0x94) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r5, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e000000010000b0500002000000000006f6d8864d32a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff5f5f"], 0xe0}], 0x1}, 0x0) writev(r0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x14, r10, 0x619}, 0x14}}, 0x0) 5.836200537s ago: executing program 4 (id=1373): unshare(0x20000400) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@mss, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x8000, 0x800}, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) vmsplice(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500ea003f"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000c001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1aa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff0200000000000000000000000000012b0a0101"], 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000cf40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000014) write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffd, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r9, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x24000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) 5.414227337s ago: executing program 4 (id=1378): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x200, 0x4, 0x200, 0x9, 0x1ff, 0x9, 0x22, 0x283f, r6}, &(0x7f0000000080)=0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) sendfile(r7, r3, 0x0, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r12, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}}, 0x4000084) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) pipe(&(0x7f0000000240)) 3.509501345s ago: executing program 1 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) unshare(0x20000400) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$ax25(r1, &(0x7f0000002ec0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 3.339317484s ago: executing program 1 (id=1399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYBLOB="101000000000000008000d0005000000e4031680a40001"], 0x40c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYBLOB="101000000000000008000d0005000000e4031680a40001"], 0x40c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="000000000100000000000000fe010000c6e83912ce2150c0", @ANYRES32=r0, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x2}, 0x20000080) (async) sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="000000000100000000000000fe010000c6e83912ce2150c0", @ANYRES32=r0, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x2}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000711125000000000040000000000000009500000000000000fdeb485eb832b37dea7117b5bb98655a832aa7ab93148b8ffc8a7a0f3a46bb070c16d8fd050713dde055f1ea"], &(0x7f0000000280)='GPL\x00', 0x4, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x27, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000711125000000000040000000000000009500000000000000fdeb485eb832b37dea7117b5bb98655a832aa7ab93148b8ffc8a7a0f3a46bb070c16d8fd050713dde055f1ea"], &(0x7f0000000280)='GPL\x00', 0x4, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x27, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x5f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000016000502000000000000000009000000d469"], 0x18}}, 0x50) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x0, 0x9c, &(0x7f0000000640)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee]\x11s\x9b\v\xce\xf1\x00\xd8\xe9\rZ\x86~b\xab\xce\x91e\xe3\xa7\xcd\xe0Sj\x86\x84+h~\xa9\'I\xad\x8dI\xa6\x0fw\xea\xb9\x9ff~-\xd7B\xa2\b\bH\x92\x17\xcc\xb7\x7f}E\x05\xc7\x96u\xb8\xcf\xd4\xd4\'Q\xc5\x15\xb7\xb91Oy\f\xcaj\x95ex\xe0 \x96\xc6n\x88+\x1c:\xc4jV\b2Y\xb0CJ}m\x82\x10\'sdE\xca\x8dI\xf4g\x196\xf7\x19\x9d\x15h\x81v\xb3\xb0\x17M\x9cQ'}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="010001000200000000090000000000000f2800d09e0000009500000000190000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESOCT=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000004200090000007c22fb72000003000000"], 0x14}}, 0x0) getpeername$inet(r10, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10) (async) getpeername$inet(r10, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) 3.231610654s ago: executing program 1 (id=1403): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}}, 0x0) (fail_nth: 3) 3.207392359s ago: executing program 1 (id=1404): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x20, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x4048044) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x100000, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000020605000000000000000000000000000500010006000000050005000000000005000400000000000900020073797a73683a6e65742c01657400000000d8f8e8528d9ddd796791f0526128f7f374246a8bcb0086d24f88ee1d30e54c65304f2819487ba3a071acaaf0c20169c2cc4b3fc6fa06470132e5457c8d731de2771fa744224be35ece1546755f69b2af736b1e1f2c28c39c8eef836c269005e578d1333e8ad47461904bef3defd7484f5ebd729461ded8baa11ba0463c89012f39db"], 0x4c}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="78000000100001042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9101000000000000580012800b000100697036677265000048000280060010004e23000006000300008000000400120014000700ff01000000000000000000000000000108000d00ff7f00001400060000000000000000000000ffffe000000168309a8ef71e78367da03a7ce2"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x0) 3.087902347s ago: executing program 1 (id=1406): r0 = socket(0x28, 0x8, 0xfffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x13, 0x1e94d960, 0x8, 0x7, 0x4000, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) (rerun: 32) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000920900"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x3, &(0x7f00000023c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r5, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x24}}, 0x8000) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x60, r3, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0xffffffffffffff98, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xa, 0xa, "27731ea21690"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40840}, 0x800) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r12, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000825bde42f094bdf252e00000006000600000000000a0001007770616e3000000006000400a1aa000005002b0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8044) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0xffffffa3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x2000800}, 0x40810) (rerun: 32) 2.883544782s ago: executing program 1 (id=1408): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x70bd2a, 0x25dfdbfb, {}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) (async, rerun: 32) read(r3, &(0x7f0000000080)=""/185, 0xb9) (async) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[], 0x8) (async) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x18}, 0x0) 2.086490589s ago: executing program 3 (id=1419): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="40180000000000001c0012800b000100000c0002800500100355c700030000000000000000268f"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_ts_info}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x80108906, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180ffffffff0900010073797a30000000000800020073797a3200000000140000001100"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0xff10}], 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x90, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x2, @mcast1, 0x7}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e21, 0x7f, @mcast2, 0x3}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x9, @local, 0x9}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x80, &(0x7f00000004c0)=[@in6={0xa, 0x4e21, 0x7, @remote, 0x1000}, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}, @in6={0xa, 0x4e23, 0x705, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0xc, @private1}]}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000006c0)={r8, 0x8, 0x9, 0xe000, 0x34, 0x9, 0x7, 0x6, {r9, @in6={{0xa, 0x4e22, 0x5a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2d4}}, 0x5, 0x9, 0x200, 0x1, 0x1}}, &(0x7f0000000780)=0xb0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x3, 0x3, 0x6, 0x0, 0x207fd]}, &(0x7f0000000080)=0x78) getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, 0x0, &(0x7f00000002c0)) 1.945763513s ago: executing program 2 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000055c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xf3}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x20, 0x10, 0x4, 0x10001, {{0x42, 0x4, 0x1, 0x9, 0x108, 0x65, 0x0, 0x9, 0x21, 0x0, @multicast2, @rand_addr=0x64010101, {[@rr={0x7, 0x2b, 0x1b, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty, @private=0xa010100, @remote, @loopback, @local, @multicast1, @private=0xa010100]}, @timestamp={0x44, 0x2c, 0x22, 0x0, 0x1, [0xd5, 0xa, 0x5, 0x2, 0x8, 0x60000, 0x400, 0xfffffffc, 0x9, 0x9]}, @rr={0x7, 0x1b, 0x69, [@empty, @rand_addr=0x64010101, @rand_addr=0x64010102, @rand_addr=0x64010100, @local, @broadcast]}, @lsrr={0x83, 0x17, 0x3e, [@empty, @multicast2, @loopback, @multicast1, @multicast1]}, @ssrr={0x89, 0x13, 0x7c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @broadcast]}, @timestamp={0x44, 0x10, 0x58, 0x0, 0x0, [0x5, 0xb7, 0x2a]}, @generic={0x7, 0x11, "ccd6abcb397ee581c2113d10904fbc"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x79, 0x1, 0xe, [{@broadcast, 0xcca}, {@broadcast, 0x9}]}, @ssrr={0x89, 0x1f, 0x2b, [@loopback, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010100, @empty]}]}}}}}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @multicast}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x80, 0x0, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x700, 0x20, 0x4, 0x8ab7}}) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010069703667726500001800028014000700fc02000000000000000000000000000008c4777a2feacdd2d228393ce0f976021184d55edb9f8c761f68398247d8bf1dfed54e02ef6d74dd549038969e8e2daca2eb40a04c0600540b6fb79cc52bb8289472ccbfc7503ba93b1f5f7be6e666940409", @ANYRES32=r12, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0x14, &(0x7f0000000040)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r13, &(0x7f0000000180)="0b031407e0ff640f0200475400f6", 0xe, 0x4044080, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28020000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf251500000074000180080003000000000008000300010000001400020070696d72656731000000000000000000080003000100000014000200687372300000000000000000000000001400020076657468305f746f5f687372000000000800030000000000140002006272696467655f736c6176655f300000400001800800030003000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002006261746164765f736c6176655f3000006c000180140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007369743000000000000000000000000008000100", @ANYRESHEX, @ANYBLOB="08000300000000001400020074756e6c3000000000000000000000001400020070696d3672656700000000000000000014000180080003000300000008000300030000000c00018008000300000000003c00018008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32=r4, @ANYBLOB="0800030002000000080003000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="7000018008000100", @ANYRES32=r9, @ANYBLOB="1400020069705f76746930000000000000000000140002007665746830000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="14005e06636169d43000002100000000000000000800030003000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="280001800800030000000000140002006e657464657673696d3000000000000008000100", @ANYRES32=r14, @ANYBLOB], 0x228}, 0x1, 0x0, 0x0, 0x80}, 0x810) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r17 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r17, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x52, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002bbd7000fbffffff0f00000008000300", @ANYRES32=r16, @ANYBLOB="050037000100000005003500050000000e719fd0583d720f3239fa07afcef19a39cede50a714da40f074dad35c2f5f9a5c5af0da3cf0e1664317908267f2776f111d68a323380298a09bd1ac9c101216b424a3207eff9a916ef6eefd84aba64e3b5f77239be8b703cc58045eec6df9b7218c60019c703951a0146e53bf375b70a976b686b2baf97a2513685addf7c3e89d1a6505effb4cc676cc4e"], 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="bceb010018000000000000000c0000000c00000005000000020000000000001302000000005f30a000"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.739686438s ago: executing program 2 (id=1422): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @void, @value}, 0x28) 1.314461345s ago: executing program 2 (id=1424): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="060000000000000069114a00000000008510000002000000850000000a00000095000000000000009500a505000000008f839192552d2dd4c9289c25a5fd2aa56d1b2be283172c844844bbf984aafc921e0e5568e9149712f083b1b806a09ffa9f1f4c16d26b461d3fabdcc0f17d404842cb9fcb4db9ea937094468ed731e6fadf418e87bb95ba81a7b195df9bf19ccb7c1aa7955734d5e9fc0f254d1ef79575fc0098604dfa373baf333415b89a2de0a2814e8a1541de66b009875df94de7eaabe6b80e3d1a8a2e2d4c29b6be2b6703f37b5390ff3ad7d4d6a4733ef67c3a574c507424d906474ef5721667fbe2137d696fc393641f22522d4970df1a37db99c207a563b74ecf1fde26507fb44f0a941bbc0c9564c677af781d6ae0cfda3766e7556df4a556ea6530ffe626e860623cd7fd7a8e17a6bfa11f156f6f0c846291ba0b1cc0ed70d5e5e42f2a6bc8549558d6c8d2dfdf3ac48e3a912d01ec76626551e9f9234ee5b34ff8a082e692e11731207f87af7a0e2de0b1c21652b6fb8ab6c66957070b9b3a15048d737051df3264378a5f7fb6682746517e93667d7271a2ad73390437161ef00094f54a504a2ddd3b7097616abecac39ee728fd5422a8debde1856232ad7de084459d0a08d1451d7ad65dbc0e6cebd3fb84bb000000000000000000000000000000004d44d166bcdd0eabc5ed3dc172b18bbcbe93a423cedb9a29375dd3e8060f2bac43bb1a1318698629da26c3a6ca3540dd1eb257f93e019cba7342182386122694a7baa8c48c6729eaed296fc25b74cc83aacb3ae1c8feca0ce6607d70de"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={0x0}}, 0x48040) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES16=r6], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000800)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0xfff5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x280041, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)=0x3ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) 1.263569352s ago: executing program 0 (id=1425): socket$inet6_udplite(0xa, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="e47f00000000006f00e38b710000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.050513873s ago: executing program 0 (id=1426): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r1 = socket(0x1, 0x80802, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x3, 0x3, [0xffff, 0x8000, 0x9]}, &(0x7f0000000500)=0xe) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000540)={r3, 0xcb, "704e184f644f197c75d673cf3502ff68671805abd5f3078dce3ff7f2e9d46e4dba674e0e01f7d6f9ac2438aab758e316ff3a1accf93a4e0554a7cd16cfd41f4e8d5b50203ea11298ea1a5b6d06acd1c9f448a107df0dedaaecd2f7a707998ecaa6d3091ab937a33c95868082d2a8177c541a089d56504529f3ed6d9c80b2bc2aeef11996d00f0d0250c5206778b0ea65651065205c61f85e7572b9fa8ac4f35fc1a6b6e55b03bce6429206f5c6343c17cd518299124fcb3161f322e4d38dcb8b312b838299cc698a84ec4a"}, &(0x7f0000000640)=0xd3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001340000001a0a0300000000000000000002000000090001"], 0x98}}, 0x0) shutdown(r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x23, 0x80805, 0x2) getsockopt$inet6_tcp_buf(r6, 0x6, 0x6, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x0}, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r12, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000014) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002680)={r10, &(0x7f0000002640), 0x0}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.001483383s ago: executing program 3 (id=1427): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000016c0)={0x0, 0x1c, 0x0, 0x1, 0x0, 0x0, 0x20044184}, 0x4000090) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', 0xffffffffffffffff, 0x0, 0x800000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) (async) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file1\x00'}, 0x18) (async) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000000b06010800009cd000000800060000020500010007000000e8ff020073797a310000e8ffaccf9d88af6a4baa6b1ac3ee9c74daa670294900142ccfa2c3159a4e73c11145f8c08020866900efcef6e489866e9f14070000004d7516f7f70bb7cd917327c8ed5f9103e47c2a759b589e92bfe172b3d4530265f9879155d9719d1dcde3c08c60521160e9c54ca3524e23f1b5fd332e0266ce6f74430c4941952ad7f6756f4d68114da5044d879d0a989286e8030172528c371610f1e4ab733ac2b4f5041a7cf1d8d78a37d416e3cb7eddff8bcb869ed0b23148193797031973258c5d6cc82e7c172c12f1dd88e400c3826a4d000000000000000000000058e4f9b46ad045dfbc169af50842e1a916193a40c4db1a57f1cd"], 0x28}}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r6 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES64, @ANYRES32=r4, @ANYRESHEX=r4], 0x48}}, 0x40000) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$nl_rdma(0x10, 0x3, 0x14) 844.633662ms ago: executing program 0 (id=1428): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x4e20, @empty}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x403) 571.263263ms ago: executing program 3 (id=1429): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711233000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711233000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f90224fc6028000e000a73e300053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b"}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f90224fc6028000e000a73e300053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b"}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000280)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x10, 0x0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000002c0)={0x18, 0x2, {0x0, @dev, 'ip6gre0\x00'}}, 0x1e) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@generic={0x3, 0x1, 0xd, 0x7, 0x8}, @generic={0x8, 0x4, 0x2, 0xdb2, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, r7}, @alu={0x4, 0x1, 0x2, 0x4, 0xb, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x9, 0x6, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x481f}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r9, &(0x7f0000000200)="5280", 0x2) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r10, 0x0, 0xc9, 0x0, 0x0) (async) setsockopt$MRT_DONE(r10, 