last executing test programs: 22.423450977s ago: executing program 1 (id=2062): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140)={r2}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12041, 0x52895}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x5c}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140)={r2}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12041, 0x52895}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x5c}}, 0x0) (async) 22.201261296s ago: executing program 1 (id=2064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r4, @ANYBLOB="30002f800c0002000203aaaaaaaaaaaa20000380140003800800020003eeffff050001000300000008000100"], 0x4c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r5, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008010}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x6bd14d2bc29e41b6}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 21.892811511s ago: executing program 1 (id=2065): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="15000000080000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000a6be0000000000010000000000007c420ee262a283c43299c301518810c3545344c23d3a8fa48ac4938121bd0769c53d76a7aad974c8490be7f4d4ece306e94bb2df24f10acf6b23cc21de293e9fe7b85c2debcd7be1058c24a444d218f5df1c6a4e87a9fc60fdcdd075705a255c1875e52a334e1de1d729feda2863d22a3a904e6bf611215101d6e1469e6055c0d8a07e761420232f4ee10c4f18d38398a1d4ef5443ae5d8ae6839f9d089a0bfbd616cac0eef82186fee087711c1261adb76e732356c6beb6454aec558d238174a4ad9f74c1eec9246dfcd480d8dd2dd4ac00e7bfb84c327a1c1b5b0cfabf0812fb01ebd48a30eadc29c04bffdfbbb8e376b0bbf864ecda2d385845dea3f3254a32e31eff9a882c28c947d29d75d0a31af4a22d6dd8"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x14, r12, 0x1}, 0x14}}, 0x44000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r13, @ANYRES32=r14], 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r16 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r15}, 0x10) r17 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r16}, 0x8) close(r17) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) 21.634392318s ago: executing program 1 (id=2066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='fsi_master_acf_cmd_same_addr\x00', r0, 0x0, 0xa}, 0x18) socket$netlink(0x10, 0x3, 0xa) recvmsg(r1, &(0x7f0000000200)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000000440)=""/220, 0xdc}, 0x40010102) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xa8, 0xffffffffffffffe1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000b"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 20.436407139s ago: executing program 1 (id=2081): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmmsg$inet(r2, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba6e0d60508dbbb", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0xfffffffffffffefc, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe006000000035900ff01bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e4000000000ffe5", 0x48}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000030801e0ffffffffff17000000eeffff13000480080009400000000208000840000000000500030084"], 0x30}}, 0x0) 7.167420667s ago: executing program 0 (id=2156): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0xfffffffffffffffb, 0x9ffffc}) mmap(&(0x7f00006a9000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r0, 0xcd44a000) 6.441668378s ago: executing program 0 (id=2161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x184, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@rand_addr=0x64010100, @in6=@remote, 0x200, 0x0, 0x2001, 0x0, 0x0, 0x20, 0x0, 0x8}, {@in=@loopback, 0x4d2, 0x33}, @in6=@remote, {0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000000000000, 0x0, 0x9}, {0x0, 0x4}, {0x0, 0x400000, 0x81}, 0x70bd27, 0x20003501, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'blake2b-256-generic\x00'}, 0x0, 0x60}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8020}, 0x2004c840) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) syz_extract_tcp_res(0x0, 0x9, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="07000000010000", 0x7) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'geneve0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x2, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@deltfilter={0x34, 0x2d, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xd, 0xffff}, {0xc, 0x8}, {0xffff, 0xffe1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x6, 0x90}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000840) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @local, @void, {@canfd={0xd, {{0x4}, 0x1e, 0x3, 0x0, 0x0, "4b3c78d7055f947e6574244ba4a325d27bdd16d9775a4e7608080873d74eedfa5fc20ff7a0ab9814ddab3be11565f7c4b14209b129be599be4f8cace499da255"}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x9}, 0x1c) listen(r10, 0x3) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.235568985s ago: executing program 0 (id=2163): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x170, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_matchall={{0xd}, {0xf4, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x10}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0xb8, 0x2, [@m_gact={0xb4, 0xd, 0x0, 0x0, {{0x9}, {0x4}, {0x85, 0x6, "2724bcf1f0f518bde38b0874f6a2420cbfb3c3e186978cac4637f4fe84310a81c1eb3e4bd42c384da8e2057160a4031315a874e98ea38ec4dfd55d2589be64c5cd32196407358a62ca5126d24abdfaeed9af016c08ea8c377525722b404cb5904874c934a73a5b8d60c348551f83a921208662ba2e1dd07ace25b215969cd351c4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x170}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket(0x25, 0x803, 0xfffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket(0x2, 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg$inet6(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000940)=ANY=[], 0x200}}], 0x1, 0x6) sendmmsg(r5, &(0x7f0000000740)=[{{0x0, 0xffffffffffffffb5, &(0x7f0000000900)=[{&(0x7f0000000000)="1b", 0x40000}, {&(0x7f00000007c0)="a8613b06c319a4a87eb1a045fbae99c49eab1545785f62ce8756ae1c8fc86c7278bd4e23e7ab18e63178c4dbb30fe67b6d50763c2e09eedb161140db876547299e6e2c50f36d7e486dc1ca64ecbaba0731b27ed1a516b728b789c29e7f20655c7b0a74a4f781bb03638deeda3628f36a5df7677b90ec5d42ee57c7c201b8bb3fcb8f31734f710358d9c0211c0441597ece244b7b80cd6456b2a31a84e8463821580c24e9c268b23ae6dc52ad03cae2e1ed8fc84a9b11245882501ebb62c3e523c535c436793655152937f705251485af18644de399c5bc47583496fecca05f584bd485055db6e911a2b814ef7e09ccedc963c3fc"}, {&(0x7f0000000940)="8c42f08b8070dd9ab0289c96564488877bc393a7441acd20ecc5c99be97edf0ece78853133a511674d26f97e2717089bc9171acf118574c19ca5ffaa1fc10fe215bbda1a9f959442a8d165d58cb56fa1ac7fa6773d3fc1ae524db10328278bb6db90070dfccb61de4c58064dbc6648ff28a38dc2237ad3d35938032420093ce58c469182a6af8af4e23d76b66d7b5d879ca2108110ef166172a898b0ee83e4d098e5df9972e2d834af34c74487878b661f6b37e9e826b178acaa95eff09d9754784816f2b6a6", 0xfffffdc4}], 0x1}}], 0x1, 0x200080c4) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xc0, 0x99, 0x15, 0x5, 0xfc, 0x5, 0xfb, 0xe2, 0x0, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r6, 0x1) shutdown(r3, 0x1) readv(r3, &(0x7f0000000080), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x14, 0x0, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) 5.99592007s ago: executing program 1 (id=2081): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmmsg$inet(r2, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba6e0d60508dbbb", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0xfffffffffffffefc, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe006000000035900ff01bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e4000000000ffe5", 0x48}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000030801e0ffffffffff17000000eeffff13000480080009400000000208000840000000000500030084"], 0x30}}, 0x0) 5.450861453s ago: executing program 0 (id=2166): unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1c, 0x0, 0x5a) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 5.089932945s ago: executing program 4 (id=2170): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, 0x0, 0x1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, 0x0, 0x4) ioctl$int_in(r0, 0x5421, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, 0x0, 0x20000004) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x6, 0x2, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1, 0x40, 0xc}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0xd, 0x7e, @random="11d723a1279f0167bf"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x0, 0x0, 0x0, {0x0, 0x6, 0x0, 0x40, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x300, 0x953, 0x2}}]}, 0x4c}}, 0x20000800) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a00)={0x38, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xf}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfc000000}, @chandef_params]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x11, &(0x7f0000001380)="94a17116", 0x4) socket(0x21, 0x0, 0xe) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 4.657485111s ago: executing program 4 (id=2174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2000000000000069, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="56eb85e84d6e3bb5479db81bf61785a42e806eb8b14fa4ee3085083ff5eae94dbd11350d1a92fb66e794530e147af6efec171ae6a96358b043abbcb88af409a5147ab385480cd76fea3c3d563d30e02a6b0697594da2b58033fca78a8d2923395db0100b14adbaeb3bba75c55f906bc63e0a110062f167c3b580f2ed90ebf6ea80acd0b93a83f66108327aedcb89ec5360bc4fc2a4115fd5348e2ff3d65fe8c1c5", 0xa1}, {&(0x7f0000000200)="8f714931148e566ec5c326656dd0c9aaf52b309f1db6f37c0564a702056a414c7cdc586b7cead20f0bf1b027e5ca993bbca94744ef6d93d1", 0x38}], 0x2) (async) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async, rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) socket$inet6(0xa, 0x3, 0x8000000003c) (async, rerun: 32) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x2, 0x2, 0x5, 0x0, 0x200}, 0x20) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x439, 0x70bd26, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x110d1}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffffffff, 0xb60}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x680488c0) (async, rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) (async) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x29}}, 0x14) 4.42991914s ago: executing program 4 (id=2176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10}}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x5, 0x0, 0x4000000f, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x0, 0x0, @void, @value, @void, @value}, 0xac) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001280)=[{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001400)="43174b", 0x3}, {&(0x7f0000000100)="41038f5324", 0x5}], 0x2, 0x0, 0x0, 0x44800}], 0x1, 0x4000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffffff9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x34}}, 0x6c4bd90785cb7ffe) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x31) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0xa, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r6, r7}, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="a7bda888000000002c0012800800010067726500200002800500130000000000040012000800040002000000050009000900000008000a00", @ANYRES32], 0x54}}, 0x0) 4.09370768s ago: executing program 2 (id=2179): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB="3f20ad32"], 0x20) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r8}, 0x10) 3.814741856s ago: executing program 4 (id=2182): unshare(0x6a040000) (async) r0 = socket$key(0xf, 0x3, 0x2) unshare(0xc040480) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x13, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6eaa0000000000007110a2000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58}, 0xb) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000000040)='`', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x62}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r5, 0x2000000, 0x17, 0x0, &(0x7f0000000400)="13435cd3781ec47f3ec66a90bd307e0add6affff1fc42f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getgid() (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20000000) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4004014) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc) (async) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x8b7a, @ipv4={'\x00', '\xff\xff', @local}, 0x4}], 0x2c) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) (async) sendmmsg$inet6(r8, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) 2.837663984s ago: executing program 3 (id=2184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x10, 0x2, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="08010000000502b728b14123db5302deae9443a02c1600099ae923575c76f10f5a07d38265926ff7651ddc8470b636f6176ffea98bbb9175a01ca72e052c105d7dc6c8b9e8e7ee86af7b5f75c57caca487007311b790fd3f62bd2aad9ae411be91c707c47d084ef255d5e0b450b23e7be3182c116d601f753b32a4da9c622339ed04add447008c1b4c73a470cdb74a9e21"], 0x18) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000700)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x1, 0x3, 0x2, 0x6, 0xbd}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, 0x0, 0x20040084) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b1a, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6f79be2feb469a5dc4f49a495093eac23354a44896e589dd9884aae5a6e47a477d388fc607e59ac8943f1d9a95", 0x2d) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040), 0xc) bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='dvmrp0\x00', 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x7, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x8001, 0x600}]}}}}}}, 0x46) 1.760611497s ago: executing program 3 (id=2185): r0 = socket$packet(0x11, 0x4000000000002, 0x300) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000100)=@hci={0x1f, 0x2, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c00000000000000020100000800000068fafde1e7cac009272c12ecdfec047f6cf8cab6620c9de87d231994188116f0e2bf8c3610055a773ed45c12b5e1bdab75235cde2f80e5cf8b770c55109afaf8fafb3d81b864519290f7696b73944215defca72d09ca"], 0xc}}], 0x1, 0x40040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000003700000000000000010000000b00000008000100e0000001"], 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x20000080) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="19000000320001000000200000000000070083002001000ba0c27ceca95d915904c998387c1b0004935956ce4ef63b09c266c1f06b011c2e690fb1e7c2c9401c91681859d5c8c00e52f2f25be92b1b5dddec62d39dbeb23e01ea"], 0x18}], 0x1, 0x0, 0x0, 0x4c040}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt(r3, 0x6, 0x15, &(0x7f00000003c0)="cd861504dc239dd80000000000000000", 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000060015000400000014001680"], 0x38}}, 0x4000000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000300)=0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0x204, 0x2e, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca0e"], 0x3c}}, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmmsg(r5, &(0x7f0000007fc0), 0x0, 0x4000004) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)={0xb0000000}) 1.460814977s ago: executing program 3 (id=2186): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x0, 0x80000001}, {0x35}, {0x6}]}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xda90) socket$caif_seqpacket(0x25, 0x5, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet_dccp(0x2, 0x6, 0x0) shutdown(r4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.237480807s ago: executing program 0 (id=2187): socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x402, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x6}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRES16=r4, @ANYBLOB="8ed9b6cf4af9f0698e06b9bb115c4e3c9fba3dd91aa95e0806321318388ba1902d2e288c60afebac435e21469a3d23aa94f5772b6364349dc700a8adcdd2f65829ff3fdf29685eb2d6c73b137673e7897071f9f8d791f0738f6610790ed153de21723ebb50141ea28cb35a7ae10f1ca4ccac089b02f3f312eb401dc73e8386a310ab3cd237dd5c619b1f4df3d2"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000827bd7000ffdbdf25110000000c00e5ff0300000003000000050012000000000008000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="0c00060003000000000000000c0006000100000001000000"], 0x50}, 0x1, 0x0, 0x0, 0x24044851}, 0x408c4) 1.2290677s ago: executing program 2 (id=2188): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x184, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@rand_addr=0x64010100, @in6=@remote, 0x200, 0x0, 0x2001, 0x0, 0x0, 0x20, 0x0, 0x8}, {@in=@loopback, 0x4d2, 