last executing test programs: 10.390359649s ago: executing program 4 (id=1314): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x356, &(0x7f00000007c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x320, 0x3a, 0xff, @dev, @local, {[@routing={0x29, 0x4, 0x2, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x2c, 0x0, 0x10, 0x0, 0x0, 0x8, 0x66}, @dstopts={0x3b, 0x12, '\x00', [@hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x7f}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x1, [0xfffffffffffffffa, 0x6452, 0x5, 0xa4]}}, @generic={0x3, 0x43, "f72bd1ff3cec2021ea925f4b6e0435abe0ac34392f409a02e8eac828b61ece480c533361d0be8f1149d3252d41030835b383f4c1ffdf78bb36e04c11478ea42ce47ede"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x32, 0x10, 0x4, 0x8, 0x6, 0xa4, 0x0, [@local, @mcast1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, [{0x4, 0x33, "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"}, {0x4, 0x1, "11fb6825931b"}]}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e40)=ANY=[@ANYRES8=r0], 0x1bd4}}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x800}]]}}}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000000100000104000024000000", @ANYRES32=0x1, @ANYBLOB="0000000000cb23826dcba64bbf00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6(0xa, 0x2, 0x97) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b3f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r9, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454d9, 0x0) close(r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000b0601020000000000000000030000000900020073797a300000000005000100070000004c0008800c00078007001a00242e0000100007800c0018400000000000000009100007800c001b4000000000000000100c00078008000a400000ffff100007800c00028008000140ac1414aa0c000780080003"], 0x80}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000401000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB="08000aa8a359a0b5bc2000", @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0xba01}, 0x0) 10.106628322s ago: executing program 4 (id=1317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r3}, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x800}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xfffffff7}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x4}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x7a3edbe6}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x1}]}}]}, 0x70}}, 0x0) 9.890686155s ago: executing program 4 (id=1320): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) (async) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)="49bb68fe", &(0x7f0000000d40), 0x3, r2}, 0x38) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040)=0x3, 0x4) sendmmsg$inet6(r3, &(0x7f0000003500)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000600)="fd86fbff", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@dstopts={{0x20, 0x29, 0x37, {0x62, 0x0, '\x00', [@pad1]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x33}}}], 0x38}}], 0x2, 0x24000041) 9.733796297s ago: executing program 4 (id=1322): r0 = socket(0x1d, 0x2, 0x4) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000002, 0x3) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000)=0x6e, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) 9.507526379s ago: executing program 4 (id=1325): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 9.290545948s ago: executing program 4 (id=1328): connect$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x4}}, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000040)) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) (async) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)='H', 0x1}], 0x1) r4 = accept4$nfc_llcp(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x60, 0x800) recvmmsg(r4, &(0x7f0000000dc0)=[{{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)=""/118, 0x76}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f00000006c0)=""/1, 0x1}], 0x7, &(0x7f0000000780)=""/50, 0x32}, 0x1000}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/140, 0x8c}, {&(0x7f0000000880)=""/96, 0x60}, {&(0x7f0000000900)=""/43, 0x2b}], 0x3, &(0x7f0000000980)=""/86, 0x56}, 0x9e}, {{&(0x7f0000000a00)=@l2, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a80)=""/199, 0xc7}, {&(0x7f0000000b80)=""/85, 0x55}, {&(0x7f0000000c00)=""/34, 0x22}, {&(0x7f0000000c40)=""/249, 0xf9}], 0x4, &(0x7f0000000d80)=""/22, 0x16}, 0x10000}], 0x3, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000000dc0)=[{{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)=""/118, 0x76}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f00000006c0)=""/1, 0x1}], 0x7, &(0x7f0000000780)=""/50, 0x32}, 0x1000}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/140, 0x8c}, {&(0x7f0000000880)=""/96, 0x60}, {&(0x7f0000000900)=""/43, 0x2b}], 0x3, &(0x7f0000000980)=""/86, 0x56}, 0x9e}, {{&(0x7f0000000a00)=@l2, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a80)=""/199, 0xc7}, {&(0x7f0000000b80)=""/85, 0x55}, {&(0x7f0000000c00)=""/34, 0x22}, {&(0x7f0000000c40)=""/249, 0xf9}], 0x4, &(0x7f0000000d80)=""/22, 0x16}, 0x10000}], 0x3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000052000199df339000fcffdfff1ef400"/28], 0x20}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000052000199df339000fcffdfff1ef400"/28], 0x20}}, 0x0) 4.524593402s ago: executing program 3 (id=1372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 4.350691541s ago: executing program 3 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000063114800000000008510000002000000850000000500000095000000000000009500a5050000000033a2123a53ad71045d5829"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x401, 0x9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x6}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}]}, 0x3c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0xf1}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@union={0x0, 0x3, 0x0, 0x5, 0x1, 0x7, [{0xd, 0x3, 0x1000000}, {0x1, 0x0, 0x1}, {0x2, 0x5, 0x1}]}]}, {0x0, [0x2e]}}, &(0x7f0000000040)=""/33, 0x4b, 0x21, 0x1, 0x401, 0x0, @void, @value}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@union={0x0, 0x3, 0x0, 0x5, 0x1, 0x7, [{0xd, 0x3, 0x1000000}, {0x1, 0x0, 0x1}, {0x2, 0x5, 0x1}]}]}, {0x0, [0x2e]}}, &(0x7f0000000040)=""/33, 0x4b, 0x21, 0x1, 0x401, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1000, '\x00', r5, r6, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.460633041s ago: executing program 3 (id=1377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x3, 0x0, 0x0, 0xf}]}}, &(0x7f0000000f80)=""/4115, 0x26, 0x1013, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00', 0x0, [0x8081, 0x1, 0x20000009, 0x80000000, 0x4009]}, &(0x7f0000000400)=0x54) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="541700010400000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000010000000000000040000000185500000800000000000000000000008500000086000000850000001100000018170000", @ANYRES32, @ANYBLOB="000000000000000018260000", @ANYRES32, @ANYBLOB="000000006b5900001800000002000000000000000000000018360000020000000000000000000000937b8596026b50a58100"/60], &(0x7f0000000300)='GPL\x00', 0x9, 0xffd, &(0x7f0000002340)=""/4093, 0x41000, 0x6, '\x00', 0x0, @fallback=0x14, r2, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x1, 0x0, 0x80000001}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, r1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3, @void, @value}, 0x94) r5 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80, 0x0, @void, @value}, 0x1f) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000003340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0xa0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x1a, 0xc, "f2f53e94fb6c8d05155292ebdb650ca6a8d3de463c4d"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x65, 0xc, "1a7438278bd8a65166474beb324bef6c443e8e10eda158f03e9d7f0cc156c65118c2836f089b2f74f66851f07f0e632305fd058de3d8691671e7f26a0d07e9e36b3f2d7ad712bf16c436e1d11214e2879942bd771d66ed76c7d4d26087a505d8e4"}]}, @NFT_MSG_NEWRULE={0x334, 0x6, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x2e0, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x254, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x248, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x244, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x16, 0x1, "d44e9abe1726fab7bad10e0b3d69bd227772"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "b51876386e67d6a27a6fe7e0c98af7f088c92a9700a4e0556dc9a96e2a4a42a012ad35dfeac4226d0aad7c00ec2143d38de45079c28140fac8ac741c9372efa717dce4d0df70e2b5b1b851e2ce86279c289047b3848f375777ce5c39bd890ce4a45e13f5494f1cccf7d2ab4c6b946cbf92a717fdb1bf5c1907ac9ebfd2e0a67c3d00423d834589e23eadb2753e352375dee70f7f8c25a132e65c10939270062671f6d48ff641d7a0064216fb251856bdf25556ed173d713b0fef291fe39d21b46b7f1fe03cccbdcfeba45e8c0a433bad3cad30305c1be7830b739cdcc208fd33d34d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x488}, 0x1, 0x0, 0x0, 0x5}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070600000000fcdbdf252d0000000c0005000200aaaaaaaaaaaa08002f000000000005002b00f900000008000200", @ANYRES32=r6, @ANYBLOB="05002e003000000005002e"], 0x48}, 0x1, 0x0, 0x0, 0x4008801}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000480)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x18, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xa5, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$bt_hci(r10, 0x84, 0x80, &(0x7f0000001300)=""/4102, &(0x7f0000001080)=0x1006) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r10) 1.626665421s ago: executing program 3 (id=1382): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x53, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x40000003, 0xe0, 0x0, 0x4c, 0x1, 0x7, 0x1ff, 0x9, 0x1}}}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xf0, 0xfffff818, 0x2, 0x2, 0xfffffff8, 0x7}}, {0x12, 0x2, [0x8, 0x80, 0x6, 0x3, 0x401, 0xfd, 0x7]}}]}]}, 0x8c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000000000000000000000000000000000000000000a103cd91e678e62f08c54fcf14e8f98d7b06984d80d5c97c34d91a8d91f64d"], 0x50) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"/268], 0x10c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.626096383s ago: executing program 1 (id=1383): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0xb, 0x24, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf44c449d5092b6ef}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfffff087, 0x1000, &(0x7f0000000240)=""/4096, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0x7, 0xffffffff, 0xfffffffc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000012c0)=[0x1, 0xffffffffffffffff], &(0x7f0000001300)=[{0x2, 0x1, 0xb, 0x7}, {0x1, 0x1, 0x6, 0x6}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r1, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001440), &(0x7f0000001480)=[0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x63, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0xfffffffffffffffd, 0x5, 0x2, 0x0, 0x0, [{{r0}, 0x8000}, {{r0}, 0x1}]}) close(r0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0xb, 0x24, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf44c449d5092b6ef}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfffff087, 0x1000, &(0x7f0000000240)=""/4096, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0x7, 0xffffffff, 0xfffffffc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000012c0)=[0x1, 0xffffffffffffffff], &(0x7f0000001300)=[{0x2, 0x1, 0xb, 0x7}, {0x1, 0x1, 0x6, 0x6}], 0x10, 0x5, @void, @value}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r1, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001440), &(0x7f0000001480)=[0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x63, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0xfffffffffffffffd, 0x5, 0x2, 0x0, 0x0, [{{r0}, 0x8000}, {{r0}, 0x1}]}) (async) close(r0) (async) 1.57869476s ago: executing program 0 (id=1384): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x84, 0x4, 0x6, 0x4, 0x40100, 0x3, 0x9, 0x9, r2}, &(0x7f0000000200)=0x20) 1.38032304s ago: executing program 0 (id=1385): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 1.288096596s ago: executing program 0 (id=1386): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'macvlan1\x00'}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e20, 0x1000003, 'sh\x00', 0x39, 0x404, 0x20006f}, 0x2c) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r2, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) r3 = socket$inet6(0xa, 0x2, 0x4af8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7ff}], 0x3c) 1.234614196s ago: executing program 1 (id=1387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006c0001002bbd7000ffdbdf2500000000195c"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newlink={0x80, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0xb}, @IFLA_GTP_LOCAL6={0x14, 0x8, @mcast1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x9}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.01051764s ago: executing program 2 (id=1389): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) getpid() ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 1.010096044s ago: executing program 3 (id=1390): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) listen(r0, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close(r2) 974.19875ms ago: executing program 1 (id=1391): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000012000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 878.052796ms ago: executing program 0 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbb8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8000}, @NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88d4}, 0x9590f6cc3ea35512) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x11}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x1000}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x13}]}}]}, 0x60}}, 0x0) 786.664862ms ago: executing program 2 (id=1393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x3ff}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x43, 0x9, 0xffffffff, 0x35dfdbfd, {0x1}, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @u32=0xede}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) 767.929148ms ago: executing program 1 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x30, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c9633"}}}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040019000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x3}, 0xe) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0xd0, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x451a72ed, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xe57}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x1}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x4}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffb69b, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0xff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xda3, 0xd}}]}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0xd0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r13}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 649.521153ms ago: executing program 0 (id=1395): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) setsockopt$inet_dccp_int(r0, 0x10d, 0x4, 0x0, 0x0) 574.611831ms ago: executing program 2 (id=1396): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 414.7333ms ago: executing program 1 (id=1397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004840, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x10}}}}], 0x20}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x91) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc005) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 397.936364ms ago: executing program 0 (id=1398): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@mcast2, @mcast2, @local, 0x5, 0x68, 0x7, 0x100, 0x4003, 0x1000010}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10009}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="940000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000064001280080001007369740058000280060008003300000006000e00ff00000008000100", @ANYRES32], 0x94}}, 0x4010) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x4, 0x0, 0x6}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x50, r7, 0x801, 0x0, 0x800, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x50}}, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0xbc, r7, 0x30b, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x265}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc509}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x80}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x64}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000080) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 368.476405ms ago: executing program 2 (id=1399): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\bcpu'], 0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, 0x0, 0x68) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000000c0)={'vcan0', 0x32, 0x33}, 0x8) openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) 268.745642ms ago: executing program 1 (id=1400): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2100, 0x0, &(0x7f00000002c0), 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, r5, 0x331}, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r8 = epoll_create(0xe7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000580)={0x10000000}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1228108a}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "96f09058a37f3f857dddb5d4bf7413b4"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2204c800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000002880)={0x123c, 0x0, 0x1, 0x0, 0x400, {}, [@ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xf8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa84f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$/]%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff0cf}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '-:}#/^({)/^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x10f0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x40, 