0x0, 0xc9, 0x0, 0x0) 539.320135ms ago: executing program 0 (id=1430): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x1e8, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8808}]}, @NFTA_RULE_EXPRESSIONS={0x1b8, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x46}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x5}]}}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, {0x9c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x8c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x8}, @NFTA_DYNSET_EXPR={0x60, 0x7, 0x0, 0x1, {{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xf19f830cf45b8689}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x10}]}}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0xa4, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_USERDATA={0x5d, 0xd, 0x1, 0x0, "e213c5741e3f7e106bb45441049471e4d02c89262c363de4ad36e628e0c3a469771b630d9b93f202efb89155e4f147fb8041af36f8352a930c6396350abfdc68d351ebb7cff179f3930a24e1a7c28089305db5911da51c06b5"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x354}, 0x1, 0x0, 0x0, 0x1010}, 0x80) 403.765102ms ago: executing program 3 (id=1431): unshare(0x20000400) unshare(0x20000) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ssrr={0x89, 0xf, 0x77, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) connect$ax25(r0, &(0x7f0000002ec0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 355.434493ms ago: executing program 0 (id=1432): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x757b334bd52a7c0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0xfffffe00, 'syz0\x00', @default, 0x5, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x400, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x4, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x48}, {0x0, 0x0, 0xfffffffffbffffff, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 340.409086ms ago: executing program 2 (id=1433): socket(0x10, 0x80002, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) socket$kcm(0x29, 0x8, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="3cfa862735fed67453a789cc8415b3dbdcb7734ceec4f5eb4ea217", 0x1b}, {&(0x7f00000003c0)="a24a593fb72028b712240d6d22c4c13b7b37b86d466619d2a1cb7d5e7b203893532f32f4eab305fae0812f9aca7a1360385269858469ab24782988002348abc7496969536731d8401a5225e0a6ab948fbacff996bb880944db10336880cc993f0aa325d7f83da8e52f255afdbc14f59b31325003119b5f5495a234d9000f5738c5237e3ff2e76a53dce83d7fa2714511c7f2be811f2a2c2f0165da4a", 0x9c}, {&(0x7f0000000780)="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", 0x1000}], 0x3, &(0x7f0000000340)}}], 0x1, 0x4000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMRRU(r5, 0x4010744d, &(0x7f0000000080)=0xc) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x1, 0x0, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r9, 0x890c, &(0x7f0000000180)={@default, @null, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) listen(r7, 0xda90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x9, 0x0, 0xfffffffffffffffe, 0x4, 0xfffffefffffffffc}, 0x0, &(0x7f00000002c0)={0x401, 0x0, 0xffffffff, 0x20000000000009, 0x5f, 0x0, 0xf9}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 278.347ms ago: executing program 3 (id=1434): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) 206.246283ms ago: executing program 0 (id=1435): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x16}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)=""/235, &(0x7f0000000200)=0xeb) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) listen(0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003400001000014000000110001"], 0xd8}}, 0x4000040) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x16}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)=""/235, &(0x7f0000000200)=0xeb) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) (async) listen(0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003400001000014000000110001"], 0xd8}}, 0x4000040) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async) 135.351784ms ago: executing program 3 (id=1436): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000f3ff00"/27], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) unshare(0x22020400) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r3, 0x2000000, 0x1c, 0x0, &(0x7f0000000040)="ffff1fc42f5a0092733b80c677834f51e16e5dc756434150a4c87949", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0x10000, 0x1000, 0x6, 0x2}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x1) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 130.558792ms ago: executing program 2 (id=1437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {}, {0x0, 0x0, 0x0, 0x400000000000}, {}, 0x200000, 0x0, 0x2, 0x7, 0x0, 0xaf}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1c0}}]}, 0x13c}}, 0x0) 0s ago: executing program 2 (id=1438): sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x707}, 0x14}}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000550a000000000000100100"/28], 0x48) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {0x600}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x2, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r5, 0x0, {0x0, 0x0, 0x3}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c4}, 0x4004007) write$tun(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="6d6ff169006411010000000000000001fc010000003bec2c5a8177ff8f0000004e254e21006490780200000002000000000000002a6fc62da102b492cfeb01a43a4cc01cf3e05e400254ea6964c9f096e06bc75b944bf18001c6b2b37b3a9ece3d4b2cb805ab87c9e07114beab774932e701000000004dc2a70fe4e34b06effbb843b3"], 0x8c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000000b14000225bd7000fcdbdf2508003f00030085d805d20c204b53000008000300040000000800030001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r7, @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0xfffffe2f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r8, 0x4) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.558452][ T6730] R13: 0000000000000000 R14: 00007f137ada5fa0 R15: 00007ffe9a53d858 [ 125.558486][ T6730] [ 125.819269][ T6738] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 125.849487][ T6734] __nla_validate_parse: 11 callbacks suppressed [ 125.849512][ T6734] netlink: 14 bytes leftover after parsing attributes in process `syz.1.231'. [ 125.902082][ T6735] netlink: 'syz.1.231': attribute type 10 has an invalid length. [ 125.917507][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.921920][ T6735] netlink: 2 bytes leftover after parsing attributes in process `syz.1.231'. [ 125.926587][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.964704][ T6735] team0: entered promiscuous mode [ 125.976960][ T6735] team_slave_0: entered promiscuous mode [ 125.982935][ T6735] team_slave_1: entered promiscuous mode [ 125.992381][ T6735] bridge0: port 3(team0) entered blocking state [ 126.019727][ T6735] bridge0: port 3(team0) entered disabled state [ 126.069469][ T6735] team0: entered allmulticast mode [ 126.095034][ T6735] team_slave_0: entered allmulticast mode [ 126.113385][ T6735] team_slave_1: entered allmulticast mode [ 126.124979][ T6735] bridge0: port 3(team0) entered blocking state [ 126.132108][ T6735] bridge0: port 3(team0) entered forwarding state [ 126.601241][ T6747] xt_hashlimit: size too large, truncated to 1048576 [ 126.667193][ T6769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.240'. [ 126.748374][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 126.764351][ T6772] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 126.801371][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 126.840022][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 127.292342][ T6785] trusted_key: syz.2.247 sent an empty control message without MSG_MORE. [ 127.354232][ T6786] FAULT_INJECTION: forcing a failure. [ 127.354232][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 127.392761][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.0.246 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 127.392792][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.392805][ T6786] Call Trace: [ 127.392819][ T6786] [ 127.392828][ T6786] dump_stack_lvl+0x241/0x360 [ 127.392867][ T6786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.392897][ T6786] ? __pfx__printk+0x10/0x10 [ 127.392931][ T6786] ? __pfx___might_resched+0x10/0x10 [ 127.392963][ T6786] should_fail_ex+0x424/0x570 [ 127.392991][ T6786] should_failslab+0xac/0x100 [ 127.393022][ T6786] __kvmalloc_node_noprof+0x170/0x5a0 [ 127.393052][ T6786] ? alloc_netdev_mqs+0xac6/0x1210 [ 127.393093][ T6786] alloc_netdev_mqs+0xac6/0x1210 [ 127.393126][ T6786] rtnl_create_link+0x2f9/0xc90 [ 127.393158][ T6786] rtnl_newlink_create+0x2f2/0xcb0 [ 127.393191][ T6786] ? __mutex_lock+0xbe3/0x10c0 [ 127.393223][ T6786] ? __mutex_lock+0x5f3/0x10c0 [ 127.393249][ T6786] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 127.393285][ T6786] ? __pfx___mutex_lock+0x10/0x10 [ 127.393322][ T6786] ? ns_capable+0x8a/0xf0 [ 127.393347][ T6786] rtnl_newlink+0x18b0/0x1fe0 [ 127.393398][ T6786] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.393424][ T6786] ? dev_hard_start_xmit+0x2d9/0x830 [ 127.393446][ T6786] ? __dev_queue_xmit+0x1b80/0x3f60 [ 127.393467][ T6786] ? __netlink_deliver_tap+0x561/0x7f0 [ 127.393494][ T6786] ? netlink_deliver_tap+0x19d/0x1b0 [ 127.393521][ T6786] ? netlink_unicast+0x7c6/0x9a0 [ 127.393543][ T6786] ? netlink_sendmsg+0x8c3/0xcd0 [ 127.393570][ T6786] ? __sock_sendmsg+0x221/0x270 [ 127.393594][ T6786] ? ____sys_sendmsg+0x523/0x860 [ 127.393613][ T6786] ? __sys_sendmsg+0x271/0x360 [ 127.393631][ T6786] ? do_syscall_64+0xf3/0x230 [ 127.393655][ T6786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.393713][ T6786] ? kasan_quarantine_put+0xdc/0x230 [ 127.393734][ T6786] ? lockdep_hardirqs_on+0x9d/0x150 [ 127.393763][ T6786] ? nlmon_xmit+0xaf/0x100 [ 127.393801][ T6786] ? __local_bh_enable_ip+0x168/0x200 [ 127.393820][ T6786] ? lockdep_hardirqs_on+0x9d/0x150 [ 127.393853][ T6786] ? aa_get_newest_label+0x101/0x6f0 [ 127.393890][ T6786] ? __lock_acquire+0xad5/0xd80 [ 127.393933][ T6786] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.393965][ T6786] rtnetlink_rcv_msg+0x80f/0xd70 [ 127.393991][ T6786] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 127.394026][ T6786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.394072][ T6786] ? ref_tracker_free+0x63e/0x7e0 [ 127.394104][ T6786] netlink_rcv_skb+0x208/0x480 [ 127.394134][ T6786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.394165][ T6786] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.394214][ T6786] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.394247][ T6786] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.394278][ T6786] netlink_unicast+0x7f8/0x9a0 [ 127.394314][ T6786] ? __pfx_netlink_unicast+0x10/0x10 [ 127.394343][ T6786] ? skb_put+0x114/0x1f0 [ 127.394368][ T6786] netlink_sendmsg+0x8c3/0xcd0 [ 127.394412][ T6786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.394447][ T6786] ? aa_sock_msg_perm+0x91/0x160 [ 127.394481][ T6786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.394509][ T6786] __sock_sendmsg+0x221/0x270 [ 127.394540][ T6786] ____sys_sendmsg+0x523/0x860 [ 127.394572][ T6786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.394592][ T6786] ? __fget_files+0x2a/0x420 [ 127.394615][ T6786] ? __fget_files+0x2a/0x420 [ 127.394644][ T6786] __sys_sendmsg+0x271/0x360 [ 127.394672][ T6786] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.394754][ T6786] ? do_syscall_64+0xb6/0x230 [ 127.394783][ T6786] do_syscall_64+0xf3/0x230 [ 127.394809][ T6786] ? clear_bhb_loop+0x45/0xa0 [ 127.394834][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.394853][ T6786] RIP: 0033:0x7f343a58d169 [ 127.394872][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.394889][ T6786] RSP: 002b:00007f343b3d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.394912][ T6786] RAX: ffffffffffffffda RBX: 00007f343a7a5fa0 RCX: 00007f343a58d169 [ 127.394926][ T6786] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 127.394939][ T6786] RBP: 00007f343b3d8090 R08: 0000000000000000 R09: 0000000000000000 [ 127.394952][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.394964][ T6786] R13: 0000000000000000 R14: 00007f343a7a5fa0 R15: 00007ffd52b25f08 [ 127.394997][ T6786] [ 127.420467][ T6781] nbd: must specify an index to disconnect [ 127.546554][ T6787] pim6reg1: entered promiscuous mode [ 127.868549][ T6787] pim6reg1: entered allmulticast mode [ 128.110877][ T6804] bridge_slave_0: left allmulticast mode [ 128.135361][ T6804] bridge_slave_0: left promiscuous mode [ 128.141288][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.195516][ T6804] bridge_slave_1: left allmulticast mode [ 128.202634][ T6804] bridge_slave_1: left promiscuous mode [ 128.224909][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.243031][ T6804] bond0: (slave bond_slave_0): Releasing backup interface [ 128.260618][ T6804] bond0: (slave bond_slave_1): Releasing backup interface [ 128.284555][ T6804] team0: Port device team_slave_0 removed [ 128.301592][ T6804] team0: Port device team_slave_1 removed [ 128.310482][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.318985][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.329257][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.337667][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.402929][ T5894] s9z1: Port: 1 Link DOWN [ 128.402949][ T6819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.254'. [ 128.403576][ T6823] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 128.416823][ T6820] IPVS: stopping master sync thread 6823 ... [ 128.629699][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.256'. [ 128.710758][ T6827] netlink: 44 bytes leftover after parsing attributes in process `syz.4.256'. [ 128.735519][ T6827] netlink: 43 bytes leftover after parsing attributes in process `syz.4.256'. [ 128.744512][ T6827] netlink: 'syz.4.256': attribute type 6 has an invalid length. [ 128.767636][ T6831] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 128.970253][ T6835] openvswitch: netlink: Missing key (keys=40, expected=80) [ 128.998444][ T6835] netlink: 'syz.4.259': attribute type 10 has an invalid length. [ 129.014761][ T6838] FAULT_INJECTION: forcing a failure. [ 129.014761][ T6838] name failslab, interval 1, probability 0, space 0, times 0 [ 129.059671][ T6838] CPU: 0 UID: 0 PID: 6838 Comm: syz.1.260 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 129.059706][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.059719][ T6838] Call Trace: [ 129.059727][ T6838] [ 129.059736][ T6838] dump_stack_lvl+0x241/0x360 [ 129.059776][ T6838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.059808][ T6838] ? __pfx__printk+0x10/0x10 [ 129.059843][ T6838] ? __pfx___might_resched+0x10/0x10 [ 129.059876][ T6838] should_fail_ex+0x424/0x570 [ 129.059913][ T6838] should_failslab+0xac/0x100 [ 129.059945][ T6838] __kmalloc_cache_noprof+0x73/0x370 [ 129.059975][ T6838] ? alloc_netdev_mqs+0xc1a/0x1210 [ 129.059998][ T6838] ? __xdp_rxq_info_reg+0x186/0x290 [ 129.060034][ T6838] alloc_netdev_mqs+0xc1a/0x1210 [ 129.060069][ T6838] rtnl_create_link+0x2f9/0xc90 [ 129.060102][ T6838] rtnl_newlink_create+0x2f2/0xcb0 [ 129.060136][ T6838] ? __mutex_lock+0xbe3/0x10c0 [ 129.060170][ T6838] ? __mutex_lock+0x5f3/0x10c0 [ 129.060196][ T6838] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 129.060233][ T6838] ? __pfx___mutex_lock+0x10/0x10 [ 129.060270][ T6838] ? ns_capable+0x8a/0xf0 [ 129.060297][ T6838] rtnl_newlink+0x18b0/0x1fe0 [ 129.060349][ T6838] ? __pfx_rtnl_newlink+0x10/0x10 [ 129.060375][ T6838] ? dev_hard_start_xmit+0x2d9/0x830 [ 129.060393][ T6838] ? __dev_queue_xmit+0x1b80/0x3f60 [ 129.060415][ T6838] ? __netlink_deliver_tap+0x561/0x7f0 [ 129.060443][ T6838] ? netlink_deliver_tap+0x19d/0x1b0 [ 129.060469][ T6838] ? netlink_unicast+0x7c6/0x9a0 [ 129.060492][ T6838] ? netlink_sendmsg+0x8c3/0xcd0 [ 129.060519][ T6838] ? __sock_sendmsg+0x221/0x270 [ 129.060544][ T6838] ? ____sys_sendmsg+0x523/0x860 [ 129.060563][ T6838] ? __sys_sendmsg+0x271/0x360 [ 129.060582][ T6838] ? do_syscall_64+0xf3/0x230 [ 129.060607][ T6838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.060667][ T6838] ? kasan_quarantine_put+0xdc/0x230 [ 129.060690][ T6838] ? lockdep_hardirqs_on+0x9d/0x150 [ 129.060719][ T6838] ? nlmon_xmit+0xaf/0x100 [ 129.060759][ T6838] ? __local_bh_enable_ip+0x168/0x200 [ 129.060778][ T6838] ? lockdep_hardirqs_on+0x9d/0x150 [ 129.060813][ T6838] ? aa_get_newest_label+0x101/0x6f0 [ 129.060850][ T6838] ? __lock_acquire+0xad5/0xd80 [ 129.060908][ T6838] ? __pfx_rtnl_newlink+0x10/0x10 [ 129.060940][ T6838] rtnetlink_rcv_msg+0x80f/0xd70 [ 129.060968][ T6838] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 129.061003][ T6838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.061041][ T6838] ? ref_tracker_free+0x63e/0x7e0 [ 129.061072][ T6838] netlink_rcv_skb+0x208/0x480 [ 129.061103][ T6838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.061134][ T6838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.061185][ T6838] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.061218][ T6838] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.061250][ T6838] netlink_unicast+0x7f8/0x9a0 [ 129.061287][ T6838] ? __pfx_netlink_unicast+0x10/0x10 [ 129.061316][ T6838] ? skb_put+0x114/0x1f0 [ 129.061342][ T6838] netlink_sendmsg+0x8c3/0xcd0 [ 129.061386][ T6838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.061422][ T6838] ? aa_sock_msg_perm+0x91/0x160 [ 129.061457][ T6838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.061485][ T6838] __sock_sendmsg+0x221/0x270 [ 129.061516][ T6838] ____sys_sendmsg+0x523/0x860 [ 129.061549][ T6838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.061569][ T6838] ? __fget_files+0x2a/0x420 [ 129.061592][ T6838] ? __fget_files+0x2a/0x420 [ 129.061621][ T6838] __sys_sendmsg+0x271/0x360 [ 129.061648][ T6838] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.061729][ T6838] ? do_syscall_64+0xb6/0x230 [ 129.061758][ T6838] do_syscall_64+0xf3/0x230 [ 129.061783][ T6838] ? clear_bhb_loop+0x45/0xa0 [ 129.061807][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.061828][ T6838] RIP: 0033:0x7f848a98d169 [ 129.061846][ T6838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.061863][ T6838] RSP: 002b:00007f848b758038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.061892][ T6838] RAX: ffffffffffffffda RBX: 00007f848aba5fa0 