0x33}, @in6=@remote, {0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000000000000, 0x0, 0x9}, {0x0, 0x4}, {0x0, 0x400000, 0x81}, 0x70bd27, 0x20003501, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'blake2b-256-generic\x00'}, 0x0, 0x60}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8020}, 0x2004c840) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) syz_extract_tcp_res(0x0, 0x9, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="07000000010000", 0x7) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'geneve0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x2, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@deltfilter={0x34, 0x2d, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xd, 0xffff}, {0xc, 0x8}, {0xffff, 0xffe1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x6, 0x90}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000840) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @local, @void, {@canfd={0xd, {{0x4}, 0x1e, 0x3, 0x0, 0x0, "4b3c78d7055f947e6574244ba4a325d27bdd16d9775a4e7608080873d74eedfa5fc20ff7a0ab9814ddab3be11565f7c4b14209b129be599be4f8cace499da255"}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x9}, 0x1c) listen(r10, 0x3) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.166807581s ago: executing program 4 (id=2189): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711262000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x8, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x4, 0x15, 0x3, 0xd}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x3, 0x6b4, 0x200, 0x90c, 0xffffffffffffffff, 0xc6fe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x4, @void, @value, @void, @value}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=@newtaction={0x88, 0x30, 0xffff, 0x1, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x4840) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x6}, 0x10) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getroute={0x1c, 0x1a, 0x115, 0x0, 0x1, {0x2, 0x0, 0x0, 0x40, 0xfe, 0x2}}, 0x1c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @jmp={0x5, 0x0, 0x1, 0x8, 0x7, 0xfffffffffffffff4, 0x10}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x1c, &(0x7f0000000180)=""/28, 0x41000, 0x20, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xc, 0x72f00000, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r8, r9, r10, r11, 0xffffffffffffffff, r14], &(0x7f0000000600)=[{0x0, 0x2, 0x0, 0xc}], 0x10, 0x9, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 1.01880005s ago: executing program 2 (id=2190): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4018, r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x60ef}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 547.240946ms ago: executing program 2 (id=2191): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) unshare(0x8000400) close(r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}}, 0x20008881) 425.498153ms ago: executing program 3 (id=2192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@rc={0x1f, @none}, &(0x7f0000000100)=0x80, 0x80000) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970000e03c00e18000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="70000000797e707ac8876ea7e7dfe4f34f3d75b256c82e9398347410c2e1efa45e74e980cbfdf3a3103f0c9de0ddf9e675678437b05ee995fddecabcbca417d5414cd36d8c3f18918d324303cea63f9606d208e89322d28aa7993365b75a87d407f87a802a9efbb6bebf5519c3ba9a340b732b19d240a8da90fb455b7ff08763f2e43132a8e44fc9268ec6b157d847bde522f1da4a40f8d85167f54c09051d946028a83d611e2b405708911d08acb27d970c88340031000000000000", @ANYRES16=r7, @ANYBLOB="000828bd7000fedbdf25770000000c009900a60300001e0800000800ef00060000000500ee00090000000500ee00e80000000800ef00050000000500ee00b60000000500ee00010000000500ee00080000000800ef00040000000500ee00060000000500ee0008000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x45) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r8, 0x101, 0x1, &(0x7f0000000000), 0x4) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792b6c728fb554a7601af023db5ef276136b78a996790fa4c613b7a5be64d5ff8c6724a4644113eca7528f78f49287997177731aa705fe1994d4c206c850bbd0482928fb1da5bbeca90a52504187d5522d0530ef99a6b258fd36536940f1ff40df9eb2e42be1545105e4bf5373fff66e0155a2c67", 0x75}, {&(0x7f0000001a80)="ac41a48dc274d82568f1f0edab58e901eb8190c035d3d219c5e981fc7645852f5279e75313526688f6c074db7e559a6b5a872376e81b08e8b5dadf7c630bf80c0c651bbe968dfec57dbf3a30e0835cbbe2c2ff090e2a4bfe028a3aaacc87774c777c7355503d672ffb1f372f1610af2693e478c6ba7de720eafd2175cfaaea9eea8e89ff1d0d026512199dc5dc1c651b77792d4b6800105b47f3909d23a2e5dec60608122fb358ffce693f109f4c7ca81b8c33167138f5b0e62f3d620888374305ff44d8409dc6e2424fb2ca26f515bef4be6ec4f1f6f25b799f95bbd5f4a33e7eb8d56101a83d9f8aa19565114a95f95102d16575a0da7eed59ae43aeec5aef75b76355a2b293cc847750fa9c07b432a042d21d048e4d189d22cee4e46753cc64726e5c2bab0b53cff28c9237a2ec8473d53a63339638f273bd3fa333f7906050464074f71b8cad8b114e23056c04c8fd87d43d8c5db0a25e5b5d58d2824712a621e97e8eb0ebf1dd3b042eaec20dbc652611a9f963c14ed17643bde898f918e7ce5031cd8fb31da84a354998d5faaa8155e4ea491d9947217b13fc02fa6d8ee370000b6bdf7063de4f2bd1b0eedb83a4c52910744f8deb374f5d7618f1224e9774830ccdaaacc10e61f31d0d44f160bec6c1ec0e03367099d50579f2224b60359a7f6538a0f8301069c6f6f28d7e3da60eb322c33c22996dd7008e2c8495db3d63419bdb9e976ac716d2465b261d055fd599fca2efd2ff529035557d2f96650dfc019dada9b351301a78f0b437754c66d098fd2f90e29f62efe79a8c22d12f43891b4ac27f8b7031732420b88e24f8b87f4c688fda5c58132ac48f7c6cabb009a11596b2648318944e4908b0bb84339337e21f5260c9b1da5e387a7334f25f364d7924fc60ebb80e4552c213820354a00b44394dd67868f788c6985591e207109d147b7848e217075cabf47f5fb64f50e2790e35b7dd73ed18faf858273b5200171b794ddb7f880a6e7e7386c718b632103b3e89b5ca96bf2fd6c3c7f7e3dcef48c6defa10684889369ae296583dc2d962e6e86549fc3f23a106e998d76c4544ae21e3d51b3cf002ace7a0daa82cb0677079b2d3d14f7e9a0478dace936a2304a4aeda9a68d1144f055a5c4a92ed8b247bc0f293a0052df0c5d64ee55876f4053b3299a56d306c41f754f9e5211b233214ee90ea9cfd79c9e0b7d20c137e9ab01bd4ef1a23a7e0d064246096309e4cf3dcbe1924ff7c203a62322e700388e9a502930dcb5eb499a367f16f1d60b8663570b1adba35525f764ee986baa3e3549ae07f3c55d983037a45abcc055959df8ee5dba0d828eb407265b47e76c7725c713a6107be21a8bbaef247a8bb65e3a07911c115dc0f2951ff4e2c670c7fe0ff84834108ce3dd272e0f4796f98c1a26531d33310fc94588ac49c339ddd03e62032d96d52c8d6adda8f4f72b6d8735b100b6dbf95336207733f5f220091fdf6c425ea7c475d80935de08e21851fbff328e9c591bcddd0d96ae9557f4c7e96f22226a4e0f9938cd01696b7bcc8db64961d03b85ef5d6c8069d434286807d7afd598773b0ca2f8207c58f9b2612f92a18de", 0x470}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000000), 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) splice(r10, &(0x7f0000000480)=0x8, 0xffffffffffffffff, &(0x7f00000004c0)=0x3, 0x340000000000, 0x8) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x0, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_newaddr={0x28, 0x14, 0x200, 0x70bd29, 0x25dfdbfb, {0x2, 0x40, 0x2, 0xfe, r12}, [@IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40014) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) listen(r5, 0xff17) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000180)) 307.713699ms ago: executing program 2 (id=2193): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="5e5a45d6b445610d2473a730c39556403713aa66556383eb7aa66993412fe68b182613587fc34e5f65b961e63f08c7689816ba618a8feee0ae5abecca5bdb56cffae039aef5f4067faf9e39d30a4670035bec738e800004f79c14b4699773ff829c637884310372d75975e77f51941d14e7bc5b996a1a4452d0b9a16181dfe7c1ed68a388a8364025744d35dc577c800e499c34350dca0dbc236e2cc02e3d8a1aa62869dafaf14533f34a20363e8a2ed", 0xb0}], 0x1}], 0x1, 0x4c8d0) recvmsg$qrtr(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000480)=""/130, 0x82}, {&(0x7f0000000540)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x10221}, 0x38, 0x40010000) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x6c}, 0xa}, {{@in=@broadcast, 0x0, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x2}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x44}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x109c, 0x0, 0x0, 0x2663}, 0x0) 180.074558ms ago: executing program 0 (id=2194): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(0x3) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x2, {0x0, 0x0, 0x2}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r3, 0x3, {0x0, 0x0, 0x4}, 0x3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e762400"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r7, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080003"], 0x44}}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) getsockname$l2tp6(r8, 0x0, &(0x7f0000000a40)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004, 0x2}, {@in=@rand_addr=0x64010100, 0x4d2, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x326, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffc, 0x6ef}, {0x0, 0x0, 0x0, 0x800}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in6=@private0}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000001900010000000000000000001c140000fe"], 0x28}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'macvlan0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 178.194818ms ago: executing program 4 (id=2195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5429800088094000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff6400098028000080060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000400001b1b463c61e4def5000200000008000200ac1e0001050003000300000014000200776730"], 0xec}}, 0x0) 93.568933ms ago: executing program 2 (id=2196): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0xa, 0xbc}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x80, 0xfdbf, 0x57, @private0, @private1, 0x40, 0x0, 0x1ff, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x8, 0x5, 0x50, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x700, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x5, 0xf, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x10, 0x8, 0x6, 0x8525}}) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8927, &(0x7f00000001c0)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x99, 0x1, 0x7, 0x11, @loopback, @local, 0x7800, 0x7800, 0xff, 0x9}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x1}, {0x6, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x40a, 0x2, 0x0, 0x20007e}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0xc, 0x88, 0x0, 0x0, 0x5}}, {0x4}}]}]}, 0x68}}, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r15], 0x90}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="20002cbd7000ffdbdf25080000007000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="14000200627269646765300000000000000000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002006c6f00000000000000000000000000002800018008000100", @ANYRES32=r11, @ANYBLOB="140002000000000000001d0000000000000000000800030001000000"], 0xac}}, 0x40880) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$DEVLINK_CMD_GET(r16, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="143dd1000000", @ANYRES16=r0, @ANYBLOB="00022bbd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r17 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) pipe(&(0x7f0000000080)) 93.249549ms ago: executing program 3 (id=2197): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xd4, &(0x7f0000003e40)=""/212, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) 0s ago: executing program 3 (id=2198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup, r0, 0x10, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01762dbd7000fcdbdf251200000008000300", @ANYRES32=r7, @ANYBLOB="0a0006000802110000010000050074000300000008001400", @ANYRES32=r4], 0x40}}, 0x0) kernel console output (not intermixed with test programs): 0.1393'. [ 218.939482][T10895] bridge0: left promiscuous mode [ 218.984688][T10895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.011214][T10895] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.048584][T10895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.090687][T10919] gretap1: entered promiscuous mode [ 219.184022][T10922] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 219.205043][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 219.232896][T10922] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 219.250062][T10935] x_tables: duplicate underflow at hook 3 [ 219.697351][T10959] sctp: [Deprecated]: syz.2.1403 (pid 10959) Use of int in max_burst socket option deprecated. [ 219.697351][T10959] Use struct sctp_assoc_value instead [ 219.790582][T10961] lo speed is unknown, defaulting to 1000 [ 219.804744][T10961] lo speed is unknown, defaulting to 1000 [ 219.827153][T10966] netlink: 'syz.0.1406': attribute type 1 has an invalid length. [ 219.981477][T10976] netlink: 'syz.3.1408': attribute type 11 has an invalid length. [ 220.021376][T10978] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 220.112530][T10976] lo speed is unknown, defaulting to 1000 [ 220.128615][T10976] lo speed is unknown, defaulting to 1000 [ 220.163177][T10981] netlink: 'syz.0.1410': attribute type 1 has an invalid length. [ 220.243966][T10981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.365578][T10983] bond3: (slave veth5): Enslaving as an active interface with a down link [ 220.387694][T10981] tipc: Started in network mode [ 220.393308][T10981] tipc: Node identity _, cluster identity 4711 [ 220.399702][T10981] tipc: Enabling of bearer rejected, failed to enable media [ 220.427545][T10983] bond3: (slave ip6erspan0): making interface the new active one [ 220.452258][T10983] ip6erspan0: entered promiscuous mode [ 220.458193][T10983] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 220.585035][T10987] team0: Mode changed to "loadbalance" [ 220.697583][T10992] IPVS: Unknown mcast interface: vcan0 [ 221.406756][T11006] __nla_validate_parse: 8 callbacks suppressed [ 221.406779][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 221.462815][T11001] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 221.511652][T11007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1417'. [ 221.912866][T11022] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1421'. [ 222.014194][T11032] lo speed is unknown, defaulting to 1000 [ 222.042500][T11032] lo speed is unknown, defaulting to 1000 [ 222.256922][T11043] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 222.304435][T11045] lo speed is unknown, defaulting to 1000 [ 222.415015][T11045] lo speed is unknown, defaulting to 1000 [ 222.602544][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 222.682462][T11067] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1433'. [ 222.723250][T11071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1431'. [ 222.799226][T11073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1433'. [ 223.313559][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 223.341190][T11097] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1438'. [ 223.360681][T11097] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1438'. [ 223.540088][T11103] team0: left allmulticast mode [ 223.559822][T11103] bridge0: port 1(team0) entered disabled state [ 223.884226][T11117] netlink: 'syz.1.1445': attribute type 10 has an invalid length. [ 223.903743][T11117] macvlan0: entered allmulticast mode [ 223.914501][T11117] veth1_vlan: entered allmulticast mode [ 223.946723][T11117] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 224.168098][T11130] IPVS: Error connecting to the multicast addr [ 224.706333][T11167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.118548][T11174] pim6reg: entered allmulticast mode [ 225.170106][T11174] pim6reg: left allmulticast mode [ 225.492249][T11182] pim6reg9: entered allmulticast mode [ 225.547170][T11182] vlan3: entered promiscuous mode [ 225.563773][T11189] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 225.565500][T11182] bond0: entered promiscuous mode [ 225.894827][T11199] netem: change failed [ 225.980775][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 226.831139][T11235] lo speed is unknown, defaulting to 1000 [ 226.838028][T11235] lo speed is unknown, defaulting to 1000 [ 226.869065][T11241] __nla_validate_parse: 12 callbacks suppressed [ 226.869089][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 226.914977][T11242] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1483'. [ 226.920905][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'. [ 226.936051][T11242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1483'. [ 227.214956][T11247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.435263][T11247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.519731][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 