last executing test programs: 3.500354696s ago: executing program 4 (id=1233): socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f80)=@delchain={0x34, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) r4 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.499651192s ago: executing program 2 (id=1234): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000102c000480280001800d00010073796e70726f78790000000014000280050002000900000006000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002740)}, 0x1}], 0x3, 0x2000, 0x0) recvmmsg(r3, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000200)=""/160, 0xa0}, {&(0x7f0000001340)=""/72, 0x48}], 0x3}, 0x5}], 0x1, 0x100, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0387000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7], 0x54}}, 0x0) 3.285251831s ago: executing program 4 (id=1237): r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206050000000000000000000704000014000780080008400000009805001400200000000500010006000100050005000a00000005000400000000000900020071797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x20000000) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x43010}, 0x10) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f00000001c0)=0xfd, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x400000000040, 0x400000000070, 0x4000000000a0], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, r5, 0x0, 0x20, &(0x7f0000000200)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\xbc\xbe\xc1\xb3`\xd8\xc7\xb0!W\xf6\x04$\xc1:\xeb\xdc\xf5\a\xa3;\xc5\xb6\x01\x90\xc7wYs\xefW\xf6/\xfc\xf7\x98z$\xda\xb6w\x1b\xba=\xbf\x17\xde-m\x1b\xdb\xaaQr$\x10\xab\x03u7\x92\xca\xb24\xfcz\t\xfe\b\xb7\x166\xb8\"\x803\x88\xca\xf8\xb0Dx\xec?\xda\xf5\xc9\xb5f_\xa7\xf9\xadb\xdd'}, 0x9b) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000080)={'dvmrp1\x00', 0x400}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket$inet(0x10, 0xa, 0x200) sendmsg(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000240)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) sendfile(r0, r6, &(0x7f0000000040)=0x2, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'gretap0\x00'}) 3.284995895s ago: executing program 2 (id=1238): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x34000) 3.146111099s ago: executing program 4 (id=1241): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 3.09324309s ago: executing program 2 (id=1242): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/84, 0x54}, 0x85ae}], 0x2, 0x60010020, 0x0) unshare(0x2c060400) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000002000000000000000000000711025000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x80, 0x0, 0x4, 0x5, 0x0, 0x0, 0x5, 0x1000b}, [@FRA_DST={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x8800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x720d, 0x148, 0xf8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2, 0x1], 0x6, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0xfffffff2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r4 = socket(0x23, 0x80805, 0x0) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}]}}}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x40484}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x54}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x34, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) 2.749209781s ago: executing program 0 (id=1245): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048c44}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)={0x4a4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x36, 0x6c, 0x4, 0x2, 0x12, 0x74, 0x9, 0x18, 0x36, 0x48, 0x5, 0x36, 0x5, 0x6c, 0x19, 0x48, 0x4, 0x3, 0xc, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8e2, 0x3, 0x2, 0xcf, 0x75, 0x100, 0xe645, 0x9ce]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x3}, {0x6, 0x9}, {0x5, 0xa}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x9}, {0x6, 0x9}, {0x2, 0x2}, {0x3, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0x9}, {0x6, 0xa}, {0x6, 0x6}, {0x0, 0x1}, {0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x3, 0x8}, {0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x6, 0x4}, {}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x6c, 0x48, 0x2, 0x5f, 0x48, 0x6c, 0x16, 0x60, 0x60, 0x4, 0x30, 0x2, 0xeba22538a4f1373e, 0x9, 0x2, 0x1, 0x24, 0x2, 0x1, 0x36, 0x8caa879988a30c0e, 0x16, 0xc, 0x6c, 0x9e53fc02fc192517]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x4, 0x6, 0x9, 0x1, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x1, 0x3, 0x92, 0x2, 0x1ff, 0xf001, 0x86]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8a6, 0xd, 0x5, 0x1, 0x9, 0x6, 0x0, 0x8]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ac3, 0x1, 0x2, 0x3, 0x8, 0x5, 0x8, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x4, 0x36, 0x60, 0x4, 0x3, 0x3, 0xb, 0xb, 0x59, 0x4, 0xb, 0xb, 0xc, 0xc, 0x1f, 0x18, 0x0, 0x1b, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x6, 0x0, 0x1, 0xc, 0x7, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x11bb, 0x0, 0x1, 0x39eb, 0x4, 0xffff, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0xb8ea, 0xd, 0xf, 0x8, 0x5, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x12, 0x8, 0x2, 0x6, 0x200, 0x8]}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x230, 0x11d, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x46e, 0x7, 0x5, 0x1, 0x3, 0x7ff, 0x6, 0x7ff]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x2}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x80, 0x8001, 0x9, 0x0, 0x40, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x5}, {0x4, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x3}, {}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x7}, {0x2, 0x1}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x7}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x4}, {0x4, 0x7}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x3}, {0x7, 0x5}, {0x1}, {0x2, 0x3}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0xa}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x2, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x0, 0xa}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0xa}, {0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x5, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x1}, {0x2, 0x1}, {0x4, 0x6}, {0x4, 0x7}, {0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x7, 0x3}, {}, {0x4, 0x7}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x9}, {0x2, 0x3}, {0x7, 0x8}, {0x2, 0x8}, {0x0, 0x1}, {0x4, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x7}, {0x1}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x6}, {0x7, 0x8}, {0x3, 0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x1}, {0x1, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x2}, {0x3, 0x7}, {0x3, 0x8}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x3}, {0x4, 0x2}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x1, 0x1}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x3}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc, 0x7, 0x8, 0x9, 0x3, 0x6, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffbf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4e2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc14}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6aae}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x4a4}}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.225434523s ago: executing program 0 (id=1248): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x8004) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(h\x00'/20], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'bond_slave_1\x00'}, @TCA_FW_MASK={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000008300)=ANY=[@ANYBLOB="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"], 0x7990}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x1d}, r5}, 0x14) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6008008000383a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000a608cb02b00002f000000000000fffffffffe8000000000000000000000000000aa3a0004000000000000000000000000334a155b4b2f4353705b51d23f1894f080dac550672e56661146ede6f4079a960e3daf116e49"], 0x0) 1.21533999s ago: executing program 4 (id=1250): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) (fail_nth: 8) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.161473511s ago: executing program 2 (id=1251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000760001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40090) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x5, 0x4, 0x3e8, 0x0, 0x218, 0x218, 0x300, 0x300, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xff, {0x7}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@assoc={0x18, 0x117, 0x4, 0xa6}], 0x18, 0x8045}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x2000c084) recvmmsg(r4, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=""/164, 0xa4}, {&(0x7f0000000280)=""/35, 0x23}], 0x2}, 0x23}], 0x2, 0x40000100, 0x0) 1.014446728s ago: executing program 1 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x1, r2, 0x1, 0x3, 0x6, @multicast}, 0x14) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000038000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x1}, 0x1c) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x3, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1900) 929.469661ms ago: executing program 3 (id=1254): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="311a212e50c83fea7d2d5b9a164e2efdf1af4ddae25e38a1e5a38ad644006d106e6ae204a5c17e25d272d7b52855be49db5e9c2648b72939d321c7f3de3bcabcbfe8b33a21a6af982e4b3fe56825235eb715d4d579311acf08ef3f1887968fa7183fca1a42509ced60e305bb42504d519de9d7f53e3d81f6eb657123e49dd4a28317e73770abe459286f9d763e3671e122fa9cf14de357cdf1588b6ebe2a2f38c7f6d6069baeeb96aec03d46baa9faf015965324b4762533bc0a35dcdc822c84c57fb0b867eff84b164184462acd0d007d0b0757dfdd87d7c0fd94d06f22b17c5cb13ddc190c5d2e21ab5131d468f314572f29a51c"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) connect$inet(r6, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}, 0x8001) recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=ANY=[@ANYRES16=r5, @ANYRES32=r6, @ANYRES64=r1, @ANYRES16=0x0, @ANYBLOB="ede86982f81c5dcce679a152d0f14cb9a56f1a4ab0c61af2f6c1f395d8e9b17b6e1d325ddd504b6f8149c64ac94ae455c15bee6b62978c5bce3fd7924872db811e10cddf69db4064f8dd9df56f03c7d1d72dd453a026b17e91177243affcbb5662cfc7077acf3e5bbeb766312f82879331ce839a5cbabc0436ca7c20a5d23a0c4a5425ac36cf498abcdb70e8b6e692a17f82c7341b7a388d9009eaf2bd46039d25adaeb539f50c54ea804e93e52a4b5b9834aac60fd82fcaa2a7a19a5db9f5144c9826e0e5a048e55826a245405188bc9bb496a82cfe98b6e5a2"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) 891.764766ms ago: executing program 0 (id=1255): socket(0x2b, 0x80801, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2000}, 0x1c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x5411, &(0x7f0000000180)) 780.473787ms ago: executing program 0 (id=1256): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f80)=@delchain={0x34, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 713.439614ms ago: executing program 3 (id=1257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x38) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) close(r4) pipe(&(0x7f0000000100)) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x3, 0x5b}]}}, @echo={0x8, 0x0, 0x0, 0x0, 0x3}}}}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x88a8ffad}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) pipe(0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 712.942786ms ago: executing program 1 (id=1258): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048c44}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)={0x4a4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x36, 0x6c, 0x4, 0x2, 0x12, 0x74, 0x9, 0x18, 0x36, 0x48, 0x5, 0x36, 0x5, 0x6c, 0x19, 0x48, 0x4, 0x3, 0xc, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8e2, 0x3, 0x2, 0xcf, 0x75, 0x100, 0xe645, 0x9ce]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x3}, {0x6, 0x9}, {0x5, 0xa}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x9}, {0x6, 0x9}, {0x2, 0x2}, {0x3, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0x9}, {0x6, 0xa}, {0x6, 0x6}, {0x0, 0x1}, {0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x3, 0x8}, {0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x6, 0x4}, {}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x6c, 0x48, 0x2, 0x5f, 0x48, 0x6c, 0x16, 0x60, 0x60, 0x4, 0x30, 0x2, 0xeba22538a4f1373e, 0x9, 0x2, 0x1, 0x24, 0x2, 0x1, 0x36, 0x8caa879988a30c0e, 0x16, 0xc, 0x6c, 0x9e53fc02fc192517]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x4, 0x6, 0x9, 0x1, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x1, 0x3, 0x92, 0x2, 0x1ff, 0xf001, 0x86]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8a6, 0xd, 0x5, 0x1, 0x9, 0x6, 0x0, 0x8]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ac3, 0x1, 0x2, 0x3, 0x8, 0x5, 0x8, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x4, 0x36, 0x60, 0x4, 0x3, 0x3, 0xb, 0xb, 0x59, 0x4, 0xb, 0xb, 0xc, 0xc, 0x1f, 0x18, 0x0, 0x1b, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x6, 0x0, 0x1, 0xc, 0x7, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x11bb, 0x0, 0x1, 0x39eb, 0x4, 0xffff, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0xb8ea, 0xd, 0xf, 0x8, 0x5, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x12, 0x8, 0x2, 0x6, 0x200, 0x8]}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x230, 0x11d, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x46e, 0x7, 0x5, 0x1, 0x3, 0x7ff, 0x6, 0x7ff]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x2}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x80, 0x8001, 0x9, 0x0, 0x40, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x5}, {0x4, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x3}, {}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x7}, {0x2, 0x1}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x7}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x4}, {0x4, 0x7}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x3}, {0x7, 0x5}, {0x1}, {0x2, 0x3}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0xa}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x2, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x0, 0xa}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0xa}, {0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x5, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x1}, {0x2, 0x1}, {0x4, 0x6}, {0x4, 0x7}, {0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x7, 0x3}, {}, {0x4, 0x7}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x9}, {0x2, 0x3}, {0x7, 0x8}, {0x2, 0x8}, {0x0, 0x1}, {0x4, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x7}, {0x1}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x6}, {0x7, 0x8}, {0x3, 0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x1}, {0x1, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x2}, {0x3, 0x7}, {0x3, 0x8}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x3}, {0x4, 0x2}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x1, 0x1}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x3}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc, 0x7, 0x8, 0x9, 0x3, 0x6, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffbf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4e2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc14}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6aae}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x4a4}}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 649.250995ms ago: executing program 0 (id=1259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='wbt_timer\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010004b0414b37f6c27eedc9d5a84000000000000006a07000000", @ANYRES32=0x0, @ANYBLOB="4018000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}}, 0x0) 586.59242ms ago: executing program 1 (id=1260): socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f80)=@delchain={0x34, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) r4 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 478.561619ms ago: executing program 0 (id=1261): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/84, 0x54}, 0x85ae}], 0x2, 0x60010020, 0x0) unshare(0x2c060400) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000002000000000000000000000711025000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x80, 0x0, 0x4, 0x5, 0x0, 0x0, 0x5, 0x1000b}, [@FRA_DST={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x8800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x720d, 0x148, 0xf8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2, 0x1], 0x6, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0xfffffff2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r4 = socket(0x23, 0x80805, 0x0) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}]}}}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x40484}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x54}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x34, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) 478.046353ms ago: executing program 1 (id=1262): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x12, 0x3, &(0x7f00000003c0)=@framed={{0x56, 0xa, 0x0, 0x0, 0xffffffff, 0x79, 0x11, 0x38}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000024}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(0xffffffffffffffff) 413.289767ms ago: executing program 3 (id=1263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x20000000, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) 397.139343ms ago: executing program 1 (id=1264): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) (async) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async, rerun: 32) listen(r5, 0x7c2) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002bc0)=@newtfilter={0x2c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@TCA_RATE={0x6, 0x2}]}, 0x2c}}, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x7, 0x401, 0x70, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x6, 0x7}}) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 379.461049ms ago: executing program 3 (id=1265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xc800) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$802154_dgram(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0}}, 0x400300) 233.465302ms ago: executing program 4 (id=1266): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 233.255773ms ago: executing program 3 (id=1267): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000, 0x9}, 0x50) 196.91805ms ago: executing program 2 (id=1268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000007f00000008000100e000000108000300", @ANYRES32=r0], 0x34}}, 0x0) 160.700094ms ago: executing program 3 (id=1269): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x20008000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x891c) shutdown(0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)="b970f6aa2bfdc9d7afbfe5c81e0b9b00b49015199ee375d7bd1e9a044aead3faf4a0f39154893e76f7c07b1ef464add3dac1272dfb540106eff5d18585394f8978a2a6e597b9479e904e68cfe4474d047fbd2a138da70c600c760ce32fdd162b9866cd8b1d2908ea2599011aba31a4b1193250944e602609300cbbb8f2bd89acef5fd0471e96cd071c31f8", 0x8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) shutdown(r4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) 113.484001ms ago: executing program 1 (id=1270): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x20008000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x891c) shutdown(0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)="b970f6aa2bfdc9d7afbfe5c81e0b9b00b49015199ee375d7bd1e9a044aead3faf4a0f39154893e76f7c07b1ef464add3dac1272dfb540106eff5d18585394f8978a2a6e597b9479e904e68cfe4474d047fbd2a138da70c600c760ce32fdd162b9866cd8b1d2908ea2599011aba31a4b1193250944e602609300cbbb8f2bd89acef5fd0471e96cd071c31f8", 0x8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) shutdown(r4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) 88.175422ms ago: executing program 4 (id=1271): r0 = socket$key(0xf, 0x3, 0x2) close(r0) 0s ago: executing program 2 (id=1272): writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (fail_nth: 84) kernel console output (not intermixed with test programs): '. [ 93.849887][ T6565] FAULT_INJECTION: forcing a failure. [ 93.849887][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 93.865350][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.1.234 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 93.865372][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.865381][ T6565] Call Trace: [ 93.865387][ T6565] [ 93.865393][ T6565] dump_stack_lvl+0x241/0x360 [ 93.865417][ T6565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.865435][ T6565] ? __pfx__printk+0x10/0x10 [ 93.865453][ T6565] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 93.865475][ T6565] ? __pfx___might_resched+0x10/0x10 [ 93.865496][ T6565] should_fail_ex+0x40a/0x550 [ 93.865521][ T6565] should_failslab+0xac/0x100 [ 93.865541][ T6565] ? page_pool_create_percpu+0x77/0xb70 [ 93.865556][ T6565] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 93.865577][ T6565] ? rcu_is_watching+0x15/0xb0 [ 93.865597][ T6565] page_pool_create_percpu+0x77/0xb70 [ 93.865623][ T6565] bpf_test_run_xdp_live+0x2e6/0x2220 [ 93.865645][ T6565] ? __pfx_lock_release+0x10/0x10 [ 93.865672][ T6565] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.865690][ T6565] ? __pfx___might_resched+0x10/0x10 [ 93.865713][ T6565] ? __mutex_unlock_slowpath+0x227/0x800 [ 93.865741][ T6565] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.865769][ T6565] ? synchronize_rcu+0x11b/0x360 [ 93.865786][ T6565] ? __pfx_synchronize_rcu+0x10/0x10 [ 93.865824][ T6565] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 93.865846][ T6565] ? 