RCX: 00007f848a98d169 [ 129.061907][ T6838] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 129.061921][ T6838] RBP: 00007f848b758090 R08: 0000000000000000 R09: 0000000000000000 [ 129.061934][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.061946][ T6838] R13: 0000000000000000 R14: 00007f848aba5fa0 R15: 00007ffde57d9358 [ 129.061979][ T6838] [ 129.610412][ T6840] netlink: 'syz.2.258': attribute type 9 has an invalid length. [ 129.626534][ T6829] xt_hashlimit: size too large, truncated to 1048576 [ 130.318124][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 130.329164][ T6858] syzkaller1: entered promiscuous mode [ 130.344033][ T6858] syzkaller1: entered allmulticast mode [ 131.191659][ T6889] FAULT_INJECTION: forcing a failure. [ 131.191659][ T6889] name failslab, interval 1, probability 0, space 0, times 0 [ 131.219786][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.4.273 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 131.219819][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.219832][ T6889] Call Trace: [ 131.219840][ T6889] [ 131.219849][ T6889] dump_stack_lvl+0x241/0x360 [ 131.219889][ T6889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.219929][ T6889] ? __pfx__printk+0x10/0x10 [ 131.219964][ T6889] ? __pfx___might_resched+0x10/0x10 [ 131.219996][ T6889] should_fail_ex+0x424/0x570 [ 131.220025][ T6889] should_failslab+0xac/0x100 [ 131.220057][ T6889] __kmalloc_cache_noprof+0x73/0x370 [ 131.220086][ T6889] ? alloc_netdev_mqs+0xc7c/0x1210 [ 131.220116][ T6889] alloc_netdev_mqs+0xc7c/0x1210 [ 131.220150][ T6889] rtnl_create_link+0x2f9/0xc90 [ 131.220183][ T6889] rtnl_newlink_create+0x2f2/0xcb0 [ 131.220217][ T6889] ? __mutex_lock+0xbe3/0x10c0 [ 131.220250][ T6889] ? __mutex_lock+0x5f3/0x10c0 [ 131.220276][ T6889] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 131.220313][ T6889] ? __pfx___mutex_lock+0x10/0x10 [ 131.220350][ T6889] ? ns_capable+0x8a/0xf0 [ 131.220376][ T6889] rtnl_newlink+0x18b0/0x1fe0 [ 131.220427][ T6889] ? __pfx_rtnl_newlink+0x10/0x10 [ 131.220454][ T6889] ? dev_hard_start_xmit+0x2d9/0x830 [ 131.220475][ T6889] ? __dev_queue_xmit+0x1b80/0x3f60 [ 131.220496][ T6889] ? __netlink_deliver_tap+0x561/0x7f0 [ 131.220524][ T6889] ? netlink_deliver_tap+0x19d/0x1b0 [ 131.220551][ T6889] ? netlink_unicast+0x7c6/0x9a0 [ 131.220574][ T6889] ? netlink_sendmsg+0x8c3/0xcd0 [ 131.220602][ T6889] ? __sock_sendmsg+0x221/0x270 [ 131.220626][ T6889] ? ____sys_sendmsg+0x523/0x860 [ 131.220645][ T6889] ? __sys_sendmsg+0x271/0x360 [ 131.220664][ T6889] ? do_syscall_64+0xf3/0x230 [ 131.220689][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.220750][ T6889] ? kasan_quarantine_put+0xdc/0x230 [ 131.220771][ T6889] ? lockdep_hardirqs_on+0x9d/0x150 [ 131.220800][ T6889] ? nlmon_xmit+0xaf/0x100 [ 131.220838][ T6889] ? __local_bh_enable_ip+0x168/0x200 [ 131.220858][ T6889] ? lockdep_hardirqs_on+0x9d/0x150 [ 131.220892][ T6889] ? aa_get_newest_label+0x101/0x6f0 [ 131.220936][ T6889] ? __lock_acquire+0xad5/0xd80 [ 131.220983][ T6889] ? __pfx_rtnl_newlink+0x10/0x10 [ 131.221015][ T6889] rtnetlink_rcv_msg+0x80f/0xd70 [ 131.221042][ T6889] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 131.221077][ T6889] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.221116][ T6889] ? ref_tracker_free+0x63e/0x7e0 [ 131.221147][ T6889] netlink_rcv_skb+0x208/0x480 [ 131.221178][ T6889] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.221210][ T6889] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.221260][ T6889] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.221292][ T6889] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.221324][ T6889] netlink_unicast+0x7f8/0x9a0 [ 131.221361][ T6889] ? __pfx_netlink_unicast+0x10/0x10 [ 131.221391][ T6889] ? skb_put+0x114/0x1f0 [ 131.221416][ T6889] netlink_sendmsg+0x8c3/0xcd0 [ 131.221460][ T6889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.221496][ T6889] ? aa_sock_msg_perm+0x91/0x160 [ 131.221531][ T6889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.221559][ T6889] __sock_sendmsg+0x221/0x270 [ 131.221590][ T6889] ____sys_sendmsg+0x523/0x860 [ 131.221623][ T6889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.221643][ T6889] ? __fget_files+0x2a/0x420 [ 131.221666][ T6889] ? __fget_files+0x2a/0x420 [ 131.221697][ T6889] __sys_sendmsg+0x271/0x360 [ 131.221726][ T6889] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.221809][ T6889] ? do_syscall_64+0xb6/0x230 [ 131.221839][ T6889] do_syscall_64+0xf3/0x230 [ 131.221865][ T6889] ? clear_bhb_loop+0x45/0xa0 [ 131.221890][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.221910][ T6889] RIP: 0033:0x7f207c18d169 [ 131.221935][ T6889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.221952][ T6889] RSP: 002b:00007f207cf7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.221976][ T6889] RAX: ffffffffffffffda RBX: 00007f207c3a5fa0 RCX: 00007f207c18d169 [ 131.221991][ T6889] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 131.222004][ T6889] RBP: 00007f207cf7f090 R08: 0000000000000000 R09: 0000000000000000 [ 131.222017][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.222030][ T6889] R13: 0000000000000000 R14: 00007f207c3a5fa0 R15: 00007ffd2c430328 [ 131.222063][ T6889] [ 131.226747][ T6888] openvswitch: netlink: Flow key attribute not present in set flow. [ 131.867003][ T6900] Cannot find del_set index 1 as target [ 131.897458][ T6902] Dead loop on virtual device ipvlan1, fix it urgently! [ 132.819896][ T6902] syz.2.278 (6902) used greatest stack depth: 6640 bytes left [ 132.879678][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.886692][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.915545][ T6917] xt_TCPMSS: Only works on TCP SYN packets [ 132.965862][ T6910] xt_hashlimit: size too large, truncated to 1048576 [ 133.156681][ T6923] __nla_validate_parse: 4 callbacks suppressed [ 133.156707][ T6923] netlink: 104 bytes leftover after parsing attributes in process `syz.2.284'. [ 133.412785][ T6926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.285'. [ 133.938320][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.290'. [ 133.952366][ T6939] netlink: 68 bytes leftover after parsing attributes in process `syz.0.290'. [ 133.961801][ T6939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.290'. [ 133.971326][ T6939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.290'. [ 133.980528][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 133.980611][ T6943] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 134.001240][ T6942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'. [ 134.100415][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 134.183967][ T6946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.435301][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 134.457119][ T6951] netlink: 'syz.1.293': attribute type 1 has an invalid length. [ 134.526869][ T6946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.890019][ T6963] netlink: 'syz.0.299': attribute type 5 has an invalid length. [ 135.067904][ T6946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.492095][ T6946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.763904][ T6983] sctp: [Deprecated]: syz.1.304 (pid 6983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.763904][ T6983] Use struct sctp_sack_info instead [ 135.804394][ T6983] sctp: [Deprecated]: syz.1.304 (pid 6983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.804394][ T6983] Use struct sctp_sack_info instead [ 135.808251][ T6946] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.840954][ T6983] tc_dump_action: action bad kind [ 135.841648][ T6985] xt_TCPMSS: Only works on TCP SYN packets [ 135.911399][ T6946] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.970075][ T6946] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.037238][ T6946] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.062038][ T6989] rdma_op ffff888021f9a9f0 conn xmit_rdma 0000000000000000 [ 136.131221][ T6973] xt_hashlimit: size too large, truncated to 1048576 [ 136.854400][ T7028] xt_TCPMSS: Only works on TCP SYN packets [ 137.391991][ T7052] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 137.882186][ T7068] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 138.358784][ T7088] __nla_validate_parse: 11 callbacks suppressed [ 138.358806][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 138.584731][ T7098] netlink: 'syz.2.335': attribute type 3 has an invalid length. [ 138.616305][ T7097] xt_TCPMSS: Only works on TCP SYN packets [ 138.740409][ T7106] netlink: 100 bytes leftover after parsing attributes in process `syz.4.343'. [ 138.820691][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 138.977405][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.346'. [ 139.017601][ T7121] FAULT_INJECTION: forcing a failure. [ 139.017601][ T7121] name failslab, interval 1, probability 0, space 0, times 0 [ 139.031117][ T7121] CPU: 0 UID: 0 PID: 7121 Comm: syz.3.348 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 139.031148][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.031161][ T7121] Call Trace: [ 139.031169][ T7121] [ 139.031177][ T7121] dump_stack_lvl+0x241/0x360 [ 139.031226][ T7121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.031257][ T7121] ? __pfx__printk+0x10/0x10 [ 139.031292][ T7121] ? ref_tracker_alloc+0x316/0x4c0 [ 139.031320][ T7121] should_fail_ex+0x424/0x570 [ 139.031347][ T7121] should_failslab+0xac/0x100 [ 139.031379][ T7121] kmem_cache_alloc_noprof+0x78/0x390 [ 139.031408][ T7121] ? skb_clone+0x20c/0x390 [ 139.031437][ T7121] skb_clone+0x20c/0x390 [ 139.031465][ T7121] __netlink_deliver_tap+0x3c4/0x7f0 [ 139.031508][ T7121] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.031535][ T7121] netlink_deliver_tap+0x19d/0x1b0 [ 139.031567][ T7121] netlink_sendskb+0x68/0x140 [ 139.031595][ T7121] netlink_unicast+0x39f/0x9a0 [ 139.031618][ T7121] ? __asan_memcpy+0x40/0x70 [ 139.031648][ T7121] ? __pfx_netlink_unicast+0x10/0x10 [ 139.031681][ T7121] netlink_rcv_skb+0x296/0x480 [ 139.031707][ T7121] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.031735][ T7121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.031787][ T7121] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.031819][ T7121] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.031848][ T7121] netlink_unicast+0x7f8/0x9a0 [ 139.031885][ T7121] ? __pfx_netlink_unicast+0x10/0x10 [ 139.031914][ T7121] ? skb_put+0x114/0x1f0 [ 139.031936][ T7121] netlink_sendmsg+0x8c3/0xcd0 [ 139.031975][ T7121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.032005][ T7121] ? aa_sock_msg_perm+0x91/0x160 [ 139.032036][ T7121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.032059][ T7121] __sock_sendmsg+0x221/0x270 [ 139.032086][ T7121] ____sys_sendmsg+0x523/0x860 [ 139.032115][ T7121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.032132][ T7121] ? __fget_files+0x2a/0x420 [ 139.032154][ T7121] ? __fget_files+0x2a/0x420 [ 139.032184][ T7121] __sys_sendmsg+0x271/0x360 [ 139.032211][ T7121] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.032296][ T7121] ? do_syscall_64+0xb6/0x230 [ 139.032323][ T7121] do_syscall_64+0xf3/0x230 [ 139.032346][ T7121] ? clear_bhb_loop+0x45/0xa0 [ 139.032368][ T7121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.032385][ T7121] RIP: 0033:0x7f137ab8d169 [ 139.032402][ T7121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.032417][ T7121] RSP: 002b:00007f137bad3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.032438][ T7121] RAX: ffffffffffffffda RBX: 00007f137ada5fa0 RCX: 00007f137ab8d169 [ 139.032451][ T7121] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 139.032463][ T7121] RBP: 00007f137bad3090 R08: 0000000000000000 R09: 0000000000000000 [ 139.032474][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.032485][ T7121] R13: 0000000000000000 R14: 00007f137ada5fa0 R15: 00007ffe9a53d858 [ 139.032514][ T7121] [ 139.035635][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 139.231289][ T7124] netlink: 'syz.3.349': attribute type 9 has an invalid length. [ 139.481841][ T7131] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 139.521644][ T7133] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 139.578788][ T7125] netlink: 'syz.4.350': attribute type 3 has an invalid length. [ 139.766491][ T7145] tipc: Enabling of bearer rejected, failed to enable media [ 140.123182][ T7162] netlink: 'syz.3.355': attribute type 3 has an invalid length. [ 140.174338][ T7164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'. [ 140.324999][ T7168] vlan3: entered allmulticast mode [ 140.334620][ T7168] veth0_to_batadv: entered allmulticast mode [ 140.363406][ T7168] bridge0: port 2(vlan3) entered blocking state [ 140.371853][ T7168] bridge0: port 2(vlan3) entered disabled state [ 140.381960][ T7168] vlan3: entered promiscuous mode [ 140.387759][ T7168] veth0_to_batadv: entered promiscuous mode [ 140.394559][ T7168] vlan2: entered promiscuous mode [ 140.406297][ T7168] bond0: entered promiscuous mode [ 140.421520][ T7168] bridge0: port 2(vlan3) entered blocking state [ 140.428129][ T7168] bridge0: port 2(vlan3) entered forwarding state [ 140.436272][ T7170] FAULT_INJECTION: forcing a failure. [ 140.436272][ T7170] name failslab, interval 1, probability 0, space 0, times 0 [ 140.451543][ T7170] CPU: 0 UID: 0 PID: 7170 Comm: syz.0.359 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 140.451574][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.451586][ T7170] Call Trace: [ 140.451593][ T7170] [ 140.451601][ T7170] dump_stack_lvl+0x241/0x360 [ 140.451638][ T7170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.451668][ T7170] ? __pfx__printk+0x10/0x10 [ 140.451704][ T7170] ? ref_tracker_alloc+0x316/0x4c0 [ 140.451732][ T7170] should_fail_ex+0x424/0x570 [ 140.451757][ T7170] should_failslab+0xac/0x100 [ 140.451784][ T7170] kmem_cache_alloc_noprof+0x78/0x390 [ 140.451810][ T7170] ? skb_clone+0x20c/0x390 [ 140.451838][ T7170] skb_clone+0x20c/0x390 [ 140.451876][ T7170] __netlink_deliver_tap+0x3c4/0x7f0 [ 140.451919][ T7170] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.451945][ T7170] netlink_deliver_tap+0x19d/0x1b0 [ 140.451976][ T7170] netlink_sendskb+0x68/0x140 [ 140.452004][ T7170] netlink_unicast+0x39f/0x9a0 [ 140.452028][ T7170] ? __asan_memcpy+0x40/0x70 [ 140.452059][ T7170] ? __pfx_netlink_unicast+0x10/0x10 [ 140.452097][ T7170] netlink_rcv_skb+0x296/0x480 [ 140.452128][ T7170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.452161][ T7170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.452208][ T7170] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.452240][ T7170] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.452272][ T7170] netlink_unicast+0x7f8/0x9a0 [ 140.452309][ T7170] ? __pfx_netlink_unicast+0x10/0x10 [ 140.452339][ T7170] ? skb_put+0x114/0x1f0 [ 140.452364][ T7170] netlink_sendmsg+0x8c3/0xcd0 [ 140.452408][ T7170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.452443][ T7170] ? aa_sock_msg_perm+0x91/0x160 [ 140.452479][ T7170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.452506][ T7170] __sock_sendmsg+0x221/0x270 [ 140.452538][ T7170] ____sys_sendmsg+0x523/0x860 [ 140.452571][ T7170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.452591][ T7170] ? __fget_files+0x2a/0x420 [ 140.452614][ T7170] ? __fget_files+0x2a/0x420 [ 140.452644][ T7170] __sys_sendmsg+0x271/0x360 [ 140.452672][ T7170] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.452754][ T7170] ? do_syscall_64+0xb6/0x230 [ 140.452785][ T7170] do_syscall_64+0xf3/0x230 [ 140.452812][ T7170] ? clear_bhb_loop+0x45/0xa0 [ 140.452838][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.452857][ T7170] RIP: 0033:0x7f343a58d169 [ 140.452882][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.452897][ T7170] RSP: 002b:00007f343b3d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.452917][ T7170] RAX: ffffffffffffffda RBX: 00007f343a7a5fa0 RCX: 00007f343a58d169 [ 140.452930][ T7170] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 140.452941][ T7170] RBP: 00007f343b3d8090 R08: 0000000000000000 R09: 0000000000000000 [ 140.452952][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.452962][ T7170] R13: 0000000000000000 R14: 00007f343a7a5fa0 R15: 00007ffd52b25f08 [ 140.452991][ T7170] [ 140.754833][ T7173] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 140.769248][ T7174] IPVS: stopping master sync thread 7173 ... [ 141.066134][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 141.459778][ T7203] syzkaller1: entered promiscuous mode [ 141.465693][ T7203] syzkaller1: entered allmulticast mode [ 141.781098][ T7218] netlink: 5 bytes leftover after parsing attributes in process `syz.1.373'. [ 141.836176][ T7220] netlink: 165 bytes leftover after parsing attributes in process `syz.1.373'. [ 141.942458][ T7218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.049273][ T7223] netlink: 'syz.2.372': attribute type 3 has an invalid length. [ 142.058916][ T7227] netlink: 'syz.0.374': attribute type 30 has an invalid length. [ 142.126956][ T7227] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.136403][ T7227] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.145497][ T7227] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.154229][ T7227] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.321840][ T7227] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.331887][ T7227] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.342051][ T7227] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.352201][ T7227] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.723282][ T7248] netlink: 428 bytes leftover after parsing attributes in process `syz.4.381'. [ 142.735382][ T7254] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 142.735805][ T7250] IPVS: stopping master sync thread 7254 ... [ 142.765480][ T7253] netlink: 'syz.2.382': attribute type 3 has an invalid length. [ 142.774555][ T7248] netlink: 104 bytes leftover after parsing attributes in process `syz.4.381'. [ 143.614023][ T7296] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 3, id = 0 [ 143.783578][ T7301] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 143.785622][ T7298] IPVS: stopping master sync thread 7301 ... [ 143.929209][ T7308] __nla_validate_parse: 5 callbacks suppressed [ 143.929232][ T7308] netlink: 104 bytes leftover after parsing attributes in process `syz.1.399'. [ 144.267587][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 