0x5, "7a819c601841a8e5f955aa1c6b8c19438a185a7af271f8dd9fe7e13d629035e3bdd3599688d83583daf78849ce2c2c19410f7d1f83424506491d4aac"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x84, 0x4, "5cd61481287b858c9d6e0002cbec815c898a6408983a7f351b1c65ad45fb0e9459097313b3fa596d3f295fd0f40aeaae857e3436dcf3de032f558ae9b9b8910adb783ba9ced7180dbc9d579e7e8ed0efcfaefd0d07fa417b43a36c041715fc2a58bedc38ac5ac59129cdaeddb1e54ab18978061934f5b96532f0625565f562fa"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x123c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0x20, &(0x7f0000000e40)={&(0x7f0000000700)=""/67, 0x43, 0x0, &(0x7f0000000e00)=""/25, 0x19}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x66}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002840)=ANY=[@ANYBLOB="05"], 0x48}}, 0x1004c000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r12, {0x7}, {0xff1a5995fa900094}, {0x1}}}, 0x24}}, 0x40044) 202.542694ms ago: executing program 2 (id=1401): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028004000100000000002c0002801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028004000100000000002c00018014000300fc00000000000000000000000000000014000400fe80f0ffffff"], 0xc8}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1f, &(0x7f0000000040)=0x1, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x841, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x51) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0x4, 0x4, 0x418, 0xffffffff, 0x140, 0x140, 0x258, 0xfeffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xff, 0xff, 0xff000000], [0xffffff00, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'dvmrp0\x00', {}, {}, 0x3c, 0x6, 0x4, 0x44}, 0x2f2, 0x118, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@hbh={{0x48}, {0x400, 0x3, 0x1, [0x7f, 0x6, 0xd5, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x0, 0xf000, 0x5, 0x3, 0x9, 0xfffd, 0xc], 0xe}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xff000000], [], 'wg2\x00', 'batadv_slave_1\x00', {}, {}, 0x3b, 0x4}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [], [0x0, 0xff], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'pim6reg1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028004000100000000002c0002801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028004000100000000002c00018014000300fc00000000000000000000000000000014000400fe80f0ffffff"], 0xc8}}, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x1f, &(0x7f0000000040)=0x1, 0x4) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x841, 0x2}, 0x10) (async) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x51) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0x4, 0x4, 0x418, 0xffffffff, 0x140, 0x140, 0x258, 0xfeffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xff, 0xff, 0xff000000], [0xffffff00, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'dvmrp0\x00', {}, {}, 0x3c, 0x6, 0x4, 0x44}, 0x2f2, 0x118, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@hbh={{0x48}, {0x400, 0x3, 0x1, [0x7f, 0x6, 0xd5, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x0, 0xf000, 0x5, 0x3, 0x9, 0xfffd, 0xc], 0xe}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xff000000], [], 'wg2\x00', 'batadv_slave_1\x00', {}, {}, 0x3b, 0x4}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [], [0x0, 0xff], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'pim6reg1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) (async) 51.938698ms ago: executing program 2 (id=1402): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="1600"], 0x20) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f00000008c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fcd833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}, {&(0x7f0000001880)="1439ea", 0x3}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0xfce) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x11}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r9) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="000226bd7000fddbdf251500000004000180f7a574b71d023fc01e9a941dc0"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x80}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230e27bd7000ffdbdf250200000008000100", @ANYRES64=r1, @ANYRESHEX=r2], 0x20}}, 0x4080) 0s ago: executing program 3 (id=1403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ife={0xbc, 0x1, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x200}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x13}}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x6c, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60cda90000363a0000000000000000000000ffff0a010102ff02000000000000000000000000000102009078000000006000641a00023a00ffecdd5c4c5c41ad108e9305728b010000000000000000000000000001000000000000000000"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000069000010000000000100200018010000696c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000100e7ab00040012000000a81697008d68a0328c49d2ee0000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0x9}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x9}, {0x7fff, 0x6, 0x6, 0x7, 0x9, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r10, &(0x7f00000001c0)={{0x3, @default, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @bcast, @bcast, @null]}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) kernel console output (not intermixed with test programs): ode 1 Normal free:3908596kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:100kB local_pcp:68kB free_cma:0kB [ 88.469766][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'. [ 88.514626][ T6150] lowmem_reserve[]: 0 0 0 0 0 [ 88.519466][ T6150] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 88.560542][ T6181] netlink: 68 bytes leftover after parsing attributes in process `syz.3.66'. [ 88.574026][ T6150] Node 0 DMA32: 592*4kB (UM) 496*8kB (UE) 409*16kB (UE) 963*32kB (UME) 358*64kB (UME) 100*128kB (UME) 33*256kB (UME) 12*512kB (UME) 7*1024kB (UM) 1*2048kB (U) 328*4096kB (M) = 1446704kB [ 88.595173][ T6150] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 88.607334][ T6150] Node 1 Normal: 227*4kB (UE) 51*8kB (UME) 53*16kB (UME) 212*32kB (UME) 90*64kB (UME) 39*128kB (UME) 15*256kB (UME) 10*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3908596kB [ 88.642165][ T6150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.652515][ T6150] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.668337][ T6150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.724117][ T6150] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.749939][ T6150] 41135 total pagecache pages [ 88.760095][ T6150] 0 pages in swap cache [ 88.765607][ T6150] Free swap = 124996kB [ 88.792797][ T6150] Total swap = 124996kB [ 88.808930][ T6150] 2097051 pages RAM [ 88.823275][ T6150] 0 pages HighMem/MovableOnly [ 88.830425][ T6150] 427906 pages reserved [ 88.842934][ T6150] 0 pages cma reserved [ 88.970941][ T6187] xt_CT: No such helper "snmp" [ 90.225186][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 90.451268][ T6257] hsr_slave_0 (unregistering): left promiscuous mode [ 90.499468][ T6266] 8021q: VLANs not supported on ip6gre0 [ 90.767739][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'. [ 90.845573][ T6281] Cannot find del_set index 0 as target [ 91.185994][ T6293] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 91.260722][ T6293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.295507][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 91.796288][ T6313] netlink: 68 bytes leftover after parsing attributes in process `syz.1.82'. [ 92.764322][ T6345] Cannot find del_set index 1 as target [ 92.815251][ T6344] netlink: 'syz.4.91': attribute type 21 has an invalid length. [ 92.845440][ T6348] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 92.874126][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'. [ 92.901659][ T6344] netlink: 132 bytes leftover after parsing attributes in process `syz.4.91'. [ 92.955871][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 92.996840][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 93.096284][ T6351] macvtap1: entered promiscuous mode [ 93.110003][ T6351] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 93.138560][ T6351] macvtap1: entered allmulticast mode [ 93.154632][ T6351] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 93.181457][ T6345] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 93.223644][ T6366] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 93.532336][ T6361] team0 (unregistering): Port device team_slave_0 removed [ 93.545625][ T6361] team0 (unregistering): Port device team_slave_1 removed [ 93.845490][ T6384] netlink: 'syz.3.99': attribute type 9 has an invalid length. [ 93.870877][ T6384] netlink: 'syz.3.99': attribute type 6 has an invalid length. [ 94.121509][ T26] IPVS: starting estimator thread 0... [ 94.225117][ T6399] IPVS: using max 18 ests per chain, 43200 per kthread [ 94.227202][ T6396] netlink: 56 bytes leftover after parsing attributes in process `syz.3.102'. [ 94.596525][ T6409] netlink: 'syz.4.106': attribute type 1 has an invalid length. [ 94.729027][ T6412] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 94.861041][ T6415] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 95.355583][ T6434] netlink: 68 bytes leftover after parsing attributes in process `syz.0.112'. [ 95.406930][ T6435] netlink: 'syz.4.113': attribute type 9 has an invalid length. [ 95.927269][ T6456] netlink: 56 bytes leftover after parsing attributes in process `syz.4.116'. [ 96.105847][ T6458] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.107723][ T6462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.119'. [ 96.115223][ T6458] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.133348][ T6458] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.134081][ T6463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.119'. [ 96.143572][ T6458] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.166067][ T6458] bond2: (slave geneve3): making interface the new active one [ 96.176504][ T6458] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 96.279647][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'. [ 96.314017][ T6464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.471593][ T6472] validate_nla: 2 callbacks suppressed [ 96.471615][ T6472] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 96.519082][ T6472] bond1: entered promiscuous mode [ 96.526558][ T6472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.544390][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 96.591373][ T6478] bond1: (slave bridge2): making interface the new active one [ 96.599038][ T6478] bridge2: entered promiscuous mode [ 96.605921][ T6478] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 96.873523][ T6485] warning: `syz.1.123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.921064][ T6492] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 96.932128][ T5887] IPVS: starting estimator thread 0... [ 97.082813][ T6495] IPVS: using max 18 ests per chain, 43200 per kthread [ 97.225094][ T6501] raw_sendmsg: syz.0.127 forgot to set AF_INET. Fix it! [ 97.527690][ T6508] xt_CT: No such helper "snmp" [ 97.674794][ T6522] bridge_slave_0: left allmulticast mode [ 97.711018][ T6522] bridge_slave_0: left promiscuous mode [ 97.755670][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.891315][ T6522] bridge_slave_1: left allmulticast mode [ 97.946016][ T6522] bridge_slave_1: left promiscuous mode [ 97.952168][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.041568][ T6522] bond0: (slave bond_slave_0): Releasing backup interface [ 98.180505][ T6522] bond0: (slave bond_slave_1): Releasing backup interface [ 98.255688][ T6522] team0: Port device team_slave_0 removed [ 98.271868][ T6522] team0: Port device team_slave_1 removed [ 98.279301][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.288854][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.387283][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.395683][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.528820][ T6522] bond2: (slave geneve3): Releasing active interface [ 98.673092][ T6522] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.702079][ T6522] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.721764][ T6522] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.773425][ T6522] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.258497][ T6571] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 99.310964][ T6571] bond3: entered promiscuous mode [ 99.316559][ T6571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.346884][ T6571] bond3: (slave bridge1): making interface the new active one [ 99.360930][ T6571] bridge1: entered promiscuous mode [ 99.375183][ T6571] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 99.530920][ T6521] __nla_validate_parse: 3 callbacks suppressed [ 99.530942][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'. [ 99.562079][ T6585] netlink: 48 bytes leftover after parsing attributes in process `syz.4.139'. [ 99.819006][ T6521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.885162][ T6521] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.982899][ T5843] Bluetooth: hci4: command tx timeout [ 99.995674][ T6521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.174991][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 100.798758][ T6618] xt_CT: No such helper "snmp" [ 100.826922][ T6595] netlink: 'syz.0.138': attribute type 8 has an invalid length. [ 101.633450][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 101.961830][ T6651] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 102.134772][ T6651] bond2: entered promiscuous mode [ 102.152767][ T6651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.206024][ T6662] netlink: 'syz.0.152': attribute type 9 has an invalid length. [ 102.238473][ T6662] netlink: 'syz.0.152': attribute type 6 has an invalid length. [ 102.263587][ T6653] bond2: (slave bridge3): making interface the new active one [ 102.278915][ T6653] bridge3: entered promiscuous mode [ 102.290124][ T6653] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 102.307885][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'. [ 102.665237][ T6673] netlink: 'syz.0.155': attribute type 7 has an invalid length. [ 102.772940][ T6678] Cannot find set identified by id 0 to match [ 102.917875][ T6682] netlink: 'syz.1.156': attribute type 3 has an invalid length. [ 102.946520][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 102.976164][ T6649] netlink: 44 bytes leftover after parsing attributes in process `syz.3.150'. [ 102.990758][ T6685] FAULT_INJECTION: forcing a failure. [ 102.990758][ T6685] name failslab, interval 1, probability 0, space 0, times 1 [ 103.009149][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz.2.158 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 103.009187][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.009198][ T6685] Call Trace: [ 103.009205][ T6685] [ 103.009214][ T6685] dump_stack_lvl+0x241/0x360 [ 103.009244][ T6685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.009266][ T6685] ? __pfx__printk+0x10/0x10 [ 103.009288][ T6685] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 103.009316][ T6685] ? __pfx___might_resched+0x10/0x10 [ 103.009347][ T6685] should_fail_ex+0x40a/0x550 [ 103.009382][ T6685] should_failslab+0xac/0x100 [ 103.009409][ T6685] kmem_cache_alloc_node_noprof+0x77/0x380 [ 103.009433][ T6685] ? __alloc_skb+0x1c3/0x440 [ 103.009459][ T6685] __alloc_skb+0x1c3/0x440 [ 103.009486][ T6685] ? __pfx___alloc_skb+0x10/0x10 [ 103.009509][ T6685] ? netlink_autobind+0xd6/0x2f0 [ 103.009528][ T6685] ? netlink_autobind+0x2b0/0x2f0 [ 103.009552][ T6685] netlink_sendmsg+0x634/0xcb0 [ 103.009584][ T6685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.009609][ T6685] ? aa_sock_msg_perm+0x91/0x160 [ 103.009643][ T6685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.009660][ T6685] __sock_sendmsg+0x221/0x270 [ 103.009692][ T6685] ____sys_sendmsg+0x53a/0x860 [ 103.009725][ T6685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.009745][ T6685] ? __fget_files+0x2a/0x410 [ 103.009775][ T6685] ? __fget_files+0x2a/0x410 [ 103.009812][ T6685] __sys_sendmsg+0x269/0x350 [ 103.009841][ T6685] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.009879][ T6685] ? do_sys_openat2+0x17a/0x1d0 [ 103.009936][ T6685] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.009966][ T6685] ? do_syscall_64+0x100/0x230 [ 103.009997][ T6685] ? do_syscall_64+0xb6/0x230 [ 103.010027][ T6685] do_syscall_64+0xf3/0x230 [ 103.010053][ T6685] ? clear_bhb_loop+0x35/0x90 [ 103.010082][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.010107][ T6685] RIP: 0033:0x7f2d75d8d169 [ 103.010130][ T6685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.010145][ T6685] RSP: 002b:00007f2d76b82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.010176][ T6685] RAX: ffffffffffffffda RBX: 00007f2d75fa5fa0 RCX: 00007f2d75d8d169 [ 103.010190][ T6685] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000009 [ 103.010202][ T6685] RBP: 00007f2d76b82090 R08: 0000000000000000 R09: 0000000000000000 [ 103.010214][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.010225][ T6685] R13: 0000000000000000 R14: 00007f2d75fa5fa0 R15: 00007ffc4ebbadb8 [ 103.010256][ T6685] [ 103.028580][ T6688] netlink: 48 bytes leftover after parsing attributes in process `syz.3.150'. [ 103.299209][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 103.325512][ T6688] netlink: 56 bytes leftover after parsing attributes in process `syz.3.150'. [ 103.574356][ T6688] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 103.736432][ T6698] xt_CT: No such helper "snmp" [ 103.877796][ T6709] lo speed is unknown, defaulting to 1000 [ 104.074402][ T6709] lo speed is unknown, defaulting to 1000 [ 104.092557][ T6709] lo speed is unknown, defaulting to 1000 [ 104.398571][ T6722] sit0: entered