227.564565][T11247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.645751][T11258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1490'. [ 227.893504][T11247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.997409][T11274] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 228.112058][T11247] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.162639][T11247] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.202720][T11247] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.246621][T11247] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.476573][T11287] netlink: 'syz.3.1496': attribute type 7 has an invalid length. [ 228.740231][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 228.800018][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1499'. [ 228.942900][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 228.963664][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1499'. [ 229.172717][T11319] FAULT_INJECTION: forcing a failure. [ 229.172717][T11319] name failslab, interval 1, probability 0, space 0, times 0 [ 229.186708][T11319] CPU: 1 UID: 0 PID: 11319 Comm: syz.2.1505 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 229.186737][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.186750][T11319] Call Trace: [ 229.186758][T11319] [ 229.186766][T11319] dump_stack_lvl+0x241/0x360 [ 229.186798][T11319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.186822][T11319] ? __pfx__printk+0x10/0x10 [ 229.186845][T11319] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 229.186877][T11319] ? __pfx___might_resched+0x10/0x10 [ 229.186910][T11319] should_fail_ex+0x40a/0x550 [ 229.186949][T11319] should_failslab+0xac/0x100 [ 229.186981][T11319] __kmalloc_node_noprof+0xe1/0x4d0 [ 229.187011][T11319] ? __kvmalloc_node_noprof+0x72/0x190 [ 229.187051][T11319] __kvmalloc_node_noprof+0x72/0x190 [ 229.187087][T11319] nf_tables_newset+0x18ed/0x3170 [ 229.187132][T11319] ? __pfx_nf_tables_newset+0x10/0x10 [ 229.187161][T11319] ? __pfx_lock_release+0x10/0x10 [ 229.187206][T11319] ? __nla_parse+0x40/0x60 [ 229.187233][T11319] nfnetlink_rcv+0x14e3/0x2ab0 [ 229.187258][T11319] ? __pfx_validate_chain+0x10/0x10 [ 229.187313][T11319] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 229.187350][T11319] ? __lock_acquire+0x1397/0x2100 [ 229.187416][T11319] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.187460][T11319] ? __pfx_lock_release+0x10/0x10 [ 229.187509][T11319] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.187545][T11319] netlink_unicast+0x7f6/0x990 [ 229.187584][T11319] ? __pfx_netlink_unicast+0x10/0x10 [ 229.187612][T11319] ? __virt_addr_valid+0x45f/0x530 [ 229.187633][T11319] ? __phys_addr_symbol+0x2f/0x70 [ 229.187653][T11319] ? __check_object_size+0x47a/0x730 [ 229.187687][T11319] netlink_sendmsg+0x8de/0xcb0 [ 229.187721][T11319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.187747][T11319] ? aa_sock_msg_perm+0x91/0x160 [ 229.187786][T11319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.187805][T11319] __sock_sendmsg+0x221/0x270 [ 229.187841][T11319] ____sys_sendmsg+0x53a/0x860 [ 229.187876][T11319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.187901][T11319] ? __fget_files+0x2a/0x410 [ 229.187934][T11319] ? __fget_files+0x2a/0x410 [ 229.187975][T11319] __sys_sendmsg+0x269/0x350 [ 229.188008][T11319] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.188049][T11319] ? do_sys_openat2+0x17a/0x1d0 [ 229.188110][T11319] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 229.188146][T11319] ? do_syscall_64+0x100/0x230 [ 229.188180][T11319] ? do_syscall_64+0xb6/0x230 [ 229.188214][T11319] do_syscall_64+0xf3/0x230 [ 229.188245][T11319] ? clear_bhb_loop+0x35/0x90 [ 229.188278][T11319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.188306][T11319] RIP: 0033:0x7f714998d169 [ 229.188325][T11319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.188342][T11319] RSP: 002b:00007f714a714038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.188364][T11319] RAX: ffffffffffffffda RBX: 00007f7149ba5fa0 RCX: 00007f714998d169 [ 229.188379][T11319] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 229.188392][T11319] RBP: 00007f714a714090 R08: 0000000000000000 R09: 0000000000000000 [ 229.188405][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.188417][T11319] R13: 0000000000000000 R14: 00007f7149ba5fa0 R15: 00007ffef83faf38 [ 229.188456][T11319] [ 229.668891][T11328] bridge0: port 1(syz_tun) entered blocking state [ 229.676390][T11328] bridge0: port 1(syz_tun) entered disabled state [ 229.683749][T11328] syz_tun: entered allmulticast mode [ 229.703087][T11328] syz_tun: left allmulticast mode [ 229.936799][T11346] tun0: tun_chr_ioctl cmd 1074025677 [ 229.942633][T11346] tun0: linktype set to 821 [ 230.221629][T11354] No such timeout policy "syz0" [ 230.240889][T11357] ksmbd: Unknown IPC event: 4, ignore. [ 230.346113][T11363] FAULT_INJECTION: forcing a failure. [ 230.346113][T11363] name failslab, interval 1, probability 0, space 0, times 0 [ 230.372033][T11363] CPU: 1 UID: 0 PID: 11363 Comm: syz.3.1519 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 230.372064][T11363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.372077][T11363] Call Trace: [ 230.372084][T11363] [ 230.372093][T11363] dump_stack_lvl+0x241/0x360 [ 230.372126][T11363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.372150][T11363] ? __pfx__printk+0x10/0x10 [ 230.372175][T11363] ? __kmalloc_noprof+0xb5/0x4c0 [ 230.372206][T11363] ? __pfx___might_resched+0x10/0x10 [ 230.372240][T11363] should_fail_ex+0x40a/0x550 [ 230.372277][T11363] should_failslab+0xac/0x100 [ 230.372308][T11363] __kmalloc_noprof+0xdd/0x4c0 [ 230.372336][T11363] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 230.372364][T11363] ? nla_strdup+0x9c/0x140 [ 230.372385][T11363] ? __kvmalloc_node_noprof+0x72/0x190 [ 230.372424][T11363] nla_strdup+0x9c/0x140 [ 230.372450][T11363] nf_tables_newset+0x192e/0x3170 [ 230.372497][T11363] ? __pfx_nf_tables_newset+0x10/0x10 [ 230.372526][T11363] ? __pfx_lock_release+0x10/0x10 [ 230.372575][T11363] ? __nla_parse+0x40/0x60 [ 230.372602][T11363] nfnetlink_rcv+0x14e3/0x2ab0 [ 230.372639][T11363] ? __pfx_validate_chain+0x10/0x10 [ 230.372696][T11363] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 230.372734][T11363] ? __lock_acquire+0x1397/0x2100 [ 230.372802][T11363] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.372836][T11363] ? __pfx_lock_release+0x10/0x10 [ 230.372883][T11363] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.372919][T11363] netlink_unicast+0x7f6/0x990 [ 230.372958][T11363] ? __pfx_netlink_unicast+0x10/0x10 [ 230.372986][T11363] ? __virt_addr_valid+0x45f/0x530 [ 230.373008][T11363] ? __phys_addr_symbol+0x2f/0x70 [ 230.373028][T11363] ? __check_object_size+0x47a/0x730 [ 230.373062][T11363] netlink_sendmsg+0x8de/0xcb0 [ 230.373095][T11363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.373121][T11363] ? aa_sock_msg_perm+0x91/0x160 [ 230.373160][T11363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.373178][T11363] __sock_sendmsg+0x221/0x270 [ 230.373214][T11363] ____sys_sendmsg+0x53a/0x860 [ 230.373250][T11363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.373275][T11363] ? __fget_files+0x2a/0x410 [ 230.373309][T11363] ? __fget_files+0x2a/0x410 [ 230.373349][T11363] __sys_sendmsg+0x269/0x350 [ 230.373381][T11363] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.373421][T11363] ? do_sys_openat2+0x17a/0x1d0 [ 230.373481][T11363] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.373515][T11363] ? do_syscall_64+0x100/0x230 [ 230.373550][T11363] ? do_syscall_64+0xb6/0x230 [ 230.373585][T11363] do_syscall_64+0xf3/0x230 [ 230.373616][T11363] ? clear_bhb_loop+0x35/0x90 [ 230.373656][T11363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.373685][T11363] RIP: 0033:0x7f5eee58d169 [ 230.373703][T11363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.373722][T11363] RSP: 002b:00007f5eef30d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.373745][T11363] RAX: ffffffffffffffda RBX: 00007f5eee7a5fa0 RCX: 00007f5eee58d169 [ 230.373760][T11363] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 230.373773][T11363] RBP: 00007f5eef30d090 R08: 0000000000000000 R09: 0000000000000000 [ 230.373787][T11363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.373799][T11363] R13: 0000000000000000 R14: 00007f5eee7a5fa0 R15: 00007ffca825b608 [ 230.373830][T11363] [ 231.028758][T11371] 0·: renamed from hsr_slave_1 [ 231.065420][T11371] 0·: entered allmulticast mode [ 231.071147][T11371] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 231.240784][T11391] x_tables: duplicate underflow at hook 3 [ 231.279489][T11392] vlan3: entered allmulticast mode [ 231.298123][T11392] bond0: entered allmulticast mode [ 231.543550][T11404] FAULT_INJECTION: forcing a failure. [ 231.543550][T11404] name failslab, interval 1, probability 0, space 0, times 0 [ 231.556545][T11404] CPU: 1 UID: 0 PID: 11404 Comm: syz.0.1532 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 231.556572][T11404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.556585][T11404] Call Trace: [ 231.556593][T11404] [ 231.556601][T11404] dump_stack_lvl+0x241/0x360 [ 231.556633][T11404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.556658][T11404] ? __pfx__printk+0x10/0x10 [ 231.556682][T11404] ? __kmalloc_noprof+0xb5/0x4c0 [ 231.556712][T11404] ? __pfx___might_resched+0x10/0x10 [ 231.556746][T11404] should_fail_ex+0x40a/0x550 [ 231.556782][T11404] should_failslab+0xac/0x100 [ 231.556811][T11404] __kmalloc_noprof+0xdd/0x4c0 [ 231.556838][T11404] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 231.556866][T11404] ? nla_strdup+0x9c/0x140 [ 231.556886][T11404] ? __kvmalloc_node_noprof+0x72/0x190 [ 231.556923][T11404] nla_strdup+0x9c/0x140 [ 231.556950][T11404] nf_tables_newset+0x192e/0x3170 [ 231.556996][T11404] ? __pfx_nf_tables_newset+0x10/0x10 [ 231.557024][T11404] ? __pfx_lock_release+0x10/0x10 [ 231.557054][T11404] ? __skb_clone+0x5c/0x6c0 [ 231.557096][T11404] ? __nla_parse+0x40/0x60 [ 231.557125][T11404] nfnetlink_rcv+0x14e3/0x2ab0 [ 231.557186][T11404] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 231.557264][T11404] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.557305][T11404] ? skb_clone+0x240/0x390 [ 231.557332][T11404] ? __pfx_lock_release+0x10/0x10 [ 231.557379][T11404] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.557415][T11404] netlink_unicast+0x7f6/0x990 [ 231.557455][T11404] ? __pfx_netlink_unicast+0x10/0x10 [ 231.557482][T11404] ? __virt_addr_valid+0x45f/0x530 [ 231.557504][T11404] ? __phys_addr_symbol+0x2f/0x70 [ 231.557524][T11404] ? __check_object_size+0x47a/0x730 [ 231.557558][T11404] netlink_sendmsg+0x8de/0xcb0 [ 231.557591][T11404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.557617][T11404] ? aa_sock_msg_perm+0x91/0x160 [ 231.557656][T11404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.557674][T11404] __sock_sendmsg+0x221/0x270 [ 231.557710][T11404] ____sys_sendmsg+0x53a/0x860 [ 231.557745][T11404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.557769][T11404] ? __fget_files+0x2a/0x410 [ 231.557804][T11404] ? __fget_files+0x2a/0x410 [ 231.557845][T11404] __sys_sendmsg+0x269/0x350 [ 231.557877][T11404] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.557917][T11404] ? do_sys_openat2+0x17a/0x1d0 [ 231.557977][T11404] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.558011][T11404] ? do_syscall_64+0x100/0x230 [ 231.558045][T11404] ? do_syscall_64+0xb6/0x230 [ 231.558079][T11404] do_syscall_64+0xf3/0x230 [ 231.558110][T11404] ? clear_bhb_loop+0x35/0x90 [ 231.558143][T11404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.558171][T11404] RIP: 0033:0x7f0f5658d169 [ 231.558190][T11404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.558209][T11404] RSP: 002b:00007f0f57371038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.558232][T11404] RAX: ffffffffffffffda RBX: 00007f0f567a5fa0 RCX: 00007f0f5658d169 [ 231.558248][T11404] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 231.558261][T11404] RBP: 00007f0f57371090 R08: 0000000000000000 R09: 0000000000000000 [ 231.558273][T11404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.558286][T11404] R13: 0000000000000000 R14: 00007f0f567a5fa0 R15: 00007ffdde28e7d8 [ 231.558323][T11404] [ 232.572569][T11436] __nla_validate_parse: 9 callbacks suppressed [ 232.572584][T11436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1540'. [ 234.438469][T11444] FAULT_INJECTION: forcing a failure. [ 234.438469][T11444] name failslab, interval 1, probability 0, space 0, times 0 [ 234.452388][T11444] CPU: 0 UID: 0 PID: 11444 Comm: syz.1.1544 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 234.452418][T11444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.452431][T11444] Call Trace: [ 234.452439][T11444] [ 234.452447][T11444] dump_stack_lvl+0x241/0x360 [ 234.452480][T11444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.452504][T11444] ? __pfx__printk+0x10/0x10 [ 234.452527][T11444] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 234.452562][T11444] ? __pfx___might_resched+0x10/0x10 [ 234.452588][T11444] ? vsnprintf+0x1181/0x1220 [ 234.452616][T11444] should_fail_ex+0x40a/0x550 [ 234.452653][T11444] should_failslab+0xac/0x100 [ 234.452682][T11444] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 234.452713][T11444] ? kasprintf+0xd5/0x120 [ 234.452748][T11444] kvasprintf+0xdf/0x190 [ 234.452776][T11444] ? __kmalloc_noprof+0x285/0x4c0 [ 234.452803][T11444] ? nla_strdup+0x9c/0x140 [ 234.452824][T11444] ? nf_tables_newset+0x192e/0x3170 [ 234.452847][T11444] ? __pfx_kvasprintf+0x10/0x10 [ 234.452875][T11444] ? ____sys_sendmsg+0x53a/0x860 [ 234.452915][T11444] kasprintf+0xd5/0x120 [ 234.452951][T11444] ? __pfx_kasprintf+0x10/0x10 [ 234.452995][T11444] nf_tables_set_alloc_name+0x111/0x770 [ 234.453034][T11444] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 234.453065][T11444] ? __asan_memcpy+0x40/0x70 [ 234.453087][T11444] ? nla_strdup+0xb7/0x140 [ 234.453112][T11444] nf_tables_newset+0x194e/0x3170 [ 234.453156][T11444] ? __pfx_nf_tables_newset+0x10/0x10 [ 234.453184][T11444] ? __pfx_lock_release+0x10/0x10 [ 234.453230][T11444] ? __nla_parse+0x40/0x60 [ 234.453254][T11444] nfnetlink_rcv+0x14e3/0x2ab0 [ 234.453315][T11444] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 234.453382][T11444] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.453411][T11444] ? skb_clone+0x240/0x390 [ 234.453436][T11444] ? __pfx_lock_release+0x10/0x10 [ 234.453479][T11444] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.453514][T11444] netlink_unicast+0x7f6/0x990 [ 234.453552][T11444] ? __pfx_netlink_unicast+0x10/0x10 [ 234.453579][T11444] ? __virt_addr_valid+0x45f/0x530 [ 234.453600][T11444] ? __phys_addr_symbol+0x2f/0x70 [ 234.453618][T11444] ? __check_object_size+0x47a/0x730 [ 234.453651][T11444] netlink_sendmsg+0x8de/0xcb0 [ 234.453683][T11444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.453708][T11444] ? aa_sock_msg_perm+0x91/0x160 [ 234.453746][T11444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.453763][T11444] __sock_sendmsg+0x221/0x270 [ 234.453799][T11444] ____sys_sendmsg+0x53a/0x860 [ 234.453833][T11444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.453856][T11444] ? __fget_files+0x2a/0x410 [ 234.453889][T11444] ? __fget_files+0x2a/0x410 [ 234.453927][T11444] __sys_sendmsg+0x269/0x350 [ 234.453958][T11444] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.453997][T11444] ? do_sys_openat2+0x17a/0x1d0 [ 234.454054][T11444] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.454088][T11444] ? do_syscall_64+0x100/0x230 [ 234.454121][T11444] ? do_syscall_64+0xb6/0x230 [ 234.454173][T11444] do_syscall_64+0xf3/0x230 [ 234.454200][T11444] ? clear_bhb_loop+0x35/0x90 [ 234.454230][T11444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.454254][T11444] RIP: 0033:0x7fe43298d169 [ 234.454271][T11444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.454293][T11444] RSP: 002b:00007fe4337bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.454315][T11444] RAX: ffffffffffffffda RBX: 00007fe432ba5fa0 RCX: 00007fe43298d169 [ 234.454328][T11444] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 234.454339][T11444] RBP: 00007fe4337bc090 R08: 0000000000000000 R09: 0000000000000000 [ 234.454350][T11444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.454361][T11444] R13: 0000000000000000 R14: 00007fe432ba5fa0 R15: 00007fffe56c0ee8 [ 234.454387][T11444] [ 235.160519][ T3547] ip6erspan0: left promiscuous mode [ 235.170282][T11448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1545'. [ 235.513864][T11459] lo speed is unknown, defaulting to 1000 [ 235.540288][T11459] lo speed is unknown, defaulting to 1000 [ 235.677668][T11467] netlink: 