144.823981][ T7347] netlink: 52 bytes leftover after parsing attributes in process `syz.3.408'. [ 144.912267][ T7350] IPVS: stopping master sync thread 7296 ... [ 144.972765][ T7354] netlink: 104 bytes leftover after parsing attributes in process `syz.2.411'. [ 144.996410][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 145.010153][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.413'. [ 145.051615][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 145.082648][ T7359] netlink: 6 bytes leftover after parsing attributes in process `syz.4.412'. [ 146.463176][ T7402] netlink: 100 bytes leftover after parsing attributes in process `syz.3.423'. [ 146.505038][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 146.536086][ T7404] netlink: 'syz.4.425': attribute type 14 has an invalid length. [ 146.560940][ T7404] bond0: option xmit_hash_policy: invalid value (8) [ 146.874877][ T7418] IPVS: stopping master sync thread 7423 ... [ 146.888099][ T7423] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 147.742663][ T7463] netlink: 'syz.0.437': attribute type 3 has an invalid length. [ 147.764360][ T7464] unsupported nlmsg_type 40 [ 147.796883][ T7464] Bluetooth: MGMT ver 1.23 [ 148.726013][ T7488] IPVS: stopping master sync thread 7490 ... [ 148.735812][ T7490] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 149.005976][ T7487] __nla_validate_parse: 5 callbacks suppressed [ 149.005999][ T7487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.447'. [ 149.033245][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 149.268390][ T7510] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000 [ 149.615418][ T7535] batadv_slave_0: entered promiscuous mode [ 149.633479][ T7534] batadv_slave_0: left promiscuous mode [ 149.942490][ T7558] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 149.956349][ T7550] IPVS: stopping master sync thread 7558 ... [ 150.233588][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.469'. [ 150.442180][ T7584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.579052][ T7593] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 151.072645][ T7602] macsec1: entered promiscuous mode [ 151.080564][ T7602] macsec1: entered allmulticast mode [ 151.094536][ T7602] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 151.114119][ T7602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.479'. [ 151.116495][ T7604] tipc: Started in network mode [ 151.129289][ T7604] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 151.152662][ T7604] tipc: Enabling of bearer rejected, failed to enable media [ 151.367540][ T7604] bridge0: port 2(vlan3) entered disabled state [ 151.566896][ T7613] xt_connbytes: Forcing CT accounting to be enabled [ 151.592333][ T7613] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 151.730192][ T7604] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.749126][ T7604] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.768973][ T7604] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.777817][ T7604] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.902186][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 152.098691][ T7631] xt_hashlimit: size too large, truncated to 1048576 [ 152.297233][ T7644] bond1: entered promiscuous mode [ 152.302339][ T7644] bond1: entered allmulticast mode [ 152.308152][ T7644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.340425][ T7647] xt_TCPMSS: Only works on TCP SYN packets [ 152.547903][ T7654] bridge0: entered promiscuous mode [ 152.563833][ T7654] macvlan2: entered promiscuous mode [ 152.597611][ T7654] bridge0: port 3(macvlan2) entered blocking state [ 152.609827][ T7654] bridge0: port 3(macvlan2) entered disabled state [ 152.634675][ T7654] macvlan2: entered allmulticast mode [ 152.641427][ T7654] bridge0: entered allmulticast mode [ 152.680751][ T7654] macvlan2: left allmulticast mode [ 152.693544][ T7654] bridge0: left allmulticast mode [ 152.699985][ T7654] bridge0: left promiscuous mode [ 152.929200][ T7665] bpq0: entered promiscuous mode [ 152.934529][ T7665] bpq0: entered allmulticast mode [ 153.193071][ T7677] netlink: 'syz.4.501': attribute type 4 has an invalid length. [ 153.785951][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'. [ 154.320139][ T7745] netlink: 'syz.3.520': attribute type 10 has an invalid length. [ 154.344299][ T7740] xt_hashlimit: size too large, truncated to 1048576 [ 154.349764][ T7747] Bluetooth: MGMT ver 1.23 [ 154.380598][ T7745] team0: Port device dummy0 added [ 154.522151][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.521'. [ 154.567618][ T7745] team0: Port device dummy0 removed [ 154.588197][ T7745] bridge_slave_0: left allmulticast mode [ 154.593954][ T7745] bridge_slave_0: left promiscuous mode [ 154.608541][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.632163][ T7745] bridge_slave_1: left allmulticast mode [ 154.642727][ T7745] bridge_slave_1: left promiscuous mode [ 154.664091][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.700904][ T7745] bond0: (slave bond_slave_0): Releasing backup interface [ 154.719979][ T7745] bond0: (slave bond_slave_1): Releasing backup interface [ 154.760149][ T7745] team0: Port device team_slave_0 removed [ 154.778978][ T7745] team0: Port device team_slave_1 removed [ 154.796764][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.820119][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.861676][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.882511][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.913329][ T7745] bond0: (slave wlan1): Releasing backup interface [ 155.332248][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 155.503429][ T7789] netlink: 48 bytes leftover after parsing attributes in process `syz.3.530'. [ 155.742371][ T7800] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 155.842717][ T7800] : entered promiscuous mode [ 156.063329][ T7812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.078491][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 156.324983][ T7824] netlink: 60 bytes leftover after parsing attributes in process `syz.0.544'. [ 156.561956][ T7836] netlink: 104 bytes leftover after parsing attributes in process `syz.1.547'. [ 156.565233][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. [ 156.690100][ T7816] xt_hashlimit: size too large, truncated to 1048576 [ 156.694487][ T7834] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.083277][ T7856] wireguard0: entered promiscuous mode [ 157.103376][ T7856] wireguard0: entered allmulticast mode [ 157.594797][ T7876] netlink: 'syz.1.558': attribute type 10 has an invalid length. [ 157.643478][ T7876] team0: Device ipvlan1 failed to register rx_handler [ 157.810428][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 157.845610][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.562'. [ 158.143687][ T7901] xt_TCPMSS: Only works on TCP SYN packets [ 158.450514][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 159.044199][ T7908] xt_hashlimit: size too large, truncated to 1048576 [ 159.549512][ T7935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.578'. [ 159.665479][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 160.634907][ T7971] tipc: Started in network mode [ 160.670987][ T7971] tipc: Node identity 7, cluster identity 4711 [ 160.695570][ T7971] tipc: Node number set to 7 [ 161.096043][ T7969] xt_hashlimit: size too large, truncated to 1048576 [ 161.181776][ T7983] netlink: 32 bytes leftover after parsing attributes in process `syz.3.596'. [ 161.218976][ T7983] netlink: 44 bytes leftover after parsing attributes in process `syz.3.596'. [ 161.277385][ T7983] netlink: 44 bytes leftover after parsing attributes in process `syz.3.596'. [ 162.204827][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 162.226000][ T8011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.603'. [ 162.984779][ T8037] xt_hashlimit: size too large, truncated to 1048576 [ 163.282563][ T8053] bridge0: entered promiscuous mode [ 163.298266][ T8053] macvlan2: entered promiscuous mode [ 163.315799][ T8053] bridge0: port 4(macvlan2) entered blocking state [ 163.352982][ T8053] bridge0: port 4(macvlan2) entered disabled state [ 163.386631][ T8053] macvlan2: entered allmulticast mode [ 163.392347][ T8053] bridge0: entered allmulticast mode [ 163.451797][ T8053] macvlan2: left allmulticast mode [ 163.471824][ T8059] netlink: 'syz.4.622': attribute type 9 has an invalid length. [ 163.474562][ T8053] bridge0: left allmulticast mode [ 163.487600][ T8059] netlink: 'syz.4.622': attribute type 6 has an invalid length. [ 163.527646][ T8053] bridge0: left promiscuous mode [ 163.826397][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'. [ 163.957919][ T8073] FAULT_INJECTION: forcing a failure. [ 163.957919][ T8073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.987329][ T8073] CPU: 0 UID: 0 PID: 8073 Comm: syz.1.628 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 163.987364][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.987378][ T8073] Call Trace: [ 163.987386][ T8073] [ 163.987394][ T8073] dump_stack_lvl+0x241/0x360 [ 163.987436][ T8073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.987466][ T8073] ? __pfx__printk+0x10/0x10 [ 163.987510][ T8073] should_fail_ex+0x424/0x570 [ 163.987538][ T8073] _copy_from_user+0x2d/0xb0 [ 163.987569][ T8073] copy_msghdr_from_user+0xb3/0x580 [ 163.987605][ T8073] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 163.987630][ T8073] ? __fget_files+0x2a/0x420 [ 163.987653][ T8073] ? __fget_files+0x2a/0x420 [ 163.987682][ T8073] __sys_sendmsg+0x20a/0x360 [ 163.987711][ T8073] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.987786][ T8073] ? do_syscall_64+0xb6/0x230 [ 163.987815][ T8073] do_syscall_64+0xf3/0x230 [ 163.987840][ T8073] ? clear_bhb_loop+0x45/0xa0 [ 163.987863][ T8073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.987882][ T8073] RIP: 0033:0x7f848a98d169 [ 163.987901][ T8073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.987917][ T8073] RSP: 002b:00007f848b758038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.987941][ T8073] RAX: ffffffffffffffda RBX: 00007f848aba5fa0 RCX: 00007f848a98d169 [ 163.987956][ T8073] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 163.987969][ T8073] RBP: 00007f848b758090 R08: 0000000000000000 R09: 0000000000000000 [ 163.987982][ T8073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.987994][ T8073] R13: 0000000000000000 R14: 00007f848aba5fa0 R15: 00007ffde57d9358 [ 163.988025][ T8073] [ 164.323257][ T8079] netlink: 144 bytes leftover after parsing attributes in process `syz.3.629'. [ 164.370587][ T8082] bridge0: entered promiscuous mode [ 164.377947][ T8082] macvlan2: entered promiscuous mode [ 164.423982][ T8082] bridge0: port 4(macvlan2) entered blocking state [ 164.463983][ T8082] bridge0: port 4(macvlan2) entered disabled state [ 164.488120][ T8082] macvlan2: entered allmulticast mode [ 164.493744][ T8082] bridge0: entered allmulticast mode [ 164.510727][ T8082] macvlan2: left allmulticast mode [ 164.522069][ T8082] bridge0: left allmulticast mode [ 164.533432][ T8082] bridge0: left promiscuous mode [ 164.582088][ T8091] netlink: 'syz.1.631': attribute type 10 has an invalid length. [ 164.649411][ T8095] macvlan2: entered promiscuous mode [ 164.661138][ T8095] bridge0: entered promiscuous mode [ 164.669307][ T8095] bridge0: port 1(macvlan2) entered blocking state [ 164.678358][ T8095] bridge0: port 1(macvlan2) entered disabled state [ 164.687448][ T8095] macvlan2: entered allmulticast mode [ 164.693470][ T8095] bridge0: entered allmulticast mode [ 164.707813][ T8095] macvlan2: left allmulticast mode [ 164.713123][ T8095] bridge0: left allmulticast mode [ 164.730301][ T8095] bridge0: left promiscuous mode [ 164.875475][ T8106] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 164.963420][ T8109] FAULT_INJECTION: forcing a failure. [ 164.963420][ T8109] name failslab, interval 1, probability 0, space 0, times 0 [ 164.993847][ T8109] CPU: 0 UID: 0 PID: 8109 Comm: syz.3.642 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 164.993880][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.993893][ T8109] Call Trace: [ 164.993901][ T8109] [ 164.993909][ T8109] dump_stack_lvl+0x241/0x360 [ 164.993958][ T8109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.993989][ T8109] ? __pfx__printk+0x10/0x10 [ 164.994023][ T8109] ? __pfx___might_resched+0x10/0x10 [ 164.994054][ T8109] should_fail_ex+0x424/0x570 [ 164.994081][ T8109] should_failslab+0xac/0x100 [ 164.994113][ T8109] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 164.994143][ T8109] ? __alloc_skb+0x1c2/0x480 [ 164.994168][ T8109] __alloc_skb+0x1c2/0x480 [ 164.994193][ T8109] ? __pfx___alloc_skb+0x10/0x10 [ 164.994216][ T8109] ? netlink_autobind+0xd6/0x2f0 [ 164.994243][ T8109] ? netlink_autobind+0x2b0/0x2f0 [ 164.994278][ T8109] netlink_sendmsg+0x638/0xcd0 [ 164.994321][ T8109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.994356][ T8109] ? aa_sock_msg_perm+0x91/0x160 [ 164.994393][ T8109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.994420][ T8109] __sock_sendmsg+0x221/0x270 [ 164.994452][ T8109] ____sys_sendmsg+0x523/0x860 [ 164.994483][ T8109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.994503][ T8109] ? __fget_files+0x2a/0x420 [ 164.994526][ T8109] ? __fget_files+0x2a/0x420 [ 164.994555][ T8109] __sys_sendmsg+0x271/0x360 [ 164.994584][ T8109] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.994665][ T8109] ? do_syscall_64+0xb6/0x230 [ 164.994696][ T8109] do_syscall_64+0xf3/0x230 [ 164.994722][ T8109] ? clear_bhb_loop+0x45/0xa0 [ 164.994747][ T8109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.994767][ T8109] RIP: 0033:0x7f137ab8d169 [ 164.994786][ T8109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.994803][ T8109] RSP: 002b:00007f137bad3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.994826][ T8109] RAX: ffffffffffffffda RBX: 00007f137ada5fa0 RCX: 00007f137ab8d169 [ 164.994842][ T8109] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 164.994855][ T8109] RBP: 00007f137bad3090 R08: 0000000000000000 R09: 0000000000000000 [ 164.994868][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.994880][ T8109] R13: 0000000000000000 R14: 00007f137ada5fa0 R15: 00007ffe9a53d858 [ 164.994912][ T8109] [ 165.300394][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.645'. [ 165.539836][ T8130] FAULT_INJECTION: forcing a failure. [ 165.539836][ T8130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.586760][ T8130] CPU: 0 UID: 0 PID: 8130 Comm: syz.1.651 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 165.586792][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.586804][ T8130] Call Trace: [ 165.586812][ T8130] [ 165.586820][ T8130] dump_stack_lvl+0x241/0x360 [ 165.586860][ T8130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.586897][ T8130] ? __pfx__printk+0x10/0x10 [ 165.586941][ T8130] should_fail_ex+0x424/0x570 [ 165.586969][ T8130] _copy_from_iter+0x211/0x1c70 [ 165.587003][ T8130] ? __build_skb_around+0x247/0x3d0 [ 165.587041][ T8130] ? __alloc_skb+0x298/0x480 [ 165.587059][ T8130] ? __pfx__copy_from_iter+0x10/0x10 [ 165.587090][ T8130] ? __pfx___alloc_skb+0x10/0x10 [ 165.587116][ T8130] ? skb_put+0x114/0x1f0 [ 165.587141][ T8130] netlink_sendmsg+0x73c/0xcd0 [ 165.587185][ T8130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.587219][ T8130] ? aa_sock_msg_perm+0x91/0x160 [ 165.587254][ T8130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.587281][ T8130] __sock_sendmsg+0x221/0x270 [ 165.587313][ T8130] ____sys_sendmsg+0x523/0x860 [ 165.587345][ T8130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.587364][ T8130] ? __fget_files+0x2a/0x420 [ 165.587387][ T8130] ? __fget_files+0x2a/0x420 [ 165.587416][ T8130] __sys_sendmsg+0x271/0x360 [ 165.587445][ T8130] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.587525][ T8130] ? do_syscall_64+0xb6/0x230 [ 165.587555][ T8130] do_syscall_64+0xf3/0x230 [ 165.587580][ T8130] ? clear_bhb_loop+0x45/0xa0 [ 165.587606][ T8130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.587626][ T8130] RIP: 0033:0x7f848a98d169 [ 165.587644][ T8130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.587661][ T8130] RSP: 002b:00007f848b758038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.587684][ T8130] RAX: ffffffffffffffda RBX: 00007f848aba5fa0 RCX: 00007f848a98d169 [ 165.587699][ T8130] RDX: 00000000000440c0 RSI: 00002000000001c0 RDI: 0000000000000003 [ 165.587713][ T8130] RBP: 00007f848b758090 R08: 0000000000000000 R09: 0000000000000000 [ 165.587726][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.587738][ T8130] R13: 0000000000000000 R14: 00007f848aba5fa0 R15: 00007ffde57d9358 [ 165.587770][ T8130] [ 166.970110][ T8174] FAULT_INJECTION: forcing a failure. [ 166.970110][ T8174] name failslab, interval 1, probability 0, space 0, times 0 [ 167.011459][ T8174] CPU: 0 UID: 0 PID: 8174 Comm: syz.0.664 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 167.011491][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.011502][ T8174] Call Trace: [ 167.011511][ T8174] [ 167.011519][ T8174] dump_stack_lvl+0x241/0x360 [ 167.011557][ T8174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.011586][ T8174] ? __pfx__printk+0x10/0x10 [ 167.011613][ T8174] ? __lock_acquire+0xad5/0xd80 [ 167.011647][ T8174] should_fail_ex+0x424/0x570 [ 167.011675][ T8174] should_failslab+0xac/0x100 [ 167.011707][ T8174] kmem_cache_alloc_noprof+0x78/0x390 [ 167.011735][ T8174] ? skb_clone+0x20c/0x390 [ 167.011764][ T8174] skb_clone+0x20c/0x390 [ 167.011799][ T8174] __netlink_deliver_tap+0x3c4/0x7f0 [ 167.011842][ T8174] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.011870][ T8174] netlink_deliver_tap+0x19d/0x1b0 [ 167.011901][ T8174] netlink_unicast+0x7c6/0x9a0 [ 167.011938][ T8174] ? __pfx_netlink_unicast+0x10/0x10 [ 167.011967][ T8174] ? skb_put+0x114/0x1f0 [ 167.011993][ T8174] netlink_sendmsg+0x8c3/0xcd0 [ 167.012037][ T8174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.012071][ T8174] ? aa_sock_msg_perm+0x91/0x160 [ 167.012107][ T8174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.012135][ T8174] __sock_sendmsg+0x221/0x270 [ 167.012166][ T8174] ____sys_sendmsg+0x523/0x860 [ 167.012199][ T8174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.012219][ T8174] ? __fget_files+0x2a/0x420 [ 167.012242][ T8174] ? __fget_files+0x2a/0x420 [ 167.012272][ T8174] __sys_sendmsg+0x271/0x360 [ 167.012300][ T8174] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.012384][ T8174] ? do_syscall_64+0xb6/0x230 [ 167.012414][ T8174] do_syscall_64+0xf3/0x230 [ 167.012439][ T8174] ? clear_bhb_loop+0x45/0xa0 [ 167.012464][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.012484][ T8174] RIP: 0033:0x7f343a58d169 [ 167.012503][ T8174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.012520][ T8174] RSP: 002b:00007f343b3d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.012544][ T8174] RAX: ffffffffffffffda RBX: 00007f343a7a5fa0 RCX: 00007f343a58d169 [ 167.012559][ T8174] RDX: 00000000000440c0 RSI: 00002000000001c0 RDI: 0000000000000003 [ 167.012572][ T8174] RBP: 00007f343b3d8090 R08: 0000000000000000 R09: 0000000000000000 [ 167.012585][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.012598][ T8174] R13: 0000000000000000 R14: 00007f343a7a5fa0 R15: 00007ffd52b25f08 [ 167.012630][ T8174] [ 167.488109][ T8187] FAULT_INJECTION: forcing a failure. [ 167.488109][ T8187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.501922][ T8187] CPU: 0 UID: 0 PID: 8187 Comm: syz.2.671 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 167.501952][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.501965][ T8187] Call Trace: [ 167.501973][ T8187] [ 167.501980][ T8187] dump_stack_lvl+0x241/0x360 [ 167.502019][ T8187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.502050][ T8187] ? __pfx__printk+0x10/0x10 [ 167.502091][ T8187] should_fail_ex+0x424/0x570 [ 167.502118][ T8187] _copy_from_iter+0x211/0x1c70 [ 167.502151][ T8187] ? __build_skb_around+0x247/0x3d0 [ 167.502187][ T8187] ? __alloc_skb+0x298/0x480 [ 167.502204][ T8187] ? __pfx__copy_from_iter+0x10/0x10 [ 167.502235][ T8187] ? __pfx___alloc_skb+0x10/0x10 [ 167.502257][ T8187] ? skb_put+0x114/0x1f0 [ 167.502282][ T8187] netlink_sendmsg+0x73c/0xcd0 [ 167.502327][ T8187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.502362][ T8187] ? aa_sock_msg_perm+0x91/0x160 [ 167.502396][ T8187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.502424][ T8187] __sock_sendmsg+0x221/0x270 [ 167.502479][ T8187] ____sys_sendmsg+0x523/0x860 [ 167.502518][ T8187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.502538][ T8187] ? __fget_files+0x2a/0x420 [ 167.502561][ T8187] ? __fget_files+0x2a/0x420 [ 167.502590][ T8187] __sys_sendmsg+0x271/0x360 [ 167.502616][ T8187] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.502693][ T8187] ? do_syscall_64+0xb6/0x230 [ 167.502721][ T8187] do_syscall_64+0xf3/0x230 [ 167.502746][ T8187] ? clear_bhb_loop+0x45/0xa0 [ 167.502770][ T8187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.502789][ T8187] RIP: 0033:0x7fc02f98d169 [ 167.502807][ T8187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.502824][ T8187] RSP: 002b:00007fc0307de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.502846][ T8187] RAX: ffffffffffffffda RBX: 00007fc02fba5fa0 RCX: 00007fc02f98d169 [ 167.502862][ T8187] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 167.502875][ T8187] RBP: 00007fc0307de090 R08: 0000000000000000 R09: 0000000000000000 [ 167.502888][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.502900][ T8187] R13: 0000000000000000 R14: 00007fc02fba5fa0 R15: 00007ffc3f7cae28 [ 167.502932][ T8187] [ 168.386571][ T8213] bridge0: entered promiscuous mode [ 168.392121][ T8213] macvlan2: entered promiscuous mode [ 168.405979][ T8213] bridge0: port 4(macvlan2) entered blocking state [ 168.412725][ T8213] bridge0: port 4(macvlan2) entered disabled state [ 168.426005][ T8213] macvlan2: entered allmulticast mode [ 168.431435][ T8213] bridge0: entered allmulticast mode [ 168.442068][ T8213] macvlan2: left allmulticast mode [ 168.448890][ T8213] bridge0: left allmulticast mode [ 168.456497][ T8213] bridge0: left promiscuous mode [ 168.791095][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 168.975137][ T8222] vlan4: entered promiscuous mode [ 168.981966][ T8222] bridge0: entered promiscuous mode [ 168.988928][ T8222] vlan4: entered allmulticast mode [ 168.994191][ T8222] bridge0: entered allmulticast mode [ 169.013928][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 169.266114][ T8242] can: request_module (can-proto-0) failed. [ 169.304592][ T8247] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 169.322060][ T8247] netlink: 'syz.1.687': attribute type 2 has an invalid length. [ 169.369382][ T8247] : entered promiscuous mode [ 169.379917][ T8249] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.688'. [ 169.706819][ T8259] bridge0: entered promiscuous mode [ 169.712358][ T8259] macvlan2: entered promiscuous mode [ 169.722050][ T8259] bridge0: port 4(macvlan2) entered blocking state [ 169.729031][ T8259] bridge0: port 4(macvlan2) entered disabled state [ 169.736182][ T8259] macvlan2: entered allmulticast mode [ 169.741765][ T8259] bridge0: entered allmulticast mode [ 169.771526][ T8259] macvlan2: left allmulticast mode [ 169.778588][ T8259] bridge0: left allmulticast mode [ 169.785010][ T8259] bridge0: left promiscuous mode [ 169.862486][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 170.133967][ T8279] netlink: 'syz.0.696': attribute type 15 has an invalid length. [ 170.241283][ T8283] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.699'. [ 171.011577][ T8306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.705'. [ 171.303414][ T8320] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.711'. [ 171.319406][ T8317] bridge0: entered promiscuous mode [ 171.325060][ T8317] macvlan2: entered promiscuous mode [ 171.333270][ T8317] bridge0: port 4(macvlan2) entered blocking state [ 171.340975][ T8317] bridge0: port 4(macvlan2) entered disabled state [ 171.347955][ T8317] macvlan2: entered allmulticast mode [ 171.353907][ T8317] bridge0: entered allmulticast mode [ 171.364152][ T8317] macvlan2: left allmulticast mode [ 171.389687][ T8317] bridge0: left allmulticast mode [ 171.396152][ T8317] bridge0: left promiscuous mode [ 171.601016][ T8331] netlink: 52 bytes leftover after parsing attributes in process `syz.4.715'. [ 171.622699][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 171.649825][ T8331] netlink: 244 bytes leftover after parsing attributes in process `syz.4.715'. [ 171.672135][ T8335] netlink: 52 bytes leftover after parsing attributes in process `syz.1.717'. [ 171.703634][ T8335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.880709][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.721'. [ 171.897877][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.721'. [ 171.908402][ T8346] netlink: 'syz.3.721': attribute type 6 has an invalid length. [ 171.930109][ T8350] lo: entered allmulticast mode [ 171.947370][ T8350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.980751][ T8351] netlink: 'syz.4.720': attribute type 15 has an invalid length. [ 172.074965][ T8355] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.724'. [ 172.121885][ T8357] bridge0: entered promiscuous mode [ 172.128060][ T8357] macvlan2: entered promiscuous mode [ 172.140419][ T8357] bridge0: port 1(macvlan2) entered blocking state [ 172.147411][ T8357] bridge0: port 1(macvlan2) entered disabled state [ 172.154239][ T8357] macvlan2: entered allmulticast mode [ 172.162945][ T8357] bridge0: entered allmulticast mode [ 172.173624][ T8357] macvlan2: left allmulticast mode [ 172.179043][ T8357] bridge0: left allmulticast mode [ 172.186228][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 172.186447][ T8357] bridge0: left promiscuous mode [ 172.351107][ T8365] netlink: 'syz.3.727': attribute type 1 has an invalid length. [ 172.954166][ T8396] bridge0: entered promiscuous mode [ 172.978327][ T8396] macvlan2: entered promiscuous mode [ 172.988926][ T8396] bridge0: port 4(macvlan2) entered blocking state [ 173.000838][ T8396] bridge0: port 4(macvlan2) entered disabled state [ 173.012800][ T8396] macvlan2: entered allmulticast mode [ 173.021168][ T8396] bridge0: entered allmulticast mode [ 173.049621][ T8396] macvlan2: left allmulticast mode [ 173.058405][ T8396] bridge0: left allmulticast mode [ 173.072053][ T8396] bridge0: left promiscuous mode [ 173.402940][ T8411] xt_socket: unknown flags 0x8 [ 173.481054][ T8411] 8021q: VLANs not supported on vxcan0 [ 173.683693][ T8423] FAULT_INJECTION: forcing a failure. [ 173.683693][ T8423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.719998][ T8423] CPU: 1 UID: 0 PID: 8423 Comm: syz.4.748 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 173.720031][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.720044][ T8423] Call Trace: [ 173.720052][ T8423] [ 173.720061][ T8423] dump_stack_lvl+0x241/0x360 [ 173.720100][ T8423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.720131][ T8423] ? __pfx__printk+0x10/0x10 [ 173.720183][ T8423] should_fail_ex+0x424/0x570 [ 173.720215][ T8423] _copy_from_iter+0x211/0x1c70 [ 173.720250][ T8423] ? __build_skb_around+0x247/0x3d0 [ 173.720288][ T8423] ? __alloc_skb+0x298/0x480 [ 173.720306][ T8423] ? __pfx__copy_from_iter+0x10/0x10 [ 173.720337][ T8423] ? __pfx___alloc_skb+0x10/0x10 [ 173.720359][ T8423] ? skb_put+0x114/0x1f0 [ 173.720384][ T8423] netlink_sendmsg+0x73c/0xcd0 [ 173.720429][ T8423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.720464][ T8423] ? aa_sock_msg_perm+0x91/0x160 [ 173.720501][ T8423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.720528][ T8423] __sock_sendmsg+0x221/0x270 [ 173.720560][ T8423] ____sys_sendmsg+0x523/0x860 [ 173.720593][ T8423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.720613][ T8423] ? __fget_files+0x2a/0x420 [ 173.720637][ T8423] ? __fget_files+0x2a/0x420 [ 173.720666][ T8423] __sys_sendmsg+0x271/0x360 [ 173.720695][ T8423] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.720777][ T8423] ? do_syscall_64+0xb6/0x230 [ 173.720808][ T8423] do_syscall_64+0xf3/0x230 [ 173.720833][ T8423] ? clear_bhb_loop+0x45/0xa0 [ 173.720859][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.720878][ T8423] RIP: 0033:0x7f207c18d169 [ 173.720897][ T8423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.720914][ T8423] RSP: 002b:00007f207cf7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.720937][ T8423] RAX: ffffffffffffffda RBX: 00007f207c3a5fa0 RCX: 00007f207c18d169 [ 173.720953][ T8423] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 173.720966][ T8423] RBP: 00007f207cf7f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.720979][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.720991][ T8423] R13: 0000000000000000 R14: 00007f207c3a5fa0 R15: 00007ffd2c430328 [ 173.721024][ T8423] [ 174.795892][ T8448] netpci0: tun_chr_ioctl cmd 1074025672 [ 174.822996][ T8448] netpci0: ignored: set checksum disabled [ 174.843234][ T8455] FAULT_INJECTION: forcing a failure. [ 174.843234][ T8455] name failslab, interval 1, probability 0, space 0, times 0 [ 174.878591][ T8455] CPU: 1 UID: 0 PID: 8455 Comm: syz.3.761 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 174.878624][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.878637][ T8455] Call Trace: [ 174.878645][ T8455] [ 174.878654][ T8455] dump_stack_lvl+0x241/0x360 [ 174.878694][ T8455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.878725][ T8455] ? __pfx__printk+0x10/0x10 [ 174.878754][ T8455] ? __lock_acquire+0xad5/0xd80 [ 174.878789][ T8455] should_fail_ex+0x424/0x570 [ 174.878818][ T8455] should_failslab+0xac/0x100 [ 174.878849][ T8455] kmem_cache_alloc_noprof+0x78/0x390 [ 174.878878][ T8455] ? skb_clone+0x20c/0x390 [ 174.878908][ T8455] skb_clone+0x20c/0x390 [ 174.878936][ T8455] __netlink_deliver_tap+0x3c4/0x7f0 [ 174.878980][ T8455] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.879008][ T8455] netlink_deliver_tap+0x19d/0x1b0 [ 174.879040][ T8455] netlink_unicast+0x7c6/0x9a0 [ 174.879077][ T8455] ? __pfx_netlink_unicast+0x10/0x10 [ 174.879106][ T8455] ? skb_put+0x114/0x1f0 [ 174.879139][ T8455] netlink_sendmsg+0x8c3/0xcd0 [ 174.879185][ T8455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.879221][ T8455] ? aa_sock_msg_perm+0x91/0x160 [ 174.879257][ T8455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.879285][ T8455] __sock_sendmsg+0x221/0x270 [ 174.879317][ T8455] ____sys_sendmsg+0x523/0x860 [ 174.879349][ T8455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.879369][ T8455] ? __fget_files+0x2a/0x420 [ 174.879392][ T8455] ? __fget_files+0x2a/0x420 [ 174.879422][ T8455] __sys_sendmsg+0x271/0x360 [ 174.879451][ T8455] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.879536][ T8455] ? do_syscall_64+0xb6/0x230 [ 174.879567][ T8455] do_syscall_64+0xf3/0x230 [ 174.879593][ T8455] ? clear_bhb_loop+0x45/0xa0 [ 174.879618][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.879639][ T8455] RIP: 0033:0x7f137ab8d169 [ 174.879658][ T8455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.879675][ T8455] RSP: 002b:00007f137bad3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.879698][ T8455] RAX: ffffffffffffffda RBX: 00007f137ada5fa0 RCX: 00007f137ab8d169 [ 174.879713][ T8455] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 174.879726][ T8455] RBP: 00007f137bad3090 R08: 0000000000000000 R09: 0000000000000000 [ 174.879739][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.879751][ T8455] R13: 0000000000000000 R14: 00007f137ada5fa0 R15: 00007ffe9a53d858 [ 174.879785][ T8455] [ 175.892135][ T8474] smc: net device bond0 applied user defined pnetid SYZ0 [ 175.915662][ T8474] smc: net device bond0 erased user defined pnetid SYZ0 [ 175.997413][ T8479] xt_TCPMSS: Only works on TCP SYN packets [ 176.040284][ T8483] __nla_validate_parse: 8 callbacks suppressed [ 176.040308][ T8483] netlink: 104 bytes leftover after parsing attributes in process `syz.4.772'. [ 176.237128][ T8490] FAULT_INJECTION: forcing a failure. [ 176.237128][ T8490] name failslab, interval 1, probability 0, space 0, times 0 [ 176.270729][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.4.775 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 176.270760][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.270773][ T8490] Call Trace: [ 176.270780][ T8490] [ 176.270789][ T8490] dump_stack_lvl+0x241/0x360 [ 176.270828][ T8490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.270857][ T8490] ? __pfx__printk+0x10/0x10 [ 176.270892][ T8490] ? __pfx___might_resched+0x10/0x10 [ 176.270925][ T8490] should_fail_ex+0x424/0x570 [ 176.270960][ T8490] should_failslab+0xac/0x100 [ 176.270992][ T8490] __kmalloc_noprof+0xdf/0x4d0 [ 176.271021][ T8490] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 176.271043][ T8490] ? apparmor_capable+0x13b/0x1b0 [ 176.271069][ T8490] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 176.271102][ T8490] genl_rcv_msg+0x819/0xf00 [ 176.271134][ T8490] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.271154][ T8490] ? __dev_queue_xmit+0x1780/0x3f60 [ 176.271176][ T8490] ? kasan_save_track+0x3f/0x80 [ 176.271197][ T8490] ? __kasan_slab_alloc+0x66/0x80 [ 176.271228][ T8490] ? do_syscall_64+0xf3/0x230 [ 176.271273][ T8490] ? __lock_acquire+0xad5/0xd80 [ 176.271297][ T8490] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 176.271315][ T8490] ? __pfx_nl80211_start_ap+0x10/0x10 [ 176.271342][ T8490] ? __pfx_nl80211_post_doit+0x10/0x10 [ 176.271378][ T8490] netlink_rcv_skb+0x208/0x480 [ 176.271408][ T8490] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.271432][ T8490] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.271485][ T8490] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.271521][ T8490] genl_rcv+0x28/0x40 [ 176.271541][ T8490] netlink_unicast+0x7f8/0x9a0 [ 176.271577][ T8490] ? __pfx_netlink_unicast+0x10/0x10 [ 176.271605][ T8490] ? skb_put+0x114/0x1f0 [ 176.271634][ T8490] netlink_sendmsg+0x8c3/0xcd0 [ 176.271672][ T8490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.271703][ T8490] ? aa_sock_msg_perm+0x91/0x160 [ 176.271739][ T8490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.271766][ T8490] __sock_sendmsg+0x221/0x270 [ 176.271797][ T8490] ____sys_sendmsg+0x523/0x860 [ 176.271829][ T8490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.271849][ T8490] ? __fget_files+0x2a/0x420 [ 176.271872][ T8490] ? __fget_files+0x2a/0x420 [ 176.271902][ T8490] __sys_sendmsg+0x271/0x360 [ 176.271931][ T8490] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.272024][ T8490] ? do_syscall_64+0xb6/0x230 [ 176.272053][ T8490] do_syscall_64+0xf3/0x230 [ 176.272079][ T8490] ? clear_bhb_loop+0x45/0xa0 [ 176.272104][ T8490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.272124][ T8490] RIP: 0033:0x7f207c18d169 [ 176.272142][ T8490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.272160][ T8490] RSP: 002b:00007f207cf7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.272183][ T8490] RAX: ffffffffffffffda RBX: 00007f207c3a5fa0 RCX: 00007f207c18d169 [ 176.272199][ T8490] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 176.272213][ T8490] RBP: 00007f207cf7f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.272226][ T8490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.272238][ T8490] R13: 0000000000000000 R14: 00007f207c3a5fa0 R15: 00007ffd2c430328 [ 176.272272][ T8490] [ 176.695829][ T8499] netlink: 'syz.0.777': attribute type 10 has an invalid length. [ 176.916755][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.777'. [ 176.986871][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.782'. [ 177.042286][ T8512] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 177.053313][ T8512] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 177.065810][ T8516] xt_TCPMSS: Only works on TCP SYN packets [ 177.199417][ T8522] netlink: 104 bytes leftover after parsing attributes in process `syz.4.785'. [ 177.283318][ T8526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.787'. [ 177.475779][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.788'. [ 177.548695][ T8538] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 177.713932][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 177.856080][ T8546] netlink: 'syz.3.793': attribute type 5 has an invalid length. [ 177.970570][ T8546] ip6erspan0: entered promiscuous mode [ 178.279929][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 178.450771][ T8556] xt_TCPMSS: Only works on TCP SYN packets [ 178.619895][ T8562] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 178.668166][ T8570] netlink: 368 bytes leftover after parsing attributes in process `syz.2.802'. [ 178.679842][ T8569] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 