promiscuous mode [ 104.421710][ T6722] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 104.535118][ T6722] __nla_validate_parse: 4 callbacks suppressed [ 104.535138][ T6722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.166'. [ 104.794651][ T6727] netlink: 'syz.2.167': attribute type 1 has an invalid length. [ 104.816447][ T5887] lo speed is unknown, defaulting to 1000 [ 104.823556][ T6709] infiniband syz0: set down [ 104.828289][ T6709] infiniband syz0: added lo [ 104.865735][ T6709] syz0: rxe_create_cq: returned err = -12 [ 104.947223][ T6709] infiniband syz0: Couldn't create ib_mad CQ [ 104.961572][ T6709] infiniband syz0: Couldn't open port 1 [ 104.966526][ T6727] bond3: entered promiscuous mode [ 104.992000][ T6727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.010433][ T6709] RDS/IB: syz0: added [ 105.020167][ T6709] smc: adding ib device syz0 with port count 1 [ 105.027530][ T6709] smc: ib device syz0 port 1 has pnetid [ 105.079605][ T6730] bond3: (slave bridge4): making interface the new active one [ 105.088361][ T6730] bridge4: entered promiscuous mode [ 105.114525][ T6730] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 105.155770][ T2148] lo speed is unknown, defaulting to 1000 [ 105.168010][ T6709] lo speed is unknown, defaulting to 1000 [ 105.265679][ T6742] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.422227][ T6750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 105.464073][ T6750] netlink: 'syz.2.172': attribute type 9 has an invalid length. [ 105.507270][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.172'. [ 105.514981][ T6752] netlink: 'syz.2.172': attribute type 3 has an invalid length. [ 105.550721][ T6742] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.602829][ T6709] lo speed is unknown, defaulting to 1000 [ 105.696204][ T6742] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.885893][ T6742] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.971613][ T6709] lo speed is unknown, defaulting to 1000 [ 106.212582][ T6742] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.313779][ T6773] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 106.371772][ T6742] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.404289][ T6709] lo speed is unknown, defaulting to 1000 [ 106.449108][ T6742] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.505860][ T6742] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.768069][ T6782] FAULT_INJECTION: forcing a failure. [ 106.768069][ T6782] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.809875][ T6782] CPU: 0 UID: 0 PID: 6782 Comm: syz.1.176 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 106.809905][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.809915][ T6782] Call Trace: [ 106.809922][ T6782] [ 106.809930][ T6782] dump_stack_lvl+0x241/0x360 [ 106.809962][ T6782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.809983][ T6782] ? __pfx__printk+0x10/0x10 [ 106.810010][ T6782] ? snprintf+0xda/0x120 [ 106.810035][ T6782] should_fail_ex+0x40a/0x550 [ 106.810070][ T6782] _copy_to_user+0x31/0xb0 [ 106.810097][ T6782] simple_read_from_buffer+0xca/0x150 [ 106.810128][ T6782] proc_fail_nth_read+0x1e9/0x250 [ 106.810157][ T6782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.810187][ T6782] ? rw_verify_area+0x243/0x630 [ 106.810206][ T6782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.810233][ T6782] vfs_read+0x1f8/0xb40 [ 106.810255][ T6782] ? fdget_pos+0x254/0x320 [ 106.810284][ T6782] ? __pfx___mutex_lock+0x10/0x10 [ 106.810312][ T6782] ? __pfx_vfs_read+0x10/0x10 [ 106.810335][ T6782] ? __fget_files+0x2a/0x410 [ 106.810373][ T6782] ? __fget_files+0x395/0x410 [ 106.810397][ T6782] ? __fget_files+0x2a/0x410 [ 106.810434][ T6782] ksys_read+0x18f/0x2b0 [ 106.810457][ T6782] ? __pfx_ksys_read+0x10/0x10 [ 106.810477][ T6782] ? do_syscall_64+0x100/0x230 [ 106.810508][ T6782] ? do_syscall_64+0xb6/0x230 [ 106.810537][ T6782] do_syscall_64+0xf3/0x230 [ 106.810564][ T6782] ? clear_bhb_loop+0x35/0x90 [ 106.810592][ T6782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.810616][ T6782] RIP: 0033:0x7fdfff38bb7c [ 106.810634][ T6782] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.810650][ T6782] RSP: 002b:00007fe00020d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.810671][ T6782] RAX: ffffffffffffffda RBX: 00007fdfff5a5fa0 RCX: 00007fdfff38bb7c [ 106.810684][ T6782] RDX: 000000000000000f RSI: 00007fe00020d0a0 RDI: 0000000000000004 [ 106.810694][ T6782] RBP: 00007fe00020d090 R08: 0000000000000000 R09: 0000000000000000 [ 106.810705][ T6782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.810715][ T6782] R13: 0000000000000000 R14: 00007fdfff5a5fa0 R15: 00007ffedb01ed18 [ 106.810747][ T6782] [ 107.077952][ T6784] xt_CT: No such helper "snmp" [ 107.085463][ T6794] netlink: 68 bytes leftover after parsing attributes in process `syz.3.179'. [ 107.220101][ T6709] lo speed is unknown, defaulting to 1000 [ 107.709415][ T6808] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 107.747290][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 107.817970][ T6808] bond4: entered promiscuous mode [ 107.850473][ T6808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 107.907386][ T6812] bond4: (slave bridge2): making interface the new active one [ 107.931671][ T6812] bridge2: entered promiscuous mode [ 107.944723][ T6812] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 108.208397][ T6820] Bluetooth: MGMT ver 1.23 [ 108.301791][ T6829] netlink: 'syz.3.186': attribute type 10 has an invalid length. [ 108.331363][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 108.424815][ T6829] team0: Port device dummy0 added [ 108.467631][ T6832] lo speed is unknown, defaulting to 1000 [ 108.532339][ T6844] netlink: 'syz.4.188': attribute type 5 has an invalid length. [ 108.754443][ T6848] FAULT_INJECTION: forcing a failure. [ 108.754443][ T6848] name failslab, interval 1, probability 0, space 0, times 0 [ 108.767495][ T6848] CPU: 1 UID: 0 PID: 6848 Comm: syz.3.189 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 108.767520][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.767531][ T6848] Call Trace: [ 108.767538][ T6848] [ 108.767547][ T6848] dump_stack_lvl+0x241/0x360 [ 108.767577][ T6848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.767599][ T6848] ? __pfx__printk+0x10/0x10 [ 108.767636][ T6848] should_fail_ex+0x40a/0x550 [ 108.767670][ T6848] should_failslab+0xac/0x100 [ 108.767697][ T6848] ? skb_clone+0x20c/0x390 [ 108.767720][ T6848] kmem_cache_alloc_noprof+0x70/0x380 [ 108.767752][ T6848] skb_clone+0x20c/0x390 [ 108.767781][ T6848] __netlink_deliver_tap+0x3c4/0x7f0 [ 108.767823][ T6848] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.767850][ T6848] netlink_deliver_tap+0x19d/0x1b0 [ 108.767880][ T6848] netlink_unicast+0x7c4/0x990 [ 108.767917][ T6848] ? __pfx_netlink_unicast+0x10/0x10 [ 108.767940][ T6848] ? __virt_addr_valid+0x45f/0x530 [ 108.767960][ T6848] ? __phys_addr_symbol+0x2f/0x70 [ 108.767977][ T6848] ? __check_object_size+0x47a/0x730 [ 108.768009][ T6848] netlink_sendmsg+0x8de/0xcb0 [ 108.768043][ T6848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.768067][ T6848] ? aa_sock_msg_perm+0x91/0x160 [ 108.768103][ T6848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.768120][ T6848] __sock_sendmsg+0x221/0x270 [ 108.768151][ T6848] ____sys_sendmsg+0x53a/0x860 [ 108.768197][ T6848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.768218][ T6848] ? __fget_files+0x2a/0x410 [ 108.768248][ T6848] ? __fget_files+0x2a/0x410 [ 108.768286][ T6848] __sys_sendmsg+0x269/0x350 [ 108.768316][ T6848] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.768355][ T6848] ? do_sys_openat2+0x17a/0x1d0 [ 108.768415][ T6848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.768444][ T6848] ? do_syscall_64+0x100/0x230 [ 108.768475][ T6848] ? do_syscall_64+0xb6/0x230 [ 108.768505][ T6848] do_syscall_64+0xf3/0x230 [ 108.768531][ T6848] ? clear_bhb_loop+0x35/0x90 [ 108.768562][ T6848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.768586][ T6848] RIP: 0033:0x7f2c3518d169 [ 108.768604][ T6848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.768620][ T6848] RSP: 002b:00007f2c36050038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.768642][ T6848] RAX: ffffffffffffffda RBX: 00007f2c353a5fa0 RCX: 00007f2c3518d169 [ 108.768655][ T6848] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000009 [ 108.768667][ T6848] RBP: 00007f2c36050090 R08: 0000000000000000 R09: 0000000000000000 [ 108.768679][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.768690][ T6848] R13: 0000000000000000 R14: 00007f2c353a5fa0 R15: 00007ffec1d917e8 [ 108.768719][ T6848] [ 108.768769][ T6848] netlink: 'syz.3.189': attribute type 9 has an invalid length. [ 109.063141][ T6848] netlink: 'syz.3.189': attribute type 6 has an invalid length. [ 109.466845][ T6859] xt_CT: No such helper "snmp" [ 109.715370][ T6875] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 109.851767][ T6881] netlink: 68 bytes leftover after parsing attributes in process `syz.1.197'. [ 109.867574][ T6875] bond4: entered promiscuous mode [ 109.873816][ T6875] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.943005][ T6879] bond4: (slave bridge5): making interface the new active one [ 109.966127][ T6879] bridge5: entered promiscuous mode [ 109.985313][ T6879] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 110.456366][ T6888] netlink: 'syz.3.200': attribute type 29 has an invalid length. [ 110.634944][ T6896] netlink: 'syz.0.201': attribute type 29 has an invalid length. [ 110.682848][ T6896] netlink: 'syz.0.201': attribute type 29 has an invalid length. [ 110.877311][ T6903] lo speed is unknown, defaulting to 1000 [ 111.379286][ T6930] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 111.420908][ T6930] bond1: entered promiscuous mode [ 111.438040][ T6930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.512927][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 111.608976][ T6930] bond1: (slave bridge2): making interface the new active one [ 111.624562][ T6930] bridge2: entered promiscuous mode [ 111.667295][ T6930] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 111.835624][ T6939] xt_CT: No such helper "snmp" [ 112.672913][ T6972] netlink: 68 bytes leftover after parsing attributes in process `syz.0.215'. [ 112.842999][ T6978] trusted_key: syz.3.217 sent an empty control message without MSG_MORE. [ 113.495950][ T7008] team_slave_0: entered allmulticast mode [ 113.685219][ T7015] vlan2: entered promiscuous mode [ 113.690443][ T7015] team0: entered promiscuous mode [ 113.704176][ T7015] team_slave_0: entered promiscuous mode [ 113.710325][ T7015] team_slave_1: entered promiscuous mode [ 114.122407][ T7023] xt_CT: No such helper "snmp" [ 114.593559][ T7049] veth1_macvtap: left promiscuous mode [ 114.840328][ T7045] lo speed is unknown, defaulting to 1000 [ 115.378754][ T7074] syzkaller0: entered promiscuous mode [ 115.455021][ T7074] syzkaller0: entered allmulticast mode [ 116.171368][ T7122] netlink: 92 bytes leftover after parsing attributes in process `syz.3.247'. [ 116.180904][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 118.441698][ T7144] team0: Device macvtap0 is up. Set it down before adding it as a team port [ 118.477589][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 118.674902][ T7149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.921653][ T7149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.153544][ T7149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.198941][ T7166] syzkaller1: entered promiscuous mode [ 119.228408][ T7166] syzkaller1: entered allmulticast mode [ 119.591964][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.269'. [ 119.695959][ T7149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.714326][ T7183] smc: net device bond0 applied user defined pnetid SYZ0 [ 119.748273][ T7186] smc: net device bond0 erased user defined pnetid SYZ0 [ 119.946162][ T7149] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.033745][ T7149] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.088067][ T7149] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.097389][ T7196] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 120.131475][ T7149] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.220155][ T7201] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 120.318702][ T6226] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 120.350496][ T7203] 8021q: adding VLAN 0 to HW filter on device bond5 [ 120.514391][ T6226] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 120.826718][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'. [ 120.848155][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 120.881532][ T7224] bridge0: port 1(syz_tun) entered blocking state [ 120.891186][ T7224] bridge0: port 1(syz_tun) entered disabled state [ 120.906725][ T7224] syz_tun: entered allmulticast mode [ 120.920672][ T7224] syz_tun: entered promiscuous mode [ 120.942145][ T7224] bridge0: port 1(syz_tun) entered blocking state [ 120.949083][ T7224] bridge0: port 1(syz_tun) entered forwarding state [ 121.111121][ T7235] netlink: 'syz.3.288': attribute type 9 has an invalid length. [ 121.128897][ T7235] netlink: 'syz.3.288': attribute type 6 has an invalid length. [ 121.285633][ T7242] netlink: 'syz.4.291': attribute type 9 has an invalid length. [ 121.301765][ T7242] netlink: 'syz.4.291': attribute type 6 has an invalid length. [ 122.080424][ T7256] ip6gretap0: entered promiscuous mode [ 122.097386][ T7256] macsec1: entered promiscuous mode [ 122.109771][ T7256] macsec1: entered allmulticast mode [ 122.122865][ T7256] ip6gretap0: entered allmulticast mode [ 122.477584][ T7263] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.529957][ T7267] netlink: 'syz.2.298': attribute type 12 has an invalid length. [ 122.626134][ T7263] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.785270][ T7263] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.852211][ T7282] netlink: 'syz.2.302': attribute type 9 has an invalid length. [ 122.909375][ T7282] netlink: 'syz.2.302': attribute type 6 has an invalid length. [ 122.994886][ T7263] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.148781][ T7296] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 123.333213][ T7263] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.363815][ T7301] netlink: 5 bytes leftover after parsing attributes in process `syz.4.305'. [ 123.394839][ T7263] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.430875][ T7307] netlink: 132 bytes leftover after parsing attributes in process `syz.4.305'. [ 123.456955][ T7263] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.500373][ T7263] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.757135][ T7320] netlink: 68 bytes leftover after parsing attributes in process `syz.1.310'. [ 123.768060][ T7321] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 123.894438][ T7321] bond2: entered promiscuous mode [ 123.973183][ T7321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.998174][ T7332] batadv_slave_1: entered promiscuous mode [ 124.006482][ T7331] batadv_slave_1: left promiscuous mode [ 124.068793][ T7326] bond2: (slave bridge3): making interface the new active one [ 124.114681][ T7326] bridge3: entered promiscuous mode [ 124.121357][ T7326] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 124.319748][ T7342] ªªªªªªo]Uü.