0xffffffffa00007dc [ 93.865859][ T6565] ? 0xffffffffa000088c [ 93.865890][ T6565] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.865926][ T6565] ? _copy_from_user+0x95/0xb0 [ 93.865947][ T6565] ? bpf_test_init+0x137/0x160 [ 93.865965][ T6565] ? xdp_convert_md_to_buff+0x5b/0x330 [ 93.865988][ T6565] bpf_prog_test_run_xdp+0x805/0x11e0 [ 93.866012][ T6565] ? __pfx_lock_release+0x10/0x10 [ 93.866042][ T6565] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.866064][ T6565] ? __fget_files+0x2a/0x410 [ 93.866088][ T6565] ? __fget_files+0x2a/0x410 [ 93.866112][ T6565] ? fput+0x21b/0x290 [ 93.866130][ T6565] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.866152][ T6565] bpf_prog_test_run+0x2e4/0x360 [ 93.866177][ T6565] __sys_bpf+0x487/0x820 [ 93.866199][ T6565] ? __pfx___sys_bpf+0x10/0x10 [ 93.866232][ T6565] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 93.866255][ T6565] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.866277][ T6565] ? do_syscall_64+0x100/0x230 [ 93.866300][ T6565] __x64_sys_bpf+0x7c/0x90 [ 93.866323][ T6565] do_syscall_64+0xf3/0x230 [ 93.866341][ T6565] ? clear_bhb_loop+0x35/0x90 [ 93.866365][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.866384][ T6565] RIP: 0033:0x7f12ad58d169 [ 93.866398][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.866411][ T6565] RSP: 002b:00007f12ae3f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.866428][ T6565] RAX: ffffffffffffffda RBX: 00007f12ad7a5fa0 RCX: 00007f12ad58d169 [ 93.866438][ T6565] RDX: 0000000000000050 RSI: 0000400000000000 RDI: 000000000000000a [ 93.866448][ T6565] RBP: 00007f12ae3f0090 R08: 0000000000000000 R09: 0000000000000000 [ 93.866458][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.866466][ T6565] R13: 0000000000000000 R14: 00007f12ad7a5fa0 R15: 00007ffd76bb8d28 [ 93.866491][ T6565] [ 94.345985][ T6575] FAULT_INJECTION: forcing a failure. [ 94.345985][ T6575] name failslab, interval 1, probability 0, space 0, times 0 [ 94.367400][ T6566] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 94.384808][ T6575] CPU: 1 UID: 0 PID: 6575 Comm: syz.3.238 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 94.384832][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.384840][ T6575] Call Trace: [ 94.384845][ T6575] [ 94.384851][ T6575] dump_stack_lvl+0x241/0x360 [ 94.384876][ T6575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.384892][ T6575] ? __pfx__printk+0x10/0x10 [ 94.384910][ T6575] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 94.384929][ T6575] ? __pfx___might_resched+0x10/0x10 [ 94.384950][ T6575] should_fail_ex+0x40a/0x550 [ 94.384974][ T6575] should_failslab+0xac/0x100 [ 94.384993][ T6575] __kmalloc_node_noprof+0xe1/0x4d0 [ 94.385011][ T6575] ? __kvmalloc_node_noprof+0x72/0x190 [ 94.385034][ T6575] __kvmalloc_node_noprof+0x72/0x190 [ 94.385055][ T6575] bpf_test_run_xdp_live+0x21d/0x2220 [ 94.385075][ T6575] ? __pfx_lock_release+0x10/0x10 [ 94.385102][ T6575] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 94.385121][ T6575] ? __pfx___might_resched+0x10/0x10 [ 94.385142][ T6575] ? __mutex_unlock_slowpath+0x227/0x800 [ 94.385167][ T6575] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 94.385185][ T6575] ? synchronize_rcu+0x11b/0x360 [ 94.385201][ T6575] ? __pfx_synchronize_rcu+0x10/0x10 [ 94.385236][ T6575] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 94.385257][ T6575] ? 0xffffffffa00007dc [ 94.385270][ T6575] ? 0xffffffffa0000814 [ 94.385301][ T6575] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 94.385338][ T6575] ? _copy_from_user+0x95/0xb0 [ 94.385358][ T6575] ? bpf_test_init+0x137/0x160 [ 94.385376][ T6575] ? xdp_convert_md_to_buff+0x5b/0x330 [ 94.385399][ T6575] bpf_prog_test_run_xdp+0x805/0x11e0 [ 94.385425][ T6575] ? __pfx_lock_release+0x10/0x10 [ 94.385455][ T6575] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.385476][ T6575] ? __fget_files+0x2a/0x410 [ 94.385500][ T6575] ? __fget_files+0x2a/0x410 [ 94.385523][ T6575] ? fput+0x21b/0x290 [ 94.385541][ T6575] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.385563][ T6575] bpf_prog_test_run+0x2e4/0x360 [ 94.385588][ T6575] __sys_bpf+0x487/0x820 [ 94.385610][ T6575] ? __pfx___sys_bpf+0x10/0x10 [ 94.385642][ T6575] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 94.385666][ T6575] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.385701][ T6575] ? do_syscall_64+0x100/0x230 [ 94.385723][ T6575] __x64_sys_bpf+0x7c/0x90 [ 94.385743][ T6575] do_syscall_64+0xf3/0x230 [ 94.385761][ T6575] ? clear_bhb_loop+0x35/0x90 [ 94.385785][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.385809][ T6575] RIP: 0033:0x7f4b98f8d169 [ 94.385824][ T6575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.385836][ T6575] RSP: 002b:00007f4b99e00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.385854][ T6575] RAX: ffffffffffffffda RBX: 00007f4b991a5fa0 RCX: 00007f4b98f8d169 [ 94.385866][ T6575] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 94.385876][ T6575] RBP: 00007f4b99e00090 R08: 0000000000000000 R09: 0000000000000000 [ 94.385886][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.385895][ T6575] R13: 0000000000000000 R14: 00007f4b991a5fa0 R15: 00007ffc687ce7b8 [ 94.385920][ T6575] [ 94.886224][ T6589] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 95.400773][ T6615] tap0: tun_chr_ioctl cmd 2180551740 [ 96.027875][ T6633] syzkaller1: entered promiscuous mode [ 96.049259][ T6633] syzkaller1: entered allmulticast mode [ 96.577794][ T6660] __nla_validate_parse: 5 callbacks suppressed [ 96.577812][ T6660] netlink: 328 bytes leftover after parsing attributes in process `syz.1.274'. [ 96.733135][ T6668] netlink: 72 bytes leftover after parsing attributes in process `syz.1.278'. [ 96.827342][ T6672] netlink: 88 bytes leftover after parsing attributes in process `syz.2.280'. [ 96.858070][ T6668] netlink: 200 bytes leftover after parsing attributes in process `syz.1.278'. [ 97.168764][ T6690] lo speed is unknown, defaulting to 1000 [ 97.237832][ T6697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.289'. [ 97.248095][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 97.270079][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 97.281320][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 97.290976][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 97.300581][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 97.336219][ T6695] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 97.384572][ T6702] bridge_slave_0: left allmulticast mode [ 97.411202][ T6702] bridge_slave_0: left promiscuous mode [ 97.431932][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.476154][ T6702] bridge_slave_1: left allmulticast mode [ 97.482439][ T6702] bridge_slave_1: left promiscuous mode [ 97.488992][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.516544][ T6702] bond0: (slave bond_slave_0): Releasing backup interface [ 97.555548][ T6702] bond0: (slave bond_slave_1): Releasing backup interface [ 97.623399][ T6702] team0: Port device team_slave_0 removed [ 97.636287][ T6702] team0: Port device team_slave_1 removed [ 97.643126][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.651320][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.737255][ T6703] team0: Mode changed to "loadbalance" [ 97.911990][ T6721] FAULT_INJECTION: forcing a failure. [ 97.911990][ T6721] name failslab, interval 1, probability 0, space 0, times 0 [ 97.941007][ T6721] CPU: 1 UID: 0 PID: 6721 Comm: syz.2.297 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 97.941031][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.941040][ T6721] Call Trace: [ 97.941046][ T6721] [ 97.941053][ T6721] dump_stack_lvl+0x241/0x360 [ 97.941079][ T6721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.941096][ T6721] ? __pfx__printk+0x10/0x10 [ 97.941114][ T6721] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 97.941135][ T6721] ? __pfx___might_resched+0x10/0x10 [ 97.941158][ T6721] should_fail_ex+0x40a/0x550 [ 97.941182][ T6721] should_failslab+0xac/0x100 [ 97.941204][ T6721] __kmalloc_node_noprof+0xe1/0x4d0 [ 97.941222][ T6721] ? __kvmalloc_node_noprof+0x72/0x190 [ 97.941248][ T6721] __kvmalloc_node_noprof+0x72/0x190 [ 97.941271][ T6721] bpf_test_run_xdp_live+0x290/0x2220 [ 97.941292][ T6721] ? __pfx_lock_release+0x10/0x10 [ 97.941317][ T6721] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 97.941335][ T6721] ? __pfx___might_resched+0x10/0x10 [ 97.941356][ T6721] ? __mutex_unlock_slowpath+0x227/0x800 [ 97.941383][ T6721] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 97.941402][ T6721] ? synchronize_rcu+0x11b/0x360 [ 97.941418][ T6721] ? __pfx_synchronize_rcu+0x10/0x10 [ 97.941456][ T6721] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 97.941478][ T6721] ? 0xffffffffa00007dc [ 97.941491][ T6721] ? 0xffffffffa000081c [ 97.941502][ T6721] ? 0xffffffffa00008cc [ 97.941533][ T6721] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 97.941568][ T6721] ? _copy_from_user+0x95/0xb0 [ 97.941588][ T6721] ? bpf_test_init+0x137/0x160 [ 97.941614][ T6721] ? xdp_convert_md_to_buff+0x5b/0x330 [ 97.941637][ T6721] bpf_prog_test_run_xdp+0x805/0x11e0 [ 97.941663][ T6721] ? __pfx_lock_release+0x10/0x10 [ 97.941694][ T6721] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.941715][ T6721] ? __fget_files+0x2a/0x410 [ 97.941739][ T6721] ? __fget_files+0x2a/0x410 [ 97.941762][ T6721] ? fput+0x21b/0x290 [ 97.941781][ T6721] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.941803][ T6721] bpf_prog_test_run+0x2e4/0x360 [ 97.941828][ T6721] __sys_bpf+0x487/0x820 [ 97.941851][ T6721] ? __pfx___sys_bpf+0x10/0x10 [ 97.941883][ T6721] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.941908][ T6721] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.941931][ T6721] ? do_syscall_64+0x100/0x230 [ 97.941954][ T6721] __x64_sys_bpf+0x7c/0x90 [ 97.941973][ T6721] do_syscall_64+0xf3/0x230 [ 97.941991][ T6721] ? clear_bhb_loop+0x35/0x90 [ 97.942014][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.942033][ T6721] RIP: 0033:0x7f72b718d169 [ 97.942046][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.942059][ T6721] RSP: 002b:00007f72b7fbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.942077][ T6721] RAX: ffffffffffffffda RBX: 00007f72b73a5fa0 RCX: 00007f72b718d169 [ 97.942088][ T6721] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 97.942098][ T6721] RBP: 00007f72b7fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 97.942108][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.942117][ T6721] R13: 0000000000000000 R14: 00007f72b73a5fa0 R15: 00007ffd456ab6a8 [ 97.942143][ T6721] [ 98.562252][ T6740] openvswitch: netlink: Actions may not be safe on all matching packets [ 98.758814][ T6747] bond0: entered promiscuous mode [ 98.783061][ T6747] batadv0: entered promiscuous mode [ 98.796565][ T6747] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 98.812668][ T6747] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 98.826982][ T6747] Bluetooth: MGMT ver 1.23 [ 98.832609][ T6750] lo speed is unknown, defaulting to 1000 [ 100.341919][ T6796] xt_hashlimit: size too large, truncated to 1048576 [ 100.860205][ T6817] tipc: Started in network mode [ 100.865328][ T6817] tipc: Node identity ac14142f, cluster identity 4711 [ 100.875570][ T6817] tipc: New replicast peer: 0.0.0.0 [ 100.885134][ T6817] tipc: Enabled bearer , priority 10 [ 101.563431][ T6847] netlink: 'syz.0.336': attribute type 10 has an invalid length. [ 101.597664][ T6860] netlink: 'syz.4.341': attribute type 16 has an invalid length. [ 101.605952][ T6863] netlink: 'syz.4.341': attribute type 16 has an invalid length. [ 101.613972][ T6863] __nla_validate_parse: 33 callbacks suppressed [ 101.613986][ T6863] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.341'. [ 101.614610][ T6861] netlink: 'syz.0.336': attribute type 10 has an invalid length. [ 101.621376][ T6860] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.341'. [ 101.630313][ T6861] netlink: 2 bytes leftover after parsing attributes in process `syz.0.336'. [ 101.685182][ T5840] lo speed is unknown, defaulting to 1000 [ 101.710995][ T6847] batman_adv: batadv0: Adding interface: team0 [ 101.725492][ T6847] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.757182][ T6847] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 101.824263][ T6853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.841648][ T6853] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.866668][ T6853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.891437][ T5846] tipc: Node number set to 2886997039 [ 101.919066][ T6861] team0: entered promiscuous mode [ 101.950659][ T6861] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.958095][ T6861] batman_adv: batadv0: Interface activated: team0 [ 101.970977][ T6875] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.336'. [ 102.009291][ T6861] batman_adv: batadv0: Interface deactivated: team0 [ 102.015982][ T6861] batman_adv: batadv0: Removing interface: team0 [ 102.042027][ T6861] bridge0: port 1(team0) entered blocking state [ 102.048517][ T6861] bridge0: port 1(team0) entered disabled state [ 102.063695][ T6861] team0: entered allmulticast mode [ 102.079650][ T5912] lo speed is unknown, defaulting to 1000 [ 102.375562][ T6889] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 102.419060][ T6889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.457883][ T6887] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 102.462535][ T6894] bond2: (slave veth5): Enslaving as an active interface with a down link [ 102.705374][ T6898] Cannot find add_set index 0 as target [ 102.771312][ T6905] netlink: 148 bytes leftover after parsing attributes in process `syz.1.357'. [ 102.798566][ T6905] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 102.906963][ T6905] lo speed is unknown, defaulting to 1000 [ 103.224672][ T6916] tipc: Started in network mode [ 103.266397][ T6916] tipc: Node identity ac14142f, cluster identity 1 [ 103.309636][ T6916] tipc: New replicast peer: 0.0.0.0 [ 103.318160][ T6916] tipc: Enabled bearer , priority 10 [ 103.342263][ T6918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.361'. [ 104.272604][ T6944] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 104.350949][ T6949] netlink: 104 bytes leftover after parsing attributes in process `syz.2.373'. [ 104.430309][ T5883] tipc: Node number set to 2886997039 [ 104.980281][ T6972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.108438][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.384'. [ 105.180666][ T6979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.191047][ T6979] IPv6: NLM_F_REPLACE set, but no existing node found! [ 105.411501][ T6972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.774964][ T6972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.906309][ T6972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.071804][ T6972] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.098749][ T6972] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.136777][ T6972] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.137838][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 106.193190][ T6972] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.196346][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 106.569677][ T7017] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 107.167286][ T7046] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 107.199235][ T7046] __nla_validate_parse: 15 callbacks suppressed [ 107.199252][ T7046] netlink: 224 bytes leftover after parsing attributes in process `syz.3.407'. [ 107.255730][ T7046] bridge0: entered promiscuous mode [ 107.266048][ T7046] macvlan2: entered promiscuous mode [ 107.272635][ T7046] bridge0: port 3(macvlan2) entered blocking state [ 107.281360][ T7046] bridge0: port 3(macvlan2) entered disabled state [ 107.288130][ T7046] macvlan2: entered allmulticast mode [ 107.309618][ T7046] bridge0: entered allmulticast mode [ 107.323767][ T7046] macvlan2: left allmulticast mode [ 107.329774][ T7046] bridge0: left allmulticast mode [ 107.340258][ T7046] bridge0: left promiscuous mode [ 107.363739][ T7053] tipc: Enabling of bearer rejected, already enabled [ 107.373059][ T7055] FAULT_INJECTION: forcing a failure. [ 107.373059][ T7055] name failslab, interval 1, probability 0, space 0, times 0 [ 107.392428][ T7052] netlink: 32 bytes leftover after parsing attributes in process `syz.4.409'. [ 107.409529][ T7055] CPU: 1 UID: 0 PID: 7055 Comm: syz.2.410 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 107.409552][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.409562][ T7055] Call Trace: [ 107.409567][ T7055] [ 107.409575][ T7055] dump_stack_lvl+0x241/0x360 [ 107.409602][ T7055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.409619][ T7055] ? __pfx__printk+0x10/0x10 [ 107.409641][ T7055] ? __kmalloc_cache_noprof+0x48/0x390 [ 107.409660][ T7055] ? __pfx___might_resched+0x10/0x10 [ 107.409677][ T7055] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 107.409697][ T7055] should_fail_ex+0x40a/0x550 [ 107.409734][ T7055] should_failslab+0xac/0x100 [ 107.409757][ T7055] __kmalloc_cache_noprof+0x70/0x390 [ 107.409776][ T7055] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 107.409800][ T7055] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 107.409835][ T7055] genl_rcv_msg+0xb1f/0xec0 [ 107.409862][ T7055] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.409905][ T7055] ? __pfx_lock_acquire+0x10/0x10 [ 107.409927][ T7055] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 107.409950][ T7055] ? __pfx___might_resched+0x10/0x10 [ 107.409979][ T7055] netlink_rcv_skb+0x206/0x480 [ 107.410000][ T7055] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.410018][ T7055] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.410051][ T7055] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 107.410086][ T7055] genl_rcv+0x28/0x40 [ 107.410100][ T7055] netlink_unicast+0x7f6/0x990 [ 107.410127][ T7055] ? __pfx_netlink_unicast+0x10/0x10 [ 