178.695006][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 178.842335][ T8580] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 178.967991][ T8586] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.043364][ T8582] wireguard0: entered promiscuous mode [ 179.057021][ T8582] wireguard0: entered allmulticast mode [ 179.432707][ T8608] pimreg: entered allmulticast mode [ 179.494421][ T8609] pimreg: left allmulticast mode [ 179.783433][ T8619] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 180.873526][ T8659] netlink: 'syz.4.826': attribute type 3 has an invalid length. [ 181.077577][ T8639] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 181.088322][ T5894] IPVS: starting estimator thread 0... [ 181.186430][ T8669] IPVS: using max 28 ests per chain, 67200 per kthread [ 181.579391][ T3551] IPVS: stop unused estimator thread 0... [ 181.611421][ T8683] bridge3: entered allmulticast mode [ 181.681028][ T8688] 8021q: VLANs not supported on gre0 [ 181.994702][ T8699] tun0: tun_chr_ioctl cmd 2147767520 [ 183.132334][ T8721] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 183.217151][ T8727] __nla_validate_parse: 4 callbacks suppressed [ 183.217172][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'. [ 183.240815][ T8727] IPVS: set_ctl: invalid protocol: 0 172.20.20.47:20003 [ 183.273582][ T8696] xt_hashlimit: size too large, truncated to 1048576 [ 183.606632][ T8740] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 183.617801][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 183.763246][ T8751] netdevsim netdevsim3: Direct firmware load for / [ 183.763246][ T8751] failed with error -2 [ 183.779664][ T8751] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 183.779664][ T8751] [ 183.894007][ T8758] netlink: 136 bytes leftover after parsing attributes in process `syz.4.857'. [ 183.925124][ T8758] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 184.078382][ T8767] xt_TCPMSS: Only works on TCP SYN packets [ 184.777071][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 184.818361][ T8796] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 185.024729][ T8806] x_tables: unsorted underflow at hook 3 [ 185.289646][ T8813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.879'. [ 185.406121][ T8818] IPVS: set_ctl: invalid protocol: 47 172.30.1.2:20000 [ 185.670996][ T8830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.886'. [ 185.832228][ T8837] xt_TCPMSS: Only works on TCP SYN packets [ 185.835379][ T5846] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 185.955915][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 186.086974][ T8846] netlink: 104 bytes leftover after parsing attributes in process `syz.3.892'. [ 186.950300][ T8882] netlink: 'syz.1.905': attribute type 21 has an invalid length. [ 186.963539][ T8882] netlink: 132 bytes leftover after parsing attributes in process `syz.1.905'. [ 187.123818][ T8891] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.495948][ T8904] netlink: 'syz.3.910': attribute type 3 has an invalid length. [ 187.595014][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 187.604385][ T8908] netlink: 'syz.0.914': attribute type 14 has an invalid length. [ 187.616202][ T8908] netlink: 'syz.0.914': attribute type 13 has an invalid length. [ 188.326318][ T8939] __nla_validate_parse: 2 callbacks suppressed [ 188.326340][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.921'. [ 188.367719][ T8937] netlink: 80 bytes leftover after parsing attributes in process `syz.4.920'. [ 188.413326][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.921'. [ 188.533446][ T8944] netlink: 200 bytes leftover after parsing attributes in process `syz.3.923'. [ 189.313359][ T8968] netlink: 'syz.2.934': attribute type 12 has an invalid length. [ 189.325596][ T8968] netlink: 132 bytes leftover after parsing attributes in process `syz.2.934'. [ 189.333838][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 189.490317][ T8976] IPVS: set_ctl: invalid protocol: 98 10.1.1.0:20002 [ 189.504993][ T8977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.936'. [ 189.516919][ T8975] netlink: 32 bytes leftover after parsing attributes in process `syz.3.936'. [ 189.757421][ T8990] netlink: 5 bytes leftover after parsing attributes in process `syz.3.939'. [ 189.870569][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'. [ 189.931577][ T8997] netlink: 'syz.3.942': attribute type 2 has an invalid length. [ 190.021802][ T8997] k›*·]‘: entered promiscuous mode [ 191.435592][ T5846] Bluetooth: hci2: command tx timeout [ 191.474901][ T9065] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 191.497740][ T9065] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 192.129301][ T9090] netlink: 'syz.1.968': attribute type 58 has an invalid length. [ 192.610775][ T9115] batman_adv: batadv0: Adding interface: dummy0 [ 192.617693][ T9115] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.672517][ T9115] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 192.722319][ T9118] netlink: 'syz.0.975': attribute type 14 has an invalid length. [ 192.878945][ T9126] bridge0: port 1(gretap0) entered blocking state [ 192.909251][ T9126] bridge0: port 1(gretap0) entered disabled state [ 192.934490][ T9126] gretap0: entered allmulticast mode [ 192.949620][ T9126] gretap0: entered promiscuous mode [ 192.962531][ T9130] xt_TCPMSS: Only works on TCP SYN packets [ 192.968790][ T9131] gretap0: left allmulticast mode [ 192.984095][ T9131] gretap0: left promiscuous mode [ 193.007273][ T9131] bridge0: port 1(gretap0) entered disabled state [ 193.130568][ T9136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.142920][ T9136] batadv0: mtu less than device minimum [ 193.152815][ T9136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-256) [ 193.165124][ T9136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-256) [ 193.177023][ T9136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-256) [ 193.188919][ T9136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-256) [ 193.200969][ T9136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-256) [ 193.212464][ T9136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-256) [ 193.224066][ T9136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-256) [ 193.235990][ T9136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-256) [ 193.247487][ T9136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-256) [ 193.309681][ T9136] batadv_slave_1: entered promiscuous mode [ 193.337493][ T9136] __nla_validate_parse: 12 callbacks suppressed [ 193.337517][ T9136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.982'. [ 193.419704][ T9140] vlan3: entered promiscuous mode [ 193.424980][ T9140] vlan2: entered promiscuous mode [ 193.434129][ T9140] gretap0: entered promiscuous mode [ 193.471053][ T9144] netlink: 32 bytes leftover after parsing attributes in process `syz.3.984'. [ 193.674053][ T9146] vlan2 (unregistering): left allmulticast mode [ 193.697265][ T9146] bond0 (unregistering): left allmulticast mode [ 193.704605][ T9146] vlan2 (unregistering): left promiscuous mode [ 193.722152][ T9146] bond0 (unregistering): left promiscuous mode [ 193.729813][ T9146] bridge0: port 1(vlan2) entered disabled state [ 193.751709][ T9146] bond0 (unregistering): Released all slaves [ 194.322317][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329488][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.424218][ T9179] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.996'. [ 194.550597][ T9182] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 194.560555][ T9182] netlink: 224 bytes leftover after parsing attributes in process `syz.0.997'. [ 195.073917][ T9198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1002'. [ 195.093900][ T9197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1003'. [ 195.381156][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 195.419026][ T9213] netlink: 'syz.1.1008': attribute type 72 has an invalid length. [ 195.438914][ T9213] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1008'. [ 195.490857][ T9211] vxcan2: entered promiscuous mode [ 195.524102][ T9216] tipc: New replicast peer: 255.255.255.255 [ 195.531723][ T9216] tipc: Enabled bearer , priority 10 [ 195.539330][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'. [ 195.620948][ T9216] tipc: Disabling bearer [ 196.343192][ T9255] netlink: 'syz.4.1022': attribute type 72 has an invalid length. [ 196.378601][ T9255] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1022'. [ 196.750839][ T9268] netlink: 'syz.4.1027': attribute type 11 has an invalid length. [ 196.765471][ T9268] netlink: 'syz.4.1027': attribute type 11 has an invalid length. [ 198.436183][ T9325] IPVS: Error connecting to the multicast addr [ 198.632878][ T9334] __nla_validate_parse: 6 callbacks suppressed [ 198.632900][ T9334] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1048'. [ 200.035523][ T9374] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1060'. [ 200.714145][ T9349] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.736069][ T9349] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.744998][ T9349] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.760544][ T9349] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.965926][ T9352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.974857][ T9352] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.987859][ T9352] net_ratelimit: 11 callbacks suppressed [ 200.987869][ T9352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.011510][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'. [ 201.026611][ T9366] IPVS: Error connecting to the multicast addr [ 201.221268][ T9384] netlink: 'syz.3.1064': attribute type 1 has an invalid length. [ 201.754345][ T9416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1071'. [ 201.897804][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 201.946325][ T9421] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1075'. [ 202.080793][ T9426] netlink: 'syz.3.1077': attribute type 10 has an invalid length. [ 202.101256][ T9426] batman_adv: batadv0: Adding interface: team0 [ 202.112507][ T9426] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.116190][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 202.153832][ T9426] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 202.159782][ T9430] netlink: 'syz.3.1077': attribute type 10 has an invalid length. [ 202.189202][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 202.195669][ T9430] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1077'. [ 202.207709][ T9429] bond0: entered promiscuous mode [ 202.212783][ T9429] bond_slave_0: entered promiscuous mode [ 202.224676][ T9429] bond_slave_1: entered promiscuous mode [ 202.230784][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 202.248644][ T9428] nbd: socks must be embedded in a SOCK_ITEM attr [ 202.284311][ T9430] team0: entered promiscuous mode [ 202.291272][ T9430] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.301075][ T9430] batman_adv: batadv0: Interface activated: team0 [ 202.310088][ T9430] batman_adv: batadv0: Interface deactivated: team0 [ 202.354954][ T9430] batman_adv: batadv0: Removing interface: team0 [ 202.362950][ T9430] bridge0: port 1(team0) entered blocking state [ 202.369825][ T9430] bridge0: port 1(team0) entered disabled state [ 202.391876][ T9430] team0: entered allmulticast mode [ 202.537479][ T9439] netlink: 'syz.4.1081': attribute type 10 has an invalid length. [ 202.665913][ T9439] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 202.768759][ T9449] tap0: tun_chr_ioctl cmd 1074812118 [ 203.050696][ T9478] IPVS: Error connecting to the multicast addr [ 203.060915][ T9479] siw: device registration error -23 [ 203.470232][ T9490] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 203.711194][ T9499] __nla_validate_parse: 3 callbacks suppressed [ 203.711215][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 203.970322][ T9517] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1105'. [ 203.984444][ T9513] IPVS: stopping master sync thread 9518 ... [ 203.990572][ T9518] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 204.394012][ T9536] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.443098][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 204.853646][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 205.042797][ T9567] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 205.192501][ T9572] IPVS: Error connecting to the multicast addr [ 205.484305][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'. [ 205.861156][ T9601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1128'. [ 206.362061][ T9618] IPVS: Error connecting to the multicast addr [ 206.610754][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 206.772832][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 206.874200][ T9638] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1138'. [ 207.473849][ T9658] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1146'. [ 207.512324][ T9656] pimreg: entered allmulticast mode [ 207.554765][ T9627] xt_hashlimit: size too large, truncated to 1048576 [ 208.131525][ T9681] netlink: 'syz.4.1151': attribute type 3 has an invalid length. [ 208.571708][ T9691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.587238][ T9691] batadv_slave_1: entered promiscuous mode [ 208.618521][ T9697] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 208.856527][ T9709] __nla_validate_parse: 2 callbacks suppressed [ 208.856553][ T9709] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1163'. [ 208.925949][ T9712] C: renamed from team_slave_0 [ 208.938014][ T9712] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1164'. [ 208.963308][ T9712] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 209.066865][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'. [ 209.121439][ T9720] netlink: 'syz.2.1168': attribute type 2 has an invalid length. [ 209.131280][ T9720] netlink: 'syz.2.1168': attribute type 1 has an invalid length. [ 209.141872][ T9720] netlink: 'syz.2.1168': attribute type 2 has an invalid length. [ 209.151232][ T9721] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 209.165790][ T9721] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 209.314084][ T9727] Bluetooth: MGMT ver 1.23 [ 209.320950][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'. [ 209.339994][ T9727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1168'. [ 209.355340][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'. [ 209.355848][ T9727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1168'. [ 209.380646][ T9727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1168'. [ 209.390504][ T9727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1168'. [ 209.531247][ T9734] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 209.731259][ T9740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1175'. [ 209.825040][ T9745] netlink: 'syz.0.1176': attribute type 3 has an invalid length. [ 209.852420][ T9745] raw_sendmsg: syz.0.1176 forgot to set AF_INET. Fix it! [ 210.115876][ T9751] xt_TCPMSS: Only works on TCP SYN packets [ 210.346193][ T9763] netlink: 'syz.1.1182': attribute type 11 has an invalid length. [ 211.114108][ T9788] ipvlan0: entered promiscuous mode [ 211.270044][ T9795] xt_TCPMSS: Only works on TCP SYN packets [ 211.514740][ T9802] netlink: 'syz.4.1196': attribute type 1 has an invalid length. [ 211.908482][ T9817] FAULT_INJECTION: forcing a failure. [ 211.908482][ T9817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.933476][ T9820] FAULT_INJECTION: forcing a failure. [ 211.933476][ T9820] name failslab, interval 1, probability 0, space 0, times 0 [ 211.947824][ T9817] CPU: 0 UID: 0 PID: 9817 Comm: syz.4.1201 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 211.947857][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.947871][ T9817] Call Trace: [ 211.947879][ T9817] [ 211.947888][ T9817] dump_stack_lvl+0x241/0x360 [ 211.947926][ T9817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.947957][ T9817] ? __pfx__printk+0x10/0x10 [ 211.947998][ T9817] should_fail_ex+0x424/0x570 [ 211.948026][ T9817] _copy_to_user+0x31/0xb0 [ 211.948058][ T9817] simple_read_from_buffer+0xc4/0x170 [ 211.948093][ T9817] proc_fail_nth_read+0x1ef/0x260 [ 211.948119][ T9817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.948145][ T9817] ? rw_verify_area+0x246/0x630 [ 211.948166][ T9817] ? aa_sk_perm+0x96f/0xac0 [ 211.948190][ T9817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.948214][ T9817] vfs_read+0x21f/0xb90 [ 211.948246][ T9817] ? __pfx_vfs_read+0x10/0x10 [ 211.948269][ T9817] ? ieee802154_sock_connect+0xc7/0x160 [ 211.948305][ T9817] ? raw_connect+0x9/0x20 [ 211.948331][ T9817] ? __sys_connect+0xf2/0x2d0 [ 211.948365][ T9817] ? __pfx___sys_connect+0x10/0x10 [ 211.948403][ T9817] ksys_read+0x19d/0x2d0 [ 211.948430][ T9817] ? __pfx_ksys_read+0x10/0x10 [ 211.948460][ T9817] ? do_syscall_64+0xb6/0x230 [ 211.948489][ T9817] do_syscall_64+0xf3/0x230 [ 211.948515][ T9817] ? clear_bhb_loop+0x45/0xa0 [ 211.948540][ T9817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.948560][ T9817] RIP: 0033:0x7f207c18bb7c [ 211.948579][ T9817] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 211.948598][ T9817] RSP: 002b:00007f207cf7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.948621][ T9817] RAX: ffffffffffffffda RBX: 00007f207c3a5fa0 RCX: 00007f207c18bb7c [ 211.948637][ T9817] RDX: 000000000000000f RSI: 00007f207cf7f0a0 RDI: 0000000000000003 [ 211.948650][ T9817] RBP: 00007f207cf7f090 R08: 0000000000000000 R09: 0000000000000000 [ 211.948663][ T9817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.948676][ T9817] R13: 0000000000000000 R14: 00007f207c3a5fa0 R15: 00007ffd2c430328 [ 211.948708][ T9817] [ 211.967978][ T9820] CPU: 1 UID: 0 PID: 9820 Comm: syz.3.1202 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 211.968013][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.968027][ T9820] Call Trace: [ 211.968036][ T9820] [ 211.968047][ T9820] dump_stack_lvl+0x241/0x360 [ 211.968089][ T9820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.968123][ T9820] ? __pfx__printk+0x10/0x10 [ 211.968160][ T9820] ? __pfx___might_resched+0x10/0x10 [ 211.968192][ T9820] should_fail_ex+0x424/0x570 [ 211.968222][ T9820] should_failslab+0xac/0x100 [ 211.968257][ T9820] __kmalloc_cache_noprof+0x73/0x370 [ 211.968288][ T9820] ? genl_start+0x1cb/0x6d0 [ 211.968319][ T9820] genl_start+0x1cb/0x6d0 [ 211.968355][ T9820] __netlink_dump_start+0x45c/0x790 [ 211.968399][ T9820] genl_rcv_msg+0x8a4/0xf00 [ 211.968435][ T9820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.968456][ T9820] ? __dev_queue_xmit+0x1780/0x3f60 [ 211.968498][ T9820] ? __pfx_genl_start+0x10/0x10 [ 211.968520][ T9820] ? __pfx_genl_dumpit+0x10/0x10 [ 211.968541][ T9820] ? __pfx_genl_done+0x10/0x10 [ 211.968583][ T9820] ? __lock_acquire+0xad5/0xd80 [ 211.968609][ T9820] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 211.968636][ T9820] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 211.968670][ T9820] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 211.968716][ T9820] netlink_rcv_skb+0x208/0x480 [ 211.968748][ T9820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.968774][ T9820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.968831][ T9820] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.968871][ T9820] genl_rcv+0x28/0x40 [ 211.968892][ T9820] netlink_unicast+0x7f8/0x9a0 [ 211.968931][ T9820] ? __pfx_netlink_unicast+0x10/0x10 [ 211.968962][ T9820] ? skb_put+0x114/0x1f0 [ 211.968990][ T9820] netlink_sendmsg+0x8c3/0xcd0 [ 211.969037][ T9820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.969074][ T9820] ? aa_sock_msg_perm+0x91/0x160 [ 211.969112][ T9820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.969142][ T9820] __sock_sendmsg+0x221/0x270 [ 211.969177][ T9820] ____sys_sendmsg+0x523/0x860 [ 211.969212][ T9820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.969232][ T9820] ? __fget_files+0x2a/0x420 [ 211.969258][ T9820] ? __fget_files+0x2a/0x420 [ 211.969290][ T9820] __sys_sendmsg+0x271/0x360 [ 211.969320][ T9820] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.969410][ T9820] ? do_syscall_64+0xb6/0x230 [ 211.969442][ T9820] do_syscall_64+0xf3/0x230 [ 211.969470][ T9820] ? clear_bhb_loop+0x45/0xa0 [ 211.969503][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.969526][ T9820] RIP: 0033:0x7f137ab8d169 [ 211.969547][ T9820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.969565][ T9820] RSP: 002b:00007f137bad3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.969591][ T9820] RAX: ffffffffffffffda RBX: 00007f137ada5fa0 RCX: 00007f137ab8d169 [ 211.969607][ T9820] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000004 [ 211.969622][ T9820] RBP: 00007f137bad3090 R08: 0000000000000000 R09: 0000000000000000 [ 211.969637][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.969651][ T9820] R13: 0000000000000000 R14: 00007f137ada5fa0 R15: 00007ffe9a53d858 [ 211.969687][ T9820] [ 212.604446][ T9829] xt_TCPMSS: Only works on TCP SYN packets [ 213.118302][ T9854] FAULT_INJECTION: forcing a failure. [ 213.118302][ T9854] name failslab, interval 1, probability 0, space 0, times 0 [ 213.262462][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.1.1215 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 213.262502][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.262516][ T9854] Call Trace: [ 213.262525][ T9854] [ 213.262535][ T9854] dump_stack_lvl+0x241/0x360 [ 213.262574][ T9854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.262606][ T9854] ? __pfx__printk+0x10/0x10 [ 213.262642][ T9854] ? __pfx___might_resched+0x10/0x10 [ 213.262674][ T9854] should_fail_ex+0x424/0x570 [ 213.262704][ T9854] should_failslab+0xac/0x100 [ 213.262736][ T9854] __kmalloc_cache_noprof+0x73/0x370 [ 213.262766][ T9854] ? ethnl_tsinfo_start+0x8f/0x2d0 [ 213.262800][ T9854] ethnl_tsinfo_start+0x8f/0x2d0 [ 213.262827][ T9854] ? genl_start+0x4b8/0x6d0 [ 213.262853][ T9854] genl_start+0x4dc/0x6d0 [ 213.262886][ T9854] __netlink_dump_start+0x45c/0x790 [ 213.262927][ T9854] genl_rcv_msg+0x8a4/0xf00 [ 213.262961][ T9854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.262991][ T9854] ? __pfx_genl_start+0x10/0x10 [ 213.263012][ T9854] ? __pfx_genl_dumpit+0x10/0x10 [ 213.263031][ T9854] ? __pfx_genl_done+0x10/0x10 [ 213.263072][ T9854] ? __lock_acquire+0xad5/0xd80 [ 213.263097][ T9854] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 213.263123][ T9854] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 213.263149][ T9854] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 213.263194][ T9854] netlink_rcv_skb+0x208/0x480 [ 213.263226][ T9854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.263252][ T9854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.263307][ T9854] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.263346][ T9854] genl_rcv+0x28/0x40 [ 213.263366][ T9854] netlink_unicast+0x7f8/0x9a0 [ 213.263405][ T9854] ? __pfx_netlink_unicast+0x10/0x10 [ 213.263442][ T9854] ? skb_put+0x114/0x1f0 [ 213.263469][ T9854] netlink_sendmsg+0x8c3/0xcd0 [ 213.263515][ T9854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.263552][ T9854] ? aa_sock_msg_perm+0x91/0x160 [ 213.263589][ T9854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.263617][ T9854] __sock_sendmsg+0x221/0x270 [ 213.263650][ T9854] ____sys_sendmsg+0x523/0x860 [ 213.263684][ T9854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.263705][ T9854] ? __fget_files+0x2a/0x420 [ 213.263729][ T9854] ? __fget_files+0x2a/0x420 [ 213.263760][ T9854] __sys_sendmsg+0x271/0x360 [ 213.263790][ T9854] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.263877][ T9854] ? do_syscall_64+0xb6/0x230 [ 213.263909][ T9854] do_syscall_64+0xf3/0x230 [ 213.263935][ T9854] ? clear_bhb_loop+0x45/0xa0 [ 213.263962][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.263983][ T9854] RIP: 0033:0x7f848a98d169 [ 213.264002][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.264020][ T9854] RSP: 002b:00007f848b758038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.264044][ T9854] RAX: ffffffffffffffda RBX: 00007f848aba5fa0 RCX: 00007f848a98d169 [ 213.264060][ T9854] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000004 [ 213.264074][ T9854] RBP: 00007f848b758090 R08: 0000000000000000 R09: 0000000000000000 [ 213.264088][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.264101][ T9854] R13: 0000000000000000 R14: 00007f848aba5fa0 R15: 00007ffde57d9358 [ 213.264135][ T9854] [ 213.898772][ T9863] ªªªªªª: renamed from vlan0 [ 214.056483][ T9869] __nla_validate_parse: 7 callbacks suppressed [ 214.056505][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 214.105606][ T9869] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1221'. [ 214.447684][ T9886] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1225'. [ 214.705984][ T9890] FAULT_INJECTION: forcing a failure. [ 214.705984][ T9890] name failslab, interval 1, probability 0, space 0, times 0 [ 214.759404][ T9890] CPU: 0 UID: 0 PID: 9890 Comm: syz.3.1226 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 214.759437][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.759451][ T9890] Call Trace: [ 214.759460][ T9890] [ 214.759470][ T9890] dump_stack_lvl+0x241/0x360 [ 214.759515][ T9890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.759546][ T9890] ? __pfx__printk+0x10/0x10 [ 214.759581][ T9890] ? __pfx___might_resched+0x10/0x10 [ 214.759612][ T9890] should_fail_ex+0x424/0x570 [ 214.759641][ T9890] should_failslab+0xac/0x100 [ 214.759673][ T9890] __kmalloc_cache_noprof+0x73/0x370 [ 214.759702][ T9890] ? ethnl_tsinfo_start+0xcf/0x2d0 [ 214.759737][ T9890] ethnl_tsinfo_start+0xcf/0x2d0 [ 214.759764][ T9890] ? genl_start+0x4b8/0x6d0 [ 214.759789][ T9890] genl_start+0x4dc/0x6d0 [ 214.759822][ T9890] __netlink_dump_start+0x45c/0x790 [ 214.759864][ T9890] genl_rcv_msg+0x8a4/0xf00 [ 214.759898][ T9890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.759919][ T9890] ? __dev_queue_xmit+0x1780/0x3f60 [ 214.759951][ T9890] ? __pfx_genl_start+0x10/0x10 [ 214.759970][ T9890] ? __pfx_genl_dumpit+0x10/0x10 [ 214.759991][ T9890] ? __pfx_genl_done+0x10/0x10 [ 214.760031][ T9890] ? __lock_acquire+0xad5/0xd80 [ 214.760055][ T9890] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 214.760081][ T9890] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 214.760107][ T9890] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 214.760152][ T9890] netlink_rcv_skb+0x208/0x480 [ 214.760182][ T9890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.760208][ T9890] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.760261][ T9890] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.760296][ T9890] genl_rcv+0x28/0x40 [ 214.760316][ T9890] netlink_unicast+0x7f8/0x9a0 [ 214.760354][ T9890] ? __pfx_netlink_unicast+0x10/0x10 [ 214.760388][ T9890] ? skb_put+0x114/0x1f0 [ 214.760414][ T9890] netlink_sendmsg+0x8c3/0xcd0 [ 214.760459][ T9890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.760495][ T9890] ? aa_sock_msg_perm+0x91/0x160 [ 214.760538][ T9890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.760565][ T9890] __sock_sendmsg+0x221/0x270 [ 214.760598][ T9890] ____sys_sendmsg+0x523/0x860 [ 214.760632][ T9890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.760652][ T9890] ? __fget_files+0x2a/0x420 [ 214.760676][ T9890] ? __fget_files+0x2a/0x420 [ 214.760707][ T9890] __sys_sendmsg+0x271/0x360 [ 214.760736][ T9890] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.760823][ T9890] ? do_syscall_64+0xb6/0x230 [ 214.760854][ T9890] do_syscall_64+0xf3/0x230 [ 214.760880][ T9890] ? clear_bhb_loop+0x45/0xa0 [ 214.760906][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.760927][ T9890] RIP: 0033:0x7f137ab8d169 [ 214.760946][ T9890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.760964][ T9890] RSP: 002b:00007f137bad3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.760988][ T9890] RAX: ffffffffffffffda RBX: 00007f137ada5fa0 RCX: 00007f137ab8d169 [ 214.761003][ T9890] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000004 [ 214.761017][ T9890] RBP: 00007f137bad3090 R08: 0000000000000000 R09: 0000000000000000 [ 214.761031][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.761044][ T9890] R13: 0000000000000000 R14: 00007f137ada5fa0 R15: 00007ffe9a53d858 [ 214.761079][ T9890] [ 215.787298][ T9904] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 215.837144][ T9905] tipc: Failed to remove unknown binding: 66,3,3/0:2519093701/2519093702 [ 216.064830][ T9909] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1233'. [ 216.098402][ T9915] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 216.115782][ T9915] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1235'. [ 216.124802][ T9915] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 216.194618][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 216.237784][ T9918] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.246165][ T9918] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.254470][ T9918] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.263424][ T9918] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.303179][ T9918] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.311782][ T9918] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.320916][ T9918] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.329413][ T9918] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.480339][ T9925] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 216.505676][ T9924] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 216.776218][ T9940] siw: device registration error -23 [ 216.995823][ T9952] sctp: [Deprecated]: syz.3.1248 (pid 9952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.995823][ T9952] Use struct sctp_sack_info instead [ 217.051735][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 217.118766][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 217.126927][ T5155] Bluetooth: hci2: command 0x0406 tx timeout [ 217.133055][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 217.650763][ T9981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1257'. [ 218.287605][T10009] netlink: 'syz.2.1263': attribute type 303 has an invalid length. [ 218.298995][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 218.317245][T10009] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 218.327323][T10008] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1265'. [ 218.389993][T10009] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 218.432708][T10014] netlink: 'syz.1.1267': attribute type 2 has an invalid length. [ 218.467636][T10017] xt_TCPMSS: Only works on TCP SYN packets [ 218.992409][ T24] hid-multitouch 0005:0457:0009.0001: unknown main item tag 0x0 [ 219.014494][ T24] hid-multitouch 0005:0457:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 219.220985][T10049] __nla_validate_parse: 3 callbacks suppressed [ 219.221007][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 219.440564][T10034] xt_hashlimit: size too large, truncated to 1048576 [ 219.488793][T10061] FAULT_INJECTION: forcing a failure. [ 219.488793][T10061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.524037][T10061] CPU: 1 UID: 0 PID: 10061 Comm: syz.1.1283 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 219.524071][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.524085][T10061] Call Trace: [ 219.524093][T10061] [ 219.524102][T10061] dump_stack_lvl+0x241/0x360 [ 219.524146][T10061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.524177][T10061] ? __pfx__printk+0x10/0x10 [ 219.524222][T10061] should_fail_ex+0x424/0x570 [ 219.524250][T10061] _copy_from_user+0x2d/0xb0 [ 219.524282][T10061] copy_msghdr_from_user+0xb3/0x580 [ 219.524318][T10061] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 219.524344][T10061] ? __fget_files+0x2a/0x420 [ 219.524367][T10061] ? __fget_files+0x2a/0x420 [ 219.524397][T10061] __sys_sendmsg+0x20a/0x360 [ 219.524426][T10061] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.524510][T10061] ? do_syscall_64+0xb6/0x230 [ 219.524540][T10061] do_syscall_64+0xf3/0x230 [ 219.524566][T10061] ? clear_bhb_loop+0x45/0xa0 [ 219.524591][T10061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.524612][T10061] RIP: 0033:0x7f848a98d169 [ 219.524631][T10061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.524649][T10061] RSP: 002b:00007f848b758038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.524673][T10061] RAX: ffffffffffffffda RBX: 00007f848aba5fa0 RCX: 00007f848a98d169 [ 219.524689][T10061] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000003 [ 219.524703][T10061] RBP: 00007f848b758090 R08: 0000000000000000 R09: 0000000000000000 [ 219.524716][T10061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.524730][T10061] R13: 0000000000000000 R14: 00007f848aba5fa0 R15: 00007ffde57d9358 [ 219.524763][T10061] [ 219.736694][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 219.911108][T10063] vlan0: entered promiscuous mode [ 219.936426][T10068] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1285'. [ 219.966699][T10063] hsr0: entered promiscuous mode [ 220.489315][T10080] tipc: Failed to remove unknown binding: 66,3,3/0:3124328008/3124328009 [ 223.305043][T10089] FAULT_INJECTION: forcing a failure. [ 223.305043][T10089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.328663][T10089] CPU: 1 UID: 0 PID: 10089 Comm: syz.3.1292 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 223.328697][T10089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.328710][T10089] Call Trace: [ 223.328719][T10089] [ 223.328728][T10089] dump_stack_lvl+0x241/0x360 [ 223.328766][T10089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.328797][T10089] ? __pfx__printk+0x10/0x10 [ 223.328840][T10089] should_fail_ex+0x424/0x570 [ 223.328869][T10089] _copy_to_user+0x31/0xb0 [ 223.328902][T10089] simple_read_from_buffer+0xc4/0x170 [ 223.328938][T10089] proc_fail_nth_read+0x1ef/0x260 [ 223.328965][T10089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.328989][T10089] ? rw_verify_area+0x246/0x630 [ 223.329009][T10089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.329028][T10089] vfs_read+0x21f/0xb90 [ 223.329055][T10089] ? __pfx___mutex_lock+0x10/0x10 [ 223.329083][T10089] ? __pfx_vfs_read+0x10/0x10 [ 223.329111][T10089] ? __fget_files+0x2a/0x420 [ 223.329133][T10089] ? __fget_files+0x39d/0x420 [ 223.329150][T10089] ? __fget_files+0x2a/0x420 [ 223.329180][T10089] ksys_read+0x19d/0x2d0 [ 223.329207][T10089] ? __pfx_ksys_read+0x10/0x10 [ 223.329237][T10089] ? do_syscall_64+0xb6/0x230 [ 223.329266][T10089] do_syscall_64+0xf3/0x230 [ 223.329292][T10089] ? clear_bhb_loop+0x45/0xa0 [ 223.329316][T10089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.329336][T10089] RIP: 0033:0x7f137ab8bb7c [ 223.329355][T10089] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 223.329372][T10089] RSP: 002b:00007f137bad3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 223.329395][T10089] RAX: ffffffffffffffda RBX: 00007f137ada5fa0 RCX: 00007f137ab8bb7c [ 223.329411][T10089] RDX: 000000000000000f RSI: 00007f137bad30a0 RDI: 0000000000000005 [ 223.329424][T10089] RBP: 00007f137bad3090 R08: 0000000000000000 R09: 0000000000000000 [ 223.329437][T10089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.329449][T10089] R13: 0000000000000000 R14: 00007f137ada5fa0 R15: 00007ffe9a53d858 [ 223.329482][T10089] [ 223.716918][T10104] x_tables: duplicate entry at hook 1 [ 223.811208][T10108] xt_ecn: cannot match TCP bits for non-tcp packets [ 224.004345][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 224.177907][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1301'. [ 224.275016][T10129] macvlan2: entered promiscuous mode [ 224.283380][T10129] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 224.594623][T10147] xt_TCPMSS: Only works on TCP SYN packets [ 224.603221][T10148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1305'. [ 224.743942][T10150] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1309'. [ 225.231563][T10185] netlink: 'syz.4.1317': attribute type 19 has an invalid length. [ 225.259588][T10184] IPVS: stopping master sync thread 10189 ... [ 225.269150][T10189] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 225.473073][T10202] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1323'. [ 225.523030][T10200] syzkaller1: entered promiscuous mode [ 225.557782][T10200] syzkaller1: entered allmulticast mode [ 225.575634][T10200] netlink: 'syz.3.1322': attribute type 33 has an invalid length. [ 225.583632][T10200] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1322'. [ 225.595554][ T36] bridge0: port 1(team0) entered blocking state [ 225.602226][ T36] bridge0: port 1(team0) entered forwarding state [ 225.614628][T10200] syzkaller1: left promiscuous mode [ 