ž: renamed from lo (while UP) [ 124.530204][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 125.213735][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'. [ 125.393207][ T7392] Illegal XDP return value 4294967274 on prog (id 162) dev N/A, expect packet loss! [ 125.466454][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 125.651347][ T7404] bond5: entered promiscuous mode [ 125.689472][ T7404] bond5: entered allmulticast mode [ 125.710821][ T7404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 126.548252][ T7439] netlink: 'syz.1.343': attribute type 9 has an invalid length. [ 126.556430][ T7439] netlink: 'syz.1.343': attribute type 6 has an invalid length. [ 126.936789][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 127.338113][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'. [ 127.382951][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'. [ 127.686868][ T7477] netlink: 'syz.2.356': attribute type 9 has an invalid length. [ 127.733002][ T7477] netlink: 'syz.2.356': attribute type 6 has an invalid length. [ 127.807776][ T7487] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 128.093442][ T7498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.362'. [ 128.385089][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 128.573768][ T7527] __nla_validate_parse: 3 callbacks suppressed [ 128.573790][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 128.735428][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 129.076538][ T7543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.105242][ T7543] : entered promiscuous mode [ 129.603542][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 130.334588][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 130.359284][ T7594] x_tables: duplicate underflow at hook 1 [ 130.515913][ T7598] syz.4.390: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 130.568867][ T7598] CPU: 1 UID: 0 PID: 7598 Comm: syz.4.390 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 130.568899][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.568911][ T7598] Call Trace: [ 130.568918][ T7598] [ 130.568926][ T7598] dump_stack_lvl+0x241/0x360 [ 130.568958][ T7598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.568980][ T7598] ? __pfx__printk+0x10/0x10 [ 130.569004][ T7598] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 130.569029][ T7598] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 130.569057][ T7598] warn_alloc+0x278/0x410 [ 130.569083][ T7598] ? __pfx_warn_alloc+0x10/0x10 [ 130.569110][ T7598] ? packet_set_ring+0x6e2/0x24a0 [ 130.569138][ T7598] ? __get_vm_area_node+0x1c8/0x2d0 [ 130.569164][ T7598] ? __get_vm_area_node+0x25c/0x2d0 [ 130.569199][ T7598] __vmalloc_node_range_noprof+0x62f/0x1380 [ 130.569261][ T7598] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.569287][ T7598] ? rcu_is_watching+0x15/0xb0 [ 130.569312][ T7598] ? packet_set_ring+0x6e2/0x24a0 [ 130.569339][ T7598] vzalloc_noprof+0x79/0x90 [ 130.569357][ T7598] ? packet_set_ring+0x6e2/0x24a0 [ 130.569384][ T7598] packet_set_ring+0x6e2/0x24a0 [ 130.569436][ T7598] ? __pfx_packet_set_ring+0x10/0x10 [ 130.569473][ T7598] ? __local_bh_enable_ip+0x168/0x200 [ 130.569497][ T7598] ? __might_fault+0xaa/0x120 [ 130.569516][ T7598] ? __might_fault+0xc6/0x120 [ 130.569537][ T7598] ? _copy_from_user+0x95/0xb0 [ 130.569570][ T7598] packet_setsockopt+0x1096/0x1870 [ 130.569604][ T7598] ? __pfx_packet_setsockopt+0x10/0x10 [ 130.569631][ T7598] ? __lock_acquire+0x1397/0x2100 [ 130.569671][ T7598] ? aa_sk_perm+0x96d/0xab0 [ 130.569707][ T7598] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.569736][ T7598] ? __pfx_lock_acquire+0x10/0x10 [ 130.569761][ T7598] ? aa_sock_opt_perm+0x79/0x120 [ 130.569796][ T7598] ? __pfx_packet_setsockopt+0x10/0x10 [ 130.569822][ T7598] do_sock_setsockopt+0x3af/0x720 [ 130.569858][ T7598] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 130.569886][ T7598] ? __fget_files+0x395/0x410 [ 130.569912][ T7598] ? __fget_files+0x2a/0x410 [ 130.569948][ T7598] __x64_sys_setsockopt+0x1ee/0x280 [ 130.569977][ T7598] do_syscall_64+0xf3/0x230 [ 130.570005][ T7598] ? clear_bhb_loop+0x35/0x90 [ 130.570035][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.570071][ T7598] RIP: 0033:0x7fc7def8d169 [ 130.570089][ T7598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.570104][ T7598] RSP: 002b:00007fc7dfe24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.570126][ T7598] RAX: ffffffffffffffda RBX: 00007fc7df1a5fa0 RCX: 00007fc7def8d169 [ 130.570139][ T7598] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004 [ 130.570150][ T7598] RBP: 00007fc7df00e2a0 R08: 000000000000001c R09: 0000000000000000 [ 130.570162][ T7598] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 130.570174][ T7598] R13: 0000000000000000 R14: 00007fc7df1a5fa0 R15: 00007ffc87a49868 [ 130.570205][ T7598] [ 130.572197][ T7598] Mem-Info: [ 130.883909][ T7598] active_anon:5023 inactive_anon:0 isolated_anon:0 [ 130.883909][ T7598] active_file:1499 inactive_file:38317 isolated_file:0 [ 130.883909][ T7598] unevictable:768 dirty:240 writeback:0 [ 130.883909][ T7598] slab_reclaimable:10177 slab_unreclaimable:101918 [ 130.883909][ T7598] mapped:30927 shmem:1400 pagetables:946 [ 130.883909][ T7598] sec_pagetables:0 bounce:0 [ 130.883909][ T7598] kernel_misc_reclaimable:0 [ 130.883909][ T7598] free:1336795 free_pcp:402 free_cma:0 [ 130.932565][ T7598] Node 0 active_anon:20092kB inactive_anon:0kB active_file:5996kB inactive_file:153196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123708kB dirty:960kB writeback:0kB shmem:4064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11968kB pagetables:3784kB sec_pagetables:0kB all_unreclaimable? no [ 130.946819][ T7608] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20001 [ 130.980586][ T7598] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 131.021959][ T7598] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.088549][ T7598] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 131.114810][ T7598] Node 0 DMA32 free:1422244kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:20052kB inactive_anon:0kB active_file:5996kB inactive_file:152872kB unevictable:1536kB writepending:960kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:2348kB local_pcp:600kB free_cma:0kB [ 131.145967][ T7598] lowmem_reserve[]: 0 0 0 0 0 [ 131.151311][ T7598] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.180893][ T7613] netlink: 68 bytes leftover after parsing attributes in process `syz.0.394'. [ 131.238471][ T7598] lowmem_reserve[]: 0 0 0 0 0 [ 131.258763][ T7598] Node 1 Normal free:3908796kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:236kB local_pcp:108kB free_cma:0kB [ 131.342763][ T7598] lowmem_reserve[]: 0 0 0 0 0 [ 131.362818][ T7598] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.404654][ T7598] Node 0 DMA32: 2*4kB (UM) 39*8kB (ME) 77*16kB (ME) 78*32kB (UME) 610*64kB (UME) 168*128kB (UME) 44*256kB (UME) 15*512kB (UME) 8*1024kB (UME) 5*2048kB (UME) 322*4096kB (M) = 1420880kB [ 131.475249][ T7598] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 131.530907][ T7598] Node 1 Normal: 229*4kB (UE) 51*8kB (UME) 53*16kB (UME) 206*32kB (UME) 92*64kB (UME) 39*128kB (UME) 16*256kB (UME) 10*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3908796kB [ 131.609007][ T7598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.622513][ T7598] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.641913][ T7598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.652166][ T7598] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.697316][ T7598] 41220 total pagecache pages [ 131.715904][ T7598] 0 pages in swap cache [ 131.730752][ T7598] Free swap = 124996kB [ 131.742536][ T7629] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 131.761981][ T7598] Total swap = 124996kB [ 131.771330][ T7598] 2097051 pages RAM [ 131.783455][ T7629] netlink: 'syz.1.400': attribute type 2 has an invalid length. [ 131.793614][ T7598] 0 pages HighMem/MovableOnly [ 131.809612][ T7598] 427906 pages reserved [ 131.829081][ T7598] 0 pages cma reserved [ 131.965247][ T7631] netlink: 256 bytes leftover after parsing attributes in process `syz.2.401'. [ 132.295882][ T7646] syzkaller0: entered allmulticast mode [ 132.533135][ T7633] syzkaller0: left allmulticast mode [ 132.696175][ T7655] ipip0: entered promiscuous mode [ 132.780622][ T7657] pim6reg: entered allmulticast mode [ 132.791728][ T7657] pim6reg: left allmulticast mode [ 132.878618][ T7661] lo speed is unknown, defaulting to 1000 [ 132.921551][ T7664] netlink: 212 bytes leftover after parsing attributes in process `syz.2.410'. [ 133.224555][ T7671] bridge0: port 1(syz_tun) entered disabled state [ 133.346473][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.355840][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.370019][ T7685] x_tables: duplicate underflow at hook 1 [ 133.518643][ T7671] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.539525][ T7671] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.561980][ T7671] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.578059][ T7671] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.649093][ T7671] bond3: left promiscuous mode [ 133.703218][ T7671] bridge1: left promiscuous mode [ 133.742201][ T7671] bond4: left promiscuous mode [ 133.752542][ T7671] bridge2: left promiscuous mode [ 133.832351][ T7687] batadv_slave_0: entered promiscuous mode [ 133.843421][ T7688] netlink: 228 bytes leftover after parsing attributes in process `syz.3.416'. [ 134.279556][ T7711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.421'. [ 134.293470][ T7711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.421'. [ 134.310998][ T7711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.421'. [ 134.346145][ T7711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.421'. [ 134.452005][ T7714] lo speed is unknown, defaulting to 1000 [ 134.462468][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.424'. [ 134.729880][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 135.074850][ T7732] lo speed is unknown, defaulting to 1000 [ 135.107186][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 135.575140][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 135.701894][ T7759] batadv1: entered promiscuous mode [ 135.907229][ T7765] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 136.269733][ T7774] netlink: 'syz.1.428': attribute type 27 has an invalid length. [ 136.861159][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'. [ 137.010973][ T7793] syz_tun: left allmulticast mode [ 137.041231][ T7793] syz_tun: left promiscuous mode [ 137.060743][ T7793] bridge0: port 1(syz_tun) entered disabled state [ 137.327546][ T7809] netlink: 'syz.2.445': attribute type 9 has an invalid length. [ 137.374888][ T7809] netlink: 'syz.2.445': attribute type 6 has an invalid length. [ 137.754562][ T7821] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 138.431163][ T7849] xt_cgroup: invalid path, errno=-2 [ 138.921392][ T7858] __nla_validate_parse: 4 callbacks suppressed [ 138.921417][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 139.089852][ T7860] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.174833][ T7860] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 139.372401][ T7876] netlink: 68 bytes leftover after parsing attributes in process `syz.1.468'. [ 139.813739][ T7895] lo speed is unknown, defaulting to 1000 [ 140.124255][ T7901] netlink: 2 bytes leftover after parsing attributes in process `syz.2.475'. [ 140.450883][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 140.907727][ T7930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 141.517527][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.488'. [ 141.547479][ T7950] netlink: 36 bytes leftover after parsing attributes in process `syz.3.488'. [ 141.836464][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 141.988749][ T7967] netlink: 56 bytes leftover after parsing attributes in process `syz.4.493'. [ 141.997934][ T7967] netlink: 576 bytes leftover after parsing attributes in process `syz.4.493'. [ 142.155024][ T7972] netlink: 112 bytes leftover after parsing attributes in process `syz.3.492'. [ 142.954197][ T8014] vlan0: entered promiscuous mode [ 143.222077][ T5843] Bluetooth: hci4: link tx timeout [ 143.227831][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.248586][ T8027] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 143.442293][ T5842] Bluetooth: hci4: link tx timeout [ 143.448567][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.464590][ T8027] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 143.484460][ T5842] Bluetooth: hci4: link tx timeout [ 143.490696][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.763509][ T8049] IPVS: set_ctl: invalid protocol: 26 0.0.0.0:0 [ 143.771802][ T5842] Bluetooth: hci4: link tx timeout [ 143.777268][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.803060][ T5842] Bluetooth: hci4: link tx timeout [ 143.809114][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.818308][ T8050] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 143.882578][ T8050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.894592][ T8050] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 144.070887][ T8061] xt_socket: unknown flags 0x4 [ 144.109629][ T8061] __nla_validate_parse: 4 callbacks suppressed [ 144.109653][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'. [ 144.765525][ T8087] No such timeout policy "syz0" [ 144.795610][ T5842] Bluetooth: hci4: link tx timeout [ 144.802110][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.054446][ T8095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.520'. [ 145.133535][ T8095] netlink: 'syz.4.520': attribute type 7 has an invalid length. [ 145.162971][ T8095] netlink: 'syz.4.520': attribute type 8 has an invalid length. [ 145.220780][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 145.270903][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 145.284250][ T5842] Bluetooth: hci4: link tx timeout [ 145.289595][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.768908][ T8130] netlink: 68 bytes leftover after parsing attributes in process `syz.2.529'. [ 145.848391][ T8125] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode [ 145.870736][ T8125] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 146.678907][ T8169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'. [ 146.730381][ T8169] batman_adv: batadv0: Adding interface: syz_tun [ 146.751194][ T8169] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.842815][ T8169] batman_adv: batadv0: Interface activated: syz_tun [ 146.866338][ T8179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.538'. [ 146.909316][ T8179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.538'. [ 146.988929][ T8187] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.013021][ T8187] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.051177][ T8187] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.102793][ T8187] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.468303][ T8213] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 147.522571][ T8213] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 147.543041][ T7674] syzkaller1: tun_net_xmit 90 [ 147.548094][ T8213] syzkaller1: Linktype set failed because interface is up [ 147.587653][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.545'. [ 148.101915][ T8234] xt_CT: No such helper "snmp" [ 149.697021][ T8284] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 149.729431][ T8284] macsec0: entered promiscuous mode [ 149.751526][ T8284] macsec0: entered allmulticast mode [ 149.757387][ T8284] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 150.174347][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 150.310995][ T8315] lo speed is unknown, defaulting to 1000 [ 151.020292][ T8332] xt_CT: No such helper "snmp" [ 151.028117][ T8329] lo speed is unknown, defaulting to 1000 [ 151.697940][ T8330] lo speed is unknown, defaulting to 1000 [ 151.950424][ T8315] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.066012][ T8315] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.239053][ T8315] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.404451][ T8315] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.540764][ T8315] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.617707][ T8315] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.739284][ T8315] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.767139][ T8315] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.698036][ T8387] lo speed is unknown, defaulting to 1000 [ 154.265064][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.584'. [ 154.406750][ T8411] netlink: 'syz.0.589': attribute type 9 has an invalid length. [ 154.625503][ T8413] netlink: 'syz.0.589': attribute type 9 has an invalid length. [ 155.248037][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.596'. [ 155.485091][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 155.517217][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: syz_tun [ 155.530763][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.568685][ T8443] team0: Device ipvlan2 failed to register rx_handler [ 156.363981][ T8473] lo speed is unknown, defaulting to 1000 [ 156.397832][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 156.663724][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 156.873725][ T8484] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 156.921518][ T8484] bond6: (slave vti0): Error -95 calling set_mac_address [ 156.969923][ T8493] netlink: 236 bytes leftover after parsing attributes in process `syz.2.611'. [ 157.148247][ T8494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.288854][ T8491] lo speed is unknown, defaulting to 1000 [ 157.582867][ T8476] netlink: 830 bytes leftover after parsing attributes in process `syz.0.608'. [ 157.627675][ T8476] netlink: 9 bytes leftover after parsing attributes in process `syz.0.608'. [ 157.688719][ T8476] 0·: renamed from hsr0 [ 157.726134][ T8476] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.868080][ T8476] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.908022][ T8476] 0·: entered allmulticast mode [ 157.928331][ T8476] hsr_slave_0: entered allmulticast mode [ 157.950685][ T8476] hsr_slave_1: entered allmulticast mode [ 157.978176][ T8476] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 158.625800][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.633417][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.735984][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 158.886275][ T8527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.890033][ T8510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 158.899264][ T8527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.069867][ T8527] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.084544][ T8527] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.099551][ T8527] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.109896][ T8527] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.199020][ T8514] lo speed is unknown, defaulting to 1000 [ 159.647649][ T8517] lo speed is unknown, defaulting to 1000 [ 160.434265][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.622'. [ 161.361060][ T8588] netlink: 44 bytes leftover after parsing attributes in process `syz.1.629'. [ 161.481909][ T8588] batman_adv: batadv0: Interface deactivated: syz_tun [ 161.524196][ T8588] bridge0: port 3(batadv1) entered disabled state [ 161.530984][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.538651][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.881211][ T8588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.908957][ T8588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.102763][ T8588] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.111205][ T8588] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.182798][ T8588] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.191317][ T8588] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.364374][ T8588] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 162.560413][ T8617] sctp: [Deprecated]: syz.1.635 (pid 8617) Use of int in maxseg socket option. [ 162.560413][ T8617] Use struct sctp_assoc_value instead [ 162.913644][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 163.544418][ T8645] xt_CT: No such helper "snmp" [ 163.795249][ T8660] netlink: 5148 bytes leftover after parsing attributes in process `syz.0.646'. [ 163.911748][ T8664] netlink: 'syz.4.649': attribute type 14 has an invalid length. [ 164.407580][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 164.526163][ T8681] Cannot find add_set index 3 as target [ 164.862273][ T8703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.663'. [ 164.891609][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 165.078085][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 165.274617][ T8713] xt_CT: No such helper "snmp" [ 165.551928][ T8724] netlink: 'syz.3.669': attribute type 21 has an invalid length. [ 165.721940][ T8732] lo speed is unknown, defaulting to 1000 [ 166.119570][ T8747] netlink: 188 bytes leftover after parsing attributes in process `syz.3.675'. [ 166.134273][ T8747] macsec0: entered allmulticast mode [ 166.203366][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 166.289642][ T8752] netlink: 48 bytes leftover after parsing attributes in process `syz.3.678'. [ 166.711313][ T8769] vlan2: entered promiscuous mode [ 166.716931][ T8769] team0: entered promiscuous mode [ 166.722262][ T8769] team_slave_0: entered promiscuous mode [ 166.730251][ T8769] team_slave_1: entered promiscuous mode [ 166.864524][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 167.061569][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 167.575726][ T8784] netlink: 'syz.0.688': attribute type 4 has an invalid length. [ 167.618238][ T8785] xt_CT: No such helper "snmp" [ 168.095408][ T8809] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 168.138092][ T8809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.160600][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 168.181521][ T8809] bond3: (slave ip6gretap1): making interface the new active one [ 168.191001][ T8809] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 168.200375][ T8815] netlink: 'syz.2.695': attribute type 4 has an invalid length. [ 168.861742][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 169.362996][ T8863] lo speed is unknown, defaulting to 1000 [ 169.681855][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.705'. [ 170.466317][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 170.831571][ T8891] xt_CT: No such helper "snmp" [ 170.933662][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.715'. [ 171.075037][ T8908] netlink: 68 bytes leftover after parsing attributes in process `syz.4.716'. [ 171.408690][ T8913] sctp: [Deprecated]: syz.3.717 (pid 8913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.408690][ T8913] Use struct sctp_sack_info instead [ 172.167768][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 173.087349][ T8916] syz.0.718: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 173.108751][ T8916] CPU: 0 UID: 0 PID: 8916 Comm: syz.0.718 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 173.108781][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.108792][ T8916] Call Trace: [ 173.108799][ T8916] [ 173.108807][ T8916] dump_stack_lvl+0x241/0x360 [ 173.108839][ T8916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.108861][ T8916] ? __pfx__printk+0x10/0x10 [ 173.108899][ T8916] ? __rcu_read_unlock+0xa1/0x110 [ 173.108931][ T8916] warn_alloc+0x278/0x410 [ 173.108960][ T8916] ? __pfx_warn_alloc+0x10/0x10 [ 173.108990][ T8916] ? veth_dev_init+0x35f/0x550 [ 173.109011][ T8916] ? __get_vm_area_node+0x1c8/0x2d0 [ 173.109039][ T8916] ? __get_vm_area_node+0x25c/0x2d0 [ 173.109073][ T8916] __vmalloc_node_range_noprof+0x62f/0x1380 [ 173.109092][ T8916] ? look_up_lock_class+0x77/0x170 [ 173.109150][ T8916] ? rcu_is_watching+0x15/0xb0 [ 173.109172][ T8916] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.109193][ T8916] ? rcu_is_watching+0x15/0xb0 [ 173.109215][ T8916] ? trace_kmalloc+0x1f/0xd0 [ 173.109238][ T8916] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 173.109264][ T8916] ? __kvmalloc_node_noprof+0x72/0x190 [ 173.109298][ T8916] __kvmalloc_node_noprof+0x142/0x190 [ 173.109329][ T8916] ? veth_dev_init+0x35f/0x550 [ 173.109351][ T8916] veth_dev_init+0x35f/0x550 [ 173.109380][ T8916] register_netdevice+0x6d7/0x1b70 [ 173.109407][ T8916] ? _get_random_bytes+0x25d/0x2c0 [ 173.109442][ T8916] ? snprintf+0xda/0x120 [ 173.109468][ T8916] ? __pfx_register_netdevice+0x10/0x10 [ 173.109494][ T8916] ? __pfx_snprintf+0x10/0x10 [ 173.109519][ T8916] ? __asan_memset+0x23/0x50 [ 173.109551][ T8916] veth_newlink+0x66a/0xb70 [ 173.109578][ T8916] ? __pfx_veth_newlink+0x10/0x10 [ 173.109666][ T8916] ? alloc_netdev_mqs+0xe01/0x1210 [ 173.109703][ T8916] ? rtnl_create_link+0x95b/0xc90 [ 173.109739][ T8916] ? __pfx_veth_newlink+0x10/0x10 [ 173.109761][ T8916] rtnl_newlink_create+0x37b/0xbd0 [ 173.109792][ T8916] ? __pfx_aa_get_newest_label+0x10/0x10 [ 173.109827][ T8916] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 173.109853][ T8916] ? __pfx___mutex_lock+0x10/0x10 [ 173.109902][ T8916] ? ns_capable+0x8a/0xf0 [ 173.109932][ T8916] rtnl_newlink+0x167a/0x1d90 [ 173.109974][ T8916] ? __pfx_rtnl_newlink+0x10/0x10 [ 173.109993][ T8916] ? __pfx_validate_chain+0x10/0x10 [ 173.110113][ T8916] ? __pfx_lock_release+0x10/0x10 [ 173.110161][ T8916] ? __pfx_rtnl_newlink+0x10/0x10 [ 173.110181][ T8916] rtnetlink_rcv_msg+0x791/0xcf0 [ 173.110209][ T8916] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 173.110238][ T8916] ? __lock_acquire+0x1397/0x2100 [ 173.110268][ T8916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.110318][ T8916] netlink_rcv_skb+0x206/0x480 [ 173.110350][ T8916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.110383][ T8916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.110441][ T8916] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.110474][ T8916] netlink_unicast+0x7f6/0x990 [ 173.110511][ T8916] ? __pfx_netlink_unicast+0x10/0x10 [ 173.110534][ T8916] ? __virt_addr_valid+0x45f/0x530 [ 173.110556][ T8916] ? __phys_addr_symbol+0x2f/0x70 [ 173.110575][ T8916] ? __check_object_size+0x47a/0x730 [ 173.110608][ T8916] netlink_sendmsg+0x8de/0xcb0 [ 173.110638][ T8916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.110662][ T8916] ? aa_sock_msg_perm+0x91/0x160 [ 173.110696][ T8916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.110713][ T8916] __sock_sendmsg+0x221/0x270 [ 173.110744][ T8916] ____sys_sendmsg+0x53a/0x860 [ 173.110778][ T8916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.110799][ T8916] ? __fget_files+0x2a/0x410 [ 173.110832][ T8916] ? __fget_files+0x2a/0x410 [ 173.110871][ T8916] __sys_sendmsg+0x269/0x350 [ 173.110910][ T8916] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.110983][ T8916] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 173.111015][ T8916] ? do_syscall_64+0x100/0x230 [ 173.111047][ T8916] ? do_syscall_64+0xb6/0x230 [ 173.111078][ T8916] do_syscall_64+0xf3/0x230 [ 173.111105][ T8916] ? clear_bhb_loop+0x35/0x90 [ 173.111137][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.111162][ T8916] RIP: 0033:0x7ff9d0b8d169 [ 173.111183][ T8916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.111199][ T8916] RSP: 002b:00007ff9d1aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.111223][ T8916] RAX: ffffffffffffffda RBX: 00007ff9d0da6080 RCX: 00007ff9d0b8d169 [ 173.111237][ T8916] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000003 [ 173.111249][ T8916] RBP: 00007ff9d0c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 173.111261][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.111273][ T8916] R13: 0000000000000000 R14: 00007ff9d0da6080 R15: 00007ffcf932c378 [ 173.111306][ T8916] [ 173.111406][ T8916] Mem-Info: [ 173.580543][ T8916] active_anon:3780 inactive_anon:0 isolated_anon:0 [ 173.580543][ T8916] active_file:1533 inactive_file:38337 isolated_file:0 [ 173.580543][ T8916] unevictable:768 dirty:140 writeback:0 [ 173.580543][ T8916] slab_reclaimable:10550 slab_unreclaimable:103437 [ 173.580543][ T8916] mapped:34801 shmem:1420 pagetables:816 [ 173.580543][ T8916] sec_pagetables:0 bounce:0 [ 173.580543][ T8916] kernel_misc_reclaimable:0 [ 173.580543][ T8916] free:1334905 free_pcp:692 free_cma:0 [ 173.627300][ T8916] Node 0 active_anon:15108kB inactive_anon:0kB active_file:6132kB inactive_file:153276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139128kB dirty:560kB writeback:0kB shmem:4144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12404kB pagetables:3208kB sec_pagetables:0kB all_unreclaimable? no [ 173.660169][ T8916] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 173.691155][ T8916] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.718856][ T8916] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 173.724961][ T8916] Node 0 DMA32 free:1415452kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:15068kB inactive_anon:0kB active_file:6132kB inactive_file:152952kB unevictable:1536kB writepending:560kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:2512kB local_pcp:1228kB free_cma:0kB [ 173.756857][ T8916] lowmem_reserve[]: 0 0 0 0 0 [ 173.761724][ T8916] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.788875][ T8916] lowmem_reserve[]: 0 0 0 0 0 [ 173.793981][ T8916] Node 1 Normal free:3908796kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:400kB local_pcp:176kB free_cma:0kB [ 173.823602][ T8916] lowmem_reserve[]: 0 0 0 0 0 [ 173.828398][ T8916] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.841529][ T8916] Node 0 DMA32: 3*4kB (UME) 230*8kB (UME) 148*16kB (UM) 261*32kB (UME) 550*64kB (UME) 207*128kB (UM) 61*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 4*2048kB (ME) 319*4096kB (UM) = 1415452kB [ 173.860301][ T8916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 173.871964][ T8916] Node 1 Normal: 229*4kB (UE) 51*8kB (UME) 53*16kB (UME) 206*32kB (UME) 92*64kB (UME) 39*128kB (UME) 16*256kB (UME) 10*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3908796kB [ 173.890488][ T8916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.900080][ T8916] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.909639][ T8916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.919270][ T8916] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.928646][ T8916] 41290 total pagecache pages [ 173.933402][ T8916] 0 pages in swap cache [ 173.937571][ T8916] Free swap = 124996kB [ 173.941721][ T8916] Total swap = 124996kB [ 173.945977][ T8916] 2097051 pages RAM [ 173.949819][ T8916] 0 pages HighMem/MovableOnly [ 173.954652][ T8916] 427906 pages reserved [ 173.958801][ T8916] 0 pages cma reserved [ 174.854519][ T8953] netlink: 'syz.2.726': attribute type 6 has an invalid length. [ 174.929484][ T8958] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 175.023003][ T8966] bridge_slave_0: left allmulticast mode [ 175.056413][ T8966] bridge_slave_0: left promiscuous mode [ 175.062247][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.093494][ T8968] netlink: 'syz.4.728': attribute type 10 has an invalid length. [ 175.141526][ T8966] bridge_slave_1: left allmulticast mode [ 175.151403][ T8966] bridge_slave_1: left promiscuous mode [ 175.161746][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.176261][ T8966] bond0: (slave bond_slave_0): Releasing backup interface [ 175.186296][ T8966] bond0: (slave bond_slave_1): Releasing backup interface [ 175.197074][ T8978] netlink: 'syz.2.731': attribute type 8 has an invalid length. [ 175.206225][ T8966] team_slave_0: left promiscuous mode [ 175.222463][ T8979] netlink: 68 bytes leftover after parsing attributes in process `syz.3.732'. [ 175.223418][ T8966] team0: Port device team_slave_0 removed [ 175.247075][ T8966] team_slave_1: left promiscuous mode [ 175.260423][ T8966] team0: Port device team_slave_1 removed [ 175.270762][ T8966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.286980][ T8966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.299385][ T8966] bond1: (slave bridge2): Releasing backup interface [ 175.310457][ T8966] bridge2: left promiscuous mode [ 175.331846][ T8966] bond2: (slave bridge3): Releasing backup interface [ 175.339122][ T8966] bridge3: left promiscuous mode [ 175.358658][ T8966] bond3: (slave ip6gretap1): Releasing active interface [ 176.377929][ T9014] netlink: 'syz.1.742': attribute type 10 has an invalid length. [ 176.779413][ T9033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.751'. [ 177.239228][ T9057] openvswitch: netlink: IP tunnel attribute has 93 unknown bytes. [ 177.462793][ T9072] netlink: 129 bytes leftover after parsing attributes in process `syz.4.761'. [ 178.195721][ T9110] netlink: 244 bytes leftover after parsing attributes in process `syz.0.772'. [ 178.211343][ T9110] netlink: 244 bytes leftover after parsing attributes in process `syz.0.772'. [ 178.231604][ T9110] netlink: 244 bytes leftover after parsing attributes in process `syz.0.772'. [ 178.241039][ T9110] netlink: 244 bytes leftover after parsing attributes in process `syz.0.772'. [ 178.579540][ T9128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.776'. [ 178.614367][ T9128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.776'. [ 178.627397][ T9128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.776'. [ 178.637648][ T9128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.776'. [ 178.728547][ T9137] IPVS: Unknown mcast interface: veth°ñ [ 178.744392][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 178.763876][ T9140] FAULT_INJECTION: forcing a failure. [ 178.763876][ T9140] name failslab, interval 1, probability 0, space 0, times 0 [ 178.777059][ T9140] CPU: 0 UID: 0 PID: 9140 Comm: syz.2.782 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 178.777087][ T9140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.777099][ T9140] Call Trace: [ 178.777106][ T9140] [ 178.777114][ T9140] dump_stack_lvl+0x241/0x360 [ 178.777144][ T9140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.777165][ T9140] ? __pfx__printk+0x10/0x10 [ 178.777188][ T9140] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 178.777216][ T9140] ? __pfx___might_resched+0x10/0x10 [ 178.777247][ T9140] should_fail_ex+0x40a/0x550 [ 178.777282][ T9140] should_failslab+0xac/0x100 [ 178.777310][ T9140] kmem_cache_alloc_node_noprof+0x77/0x380 [ 178.777335][ T9140] ? __alloc_skb+0x1c3/0x440 [ 178.777362][ T9140] __alloc_skb+0x1c3/0x440 [ 178.777384][ T9140] ? ____sys_sendmsg+0x53a/0x860 [ 178.777411][ T9140] ? __pfx___alloc_skb+0x10/0x10 [ 178.777439][ T9140] ? netlink_ack_tlv_len+0x6e/0x200 [ 178.777472][ T9140] netlink_ack+0x145/0xa60 [ 178.777495][ T9140] ? __pfx_lock_acquire+0x10/0x10 [ 178.777522][ T9140] ? __pfx_nl80211_new_key+0x10/0x10 [ 178.777552][ T9140] ? __pfx___might_resched+0x10/0x10 [ 178.777589][ T9140] netlink_rcv_skb+0x294/0x480 [ 178.777618][ T9140] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.777642][ T9140] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.777685][ T9140] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 178.777732][ T9140] genl_rcv+0x28/0x40 [ 178.777752][ T9140] netlink_unicast+0x7f6/0x990 [ 178.777789][ T9140] ? __pfx_netlink_unicast+0x10/0x10 [ 178.777812][ T9140] ? __virt_addr_valid+0x45f/0x530 [ 178.777832][ T9140] ? __phys_addr_symbol+0x2f/0x70 [ 178.777849][ T9140] ? __check_object_size+0x47a/0x730 [ 178.777881][ T9140] netlink_sendmsg+0x8de/0xcb0 [ 178.777934][ T9140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.777959][ T9140] ? aa_sock_msg_perm+0x91/0x160 [ 178.777994][ T9140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.778010][ T9140] __sock_sendmsg+0x221/0x270 [ 178.778042][ T9140] ____sys_sendmsg+0x53a/0x860 [ 178.778076][ T9140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.778096][ T9140] ? __fget_files+0x2a/0x410 [ 178.778127][ T9140] ? __fget_files+0x2a/0x410 [ 178.778165][ T9140] __sys_sendmsg+0x269/0x350 [ 178.778194][ T9140] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.778234][ T9140] ? do_sys_openat2+0x17a/0x1d0 [ 178.778294][ T9140] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.778323][ T9140] ? do_syscall_64+0x100/0x230 [ 178.778355][ T9140] ? do_syscall_64+0xb6/0x230 [ 178.778385][ T9140] do_syscall_64+0xf3/0x230 [ 178.778412][ T9140] ? clear_bhb_loop+0x35/0x90 [ 178.778441][ T9140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.778465][ T9140] RIP: 0033:0x7f2d75d8d169 [ 178.778490][ T9140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.778506][ T9140] RSP: 002b:00007f2d76b82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.778528][ T9140] RAX: ffffffffffffffda RBX: 00007f2d75fa5fa0 RCX: 00007f2d75d8d169 [ 178.778542][ T9140] RDX: 0000000000000800 RSI: 00002000000006c0 RDI: 0000000000000004 [ 178.778554][ T9140] RBP: 00007f2d76b82090 R08: 0000000000000000 R09: 0000000000000000 [ 178.778566][ T9140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.778577][ T9140] R13: 0000000000000000 R14: 00007f2d75fa5fa0 R15: 00007ffc4ebbadb8 [ 178.778611][ T9140] [ 180.048514][ T9163] lo speed is unknown, defaulting to 1000 [ 180.080530][ T9189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.093344][ T9191] netlink: 'syz.3.797': attribute type 11 has an invalid length. [ 181.171518][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.211694][ T7676] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 181.221560][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.280425][ T9231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.324179][ T5888] lo speed is unknown, defaulting to 1000 [ 181.330699][ T5888] lo speed is unknown, defaulting to 1000 [ 181.733110][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 181.781338][ T9251] syzkaller0: entered promiscuous mode [ 181.787468][ T9251] syzkaller0: entered allmulticast mode [ 182.086262][ T9255] pim6reg: entered allmulticast mode [ 182.097778][ T9255] pim6reg: left allmulticast mode [ 182.226785][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 182.729731][ T9279] __nla_validate_parse: 6 callbacks suppressed [ 182.729752][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 182.758535][ T9281] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 182.823880][ T9283] netlink: 68 bytes leftover after parsing attributes in process `syz.3.833'. [ 182.842896][ T9281] lo speed is unknown, defaulting to 1000 [ 182.849127][ T9281] lo speed is unknown, defaulting to 1000 [ 182.855836][ T9281] lo speed is unknown, defaulting to 1000 [ 182.880841][ T9281] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 182.914082][ T9287] netlink: 64 bytes leftover after parsing attributes in process `syz.2.831'. [ 182.965025][ T9281] lo speed is unknown, defaulting to 1000 [ 182.988291][ T9281] lo speed is unknown, defaulting to 1000 [ 183.000353][ T9281] lo speed is unknown, defaulting to 1000 [ 183.010493][ T9281] lo speed is unknown, defaulting to 1000 [ 183.040866][ T9281] lo speed is unknown, defaulting to 1000 [ 183.273164][ T6226] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 183.291994][ T6226] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 183.359914][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'. [ 183.823628][ T9312] lo speed is unknown, defaulting to 1000 [ 183.825802][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.844'. [ 183.917851][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 183.982974][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 184.106343][ T9323] team0: Port device dummy0 removed [ 184.112100][ T9323] bridge_slave_0: left promiscuous mode [ 184.132909][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.167838][ T9323] bridge_slave_1: left allmulticast mode [ 184.182194][ T9323] bridge_slave_1: left promiscuous mode [ 184.189787][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.221549][ T9323] bond0: (slave bond_slave_0): Releasing backup interface [ 184.248813][ T9323] bond0: (slave bond_slave_1): Releasing backup interface [ 184.271307][ T9323] team0: Port device team_slave_0 removed [ 184.303703][ T9323] team0: Port device team_slave_1 removed [ 184.325858][ T9333] netlink: 60 bytes leftover after parsing attributes in process `syz.3.847'. [ 184.343517][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.366389][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.386195][ T9329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.847'. [ 184.413312][ T9312] lo speed is unknown, defaulting to 1000 [ 184.880077][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 185.041327][ T9360] netlink: 'syz.3.860': attribute type 10 has an invalid length. [ 185.064972][ T9360] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 185.085028][ T9360] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 185.112930][ T9360] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 185.289022][ T9378] lo speed is unknown, defaulting to 1000 [ 185.318780][ T9379] netlink: 'syz.1.862': attribute type 3 has an invalid length. [ 185.392816][ T9379] netlink: 136 bytes leftover after parsing attributes in process `syz.1.862'. [ 185.469998][ T9391] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 4, id = 0 [ 185.688821][ T9378] lo speed is unknown, defaulting to 1000 [ 186.233598][ T9403] lo speed is unknown, defaulting to 1000 [ 186.994431][ T9403] lo speed is unknown, defaulting to 1000 [ 187.262792][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 187.915373][ T9448] __nla_validate_parse: 2 callbacks suppressed [ 187.915397][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 188.046918][ T9451] geneve1: entered promiscuous mode [ 188.206422][ T9461] netlink: 9 bytes leftover after parsing attributes in process `syz.4.886'. [ 188.291832][ T9461] 0·: renamed from hsr_slave_1 [ 188.326705][ T9461] 0·: entered allmulticast mode [ 188.332278][ T9461] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 188.674178][ T9486] FAULT_INJECTION: forcing a failure. [ 188.674178][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.749240][ T9486] CPU: 1 UID: 0 PID: 9486 Comm: syz.2.894 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 188.749271][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.749282][ T9486] Call Trace: [ 188.749289][ T9486] [ 188.749297][ T9486] dump_stack_lvl+0x241/0x360 [ 188.749327][ T9486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.749347][ T9486] ? __pfx__printk+0x10/0x10 [ 188.749370][ T9486] ? __pfx_lock_release+0x10/0x10 [ 188.749406][ T9486] should_fail_ex+0x40a/0x550 [ 188.749440][ T9486] _copy_from_user+0x2d/0xb0 [ 188.749467][ T9486] bpf_test_init+0xfc/0x160 [ 188.749500][ T9486] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 188.749536][ T9486] ? __pfx_lock_release+0x10/0x10 [ 188.749573][ T9486] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 188.749603][ T9486] ? __fget_files+0x2a/0x410 [ 188.749635][ T9486] ? __fget_files+0x2a/0x410 [ 188.749666][ T9486] ? fput+0x21b/0x290 [ 188.749691][ T9486] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 188.749719][ T9486] bpf_prog_test_run+0x2e4/0x360 [ 188.749750][ T9486] __sys_bpf+0x487/0x820 [ 188.749778][ T9486] ? __pfx___sys_bpf+0x10/0x10 [ 188.749824][ T9486] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 188.749853][ T9486] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.749880][ T9486] ? do_syscall_64+0x100/0x230 [ 188.749911][ T9486] __x64_sys_bpf+0x7c/0x90 [ 188.749934][ T9486] do_syscall_64+0xf3/0x230 [ 188.749959][ T9486] ? clear_bhb_loop+0x35/0x90 [ 188.749986][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.750010][ T9486] RIP: 0033:0x7f2d75d8d169 [ 188.750027][ T9486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.750043][ T9486] RSP: 002b:00007f2d76b82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.750065][ T9486] RAX: ffffffffffffffda RBX: 00007f2d75fa5fa0 RCX: 00007f2d75d8d169 [ 188.750078][ T9486] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 188.750096][ T9486] RBP: 00007f2d76b82090 R08: 0000000000000000 R09: 0000000000000000 [ 188.750108][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.750119][ T9486] R13: 0000000000000000 R14: 00007f2d75fa5fa0 R15: 00007ffc4ebbadb8 [ 188.750151][ T9486] [ 188.770930][ T9489] netlink: 'syz.3.895': attribute type 7 has an invalid length. [ 188.975456][ T9491] netlink: set zone limit has 4 unknown bytes [ 189.185667][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 189.210298][ T9497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.899'. [ 189.501201][ T9515] netlink: 'syz.3.906': attribute type 5 has an invalid length. [ 189.575981][ T9520] netlink: 'syz.0.904': attribute type 1 has an invalid length. [ 189.583922][ T9520] netlink: 224 bytes leftover after parsing attributes in process `syz.0.904'. [ 189.790395][ T9531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.910'. [ 189.825473][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 189.836016][ T9528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.909'. [ 189.846791][ T9535] netlink: 268 bytes leftover after parsing attributes in process `syz.0.912'. [ 189.873313][ T9535] unsupported nla_type 65024 [ 189.881955][ T9528] netlink: 'syz.2.909': attribute type 9 has an invalid length. [ 190.108848][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.915'. [ 190.534628][ T9567] lo speed is unknown, defaulting to 1000 [ 190.970585][ T9567] lo speed is unknown, defaulting to 1000 [ 192.622425][ T9638] netlink: 'syz.2.940': attribute type 10 has an invalid length. [ 192.668107][ T9638] dummy0: entered promiscuous mode [ 192.680352][ T9638] team0: Port device dummy0 added [ 192.694832][ T9643] vlan2: entered promiscuous mode [ 192.714971][ T9643] bond0: entered promiscuous mode [ 192.729103][ T9643] bond_slave_0: entered promiscuous mode [ 192.769439][ T9643] bond_slave_1: entered promiscuous mode [ 192.800797][ T9643] bond0: (slave vlan2): Opening slave failed [ 192.874819][ T9652] netlink: 'syz.4.944': attribute type 10 has an invalid length. [ 193.298801][ T9654] dummy0: left promiscuous mode [ 193.399894][ T9654] team0: Port device dummy0 removed [ 193.425598][ T9654] bridge_slave_0: left allmulticast mode [ 193.431747][ T9654] bridge_slave_0: left promiscuous mode [ 193.437947][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.458306][ T9654] bridge_slave_1: left allmulticast mode [ 193.473687][ T9654] bridge_slave_1: left promiscuous mode [ 193.492654][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.501830][ T9662] __nla_validate_parse: 3 callbacks suppressed [ 193.501852][ T9662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.946'. [ 193.527449][ T9654] bond0: (slave bond_slave_0): Releasing backup interface [ 193.554972][ T9654] bond0: (slave bond_slave_1): Releasing backup interface [ 193.570244][ T9654] team_slave_0: left promiscuous mode [ 193.587126][ T9654] team0: Port device team_slave_0 removed [ 193.598483][ T9654] team_slave_1: left promiscuous mode [ 193.608950][ T9654] team0: Port device team_slave_1 removed [ 193.616379][ T9654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.626568][ T9654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.636111][ T9654] bond1: (slave bridge2): Releasing backup interface [ 193.643310][ T9654] bridge2: left promiscuous mode [ 193.657890][ T9654] bond2: (slave bridge3): Releasing backup interface [ 193.665478][ T9654] bridge3: left promiscuous mode [ 193.685959][ T9654] bond3: (slave bridge4): Releasing backup interface [ 193.698387][ T9654] bridge4: left promiscuous mode [ 193.743764][ T9654] bond4: (slave bridge5): Releasing backup interface [ 193.760203][ T9654] bridge5: left promiscuous mode [ 193.802520][ T9660] bond0: entered promiscuous mode [ 193.857259][ T7690] lo speed is unknown, defaulting to 1000 [ 194.073049][ T9678] lo speed is unknown, defaulting to 1000 [ 194.267950][ T9689] tipc: MTU too low for tipc bearer [ 194.359247][ T9678] lo speed is unknown, defaulting to 1000 [ 194.787005][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.422774][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 196.231435][ T9745] lo speed is unknown, defaulting to 1000 [ 196.263635][ T9748] IPVS: set_ctl: invalid protocol: 11612 172.30.1.4:20003 [ 196.278230][ T9750] netlink: 'syz.3.969': attribute type 21 has an invalid length. [ 196.289621][ T9750] netlink: 128 bytes leftover after parsing attributes in process `syz.3.969'. [ 196.324703][ T9750] netlink: 'syz.3.969': attribute type 5 has an invalid length. [ 196.347084][ T9750] netlink: 'syz.3.969': attribute type 6 has an invalid length. [ 196.366612][ T9750] netlink: 3 bytes leftover after parsing attributes in process `syz.3.969'. [ 196.709282][ T9745] lo speed is unknown, defaulting to 1000 [ 196.711029][ T9767] netlink: 136 bytes leftover after parsing attributes in process `syz.3.972'. [ 196.777791][ T9767] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 196.869241][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 196.875592][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 196.875661][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 197.052089][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.976'. [ 197.134819][ T9779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.184992][ T9781] netlink: 'syz.3.978': attribute type 33 has an invalid length. [ 197.204006][ T9781] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 197.211757][ T9781] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 197.226436][ T9781] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 197.243849][ T9781] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 197.544021][ T9788] lo speed is unknown, defaulting to 1000 [ 197.830831][ T9788] lo speed is unknown, defaulting to 1000 [ 198.241275][ T9819] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.277942][ T9819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.992'. [ 198.342202][ T9824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.994'. [ 198.456837][ T9833] validate_nla: 4 callbacks suppressed [ 198.456860][ T9833] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 198.484597][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.982'. [ 198.500751][ T9788] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 198.512715][ T9788] netlink: 830 bytes leftover after parsing attributes in process `syz.0.982'. [ 198.534470][ T9836] gretap1: entered promiscuous mode [ 198.603353][ T9833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.699149][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 198.900367][ T9848] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1000'. [ 199.034242][ T9857] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 199.090177][ T9854] lo speed is unknown, defaulting to 1000 [ 199.123482][ T9857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'. [ 199.172727][ T9857] netlink: 'syz.2.1001': attribute type 2 has an invalid length. [ 199.204331][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 199.357185][ T9865] netlink: zone id is out of range [ 199.372508][ T9865] netlink: zone id is out of range [ 199.388357][ T9865] netlink: zone id is out of range [ 199.405055][ T9865] netlink: zone id is out of range [ 199.438632][ T9865] netlink: del zone limit has 4 unknown bytes [ 199.626189][ T9878] FAULT_INJECTION: forcing a failure. [ 199.626189][ T9878] name failslab, interval 1, probability 0, space 0, times 0 [ 199.639215][ T9878] CPU: 1 UID: 0 PID: 9878 Comm: syz.4.1010 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 199.639246][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.639259][ T9878] Call Trace: [ 199.639267][ T9878] [ 199.639276][ T9878] dump_stack_lvl+0x241/0x360 [ 199.639311][ T9878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.639334][ T9878] ? __pfx__printk+0x10/0x10 [ 199.639358][ T9878] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 199.639388][ T9878] ? __pfx___might_resched+0x10/0x10 [ 199.639421][ T9878] should_fail_ex+0x40a/0x550 [ 199.639457][ T9878] should_failslab+0xac/0x100 [ 199.639497][ T9878] __kmalloc_node_noprof+0xe1/0x4d0 [ 199.639522][ T9878] ? __kvmalloc_node_noprof+0x72/0x190 [ 199.639557][ T9878] __kvmalloc_node_noprof+0x72/0x190 [ 199.639587][ T9878] alloc_netdev_mqs+0xac6/0x1210 [ 199.639624][ T9878] rtnl_create_link+0x2f9/0xc90 [ 199.639658][ T9878] rtnl_newlink_create+0x2e1/0xbd0 [ 199.639686][ T9878] ? __pfx_aa_get_newest_label+0x10/0x10 [ 199.639719][ T9878] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 199.639744][ T9878] ? __pfx___mutex_lock+0x10/0x10 [ 199.639785][ T9878] ? ns_capable+0x8a/0xf0 [ 199.639813][ T9878] rtnl_newlink+0x167a/0x1d90 [ 199.639836][ T9878] ? stack_depot_save_flags+0x37/0x940 [ 199.639883][ T9878] ? __pfx_rtnl_newlink+0x10/0x10 [ 199.639899][ T9878] ? __netlink_deliver_tap+0x561/0x7f0 [ 199.639929][ T9878] ? __pfx_validate_chain+0x10/0x10 [ 199.639949][ T9878] ? __sock_sendmsg+0x221/0x270 [ 199.639974][ T9878] ? ____sys_sendmsg+0x53a/0x860 [ 199.639996][ T9878] ? __sys_sendmsg+0x269/0x350 [ 199.640016][ T9878] ? do_syscall_64+0xf3/0x230 [ 199.640040][ T9878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.640164][ T9878] ? __pfx_lock_release+0x10/0x10 [ 199.640213][ T9878] ? __pfx_rtnl_newlink+0x10/0x10 [ 199.640235][ T9878] rtnetlink_rcv_msg+0x791/0xcf0 [ 199.640263][ T9878] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 199.640298][ T9878] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.640335][ T9878] ? ref_tracker_free+0x643/0x7e0 [ 199.640361][ T9878] netlink_rcv_skb+0x206/0x480 [ 199.640389][ T9878] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.640422][ T9878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.640489][ T9878] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.640521][ T9878] netlink_unicast+0x7f6/0x990 [ 199.640559][ T9878] ? __pfx_netlink_unicast+0x10/0x10 [ 199.640583][ T9878] ? __virt_addr_valid+0x45f/0x530 [ 199.640604][ T9878] ? __phys_addr_symbol+0x2f/0x70 [ 199.640621][ T9878] ? __check_object_size+0x47a/0x730 [ 199.640653][ T9878] netlink_sendmsg+0x8de/0xcb0 [ 199.640687][ T9878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.640712][ T9878] ? aa_sock_msg_perm+0x91/0x160 [ 199.640745][ T9878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.640762][ T9878] __sock_sendmsg+0x221/0x270 [ 199.640794][ T9878] ____sys_sendmsg+0x53a/0x860 [ 199.640828][ T9878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.640850][ T9878] ? __fget_files+0x2a/0x410 [ 199.640881][ T9878] ? __fget_files+0x2a/0x410 [ 199.640920][ T9878] __sys_sendmsg+0x269/0x350 [ 199.640950][ T9878] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.640990][ T9878] ? do_sys_openat2+0x17a/0x1d0 [ 199.641051][ T9878] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.641082][ T9878] ? do_syscall_64+0x100/0x230 [ 199.641114][ T9878] ? do_syscall_64+0xb6/0x230 [ 199.641144][ T9878] do_syscall_64+0xf3/0x230 [ 199.641170][ T9878] ? clear_bhb_loop+0x35/0x90 [ 199.641199][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.641223][ T9878] RIP: 0033:0x7fc7def8d169 [ 199.641242][ T9878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.641259][ T9878] RSP: 002b:00007fc7dfe24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.641283][ T9878] RAX: ffffffffffffffda RBX: 00007fc7df1a5fa0 RCX: 00007fc7def8d169 [ 199.641297][ T9878] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 199.641309][ T9878] RBP: 00007fc7dfe24090 R08: 0000000000000000 R09: 0000000000000000 [ 199.641321][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.641333][ T9878] R13: 0000000000000000 R14: 00007fc7df1a5fa0 R15: 00007ffc87a49868 [ 199.641367][ T9878] [ 199.645517][ T9854] lo speed is unknown, defaulting to 1000 [ 200.119944][ T9881] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 200.138761][ T9881] batadv1: entered promiscuous mode [ 200.191047][ T9881] team0: Port device batadv1 added [ 200.631345][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 200.779984][ T9904] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 200.962821][ T9911] openvswitch: netlink: IP tunnel dst address not specified [ 200.989366][ T9914] FAULT_INJECTION: forcing a failure. [ 200.989366][ T9914] name failslab, interval 1, probability 0, space 0, times 0 [ 201.002552][ T9914] CPU: 1 UID: 0 PID: 9914 Comm: syz.1.1021 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 201.002585][ T9914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.002597][ T9914] Call Trace: [ 201.002604][ T9914] [ 201.002613][ T9914] dump_stack_lvl+0x241/0x360 [ 201.002644][ T9914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.002667][ T9914] ? __pfx__printk+0x10/0x10 [ 201.002689][ T9914] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 