'syz.0.1552': attribute type 21 has an invalid length. [ 235.699212][T11469] tipc: Started in network mode [ 235.704337][T11469] tipc: Node identity ac14140f, cluster identity 4711 [ 235.713607][T11469] tipc: Enabled bearer , priority 10 [ 235.730875][T11471] netlink: 'syz.0.1552': attribute type 21 has an invalid length. [ 235.823324][T11473] netlink: 'syz.3.1554': attribute type 26 has an invalid length. [ 235.898173][T11476] FAULT_INJECTION: forcing a failure. [ 235.898173][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 235.928368][T11476] CPU: 1 UID: 0 PID: 11476 Comm: syz.2.1555 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 235.928399][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.928413][T11476] Call Trace: [ 235.928420][T11476] [ 235.928429][T11476] dump_stack_lvl+0x241/0x360 [ 235.928461][T11476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.928486][T11476] ? __pfx__printk+0x10/0x10 [ 235.928510][T11476] ? __kmalloc_cache_noprof+0x48/0x390 [ 235.928542][T11476] ? __pfx___might_resched+0x10/0x10 [ 235.928575][T11476] should_fail_ex+0x40a/0x550 [ 235.928613][T11476] should_failslab+0xac/0x100 [ 235.928644][T11476] __kmalloc_cache_noprof+0x70/0x390 [ 235.928672][T11476] ? __nft_trans_set_add+0x60/0x6f0 [ 235.928721][T11476] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 235.928758][T11476] __nft_trans_set_add+0x60/0x6f0 [ 235.928791][T11476] nf_tables_newset+0x25fd/0x3170 [ 235.928837][T11476] ? __pfx_nf_tables_newset+0x10/0x10 [ 235.928867][T11476] ? __pfx_lock_release+0x10/0x10 [ 235.928936][T11476] ? __nla_parse+0x40/0x60 [ 235.928965][T11476] nfnetlink_rcv+0x14e3/0x2ab0 [ 235.928990][T11476] ? __pfx_validate_chain+0x10/0x10 [ 235.929053][T11476] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 235.929091][T11476] ? __lock_acquire+0x1397/0x2100 [ 235.929161][T11476] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.929196][T11476] ? __pfx_lock_release+0x10/0x10 [ 235.929244][T11476] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.929281][T11476] netlink_unicast+0x7f6/0x990 [ 235.929320][T11476] ? __pfx_netlink_unicast+0x10/0x10 [ 235.929348][T11476] ? __virt_addr_valid+0x45f/0x530 [ 235.929370][T11476] ? __phys_addr_symbol+0x2f/0x70 [ 235.929389][T11476] ? __check_object_size+0x47a/0x730 [ 235.929424][T11476] netlink_sendmsg+0x8de/0xcb0 [ 235.929459][T11476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.929484][T11476] ? aa_sock_msg_perm+0x91/0x160 [ 235.929525][T11476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.929544][T11476] __sock_sendmsg+0x221/0x270 [ 235.929579][T11476] ____sys_sendmsg+0x53a/0x860 [ 235.929614][T11476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.929639][T11476] ? __fget_files+0x2a/0x410 [ 235.929673][T11476] ? __fget_files+0x2a/0x410 [ 235.929715][T11476] __sys_sendmsg+0x269/0x350 [ 235.929747][T11476] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.929785][T11476] ? do_sys_openat2+0x17a/0x1d0 [ 235.929841][T11476] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.929875][T11476] ? do_syscall_64+0x100/0x230 [ 235.929917][T11476] ? do_syscall_64+0xb6/0x230 [ 235.929951][T11476] do_syscall_64+0xf3/0x230 [ 235.929982][T11476] ? clear_bhb_loop+0x35/0x90 [ 235.930016][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.930045][T11476] RIP: 0033:0x7f714998d169 [ 235.930063][T11476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.930081][T11476] RSP: 002b:00007f714a714038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.930104][T11476] RAX: ffffffffffffffda RBX: 00007f7149ba5fa0 RCX: 00007f714998d169 [ 235.930120][T11476] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 235.930133][T11476] RBP: 00007f714a714090 R08: 0000000000000000 R09: 0000000000000000 [ 235.930145][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.930156][T11476] R13: 0000000000000000 R14: 00007f7149ba5fa0 R15: 00007ffef83faf38 [ 235.930187][T11476] [ 236.299420][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 236.310579][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 236.502231][T11491] sctp: [Deprecated]: syz.1.1558 (pid 11491) Use of int in max_burst socket option. [ 236.502231][T11491] Use struct sctp_assoc_value instead [ 236.831284][ T7717] tipc: Node number set to 2886997007 [ 236.861100][T11505] netlink: 'syz.3.1563': attribute type 16 has an invalid length. [ 236.869038][T11505] netlink: 'syz.3.1563': attribute type 17 has an invalid length. [ 236.934710][T11505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.949348][T11505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.828135][T11531] FAULT_INJECTION: forcing a failure. [ 237.828135][T11531] name failslab, interval 1, probability 0, space 0, times 0 [ 237.831955][T11529] sctp: [Deprecated]: syz.2.1574 (pid 11529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.831955][T11529] Use struct sctp_sack_info instead [ 237.870030][T11531] CPU: 0 UID: 0 PID: 11531 Comm: syz.0.1570 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 237.870063][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.870075][T11531] Call Trace: [ 237.870083][T11531] [ 237.870092][T11531] dump_stack_lvl+0x241/0x360 [ 237.870125][T11531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.870149][T11531] ? __pfx__printk+0x10/0x10 [ 237.870173][T11531] ? __kmalloc_cache_noprof+0x48/0x390 [ 237.870205][T11531] ? __pfx___might_resched+0x10/0x10 [ 237.870237][T11531] should_fail_ex+0x40a/0x550 [ 237.870275][T11531] should_failslab+0xac/0x100 [ 237.870306][T11531] __kmalloc_cache_noprof+0x70/0x390 [ 237.870335][T11531] ? __nft_trans_set_add+0x60/0x6f0 [ 237.870359][T11531] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 237.870395][T11531] __nft_trans_set_add+0x60/0x6f0 [ 237.870428][T11531] nf_tables_newset+0x25fd/0x3170 [ 237.870473][T11531] ? __pfx_nf_tables_newset+0x10/0x10 [ 237.870503][T11531] ? __pfx_lock_release+0x10/0x10 [ 237.870534][T11531] ? __skb_clone+0x5c/0x6c0 [ 237.870576][T11531] ? __nla_parse+0x40/0x60 [ 237.870604][T11531] nfnetlink_rcv+0x14e3/0x2ab0 [ 237.870665][T11531] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 237.870741][T11531] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.870773][T11531] ? skb_clone+0x240/0x390 [ 237.870801][T11531] ? __pfx_lock_release+0x10/0x10 [ 237.870847][T11531] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.870883][T11531] netlink_unicast+0x7f6/0x990 [ 237.870923][T11531] ? __pfx_netlink_unicast+0x10/0x10 [ 237.870950][T11531] ? __virt_addr_valid+0x45f/0x530 [ 237.870971][T11531] ? __phys_addr_symbol+0x2f/0x70 [ 237.870997][T11531] ? __check_object_size+0x47a/0x730 [ 237.871031][T11531] netlink_sendmsg+0x8de/0xcb0 [ 237.871064][T11531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.871090][T11531] ? aa_sock_msg_perm+0x91/0x160 [ 237.871130][T11531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.871148][T11531] __sock_sendmsg+0x221/0x270 [ 237.871184][T11531] ____sys_sendmsg+0x53a/0x860 [ 237.871220][T11531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.871244][T11531] ? __fget_files+0x2a/0x410 [ 237.871279][T11531] ? __fget_files+0x2a/0x410 [ 237.871320][T11531] __sys_sendmsg+0x269/0x350 [ 237.871351][T11531] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.871392][T11531] ? do_sys_openat2+0x17a/0x1d0 [ 237.871450][T11531] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.871484][T11531] ? do_syscall_64+0x100/0x230 [ 237.871519][T11531] ? do_syscall_64+0xb6/0x230 [ 237.871553][T11531] do_syscall_64+0xf3/0x230 [ 237.871584][T11531] ? clear_bhb_loop+0x35/0x90 [ 237.871617][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.871646][T11531] RIP: 0033:0x7f0f5658d169 [ 237.871664][T11531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.871682][T11531] RSP: 002b:00007f0f57371038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.871704][T11531] RAX: ffffffffffffffda RBX: 00007f0f567a5fa0 RCX: 00007f0f5658d169 [ 237.871719][T11531] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 237.871732][T11531] RBP: 00007f0f57371090 R08: 0000000000000000 R09: 0000000000000000 [ 237.871746][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.871758][T11531] R13: 0000000000000000 R14: 00007f0f567a5fa0 R15: 00007ffdde28e7d8 [ 237.871789][T11531] [ 238.777600][T11568] netlink: 'syz.3.1585': attribute type 10 has an invalid length. [ 238.793362][T11570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.873137][T11568] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 238.941018][T11568] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 238.981015][T11568] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 238.997607][T11568] team0: Port device wlan1 added [ 239.043040][T11580] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1588'. [ 239.095203][T11582] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1588'. [ 239.142624][T11580] gretap0: entered promiscuous mode [ 239.151782][T11584] FAULT_INJECTION: forcing a failure. [ 239.151782][T11584] name failslab, interval 1, probability 0, space 0, times 0 [ 239.169739][T11582] 0ªX¹¦D: renamed from gretap0 [ 239.177183][T11584] CPU: 0 UID: 0 PID: 11584 Comm: syz.3.1590 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 239.177214][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.177227][T11584] Call Trace: [ 239.177234][T11584] [ 239.177243][T11584] dump_stack_lvl+0x241/0x360 [ 239.177275][T11584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.177308][T11584] ? __pfx__printk+0x10/0x10 [ 239.177332][T11584] ? __kmalloc_cache_noprof+0x48/0x390 [ 239.177365][T11584] ? __pfx___might_resched+0x10/0x10 [ 239.177398][T11584] should_fail_ex+0x40a/0x550 [ 239.177437][T11584] should_failslab+0xac/0x100 [ 239.177468][T11584] __kmalloc_cache_noprof+0x70/0x390 [ 239.177497][T11584] ? __nft_trans_set_add+0x60/0x6f0 [ 239.177521][T11584] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 239.177556][T11584] __nft_trans_set_add+0x60/0x6f0 [ 239.177590][T11584] nf_tables_newset+0x25fd/0x3170 [ 239.177636][T11584] ? __pfx_nf_tables_newset+0x10/0x10 [ 239.177666][T11584] ? __pfx_lock_release+0x10/0x10 [ 239.177715][T11584] ? __nla_parse+0x40/0x60 [ 239.177743][T11584] nfnetlink_rcv+0x14e3/0x2ab0 [ 239.177805][T11584] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 239.177895][T11584] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.177927][T11584] ? skb_clone+0x240/0x390 [ 239.177955][T11584] ? __pfx_lock_release+0x10/0x10 [ 239.178003][T11584] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.178039][T11584] netlink_unicast+0x7f6/0x990 [ 239.178084][T11584] ? __pfx_netlink_unicast+0x10/0x10 [ 239.178112][T11584] ? __virt_addr_valid+0x45f/0x530 [ 239.178134][T11584] ? __phys_addr_symbol+0x2f/0x70 [ 239.178153][T11584] ? __check_object_size+0x47a/0x730 [ 239.178187][T11584] netlink_sendmsg+0x8de/0xcb0 [ 239.178221][T11584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.178247][T11584] ? aa_sock_msg_perm+0x91/0x160 [ 239.178287][T11584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.178305][T11584] __sock_sendmsg+0x221/0x270 [ 239.178341][T11584] ____sys_sendmsg+0x53a/0x860 [ 239.178377][T11584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.178401][T11584] ? __fget_files+0x2a/0x410 [ 239.178436][T11584] ? __fget_files+0x2a/0x410 [ 239.178477][T11584] __sys_sendmsg+0x269/0x350 [ 239.178509][T11584] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.178550][T11584] ? do_sys_openat2+0x17a/0x1d0 [ 239.178609][T11584] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.178645][T11584] ? do_syscall_64+0x100/0x230 [ 239.178680][T11584] ? do_syscall_64+0xb6/0x230 [ 239.178715][T11584] do_syscall_64+0xf3/0x230 [ 239.178746][T11584] ? clear_bhb_loop+0x35/0x90 [ 239.178780][T11584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.178808][T11584] RIP: 0033:0x7f5eee58d169 [ 239.178827][T11584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.178844][T11584] RSP: 002b:00007f5eef30d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.178873][T11584] RAX: ffffffffffffffda RBX: 00007f5eee7a5fa0 RCX: 00007f5eee58d169 [ 239.178888][T11584] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 239.178901][T11584] RBP: 00007f5eef30d090 R08: 0000000000000000 R09: 0000000000000000 [ 239.178914][T11584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.178926][T11584] R13: 0000000000000000 R14: 00007f5eee7a5fa0 R15: 00007ffca825b608 [ 239.178958][T11584] [ 239.537137][T11582] 0ªX¹¦D: left promiscuous mode [ 239.554842][T11582] 0ªX¹¦D: entered allmulticast mode [ 239.589282][T11582] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 239.655774][T11586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1589'. [ 239.873779][T11602] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1593'. [ 239.988145][T11608] sctp: [Deprecated]: syz.0.1594 (pid 11608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.988145][T11608] Use struct sctp_sack_info instead [ 240.028557][T11602] vti0: entered promiscuous mode [ 240.100455][T11608] trusted_key: syz.0.1594 sent an empty control message without MSG_MORE. [ 240.227049][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 240.404333][T11617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1597'. [ 240.436032][T11617] netlink: 'syz.2.1597': attribute type 1 has an invalid length. [ 240.469129][T11621] sctp: [Deprecated]: syz.4.1596 (pid 11621) Use of int in maxseg socket option. [ 240.469129][T11621] Use struct sctp_assoc_value instead [ 240.579076][T11624] bond2: (slave gretap1): making interface the new active one [ 240.645767][T11617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1597'. [ 240.668821][T11624] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 240.850061][T11633] FAULT_INJECTION: forcing a failure. [ 240.850061][T11633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.872471][T11636] netlink: 'syz.1.1601': attribute type 15 has an invalid length. [ 240.890018][T11636] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1601'. [ 240.905346][T11638] smc: net device bond0 erased user defined pnetid SYZ2 [ 240.945342][T11633] CPU: 0 UID: 0 PID: 11633 Comm: syz.4.1602 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 240.945376][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.945389][T11633] Call Trace: [ 240.945397][T11633] [ 240.945406][T11633] dump_stack_lvl+0x241/0x360 [ 240.945439][T11633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.945463][T11633] ? __pfx__printk+0x10/0x10 [ 240.945498][T11633] ? snprintf+0xda/0x120 [ 240.945526][T11633] should_fail_ex+0x40a/0x550 [ 240.945564][T11633] _copy_to_user+0x31/0xb0 [ 240.945597][T11633] simple_read_from_buffer+0xca/0x150 [ 240.945631][T11633] proc_fail_nth_read+0x1e9/0x250 [ 240.945666][T11633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.945700][T11633] ? rw_verify_area+0x243/0x630 [ 240.945722][T11633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.945755][T11633] vfs_read+0x1f8/0xb40 [ 240.945778][T11633] ? fdget_pos+0x254/0x320 [ 240.945811][T11633] ? __pfx___mutex_lock+0x10/0x10 [ 240.945843][T11633] ? __pfx_vfs_read+0x10/0x10 [ 240.945862][T11633] ? do_sys_openat2+0x17a/0x1d0 [ 240.945897][T11633] ? __fget_files+0x2a/0x410 [ 240.945930][T11633] ? __fget_files+0x395/0x410 [ 240.945960][T11633] ? __fget_files+0x2a/0x410 [ 240.946001][T11633] ksys_read+0x18f/0x2b0 [ 240.946026][T11633] ? __pfx_ksys_read+0x10/0x10 [ 240.946049][T11633] ? do_syscall_64+0x100/0x230 [ 240.946084][T11633] ? do_syscall_64+0xb6/0x230 [ 240.946120][T11633] do_syscall_64+0xf3/0x230 [ 240.946152][T11633] ? clear_bhb_loop+0x35/0x90 [ 240.946185][T11633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.946213][T11633] RIP: 0033:0x7fb45c98bb7c [ 240.946232][T11633] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.946249][T11633] RSP: 002b:00007fb45d7d9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.946272][T11633] RAX: ffffffffffffffda RBX: 00007fb45cba5fa0 RCX: 00007fb45c98bb7c [ 240.946287][T11633] RDX: 000000000000000f RSI: 00007fb45d7d90a0 RDI: 0000000000000004 [ 240.946300][T11633] RBP: 00007fb45d7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 240.946313][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.946325][T11633] R13: 0000000000000000 R14: 00007fb45cba5fa0 R15: 00007fffa4bc5848 [ 240.946357][T11633] [ 241.672456][T11669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1611'. [ 241.683224][T11669] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 241.696975][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 241.781948][T11673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 241.792771][T11673] gretap2: entered promiscuous mode [ 242.042123][T11680] netlink: 'syz.3.1614': attribute type 10 has an invalid length. [ 242.063635][T11680] macvlan0: entered allmulticast mode [ 242.081222][T11680] veth1_vlan: entered allmulticast mode [ 242.112119][T11680] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 242.381447][T11694] x_tables: duplicate underflow at hook 1 [ 242.546301][T11705] lo speed is unknown, defaulting to 1000 [ 242.574741][T11705] lo speed is unknown, defaulting to 1000 [ 242.681411][T11715] openvswitch: netlink: Unknown key attributes 20 [ 242.966408][T11730] netlink: 'syz.3.1632': attribute type 10 has an invalid length. [ 243.874513][T11769] bond0: (slave macvlan0): Releasing backup interface [ 243.910613][T11770] netlink: 'syz.3.1642': attribute type 10 has an invalid length. [ 243.930372][T11769] veth1_vlan: left allmulticast mode [ 243.956974][T11769] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 243.980056][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 244.011589][T11769] team0: Port device wlan1 removed [ 244.036130][T11770] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 244.062410][T11776] lo speed is unknown, defaulting to 1000 [ 244.099524][T11773] lo speed is unknown, defaulting to 1000 [ 244.109192][T11776] lo speed is unknown, defaulting to 1000 [ 244.213977][T11777] __nla_validate_parse: 7 callbacks suppressed [ 244.214001][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'. [ 244.805063][T11801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1650'. [ 244.815081][T11773] lo speed is unknown, defaulting to 1000 [ 245.372820][T11804] lo speed is unknown, defaulting to 1000 [ 245.441330][T11813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1652'. [ 245.512765][T11816] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1652'. [ 245.530008][T11797] lo speed is unknown, defaulting to 1000 [ 245.543293][T11813] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.564975][T11804] lo speed is unknown, defaulting to 1000 [ 245.576849][T11805] lo speed is unknown, defaulting to 1000 [ 245.618975][T11813] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.707181][T11813] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.727737][T11818] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1653'. [ 245.773109][T11818] vlan3: entered allmulticast mode [ 245.778340][T11818] batadv0: entered allmulticast mode [ 245.862293][T11813] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.883137][T11806] veth0_vlan: entered allmulticast mode [ 245.888990][T11797] lo speed is unknown, defaulting to 1000 [ 245.986102][T11813] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.009089][T11813] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.137738][T11813] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.200983][T11813] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.282858][T11805] lo speed is unknown, defaulting to 1000 [ 246.452715][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1656'. [ 246.778467][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 247.180996][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 248.480602][T11872] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 248.546225][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 248.632087][T11879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1674'. [ 248.757628][T11892] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1675'. [ 248.893781][T11880] bond0: (slave macvlan0): Releasing backup interface [ 249.099630][T11880] veth1_vlan: left allmulticast mode [ 249.596330][T11909] lo speed is unknown, defaulting to 1000 [ 249.636252][T11909] lo speed is unknown, defaulting to 1000 [ 249.686443][T11913] pim6reg1: entered promiscuous mode [ 249.720612][T11913] pim6reg1: entered allmulticast mode [ 249.887339][T11919] lo speed is unknown, defaulting to 1000 [ 250.196825][T11919] lo speed is unknown, defaulting to 1000 [ 250.281690][T11935] __nla_validate_parse: 1 callbacks suppressed [ 250.281713][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 250.314374][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'. [ 250.364458][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'. [ 250.400825][T11940] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1688'. [ 250.411856][T11935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1690'. [ 251.320986][T11954] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 251.780783][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 251.802090][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 251.950924][T11982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1702'. [ 252.214071][T11996] pimreg: entered allmulticast mode [ 252.231858][T11996] 8021q: VLANs not supported on pimreg [ 252.265522][T11996] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 252.273620][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1707'. [ 252.294495][T11998] pimreg: left allmulticast mode [ 252.295917][T12001] siw: device registration error -23 [ 252.308767][T12001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1706'. [ 252.517719][T12014] x_tables: duplicate underflow at hook 1 [ 252.535967][T12014] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 252.690081][T12018] pim6reg1: entered promiscuous mode [ 252.696094][T12020] FAULT_INJECTION: forcing a failure. [ 252.696094][T12020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.709395][T12018] pim6reg1: entered allmulticast mode [ 252.718913][T12020] CPU: 1 UID: 0 PID: 12020 Comm: syz.4.1715 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 252.718942][T12020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.718956][T12020] Call Trace: [ 252.718964][T12020] [ 252.718972][T12020] dump_stack_lvl+0x241/0x360 [ 252.719003][T12020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.719026][T12020] ? __pfx__printk+0x10/0x10 [ 252.719050][T12020] ? __pfx_lock_release+0x10/0x10 [ 252.719091][T12020] should_fail_ex+0x40a/0x550 [ 252.719129][T12020] _copy_from_iter+0x1df/0x1c40 [ 252.719156][T12020] ? __virt_addr_valid+0x183/0x530 [ 252.719176][T12020] ? __pfx_lock_release+0x10/0x10 [ 252.719214][T12020] ? __alloc_skb+0x28f/0x440 [ 252.719247][T12020] ? __pfx__copy_from_iter+0x10/0x10 [ 252.719275][T12020] ? __virt_addr_valid+0x183/0x530 [ 252.719294][T12020] ? __virt_addr_valid+0x183/0x530 [ 252.719313][T12020] ? __virt_addr_valid+0x45f/0x530 [ 252.719334][T12020] ? __phys_addr_symbol+0x2f/0x70 [ 252.719353][T12020] ? __check_object_size+0x47a/0x730 [ 252.719388][T12020] netlink_sendmsg+0x742/0xcb0 [ 252.719424][T12020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.719448][T12020] ? aa_sock_msg_perm+0x91/0x160 [ 252.719487][T12020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.719506][T12020] __sock_sendmsg+0x221/0x270 [ 252.719540][T12020] ____sys_sendmsg+0x53a/0x860 [ 252.719575][T12020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.719599][T12020] ? __fget_files+0x2a/0x410 [ 252.719633][T12020] ? __fget_files+0x2a/0x410 [ 252.719672][T12020] __sys_sendmsg+0x269/0x350 [ 252.719711][T12020] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.719749][T12020] ? do_sys_openat2+0x17a/0x1d0 [ 252.719804][T12020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.719837][T12020] ? do_syscall_64+0x100/0x230 [ 252.719871][T12020] ? do_syscall_64+0xb6/0x230 [ 252.719905][T12020] do_syscall_64+0xf3/0x230 [ 252.719936][T12020] ? clear_bhb_loop+0x35/0x90 [ 252.719970][T12020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.719998][T12020] RIP: 0033:0x7fb45c98d169 [ 252.720017][T12020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.720052][T12020] RSP: 002b:00007fb45d7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.720076][T12020] RAX: ffffffffffffffda RBX: 00007fb45cba5fa0 RCX: 00007fb45c98d169 [ 252.720093][T12020] RDX: 0000000004000804 RSI: 0000200000000400 RDI: 0000000000000006 [ 252.720106][T12020] RBP: 00007fb45d7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 252.720118][T12020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.720131][T12020] R13: 0000000000000000 R14: 00007fb45cba5fa0 R15: 00007fffa4bc5848 [ 252.720160][T12020] [ 252.838807][T12024] netlink: 'syz.1.1717': attribute type 13 has an invalid length. [ 253.181003][T12031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.439181][T12047] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.467318][T12047] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.478276][T12047] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.497171][T12047] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.516753][T12047] geneve1: left promiscuous mode [ 253.573033][T12054] x_tables: duplicate underflow at hook 4 [ 253.821966][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 254.304063][T12092] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 254.638477][T12083] IPv6: NLM_F_REPLACE set, but no existing node found! [ 255.701467][T12138] IPVS: Error joining to the multicast group [ 255.770992][T12142] netlink: 'syz.3.1753': attribute type 58 has an invalid length. [ 255.800292][T12142] __nla_validate_parse: 5 callbacks suppressed [ 255.800314][T12142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1753'. [ 256.399416][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 256.409125][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 256.589718][T12167] lo speed is unknown, defaulting to 1000 [ 256.625238][T12173] ax25_connect(): syz.4.1765 uses autobind, please contact jreuter@yaina.de [ 256.663687][T12167] lo speed is unknown, defaulting to 1000 [ 256.845066][T12177] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 256.861543][T12177] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1766'. [ 256.875007][T12177] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1766'. [ 256.908459][T12177] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1766'. [ 257.357330][T12196] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 257.507765][T12200] lo speed is unknown, defaulting to 1000 [ 257.537255][T12200] lo speed is unknown, defaulting to 1000 [ 257.833912][T12216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1775'. [ 257.893720][T12216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1775'. [ 257.926553][T12218] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 258.094850][T12220] xt_hashlimit: size too large, truncated to 1048576 [ 258.122549][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'. [ 258.136827][T12220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1777'. [ 258.342978][T12224] lo speed is unknown, defaulting to 1000 [ 258.382683][T12224] lo speed is unknown, defaulting to 1000 [ 259.224215][T12264] 8021q: VLANs not supported on ip6tnl0 [ 259.453754][T12273] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 259.509299][T12273] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 259.661344][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 259.979392][T12298] FAULT_INJECTION: forcing a failure. [ 259.979392][T12298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.005217][T12298] CPU: 0 UID: 0 PID: 12298 Comm: syz.4.1801 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 260.005250][T12298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.005263][T12298] Call Trace: [ 260.005271][T12298] [ 260.005279][T12298] dump_stack_lvl+0x241/0x360 [ 260.005312][T12298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.005335][T12298] ? __pfx__printk+0x10/0x10 [ 260.005359][T12298] ? __pfx_lock_release+0x10/0x10 [ 260.005401][T12298] should_fail_ex+0x40a/0x550 [ 260.005438][T12298] _copy_from_user+0x2d/0xb0 [ 260.005469][T12298] copy_msghdr_from_user+0xae/0x680 [ 260.005508][T12298] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 260.005539][T12298] ? __fget_files+0x2a/0x410 [ 260.005569][T12298] ? __fget_files+0x2a/0x410 [ 260.005609][T12298] __sys_sendmsg+0x209/0x350 [ 260.005639][T12298] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.005677][T12298] ? do_sys_openat2+0x17a/0x1d0 [ 260.005734][T12298] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.005779][T12298] ? do_syscall_64+0x100/0x230 [ 260.005815][T12298] ? do_syscall_64+0xb6/0x230 [ 260.005849][T12298] do_syscall_64+0xf3/0x230 [ 260.005879][T12298] ? clear_bhb_loop+0x35/0x90 [ 260.005913][T12298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.005942][T12298] RIP: 0033:0x7fb45c98d169 [ 260.005960][T12298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.005978][T12298] RSP: 002b:00007fb45d7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.006001][T12298] RAX: ffffffffffffffda RBX: 00007fb45cba5fa0 RCX: 00007fb45c98d169 [ 260.006016][T12298] RDX: 0000000000008044 RSI: 0000200000000000 RDI: 0000000000000003 [ 260.006030][T12298] RBP: 00007fb45d7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 260.006042][T12298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.006055][T12298] R13: 0000000000000000 R14: 00007fb45cba5fa0 R15: 00007fffa4bc5848 [ 260.006085][T12298] [ 260.252441][T12305] netlink: 'syz.3.1804': attribute type 10 has an invalid length. [ 260.264365][T12305] geneve0: entered promiscuous mode [ 260.271836][T12305] team0: Failed to send options change via netlink (err -105) [ 260.279355][T12305] team0: Port device geneve0 added [ 260.722674][T12316] lo speed is unknown, defaulting to 1000 [ 260.728993][T12326] tipc: Enabled bearer , priority 0 [ 260.776138][T12316] lo speed is unknown, defaulting to 1000 [ 260.787693][T12318] syzkaller0: entered promiscuous mode [ 260.822909][T12318] syzkaller0: entered allmulticast mode [ 260.847623][T12318] tipc: Resetting bearer [ 260.901887][T12317] tipc: Resetting bearer [ 262.062014][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 263.198652][T12317] tipc: Disabling bearer [ 263.212624][T12342] sch_fq: defrate 2048 ignored. [ 263.482612][T12349] FAULT_INJECTION: forcing a failure. [ 263.482612][T12349] name failslab, interval 1, probability 0, space 0, times 0 [ 263.534272][T12355] __nla_validate_parse: 10 callbacks suppressed [ 263.534294][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'. [ 263.540335][T12349] CPU: 0 UID: 0 PID: 12349 Comm: syz.1.1816 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 263.540371][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.540385][T12349] Call Trace: [ 263.540392][T12349] [ 263.540400][T12349] dump_stack_lvl+0x241/0x360 [ 263.540431][T12349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.540457][T12349] ? __pfx__printk+0x10/0x10 [ 263.540491][T12349] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 263.540526][T12349] ? __pfx___might_resched+0x10/0x10 [ 263.540555][T12349] ? aa_label_sk_perm+0x4f3/0x6c0 [ 263.540592][T12349] should_fail_ex+0x40a/0x550 [ 263.540632][T12349] should_failslab+0xac/0x100 [ 263.540664][T12349] kmem_cache_alloc_node_noprof+0x77/0x380 [ 263.540693][T12349] ? __alloc_skb+0x1c3/0x440 [ 263.540720][T12349] __alloc_skb+0x1c3/0x440 [ 263.540747][T12349] ? __pfx___alloc_skb+0x10/0x10 [ 263.540781][T12349] netlink_sendmsg+0x634/0xcb0 [ 263.540812][T12349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.540837][T12349] ? aa_sock_msg_perm+0x91/0x160 [ 263.540875][T12349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.540893][T12349] __sock_sendmsg+0x221/0x270 [ 263.540927][T12349] ____sys_sendmsg+0x53a/0x860 [ 263.540961][T12349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.540985][T12349] ? __fget_files+0x2a/0x410 [ 263.541018][T12349] ? __fget_files+0x2a/0x410 [ 263.541057][T12349] __sys_sendmsg+0x269/0x350 [ 263.541088][T12349] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.541131][T12349] ? do_sys_openat2+0x17a/0x1d0 [ 263.541187][T12349] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 263.541220][T12349] ? do_syscall_64+0x100/0x230 [ 263.541256][T12349] ? do_syscall_64+0xb6/0x230 [ 263.541291][T12349] do_syscall_64+0xf3/0x230 [ 263.541326][T12349] ? clear_bhb_loop+0x35/0x90 [ 263.541363][T12349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.541393][T12349] RIP: 0033:0x7fe43298d169 [ 263.541414][T12349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.541432][T12349] RSP: 002b:00007fe4337bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.541456][T12349] RAX: ffffffffffffffda RBX: 00007fe432ba5fa0 RCX: 00007fe43298d169 [ 263.541474][T12349] RDX: 0000000000008044 RSI: 0000200000000000 RDI: 0000000000000003 [ 263.541499][T12349] RBP: 00007fe4337bc090 R08: 0000000000000000 R09: 0000000000000000 [ 263.541513][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.541526][T12349] R13: 0000000000000000 R14: 00007fe432ba5fa0 R15: 00007fffe56c0ee8 [ 263.541558][T12349] [ 263.923819][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1817'. [ 264.005613][T12370] lo speed is unknown, defaulting to 1000 [ 264.012876][T12372] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 264.021086][T12370] lo