107.410142][ T7055] ? __virt_addr_valid+0x45f/0x530 [ 107.410208][ T7055] ? __phys_addr_symbol+0x2f/0x70 [ 107.410220][ T7055] ? __check_object_size+0x47a/0x730 [ 107.410289][ T7055] netlink_sendmsg+0x8de/0xcb0 [ 107.410323][ T7055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.410353][ T7055] ? aa_sock_msg_perm+0x91/0x160 [ 107.410381][ T7055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.410399][ T7055] __sock_sendmsg+0x221/0x270 [ 107.410420][ T7055] ____sys_sendmsg+0x53a/0x860 [ 107.410444][ T7055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.410456][ T7055] ? __fget_files+0x2a/0x410 [ 107.410473][ T7055] ? __fget_files+0x2a/0x410 [ 107.410492][ T7055] __sys_sendmsg+0x269/0x350 [ 107.410505][ T7055] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.410521][ T7055] ? do_sys_openat2+0x17a/0x1d0 [ 107.410549][ T7055] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.410564][ T7055] ? do_syscall_64+0x100/0x230 [ 107.410578][ T7055] ? do_syscall_64+0xb6/0x230 [ 107.410590][ T7055] do_syscall_64+0xf3/0x230 [ 107.410601][ T7055] ? clear_bhb_loop+0x35/0x90 [ 107.410617][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.410629][ T7055] RIP: 0033:0x7f72b718d169 [ 107.410639][ T7055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.410647][ T7055] RSP: 002b:00007f72b7fbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.410658][ T7055] RAX: ffffffffffffffda RBX: 00007f72b73a5fa0 RCX: 00007f72b718d169 [ 107.410664][ T7055] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 107.410670][ T7055] RBP: 00007f72b7fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 107.410675][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.410680][ T7055] R13: 0000000000000000 R14: 00007f72b73a5fa0 R15: 00007ffd456ab6a8 [ 107.410695][ T7055] [ 108.014746][ T7060] netlink: 'syz.4.412': attribute type 10 has an invalid length. [ 108.437140][ T7076] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 108.468319][ T7076] netlink: 224 bytes leftover after parsing attributes in process `syz.1.420'. [ 108.512921][ T7082] tipc: Started in network mode [ 108.517941][ T7082] tipc: Node identity ac14142f, cluster identity 4711 [ 108.532046][ T7082] tipc: New replicast peer: 0.0.0.0 [ 108.537584][ T7082] tipc: Enabled bearer , priority 10 [ 108.547250][ T7082] netlink: 32 bytes leftover after parsing attributes in process `syz.0.422'. [ 108.816122][ T7097] netlink: 52 bytes leftover after parsing attributes in process `syz.0.429'. [ 109.354305][ T7110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.433'. [ 109.649321][ T5883] tipc: Node number set to 2886997039 [ 110.515149][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 110.528410][ T7119] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 110.645452][ T7124] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 110.799086][ T7147] openvswitch: netlink: Actions may not be safe on all matching packets [ 110.873557][ T7148] FAULT_INJECTION: forcing a failure. [ 110.873557][ T7148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.909045][ T7148] CPU: 0 UID: 0 PID: 7148 Comm: syz.0.444 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 110.909069][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.909079][ T7148] Call Trace: [ 110.909084][ T7148] [ 110.909091][ T7148] dump_stack_lvl+0x241/0x360 [ 110.909120][ T7148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.909136][ T7148] ? __pfx__printk+0x10/0x10 [ 110.909153][ T7148] ? __pfx_lock_release+0x10/0x10 [ 110.909182][ T7148] should_fail_ex+0x40a/0x550 [ 110.909209][ T7148] _copy_from_user+0x2d/0xb0 [ 110.909230][ T7148] copy_msghdr_from_user+0xae/0x680 [ 110.909251][ T7148] ? __pfx___might_resched+0x10/0x10 [ 110.909273][ T7148] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 110.909297][ T7148] ? do_recvmmsg+0x44e/0xab0 [ 110.909313][ T7148] ? __might_fault+0xaa/0x120 [ 110.909333][ T7148] do_recvmmsg+0x3bd/0xab0 [ 110.909367][ T7148] ? __pfx_do_recvmmsg+0x10/0x10 [ 110.909403][ T7148] ? ksys_write+0x22a/0x2b0 [ 110.909418][ T7148] ? __pfx_lock_release+0x10/0x10 [ 110.909444][ T7148] ? sb_end_write+0xe9/0x1c0 [ 110.909467][ T7148] ? vfs_write+0x7fa/0xd10 [ 110.909486][ T7148] ? __mutex_unlock_slowpath+0x227/0x800 [ 110.909513][ T7148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.909529][ T7148] ? __fget_files+0x2a/0x410 [ 110.909563][ T7148] __x64_sys_recvmmsg+0x199/0x250 [ 110.909583][ T7148] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 110.909602][ T7148] ? do_syscall_64+0x100/0x230 [ 110.909623][ T7148] ? do_syscall_64+0xb6/0x230 [ 110.909642][ T7148] do_syscall_64+0xf3/0x230 [ 110.909660][ T7148] ? clear_bhb_loop+0x35/0x90 [ 110.909683][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.909702][ T7148] RIP: 0033:0x7f91ab58d169 [ 110.909717][ T7148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.909728][ T7148] RSP: 002b:00007f91ac442038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 110.909745][ T7148] RAX: ffffffffffffffda RBX: 00007f91ab7a5fa0 RCX: 00007f91ab58d169 [ 110.909756][ T7148] RDX: 0400000000000284 RSI: 0000400000000040 RDI: 0000000000000003 [ 110.909765][ T7148] RBP: 00007f91ac442090 R08: 0000000000000000 R09: 0000000000000000 [ 110.909774][ T7148] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 110.909783][ T7148] R13: 0000000000000000 R14: 00007f91ab7a5fa0 R15: 00007ffd9ebf0668 [ 110.909807][ T7148] [ 111.718558][ T7169] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.454'. [ 111.765767][ T7168] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 112.201113][ T7185] netlink: 148 bytes leftover after parsing attributes in process `syz.2.460'. [ 112.235876][ T7185] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 112.247026][ T7183] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 112.415050][ T7185] lo speed is unknown, defaulting to 1000 [ 113.348175][ T7210] netlink: 'syz.4.468': attribute type 21 has an invalid length. [ 113.376243][ T7210] netlink: 132 bytes leftover after parsing attributes in process `syz.4.468'. [ 113.638688][ T7225] netlink: 64 bytes leftover after parsing attributes in process `syz.1.473'. [ 114.840561][ T7271] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 114.926555][ T7271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.944254][ T7271] bond3: (slave bond4): making interface the new active one [ 114.952849][ T7271] bond3: (slave bond4): Enslaving as an active interface with an up link [ 115.657941][ T7322] tipc: Failed to remove unknown binding: 66,3,3/2886997039:3547879852/3547879853 [ 115.888160][ T7333] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 115.954437][ T7334] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 116.328310][ T7346] FAULT_INJECTION: forcing a failure. [ 116.328310][ T7346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.343392][ T7346] CPU: 1 UID: 0 PID: 7346 Comm: syz.2.505 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 116.343416][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.343426][ T7346] Call Trace: [ 116.343432][ T7346] [ 116.343438][ T7346] dump_stack_lvl+0x241/0x360 [ 116.343464][ T7346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.343480][ T7346] ? __pfx__printk+0x10/0x10 [ 116.343498][ T7346] ? __pfx_lock_release+0x10/0x10 [ 116.343529][ T7346] should_fail_ex+0x40a/0x550 [ 116.343562][ T7346] _copy_from_iter+0x1df/0x1c40 [ 116.343580][ T7346] ? __virt_addr_valid+0x183/0x530 [ 116.343601][ T7346] ? __pfx_lock_release+0x10/0x10 [ 116.343630][ T7346] ? __alloc_skb+0x28f/0x440 [ 116.343646][ T7346] ? __pfx__copy_from_iter+0x10/0x10 [ 116.343666][ T7346] ? __virt_addr_valid+0x183/0x530 [ 116.343680][ T7346] ? __virt_addr_valid+0x183/0x530 [ 116.343694][ T7346] ? __virt_addr_valid+0x45f/0x530 [ 116.343709][ T7346] ? __phys_addr_symbol+0x2f/0x70 [ 116.343724][ T7346] ? __check_object_size+0x47a/0x730 [ 116.343748][ T7346] netlink_sendmsg+0x742/0xcb0 [ 116.343780][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.343804][ T7346] ? aa_sock_msg_perm+0x91/0x160 [ 116.343831][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.343850][ T7346] __sock_sendmsg+0x221/0x270 [ 116.343871][ T7346] ____sys_sendmsg+0x53a/0x860 [ 116.343895][ T7346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.343909][ T7346] ? __fget_files+0x2a/0x410 [ 116.343932][ T7346] ? __fget_files+0x2a/0x410 [ 116.343959][ T7346] __sys_sendmsg+0x269/0x350 [ 116.343978][ T7346] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.344005][ T7346] ? do_sys_openat2+0x17a/0x1d0 [ 116.344044][ T7346] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.344065][ T7346] ? do_syscall_64+0x100/0x230 [ 116.344086][ T7346] ? do_syscall_64+0xb6/0x230 [ 116.344105][ T7346] do_syscall_64+0xf3/0x230 [ 116.344121][ T7346] ? clear_bhb_loop+0x35/0x90 [ 116.344143][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.344160][ T7346] RIP: 0033:0x7f72b718d169 [ 116.344174][ T7346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.344185][ T7346] RSP: 002b:00007f72b7fbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.344201][ T7346] RAX: ffffffffffffffda RBX: 00007f72b73a5fa0 RCX: 00007f72b718d169 [ 116.344211][ T7346] RDX: 0000000000000080 RSI: 0000400000000740 RDI: 0000000000000003 [ 116.344220][ T7346] RBP: 00007f72b7fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 116.344229][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.344238][ T7346] R13: 0000000000000000 R14: 00007f72b73a5fa0 R15: 00007ffd456ab6a8 [ 116.344266][ T7346] [ 116.746108][ T7350] netlink: 6 bytes leftover after parsing attributes in process `syz.0.507'. [ 116.786891][ T7350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.213698][ T7371] dvmrp5: entered allmulticast mode [ 117.257632][ T7371] dvmrp5: left allmulticast mode [ 117.586427][ T7397] netlink: 'syz.1.519': attribute type 10 has an invalid length. [ 118.153170][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.160828][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.209914][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.217979][ T7397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.225518][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.232698][ T7397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.371648][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.373138][ T7403] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 118.378860][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.386691][ T7403] netlink: 224 bytes leftover after parsing attributes in process `syz.2.522'. [ 118.587389][ T7409] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.523'. [ 119.117370][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 119.200987][ T7441] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 119.677698][ T7446] syz.2.536 (7446) used greatest stack depth: 16560 bytes left [ 119.713793][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 119.722531][ T7448] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 119.741829][ T7448] netlink: 224 bytes leftover after parsing attributes in process `syz.3.539'. [ 120.038809][ T7455] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.541'. [ 120.103255][ T7458] sctp: [Deprecated]: syz.2.543 (pid 7458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.103255][ T7458] Use struct sctp_sack_info instead [ 120.141024][ T7461] netlink: 104 bytes leftover after parsing attributes in process `syz.4.545'. [ 120.161878][ T7461] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 120.374141][ T7473] netlink: 'syz.0.550': attribute type 1 has an invalid length. [ 120.407303][ T7473] netlink: 224 bytes leftover after parsing attributes in process `syz.0.550'. [ 120.461211][ T7479] FAULT_INJECTION: forcing a failure. [ 120.461211][ T7479] name failslab, interval 1, probability 0, space 0, times 0 [ 120.499528][ T7479] CPU: 1 UID: 0 PID: 7479 Comm: syz.1.548 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 120.499553][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.499563][ T7479] Call Trace: [ 120.499569][ T7479] [ 120.499576][ T7479] dump_stack_lvl+0x241/0x360 [ 120.499606][ T7479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.499623][ T7479] ? __pfx__printk+0x10/0x10 [ 120.499641][ T7479] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 120.499664][ T7479] ? __pfx___might_resched+0x10/0x10 [ 120.499688][ T7479] should_fail_ex+0x40a/0x550 [ 120.499714][ T7479] should_failslab+0xac/0x100 [ 120.499735][ T7479] ? page_pool_create_percpu+0x77/0xb70 [ 120.499751][ T7479] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 120.499772][ T7479] ? rcu_is_watching+0x15/0xb0 [ 120.499793][ T7479] page_pool_create_percpu+0x77/0xb70 [ 120.499818][ T7479] bpf_test_run_xdp_live+0x2e6/0x2220 [ 120.499839][ T7479] ? __pfx_lock_release+0x10/0x10 [ 120.499866][ T7479] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 120.499884][ T7479] ? __pfx___might_resched+0x10/0x10 [ 120.499907][ T7479] ? __mutex_unlock_slowpath+0x227/0x800 [ 120.499934][ T7479] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 120.499953][ T7479] ? synchronize_rcu+0x11b/0x360 [ 120.499971][ T7479] ? __pfx_synchronize_rcu+0x10/0x10 [ 120.500009][ T7479] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 120.500030][ T7479] ? 0xffffffffa00007dc [ 120.500043][ T7479] ? 0xffffffffa000080c [ 120.500055][ T7479] ? 0xffffffffa0000848 [ 120.500067][ T7479] ? 0xffffffffa00008cc [ 120.500103][ T7479] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 120.500139][ T7479] ? _copy_from_user+0x95/0xb0 [ 120.500159][ T7479] ? bpf_test_init+0x137/0x160 [ 120.500177][ T7479] ? xdp_convert_md_to_buff+0x5b/0x330 [ 120.500199][ T7479] bpf_prog_test_run_xdp+0x805/0x11e0 [ 120.500225][ T7479] ? __pfx_lock_release+0x10/0x10 [ 120.500255][ T7479] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 120.500277][ T7479] ? __fget_files+0x2a/0x410 [ 120.500300][ T7479] ? __fget_files+0x2a/0x410 [ 120.500324][ T7479] ? fput+0x21b/0x290 [ 120.500341][ T7479] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 120.500363][ T7479] bpf_prog_test_run+0x2e4/0x360 [ 120.500388][ T7479] __sys_bpf+0x487/0x820 [ 120.500411][ T7479] ? __pfx___sys_bpf+0x10/0x10 [ 120.500443][ T7479] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.500468][ T7479] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.500491][ T7479] ? do_syscall_64+0x100/0x230 [ 120.500513][ T7479] __x64_sys_bpf+0x7c/0x90 [ 120.500533][ T7479] do_syscall_64+0xf3/0x230 [ 120.500550][ T7479] ? clear_bhb_loop+0x35/0x90 [ 120.500574][ T7479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.500593][ T7479] RIP: 0033:0x7f12ad58d169 [ 120.500607][ T7479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.500619][ T7479] RSP: 002b:00007f12ae3f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.500637][ T7479] RAX: ffffffffffffffda RBX: 00007f12ad7a5fa0 RCX: 00007f12ad58d169 [ 120.500649][ T7479] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 120.500659][ T7479] RBP: 00007f12ae3f0090 R08: 0000000000000000 R09: 0000000000000000 [ 120.500669][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.500678][ T7479] R13: 0000000000000000 R14: 00007f12ad7a5fa0 R15: 00007ffd76bb8d28 [ 120.500702][ T7479] [ 120.930770][ T7491] netlink: 'syz.3.554': attribute type 10 has an invalid length. [ 120.963331][ T7491] veth1_macvtap: left promiscuous mode [ 121.002301][ T7491] team0: Device veth1_macvtap failed to register rx_handler [ 121.016006][ T7494] netlink: 56 bytes leftover after parsing attributes in process `syz.0.555'. [ 121.026019][ T7497] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.556'. [ 121.073697][ T7485] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 121.107726][ T7485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.554'. [ 121.230430][ T7506] netlink: 'syz.2.559': attribute type 3 has an invalid length. [ 121.243833][ T7494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.354621][ T7494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.478957][ T7494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.563840][ T7521] FAULT_INJECTION: forcing a failure. [ 121.563840][ T7521] name failslab, interval 1, probability 0, space 0, times 0 [ 121.632383][ T7521] CPU: 1 UID: 0 PID: 7521 Comm: syz.4.564 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 121.632409][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.632419][ T7521] Call Trace: [ 121.632425][ T7521] [ 121.632431][ T7521] dump_stack_lvl+0x241/0x360 [ 121.632455][ T7521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.632471][ T7521] ? __pfx__printk+0x10/0x10 [ 121.632489][ T7521] ? fs_reclaim_acquire+0x93/0x130 [ 121.632506][ T7521] ? __pfx___might_resched+0x10/0x10 [ 121.632523][ T7521] ? dynamic_dname+0x144/0x1b0 [ 121.632541][ T7521] should_fail_ex+0x40a/0x550 [ 121.632564][ T7521] should_failslab+0xac/0x100 [ 121.632582][ T7521] __kmalloc_noprof+0xdd/0x4c0 [ 121.632599][ T7521] ? tomoyo_encode+0x26f/0x540 [ 121.632619][ T7521] tomoyo_encode+0x26f/0x540 [ 121.632635][ T7521] ? __pfx_sockfs_dname+0x10/0x10 [ 121.632657][ T7521] tomoyo_realpath_from_path+0x59e/0x5e0 [ 121.632680][ T7521] tomoyo_path_number_perm+0x239/0x770 [ 121.632699][ T7521] ? __lock_acquire+0x1397/0x2100 [ 121.632722][ T7521] ? tomoyo_path_number_perm+0x209/0x770 [ 121.632743][ T7521] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 121.632797][ T7521] ? __fget_files+0x2a/0x410 [ 121.632821][ T7521] ? __fget_files+0x2a/0x410 [ 121.632846][ T7521] security_file_ioctl+0xc6/0x2a0 [ 121.632866][ T7521] __se_sys_ioctl+0x46/0x170 [ 121.632885][ T7521] do_syscall_64+0xf3/0x230 [ 121.632904][ T7521] ? clear_bhb_loop+0x35/0x90 [ 121.632927][ T7521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.632947][ T7521] RIP: 0033:0x7fae7e38d169 [ 121.632962][ T7521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.632975][ T7521] RSP: 002b:00007fae7c1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.632993][ T7521] RAX: ffffffffffffffda RBX: 00007fae7e5a5fa0 RCX: 00007fae7e38d169 [ 121.633004][ T7521] RDX: 0000400000000180 RSI: 000000000000894b RDI: 0000000000000003 [ 121.633014][ T7521] RBP: 00007fae7c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.633024][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.633031][ T7521] R13: 0000000000000000 R14: 00007fae7e5a5fa0 R15: 00007ffcbb5354b8 [ 121.633058][ T7521] [ 121.633074][ T7521] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.889823][ T7494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.907485][ T7536] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 122.065819][ T7494] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.134022][ T7494] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.173856][ T7494] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.349460][ T7494] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.696500][ T7572] netlink: 'syz.0.576': attribute type 9 has an invalid length. [ 122.708661][ T7576] netlink: 'syz.1.578': attribute type 1 has an invalid length. [ 122.724151][ T7572] hsr0: entered promiscuous mode [ 122.751890][ T7572] macvlan2: entered promiscuous mode [ 122.764253][ T7572] macvlan2: entered allmulticast mode [ 122.778704][ T7572] hsr0: entered allmulticast mode [ 122.804217][ T7572] hsr_slave_0: entered allmulticast mode [ 122.833827][ T7572] hsr_slave_1: entered allmulticast mode [ 123.078488][ T7589] xt_hashlimit: size too large, truncated to 1048576 [ 123.130933][ T7591] xt_hashlimit: size too large, truncated to 1048576 [ 123.666019][ T7612] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 123.679285][ T7612] __nla_validate_parse: 7 callbacks suppressed [ 123.679302][ T7612] netlink: 224 bytes leftover after parsing attributes in process `syz.3.591'. [ 124.083576][ T7631] netlink: 100 bytes leftover after parsing attributes in process `syz.0.599'. [ 124.096987][ T7632] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 124.110785][ T7632] netlink: 'syz.1.601': attribute type 8 has an invalid length. [ 124.118480][ T7632] netlink: 109544 bytes leftover after parsing attributes in process `syz.1.601'. [ 124.236641][ T7641] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 124.245686][ T7641] netlink: 224 bytes leftover after parsing attributes in process `syz.0.605'. [ 124.273500][ T7634] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 124.284802][ T7634] bridge0: port 3(team0) entered disabled state [ 124.298642][ T7639] netlink: 'syz.4.603': attribute type 10 has an invalid length. [ 124.300540][ T7634] team0: left allmulticast mode [ 124.321022][ T7634] team_slave_0: left allmulticast mode [ 124.326995][ T7642] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 124.327100][ T7634] team_slave_1: left allmulticast mode [ 124.334994][ T7642] netlink: 2 bytes leftover after parsing attributes in process `syz.2.602'. [ 124.350406][ T7644] netlink: 'syz.4.603': attribute type 10 has an invalid length. [ 124.358358][ T7647] FAULT_INJECTION: forcing a failure. [ 124.358358][ T7647] name failslab, interval 1, probability 0, space 0, times 0 [ 124.364017][ T7644] netlink: 2 bytes leftover after parsing attributes in process `syz.4.603'. [ 124.374222][ T7634] team0: left promiscuous mode [ 124.385596][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.1.606 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 124.385618][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.385628][ T7647] Call Trace: [ 124.385634][ T7647] [ 124.385640][ T7647] dump_stack_lvl+0x241/0x360 [ 124.385663][ T7647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.385679][ T7647] ? __pfx__printk+0x10/0x10 [ 124.385695][ T7647] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 124.385715][ T7647] ? __pfx___might_resched+0x10/0x10 [ 124.385736][ T7647] should_fail_ex+0x40a/0x550 [ 124.385760][ T7647] should_failslab+0xac/0x100 [ 124.385780][ T7647] __kmalloc_node_noprof+0xe1/0x4d0 [ 124.385807][ T7647] ? __kasan_kmalloc+0x98/0xb0 [ 124.385821][ T7647] ? __kvmalloc_node_noprof+0x72/0x190 [ 124.385846][ T7647] __kvmalloc_node_noprof+0x72/0x190 [ 124.385868][ T7647] page_pool_create_percpu+0x2f5/0xb70 [ 124.385892][ T7647] bpf_test_run_xdp_live+0x2e6/0x2220 [ 124.385911][ T7647] ? __pfx_lock_release+0x10/0x10 [ 124.385935][ T7647] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 124.385954][ T7647] ? __pfx___might_resched+0x10/0x10 [ 124.385976][ T7647] ? __mutex_unlock_slowpath+0x227/0x800 [ 124.386002][ T7647] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 124.386019][ T7647] ? synchronize_rcu+0x11b/0x360 [ 124.386037][ T7647] ? __pfx_synchronize_rcu+0x10/0x10 [ 124.386068][ T7647] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 124.386089][ T7647] ? 