201.002716][ T9914] ? __pfx___might_resched+0x10/0x10 [ 201.002748][ T9914] should_fail_ex+0x40a/0x550 [ 201.002783][ T9914] should_failslab+0xac/0x100 [ 201.002810][ T9914] __kmalloc_node_noprof+0xe1/0x4d0 [ 201.002836][ T9914] ? __kvmalloc_node_noprof+0x72/0x190 [ 201.002870][ T9914] __kvmalloc_node_noprof+0x72/0x190 [ 201.002900][ T9914] alloc_netdev_mqs+0xce7/0x1210 [ 201.002938][ T9914] rtnl_create_link+0x2f9/0xc90 [ 201.002973][ T9914] rtnl_newlink_create+0x2e1/0xbd0 [ 201.003002][ T9914] ? __pfx_aa_get_newest_label+0x10/0x10 [ 201.003036][ T9914] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 201.003063][ T9914] ? __pfx___mutex_lock+0x10/0x10 [ 201.003104][ T9914] ? ns_capable+0x8a/0xf0 [ 201.003133][ T9914] rtnl_newlink+0x167a/0x1d90 [ 201.003155][ T9914] ? __lock_acquire+0x1397/0x2100 [ 201.003201][ T9914] ? __pfx_rtnl_newlink+0x10/0x10 [ 201.003222][ T9914] ? __pfx_validate_chain+0x10/0x10 [ 201.003348][ T9914] ? __pfx_lock_release+0x10/0x10 [ 201.003396][ T9914] ? __pfx_rtnl_newlink+0x10/0x10 [ 201.003417][ T9914] rtnetlink_rcv_msg+0x791/0xcf0 [ 201.003444][ T9914] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 201.003483][ T9914] ? __lock_acquire+0x1397/0x2100 [ 201.003513][ T9914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.003563][ T9914] netlink_rcv_skb+0x206/0x480 [ 201.003595][ T9914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.003627][ T9914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.003686][ T9914] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.003718][ T9914] netlink_unicast+0x7f6/0x990 [ 201.003756][ T9914] ? __pfx_netlink_unicast+0x10/0x10 [ 201.003780][ T9914] ? __virt_addr_valid+0x45f/0x530 [ 201.003801][ T9914] ? __phys_addr_symbol+0x2f/0x70 [ 201.003819][ T9914] ? __check_object_size+0x47a/0x730 [ 201.003852][ T9914] netlink_sendmsg+0x8de/0xcb0 [ 201.003887][ T9914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.003914][ T9914] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 201.003948][ T9914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.003964][ T9914] __sock_sendmsg+0x221/0x270 [ 201.003996][ T9914] ____sys_sendmsg+0x53a/0x860 [ 201.004030][ T9914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.004050][ T9914] ? __fget_files+0x2a/0x410 [ 201.004081][ T9914] ? __fget_files+0x2a/0x410 [ 201.004119][ T9914] __sys_sendmsg+0x269/0x350 [ 201.004150][ T9914] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.004192][ T9914] ? do_sys_openat2+0x17a/0x1d0 [ 201.004254][ T9914] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.004284][ T9914] ? do_syscall_64+0x100/0x230 [ 201.004315][ T9914] ? do_syscall_64+0xb6/0x230 [ 201.004346][ T9914] do_syscall_64+0xf3/0x230 [ 201.004373][ T9914] ? clear_bhb_loop+0x35/0x90 [ 201.004403][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.004428][ T9914] RIP: 0033:0x7fdfff38d169 [ 201.004446][ T9914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.004463][ T9914] RSP: 002b:00007fe00020d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.004493][ T9914] RAX: ffffffffffffffda RBX: 00007fdfff5a5fa0 RCX: 00007fdfff38d169 [ 201.004508][ T9914] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 201.004521][ T9914] RBP: 00007fe00020d090 R08: 0000000000000000 R09: 0000000000000000 [ 201.004533][ T9914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.004544][ T9914] R13: 0000000000000000 R14: 00007fdfff5a5fa0 R15: 00007ffedb01ed18 [ 201.004579][ T9914] [ 201.437426][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 201.638229][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 201.834430][ T9927] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.1025'. [ 201.867664][ T9938] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 201.876850][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 201.888462][ T9939] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 202.153365][ T9957] FAULT_INJECTION: forcing a failure. [ 202.153365][ T9957] name failslab, interval 1, probability 0, space 0, times 0 [ 202.199074][ T9957] CPU: 0 UID: 0 PID: 9957 Comm: syz.2.1033 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 202.199112][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.199123][ T9957] Call Trace: [ 202.199130][ T9957] [ 202.199139][ T9957] dump_stack_lvl+0x241/0x360 [ 202.199171][ T9957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.199193][ T9957] ? __pfx__printk+0x10/0x10 [ 202.199216][ T9957] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 202.199245][ T9957] ? __pfx___might_resched+0x10/0x10 [ 202.199277][ T9957] should_fail_ex+0x40a/0x550 [ 202.199312][ T9957] should_failslab+0xac/0x100 [ 202.199340][ T9957] __kmalloc_node_noprof+0xe1/0x4d0 [ 202.199365][ T9957] ? __kvmalloc_node_noprof+0x72/0x190 [ 202.199402][ T9957] __kvmalloc_node_noprof+0x72/0x190 [ 202.199432][ T9957] alloc_netdev_mqs+0xce7/0x1210 [ 202.199479][ T9957] rtnl_create_link+0x2f9/0xc90 [ 202.199513][ T9957] rtnl_newlink_create+0x2e1/0xbd0 [ 202.199541][ T9957] ? __pfx_aa_get_newest_label+0x10/0x10 [ 202.199574][ T9957] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 202.199600][ T9957] ? __pfx___mutex_lock+0x10/0x10 [ 202.199641][ T9957] ? ns_capable+0x8a/0xf0 [ 202.199668][ T9957] rtnl_newlink+0x167a/0x1d90 [ 202.199689][ T9957] ? stack_depot_save_flags+0x37/0x940 [ 202.199735][ T9957] ? __pfx_rtnl_newlink+0x10/0x10 [ 202.199752][ T9957] ? __netlink_deliver_tap+0x561/0x7f0 [ 202.199782][ T9957] ? __pfx_validate_chain+0x10/0x10 [ 202.199801][ T9957] ? __sock_sendmsg+0x221/0x270 [ 202.199827][ T9957] ? ____sys_sendmsg+0x53a/0x860 [ 202.199847][ T9957] ? __sys_sendmsg+0x269/0x350 [ 202.199867][ T9957] ? do_syscall_64+0xf3/0x230 [ 202.199892][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.200015][ T9957] ? __pfx_lock_release+0x10/0x10 [ 202.200063][ T9957] ? __pfx_rtnl_newlink+0x10/0x10 [ 202.200085][ T9957] rtnetlink_rcv_msg+0x791/0xcf0 [ 202.200112][ T9957] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 202.200147][ T9957] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 202.200185][ T9957] ? ref_tracker_free+0x643/0x7e0 [ 202.200214][ T9957] netlink_rcv_skb+0x206/0x480 [ 202.200244][ T9957] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 202.200275][ T9957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.200332][ T9957] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.200364][ T9957] netlink_unicast+0x7f6/0x990 [ 202.200402][ T9957] ? __pfx_netlink_unicast+0x10/0x10 [ 202.200426][ T9957] ? __virt_addr_valid+0x45f/0x530 [ 202.200453][ T9957] ? __phys_addr_symbol+0x2f/0x70 [ 202.200472][ T9957] ? __check_object_size+0x47a/0x730 [ 202.200504][ T9957] netlink_sendmsg+0x8de/0xcb0 [ 202.200539][ T9957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.200564][ T9957] ? aa_sock_msg_perm+0x91/0x160 [ 202.200600][ T9957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.200617][ T9957] __sock_sendmsg+0x221/0x270 [ 202.200649][ T9957] ____sys_sendmsg+0x53a/0x860 [ 202.200684][ T9957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.200704][ T9957] ? __fget_files+0x2a/0x410 [ 202.200735][ T9957] ? __fget_files+0x2a/0x410 [ 202.200773][ T9957] __sys_sendmsg+0x269/0x350 [ 202.200804][ T9957] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.200844][ T9957] ? do_sys_openat2+0x17a/0x1d0 [ 202.200905][ T9957] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.200936][ T9957] ? do_syscall_64+0x100/0x230 [ 202.200966][ T9957] ? do_syscall_64+0xb6/0x230 [ 202.200996][ T9957] do_syscall_64+0xf3/0x230 [ 202.201023][ T9957] ? clear_bhb_loop+0x35/0x90 [ 202.201052][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.201077][ T9957] RIP: 0033:0x7f2d75d8d169 [ 202.201096][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.201112][ T9957] RSP: 002b:00007f2d76b82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.201136][ T9957] RAX: ffffffffffffffda RBX: 00007f2d75fa5fa0 RCX: 00007f2d75d8d169 [ 202.201150][ T9957] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 202.201163][ T9957] RBP: 00007f2d76b82090 R08: 0000000000000000 R09: 0000000000000000 [ 202.201176][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.201188][ T9957] R13: 0000000000000000 R14: 00007f2d75fa5fa0 R15: 00007ffc4ebbadb8 [ 202.201221][ T9957] [ 202.731322][ T9961] batadv_slave_0: entered promiscuous mode [ 202.825690][ T9966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.925919][ T9972] lo speed is unknown, defaulting to 1000 [ 203.417244][ T9972] lo speed is unknown, defaulting to 1000 [ 204.683522][T10035] netlink: 'syz.4.1058': attribute type 8 has an invalid length. [ 204.698392][T10038] xt_hashlimit: size too large, truncated to 1048576 [ 204.720360][T10035] __nla_validate_parse: 2 callbacks suppressed [ 204.720383][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'. [ 204.743271][T10037] xt_hashlimit: size too large, truncated to 1048576 [ 204.798683][T10044] : renamed from bond0 (while UP) [ 204.821100][T10043] netlink: 'syz.0.1060': attribute type 4 has an invalid length. [ 205.421293][T10064] lo speed is unknown, defaulting to 1000 [ 205.509673][T10068] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 205.608638][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'. [ 205.956911][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'. [ 206.204370][T10064] lo speed is unknown, defaulting to 1000 [ 206.567042][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 206.604827][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 206.756702][T10108] batadv1: left allmulticast mode [ 206.767522][T10108] batadv1: left promiscuous mode [ 206.772933][T10108] bridge0: port 3(batadv1) entered disabled state [ 206.808281][T10108] bridge_slave_1: left allmulticast mode [ 206.838222][T10108] bridge_slave_1: left promiscuous mode [ 206.854154][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.877513][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 206.913490][T10108] bridge_slave_0: left allmulticast mode [ 206.923643][T10108] bridge_slave_0: left promiscuous mode [ 206.929489][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.168480][T10119] FAULT_INJECTION: forcing a failure. [ 207.168480][T10119] name failslab, interval 1, probability 0, space 0, times 0 [ 207.200166][T10119] CPU: 1 UID: 0 PID: 10119 Comm: syz.4.1079 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 207.200201][T10119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.200212][T10119] Call Trace: [ 207.200220][T10119] [ 207.200229][T10119] dump_stack_lvl+0x241/0x360 [ 207.200261][T10119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.200282][T10119] ? __pfx__printk+0x10/0x10 [ 207.200306][T10119] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 207.200333][T10119] ? __pfx___might_resched+0x10/0x10 [ 207.200366][T10119] should_fail_ex+0x40a/0x550 [ 207.200410][T10119] should_failslab+0xac/0x100 [ 207.200436][T10119] __kmalloc_node_noprof+0xe1/0x4d0 [ 207.200460][T10119] ? __kvmalloc_node_noprof+0x72/0x190 [ 207.200487][T10119] ? __raw_spin_lock_init+0x45/0x100 [ 207.200515][T10119] __kvmalloc_node_noprof+0x72/0x190 [ 207.200543][T10119] alloc_netdev_mqs+0x92c/0x1210 [ 207.200576][T10119] rtnl_create_link+0x2f9/0xc90 [ 207.200611][T10119] vxcan_newlink+0x2ca/0x5a0 [ 207.200631][T10119] ? rtnl_newlink_create+0x2e1/0xbd0 [ 207.200650][T10119] ? rtnl_newlink+0x167a/0x1d90 [ 207.200665][T10119] ? rtnetlink_rcv_msg+0x791/0xcf0 [ 207.200699][T10119] ? __pfx_vxcan_newlink+0x10/0x10 [ 207.200779][T10119] ? __pfx_validate_linkmsg+0x10/0x10 [ 207.200804][T10119] ? alloc_netdev_mqs+0xe01/0x1210 [ 207.200839][T10119] ? rtnl_create_link+0x95b/0xc90 [ 207.200865][T10119] ? __pfx_vxcan_newlink+0x10/0x10 [ 207.200887][T10119] rtnl_newlink_create+0x37b/0xbd0 [ 207.200915][T10119] ? __mutex_lock+0x602/0x1010 [ 207.200947][T10119] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 207.200973][T10119] ? __pfx___mutex_lock+0x10/0x10 [ 207.201011][T10119] ? ns_capable+0x8a/0xf0 [ 207.201038][T10119] rtnl_newlink+0x167a/0x1d90 [ 207.201060][T10119] ? stack_depot_save_flags+0x37/0x940 [ 207.201111][T10119] ? __pfx_rtnl_newlink+0x10/0x10 [ 207.201129][T10119] ? __netlink_deliver_tap+0x561/0x7f0 [ 207.201156][T10119] ? __pfx_validate_chain+0x10/0x10 [ 207.201174][T10119] ? __sock_sendmsg+0x221/0x270 [ 207.201198][T10119] ? ____sys_sendmsg+0x53a/0x860 [ 207.201218][T10119] ? __sys_sendmsg+0x269/0x350 [ 207.201238][T10119] ? do_syscall_64+0xf3/0x230 [ 207.201264][T10119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.201374][T10119] ? __pfx_lock_release+0x10/0x10 [ 207.201489][T10119] ? __pfx_rtnl_newlink+0x10/0x10 [ 207.201511][T10119] rtnetlink_rcv_msg+0x791/0xcf0 [ 207.201538][T10119] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 207.201572][T10119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.201607][T10119] ? ref_tracker_free+0x643/0x7e0 [ 207.201632][T10119] netlink_rcv_skb+0x206/0x480 [ 207.201660][T10119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.201690][T10119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.201742][T10119] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.201774][T10119] netlink_unicast+0x7f6/0x990 [ 207.201810][T10119] ? __pfx_netlink_unicast+0x10/0x10 [ 207.201835][T10119] ? __virt_addr_valid+0x45f/0x530 [ 207.201855][T10119] ? __phys_addr_symbol+0x2f/0x70 [ 207.201873][T10119] ? __check_object_size+0x47a/0x730 [ 207.201906][T10119] netlink_sendmsg+0x8de/0xcb0 [ 207.201940][T10119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.201966][T10119] ? aa_sock_msg_perm+0x91/0x160 [ 207.202002][T10119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.202019][T10119] __sock_sendmsg+0x221/0x270 [ 207.202052][T10119] ____sys_sendmsg+0x53a/0x860 [ 207.202087][T10119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.202107][T10119] ? __fget_files+0x2a/0x410 [ 207.202140][T10119] ? __fget_files+0x2a/0x410 [ 207.202179][T10119] __sys_sendmsg+0x269/0x350 [ 207.202209][T10119] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.202250][T10119] ? do_sys_openat2+0x17a/0x1d0 [ 207.202313][T10119] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.202343][T10119] ? do_syscall_64+0x100/0x230 [ 207.202374][T10119] ? do_syscall_64+0xb6/0x230 [ 207.202413][T10119] do_syscall_64+0xf3/0x230 [ 207.202440][T10119] ? clear_bhb_loop+0x35/0x90 [ 207.202471][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.202496][T10119] RIP: 0033:0x7fc7def8d169 [ 207.202515][T10119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.202532][T10119] RSP: 002b:00007fc7dfe24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.202556][T10119] RAX: ffffffffffffffda RBX: 00007fc7df1a5fa0 RCX: 00007fc7def8d169 [ 207.202570][T10119] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 207.202581][T10119] RBP: 00007fc7dfe24090 R08: 0000000000000000 R09: 0000000000000000 [ 207.202593][T10119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.202605][T10119] R13: 0000000000000000 R14: 00007fc7df1a5fa0 R15: 00007ffc87a49868 [ 207.202636][T10119] [ 207.903301][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'. [ 208.304885][T10142] netlink: 2496 bytes leftover after parsing attributes in process `syz.1.1085'. [ 209.016809][T10177] batadv_slave_1: entered promiscuous mode [ 209.052269][T10177] batadv_slave_1: entered allmulticast mode [ 209.070542][T10177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.078543][T10177] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 209.223690][T10188] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1099'. [ 209.233033][T10180] xt_CT: No such helper "pptp" [ 210.364917][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'. [ 210.390493][T10217] lo speed is unknown, defaulting to 1000 [ 210.416352][T10219] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 210.475939][T10219] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 210.722380][T10217] lo speed is unknown, defaulting to 1000 [ 211.613969][T10250] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1114'. [ 211.692004][T10248] lo speed is unknown, defaulting to 1000 [ 212.016800][T10248] lo speed is unknown, defaulting to 1000 [ 212.062960][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 212.693589][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 212.726884][T10274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1121'. [ 212.772948][T10275] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1121'. [ 212.828988][T10279] macsec0: entered allmulticast mode [ 212.832890][T10274] openvswitch: netlink: Flow key attr not present in new flow. [ 213.107616][T10284] lo speed is unknown, defaulting to 1000 [ 213.311734][T10292] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 213.338399][T10292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.377019][T10292] batadv0: entered promiscuous mode [ 213.391892][T10292] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 213.469110][T10284] lo speed is unknown, defaulting to 1000 [ 213.794648][T10306] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1133'. [ 214.944472][T10332] x_tables: duplicate underflow at hook 2 [ 215.634315][T10360] lo speed is unknown, defaulting to 1000 [ 215.970669][T10360] lo speed is unknown, defaulting to 1000 [ 217.465933][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1165'. [ 217.538386][T10410] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1167'. [ 217.753573][T10421] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1169'. [ 218.295879][T10427] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1174'. [ 218.685895][T10443] netlink: 'syz.2.1179': attribute type 21 has an invalid length. [ 218.830066][T10448] lo speed is unknown, defaulting to 1000 [ 219.113760][T10458] xt_hashlimit: size too large, truncated to 1048576 [ 219.169565][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 219.189953][T10448] lo speed is unknown, defaulting to 1000 [ 219.201731][T10459] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1185'. [ 219.606947][T10466] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1186'. [ 220.239450][T10484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1192'. [ 