speed is unknown, defaulting to 1000 [ 264.391121][T12383] sch_fq: defrate 62 ignored. [ 264.442700][T12385] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 264.508318][T12380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1825'. [ 264.834936][T12401] FAULT_INJECTION: forcing a failure. [ 264.834936][T12401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.861698][T12401] CPU: 0 UID: 0 PID: 12401 Comm: syz.3.1829 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 264.861729][T12401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.861743][T12401] Call Trace: [ 264.861750][T12401] [ 264.861759][T12401] dump_stack_lvl+0x241/0x360 [ 264.861792][T12401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.861816][T12401] ? __pfx__printk+0x10/0x10 [ 264.861840][T12401] ? __pfx_lock_release+0x10/0x10 [ 264.861881][T12401] should_fail_ex+0x40a/0x550 [ 264.861918][T12401] _copy_from_user+0x2d/0xb0 [ 264.861948][T12401] move_addr_to_kernel+0x82/0x150 [ 264.861981][T12401] __sys_sendto+0x268/0x4c0 [ 264.862010][T12401] ? __pfx___sys_sendto+0x10/0x10 [ 264.862059][T12401] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 264.862093][T12401] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.862126][T12401] ? exc_page_fault+0x590/0x8b0 [ 264.862158][T12401] __x64_sys_sendto+0xde/0x100 [ 264.862186][T12401] do_syscall_64+0xf3/0x230 [ 264.862216][T12401] ? clear_bhb_loop+0x35/0x90 [ 264.862249][T12401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.862277][T12401] RIP: 0033:0x7f5eee58effc [ 264.862296][T12401] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 264.862313][T12401] RSP: 002b:00007f5eec3d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 264.862335][T12401] RAX: ffffffffffffffda RBX: 00007f5eec3d3fc0 RCX: 00007f5eee58effc [ 264.862350][T12401] RDX: 0000000000000024 RSI: 00007f5eec3d4010 RDI: 0000000000000004 [ 264.862376][T12401] RBP: 0000000000000000 R08: 00007f5eec3d3f14 R09: 000000000000000c [ 264.862389][T12401] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 264.862401][T12401] R13: 00007f5eec3d3f68 R14: 00007f5eec3d4010 R15: 0000000000000000 [ 264.862432][T12401] [ 265.076528][T12378] lo speed is unknown, defaulting to 1000 [ 265.108058][T12393] lo speed is unknown, defaulting to 1000 [ 265.180643][T12378] lo speed is unknown, defaulting to 1000 [ 265.400344][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1831'. [ 265.508918][T12393] lo speed is unknown, defaulting to 1000 [ 265.793133][T12417] netlink: 756 bytes leftover after parsing attributes in process `syz.4.1833'. [ 265.983493][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 266.187223][T12438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1838'. [ 266.541156][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 266.572548][T12461] FAULT_INJECTION: forcing a failure. [ 266.572548][T12461] name failslab, interval 1, probability 0, space 0, times 0 [ 266.610156][T12461] CPU: 1 UID: 0 PID: 12461 Comm: syz.1.1842 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 266.610188][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.610202][T12461] Call Trace: [ 266.610209][T12461] [ 266.610218][T12461] dump_stack_lvl+0x241/0x360 [ 266.610250][T12461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.610274][T12461] ? __pfx__printk+0x10/0x10 [ 266.610298][T12461] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 266.610330][T12461] ? __pfx___might_resched+0x10/0x10 [ 266.610356][T12461] ? aa_label_sk_perm+0x4f3/0x6c0 [ 266.610391][T12461] should_fail_ex+0x40a/0x550 [ 266.610429][T12461] should_failslab+0xac/0x100 [ 266.610468][T12461] kmem_cache_alloc_node_noprof+0x77/0x380 [ 266.610498][T12461] ? __alloc_skb+0x1c3/0x440 [ 266.610526][T12461] __alloc_skb+0x1c3/0x440 [ 266.610556][T12461] ? __pfx___alloc_skb+0x10/0x10 [ 266.610587][T12461] netlink_sendmsg+0x634/0xcb0 [ 266.610619][T12461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.610644][T12461] ? aa_sock_msg_perm+0x91/0x160 [ 266.610681][T12461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.610699][T12461] __sock_sendmsg+0x221/0x270 [ 266.610734][T12461] __sys_sendto+0x363/0x4c0 [ 266.610763][T12461] ? __pfx___sys_sendto+0x10/0x10 [ 266.610812][T12461] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 266.610847][T12461] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.610879][T12461] ? exc_page_fault+0x590/0x8b0 [ 266.610911][T12461] __x64_sys_sendto+0xde/0x100 [ 266.610938][T12461] do_syscall_64+0xf3/0x230 [ 266.610970][T12461] ? clear_bhb_loop+0x35/0x90 [ 266.611002][T12461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.611031][T12461] RIP: 0033:0x7fe43298effc [ 266.611050][T12461] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 266.611067][T12461] RSP: 002b:00007fe433778ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 266.611091][T12461] RAX: ffffffffffffffda RBX: 00007fe433778fc0 RCX: 00007fe43298effc [ 266.611106][T12461] RDX: 0000000000000024 RSI: 00007fe433779010 RDI: 0000000000000004 [ 266.611119][T12461] RBP: 0000000000000000 R08: 00007fe433778f14 R09: 000000000000000c [ 266.611132][T12461] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 266.611144][T12461] R13: 00007fe433778f68 R14: 00007fe433779010 R15: 0000000000000000 [ 266.611174][T12461] [ 267.200905][T12465] lo speed is unknown, defaulting to 1000 [ 267.210824][T12442] lo speed is unknown, defaulting to 1000 [ 267.326403][T12442] lo speed is unknown, defaulting to 1000 [ 267.545797][T12450] netlink: 'syz.4.1841': attribute type 1 has an invalid length. [ 267.630897][T12465] lo speed is unknown, defaulting to 1000 [ 267.754131][T12486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1851'. [ 267.909680][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 268.134345][T12486] lo speed is unknown, defaulting to 1000 [ 268.134374][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1852'. [ 268.212573][T12486] lo speed is unknown, defaulting to 1000 [ 268.597214][T12500] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 269.139099][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 269.553643][T12523] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 269.631669][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'. [ 269.691740][T12531] netlink: 'syz.4.1862': attribute type 1 has an invalid length. [ 269.860359][T12534] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.906533][T12534] bond4: (slave bond5): making interface the new active one [ 269.940562][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 269.954221][T12534] bond4: (slave bond5): Enslaving as an active interface with an up link [ 270.039518][T12546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1863'. [ 270.066813][T12548] ip6tnl3: entered promiscuous mode [ 270.282379][T12559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1868'. [ 270.365844][T12559] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1868'. [ 270.431471][T12559] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1868'. [ 270.483156][T12570] openvswitch: netlink: IP tunnel dst address not specified [ 270.564824][T12572] sit0: left promiscuous mode [ 270.598054][T12572] vlan0: left promiscuous mode [ 270.630100][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 270.706252][T12572] vti0: left promiscuous mode [ 270.726779][ T5951] lo speed is unknown, defaulting to 1000 [ 270.852387][T12589] netlink: 'syz.1.1875': attribute type 1 has an invalid length. [ 270.900525][T12576] lo speed is unknown, defaulting to 1000 [ 270.903446][T12588] netlink: 'syz.1.1875': attribute type 1 has an invalid length. [ 270.907490][T12576] lo speed is unknown, defaulting to 1000 [ 270.950420][T12591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1873'. [ 271.907421][T12602] FAULT_INJECTION: forcing a failure. [ 271.907421][T12602] name failslab, interval 1, probability 0, space 0, times 0 [ 271.929983][T12602] CPU: 0 UID: 0 PID: 12602 Comm: syz.2.1877 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 271.930015][T12602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 271.930029][T12602] Call Trace: [ 271.930037][T12602] [ 271.930046][T12602] dump_stack_lvl+0x241/0x360 [ 271.930078][T12602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.930102][T12602] ? __pfx__printk+0x10/0x10 [ 271.930127][T12602] ? __kmalloc_noprof+0xb5/0x4c0 [ 271.930158][T12602] ? __pfx___might_resched+0x10/0x10 [ 271.930187][T12602] ? genl_get_cmd+0x532/0xce0 [ 271.930217][T12602] should_fail_ex+0x40a/0x550 [ 271.930256][T12602] should_failslab+0xac/0x100 [ 271.930286][T12602] __kmalloc_noprof+0xdd/0x4c0 [ 271.930314][T12602] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 271.930346][T12602] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 271.930381][T12602] genl_rcv_msg+0x80b/0xec0 [ 271.930416][T12602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.930473][T12602] ? __pfx_lock_acquire+0x10/0x10 [ 271.930505][T12602] ? __pfx_ctrl_getfamily+0x10/0x10 [ 271.930531][T12602] ? __pfx___might_resched+0x10/0x10 [ 271.930571][T12602] netlink_rcv_skb+0x206/0x480 [ 271.930604][T12602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.930632][T12602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.930695][T12602] genl_rcv+0x28/0x40 [ 271.930719][T12602] netlink_unicast+0x7f6/0x990 [ 271.930758][T12602] ? __pfx_netlink_unicast+0x10/0x10 [ 271.930787][T12602] ? __virt_addr_valid+0x45f/0x530 [ 271.930810][T12602] ? __phys_addr_symbol+0x2f/0x70 [ 271.930829][T12602] ? __check_object_size+0x47a/0x730 [ 271.930863][T12602] netlink_sendmsg+0x8de/0xcb0 [ 271.930897][T12602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.930923][T12602] ? aa_sock_msg_perm+0x91/0x160 [ 271.930969][T12602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.930988][T12602] __sock_sendmsg+0x221/0x270 [ 271.931024][T12602] __sys_sendto+0x363/0x4c0 [ 271.931053][T12602] ? __pfx___sys_sendto+0x10/0x10 [ 271.931105][T12602] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 271.931141][T12602] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.931174][T12602] ? exc_page_fault+0x590/0x8b0 [ 271.931206][T12602] __x64_sys_sendto+0xde/0x100 [ 271.931233][T12602] do_syscall_64+0xf3/0x230 [ 271.931265][T12602] ? clear_bhb_loop+0x35/0x90 [ 271.931298][T12602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.931327][T12602] RIP: 0033:0x7f714998effc [ 271.931345][T12602] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 271.931363][T12602] RSP: 002b:00007f71477d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 271.931386][T12602] RAX: ffffffffffffffda RBX: 00007f71477d3fc0 RCX: 00007f714998effc [ 271.931401][T12602] RDX: 0000000000000024 RSI: 00007f71477d4010 RDI: 0000000000000004 [ 271.931414][T12602] RBP: 0000000000000000 R08: 00007f71477d3f14 R09: 000000000000000c [ 271.931427][T12602] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 271.931439][T12602] R13: 00007f71477d3f68 R14: 00007f71477d4010 R15: 0000000000000000 [ 271.931471][T12602] [ 272.010922][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'. [ 272.166716][T12609] bridge0: Device is already in use. [ 272.253694][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 273.252526][T12641] netlink: 'syz.4.1886': attribute type 1 has an invalid length. [ 273.382228][T12646] bond6: (slave gretap1): making interface the new active one [ 273.391162][T12646] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 273.675464][T12665] FAULT_INJECTION: forcing a failure. [ 273.675464][T12665] name failslab, interval 1, probability 0, space 0, times 0 [ 273.741047][T12665] CPU: 1 UID: 0 PID: 12665 Comm: syz.3.1890 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 273.741077][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.741091][T12665] Call Trace: [ 273.741097][T12665] [ 273.741106][T12665] dump_stack_lvl+0x241/0x360 [ 273.741138][T12665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.741162][T12665] ? __pfx__printk+0x10/0x10 [ 273.741186][T12665] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 273.741218][T12665] ? __pfx___might_resched+0x10/0x10 [ 273.741252][T12665] should_fail_ex+0x40a/0x550 [ 273.741289][T12665] should_failslab+0xac/0x100 [ 273.741319][T12665] kmem_cache_alloc_node_noprof+0x77/0x380 [ 273.741349][T12665] ? __alloc_skb+0x1c3/0x440 [ 273.741371][T12665] ? idr_get_next+0x3c6/0x4a0 [ 273.741403][T12665] __alloc_skb+0x1c3/0x440 [ 273.741432][T12665] ? __pfx___alloc_skb+0x10/0x10 [ 273.741464][T12665] ctrl_getfamily+0x48c/0x6b0 [ 273.741493][T12665] ? __pfx_ctrl_getfamily+0x10/0x10 [ 273.741518][T12665] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 273.741555][T12665] genl_rcv_msg+0xb1f/0xec0 [ 273.741589][T12665] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.741649][T12665] ? __pfx_lock_acquire+0x10/0x10 [ 273.741681][T12665] ? __pfx_ctrl_getfamily+0x10/0x10 [ 273.741706][T12665] ? __pfx___might_resched+0x10/0x10 [ 273.741745][T12665] netlink_rcv_skb+0x206/0x480 [ 273.741780][T12665] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.741808][T12665] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.741878][T12665] genl_rcv+0x28/0x40 [ 273.741901][T12665] netlink_unicast+0x7f6/0x990 [ 273.741937][T12665] ? __pfx_netlink_unicast+0x10/0x10 [ 273.741964][T12665] ? __virt_addr_valid+0x45f/0x530 [ 273.741986][T12665] ? __phys_addr_symbol+0x2f/0x70 [ 273.742005][T12665] ? __check_object_size+0x47a/0x730 [ 273.742039][T12665] netlink_sendmsg+0x8de/0xcb0 [ 273.742073][T12665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.742098][T12665] ? aa_sock_msg_perm+0x91/0x160 [ 273.742137][T12665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.742156][T12665] __sock_sendmsg+0x221/0x270 [ 273.742192][T12665] __sys_sendto+0x363/0x4c0 [ 273.742222][T12665] ? __pfx___sys_sendto+0x10/0x10 [ 273.742274][T12665] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.742310][T12665] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.742344][T12665] ? exc_page_fault+0x590/0x8b0 [ 273.742376][T12665] __x64_sys_sendto+0xde/0x100 [ 273.742404][T12665] do_syscall_64+0xf3/0x230 [ 273.742435][T12665] ? clear_bhb_loop+0x35/0x90 [ 273.742470][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.742498][T12665] RIP: 0033:0x7f5eee58effc [ 273.742517][T12665] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 273.742535][T12665] RSP: 002b:00007f5eec3f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 273.742558][T12665] RAX: ffffffffffffffda RBX: 00007f5eec3f4fc0 RCX: 00007f5eee58effc [ 273.742574][T12665] RDX: 0000000000000024 RSI: 00007f5eec3f5010 RDI: 0000000000000004 [ 273.742587][T12665] RBP: 0000000000000000 R08: 00007f5eec3f4f14 R09: 000000000000000c [ 273.742600][T12665] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 273.742613][T12665] R13: 00007f5eec3f4f68 R14: 00007f5eec3f5010 R15: 0000000000000000 [ 273.742645][T12665] [ 274.156765][T12678] __nla_validate_parse: 14 callbacks suppressed [ 274.156791][T12678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1895'. [ 274.382689][T12684] netlink: 'syz.0.1898': attribute type 7 has an invalid length. [ 274.393582][T12692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1901'. [ 274.456639][T12698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1898'. [ 274.794044][T12713] netlink: 'syz.2.1905': attribute type 4 has an invalid length. [ 274.804768][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1905'. [ 274.814823][T12713] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 274.847307][T12713] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 275.158407][T12729] lo speed is unknown, defaulting to 1000 [ 275.173453][T12729] lo speed is unknown, defaulting to 1000 [ 275.882388][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 275.893300][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1917'. [ 275.912825][T12760] netlink: 'syz.1.1917': attribute type 30 has an invalid length. [ 275.969064][T12760] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.977864][T12760] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.986384][T12760] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.994991][T12760] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.098496][T12769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.113508][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'. [ 276.123857][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'. [ 276.340239][T12784] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1922'. [ 276.432321][T12776] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 276.450550][T12776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.560654][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 276.591633][T12793] openvswitch: netlink: Message has 20 unknown bytes. [ 