0xffffffffa00007dc [ 124.386102][ T7647] ? 0xffffffffa000080c [ 124.386114][ T7647] ? 0xffffffffa0000848 [ 124.386126][ T7647] ? 0xffffffffa00008cc [ 124.386155][ T7647] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 124.386186][ T7647] ? _copy_from_user+0x95/0xb0 [ 124.386205][ T7647] ? bpf_test_init+0x137/0x160 [ 124.386222][ T7647] ? xdp_convert_md_to_buff+0x5b/0x330 [ 124.386244][ T7647] bpf_prog_test_run_xdp+0x805/0x11e0 [ 124.386270][ T7647] ? __pfx_lock_release+0x10/0x10 [ 124.386296][ T7647] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 124.386316][ T7647] ? __fget_files+0x2a/0x410 [ 124.386339][ T7647] ? __fget_files+0x2a/0x410 [ 124.386361][ T7647] ? fput+0x21b/0x290 [ 124.386379][ T7647] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 124.386400][ T7647] bpf_prog_test_run+0x2e4/0x360 [ 124.386425][ T7647] __sys_bpf+0x487/0x820 [ 124.386448][ T7647] ? __pfx___sys_bpf+0x10/0x10 [ 124.386479][ T7647] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 124.386501][ T7647] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.386522][ T7647] ? do_syscall_64+0x100/0x230 [ 124.386545][ T7647] __x64_sys_bpf+0x7c/0x90 [ 124.386566][ T7647] do_syscall_64+0xf3/0x230 [ 124.386610][ T7647] ? clear_bhb_loop+0x35/0x90 [ 124.386634][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.386653][ T7647] RIP: 0033:0x7f12ad58d169 [ 124.386667][ T7647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.386679][ T7647] RSP: 002b:00007f12ae3f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.386697][ T7647] RAX: ffffffffffffffda RBX: 00007f12ad7a5fa0 RCX: 00007f12ad58d169 [ 124.386709][ T7647] RDX: 0000000000000050 RSI: 0000400000000000 RDI: 000000000000000a [ 124.386719][ T7647] RBP: 00007f12ae3f0090 R08: 0000000000000000 R09: 0000000000000000 [ 124.386729][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.386738][ T7647] R13: 0000000000000000 R14: 00007f12ad7a5fa0 R15: 00007ffd76bb8d28 [ 124.386763][ T7647] [ 124.386908][ T7647] page_pool_create_percpu() gave up with errno -12 [ 124.442332][ T7634] team_slave_0: left promiscuous mode [ 124.620809][ T7656] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.603'. [ 124.627471][ T7634] team_slave_1: left promiscuous mode [ 124.765164][ T7634] bridge0: port 3(team0) entered disabled state [ 124.788631][ T7634] batman_adv: batadv0: Adding interface: team0 [ 124.799159][ T7634] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.839851][ T7657] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.602'. [ 124.863908][ T7634] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 124.953699][ T7639] team0: left allmulticast mode [ 124.977926][ T7639] team_slave_0: left allmulticast mode [ 124.989526][ T7639] team_slave_1: left allmulticast mode [ 125.013881][ T7639] team0: left promiscuous mode [ 125.019466][ T7639] team_slave_0: left promiscuous mode [ 125.079337][ T7639] team_slave_1: left promiscuous mode [ 125.093312][ T7639] bridge0: port 3(team0) entered disabled state [ 125.140420][ T7639] batman_adv: batadv0: Adding interface: team0 [ 125.146662][ T7639] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.202937][ T7639] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 125.254638][ T7642] team0: entered promiscuous mode [ 125.265407][ T7642] team_slave_0: entered promiscuous mode [ 125.278083][ T7642] team_slave_1: entered promiscuous mode [ 125.297761][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.323893][ T7642] batman_adv: batadv0: Interface activated: team0 [ 125.345001][ T7642] batman_adv: batadv0: Interface deactivated: team0 [ 125.369327][ T7642] batman_adv: batadv0: Removing interface: team0 [ 125.401426][ T7642] bridge0: port 3(team0) entered blocking state [ 125.429687][ T7642] bridge0: port 3(team0) entered disabled state [ 125.457368][ T7642] team0: entered allmulticast mode [ 125.476100][ T7642] team_slave_0: entered allmulticast mode [ 125.500724][ T7642] team_slave_1: entered allmulticast mode [ 125.530811][ T7642] bridge0: port 3(team0) entered blocking state [ 125.537205][ T7642] bridge0: port 3(team0) entered forwarding state [ 125.574799][ T7644] team0: entered promiscuous mode [ 125.580360][ T7644] team_slave_0: entered promiscuous mode [ 125.600488][ T7644] team_slave_1: entered promiscuous mode [ 125.626892][ T7644] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.653058][ T7644] batman_adv: batadv0: Interface activated: team0 [ 125.671308][ T7644] batman_adv: batadv0: Interface deactivated: team0 [ 125.691380][ T7644] batman_adv: batadv0: Removing interface: team0 [ 125.714143][ T7644] bridge0: port 3(team0) entered blocking state [ 125.734381][ T7644] bridge0: port 3(team0) entered disabled state [ 125.753714][ T7644] team0: entered allmulticast mode [ 125.773836][ T7644] team_slave_0: entered allmulticast mode [ 125.781948][ T7644] team_slave_1: entered allmulticast mode [ 125.828275][ T7663] netlink: 44 bytes leftover after parsing attributes in process `syz.0.611'. [ 125.837689][ T7663] netlink: 43 bytes leftover after parsing attributes in process `syz.0.611'. [ 125.847655][ T7663] netlink: 'syz.0.611': attribute type 5 has an invalid length. [ 125.971014][ T7668] FAULT_INJECTION: forcing a failure. [ 125.971014][ T7668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.011423][ T7668] CPU: 0 UID: 0 PID: 7668 Comm: syz.1.612 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 126.011449][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.011458][ T7668] Call Trace: [ 126.011464][ T7668] [ 126.011472][ T7668] dump_stack_lvl+0x241/0x360 [ 126.011498][ T7668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.011518][ T7668] ? __pfx__printk+0x10/0x10 [ 126.011536][ T7668] ? __pfx_lock_release+0x10/0x10 [ 126.011572][ T7668] should_fail_ex+0x40a/0x550 [ 126.011599][ T7668] _copy_from_user+0x2d/0xb0 [ 126.011619][ T7668] copy_msghdr_from_user+0xae/0x680 [ 126.011640][ T7668] ? __pfx___might_resched+0x10/0x10 [ 126.011662][ T7668] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 126.011686][ T7668] ? do_recvmmsg+0x44e/0xab0 [ 126.011703][ T7668] ? __might_fault+0xaa/0x120 [ 126.011724][ T7668] do_recvmmsg+0x3bd/0xab0 [ 126.011752][ T7668] ? __pfx_do_recvmmsg+0x10/0x10 [ 126.011788][ T7668] ? ksys_write+0x22a/0x2b0 [ 126.011804][ T7668] ? __pfx_lock_release+0x10/0x10 [ 126.011830][ T7668] ? sb_end_write+0xe9/0x1c0 [ 126.011851][ T7668] ? vfs_write+0x7fa/0xd10 [ 126.011870][ T7668] ? __mutex_unlock_slowpath+0x227/0x800 [ 126.011896][ T7668] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.011913][ T7668] ? __fget_files+0x2a/0x410 [ 126.011947][ T7668] __x64_sys_recvmmsg+0x199/0x250 [ 126.011966][ T7668] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 126.011985][ T7668] ? do_syscall_64+0x100/0x230 [ 126.012006][ T7668] ? do_syscall_64+0xb6/0x230 [ 126.012026][ T7668] do_syscall_64+0xf3/0x230 [ 126.012043][ T7668] ? clear_bhb_loop+0x35/0x90 [ 126.012067][ T7668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.012086][ T7668] RIP: 0033:0x7f12ad58d169 [ 126.012101][ T7668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.012114][ T7668] RSP: 002b:00007f12ae3f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 126.012131][ T7668] RAX: ffffffffffffffda RBX: 00007f12ad7a5fa0 RCX: 00007f12ad58d169 [ 126.012142][ T7668] RDX: 03ffffffffffff67 RSI: 0000400000002440 RDI: 0000000000000004 [ 126.012152][ T7668] RBP: 00007f12ae3f0090 R08: 0000000000000000 R09: 0000000000000000 [ 126.012161][ T7668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.012171][ T7668] R13: 0000000000000000 R14: 00007f12ad7a5fa0 R15: 00007ffd76bb8d28 [ 126.012195][ T7668] [ 126.390291][ T7673] FAULT_INJECTION: forcing a failure. [ 126.390291][ T7673] name failslab, interval 1, probability 0, space 0, times 0 [ 126.437963][ T7673] CPU: 1 UID: 0 PID: 7673 Comm: syz.1.616 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 126.437989][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.437998][ T7673] Call Trace: [ 126.438004][ T7673] [ 126.438010][ T7673] dump_stack_lvl+0x241/0x360 [ 126.438033][ T7673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.438049][ T7673] ? __pfx__printk+0x10/0x10 [ 126.438063][ T7673] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 126.438082][ T7673] ? __pfx___might_resched+0x10/0x10 [ 126.438104][ T7673] should_fail_ex+0x40a/0x550 [ 126.438129][ T7673] should_failslab+0xac/0x100 [ 126.438148][ T7673] __kmalloc_node_noprof+0xe1/0x4d0 [ 126.438166][ T7673] ? __kvmalloc_node_noprof+0x72/0x190 [ 126.438192][ T7673] __kvmalloc_node_noprof+0x72/0x190 [ 126.438213][ T7673] bpf_test_run_xdp_live+0x290/0x2220 [ 126.438234][ T7673] ? __pfx_lock_release+0x10/0x10 [ 126.438259][ T7673] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 126.438278][ T7673] ? __pfx___might_resched+0x10/0x10 [ 126.438301][ T7673] ? __mutex_unlock_slowpath+0x227/0x800 [ 126.438325][ T7673] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 126.438344][ T7673] ? synchronize_rcu+0x11b/0x360 [ 126.438360][ T7673] ? __pfx_synchronize_rcu+0x10/0x10 [ 126.438395][ T7673] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 126.438415][ T7673] ? 0xffffffffa00007dc [ 126.438427][ T7673] ? 0xffffffffa000080c [ 126.438439][ T7673] ? 0xffffffffa000084c [ 126.438450][ T7673] ? 0xffffffffa00008cc [ 126.438479][ T7673] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 126.438526][ T7673] ? _copy_from_user+0x95/0xb0 [ 126.438546][ T7673] ? bpf_test_init+0x137/0x160 [ 126.438562][ T7673] ? xdp_convert_md_to_buff+0x5b/0x330 [ 126.438584][ T7673] bpf_prog_test_run_xdp+0x805/0x11e0 [ 126.438610][ T7673] ? __pfx_lock_release+0x10/0x10 [ 126.438636][ T7673] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.438656][ T7673] ? __fget_files+0x2a/0x410 [ 126.438678][ T7673] ? __fget_files+0x2a/0x410 [ 126.438701][ T7673] ? fput+0x21b/0x290 [ 126.438719][ T7673] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 126.438739][ T7673] bpf_prog_test_run+0x2e4/0x360 [ 126.438763][ T7673] __sys_bpf+0x487/0x820 [ 126.438785][ T7673] ? __pfx___sys_bpf+0x10/0x10 [ 126.438816][ T7673] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 126.438841][ T7673] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 126.438863][ T7673] ? do_syscall_64+0x100/0x230 [ 126.438886][ T7673] __x64_sys_bpf+0x7c/0x90 [ 126.438906][ T7673] do_syscall_64+0xf3/0x230 [ 126.438929][ T7673] ? clear_bhb_loop+0x35/0x90 [ 126.438952][ T7673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.438971][ T7673] RIP: 0033:0x7f12ad58d169 [ 126.438989][ T7673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.439001][ T7673] RSP: 002b:00007f12ae3f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.439018][ T7673] RAX: ffffffffffffffda RBX: 00007f12ad7a5fa0 RCX: 00007f12ad58d169 [ 126.439029][ T7673] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 126.439038][ T7673] RBP: 00007f12ae3f0090 R08: 0000000000000000 R09: 0000000000000000 [ 126.439047][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.439056][ T7673] R13: 0000000000000000 R14: 00007f12ad7a5fa0 R15: 00007ffd76bb8d28 [ 126.439081][ T7673] [ 127.184507][ T7682] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 127.516193][ T7690] syzkaller0: entered promiscuous mode [ 127.527055][ T7690] syzkaller0: entered allmulticast mode [ 130.849447][ T7722] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 130.857319][ T7722] __nla_validate_parse: 6 callbacks suppressed [ 130.857334][ T7722] netlink: 224 bytes leftover after parsing attributes in process `syz.2.632'. [ 131.094373][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 131.104424][ T7707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.165960][ T7719] vlan2: entered promiscuous mode [ 131.373350][ T7731] bridge_slave_1: left allmulticast mode [ 131.423664][ T7731] bridge_slave_1: left promiscuous mode [ 131.465758][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.523462][ T7737] Cannot find del_set index 286 as target [ 131.550577][ T7741] bond0: (slave team0): Releasing backup interface [ 131.568740][ T7741] bridge_slave_0: left allmulticast mode [ 131.585930][ T7741] bridge_slave_0: left promiscuous mode [ 131.598444][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.637367][ T7741] bridge_slave_1: left allmulticast mode [ 131.652446][ T7741] bridge_slave_1: left promiscuous mode [ 131.665199][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.678424][ T7741] bond0: (slave bond_slave_0): Releasing backup interface [ 131.700430][ T7741] bond0: (slave bond_slave_1): Releasing backup interface [ 131.708940][ T7744] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 131.726142][ T7741] team0: Port device team_slave_0 removed [ 131.734489][ T7741] team0: Port device team_slave_1 removed [ 131.750299][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.761235][ T7750] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 131.769337][ T7752] netlink: 104 bytes leftover after parsing attributes in process `syz.2.643'. [ 131.773429][ T7750] netlink: 2 bytes leftover after parsing attributes in process `syz.4.642'. [ 131.786741][ T7743] team0: Mode changed to "loadbalance" [ 131.824260][ T7740] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.640'. [ 131.841824][ T7744] team0: left allmulticast mode [ 131.859643][ T7744] team_slave_0: left allmulticast mode [ 131.884038][ T7744] team_slave_1: left allmulticast mode [ 131.899368][ T7744] team0: left promiscuous mode [ 131.904190][ T7744] team_slave_0: left promiscuous mode [ 131.923899][ T7744] team_slave_1: left promiscuous mode [ 131.957912][ T7744] bridge0: port 3(team0) entered disabled state [ 132.034955][ T7760] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.642'. [ 132.156252][ T7744] batman_adv: batadv0: Adding interface: team0 [ 132.185642][ T7744] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.295204][ T7744] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 132.442794][ T7766] netlink: 'syz.3.646': attribute type 1 has an invalid length. [ 132.461423][ T7766] netlink: 224 bytes leftover after parsing attributes in process `syz.3.646'. [ 132.716078][ T7773] lo speed is unknown, defaulting to 1000 [ 132.861822][ T7782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.651'. [ 133.074928][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.168268][ T7792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.656'. [ 133.281922][ T7794] bond3: entered promiscuous mode [ 133.317175][ T7794] bond3: entered allmulticast mode [ 133.325029][ T7794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.417470][ T7803] vlan0: entered promiscuous mode [ 134.369555][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 134.406556][ T7843] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 134.430618][ T7841] team0: Mode changed to "broadcast" [ 134.468193][ T7841] tipc: Started in network mode [ 134.503582][ T7841] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 134.540158][ T7841] tipc: Enabled bearer , priority 0 [ 135.169670][ T7870] lo speed is unknown, defaulting to 1000 [ 135.504597][ T7888] lo speed is unknown, defaulting to 1000 [ 135.661930][ T5912] tipc: Node number set to 11578026 [ 136.201503][ T5840] IPVS: starting estimator thread 0... [ 136.334997][ T7919] IPVS: using max 27 ests per chain, 64800 per kthread [ 136.570898][ T7935] vlan2: entered allmulticast mode [ 136.776159][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.898816][ T8002] lo speed is unknown, defaulting to 1000 [ 137.925885][ T8006] bond0: entered promiscuous mode [ 137.941973][ T8005] bond0: left promiscuous mode [ 138.183931][ T8018] __nla_validate_parse: 3 callbacks suppressed [ 138.183950][ T8018] netlink: 148 bytes leftover after parsing attributes in process `syz.3.751'. [ 138.219265][ T8018] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 138.487279][ T8023] lo speed is unknown, defaulting to 1000 [ 138.998619][ T8040] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 139.697293][ T8062] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.765'. [ 141.422986][ T8073] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 141.685258][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.774'. [ 141.770169][ T8099] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.774'. [ 141.779067][ T8103] netlink: 148 bytes leftover after parsing attributes in process `syz.4.778'. [ 141.795670][ T8103] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 141.903677][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'. [ 142.001235][ T8109] lo speed is unknown, defaulting to 1000 [ 142.056357][ T8114] netlink: 148 bytes leftover after parsing attributes in process `syz.3.780'. [ 142.080488][ T8114] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 142.247928][ T8122] lo speed is unknown, defaulting to 1000 [ 142.309591][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.784'. [ 142.387038][ T8125] gretap0: entered promiscuous mode [ 142.410984][ T8125] gretap0: left promiscuous mode [ 143.007419][ T8141] bridge0: port 2(syz_tun) entered blocking state [ 143.014604][ T8141] bridge0: port 2(syz_tun) entered disabled state [ 143.021804][ T8141] syz_tun: entered allmulticast mode [ 143.050826][ T8141] syz_tun: entered promiscuous mode [ 143.057758][ T8141] bridge0: port 2(syz_tun) entered blocking state [ 143.064710][ T8141] bridge0: port 2(syz_tun) entered forwarding state [ 143.202787][ T8143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.427713][ T8154] netlink: 'syz.2.792': attribute type 1 has an invalid length. [ 143.521733][ T8154] bond3 (unregistering): Released all slaves [ 143.853384][ T8169] dvmrp5: entered allmulticast mode [ 143.885114][ T8169] dvmrp5: left allmulticast mode [ 144.637603][ T8196] netlink: 'syz.3.806': attribute type 10 has an invalid length. [ 144.659803][ T8196] batman_adv: batadv0: Adding interface: team0 [ 144.666119][ T8196] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.727319][ T8200] netlink: 'syz.3.806': attribute type 10 has an invalid length. [ 144.737400][ T8196] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 144.740670][ T8200] netlink: 2 bytes leftover after parsing attributes in process `syz.3.806'. [ 144.761016][ T8204] netlink: 148 bytes leftover after parsing attributes in process `syz.1.808'. [ 144.789416][ T8204] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 144.789445][ T8200] team0: entered promiscuous mode [ 144.815087][ T8200] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.833566][ T8200] batman_adv: batadv0: Interface activated: team0 [ 144.854486][ T8200] batman_adv: batadv0: Interface deactivated: team0 [ 144.864052][ T8200] batman_adv: batadv0: Removing interface: team0 [ 144.871751][ T8212] netlink: 'syz.1.808': attribute type 3 has an invalid length. [ 144.882371][ T8200] bridge0: port 1(team0) entered blocking state [ 144.888974][ T8212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.808'. [ 144.903565][ T8200] bridge0: port 1(team0) entered disabled state [ 144.911682][ T8200] team0: entered allmulticast mode [ 144.932023][ T8211] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 145.038861][ T8200] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.806'. [ 145.064321][ T8212] lo speed is unknown, defaulting to 1000 [ 145.294611][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'. [ 145.348709][ T8223] FAULT_INJECTION: forcing a failure. [ 145.348709][ T8223] name failslab, interval 1, probability 0, space 0, times 0 [ 145.370576][ T8223] CPU: 0 UID: 0 PID: 8223 Comm: syz.0.815 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 145.370605][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.370615][ T8223] Call Trace: [ 145.370621][ T8223] [ 145.370629][ T8223] dump_stack_lvl+0x241/0x360 [ 145.370654][ T8223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.370670][ T8223] ? __pfx__printk+0x10/0x10 [ 145.370688][ T8223] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 145.370708][ T8223] ? __pfx___might_resched+0x10/0x10 [ 145.370732][ T8223] should_fail_ex+0x40a/0x550 [ 145.370758][ T8223] should_failslab+0xac/0x100 [ 145.370779][ T8223] __kmalloc_node_noprof+0xe1/0x4d0 [ 145.370797][ T8223] ? __kvmalloc_node_noprof+0x72/0x190 [ 145.370826][ T8223] __kvmalloc_node_noprof+0x72/0x190 [ 145.370856][ T8223] alloc_netdev_mqs+0xac6/0x1210 [ 145.370885][ T8223] rtnl_create_link+0x2f9/0xc90 [ 145.370918][ T8223] rtnl_newlink_create+0x2e1/0xbd0 [ 145.370948][ T8223] ? __mutex_lock+0x602/0x1010 [ 145.370972][ T8223] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 145.370999][ T8223] ? __pfx___mutex_lock+0x10/0x10 [ 145.371028][ T8223] ? ns_capable+0x8a/0xf0 [ 145.371052][ T8223] rtnl_newlink+0x167a/0x1d90 [ 145.371075][ T8223] ? stack_depot_save_flags+0x37/0x940 [ 145.371112][ T8223] ? __pfx_rtnl_newlink+0x10/0x10 [ 145.371131][ T8223] ? __netlink_deliver_tap+0x561/0x7f0 [ 145.371153][ T8223] ? __pfx_validate_chain+0x10/0x10 [ 145.371169][ T8223] ? __sock_sendmsg+0x221/0x270 [ 145.371188][ T8223] ? ____sys_sendmsg+0x53a/0x860 [ 145.371203][ T8223] ? __sys_sendmmsg+0x36a/0x720 [ 145.371218][ T8223] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 145.371234][ T8223] ? do_syscall_64+0xf3/0x230 [ 145.371251][ T8223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.371293][ T8223] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 145.371318][ T8223] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.371349][ T8223] ? mark_lock+0x9a/0x360 [ 145.371369][ T8223] ? __lock_acquire+0x1397/0x2100 [ 145.371424][ T8223] ? __pfx_lock_release+0x10/0x10 [ 145.371462][ T8223] ? __pfx_rtnl_newlink+0x10/0x10 [ 145.371485][ T8223] rtnetlink_rcv_msg+0x791/0xcf0 [ 145.371504][ T8223] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 145.371531][ T8223] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.371560][ T8223] ? ref_tracker_free+0x643/0x7e0 [ 145.371583][ T8223] netlink_rcv_skb+0x206/0x480 [ 145.371605][ T8223] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.371628][ T8223] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.371673][ T8223] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.371696][ T8223] netlink_unicast+0x7f6/0x990 [ 145.371725][ T8223] ? __pfx_netlink_unicast+0x10/0x10 [ 145.371742][ T8223] ? __virt_addr_valid+0x45f/0x530 [ 145.371759][ T8223] ? __phys_addr_symbol+0x2f/0x70 [ 145.371774][ T8223] ? __check_object_size+0x47a/0x730 [ 145.371800][ T8223] netlink_sendmsg+0x8de/0xcb0 [ 145.371834][ T8223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.371860][ T8223] ? aa_sock_msg_perm+0x91/0x160 [ 145.371890][ T8223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.371915][ T8223] __sock_sendmsg+0x221/0x270 [ 145.371938][ T8223] ____sys_sendmsg+0x53a/0x860 [ 145.371964][ T8223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.371980][ T8223] ? __fget_files+0x2a/0x410 [ 145.372003][ T8223] ? __fget_files+0x2a/0x410 [ 145.372034][ T8223] __sys_sendmmsg+0x36a/0x720 [ 145.372064][ T8223] ? __pfx___sys_sendmmsg+0x10/0x10 [ 145.372095][ T8223] ? __pfx_lock_release+0x10/0x10 [ 145.372115][ T8223] ? kstrtouint_from_user+0x128/0x190 [ 145.372158][ T8223] ? ksys_write+0x22a/0x2b0 [ 145.372176][ T8223] ? __pfx_lock_release+0x10/0x10 [ 145.372204][ T8223] ? sb_end_write+0xe9/0x1c0 [ 145.372226][ T8223] ? vfs_write+0x7fa/0xd10 [ 145.372245][ T8223] ? __mutex_unlock_slowpath+0x227/0x800 [ 145.372295][ T8223] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 145.372320][ T8223] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.372343][ T8223] ? do_syscall_64+0x100/0x230 [ 145.372366][ T8223] __x64_sys_sendmmsg+0xa0/0xb0 [ 145.372386][ T8223] do_syscall_64+0xf3/0x230 [ 145.372404][ T8223] ? clear_bhb_loop+0x35/0x90 [ 145.372424][ T8223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.372443][ T8223] RIP: 0033:0x7f91ab58d169 [ 145.372456][ T8223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.372469][ T8223] RSP: 002b:00007f91ac442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 145.372487][ T8223] RAX: ffffffffffffffda RBX: 00007f91ab7a5fa0 RCX: 00007f91ab58d169 [ 145.372497][ T8223] RDX: 0492492492492627 RSI: 00004000000000c0 RDI: 0000000000000003 [ 145.372506][ T8223] RBP: 00007f91ac442090 R08: 0000000000000000 R09: 0000000000000000 [ 145.372515][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.372524][ T8223] R13: 0000000000000000 R14: 00007f91ab7a5fa0 R15: 00007ffd9ebf0668 [ 145.372548][ T8223] [ 146.439682][ T8236] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.820'. [ 146.562019][ T8240] tipc: Enabled bearer , priority 0 [ 146.623252][ T8240] tipc: Resetting bearer [ 146.726281][ T8239] tipc: Resetting bearer [ 146.843024][ T8249] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.826'. [ 147.745807][ T8262] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 149.087408][ T8239] tipc: Disabling bearer [ 149.110736][ T8262] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 149.397973][ T8276] tipc: Enabled bearer , priority 0 [ 149.475591][ T8288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.840'. [ 149.486367][ T8288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.840'. [ 149.488104][ T8276] syzkaller0: entered promiscuous mode [ 149.502031][ T8288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.840'. [ 149.516082][ T8276] syzkaller0: entered allmulticast mode [ 149.524802][ T8276] tipc: Resetting bearer [ 149.632492][ T8274] tipc: Resetting bearer [ 151.077429][ T8274] tipc: Disabling bearer [ 151.413581][ T8322] bond0: entered promiscuous mode [ 151.418862][ T8322] bond_slave_0: entered promiscuous mode [ 151.425141][ T8322] bond_slave_1: entered promiscuous mode [ 151.454127][ T8320] bond0: left promiscuous mode [ 151.466861][ T8320] bond_slave_0: left promiscuous mode [ 151.480850][ T8320] bond_slave_1: left promiscuous mode [ 151.616965][ T8333] netlink: 'syz.1.854': attribute type 12 has an invalid length. [ 151.630567][ T8333] netlink: 'syz.1.854': attribute type 29 has an invalid length. [ 151.652897][ T8333] __nla_validate_parse: 1 callbacks suppressed [ 151.652917][ T8333] netlink: 148 bytes leftover after parsing attributes in process `syz.1.854'. [ 151.700206][ T8333] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 151.707868][ T8333] netlink: 'syz.1.854': attribute type 2 has an invalid length. [ 151.730766][ T8333] netlink: 31 bytes leftover after parsing attributes in process `syz.1.854'. [ 151.795313][ T8336] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 151.888133][ T8327] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 152.204585][ T8346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.857'. [ 152.222150][ T8349] FAULT_INJECTION: forcing a failure. [ 152.222150][ T8349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.236282][ T8349] CPU: 1 UID: 0 PID: 8349 Comm: syz.3.859 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 152.236305][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.236316][ T8349] Call Trace: [ 152.236322][ T8349] [ 152.236330][ T8349] dump_stack_lvl+0x241/0x360 [ 152.236356][ T8349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.236374][ T8349] ? __pfx__printk+0x10/0x10 [ 152.236395][ T8349] ? __lock_acquire+0x1397/0x2100 [ 152.236420][ T8349] should_fail_ex+0x40a/0x550 [ 152.236447][ T8349] prepare_alloc_pages+0x1da/0x5b0 [ 152.236471][ T8349] __alloc_frozen_pages_noprof+0x16f/0x710 [ 152.236492][ T8349] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 152.236521][ T8349] ? __pfx_lock_acquire+0x10/0x10 [ 152.236545][ T8349] alloc_pages_mpol+0x311/0x660 [ 152.236564][ T8349] ? __lock_acquire+0x1397/0x2100 [ 152.236588][ T8349] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 152.236617][ T8349] vma_alloc_folio_noprof+0x12b/0x260 [ 152.236640][ T8349] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 152.236670][ T8349] folio_prealloc+0x2e/0x170 [ 152.236689][ T8349] __handle_mm_fault+0x3e4b/0x70f0 [ 152.236747][ T8349] ? __pfx___handle_mm_fault+0x10/0x10 [ 152.236769][ T8349] ? lock_vma_under_rcu+0x34b/0x790 [ 152.236806][ T8349] ? __pfx_reacquire_held_locks+0x10/0x10 [ 152.236840][ T8349] ? mtree_range_walk+0x6fd/0x8e0 [ 152.236858][ T8349] ? lock_vma_under_rcu+0x1dd/0x790 [ 152.236881][ T8349] ? __pfx_lock_release+0x10/0x10 [ 152.236901][ T8349] ? lock_vma_under_rcu+0x34b/0x790 [ 152.236944][ T8349] ? lock_vma_under_rcu+0x1dd/0x790 [ 152.236967][ T8349] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 152.236987][ T8349] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.237024][ T8349] handle_mm_fault+0x3e5/0x8d0 [ 152.237056][ T8349] exc_page_fault+0x459/0x8b0 [ 152.237081][ T8349] asm_exc_page_fault+0x26/0x30 [ 152.237101][ T8349] RIP: 0033:0x7f4b98e58b7b [ 152.237116][ T8349] Code: 00 00 00 48 8d 3d 9d 33 19 00 48 89 c1 31 c0 e8 4b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d d1 33 19 00 48 89 34 24 48 8b 14 24 48 8b [ 152.237130][ T8349] RSP: 002b:00007f4b99dfefb0 EFLAGS: 00010202 [ 152.237146][ T8349] RAX: 0000000000000000 RBX: 00007f4b991a5fa0 RCX: 0000000000000000 [ 152.237157][ T8349] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000400000000640 [ 152.237167][ T8349] RBP: 00007f4b99e00090 R08: 0000000000000000 R09: 0000000000000000 [ 152.237178][ T8349] R10: 0000400000000640 R11: 0000000000000000 R12: 0000000000000001 [ 152.237187][ T8349] R13: 0000000000000000 R14: 00007f4b991a5fa0 R15: 00007ffc687ce7b8 [ 152.237214][ T8349] [ 152.237454][ T8349] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 152.600128][ T8353] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.862'. [ 152.794855][ T8368] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 152.927115][ T8375] netlink: 148 bytes leftover after parsing attributes in process `syz.3.870'. [ 152.936361][ T8375] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 153.035190][ T8380] lo speed is unknown, defaulting to 1000 [ 153.621211][ T8393] Cannot find del_set index 1 as target [ 153.708564][ T8397] netlink: 132 bytes leftover after parsing attributes in process `syz.0.878'. [ 154.049324][ T8409] Bluetooth: MGMT ver 1.23 [ 154.084466][ T8405] lo speed is unknown, defaulting to 1000 [ 154.213127][ T8425] nbd: must specify a device to reconfigure [ 154.255433][ T8426] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 154.434462][ T8432] netlink: 'syz.3.891': attribute type 10 has an invalid length. [ 154.451114][ T8432] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 154.461040][ T8432] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 154.469361][ T8432] team0: Port device netdevsim0 added [ 154.578473][ T8436] lo speed is unknown, defaulting to 1000 [ 154.804127][ T5840] IPVS: starting estimator thread 0... [ 154.909633][ T8446] IPVS: using max 28 ests per chain, 67200 per kthread [ 155.032018][ T8453] FAULT_INJECTION: forcing a failure. [ 155.032018][ T8453] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.060203][ T8453] CPU: 0 UID: 0 PID: 8453 Comm: syz.0.899 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 155.060231][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.060241][ T8453] Call Trace: [ 155.060247][ T8453] [ 155.060254][ T8453] dump_stack_lvl+0x241/0x360 [ 155.060280][ T8453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.060298][ T8453] ? __pfx__printk+0x10/0x10 [ 155.060314][ T8453] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.060347][ T8453] should_fail_ex+0x40a/0x550 [ 155.060375][ T8453] prepare_alloc_pages+0x1da/0x5b0 [ 155.060402][ T8453] __alloc_frozen_pages_noprof+0x16f/0x710 [ 155.060424][ T8453] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 155.060463][ T8453] alloc_pages_mpol+0x311/0x660 [ 155.060489][ T8453] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 155.060523][ T8453] vma_alloc_folio_noprof+0x12b/0x260 [ 155.060547][ T8453] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 155.060571][ T8453] ? do_raw_spin_unlock+0x13c/0x8b0 [ 155.060594][ T8453] folio_prealloc+0x2e/0x170 [ 155.060613][ T8453] do_wp_page+0x1253/0x49b0 [ 155.060650][ T8453] ? __pfx_do_wp_page+0x10/0x10 [ 155.060679][ T8453] ? __pfx_lock_acquire+0x10/0x10 [ 155.060698][ T8453] ? rcu_is_watching+0x15/0xb0 [ 155.060720][ T8453] ? do_raw_spin_lock+0x14f/0x370 [ 155.060739][ T8453] ? __pfx____pte_offset_map+0x10/0x10 [ 155.060777][ T8453] __handle_mm_fault+0x24d5/0x70f0 [ 155.060829][ T8453] ? __pfx___handle_mm_fault+0x10/0x10 [ 155.060865][ T8453] ? mt_find+0x2a9/0x920 [ 155.060885][ T8453] ? __pfx_lock_release+0x10/0x10 [ 155.060919][ T8453] ? mt_find+0x2a9/0x920 [ 155.060938][ T8453] ? mt_find+0x6c8/0x920 [ 155.060965][ T8453] ? __pfx_mt_find+0x10/0x10 [ 155.061010][ T8453] ? find_vma+0xf9/0x170 [ 155.061024][ T8453] ? __pfx_find_vma+0x10/0x10 [ 155.061049][ T8453] handle_mm_fault+0x3e5/0x8d0 [ 155.061082][ T8453] exc_page_fault+0x2b9/0x8b0 [ 155.061106][ T8453] asm_exc_page_fault+0x26/0x30 [ 155.061126][ T8453] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 155.061149][ T8453] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 155.061162][ T8453] RSP: 0018:ffffc90003effb68 EFLAGS: 00050202 [ 155.061177][ T8453] RAX: ffffffff84f57701 RBX: 000040000002180c RCX: 000000000001580c [ 155.061190][ T8453] RDX: 0000000000000000 RSI: ffff888045a0a8cf RDI: 000040000000c000 [ 155.061201][ T8453] RBP: ffffc90003effd00 R08: 0000000000000002 R09: ffffed1008b4401b [ 155.061212][ T8453] R10: dffffc0000000000 R11: ffffed1008b4401b R12: 00000000000200cc [ 155.061223][ T8453] R13: 00007ffffffff000 R14: ffff888045a0000f R15: 0000400000001740 [ 155.061243][ T8453] ? __pfx__copy_to_user+0x1/0x10 [ 155.061270][ T8453] _copy_to_user+0x8b/0xb0 [ 155.061292][ T8453] generic_map_lookup_batch+0x98a/0xf20 [ 155.061312][ T8453] ? __pfx_lock_release+0x10/0x10 [ 155.061348][ T8453] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 155.061365][ T8453] ? __fget_files+0x395/0x410 [ 155.061386][ T8453] ? __fget_files+0x2a/0x410 [ 155.061412][ T8453] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 155.061433][ T8453] bpf_map_do_batch+0x288/0x660 [ 155.061460][ T8453] __sys_bpf+0x653/0x820 [ 155.061484][ T8453] ? __pfx___sys_bpf+0x10/0x10 [ 155.061515][ T8453] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.061537][ T8453] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.061558][ T8453] ? do_syscall_64+0x100/0x230 [ 155.061579][ T8453] __x64_sys_bpf+0x7c/0x90 [ 155.061598][ T8453] do_syscall_64+0xf3/0x230 [ 155.061614][ T8453] ? clear_bhb_loop+0x35/0x90 [ 155.061635][ T8453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.061651][ T8453] RIP: 0033:0x7f91ab58d169 [ 155.061664][ T8453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.061676][ T8453] RSP: 002b:00007f91ac442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.061690][ T8453] RAX: ffffffffffffffda RBX: 00007f91ab7a5fa0 RCX: 00007f91ab58d169 [ 155.061700][ T8453] RDX: 0000000000000038 RSI: 0000400000000700 RDI: 0000000000000018 [ 155.061710][ T8453] RBP: 00007f91ac442090 R08: 0000000000000000 R09: 0000000000000000 [ 155.061719][ T8453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.061727][ T8453] R13: 0000000000000000 R14: 00007f91ab7a5fa0 R15: 00007ffd9ebf0668 [ 155.061751][ T8453] [ 155.069393][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 155.204039][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 155.649876][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 155.901662][ T8488] FAULT_INJECTION: forcing a failure. [ 155.901662][ T8488] name failslab, interval 1, probability 0, space 0, times 0 [ 155.924196][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.4.911 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 155.924223][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.924234][ T8488] Call Trace: [ 155.924240][ T8488] [ 155.924247][ T8488] dump_stack_lvl+0x241/0x360 [ 155.924272][ T8488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.924289][ T8488] ? __pfx__printk+0x10/0x10 [ 155.924307][ T8488] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 155.924329][ T8488] ? __pfx___might_resched+0x10/0x10 [ 155.924354][ T8488] should_fail_ex+0x40a/0x550 [ 155.924381][ T8488] should_failslab+0xac/0x100 [ 155.924403][ T8488] __kmalloc_node_noprof+0xe1/0x4d0 [ 155.924422][ T8488] ? __kasan_kmalloc+0x98/0xb0 [ 155.924438][ T8488] ? __kvmalloc_node_noprof+0x72/0x190 [ 155.924467][ T8488] __kvmalloc_node_noprof+0x72/0x190 [ 155.924490][ T8488] page_pool_create_percpu+0x2f5/0xb70 [ 155.924515][ T8488] bpf_test_run_xdp_live+0x2e6/0x2220 [ 155.924536][ T8488] ? __pfx_lock_release+0x10/0x10 [ 155.924564][ T8488] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 155.924582][ T8488] ? __pfx___might_resched+0x10/0x10 [ 155.924606][ T8488] ? __mutex_unlock_slowpath+0x227/0x800 [ 155.924642][ T8488] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 155.924661][ T8488] ? synchronize_rcu+0x11b/0x360 [ 155.924679][ T8488] ? __pfx_synchronize_rcu+0x10/0x10 [ 155.924717][ T8488] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 155.924739][ T8488] ? 0xffffffffa00007dc [ 155.924752][ T8488] ? 0xffffffffa000080c [ 155.924764][ T8488] ? 0xffffffffa000089c [ 155.924775][ T8488] ? 