220.262938][T10484] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1192'. [ 220.338224][T10489] delete_channel: no stack [ 220.368052][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 220.889459][T10514] xt_l2tp: missing protocol rule (udp|l2tpip) [ 221.050428][T10524] netlink: 'syz.1.1205': attribute type 3 has an invalid length. [ 221.115450][T10526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.133675][T10526] bond4: entered promiscuous mode [ 221.157326][T10531] x_tables: duplicate underflow at hook 1 [ 221.174774][T10533] x_tables: duplicate underflow at hook 3 [ 221.180659][T10533] x_tables: duplicate underflow at hook 3 [ 221.194626][T10526] bond0: (slave bond4): Enslaving as an active interface with an up link [ 222.525847][T10575] __nla_validate_parse: 7 callbacks suppressed [ 222.525872][T10575] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1217'. [ 222.671086][T10582] syzkaller0: Caught tx_queue_len zero misconfig [ 222.834933][T10586] vlan2: entered promiscuous mode [ 222.840142][T10586] batadv0: entered promiscuous mode [ 223.710904][T10601] xt_CT: No such helper "snmp" [ 223.856304][T10606] tipc: Enabling of bearer rejected, failed to enable media [ 223.978961][T10612] sctp: [Deprecated]: syz.0.1228 (pid 10612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.978961][T10612] Use struct sctp_sack_info instead [ 224.125108][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 224.364636][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'. [ 224.380846][T10625] bridge0: port 1(batadv2) entered blocking state [ 224.388137][T10625] bridge0: port 1(batadv2) entered disabled state [ 224.395176][T10625] batadv2: entered allmulticast mode [ 224.402153][T10625] batadv2: entered promiscuous mode [ 224.432928][T10625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1232'. [ 224.701898][T10638] bridge3: entered promiscuous mode [ 224.713913][T10638] bridge3: entered allmulticast mode [ 224.754216][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1235'. [ 224.760003][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 224.812186][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 224.830404][T10643] macvtap1: entered promiscuous mode [ 224.859423][T10643] batadv0: entered promiscuous mode [ 224.893853][T10643] macvtap1: entered allmulticast mode [ 224.898045][ T12] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 224.900091][T10643] batadv0: entered allmulticast mode [ 224.908778][ T12] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 224.926007][T10643] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 224.937771][T10645] batadv0: left allmulticast mode [ 224.949204][T10645] batadv0: left promiscuous mode [ 225.129432][T10658] netlink: 'syz.1.1241': attribute type 3 has an invalid length. [ 225.203149][T10658] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.507829][T10678] netlink: 'syz.2.1247': attribute type 5 has an invalid length. [ 225.667047][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1249'. [ 225.738193][T10686] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 225.753882][T10686] bond5: (slave vti0): Error -95 calling set_mac_address [ 225.805523][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1251'. [ 225.826121][T10684] syzkaller1: entered promiscuous mode [ 225.853616][T10691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1252'. [ 226.590180][T10723] lo speed is unknown, defaulting to 1000 [ 226.748912][T10723] lo speed is unknown, defaulting to 1000 [ 227.249544][T10734] lo speed is unknown, defaulting to 1000 [ 227.572408][T10734] lo speed is unknown, defaulting to 1000 [ 227.922185][T10771] SET target dimension over the limit! [ 228.068793][T10771] lo speed is unknown, defaulting to 1000 [ 228.341158][T10780] netlink: 'syz.1.1274': attribute type 2 has an invalid length. [ 228.600257][T10786] __nla_validate_parse: 2 callbacks suppressed [ 228.600280][T10786] netlink: 75 bytes leftover after parsing attributes in process `syz.3.1276'. [ 228.632000][T10771] lo speed is unknown, defaulting to 1000 [ 228.633822][T10788] netlink: 'syz.1.1277': attribute type 1 has an invalid length. [ 228.780671][T10792] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 228.893745][T10792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.929253][T10799] bond0: (slave gretap1): making interface the new active one [ 228.937244][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 228.941248][T10799] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 228.950386][T10801] netlink: 'syz.0.1282': attribute type 21 has an invalid length. [ 228.982927][T10801] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1282'. [ 229.013022][T10801] netlink: 'syz.0.1282': attribute type 1 has an invalid length. [ 229.049112][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 229.317629][T10800] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1281'. [ 229.327593][T10816] lo speed is unknown, defaulting to 1000 [ 229.363244][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1281'. [ 229.403748][T10800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1281'. [ 229.421045][T10800] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1281'. [ 229.517556][T10823] bridge0: port 1(dummy0) entered blocking state [ 229.567950][T10823] bridge0: port 1(dummy0) entered disabled state [ 229.592860][T10823] dummy0: entered allmulticast mode [ 229.661522][T10823] dummy0: entered promiscuous mode [ 229.803400][T10834] netlink: 'syz.1.1287': attribute type 4 has an invalid length. [ 229.822544][T10833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1288'. [ 230.073742][T10830] lo speed is unknown, defaulting to 1000 [ 230.114650][T10816] lo speed is unknown, defaulting to 1000 [ 230.202228][T10847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'. [ 230.886983][T10830] lo speed is unknown, defaulting to 1000 [ 230.919553][T10800] x_tables: duplicate entry at hook 2 [ 232.193404][T10907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.633276][T10938] lo speed is unknown, defaulting to 1000 [ 232.747630][T10946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.915404][T10938] lo speed is unknown, defaulting to 1000 [ 233.085207][T10959] sch_fq: defrate 2048 ignored. [ 233.129620][T10958] lo speed is unknown, defaulting to 1000 [ 233.315453][T10958] lo speed is unknown, defaulting to 1000 [ 233.495201][T10971] can: request_module (can-proto-4) failed. [ 234.349268][T10999] lo speed is unknown, defaulting to 1000 [ 234.750487][T11017] __nla_validate_parse: 2 callbacks suppressed [ 234.750510][T11017] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1336'. [ 235.048650][T10999] lo speed is unknown, defaulting to 1000 [ 235.723671][T11036] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1341'. [ 235.744792][T11036] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1341'. [ 235.762782][T11036] netlink: 'syz.2.1341': attribute type 5 has an invalid length. [ 235.782789][T11036] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1341'. [ 235.843911][ T5839] Bluetooth: hci4: link tx timeout [ 235.849354][ T5839] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 235.858066][ T5839] Bluetooth: hci4: link tx timeout [ 235.863789][ T5839] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 235.923430][T11039] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1342'. [ 235.965840][T11039] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1342'. [ 236.247635][T11047] xt_l2tp: v2 doesn't support IP mode [ 236.539247][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 236.702215][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.760401][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.857145][T11068] sctp: [Deprecated]: syz.3.1353 (pid 11068) Use of int in maxseg socket option. [ 236.857145][T11068] Use struct sctp_assoc_value instead [ 236.928495][T11068] sctp: [Deprecated]: syz.3.1353 (pid 11068) Use of int in maxseg socket option. [ 236.928495][T11068] Use struct sctp_assoc_value instead [ 236.945935][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'. [ 236.976189][T11074] openvswitch: netlink: Actions may not be safe on all matching packets [ 237.104317][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 237.143012][T11086] netlink: 'syz.1.1356': attribute type 4 has an invalid length. [ 237.330743][ T7680] IPVS: starting estimator thread 0... [ 237.337034][T11089] IPVS: ip_vs_add_dest(): server weight less than zero [ 237.354102][T11089] veth1_to_bridge: entered allmulticast mode [ 237.442823][T11092] IPVS: using max 19 ests per chain, 45600 per kthread [ 237.607802][T11103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1361'. [ 237.638257][T11103] netlink: 'syz.1.1361': attribute type 7 has an invalid length. [ 237.656785][T11103] netlink: 'syz.1.1361': attribute type 8 has an invalid length. [ 237.665917][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 237.996836][T11119] netlink: 'syz.1.1364': attribute type 27 has an invalid length. [ 238.033051][T11120] netlink: 'syz.1.1364': attribute type 27 has an invalid length. [ 238.277111][T11129] netlink: 'syz.0.1366': attribute type 58 has an invalid length. [ 239.182721][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 239.937033][T11157] lo speed is unknown, defaulting to 1000 [ 240.442821][T11155] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 240.551688][T11157] lo speed is unknown, defaulting to 1000 [ 241.533030][T11179] __nla_validate_parse: 2 callbacks suppressed [ 241.533053][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 241.648537][T11179] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1382'. [ 241.662720][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 241.681126][T11187] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1382'. [ 241.905742][ T7676] IPVS: starting estimator thread 0... [ 241.943603][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1388'. [ 242.012868][T11198] IPVS: using max 24 ests per chain, 57600 per kthread [ 242.567954][T11220] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 242.898434][T11228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1398'. [ 242.939033][T11228] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1398'. [ 242.971470][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 242.985738][T11228] IPv6: sit1: Disabled Multicast RS [ 243.160304][T11242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1403'. [ 243.195492][T11242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1403'. [ 243.211710][T11242] x_tables: duplicate underflow at hook 4 [ 243.219278][T11242] ax25_connect(): syz.3.1403 uses autobind, please contact jreuter@yaina.de [ 243.229414][T11241] ------------[ cut here ]------------ [ 243.235620][T11241] refcount_t: decrement hit 0; leaking memory. [ 243.243698][T11241] WARNING: CPU: 1 PID: 11241 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 243.253679][T11241] Modules linked in: [ 243.257684][T11241] CPU: 1 UID: 0 PID: 11241 Comm: syz.3.1403 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 243.268659][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.279281][T11241] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 243.285844][T11241] Code: b2 00 00 00 e8 d7 2e cc fc 5b 5d c3 cc cc cc cc e8 cb 2e cc fc c6 05 38 7b 31 0b 01 90 48 c7 c7 80 b5 80 8c e8 87 e9 8b fc 90 <0f> 0b 90 90 eb d9 e8 ab 2e cc fc c6 05 15 7b 31 0b 01 90 48 c7 c7 [ 243.305817][T11241] RSP: 0018:ffffc90003d57b68 EFLAGS: 00010246 [ 243.311941][T11241] RAX: ede9f4630644a200 RBX: ffff88807d28664c RCX: ffff88802c120000 [ 243.320235][T11241] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 243.328447][T11241] RBP: 0000000000000004 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 243.336543][T11241] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff88807d286608 [ 243.344821][T11241] R13: 0000000000000000 R14: ffff88807d28664c R15: dffffc0000000000 [ 243.352900][T11241] FS: 000055558d73d500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 243.361880][T11241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.368646][T11241] CR2: 0000000000000000 CR3: 0000000022328000 CR4: 00000000003526f0 [ 243.376732][T11241] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.384844][T11241] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.392942][T11241] Call Trace: [ 243.396277][T11241] [ 243.399250][T11241] ? __warn+0x165/0x4d0 [ 243.403542][T11241] ? refcount_warn_saturate+0xfa/0x1d0 [ 243.409113][T11241] ? report_bug+0x2b3/0x500 [ 243.413815][T11241] ? refcount_warn_saturate+0xfa/0x1d0 [ 243.419480][T11241] ? handle_bug+0x60/0x90 [ 243.424022][T11241] ? exc_invalid_op+0x1a/0x50 [ 243.428770][T11241] ? asm_exc_invalid_op+0x1a/0x20 [ 243.434019][T11241] ? __warn_printk+0x292/0x360 [ 243.438869][T11241] ? refcount_warn_saturate+0xfa/0x1d0 [ 243.444525][T11241] ? refcount_warn_saturate+0xf9/0x1d0 [ 243.450059][T11241] ref_tracker_free+0x6af/0x7e0 [ 243.455095][T11241] ? __pfx_ref_tracker_free+0x10/0x10 [ 243.460547][T11241] ? ax25_destroy_socket+0x551/0x5c0 [ 243.466081][T11241] ax25_release+0x368/0x960 [ 243.470648][T11241] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 243.476164][T11241] sock_close+0xbc/0x240 [ 243.480478][T11241] ? __pfx_sock_close+0x10/0x10 [ 243.485486][T11241] __fput+0x3e9/0x9f0 [ 243.489574][T11241] task_work_run+0x24f/0x310 [ 243.494267][T11241] ? _raw_spin_unlock+0x28/0x50 [ 243.499176][T11241] ? __pfx_task_work_run+0x10/0x10 [ 243.504559][T11241] ? syscall_exit_to_user_mode+0xa3/0x340 [ 243.510511][T11241] syscall_exit_to_user_mode+0x13f/0x340 [ 243.513964][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'. [ 243.516255][T11241] do_syscall_64+0x100/0x230 [ 243.529898][T11241] ? clear_bhb_loop+0x35/0x90 [ 243.534718][T11241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.540674][T11241] RIP: 0033:0x7f2c3518d169 [ 243.545284][T11241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.565085][T11241] RSP: 002b:00007ffec1d91948 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 243.573711][T11241] RAX: 0000000000000000 RBX: 000000000003b595 RCX: 00007f2c3518d169 [ 243.581729][T11241] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 243.589906][T11241] RBP: 00007f2c353a7ba0 R08: 0000000000000001 R09: 0000001dc1d91c3f [ 243.597981][T11241] R10: 00007f2c35000000 R11: 0000000000000246 R12: 00007f2c353a5fac [ 243.606129][T11241] R13: 00007f2c353a5fa0 R14: ffffffffffffffff R15: 00007ffec1d91a60 [ 243.614243][T11241] [ 243.617736][T11241] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 243.625047][T11241] CPU: 1 UID: 0 PID: 11241 Comm: syz.3.1403 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 243.635847][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.645941][T11241] Call Trace: [ 243.649251][T11241] [ 243.652219][T11241] dump_stack_lvl+0x241/0x360 [ 243.656941][T11241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.662182][T11241] ? __pfx__printk+0x10/0x10 [ 243.666811][T11241] ? _printk+0xd5/0x120 [ 243.671006][T11241] ? __init_begin+0x41000/0x41000 [ 243.676166][T11241] ? vscnprintf+0x5d/0x90 [ 243.680537][T11241] panic+0x349/0x880 [ 243.684474][T11241] ? __warn+0x174/0x4d0 [ 243.688666][T11241] ? __pfx_panic+0x10/0x10 [ 243.693125][T11241] __warn+0x344/0x4d0 [ 243.697116][T11241] ? refcount_warn_saturate+0xfa/0x1d0 [ 243.702594][T11241] report_bug+0x2b3/0x500 [ 243.706934][T11241] ? refcount_warn_saturate+0xfa/0x1d0 [ 243.712540][T11241] handle_bug+0x60/0x90 [ 243.716737][T11241] exc_invalid_op+0x1a/0x50 [ 243.721262][T11241] asm_exc_invalid_op+0x1a/0x20 [ 243.726129][T11241] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 243.732213][T11241] Code: b2 00 00 00 e8 d7 2e cc fc 5b 5d c3 cc cc cc cc e8 cb 2e cc fc c6 05 38 7b 31 0b 01 90 48 c7 c7 80 b5 80 8c e8 87 e9 8b fc 90 <0f> 0b 90 90 eb d9 e8 ab 2e cc fc c6 05 15 7b 31 0b 01 90 48 c7 c7 [ 243.751937][T11241] RSP: 0018:ffffc90003d57b68 EFLAGS: 00010246 [ 243.758037][T11241] RAX: ede9f4630644a200 RBX: ffff88807d28664c RCX: ffff88802c120000 [ 243.766016][T11241] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 243.774084][T11241] RBP: 0000000000000004 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 243.782245][T11241] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff88807d286608 [ 243.790226][T11241] R13: 0000000000000000 R14: ffff88807d28664c R15: dffffc0000000000 [ 243.798212][T11241] ? __warn_printk+0x292/0x360 [ 243.803007][T11241] ? refcount_warn_saturate+0xf9/0x1d0 [ 243.808478][T11241] ref_tracker_free+0x6af/0x7e0 [ 243.813343][T11241] ? __pfx_ref_tracker_free+0x10/0x10 [ 243.818731][T11241] ? ax25_destroy_socket+0x551/0x5c0 [ 243.824032][T11241] ax25_release+0x368/0x960 [ 243.828547][T11241] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 243.833944][T11241] sock_close+0xbc/0x240 [ 243.838235][T11241] ? __pfx_sock_close+0x10/0x10 [ 243.843141][T11241] __fput+0x3e9/0x9f0 [ 243.847233][T11241] task_work_run+0x24f/0x310 [ 243.851863][T11241] ? _raw_spin_unlock+0x28/0x50 [ 243.856845][T11241] ? __pfx_task_work_run+0x10/0x10 [ 243.862077][T11241] ? syscall_exit_to_user_mode+0xa3/0x340 [ 243.867828][T11241] syscall_exit_to_user_mode+0x13f/0x340 [ 243.873484][T11241] do_syscall_64+0x100/0x230 [ 243.878178][T11241] ? clear_bhb_loop+0x35/0x90 [ 243.882872][T11241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.888777][T11241] RIP: 0033:0x7f2c3518d169 [ 243.893204][T11241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.912907][T11241] RSP: 002b:00007ffec1d91948 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 243.921334][T11241] RAX: 0000000000000000 RBX: 000000000003b595 RCX: 00007f2c3518d169 [ 243.929319][T11241] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 243.937299][T11241] RBP: 00007f2c353a7ba0 R08: 0000000000000001 R09: 0000001dc1d91c3f [ 243.945274][T11241] R10: 00007f2c35000000 R11: 0000000000000246 R12: 00007f2c353a5fac [ 243.953254][T11241] R13: 00007f2c353a5fa0 R14: ffffffffffffffff R15: 00007ffec1d91a60 [ 243.961282][T11241] [ 243.964577][T11241] Kernel Offset: disabled [ 243.968958][T11241] Rebooting in 86400 seconds..