225.625729][T10200] syzkaller1: left allmulticast mode [ 225.754186][T10212] Cannot find del_set index 4 as target [ 226.302373][T10224] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1332'. [ 226.447414][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 226.457341][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 226.481062][T10229] netlink: 'syz.4.1333': attribute type 12 has an invalid length. [ 226.520217][T10232] x_tables: duplicate entry at hook 1 [ 226.532541][T10229] dummy0: entered promiscuous mode [ 226.552902][T10229] vlan1: entered promiscuous mode [ 226.620707][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 227.053073][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 227.186928][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 227.356949][T10275] netlink: 'syz.4.1351': attribute type 4 has an invalid length. [ 227.370304][T10275] netlink: 'syz.4.1351': attribute type 4 has an invalid length. [ 227.566757][T10290] SET target dimension over the limit! [ 228.774113][T10353] vlan1: entered promiscuous mode [ 228.783318][T10353] macvtap0: entered promiscuous mode [ 229.059880][T10363] FAULT_INJECTION: forcing a failure. [ 229.059880][T10363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.112857][T10363] CPU: 0 UID: 0 PID: 10363 Comm: syz.0.1377 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 229.112894][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.112908][T10363] Call Trace: [ 229.112917][T10363] [ 229.112927][T10363] dump_stack_lvl+0x241/0x360 [ 229.112968][T10363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.113082][T10363] ? __pfx__printk+0x10/0x10 [ 229.113140][T10363] should_fail_ex+0x424/0x570 [ 229.113172][T10363] _copy_from_user+0x2d/0xb0 [ 229.113206][T10363] copy_msghdr_from_user+0xb3/0x580 [ 229.113250][T10363] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 229.113276][T10363] ? __fget_files+0x2a/0x420 [ 229.113300][T10363] ? __fget_files+0x2a/0x420 [ 229.113328][T10363] __sys_sendmsg+0x20a/0x360 [ 229.113359][T10363] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.113441][T10363] ? do_syscall_64+0xb6/0x230 [ 229.113474][T10363] do_syscall_64+0xf3/0x230 [ 229.113501][T10363] ? clear_bhb_loop+0x45/0xa0 [ 229.113527][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.113549][T10363] RIP: 0033:0x7f343a58d169 [ 229.113568][T10363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.113589][T10363] RSP: 002b:00007f343b3d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.113614][T10363] RAX: ffffffffffffffda RBX: 00007f343a7a5fa0 RCX: 00007f343a58d169 [ 229.113630][T10363] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 229.113645][T10363] RBP: 00007f343b3d8090 R08: 0000000000000000 R09: 0000000000000000 [ 229.113659][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.113673][T10363] R13: 0000000000000000 R14: 00007f343a7a5fa0 R15: 00007ffd52b25f08 [ 229.113706][T10363] [ 229.821861][T10369] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.964836][T10384] __nla_validate_parse: 5 callbacks suppressed [ 229.964859][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 229.991926][T10384] nlmon0: Master is either lo or non-ether device [ 230.103231][T10386] dccp_close: ABORT with 32 bytes unread [ 230.240048][T10369] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.300603][T10394] FAULT_INJECTION: forcing a failure. [ 230.300603][T10394] name failslab, interval 1, probability 0, space 0, times 0 [ 230.324012][T10397] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1389'. [ 230.334106][T10394] CPU: 0 UID: 0 PID: 10394 Comm: syz.2.1390 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 230.334151][T10394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.334165][T10394] Call Trace: [ 230.334173][T10394] [ 230.334181][T10394] dump_stack_lvl+0x241/0x360 [ 230.334219][T10394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.334250][T10394] ? __pfx__printk+0x10/0x10 [ 230.334285][T10394] ? __pfx___might_resched+0x10/0x10 [ 230.334316][T10394] should_fail_ex+0x424/0x570 [ 230.334344][T10394] should_failslab+0xac/0x100 [ 230.334375][T10394] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 230.334405][T10394] ? __alloc_skb+0x1c2/0x480 [ 230.334429][T10394] __alloc_skb+0x1c2/0x480 [ 230.334455][T10394] ? __pfx___alloc_skb+0x10/0x10 [ 230.334477][T10394] ? netlink_autobind+0xd6/0x2f0 [ 230.334506][T10394] ? netlink_autobind+0x2b0/0x2f0 [ 230.334541][T10394] netlink_sendmsg+0x638/0xcd0 [ 230.334585][T10394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.334620][T10394] ? aa_sock_msg_perm+0x91/0x160 [ 230.334655][T10394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.334683][T10394] __sock_sendmsg+0x221/0x270 [ 230.334715][T10394] ____sys_sendmsg+0x523/0x860 [ 230.334746][T10394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.334766][T10394] ? __fget_files+0x2a/0x420 [ 230.334790][T10394] ? __fget_files+0x2a/0x420 [ 230.334819][T10394] __sys_sendmsg+0x271/0x360 [ 230.334848][T10394] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.334926][T10394] ? do_syscall_64+0xb6/0x230 [ 230.334957][T10394] do_syscall_64+0xf3/0x230 [ 230.334982][T10394] ? clear_bhb_loop+0x45/0xa0 [ 230.335007][T10394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.335028][T10394] RIP: 0033:0x7fc02f98d169 [ 230.335046][T10394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.335064][T10394] RSP: 002b:00007fc0307de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.335088][T10394] RAX: ffffffffffffffda RBX: 00007fc02fba5fa0 RCX: 00007fc02f98d169 [ 230.335103][T10394] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 230.335117][T10394] RBP: 00007fc0307de090 R08: 0000000000000000 R09: 0000000000000000 [ 230.335141][T10394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.335153][T10394] R13: 0000000000000000 R14: 00007fc02fba5fa0 R15: 00007ffc3f7cae28 [ 230.335185][T10394] [ 230.356286][T10397] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1389'. [ 230.611352][T10369] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.788064][T10369] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.843071][T10412] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 230.870166][T10412] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 231.112857][T10428] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1400'. [ 231.266497][T10434] IPVS: Error connecting to the multicast addr [ 231.287627][T10436] ip6gre1: entered promiscuous mode [ 231.819389][T10474] FAULT_INJECTION: forcing a failure. [ 231.819389][T10474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.834068][T10474] CPU: 1 UID: 0 PID: 10474 Comm: syz.3.1414 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 231.834098][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.834112][T10474] Call Trace: [ 231.834120][T10474] [ 231.834129][T10474] dump_stack_lvl+0x241/0x360 [ 231.834168][T10474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.834198][T10474] ? __pfx__printk+0x10/0x10 [ 231.834243][T10474] should_fail_ex+0x424/0x570 [ 231.834269][T10474] _copy_from_iter+0x211/0x1c70 [ 231.834304][T10474] ? __build_skb_around+0x247/0x3d0 [ 231.834342][T10474] ? __alloc_skb+0x298/0x480 [ 231.834360][T10474] ? __pfx__copy_from_iter+0x10/0x10 [ 231.834390][T10474] ? __pfx___alloc_skb+0x10/0x10 [ 231.834412][T10474] ? skb_put+0x114/0x1f0 [ 231.834437][T10474] netlink_sendmsg+0x73c/0xcd0 [ 231.834481][T10474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.834514][T10474] ? aa_sock_msg_perm+0x91/0x160 [ 231.834550][T10474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.834578][T10474] __sock_sendmsg+0x221/0x270 [ 231.834609][T10474] ____sys_sendmsg+0x523/0x860 [ 231.834641][T10474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.834662][T10474] ? __fget_files+0x2a/0x420 [ 231.834685][T10474] ? __fget_files+0x2a/0x420 [ 231.834715][T10474] __sys_sendmsg+0x271/0x360 [ 231.834743][T10474] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.834812][T10474] ? do_syscall_64+0xb6/0x230 [ 231.834834][T10474] do_syscall_64+0xf3/0x230 [ 231.834853][T10474] ? clear_bhb_loop+0x45/0xa0 [ 231.834871][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.834885][T10474] RIP: 0033:0x7f137ab8d169 [ 231.834899][T10474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.834912][T10474] RSP: 002b:00007f137bad3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.834929][T10474] RAX: ffffffffffffffda RBX: 00007f137ada5fa0 RCX: 00007f137ab8d169 [ 231.834940][T10474] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 231.834950][T10474] RBP: 00007f137bad3090 R08: 0000000000000000 R09: 0000000000000000 [ 231.834960][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.834969][T10474] R13: 0000000000000000 R14: 00007f137ada5fa0 R15: 00007ffe9a53d858 [ 231.834992][T10474] [ 232.193429][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 232.206406][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1416'. [ 232.222691][T10479] geneve2: entered promiscuous mode [ 232.228543][T10479] geneve2: entered allmulticast mode [ 232.333699][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 232.393768][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1419'. [ 232.578715][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 233.095675][ T5894] IPVS: starting estimator thread 0... [ 233.195628][T10502] IPVS: using max 27 ests per chain, 64800 per kthread [ 233.280433][T10507] netlink: 'syz.0.1425': attribute type 39 has an invalid length. [ 233.311391][T10508] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1424'. [ 234.259310][T10542] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 234.307160][T10542] bond1: entered promiscuous mode [ 234.312734][T10542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.363927][T10548] netlink: 'syz.2.1437': attribute type 4 has an invalid length. [ 234.370244][T10542] bond1: (slave bridge3): making interface the new active one [ 234.379695][T10542] bridge3: entered promiscuous mode [ 234.387000][T10542] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 234.396695][T10552] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 234.483611][T10556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.002888][T10369] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.067213][T10369] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.147261][T10369] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.227577][T10369] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.709732][T10369] bond0: (slave syz_tun): Releasing backup interface [ 235.880316][ T52] team0: left allmulticast mode [ 235.887021][ T52] bridge0: port 1(team0) entered disabled state [ 236.595106][ T52] bond0 (unregistering): Released all slaves [ 236.691231][ T52] bond1 (unregistering): Released all slaves [ 236.705226][ T52] bond2 (unregistering): Released all slaves [ 236.793070][ T52] k›*·]‘: left promiscuous mode [ 237.072354][ T52] hsr_slave_0: left promiscuous mode [ 237.081651][ T52] hsr_slave_1: left promiscuous mode [ 237.098288][ T52] [ 237.100661][ T52] ====================================================== [ 237.107685][ T52] WARNING: possible circular locking dependency detected [ 237.114701][ T52] 6.14.0-syzkaller-13344-ga9843689e2de #0 Not tainted [ 237.121460][ T52] ------------------------------------------------------ [ 237.128476][ T52] kworker/u8:3/52 is trying to acquire lock: [ 237.134455][ T52] ffff888061f50e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0 [ 237.144573][ T52] [ 237.144573][ T52] but task is already holding lock: [ 237.151935][ T52] ffff888061f5cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 237.163536][ T52] [ 237.163536][ T52] which lock already depends on the new lock. [ 237.163536][ T52] [ 237.173936][ T52] [ 237.173936][ T52] the existing dependency chain (in reverse order) is: [ 237.182952][ T52] [ 237.182952][ T52] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 237.191397][ T52] lock_acquire+0x116/0x2f0 [ 237.196429][ T52] __mutex_lock+0x1a5/0x10c0 [ 237.201548][ T52] dev_set_mtu+0x11c/0x270 [ 237.206553][ T52] team_add_slave+0x83b/0x28b0 [ 237.211841][ T52] do_set_master+0x579/0x730 [ 237.216952][ T52] do_setlink+0x111d/0x43a0 [ 237.221986][ T52] rtnl_newlink+0x17e2/0x1fe0 [ 237.227192][ T52] rtnetlink_rcv_msg+0x80f/0xd70 [ 237.232659][ T52] netlink_rcv_skb+0x208/0x480 [ 237.237951][ T52] netlink_unicast+0x7f8/0x9a0 [ 237.243245][ T52] netlink_sendmsg+0x8c3/0xcd0 [ 237.248544][ T52] __sock_sendmsg+0x221/0x270 [ 237.253750][ T52] ____sys_sendmsg+0x523/0x860 [ 237.259035][ T52] __sys_sendmsg+0x271/0x360 [ 237.264146][ T52] do_syscall_64+0xf3/0x230 [ 237.269174][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.275592][ T52] [ 237.275592][ T52] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 237.283776][ T52] validate_chain+0xa69/0x24e0 [ 237.289068][ T52] __lock_acquire+0xad5/0xd80 [ 237.294613][ T52] lock_acquire+0x116/0x2f0 [ 237.299641][ T52] __mutex_lock+0x1a5/0x10c0 [ 237.304756][ T52] team_vlan_rx_kill_vid+0x36/0xe0 [ 237.310402][ T52] vlan_vid_del+0x483/0x770 [ 237.315443][ T52] vlan_device_event+0x23c/0x1e00 [ 237.320989][ T52] notifier_call_chain+0x1a5/0x3f0 [ 237.326629][ T52] dev_close_many+0x33e/0x4c0 [ 237.331834][ T52] unregister_netdevice_many_notify+0x628/0x2510 [ 237.338688][ T52] default_device_exit_batch+0x7ff/0x880 [ 237.344849][ T52] cleanup_net+0x8af/0xd60 [ 237.349793][ T52] process_scheduled_works+0xac3/0x18e0 [ 237.355864][ T52] worker_thread+0x870/0xd50 [ 237.361014][ T52] kthread+0x7b7/0x940 [ 237.365697][ T52] ret_from_fork+0x4b/0x80 [ 237.370729][ T52] ret_from_fork_asm+0x1a/0x30 [ 237.376019][ T52] [ 237.376019][ T52] other info that might help us debug this: [ 237.376019][ T52] [ 237.386245][ T52] Possible unsafe locking scenario: [ 237.386245][ T52] [ 237.393691][ T52] CPU0 CPU1 [ 237.399058][ T52] ---- ---- [ 237.404420][ T52] lock(&dev_instance_lock_key#3); [ 237.409720][ T52] lock(team->team_lock_key#2); [ 237.417193][ T52] lock(&dev_instance_lock_key#3); [ 237.424924][ T52] lock(team->team_lock_key#2); [ 237.429877][ T52] [ 237.429877][ T52] *** DEADLOCK *** [ 237.429877][ T52] [ 237.438022][ T52] 5 locks held by kworker/u8:3/52: [ 237.443134][ T52] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 237.454040][ T52] #1: ffffc90000be7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 237.464591][ T52] #2: ffffffff900efe90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 237.474014][ T52] #3: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 237.484044][ T52] #4: ffff888061f5cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 237.496074][ T52] [ 237.496074][ T52] stack backtrace: [ 237.501963][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 237.501986][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.501998][ T52] Workqueue: netns cleanup_net [ 237.502024][ T52] Call Trace: [ 237.502032][ T52] [ 237.502040][ T52] dump_stack_lvl+0x241/0x360 [ 237.502066][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.502090][ T52] ? __pfx__printk+0x10/0x10 [ 237.502113][ T52] ? print_lock+0x171/0x1a0 [ 237.502134][ T52] print_circular_bug+0x2e1/0x300 [ 237.502157][ T52] check_noncircular+0x142/0x160 [ 237.502182][ T52] validate_chain+0xa69/0x24e0 [ 237.502213][ T52] __lock_acquire+0xad5/0xd80 [ 237.502233][ T52] lock_acquire+0x116/0x2f0 [ 237.502250][ T52] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 237.502271][ T52] __mutex_lock+0x1a5/0x10c0 [ 237.502292][ T52] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 237.502311][ T52] ? __cancel_work+0x24c/0x390 [ 237.502334][ T52] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 237.502348][ T52] ? __cancel_work+0x2f0/0x390 [ 237.502369][ T52] ? __pfx___mutex_lock+0x10/0x10 [ 237.502389][ T52] ? __pfx___cancel_work+0x10/0x10 [ 237.502411][ T52] ? do_raw_spin_unlock+0x13c/0x8b0 [ 237.502438][ T52] team_vlan_rx_kill_vid+0x36/0xe0 [ 237.502456][ T52] vlan_vid_del+0x483/0x770 [ 237.502484][ T52] vlan_device_event+0x23c/0x1e00 [ 237.502508][ T52] ? br_device_event+0x28f/0xae0 [ 237.502530][ T52] ? __pfx_phonet_device_notify+0x10/0x10 [ 237.502547][ T52] ? __pfx_vlan_device_event+0x10/0x10 [ 237.502562][ T52] ? __pfx_br_device_event+0x10/0x10 [ 237.502583][ T52] ? raw_notifier+0x9d/0x740 [ 237.502605][ T52] ? isotp_notifier+0xa4/0x6b0 [ 237.502621][ T52] ? cgw_notifier+0xd8/0x3b0 [ 237.502635][ T52] ? packet_notifier+0x76/0xa30 [ 237.502658][ T52] notifier_call_chain+0x1a5/0x3f0 [ 237.502682][ T52] dev_close_many+0x33e/0x4c0 [ 237.502707][ T52] ? __pfx_dev_close_many+0x10/0x10 [ 237.502733][ T52] unregister_netdevice_many_notify+0x628/0x2510 [ 237.502757][ T52] ? lockdep_hardirqs_on+0x9d/0x150 [ 237.502777][ T52] ? __local_bh_enable_ip+0x168/0x200 [ 237.502794][ T52] ? batadv_tt_local_remove+0x119/0x230 [ 237.502812][ T52] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 237.502827][ T52] ? batadv_tt_local_remove+0x119/0x230 [ 237.502844][ T52] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 237.502870][ T52] ? unregister_netdevice_queue+0x2c4/0x400 [ 237.502892][ T52] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 237.502917][ T52] default_device_exit_batch+0x7ff/0x880 [ 237.502947][ T52] ? __pfx_default_device_exit_batch+0x10/0x10 [ 237.502972][ T52] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 237.502995][ T52] ? cfg802154_pernet_exit+0xc3/0xe0 [ 237.503010][ T52] ? __pfx_default_device_exit_batch+0x10/0x10 [ 237.503035][ T52] cleanup_net+0x8af/0xd60 [ 237.503061][ T52] ? __pfx_cleanup_net+0x10/0x10 [ 237.503090][ T52] ? process_scheduled_works+0x9cb/0x18e0 [ 237.503108][ T52] process_scheduled_works+0xac3/0x18e0 [ 237.503138][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 237.503160][ T52] ? assign_work+0x367/0x3d0 [ 237.503180][ T52] worker_thread+0x870/0xd50 [ 237.503205][ T52] ? __kthread_parkme+0x1a8/0x200 [ 237.503227][ T52] ? __pfx_worker_thread+0x10/0x10 [ 237.503246][ T52] kthread+0x7b7/0x940 [ 237.503271][ T52] ? __pfx_worker_thread+0x10/0x10 [ 237.503291][ T52] ? __pfx_kthread+0x10/0x10 [ 237.503312][ T52] ? __pfx_kthread+0x10/0x10 [ 237.503334][ T52] ? __pfx_kthread+0x10/0x10 [ 237.503355][ T52] ? __pfx_kthread+0x10/0x10 [ 237.503377][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.503392][ T52] ? lockdep_hardirqs_on+0x9d/0x150 [ 237.503411][ T52] ? __pfx_kthread+0x10/0x10 [ 237.503433][ T52] ret_from_fork+0x4b/0x80 [ 237.503450][ T52] ? __pfx_kthread+0x10/0x10 [ 237.503472][ T52] ret_from_fork_asm+0x1a/0x30 [ 237.503498][ T52]