0xffffffffa00008cc [ 155.924806][ T8488] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 155.924842][ T8488] ? _copy_from_user+0x95/0xb0 [ 155.924863][ T8488] ? bpf_test_init+0x137/0x160 [ 155.924881][ T8488] ? xdp_convert_md_to_buff+0x5b/0x330 [ 155.924904][ T8488] bpf_prog_test_run_xdp+0x805/0x11e0 [ 155.924930][ T8488] ? __pfx_lock_release+0x10/0x10 [ 155.924961][ T8488] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 155.924982][ T8488] ? __fget_files+0x2a/0x410 [ 155.925006][ T8488] ? __fget_files+0x2a/0x410 [ 155.925030][ T8488] ? fput+0x21b/0x290 [ 155.925049][ T8488] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 155.925072][ T8488] bpf_prog_test_run+0x2e4/0x360 [ 155.925098][ T8488] __sys_bpf+0x487/0x820 [ 155.925121][ T8488] ? __pfx___sys_bpf+0x10/0x10 [ 155.925154][ T8488] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.925178][ T8488] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.925202][ T8488] ? do_syscall_64+0x100/0x230 [ 155.925228][ T8488] __x64_sys_bpf+0x7c/0x90 [ 155.925248][ T8488] do_syscall_64+0xf3/0x230 [ 155.925266][ T8488] ? clear_bhb_loop+0x35/0x90 [ 155.925290][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.925310][ T8488] RIP: 0033:0x7fae7e38d169 [ 155.925325][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.925338][ T8488] RSP: 002b:00007fae7c1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.925355][ T8488] RAX: ffffffffffffffda RBX: 00007fae7e5a5fa0 RCX: 00007fae7e38d169 [ 155.925366][ T8488] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 155.925377][ T8488] RBP: 00007fae7c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.925386][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.925395][ T8488] R13: 0000000000000000 R14: 00007fae7e5a5fa0 R15: 00007ffcbb5354b8 [ 155.925420][ T8488] [ 155.925498][ T8488] page_pool_create_percpu() gave up with errno -12 [ 156.445138][ T8506] netlink: 84 bytes leftover after parsing attributes in process `syz.2.919'. [ 156.497045][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 156.521345][ T8505] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 156.576412][ T5850] block nbd0: Receive control failed (result -107) [ 156.682847][ T8517] bridge0: port 3(syz_tun) entered blocking state [ 156.692833][ T8517] bridge0: port 3(syz_tun) entered disabled state [ 156.714840][ T8517] syz_tun: entered promiscuous mode [ 156.861662][ T8523] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 156.910271][ T8526] raw_sendmsg: syz.4.926 forgot to set AF_INET. Fix it! [ 157.466040][ T8548] bridge0: port 2(syz_tun) entered blocking state [ 157.486145][ T8548] bridge0: port 2(syz_tun) entered disabled state [ 157.513373][ T8554] __nla_validate_parse: 2 callbacks suppressed [ 157.513392][ T8554] netlink: 148 bytes leftover after parsing attributes in process `syz.4.938'. [ 157.525688][ T8548] syz_tun: entered allmulticast mode [ 157.530925][ T8554] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 157.594019][ T8548] syz_tun: entered promiscuous mode [ 157.603878][ T8548] bridge0: port 2(syz_tun) entered blocking state [ 157.610466][ T8548] bridge0: port 2(syz_tun) entered forwarding state [ 157.940360][ T8561] lo speed is unknown, defaulting to 1000 [ 158.161393][ T8572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.943'. [ 158.357233][ T8583] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 158.603471][ T8588] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 158.743732][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 158.755897][ T8576] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 158.782247][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 158.956872][ T8595] netlink: 'syz.4.949': attribute type 11 has an invalid length. [ 159.338221][ T8622] netlink: 148 bytes leftover after parsing attributes in process `syz.3.959'. [ 159.388552][ T8622] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 159.446459][ T8624] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 159.608821][ T8622] lo speed is unknown, defaulting to 1000 [ 160.357452][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 160.648822][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 160.664479][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 160.899732][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 161.061714][ T8679] syz.4.974 uses old SIOCAX25GETINFO [ 161.229681][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.260819][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.755041][ T8683] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 161.828788][ T8707] netlink: 148 bytes leftover after parsing attributes in process `syz.1.986'. [ 161.865346][ T8707] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 161.957360][ T8707] netlink: 'syz.1.986': attribute type 3 has an invalid length. [ 162.062123][ T8714] FAULT_INJECTION: forcing a failure. [ 162.062123][ T8714] name failslab, interval 1, probability 0, space 0, times 0 [ 162.087723][ T8707] lo speed is unknown, defaulting to 1000 [ 162.129184][ T8714] CPU: 0 UID: 0 PID: 8714 Comm: syz.3.988 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 162.129209][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.129219][ T8714] Call Trace: [ 162.129224][ T8714] [ 162.129231][ T8714] dump_stack_lvl+0x241/0x360 [ 162.129257][ T8714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.129284][ T8714] ? __pfx__printk+0x10/0x10 [ 162.129305][ T8714] ? ref_tracker_alloc+0x332/0x490 [ 162.129330][ T8714] should_fail_ex+0x40a/0x550 [ 162.129354][ T8714] should_failslab+0xac/0x100 [ 162.129374][ T8714] ? skb_clone+0x20c/0x390 [ 162.129389][ T8714] kmem_cache_alloc_noprof+0x70/0x380 [ 162.129416][ T8714] skb_clone+0x20c/0x390 [ 162.129436][ T8714] __netlink_deliver_tap+0x3c4/0x7f0 [ 162.129467][ T8714] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.129485][ T8714] netlink_deliver_tap+0x19d/0x1b0 [ 162.129504][ T8714] netlink_sendskb+0x68/0x140 [ 162.129522][ T8714] netlink_unicast+0x39d/0x990 [ 162.129538][ T8714] ? __asan_memcpy+0x40/0x70 [ 162.129558][ T8714] ? __pfx_netlink_unicast+0x10/0x10 [ 162.129585][ T8714] netlink_rcv_skb+0x294/0x480 [ 162.129604][ T8714] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.129625][ T8714] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.129664][ T8714] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.129685][ T8714] netlink_unicast+0x7f6/0x990 [ 162.129710][ T8714] ? __pfx_netlink_unicast+0x10/0x10 [ 162.129725][ T8714] ? __virt_addr_valid+0x45f/0x530 [ 162.129741][ T8714] ? __phys_addr_symbol+0x2f/0x70 [ 162.129754][ T8714] ? __check_object_size+0x47a/0x730 [ 162.129777][ T8714] netlink_sendmsg+0x8de/0xcb0 [ 162.129808][ T8714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.129831][ T8714] ? aa_sock_msg_perm+0x91/0x160 [ 162.129858][ T8714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.129875][ T8714] __sock_sendmsg+0x221/0x270 [ 162.129897][ T8714] ____sys_sendmsg+0x53a/0x860 [ 162.129921][ T8714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.129936][ T8714] ? __fget_files+0x2a/0x410 [ 162.129959][ T8714] ? __fget_files+0x2a/0x410 [ 162.129987][ T8714] __sys_sendmsg+0x269/0x350 [ 162.130007][ T8714] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.130035][ T8714] ? do_sys_openat2+0x17a/0x1d0 [ 162.130077][ T8714] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.130101][ T8714] ? do_syscall_64+0x100/0x230 [ 162.130121][ T8714] ? do_syscall_64+0xb6/0x230 [ 162.130141][ T8714] do_syscall_64+0xf3/0x230 [ 162.130158][ T8714] ? clear_bhb_loop+0x35/0x90 [ 162.130181][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.130199][ T8714] RIP: 0033:0x7f4b98f8d169 [ 162.130214][ T8714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.130227][ T8714] RSP: 002b:00007f4b99e00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.130244][ T8714] RAX: ffffffffffffffda RBX: 00007f4b991a5fa0 RCX: 00007f4b98f8d169 [ 162.130255][ T8714] RDX: 0000000000008000 RSI: 0000400000000100 RDI: 0000000000000003 [ 162.130271][ T8714] RBP: 00007f4b99e00090 R08: 0000000000000000 R09: 0000000000000000 [ 162.130280][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.130290][ T8714] R13: 0000000000000000 R14: 00007f4b991a5fa0 R15: 00007ffc687ce7b8 [ 162.130315][ T8714] [ 162.861376][ T8730] bond2 (unregistering): Released all slaves [ 163.036981][ T8740] __nla_validate_parse: 1 callbacks suppressed [ 163.037001][ T8740] netlink: 148 bytes leftover after parsing attributes in process `syz.2.996'. [ 163.065172][ T8742] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 163.076942][ T8740] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 163.336502][ T8740] lo speed is unknown, defaulting to 1000 [ 163.753046][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 163.850718][ T8766] xt_socket: unknown flags 0x4 [ 164.253965][ T8793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1015'. [ 164.323837][ T8791] netlink: 'syz.1.1014': attribute type 10 has an invalid length. [ 164.343860][ T8791] batman_adv: batadv0: Adding interface: team0 [ 164.368053][ T8791] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.400897][ T8796] netlink: 'syz.1.1014': attribute type 10 has an invalid length. [ 164.408773][ T8796] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1014'. [ 164.429511][ T8791] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 164.531021][ T8796] team0: entered promiscuous mode [ 164.560363][ T8796] team_slave_0: entered promiscuous mode [ 164.566203][ T8796] team_slave_1: entered promiscuous mode [ 164.631133][ T8796] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.638111][ T8796] batman_adv: batadv0: Interface activated: team0 [ 164.718343][ T8796] batman_adv: batadv0: Interface deactivated: team0 [ 164.777465][ T8796] batman_adv: batadv0: Removing interface: team0 [ 164.787583][ T8810] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1014'. [ 164.827931][ T8796] bridge0: port 2(team0) entered blocking state [ 164.860295][ T8796] bridge0: port 2(team0) entered disabled state [ 164.891639][ T8796] team0: entered allmulticast mode [ 164.904980][ T8796] team_slave_0: entered allmulticast mode [ 164.914462][ T8796] team_slave_1: entered allmulticast mode [ 164.930544][ T8801] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 165.734537][ T8850] FAULT_INJECTION: forcing a failure. [ 165.734537][ T8850] name failslab, interval 1, probability 0, space 0, times 0 [ 165.793772][ T8850] CPU: 0 UID: 0 PID: 8850 Comm: syz.3.1038 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 165.793801][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.793812][ T8850] Call Trace: [ 165.793818][ T8850] [ 165.793826][ T8850] dump_stack_lvl+0x241/0x360 [ 165.793853][ T8850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.793871][ T8850] ? __pfx__printk+0x10/0x10 [ 165.793891][ T8850] ? __kmalloc_cache_noprof+0x48/0x390 [ 165.793914][ T8850] ? __pfx___might_resched+0x10/0x10 [ 165.793945][ T8850] should_fail_ex+0x40a/0x550 [ 165.793973][ T8850] should_failslab+0xac/0x100 [ 165.793996][ T8850] __kmalloc_cache_noprof+0x70/0x390 [ 165.794015][ T8850] ? genl_start+0x1cb/0x6d0 [ 165.794037][ T8850] genl_start+0x1cb/0x6d0 [ 165.794063][ T8850] __netlink_dump_start+0x45c/0x790 [ 165.794093][ T8850] genl_rcv_msg+0x894/0xec0 [ 165.794118][ T8850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.794142][ T8850] ? __pfx_genl_start+0x10/0x10 [ 165.794156][ T8850] ? __pfx_genl_dumpit+0x10/0x10 [ 165.794170][ T8850] ? __pfx_genl_done+0x10/0x10 [ 165.794203][ T8850] ? __pfx_lock_acquire+0x10/0x10 [ 165.794225][ T8850] ? __pfx_tipc_nl_media_dump+0x10/0x10 [ 165.794245][ T8850] ? __pfx___might_resched+0x10/0x10 [ 165.794273][ T8850] netlink_rcv_skb+0x206/0x480 [ 165.794295][ T8850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.794313][ T8850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.794348][ T8850] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 165.794385][ T8850] genl_rcv+0x28/0x40 [ 165.794400][ T8850] netlink_unicast+0x7f6/0x990 [ 165.794430][ T8850] ? __pfx_netlink_unicast+0x10/0x10 [ 165.794446][ T8850] ? __virt_addr_valid+0x45f/0x530 [ 165.794464][ T8850] ? __phys_addr_symbol+0x2f/0x70 [ 165.794478][ T8850] ? __check_object_size+0x47a/0x730 [ 165.794504][ T8850] netlink_sendmsg+0x8de/0xcb0 [ 165.794538][ T8850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.794564][ T8850] ? aa_sock_msg_perm+0x91/0x160 [ 165.794593][ T8850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.794613][ T8850] __sock_sendmsg+0x221/0x270 [ 165.794637][ T8850] ____sys_sendmsg+0x53a/0x860 [ 165.794664][ T8850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.794679][ T8850] ? __fget_files+0x2a/0x410 [ 165.794702][ T8850] ? __fget_files+0x2a/0x410 [ 165.794732][ T8850] __sys_sendmsg+0x269/0x350 [ 165.794755][ T8850] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.794787][ T8850] ? do_sys_openat2+0x17a/0x1d0 [ 165.794837][ T8850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.794862][ T8850] ? do_syscall_64+0x100/0x230 [ 165.794884][ T8850] ? do_syscall_64+0xb6/0x230 [ 165.794906][ T8850] do_syscall_64+0xf3/0x230 [ 165.794924][ T8850] ? clear_bhb_loop+0x35/0x90 [ 165.794955][ T8850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.794976][ T8850] RIP: 0033:0x7f4b98f8d169 [ 165.794991][ T8850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.795005][ T8850] RSP: 002b:00007f4b99e00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.795024][ T8850] RAX: ffffffffffffffda RBX: 00007f4b991a5fa0 RCX: 00007f4b98f8d169 [ 165.795036][ T8850] RDX: 0000000000000080 RSI: 0000400000000740 RDI: 0000000000000003 [ 165.795047][ T8850] RBP: 00007f4b99e00090 R08: 0000000000000000 R09: 0000000000000000 [ 165.795057][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.795068][ T8850] R13: 0000000000000000 R14: 00007f4b991a5fa0 R15: 00007ffc687ce7b8 [ 165.795097][ T8850] [ 166.552800][ T8861] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 166.604050][ T8855] dvmrp5: entered allmulticast mode [ 166.623332][ T8855] dvmrp5: left allmulticast mode [ 166.782069][ T8867] lo speed is unknown, defaulting to 1000 [ 167.485482][ T8867] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1045'. [ 167.502661][ T8894] netlink: 'syz.2.1054': attribute type 1 has an invalid length. [ 167.519648][ T8894] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1054'. [ 167.531621][ T8867] netlink: 'syz.4.1045': attribute type 10 has an invalid length. [ 167.555388][ T8867] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1045'. [ 167.615430][ T8867] geneve0: entered promiscuous mode [ 167.629881][ T8867] geneve0: entered allmulticast mode [ 167.985803][ T8908] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1060'. [ 168.221188][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 168.259955][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 168.269512][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 168.299389][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 168.308330][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 168.328848][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 168.369449][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 168.405118][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 168.425592][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 168.475900][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 168.535516][ T8914] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 168.589748][ T8925] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 169.013704][ T8942] FAULT_INJECTION: forcing a failure. [ 169.013704][ T8942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.048549][ T8942] CPU: 1 UID: 0 PID: 8942 Comm: syz.3.1071 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 169.048575][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.048595][ T8942] Call Trace: [ 169.048600][ T8942] [ 169.048607][ T8942] dump_stack_lvl+0x241/0x360 [ 169.048634][ T8942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.048652][ T8942] ? __pfx__printk+0x10/0x10 [ 169.048670][ T8942] ? __pfx_lock_release+0x10/0x10 [ 169.048701][ T8942] should_fail_ex+0x40a/0x550 [ 169.048728][ T8942] _copy_from_user+0x2d/0xb0 [ 169.048748][ T8942] copy_msghdr_from_user+0xae/0x680 [ 169.048775][ T8942] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 169.048793][ T8942] ? __fget_files+0x2a/0x410 [ 169.048817][ T8942] ? __fget_files+0x2a/0x410 [ 169.048846][ T8942] __sys_sendmsg+0x209/0x350 [ 169.048870][ T8942] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.048900][ T8942] ? do_sys_openat2+0x17a/0x1d0 [ 169.048942][ T8942] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.048965][ T8942] ? do_syscall_64+0x100/0x230 [ 169.048986][ T8942] ? do_syscall_64+0xb6/0x230 [ 169.049003][ T8942] do_syscall_64+0xf3/0x230 [ 169.049020][ T8942] ? clear_bhb_loop+0x35/0x90 [ 169.049043][ T8942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.049062][ T8942] RIP: 0033:0x7f4b98f8d169 [ 169.049077][ T8942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.049089][ T8942] RSP: 002b:00007f4b99e00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.049107][ T8942] RAX: ffffffffffffffda RBX: 00007f4b991a5fa0 RCX: 00007f4b98f8d169 [ 169.049117][ T8942] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 169.049127][ T8942] RBP: 00007f4b99e00090 R08: 0000000000000000 R09: 0000000000000000 [ 169.049136][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.049146][ T8942] R13: 0000000000000000 R14: 00007f4b991a5fa0 R15: 00007ffc687ce7b8 [ 169.049169][ T8942] [ 169.951188][ T8980] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 170.098002][ T8981] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 170.174687][ T8984] lo speed is unknown, defaulting to 1000 [ 170.800017][ T8999] bridge0: port 3(veth0_to_bridge) entered blocking state [ 170.807261][ T8999] bridge0: port 3(veth0_to_bridge) entered disabled state [ 170.840782][ T8999] veth0_to_bridge: entered allmulticast mode [ 170.860866][ T8999] veth0_to_bridge: entered promiscuous mode [ 170.943089][ T9004] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 171.023222][ T9007] FAULT_INJECTION: forcing a failure. [ 171.023222][ T9007] name failslab, interval 1, probability 0, space 0, times 0 [ 171.036161][ T9007] CPU: 1 UID: 0 PID: 9007 Comm: syz.4.1089 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 171.036185][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.036195][ T9007] Call Trace: [ 171.036201][ T9007] [ 171.036208][ T9007] dump_stack_lvl+0x241/0x360 [ 171.036233][ T9007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.036252][ T9007] ? __pfx__printk+0x10/0x10 [ 171.036272][ T9007] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 171.036296][ T9007] ? __pfx___might_resched+0x10/0x10 [ 171.036315][ T9007] ? lockdep_init_map_type+0xa1/0x910 [ 171.036341][ T9007] should_fail_ex+0x40a/0x550 [ 171.036377][ T9007] should_failslab+0xac/0x100 [ 171.036398][ T9007] ? __alloc_workqueue+0x6ad/0x1bb0 [ 171.036412][ T9007] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 171.036441][ T9007] __alloc_workqueue+0x6ad/0x1bb0 [ 171.036474][ T9007] alloc_workqueue+0xd6/0x210 [ 171.036496][ T9007] ? __pfx_alloc_workqueue+0x10/0x10 [ 171.036520][ T9007] ? net_generic+0x1f/0x240 [ 171.036543][ T9007] bond_init+0xd5/0x8e0 [ 171.036566][ T9007] ? __pfx_bond_init+0x10/0x10 [ 171.036584][ T9007] ? __kasan_kmalloc+0x98/0xb0 [ 171.036604][ T9007] ? __kmalloc_cache_noprof+0x243/0x390 [ 171.036631][ T9007] register_netdevice+0x6d7/0x1b70 [ 171.036656][ T9007] ? __pfx_bond_changelink+0x10/0x10 [ 171.036675][ T9007] ? validate_linkmsg+0x828/0xa40 [ 171.036700][ T9007] ? __pfx_register_netdevice+0x10/0x10 [ 171.036719][ T9007] ? alloc_netdev_mqs+0xe01/0x1210 [ 171.036745][ T9007] ? rtnl_create_link+0x95b/0xc90 [ 171.036768][ T9007] bond_newlink+0x5e/0xb0 [ 171.036785][ T9007] ? __pfx_bond_newlink+0x10/0x10 [ 171.036804][ T9007] rtnl_newlink_create+0x37b/0xbd0 [ 171.036833][ T9007] ? __mutex_lock+0x602/0x1010 [ 171.036856][ T9007] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 171.036883][ T9007] ? __pfx___mutex_lock+0x10/0x10 [ 171.036911][ T9007] ? ns_capable+0x8a/0xf0 [ 171.036934][ T9007] rtnl_newlink+0x167a/0x1d90 [ 171.036958][ T9007] ? __lock_acquire+0x1397/0x2100 [ 171.036993][ T9007] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.037014][ T9007] ? __pfx_validate_chain+0x10/0x10 [ 171.037052][ T9007] ? validate_chain+0x11e/0x5920 [ 171.037069][ T9007] ? __pfx_lock_acquire+0x10/0x10 [ 171.037094][ T9007] ? __pfx_lock_release+0x10/0x10 [ 171.037119][ T9007] ? __pfx_validate_chain+0x10/0x10 [ 171.037138][ T9007] ? mark_lock+0x9a/0x360 [ 171.037159][ T9007] ? __lock_acquire+0x1397/0x2100 [ 171.037213][ T9007] ? __pfx_lock_release+0x10/0x10 [ 171.037249][ T9007] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.037272][ T9007] rtnetlink_rcv_msg+0x791/0xcf0 [ 171.037291][ T9007] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 171.037313][ T9007] ? __lock_acquire+0x1397/0x2100 [ 171.037336][ T9007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.037380][ T9007] netlink_rcv_skb+0x206/0x480 [ 171.037402][ T9007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.037425][ T9007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.037470][ T9007] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.037493][ T9007] netlink_unicast+0x7f6/0x990 [ 171.037520][ T9007] ? __pfx_netlink_unicast+0x10/0x10 [ 171.037537][ T9007] ? __virt_addr_valid+0x45f/0x530 [ 171.037554][ T9007] ? __phys_addr_symbol+0x2f/0x70 [ 171.037569][ T9007] ? __check_object_size+0x47a/0x730 [ 171.037594][ T9007] netlink_sendmsg+0x8de/0xcb0 [ 171.037628][ T9007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.037654][ T9007] ? aa_sock_msg_perm+0x91/0x160 [ 171.037682][ T9007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.037702][ T9007] __sock_sendmsg+0x221/0x270 [ 171.037726][ T9007] ____sys_sendmsg+0x53a/0x860 [ 171.037752][ T9007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.037768][ T9007] ? __fget_files+0x2a/0x410 [ 171.037798][ T9007] ? __fget_files+0x2a/0x410 [ 171.037828][ T9007] __sys_sendmsg+0x269/0x350 [ 171.037850][ T9007] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.037882][ T9007] ? do_sys_openat2+0x17a/0x1d0 [ 171.037932][ T9007] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.037955][ T9007] ? do_syscall_64+0x100/0x230 [ 171.037978][ T9007] ? do_syscall_64+0xb6/0x230 [ 171.038000][ T9007] do_syscall_64+0xf3/0x230 [ 171.038018][ T9007] ? clear_bhb_loop+0x35/0x90 [ 171.038042][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.038062][ T9007] RIP: 0033:0x7fae7e38d169 [ 171.038077][ T9007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.038091][ T9007] RSP: 002b:00007fae7c1d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.038109][ T9007] RAX: ffffffffffffffda RBX: 00007fae7e5a6080 RCX: 00007fae7e38d169 [ 171.038120][ T9007] RDX: 0000000000004000 RSI: 0000400000000280 RDI: 0000000000000004 [ 171.038131][ T9007] RBP: 00007fae7c1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 171.038141][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.038150][ T9007] R13: 0000000000000001 R14: 00007fae7e5a6080 R15: 00007ffcbb5354b8 [ 171.038178][ T9007] [ 171.638906][ T9016] lo speed is unknown, defaulting to 1000 [ 171.733971][ T9020] lo speed is unknown, defaulting to 1000 [ 172.243448][ T9029] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 172.269408][ T9024] lo speed is unknown, defaulting to 1000 [ 172.780105][ T9061] FAULT_INJECTION: forcing a failure. [ 172.780105][ T9061] name failslab, interval 1, probability 0, space 0, times 0 [ 172.837401][ T9051] lo speed is unknown, defaulting to 1000 [ 172.857075][ T9061] CPU: 1 UID: 0 PID: 9061 Comm: syz.1.1104 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 172.857105][ T9061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.857115][ T9061] Call Trace: [ 172.857121][ T9061] [ 172.857129][ T9061] dump_stack_lvl+0x241/0x360 [ 172.857162][ T9061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.857179][ T9061] ? __pfx__printk+0x10/0x10 [ 172.857198][ T9061] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 172.857228][ T9061] ? __pfx___might_resched+0x10/0x10 [ 172.857251][ T9061] should_fail_ex+0x40a/0x550 [ 172.857274][ T9061] should_failslab+0xac/0x100 [ 172.857297][ T9061] ? sock_alloc_inode+0x28/0xc0 [ 172.857316][ T9061] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 172.857342][ T9061] sock_alloc_inode+0x28/0xc0 [ 172.857359][ T9061] ? __pfx_sock_alloc_inode+0x10/0x10 [ 172.857377][ T9061] alloc_inode+0x65/0x1a0 [ 172.857399][ T9061] __sock_create+0x127/0xa30 [ 172.857428][ T9061] __sys_socket+0x150/0x3c0 [ 172.857451][ T9061] ? __pfx___sys_socket+0x10/0x10 [ 172.857470][ T9061] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.857492][ T9061] ? exc_page_fault+0x590/0x8b0 [ 172.857514][ T9061] __x64_sys_socket+0x7a/0x90 [ 172.857536][ T9061] do_syscall_64+0xf3/0x230 [ 172.857555][ T9061] ? clear_bhb_loop+0x35/0x90 [ 172.857577][ T9061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.857597][ T9061] RIP: 0033:0x7f12ad58f087 [ 172.857612][ T9061] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.857626][ T9061] RSP: 002b:00007f12ae3eefa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 172.857645][ T9061] RAX: ffffffffffffffda RBX: 00007f12ad7a5fa0 RCX: 00007f12ad58f087 [ 172.857656][ T9061] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 172.857667][ T9061] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 172.857676][ T9061] R10: 0000400000000640 R11: 0000000000000286 R12: 0000000000000001 [ 172.857686][ T9061] R13: 0000000000000000 R14: 00007f12ad7a5fa0 R15: 00007ffd76bb8d28 [ 172.857712][ T9061] [ 172.919699][ T9061] socket: no more sockets [ 173.850916][ T9083] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 173.852855][ T9094] __nla_validate_parse: 6 callbacks suppressed [ 173.852873][ T9094] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1114'. [ 173.907492][ T9092] lo speed is unknown, defaulting to 1000 [ 173.916532][ T9090] lo speed is unknown, defaulting to 1000 [ 173.933630][ T9095] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1116'. [ 174.025490][ T9095] batadv1: entered promiscuous mode [ 174.034828][ T9095] batadv1: entered allmulticast mode [ 174.046151][ T9101] netlink: 'syz.4.1114': attribute type 39 has an invalid length. [ 174.055257][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 174.064771][ T9094] 0ªX¹¦Dö»: renamed from gretap0 [ 174.162588][ T9094] 0ªX¹¦Dö»: entered allmulticast mode [ 174.258600][ T9101] syz_tun (unregistering): left allmulticast mode [ 174.281910][ T9101] syz_tun (unregistering): left promiscuous mode [ 174.288526][ T9101] bridge0: port 3(syz_tun) entered disabled state [ 174.531648][ T9114] openvswitch: netlink: Actions may not be safe on all matching packets [ 175.005483][ T9131] FAULT_INJECTION: forcing a failure. [ 175.005483][ T9131] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.070996][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.2.1127 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 175.071022][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.071032][ T9131] Call Trace: [ 175.071038][ T9131] [ 175.071045][ T9131] dump_stack_lvl+0x241/0x360 [ 175.071071][ T9131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.071088][ T9131] ? __pfx__printk+0x10/0x10 [ 175.071105][ T9131] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.071137][ T9131] should_fail_ex+0x40a/0x550 [ 175.071165][ T9131] prepare_alloc_pages+0x1da/0x5b0 [ 175.071191][ T9131] __alloc_frozen_pages_noprof+0x16f/0x710 [ 175.071213][ T9131] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 175.071252][ T9131] alloc_pages_mpol+0x311/0x660 [ 175.071278][ T9131] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 175.071309][ T9131] vma_alloc_folio_noprof+0x12b/0x260 [ 175.071332][ T9131] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 175.071356][ T9131] ? do_raw_spin_unlock+0x13c/0x8b0 [ 175.071380][ T9131] folio_prealloc+0x2e/0x170 [ 175.071398][ T9131] do_wp_page+0x1253/0x49b0 [ 175.071433][ T9131] ? __pfx_do_wp_page+0x10/0x10 [ 175.071462][ T9131] ? __pfx_lock_acquire+0x10/0x10 [ 175.071481][ T9131] ? rcu_is_watching+0x15/0xb0 [ 175.071502][ T9131] ? do_raw_spin_lock+0x14f/0x370 [ 175.071521][ T9131] ? __pfx____pte_offset_map+0x10/0x10 [ 175.071560][ T9131] __handle_mm_fault+0x24d5/0x70f0 [ 175.071611][ T9131] ? __pfx___handle_mm_fault+0x10/0x10 [ 175.071647][ T9131] ? mt_find+0x2a9/0x920 [ 175.071666][ T9131] ? __pfx_lock_release+0x10/0x10 [ 175.071700][ T9131] ? mt_find+0x2a9/0x920 [ 175.071719][ T9131] ? mt_find+0x6c8/0x920 [ 175.071746][ T9131] ? __pfx_mt_find+0x10/0x10 [ 175.071784][ T9131] ? find_vma+0xf9/0x170 [ 175.071798][ T9131] ? __pfx_find_vma+0x10/0x10 [ 175.071832][ T9131] handle_mm_fault+0x3e5/0x8d0 [ 175.071865][ T9131] exc_page_fault+0x2b9/0x8b0 [ 175.071889][ T9131] asm_exc_page_fault+0x26/0x30 [ 175.071909][ T9131] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 175.071931][ T9131] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 175.071946][ T9131] RSP: 0018:ffffc90003e6fb68 EFLAGS: 00050202 [ 175.071961][ T9131] RAX: ffffffff84f57701 RBX: 000040000002180c RCX: 000000000001480c [ 175.071973][ T9131] RDX: 0000000000000000 RSI: ffff8880425cb8cf RDI: 000040000000d000 [ 175.071984][ T9131] RBP: ffffc90003e6fd00 R08: 0000000000000002 R09: ffffed10084bc01b [ 175.071995][ T9131] R10: dffffc0000000000 R11: ffffed10084bc01b R12: 00000000000200cc [ 175.072007][ T9131] R13: 00007ffffffff000 R14: ffff8880425c000f R15: 0000400000001740 [ 175.072031][ T9131] ? __pfx__copy_to_user+0x1/0x10 [ 175.072058][ T9131] _copy_to_user+0x8b/0xb0 [ 175.072079][ T9131] generic_map_lookup_batch+0x98a/0xf20 [ 175.072117][ T9131] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 175.072143][ T9131] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 175.072163][ T9131] bpf_map_do_batch+0x288/0x660 [ 175.072190][ T9131] __sys_bpf+0x653/0x820 [ 175.072213][ T9131] ? __pfx___sys_bpf+0x10/0x10 [ 175.072247][ T9131] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.072271][ T9131] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.072295][ T9131] ? do_syscall_64+0x100/0x230 [ 175.072318][ T9131] __x64_sys_bpf+0x7c/0x90 [ 175.072338][ T9131] do_syscall_64+0xf3/0x230 [ 175.072356][ T9131] ? clear_bhb_loop+0x35/0x90 [ 175.072379][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.072398][ T9131] RIP: 0033:0x7f72b718d169 [ 175.072412][ T9131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.072426][ T9131] RSP: 002b:00007f72b7fbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.072441][ T9131] RAX: ffffffffffffffda RBX: 00007f72b73a5fa0 RCX: 00007f72b718d169 [ 175.072453][ T9131] RDX: 0000000000000038 RSI: 0000400000000700 RDI: 0000000000000018 [ 175.072464][ T9131] RBP: 00007f72b7fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 175.072474][ T9131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.072483][ T9131] R13: 0000000000000000 R14: 00007f72b73a5fa0 R15: 00007ffd456ab6a8 [ 175.072510][ T9131] [ 175.643498][ T9136] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 176.531963][ T9189] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 176.630663][ T9196] batman_adv: batadv0: Removing interface: team0 [ 176.642240][ T9196] bridge_slave_0: left allmulticast mode [ 176.648084][ T9196] bridge_slave_0: left promiscuous mode [ 176.654123][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.663261][ T9196] bridge_slave_1: left allmulticast mode [ 176.669951][ T9196] bridge_slave_1: left promiscuous mode [ 176.676078][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.710008][ T9196] bond0: (slave bond_slave_0): Releasing backup interface [ 176.722747][ T9196] bond0: (slave bond_slave_1): Releasing backup interface [ 176.738468][ T9196] team0: Port device team_slave_0 removed [ 176.747561][ T9196] team0: Port device team_slave_1 removed [ 176.754213][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.766807][ T9199] team0: Mode changed to "loadbalance" [ 176.904470][ T9201] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1154'. [ 176.915466][ T9201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1154'. [ 177.017711][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 177.213945][ T9223] netlink: 'syz.3.1162': attribute type 7 has an invalid length. [ 177.558623][ T9241] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 177.582919][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 177.606753][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 177.618490][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 177.633670][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 177.653939][ T9247] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 177.945883][ T9257] lo speed is unknown, defaulting to 1000 [ 178.262525][ T9277] Cannot find del_set index 286 as target [ 178.406987][ T9285] dvmrp1: entered allmulticast mode [ 178.882935][ T9311] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 179.187144][ T9328] __nla_validate_parse: 14 callbacks suppressed [ 179.187186][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1196'. [ 179.205438][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 181.493539][ T9378] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1211'. [ 181.665359][ T9394] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 181.980026][ T9408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1221'. [ 182.012286][ T9412] vlan2: entered promiscuous mode [ 182.378040][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 182.418944][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 182.438412][ T9429] netlink: 'syz.0.1229': attribute type 1 has an invalid length. [ 182.459605][ T9429] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1229'. [ 182.485248][ T9437] warning: `syz.4.1231' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 182.498917][ T5843] block nbd1: Receive control failed (result -107) [ 182.730044][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 183.013584][ T9463] syzkaller0: entered promiscuous mode [ 183.024720][ T9463] syzkaller0: entered allmulticast mode [ 183.153152][ T9474] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 183.251079][ T9477] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.640861][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 184.796542][ T9474] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 184.955100][ T9500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1248'. [ 184.986365][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 185.032963][ T9500] netlink: 6500 bytes leftover after parsing attributes in process `syz.0.1248'. [ 185.042630][ T9500] netlink: 2300 bytes leftover after parsing attributes in process `syz.0.1248'. [ 185.060564][ T9500] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1248'. [ 185.078594][ T9500] netlink: 16136 bytes leftover after parsing attributes in process `syz.0.1248'. [ 185.090007][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 185.100241][ T9506] trusted_key: syz.2.1251 sent an empty control message without MSG_MORE. [ 185.163528][ T9519] netlink: 'syz.3.1254': attribute type 1 has an invalid length. [ 185.224531][ T9519] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.291936][ T9521] bond4: (slave veth7): Enslaving as an active interface with a down link [ 185.380019][ T9525] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 185.530434][ T9533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1259'. [ 185.728476][ T9545] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 185.773338][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 185.985910][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'. [ 186.022249][ T9558] netlink: 'syz.3.1269': attribute type 10 has an invalid length. [ 186.030584][ T9558] tipc: Resetting bearer [ 186.044785][ T9558] bridge0: port 1(team0) entered disabled state [ 186.052719][ T9558] team0: left allmulticast mode [ 186.057812][ T9558] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 [ 186.058192][ T9561] netlink: 'syz.1.1270': attribute type 10 has an invalid length. [ 186.067627][ T9558] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 9558, name: syz.3.1269 [ 186.096100][ T9562] netlink: 'syz.3.1269': attribute type 10 has an invalid length. [ 186.104459][ T9558] preempt_count: 0, expected: 0 [ 186.109844][ T9558] RCU nest depth: 1, expected: 0 [ 186.114942][ T9558] 2 locks held by syz.3.1269/9558: [ 186.120460][ T9558] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 186.122971][ T9567] FAULT_INJECTION: forcing a failure. [ 186.122971][ T9567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.129885][ T9558] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 186.129977][ T9558] CPU: 1 UID: 0 PID: 9558 Comm: syz.3.1269 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 186.129999][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.130009][ T9558] Call Trace: [ 186.130016][ T9558] [ 186.130023][ T9558] dump_stack_lvl+0x241/0x360 [ 186.130047][ T9558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.130065][ T9558] ? __pfx__printk+0x10/0x10 [ 186.130092][ T9558] __might_resched+0x5d4/0x780 [ 186.130110][ T9558] ? __wake_up_klogd+0xd5/0x110 [ 186.130132][ T9558] ? __wake_up_klogd+0x1c/0x110 [ 186.130151][ T9558] ? __pfx___might_resched+0x10/0x10 [ 186.130172][ T9558] ? do_setlink+0xfee/0x40f0 [ 186.130201][ T9558] ? __lock_acquire+0x1397/0x2100 [ 186.130230][ T9558] __mutex_lock+0x126/0x1010 [ 186.130261][ T9558] ? dev_set_allmulti+0x11c/0x270 [ 186.130286][ T9558] ? __pfx___mutex_lock+0x10/0x10 [ 186.130305][ T9558] ? __pfx_lock_acquire+0x10/0x10 [ 186.130337][ T9558] ? netdev_info+0x122/0x170 [ 186.130356][ T9558] ? netif_set_allmulti+0x1a2/0x380 [ 186.130389][ T9558] dev_set_allmulti+0x11c/0x270 [ 186.130418][ T9558] team_change_rx_flags+0x1a8/0x330 [ 186.130437][ T9558] ? team_change_rx_flags+0x29/0x330 [ 186.130459][ T9558] ? __pfx_team_change_rx_flags+0x10/0x10 [ 186.130477][ T9558] netif_set_allmulti+0x20e/0x380 [ 186.130507][ T9558] dev_set_allmulti+0x143/0x270 [ 186.130535][ T9558] del_nbp+0xce/0xb40 [ 186.130559][ T9558] br_del_if+0x145/0x320 [ 186.130573][ T9558] ? br_del_slave+0x12/0x30 [ 186.130595][ T9558] do_set_master+0x349/0x730 [ 186.130626][ T9558] do_setlink+0xfee/0x40f0 [ 186.130670][ T9558] ? __pfx_do_setlink+0x10/0x10 [ 186.130707][ T9558] ? __pfx___might_resched+0x10/0x10 [ 186.130730][ T9558] ? __pfx___mutex_trylock_common+0x10/0x10 [ 186.130753][ T9558] ? rcu_is_watching+0x15/0xb0 [ 186.130772][ T9558] ? trace_contention_end+0x3c/0x120 [ 186.130790][ T9558] ? __mutex_lock+0x397/0x1010 [ 186.130811][ T9558] ? __pfx_aa_get_newest_label+0x10/0x10 [ 186.130840][ T9558] ? rtnl_newlink+0xc4c/0x1d90 [ 186.130862][ T9558] ? __pfx___mutex_lock+0x10/0x10 [ 186.130891][ T9558] ? ns_capable+0x8a/0xf0 [ 186.130911][ T9558] ? rtnl_link_get_net_capable+0x168/0x340 [ 186.130945][ T9558] rtnl_newlink+0x15a6/0x1d90 [ 186.130966][ T9558] ? stack_depot_save_flags+0x37/0x940 [ 186.131003][ T9558] ? __pfx_rtnl_newlink+0x10/0x10 [ 186.131023][ T9558] ? __netlink_deliver_tap+0x561/0x7f0 [ 186.131045][ T9558] ? __pfx_validate_chain+0x10/0x10 [ 186.131061][ T9558] ? __sock_sendmsg+0x221/0x270 [ 186.131079][ T9558] ? ____sys_sendmsg+0x53a/0x860 [ 186.131094][ T9558] ? __sys_sendmsg+0x269/0x350 [ 186.131108][ T9558] ? do_syscall_64+0xf3/0x230 [ 186.131126][ T9558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.131167][ T9558] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.131193][ T9558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.131224][ T9558] ? mark_lock+0x9a/0x360 [ 186.131244][ T9558] ? __lock_acquire+0x1397/0x2100 [ 186.131297][ T9558] ? __pfx_lock_release+0x10/0x10 [ 186.131334][ T9558] ? __pfx_rtnl_newlink+0x10/0x10 [ 186.131356][ T9558] rtnetlink_rcv_msg+0x791/0xcf0 [ 186.131376][ T9558] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 186.131402][ T9558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.131431][ T9558] ? ref_tracker_free+0x643/0x7e0 [ 186.131453][ T9558] netlink_rcv_skb+0x206/0x480 [ 186.131475][ T9558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.131498][ T9558] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.131542][ T9558] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.131565][ T9558] netlink_unicast+0x7f6/0x990 [ 186.131593][ T9558] ? __pfx_netlink_unicast+0x10/0x10 [ 186.131610][ T9558] ? __virt_addr_valid+0x45f/0x530 [ 186.131626][ T9558] ? __phys_addr_symbol+0x2f/0x70 [ 186.131641][ T9558] ? __check_object_size+0x47a/0x730 [ 186.131666][ T9558] netlink_sendmsg+0x8de/0xcb0 [ 186.131700][ T9558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.131726][ T9558] ? aa_sock_msg_perm+0x91/0x160 [ 186.131755][ T9558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.131776][ T9558] __sock_sendmsg+0x221/0x270 [ 186.131800][ T9558] ____sys_sendmsg+0x53a/0x860 [ 186.131827][ T9558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.131842][ T9558] ? __fget_files+0x2a/0x410 [ 186.131868][ T9558] ? __fget_files+0x2a/0x410 [ 186.131897][ T9558] __sys_sendmsg+0x269/0x350 [ 186.131924][ T9558] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.131984][ T9558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.132009][ T9558] ? do_syscall_64+0x100/0x230 [ 186.132030][ T9558] ? do_syscall_64+0xb6/0x230 [ 186.132053][ T9558] do_syscall_64+0xf3/0x230 [ 186.132073][ T9558] ? clear_bhb_loop+0x35/0x90 [ 186.132097][ T9558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.132119][ T9558] RIP: 0033:0x7f4b98f8d169 [ 186.132143][ T9558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.132158][ T9558] RSP: 002b:00007f4b99e00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.132175][ T9558] RAX: ffffffffffffffda RBX: 00007f4b991a5fa0 RCX: 00007f4b98f8d169 [ 186.132188][ T9558] RDX: 0000000004040850 RSI: 0000400000000000 RDI: 0000000000000009 [ 186.132199][ T9558] RBP: 00007f4b9900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 186.132210][ T9558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.132221][ T9558] R13: 0000000000000000 R14: 00007f4b991a5fa0 R15: 00007ffc687ce7b8 [ 186.132250][ T9558] [ 186.132520][ T9558] [ 186.144874][ T9567] CPU: 0 UID: 0 PID: 9567 Comm: syz.2.1272 Tainted: G W 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 186.144900][ T9567] Tainted: [W]=WARN [ 186.144906][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.144915][ T9567] Call Trace: [ 186.144921][ T9567] [ 186.144927][ T9567] dump_stack_lvl+0x241/0x360 [ 186.144950][ T9567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.144966][ T9567] ? __pfx__printk+0x10/0x10 [ 186.144982][ T9567] ? __pfx_lock_release+0x10/0x10 [ 186.145007][ T9567] should_fail_ex+0x40a/0x550 [ 186.145028][ T9567] _copy_from_user+0x2d/0xb0 [ 186.145048][ T9567] copy_msghdr_from_user+0xae/0x680 [ 186.145068][ T9567] ? __pfx___might_resched+0x10/0x10 [ 186.145088][ T9567] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 186.145108][ T9567] ? do_recvmmsg+0x44e/0xab0 [ 186.145124][ T9567] ? __might_fault+0xaa/0x120 [ 186.145141][ T9567] do_recvmmsg+0x3bd/0xab0 [ 186.145161][ T9567] ? __pfx_do_recvmmsg+0x10/0x10 [ 186.145186][ T9567] ? ksys_write+0x22a/0x2b0 [ 186.145201][ T9567] ? __pfx_lock_release+0x10/0x10 [ 186.145224][ T9567] ? sb_end_write+0xe9/0x1c0 [ 186.145242][ T9567] ? vfs_write+0x7fa/0xd10 [ 186.145258][ T9567] ? __mutex_unlock_slowpath+0x227/0x800 [ 186.145280][ T9567] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.145297][ T9567] ? __fget_files+0x2a/0x410 [ 186.145322][ T9567] __x64_sys_recvmmsg+0x199/0x250 [ 186.145340][ T9567] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 186.145356][ T9567] ? do_syscall_64+0x100/0x230 [ 186.145375][ T9567] ? do_syscall_64+0xb6/0x230 [ 186.145391][ T9567] do_syscall_64+0xf3/0x230 [ 186.145408][ T9567] ? clear_bhb_loop+0x35/0x90 [ 186.145429][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.145448][ T9567] RIP: 0033:0x7f72b718d169 [ 186.145461][ T9567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.145475][ T9567] RSP: 002b:00007f72b7fbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 186.145492][ T9567] RAX: ffffffffffffffda RBX: 00007f72b73a5fa0 RCX: 00007f72b718d169 [ 186.145503][ T9567] RDX: 03ffffffffffff67 RSI: 0000400000002440 RDI: 0000000000000004 [ 186.145514][ T9567] RBP: 00007f72b7fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 186.145524][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.145533][ T9567] R13: 0000000000000000 R14: 00007f72b73a5fa0 R15: 00007ffd456ab6a8 [ 186.145551][ T9567] [ 186.161257][ T9564] netlink: 'syz.1.1270': attribute type 10 has an invalid length. [ 186.163620][ T9558] ============================= [ 186.163629][ T9558] [ BUG: Invalid wait context ] [ 186.163638][ T9558] 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 Tainted: G W [ 186.163649][ T9558] ----------------------------- [ 186.389163][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 186.391746][ T9558] syz.3.1269/9558 is trying to lock: [ 186.391759][ T9558] ffff888034d64d28 ( [ 186.396731][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 186.401414][ T9558] &dev->lock){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 186.401456][ T9558] other info that might help us debug this: [ 186.401462][ T9558] context-{5:5} [ 186.401469][ T9558] 2 locks held by syz.3.1269/9558: [ 186.401478][ T9558] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 186.401527][ T9558] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 186.401575][ T9558] stack backtrace: [ 186.401586][ T9558] CPU: 1 UID: 0 PID: 9558 Comm: syz.3.1269 Tainted: G W 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 186.401608][ T9558] Tainted: [W]=WARN [ 186.401614][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.401624][ T9558] Call Trace: [ 186.401631][ T9558] [ 186.401645][ T9558] dump_stack_lvl+0x241/0x360 [ 186.401665][ T9558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.401682][ T9558] ? __pfx__printk+0x10/0x10 [ 186.401704][ T9558] __lock_acquire+0x15a8/0x2100 [ 186.401736][ T9558] lock_acquire+0x1ed/0x550 [ 186.401757][ T9558] ? dev_set_allmulti+0x11c/0x270 [ 186.401781][ T9558] ? __pfx_lock_acquire+0x10/0x10 [ 186.401801][ T9558] ? __wake_up_klogd+0x1c/0x110 [ 186.401821][ T9558] ? __pfx___might_resched+0x10/0x10 [ 186.401842][ T9558] ? do_setlink+0xfee/0x40f0 [ 186.401865][ T9558] ? __lock_acquire+0x1397/0x2100 [ 186.401888][ T9558] __mutex_lock+0x19c/0x1010 [ 186.401905][ T9558] ? dev_set_allmulti+0x11c/0x270 [ 186.401932][ T9558] ? dev_set_allmulti+0x11c/0x270 [ 186.401953][ T9558] ? __pfx___mutex_lock+0x10/0x10 [ 186.401971][ T9558] ? __pfx_lock_acquire+0x10/0x10 [ 186.401993][ T9558] ? netdev_info+0x122/0x170 [ 186.402009][ T9558] ? netif_set_allmulti+0x1a2/0x380 [ 186.402034][ T9558] dev_set_allmulti+0x11c/0x270 [ 186.402058][ T9558] team_change_rx_flags+0x1a8/0x330 [ 186.402076][ T9558] ? team_change_rx_flags+0x29/0x330 [ 186.402095][ T9558] ? __pfx_team_change_rx_flags+0x10/0x10 [ 186.402112][ T9558] netif_set_allmulti+0x20e/0x380 [ 186.402138][ T9558] dev_set_allmulti+0x143/0x270 [ 186.402161][ T9558] del_nbp+0xce/0xb40 [ 186.402180][ T9558] br_del_if+0x145/0x320 [ 186.402194][ T9558] ? br_del_slave+0x12/0x30 [ 186.402214][ T9558] do_set_master+0x349/0x730 [ 186.402239][ T9558] do_setlink+0xfee/0x40f0 [ 186.402270][ T9558] ? __pfx_do_setlink+0x10/0x10 [ 186.402297][ T9558] ? __pfx___might_resched+0x10/0x10 [ 186.402317][ T9558] ? __pfx___mutex_trylock_common+0x10/0x10 [ 186.402335][ T9558] ? rcu_is_watching+0x15/0xb0 [ 186.402353][ T9558] ? trace_contention_end+0x3c/0x120 [ 186.402370][ T9558] ? __mutex_lock+0x397/0x1010 [ 186.402389][ T9558] ? __pfx_aa_get_newest_label+0x10/0x10 [ 186.402413][ T9558] ? rtnl_newlink+0xc4c/0x1d90 [ 186.402433][ T9558] ? __pfx___mutex_lock+0x10/0x10 [ 186.402455][ T9558] ? ns_capable+0x8a/0xf0 [ 186.402473][ T9558] ? rtnl_link_get_net_capable+0x168/0x340 [ 186.402497][ T9558] rtnl_newlink+0x15a6/0x1d90 [ 186.402517][ T9558] ? stack_depot_save_flags+0x37/0x940 [ 186.402544][ T9558] ? __pfx_rtnl_newlink+0x10/0x10 [ 186.402564][ T9558] ? __netlink_deliver_tap+0x561/0x7f0 [ 186.402584][ T9558] ? __pfx_validate_chain+0x10/0x10 [ 186.402601][ T9558] ? __sock_sendmsg+0x221/0x270 [ 186.402619][ T9558] ? ____sys_sendmsg+0x53a/0x860 [ 186.402634][ T9558] ? __sys_sendmsg+0x269/0x350 [ 186.402655][ T9558] ? do_syscall_64+0xf3/0x230 [ 186.402672][ T9558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.402701][ T9558] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.402723][ T9558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.402749][ T9558] ? mark_lock+0x9a/0x360 [ 186.402764][ T9558] ? __lock_acquire+0x1397/0x2100 [ 186.402799][ T9558] ? __pfx_lock_release+0x10/0x10 [ 186.402825][ T9558] ? __pfx_rtnl_newlink+0x10/0x10 [ 186.402846][ T9558] rtnetlink_rcv_msg+0x791/0xcf0 [ 186.402866][ T9558] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 186.402888][ T9558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.402911][ T9558] ? ref_tracker_free+0x643/0x7e0 [ 186.402928][ T9558] netlink_rcv_skb+0x206/0x480 [ 186.402949][ T9558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.402970][ T9558] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.402998][ T9558] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.403018][ T9558] netlink_unicast+0x7f6/0x990 [ 186.403040][ T9558] ? __pfx_netlink_unicast+0x10/0x10 [ 186.403057][ T9558] ? __virt_addr_valid+0x45f/0x530 [ 186.403073][ T9558] ? __phys_addr_symbol+0x2f/0x70 [ 186.403087][ T9558] ? __check_object_size+0x47a/0x730 [ 186.403108][ T9558] netlink_sendmsg+0x8de/0xcb0 [ 186.403133][ T9558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.403156][ T9558] ? aa_sock_msg_perm+0x91/0x160 [ 186.403179][ T9558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.403198][ T9558] __sock_sendmsg+0x221/0x270 [ 186.403218][ T9558] ____sys_sendmsg+0x53a/0x860 [ 186.403238][ T9558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.403254][ T9558] ? __fget_files+0x2a/0x410 [ 186.403276][ T9558] ? __fget_files+0x2a/0x410 [ 186.403299][ T9558] __sys_sendmsg+0x269/0x350 [ 186.403317][ T9558] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.403358][ T9558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.403380][ T9558] ? do_syscall_64+0x100/0x230 [ 186.403399][ T9558] ? do_syscall_64+0xb6/0x230 [ 186.403418][ T9558] do_syscall_64+0xf3/0x230 [ 186.403436][ T9558] ? clear_bhb_loop+0x35/0x90 [ 186.403456][ T9558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.403477][ T9558] RIP: 0033:0x7f4b98f8d169 [ 186.403490][ T9558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.403505][ T9558] RSP: 002b:00007f4b99e00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.403521][ T9558] RAX: ffffffffffffffda RBX: 00007f4b991a5fa0 RCX: 00007f4b98f8d169 [ 186.403533][ T9558] RDX: 0000000004040850 RSI: 0000400000000000 RDI: 0000000000000009 [ 186.403545][ T9558] RBP: 00007f4b9900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 186.403554][ T9558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.403564][ T9558] R13: 0000000000000000 R14: 00007f4b991a5fa0 R15: 00007ffc687ce7b8 [ 186.403583][ T9558] [ 186.421826][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 186.531438][ T9558] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 187.591103][ T9558] team0: left promiscuous mode [ 187.599186][ T9558] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 187.611364][ T9558] bridge0: port 1(team0) entered disabled state [ 187.622361][ T9558] batman_adv: batadv0: Adding interface: team0 [ 187.640799][ T9558] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.676510][ T9558] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 187.738545][ T9561] team0: left allmulticast mode [ 187.755155][ T9561] team_slave_0: left allmulticast mode [ 187.772165][ T9561] team_slave_1: left allmulticast mode [ 187.777687][ T9561] team0: left promiscuous mode [ 187.819256][ T9561] team_slave_0: left promiscuous mode [ 187.829032][ T9561] team_slave_1: left promiscuous mode [ 187.836464][ T9561] bridge0: port 2(team0) entered disabled state [ 187.870950][ T9561] batman_adv: batadv0: Adding interface: team0 [ 187.890755][ T9561] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.941111][ T9561] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 187.969736][ T9562] team0: entered promiscuous mode [ 187.974904][ T9562] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 187.985547][ T9562] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.992481][ T9562] batman_adv: batadv0: Interface activated: team0 [ 187.999058][ T9562] batman_adv: batadv0: Interface deactivated: team0 [ 188.007645][ T9562] batman_adv: batadv0: Removing interface: team0 [ 188.026696][ T9562] bridge0: port 1(team0) entered blocking state [ 188.044402][ T9562] bridge0: port 1(team0) entered disabled state [ 188.057481][ T9562] team0: entered allmulticast mode [ 188.064715][ T9562] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 [ 188.074322][ T9562] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 9562, name: syz.3.1269 [ 188.085149][ T9562] preempt_count: 0, expected: 0 [ 188.090125][ T9562] RCU nest depth: 1, expected: 0 [ 188.095117][ T9562] INFO: lockdep is turned off. [ 188.101689][ T9562] CPU: 1 UID: 0 PID: 9562 Comm: syz.3.1269 Tainted: G W 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 188.101719][ T9562] Tainted: [W]=WARN [ 188.101725][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.101736][ T9562] Call Trace: [ 188.101742][ T9562] [ 188.101749][ T9562] dump_stack_lvl+0x241/0x360 [ 188.101774][ T9562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.101792][ T9562] ? __pfx__printk+0x10/0x10 [ 188.101812][ T9562] ? preempt_schedule_thunk+0x1a/0x30 [ 188.101835][ T9562] __might_resched+0x5d4/0x780 [ 188.101856][ T9562] ? __wake_up_klogd+0xd5/0x110 [ 188.101877][ T9562] ? __wake_up_klogd+0x1c/0x110 [ 188.101897][ T9562] ? __pfx___might_resched+0x10/0x10 [ 188.101919][ T9562] ? rcu_is_watching+0x15/0xb0 [ 188.101936][ T9562] ? lock_release+0xbf/0xa30 [ 188.101961][ T9562] __mutex_lock+0x126/0x1010 [ 188.101981][ T9562] ? _printk+0xd5/0x120 [ 188.101997][ T9562] ? rcu_is_watching+0x15/0xb0 [ 188.102015][ T9562] ? dev_set_allmulti+0x11c/0x270 [ 188.102039][ T9562] ? __pfx___mutex_lock+0x10/0x10 [ 188.102057][ T9562] ? __pfx_lock_acquire+0x10/0x10 [ 188.102081][ T9562] ? netdev_info+0x122/0x170 [ 188.102096][ T9562] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 188.102118][ T9562] ? hsr_netdev_notify+0x295/0xb50 [ 188.102137][ T9562] ? netif_set_allmulti+0x1a2/0x380 [ 188.102162][ T9562] dev_set_allmulti+0x11c/0x270 [ 188.102188][ T9562] team_change_rx_flags+0x1a8/0x330 [ 188.102208][ T9562] ? team_change_rx_flags+0x29/0x330 [ 188.102227][ T9562] ? __pfx_team_change_rx_flags+0x10/0x10 [ 188.102246][ T9562] netif_set_allmulti+0x20e/0x380 [ 188.102273][ T9562] dev_set_allmulti+0x143/0x270 [ 188.102297][ T9562] br_add_if+0x317/0xef0 [ 188.102315][ T9562] ? validate_linkmsg+0x828/0xa40 [ 188.102337][ T9562] do_set_master+0x579/0x730 [ 188.102363][ T9562] do_setlink+0xfee/0x40f0 [ 188.102390][ T9562] ? rcu_is_watching+0x15/0xb0 [ 188.102412][ T9562] ? do_raw_spin_lock+0x14f/0x370 [ 188.102431][ T9562] ? __pfx_do_setlink+0x10/0x10 [ 188.102462][ T9562] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.102490][ T9562] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 188.102508][ T9562] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 188.102528][ T9562] ? rcu_is_watching+0x15/0xb0 [ 188.102547][ T9562] ? __mutex_lock+0xba3/0x1010 [ 188.102566][ T9562] ? __mutex_lock+0x602/0x1010 [ 188.102586][ T9562] ? rtnl_newlink+0xc4c/0x1d90 [ 188.102608][ T9562] ? __pfx___mutex_lock+0x10/0x10 [ 188.102631][ T9562] ? ns_capable+0x8a/0xf0 [ 188.102649][ T9562] ? rtnl_link_get_net_capable+0x168/0x340 [ 188.102675][ T9562] rtnl_newlink+0x15a6/0x1d90 [ 188.102699][ T9562] ? stack_depot_save_flags+0x37/0x940 [ 188.102729][ T9562] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.102750][ T9562] ? __netlink_deliver_tap+0x561/0x7f0 [ 188.102772][ T9562] ? __pfx_validate_chain+0x10/0x10 [ 188.102789][ T9562] ? __sock_sendmsg+0x221/0x270 [ 188.102808][ T9562] ? ____sys_sendmsg+0x53a/0x860 [ 188.102823][ T9562] ? __sys_sendmsg+0x269/0x350 [ 188.102838][ T9562] ? do_syscall_64+0xf3/0x230 [ 188.102856][ T9562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.102886][ T9562] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 188.102909][ T9562] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.102936][ T9562] ? mark_lock+0x9a/0x360 [ 188.102953][ T9562] ? __lock_acquire+0x1397/0x2100 [ 188.102988][ T9562] ? __pfx_lock_release+0x10/0x10 [ 188.103017][ T9562] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.103038][ T9562] rtnetlink_rcv_msg+0x791/0xcf0 [ 188.103059][ T9562] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 188.103082][ T9562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.103105][ T9562] ? ref_tracker_free+0x643/0x7e0 [ 188.103123][ T9562] netlink_rcv_skb+0x206/0x480 [ 188.103144][ T9562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.103166][ T9562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.103197][ T9562] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.103219][ T9562] netlink_unicast+0x7f6/0x990 [ 188.103242][ T9562] ? __pfx_netlink_unicast+0x10/0x10 [ 188.103260][ T9562] ? __virt_addr_valid+0x45f/0x530 [ 188.103276][ T9562] ? __phys_addr_symbol+0x2f/0x70 [ 188.103291][ T9562] ? __check_object_size+0x47a/0x730 [ 188.103314][ T9562] netlink_sendmsg+0x8de/0xcb0 [ 188.103340][ T9562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.103363][ T9562] ? aa_sock_msg_perm+0x91/0x160 [ 188.103387][ T9562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.103407][ T9562] __sock_sendmsg+0x221/0x270 [ 188.103429][ T9562] ____sys_sendmsg+0x53a/0x860 [ 188.103457][ T9562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.103473][ T9562] ? __fget_files+0x2a/0x410 [ 188.103497][ T9562] ? __fget_files+0x2a/0x410 [ 188.103522][ T9562] __sys_sendmsg+0x269/0x350 [ 188.103539][ T9562] ? __pfx_futex_wake+0x10/0x10 [ 188.103564][ T9562] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.103600][ T9562] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.103623][ T9562] ? do_syscall_64+0x100/0x230 [ 188.103642][ T9562] ? do_syscall_64+0xb6/0x230 [ 188.103661][ T9562] do_syscall_64+0xf3/0x230 [ 188.103680][ T9562] ? clear_bhb_loop+0x35/0x90 [ 188.103701][ T9562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.103721][ T9562] RIP: 0033:0x7f4b98f8d169 [ 188.103737][ T9562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.103752][ T9562] RSP: 002b:00007f4b99ddf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.103771][ T9562] RAX: ffffffffffffffda RBX: 00007f4b991a6080 RCX: 00007f4b98f8d169 [ 188.103783][ T9562] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000009 [ 188.103794][ T9562] RBP: 00007f4b9900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.103805][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.103816][ T9562] R13: 0000000000000000 R14: 00007f4b991a6080 R15: 00007ffc687ce7b8 [ 188.103835][ T9562] [ 188.103912][ T9562] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 188.689300][ T9564] team0: entered promiscuous mode [ 188.694373][ T9564] team_slave_0: entered promiscuous mode [ 188.700515][ T9564] team_slave_1: entered promiscuous mode [ 188.707541][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.714511][ T9564] batman_adv: batadv0: Interface activated: team0 [ 188.721138][ T9564] batman_adv: batadv0: Interface deactivated: team0 [ 188.727876][ T9564] batman_adv: batadv0: Removing interface: team0 [ 188.735216][ T9564] bridge0: port 2(team0) entered blocking state [ 188.741681][ T9564] bridge0: port 2(team0) entered disabled state [ 188.748127][ T9564] team0: entered allmulticast mode [ 188.753668][ T9564] team_slave_0: entered allmulticast mode [ 188.759500][ T9564] team_slave_1: entered allmulticast mode