276.743053][T12797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.889565][T12809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.030915][T12816] sctp: [Deprecated]: syz.0.1931 (pid 12816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.030915][T12816] Use struct sctp_sack_info instead [ 277.153949][T12816] xt_CT: No such helper "pptp" [ 277.293180][T12831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.771627][T12864] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.943153][T12876] tipc: Enabling of bearer rejected, already enabled [ 278.221693][T12886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.662756][T12911] netlink: 'syz.3.1960': attribute type 15 has an invalid length. [ 278.692823][T12911] vlan5: entered allmulticast mode [ 278.703864][T12911] batadv0: entered allmulticast mode [ 278.906275][T12916] macvlan0: left allmulticast mode [ 278.911828][ T5853] Bluetooth: hci4: link tx timeout [ 278.917378][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 278.928379][ T5853] Bluetooth: hci4: link tx timeout [ 278.934244][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 278.941745][T12916] macvlan2: left promiscuous mode [ 278.988794][T12916] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.997501][T12916] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.006047][T12916] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.014903][T12916] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.437763][T12950] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004 [ 279.684489][T12956] lo speed is unknown, defaulting to 1000 [ 279.715070][T12959] netlink: 'syz.1.1971': attribute type 1 has an invalid length. [ 279.725382][T12959] netlink: 'syz.1.1971': attribute type 3 has an invalid length. [ 279.749972][T12959] __nla_validate_parse: 59 callbacks suppressed [ 279.749995][T12959] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1971'. [ 279.766109][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1970'. [ 279.775274][T12961] netlink: 'syz.4.1970': attribute type 7 has an invalid length. [ 279.789958][T12961] netlink: 'syz.4.1970': attribute type 8 has an invalid length. [ 279.797961][T12962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1970'. [ 279.799008][T12956] lo speed is unknown, defaulting to 1000 [ 279.814559][T12959] NCSI netlink: No device for ifindex 246 [ 279.822034][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1970'. [ 279.850077][T12962] netlink: 'syz.4.1970': attribute type 7 has an invalid length. [ 279.864041][T12962] netlink: 'syz.4.1970': attribute type 8 has an invalid length. [ 279.888473][T12961] team0: entered promiscuous mode [ 279.893819][T12961] team_slave_0: entered promiscuous mode [ 279.900834][T12961] team_slave_1: entered promiscuous mode [ 279.920175][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1970'. [ 279.920227][T12961] batadv0: entered promiscuous mode [ 280.006326][T12961] team0: left promiscuous mode [ 280.012397][T12961] team_slave_0: left promiscuous mode [ 280.020545][T12961] team_slave_1: left promiscuous mode [ 280.026255][T12961] batadv0: left promiscuous mode [ 280.121697][T12962] team0: entered promiscuous mode [ 280.127844][T12962] team_slave_0: entered promiscuous mode [ 280.134035][T12962] team_slave_1: entered promiscuous mode [ 280.144874][T12962] batadv0: entered promiscuous mode [ 280.176632][T12962] team0: left promiscuous mode [ 280.187486][T12962] team_slave_0: left promiscuous mode [ 280.202151][T12962] team_slave_1: left promiscuous mode [ 280.210855][T12962] batadv0: left promiscuous mode [ 280.225377][T12969] netlink: 'syz.3.1973': attribute type 8 has an invalid length. [ 280.247007][T12977] FAULT_INJECTION: forcing a failure. [ 280.247007][T12977] name failslab, interval 1, probability 0, space 0, times 0 [ 280.295231][T12977] CPU: 1 UID: 0 PID: 12977 Comm: syz.1.1975 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 280.295265][T12977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.295278][T12977] Call Trace: [ 280.295286][T12977] [ 280.295295][T12977] dump_stack_lvl+0x241/0x360 [ 280.295327][T12977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.295351][T12977] ? __pfx__printk+0x10/0x10 [ 280.295374][T12977] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 280.295407][T12977] ? __pfx___might_resched+0x10/0x10 [ 280.295441][T12977] should_fail_ex+0x40a/0x550 [ 280.295478][T12977] should_failslab+0xac/0x100 [ 280.295508][T12977] kmem_cache_alloc_node_noprof+0x77/0x380 [ 280.295538][T12977] ? __alloc_skb+0x1c3/0x440 [ 280.295566][T12977] __alloc_skb+0x1c3/0x440 [ 280.295595][T12977] ? __pfx___alloc_skb+0x10/0x10 [ 280.295625][T12977] ? netlink_ack_tlv_len+0x6e/0x200 [ 280.295661][T12977] netlink_ack+0x145/0xa60 [ 280.295691][T12977] ? __pfx_lock_acquire+0x10/0x10 [ 280.295722][T12977] ? __pfx_ctrl_getfamily+0x10/0x10 [ 280.295748][T12977] ? __pfx___might_resched+0x10/0x10 [ 280.295786][T12977] netlink_rcv_skb+0x294/0x480 [ 280.295820][T12977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.295848][T12977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.295912][T12977] genl_rcv+0x28/0x40 [ 280.295935][T12977] netlink_unicast+0x7f6/0x990 [ 280.295973][T12977] ? __pfx_netlink_unicast+0x10/0x10 [ 280.296001][T12977] ? __virt_addr_valid+0x45f/0x530 [ 280.296022][T12977] ? __phys_addr_symbol+0x2f/0x70 [ 280.296041][T12977] ? __check_object_size+0x47a/0x730 [ 280.296076][T12977] netlink_sendmsg+0x8de/0xcb0 [ 280.296110][T12977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.296135][T12977] ? aa_sock_msg_perm+0x91/0x160 [ 280.296183][T12977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.296202][T12977] __sock_sendmsg+0x221/0x270 [ 280.296240][T12977] __sys_sendto+0x363/0x4c0 [ 280.296269][T12977] ? __pfx___sys_sendto+0x10/0x10 [ 280.296320][T12977] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 280.296355][T12977] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.296388][T12977] ? exc_page_fault+0x590/0x8b0 [ 280.296420][T12977] __x64_sys_sendto+0xde/0x100 [ 280.296448][T12977] do_syscall_64+0xf3/0x230 [ 280.296479][T12977] ? clear_bhb_loop+0x35/0x90 [ 280.296512][T12977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.296541][T12977] RIP: 0033:0x7fe43298effc [ 280.296560][T12977] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 280.296577][T12977] RSP: 002b:00007fe433778ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 280.296600][T12977] RAX: ffffffffffffffda RBX: 00007fe433778fc0 RCX: 00007fe43298effc [ 280.296615][T12977] RDX: 0000000000000024 RSI: 00007fe433779010 RDI: 0000000000000004 [ 280.296628][T12977] RBP: 0000000000000000 R08: 00007fe433778f14 R09: 000000000000000c [ 280.296641][T12977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 280.296653][T12977] R13: 00007fe433778f68 R14: 00007fe433779010 R15: 0000000000000000 [ 280.296685][T12977] [ 280.895669][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 280.951811][T12992] netlink: 'syz.2.1982': attribute type 1 has an invalid length. [ 280.959606][T12992] netlink: 'syz.2.1982': attribute type 2 has an invalid length. [ 281.029948][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 281.265724][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1984'. [ 281.370855][T13011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1984'. [ 281.553516][T13017] FAULT_INJECTION: forcing a failure. [ 281.553516][T13017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.579667][T13017] CPU: 0 UID: 0 PID: 13017 Comm: syz.2.1987 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 281.579699][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.579712][T13017] Call Trace: [ 281.579719][T13017] [ 281.579728][T13017] dump_stack_lvl+0x241/0x360 [ 281.579763][T13017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.579786][T13017] ? __pfx__printk+0x10/0x10 [ 281.579809][T13017] ? __pfx_lock_release+0x10/0x10 [ 281.579850][T13017] should_fail_ex+0x40a/0x550 [ 281.579889][T13017] _copy_to_iter+0x1df/0x1c40 [ 281.579922][T13017] ? __virt_addr_valid+0x183/0x530 [ 281.579944][T13017] ? __pfx_lock_release+0x10/0x10 [ 281.579985][T13017] ? __pfx__copy_to_iter+0x10/0x10 [ 281.580012][T13017] ? __virt_addr_valid+0x183/0x530 [ 281.580032][T13017] ? __virt_addr_valid+0x183/0x530 [ 281.580050][T13017] ? __virt_addr_valid+0x45f/0x530 [ 281.580072][T13017] ? __check_object_size+0x47a/0x730 [ 281.580107][T13017] __skb_datagram_iter+0x107/0x900 [ 281.580138][T13017] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 281.580170][T13017] ? __pfx___might_resched+0x10/0x10 [ 281.580202][T13017] skb_copy_datagram_iter+0xd1/0x250 [ 281.580235][T13017] netlink_recvmsg+0x2d1/0x11a0 [ 281.580266][T13017] ? __pfx_netlink_recvmsg+0x10/0x10 [ 281.580291][T13017] ? __pfx_aa_sk_perm+0x10/0x10 [ 281.580326][T13017] ? __fget_files+0x2a/0x410 [ 281.580355][T13017] ? aa_sock_msg_perm+0x91/0x160 [ 281.580391][T13017] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 281.580417][T13017] ? __pfx_netlink_recvmsg+0x10/0x10 [ 281.580440][T13017] sock_recvmsg+0x22f/0x280 [ 281.580476][T13017] __sys_recvfrom+0x202/0x380 [ 281.580506][T13017] ? __pfx___sys_recvfrom+0x10/0x10 [ 281.580556][T13017] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.580591][T13017] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.580630][T13017] __x64_sys_recvfrom+0xde/0x100 [ 281.580657][T13017] do_syscall_64+0xf3/0x230 [ 281.580687][T13017] ? clear_bhb_loop+0x35/0x90 [ 281.580718][T13017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.580745][T13017] RIP: 0033:0x7f714998ef34 [ 281.580765][T13017] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 281.580782][T13017] RSP: 002b:00007f71477f4ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 281.580805][T13017] RAX: ffffffffffffffda RBX: 00007f71477f4fc0 RCX: 00007f714998ef34 [ 281.580820][T13017] RDX: 0000000000001000 RSI: 00007f71477f5010 RDI: 0000000000000004 [ 281.580834][T13017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.580846][T13017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 281.580859][T13017] R13: 00007f71477f4f68 R14: 00007f71477f5010 R15: 0000000000000000 [ 281.580889][T13017] [ 282.065190][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 282.074268][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 282.371359][T13042] bridge0: port 1(gretap0) entered blocking state [ 282.378141][T13042] bridge0: port 1(gretap0) entered disabled state [ 282.426779][T13042] gretap0: entered allmulticast mode [ 282.438943][T13042] gretap0: entered promiscuous mode [ 282.504531][T13044] vlan3: entered allmulticast mode [ 282.519935][T13044] ip6gretap0: entered allmulticast mode [ 282.765062][T13055] FAULT_INJECTION: forcing a failure. [ 282.765062][T13055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.855061][T13055] CPU: 0 UID: 0 PID: 13055 Comm: syz.0.1998 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 282.855093][T13055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.855106][T13055] Call Trace: [ 282.855114][T13055] [ 282.855123][T13055] dump_stack_lvl+0x241/0x360 [ 282.855156][T13055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.855180][T13055] ? __pfx__printk+0x10/0x10 [ 282.855208][T13055] ? snprintf+0xda/0x120 [ 282.855237][T13055] should_fail_ex+0x40a/0x550 [ 282.855275][T13055] _copy_to_user+0x31/0xb0 [ 282.855308][T13055] simple_read_from_buffer+0xca/0x150 [ 282.855341][T13055] proc_fail_nth_read+0x1e9/0x250 [ 282.855374][T13055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.855409][T13055] ? rw_verify_area+0x243/0x630 [ 282.855431][T13055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.855463][T13055] vfs_read+0x1f8/0xb40 [ 282.855487][T13055] ? fdget_pos+0x254/0x320 [ 282.855520][T13055] ? __pfx___mutex_lock+0x10/0x10 [ 282.855552][T13055] ? __pfx_vfs_read+0x10/0x10 [ 282.855578][T13055] ? __fget_files+0x2a/0x410 [ 282.855609][T13055] ? __fget_files+0x395/0x410 [ 282.855637][T13055] ? __fget_files+0x2a/0x410 [ 282.855679][T13055] ksys_read+0x18f/0x2b0 [ 282.855712][T13055] ? __pfx_ksys_read+0x10/0x10 [ 282.855735][T13055] ? do_syscall_64+0x100/0x230 [ 282.855769][T13055] ? do_syscall_64+0xb6/0x230 [ 282.855802][T13055] do_syscall_64+0xf3/0x230 [ 282.855832][T13055] ? clear_bhb_loop+0x35/0x90 [ 282.855865][T13055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.855892][T13055] RIP: 0033:0x7f0f5658bb7c [ 282.855911][T13055] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.855929][T13055] RSP: 002b:00007f0f57350030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.855952][T13055] RAX: ffffffffffffffda RBX: 00007f0f567a6080 RCX: 00007f0f5658bb7c [ 282.855968][T13055] RDX: 000000000000000f RSI: 00007f0f573500a0 RDI: 0000000000000003 [ 282.855981][T13055] RBP: 00007f0f57350090 R08: 0000000000000000 R09: 0000000000000000 [ 282.855994][T13055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.856006][T13055] R13: 0000000000000000 R14: 00007f0f567a6080 R15: 00007ffdde28e7d8 [ 282.856038][T13055] [ 283.249509][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 283.950114][T13079] ax25_connect(): syz.3.2005 uses autobind, please contact jreuter@yaina.de [ 284.628423][T13109] lo speed is unknown, defaulting to 1000 [ 284.651096][T13109] lo speed is unknown, defaulting to 1000 [ 284.986017][T13122] __nla_validate_parse: 6 callbacks suppressed [ 284.986038][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 285.331078][T13125] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2017'. [ 285.357601][T13129] xt_CONNSECMARK: invalid mode: 0 [ 285.636307][T13135] openvswitch: netlink: Message has 8 unknown bytes. [ 285.687150][T13135] validate_nla: 2 callbacks suppressed [ 285.687173][T13135] netlink: 'syz.3.2019': attribute type 12 has an invalid length. [ 286.359112][T13165] syzkaller0: entered allmulticast mode [ 286.439639][T13167] xt_TCPMSS: Only works on TCP SYN packets [ 286.470488][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2027'. [ 286.709527][T13175] tipc: Can't bind to reserved service type 2 [ 287.036454][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 287.077126][T13185] tipc: Enabling of bearer rejected, failed to enable media [ 287.391927][T13196] netlink: 'syz.2.2035': attribute type 11 has an invalid length. [ 287.694716][T13207] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2038'. [ 287.736973][T13207] GUP no longer grows the stack in syz.4.2038 (13207): 200000006000-20000000a000 (200000005000) [ 287.761230][T13207] CPU: 1 UID: 0 PID: 13207 Comm: syz.4.2038 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 287.761265][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.761280][T13207] Call Trace: [ 287.761287][T13207] [ 287.761296][T13207] dump_stack_lvl+0x241/0x360 [ 287.761331][T13207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.761365][T13207] ? __pfx__printk+0x10/0x10 [ 287.761384][T13207] ? find_vma+0xf9/0x170 [ 287.761418][T13207] __get_user_pages+0x3b07/0x4140 [ 287.761453][T13207] ? mark_lock+0x9a/0x360 [ 287.761502][T13207] ? __pfx___get_user_pages+0x10/0x10 [ 287.761523][T13207] ? __gup_longterm_locked+0xd2f/0x17f0 [ 287.761549][T13207] ? __pfx_down_read_killable+0x10/0x10 [ 287.761576][T13207] ? __pfx_lock_acquire+0x10/0x10 [ 287.761609][T13207] ? try_get_folio+0xf1/0x6f0 [ 287.761634][T13207] ? __pfx_lock_release+0x10/0x10 [ 287.761676][T13207] __gup_longterm_locked+0xe64/0x17f0 [ 287.761715][T13207] ? mark_lock+0x9a/0x360 [ 287.761741][T13207] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.761774][T13207] ? __pfx___gup_longterm_locked+0x10/0x10 [ 287.761799][T13207] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.761838][T13207] ? gup_fast_fallback+0x207e/0x29c0 [ 287.761864][T13207] gup_fast_fallback+0x2266/0x29c0 [ 287.761922][T13207] ? __pfx_gup_fast_fallback+0x10/0x10 [ 287.761944][T13207] ? __lock_acquire+0x1397/0x2100 [ 287.762014][T13207] ? is_valid_gup_args+0x124/0x200 [ 287.762040][T13207] get_user_pages_fast+0xcc/0x160 [ 287.762065][T13207] ? __pfx_get_user_pages_fast+0x10/0x10 [ 287.762089][T13207] ? rcu_is_watching+0x15/0xb0 [ 287.762114][T13207] ? trace_contention_end+0x3c/0x120 [ 287.762144][T13207] __iov_iter_get_pages_alloc+0x39c/0xa90 [ 287.762179][T13207] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.762210][T13207] ? __se_sys_vmsplice+0x4b7/0x14a0 [ 287.762250][T13207] iov_iter_get_pages2+0xcf/0x130 [ 287.762283][T13207] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 287.762326][T13207] __se_sys_vmsplice+0x739/0x14a0 [ 287.762362][T13207] ? plist_del+0x3f1/0x410 [ 287.762414][T13207] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 287.762448][T13207] ? __pfx_futex_wake+0x10/0x10 [ 287.762532][T13207] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.762573][T13207] ? do_syscall_64+0x100/0x230 [ 287.762610][T13207] ? do_syscall_64+0xb6/0x230 [ 287.762645][T13207] do_syscall_64+0xf3/0x230 [ 287.762677][T13207] ? clear_bhb_loop+0x35/0x90 [ 287.762712][T13207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.762741][T13207] RIP: 0033:0x7fb45c98d169 [ 287.762761][T13207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.762779][T13207] RSP: 002b:00007fb45d7d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 287.762803][T13207] RAX: ffffffffffffffda RBX: 00007fb45cba5fa0 RCX: 00007fb45c98d169 [ 287.762819][T13207] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000004a [ 287.762833][T13207] RBP: 00007fb45ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 287.762847][T13207] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 287.762859][T13207] R13: 0000000000000000 R14: 00007fb45cba5fa0 R15: 00007fffa4bc5848 [ 287.762892][T13207] [ 288.301166][T13210] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 288.620217][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 289.058422][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 289.120225][T13244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2049'. [ 289.136083][T13244] gtp0: entered promiscuous mode [ 289.151716][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 289.169989][T13244] gtp0: entered allmulticast mode [ 289.200965][T13251] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2052'. [ 289.219991][T13250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2049'. [ 289.325395][T13262] lo speed is unknown, defaulting to 1000 [ 289.412595][T13262] lo speed is unknown, defaulting to 1000 [ 289.946890][T13283] lo speed is unknown, defaulting to 1000 [ 289.973536][T13283] lo speed is unknown, defaulting to 1000 [ 289.996851][T13285] __nla_validate_parse: 1 callbacks suppressed [ 289.996872][T13285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2061'. [ 290.081328][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2061'. [ 290.159556][T13285] SET target dimension over the limit! [ 290.582312][T13303] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2065'. [ 290.939964][T13306] netlink: 'syz.4.2067': attribute type 9 has an invalid length. [ 291.459357][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 291.506453][T13333] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 291.534614][T13333] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 291.660043][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 291.751341][T13341] netlink: 'syz.4.2077': attribute type 1 has an invalid length. [ 291.780038][T13341] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2077'. [ 292.308401][T13362] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 292.325560][T13362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.370820][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 292.538406][T10887] gretap0: left allmulticast mode [ 292.559951][T10887] gretap0: left promiscuous mode [ 292.567371][T10887] bridge0: port 1(gretap0) entered disabled state [ 292.597923][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'. [ 292.597932][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'. [ 292.914029][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.933520][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.959059][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.979359][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.987793][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.006083][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.081910][T13394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2093'. [ 293.101170][T13394] netlink: 'syz.4.2093': attribute type 7 has an invalid length. [ 293.109102][T13394] netlink: 'syz.4.2093': attribute type 8 has an invalid length. [ 293.118329][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2093'. [ 293.449857][T10887] bond0 (unregistering): Released all slaves [ 293.584126][T10887] bond1 (unregistering): Released all slaves [ 293.595739][T10887] bond2 (unregistering): Released all slaves [ 293.614956][T13386] lo speed is unknown, defaulting to 1000 [ 293.625288][T13386] lo speed is unknown, defaulting to 1000 [ 293.625427][T13395] lo speed is unknown, defaulting to 1000 [ 293.680006][T13389] lo speed is unknown, defaulting to 1000 [ 293.731317][T10887] tipc: Disabling bearer [ 293.746817][T10887] tipc: Left network mode [ 293.835215][T10887] IPVS: stopping backup sync thread 8469 ... [ 294.282910][T13395] lo speed is unknown, defaulting to 1000 [ 295.029918][ T5850] Bluetooth: hci0: command tx timeout [ 295.097998][T13413] __nla_validate_parse: 1 callbacks suppressed [ 295.098021][T13413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2097'. [ 295.445613][T13389] lo speed is unknown, defaulting to 1000 [ 295.454118][T13422] team0: entered allmulticast mode [ 295.460093][T13408] lo speed is unknown, defaulting to 1000 [ 295.592488][T13427] Bluetooth: MGMT ver 1.23 [ 295.612293][T13413] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.633021][T13413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.791055][T13408] lo speed is unknown, defaulting to 1000 [ 296.004197][T13389] chnl_net:caif_netlink_parms(): no params data found [ 296.190580][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.228287][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.248169][T13389] bridge_slave_0: entered allmulticast mode [ 296.272706][T13389] bridge_slave_0: entered promiscuous mode [ 296.302478][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.326167][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.340245][T13389] bridge_slave_1: entered allmulticast mode [ 296.356548][T13443] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2104'. [ 296.367865][T13389] bridge_slave_1: entered promiscuous mode [ 296.395646][T13416] lo speed is unknown, defaulting to 1000 [ 296.474916][T13416] lo speed is unknown, defaulting to 1000 [ 296.576442][T13389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.621270][T13389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.654041][T13445] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 296.854755][T13447] netlink: 'syz.0.2106': attribute type 1 has an invalid length. [ 296.895186][T13447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.115841][T13389] team0: Port device team_slave_0 added [ 297.125600][ T5853] Bluetooth: hci0: command tx timeout [ 297.179270][T13389] team0: Port device team_slave_1 added [ 297.367095][T10887] pimreg (unregistering): left allmulticast mode [ 297.660868][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 297.749489][T13458] xt_hashlimit: size too large, truncated to 1048576 [ 297.770308][T13458] xt_hashlimit: max too large, truncated to 1048576 [ 297.866458][T13460] xt_hashlimit: size too large, truncated to 1048576 [ 297.884308][T13460] xt_hashlimit: max too large, truncated to 1048576 [ 297.952729][T13460] syz.0.2109: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 297.970691][T13460] CPU: 1 UID: 0 PID: 13460 Comm: syz.0.2109 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 297.970721][T13460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.970735][T13460] Call Trace: [ 297.970742][T13460] [ 297.970751][T13460] dump_stack_lvl+0x241/0x360 [ 297.970782][T13460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.970806][T13460] ? __pfx__printk+0x10/0x10 [ 297.970833][T13460] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 297.970862][T13460] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 297.970893][T13460] warn_alloc+0x278/0x410 [ 297.970920][T13460] ? __pfx_warn_alloc+0x10/0x10 [ 297.970950][T13460] ? htable_create+0x102/0x880 [ 297.970972][T13460] ? __get_vm_area_node+0x1c8/0x2d0 [ 297.971003][T13460] ? __get_vm_area_node+0x25c/0x2d0 [ 297.971042][T13460] __vmalloc_node_range_noprof+0x62f/0x1380 [ 297.971095][T13460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 297.971127][T13460] ? htable_create+0x102/0x880 [ 297.971150][T13460] vmalloc_noprof+0x79/0x90 [ 297.971170][T13460] ? htable_create+0x102/0x880 [ 297.971192][T13460] htable_create+0x102/0x880 [ 297.971222][T13460] hashlimit_mt_check_common+0x710/0xa40 [ 297.971259][T13460] hashlimit_mt_check_v1+0x2ea/0x540 [ 297.971286][T13460] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 297.971307][T13460] ? trace_contention_end+0x3c/0x120 [ 297.971342][T13460] ? __mutex_unlock_slowpath+0x227/0x800 [ 297.971378][T13460] xt_check_match+0x368/0xa40 [ 297.971403][T13460] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.971435][T13460] ? __pfx_xt_check_match+0x10/0x10 [ 297.971489][T13460] ? xt_find_match+0x1df/0x230 [ 297.971531][T13460] translate_table+0x1704/0x2490 [ 297.971592][T13460] ? __pfx_translate_table+0x10/0x10 [ 297.971624][T13460] ? __might_fault+0xaa/0x120 [ 297.971644][T13460] ? __pfx_lock_release+0x10/0x10 [ 297.971679][T13460] ? __virt_addr_valid+0x183/0x530 [ 297.971703][T13460] ? __might_fault+0xc6/0x120 [ 297.971729][T13460] ? copy_from_sockptr_offset+0x6b/0xb0 [ 297.971763][T13460] do_ip6t_set_ctl+0xe4c/0x1270 [ 297.971800][T13460] ? nf_setsockopt+0x240/0x2c0 [ 297.971820][T13460] ? aa_label_sk_perm+0x4f3/0x6c0 [ 297.971849][T13460] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 297.971881][T13460] ? rcu_is_watching+0x15/0xb0 [ 297.971905][T13460] ? trace_contention_end+0x3c/0x120 [ 297.971940][T13460] ? __mutex_unlock_slowpath+0x227/0x800 [ 297.971982][T13460] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.972031][T13460] nf_setsockopt+0x295/0x2c0 [ 297.972059][T13460] rawv6_setsockopt+0x2ac/0x690 [ 297.972084][T13460] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 297.972106][T13460] ? __pfx_lock_acquire+0x10/0x10 [ 297.972133][T13460] ? aa_sock_opt_perm+0x79/0x120 [ 297.972164][T13460] ? sock_common_setsockopt+0x37/0xc0 [ 297.972200][T13460] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 297.972233][T13460] do_sock_setsockopt+0x3af/0x720 [ 297.972265][T13460] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 297.972296][T13460] ? __fget_files+0x395/0x410 [ 297.972325][T13460] ? __fget_files+0x2a/0x410 [ 297.972361][T13460] __x64_sys_setsockopt+0x1ee/0x280 [ 297.972392][T13460] do_syscall_64+0xf3/0x230 [ 297.972422][T13460] ? clear_bhb_loop+0x35/0x90 [ 297.972464][T13460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.972494][T13460] RIP: 0033:0x7f0f5658d169 [ 297.972512][T13460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.972529][T13460] RSP: 002b:00007f0f5732f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.972552][T13460] RAX: ffffffffffffffda RBX: 00007f0f567a6160 RCX: 00007f0f5658d169 [ 297.972567][T13460] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 297.972579][T13460] RBP: 00007f0f5660e2a0 R08: 00000000000004a0 R09: 0000000000000000 [ 297.972592][T13460] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 297.972605][T13460] R13: 0000000000000001 R14: 00007f0f567a6160 R15: 00007ffdde28e7d8 [ 297.972637][T13460] [ 297.972733][T13460] Mem-Info: [ 298.377908][T13460] active_anon:9126 inactive_anon:0 isolated_anon:0 [ 298.377908][T13460] active_file:1655 inactive_file:38391 isolated_file:0 [ 298.377908][T13460] unevictable:768 dirty:189 writeback:0 [ 298.377908][T13460] slab_reclaimable:11666 slab_unreclaimable:107434 [ 298.377908][T13460] mapped:33629 shmem:4282 pagetables:749 [ 298.377908][T13460] sec_pagetables:0 bounce:0 [ 298.377908][T13460] kernel_misc_reclaimable:0 [ 298.377908][T13460] free:1319776 free_pcp:4472 free_cma:0 [ 298.426102][T13460] Node 0 active_anon:36504kB inactive_anon:0kB active_file:6620kB inactive_file:153496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134516kB dirty:752kB writeback:0kB shmem:15592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12048kB pagetables:2996kB sec_pagetables:0kB all_unreclaimable? no [ 298.460227][T13460] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 298.490715][T13460] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.518129][T13460] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 298.524353][T13460] Node 0 DMA32 free:1355144kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:36460kB inactive_anon:0kB active_file:6620kB inactive_file:153184kB unevictable:1536kB writepending:748kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:17900kB local_pcp:3056kB free_cma:0kB [ 298.555834][T13460] lowmem_reserve[]: 0 0 0 0 0 [ 298.560746][T13460] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 298.590033][T13460] lowmem_reserve[]: 0 0 0 0 0 [ 298.594845][T13460] Node 1 Normal free:3908600kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.624033][T13460] lowmem_reserve[]: 0 0 0 0 0 [ 298.628832][T13460] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 298.668604][T13460] Node 0 DMA32: 58*4kB (UM) 116*8kB (UME) 198*16kB (ME) 123*32kB (ME) 33*64kB (UME) 38*128kB (UME) 0*256kB 37*512kB (UE) 28*1024kB (UM) 9*2048kB (UM) 311*4096kB (UM) = 1355144kB [ 298.687275][T13460] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 298.699239][T13460] Node 1 Normal: 234*4kB (UME) 58*8kB (UME) 50*16kB (UME) 195*32kB (UME) 92*64kB (UME) 24*128kB (UME) 20*256kB (UME) 10*512kB (UME) 8*1024kB (UME) 3*2048kB (UE) 944*4096kB (UM) = 3908600kB [ 298.718400][T13460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.728110][T13460] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 298.737847][T13460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.747576][T13460] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.757138][T13460] 44328 total pagecache pages [ 298.761966][T13460] 0 pages in swap cache [ 298.766196][T13460] Free swap = 124996kB [ 298.771235][T13460] Total swap = 124996kB [ 298.775439][T13460] 2097051 pages RAM [ 298.779369][T13460] 0 pages HighMem/MovableOnly [ 298.784252][T13460] 427906 pages reserved [ 298.788452][T13460] 0 pages cma reserved [ 298.897787][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 299.185793][ T5850] Bluetooth: hci0: command 0x040f tx timeout [ 299.289077][T13389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.302085][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.328460][T13389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.342717][T13464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2110'. [ 299.370476][T13389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.377498][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.429483][T13389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.652896][T13389] hsr_slave_0: entered promiscuous mode [ 299.659684][T13389] hsr_slave_1: entered promiscuous mode [ 299.689288][T13389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.713926][T13389] Cannot create hsr debugfs directory [ 299.831106][T13471] macsec0: entered promiscuous mode [ 300.200489][T13482] lo: left allmulticast mode [ 300.293771][T13482] 0ªX¹¦D: left allmulticast mode [ 300.339686][T13482] team0: left allmulticast mode [ 300.356860][T13482] vlan0: left promiscuous mode [ 300.363343][T13482] macsec0: left promiscuous mode [ 300.368564][T13482] geneve0: left allmulticast mode [ 300.375515][T13482] gtp0: left promiscuous mode [ 300.380428][T13482] gtp0: left allmulticast mode [ 300.387673][T13482] bond1: left promiscuous mode [ 300.393265][T13482] bond1: left allmulticast mode [ 300.398358][T13482] batadv2: left allmulticast mode [ 300.410679][T13482] batadv2: left promiscuous mode [ 300.417640][T13482] ip6gre1: left promiscuous mode [ 300.432913][T13482] bridge3: left promiscuous mode [ 300.441318][T13482] bridge3: left allmulticast mode [ 300.451426][T13482] veth0_to_batadv: left promiscuous mode [ 300.460525][T13482] ip6gre2: left allmulticast mode [ 300.488230][T13482] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.497083][T13482] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.505704][T13482] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.514608][T13482] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.539008][T13482] ip6tnl3: left promiscuous mode [ 300.565606][T13488] batman_adv: batadv0: Adding interface: ipvlan2 [ 300.580507][T13488] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 300.862518][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 300.918706][T13501] lo speed is unknown, defaulting to 1000 [ 300.971071][T13501] lo speed is unknown, defaulting to 1000 [ 300.983041][T13507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2122'. [ 301.136907][T13509] netlink: 'syz.4.2124': attribute type 2 has an invalid length. [ 301.170672][T13509] netlink: 'syz.4.2124': attribute type 8 has an invalid length. [ 301.178472][T13509] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2124'. [ 301.260167][ T5850] Bluetooth: hci0: command 0x040f tx timeout [ 301.549431][T13389] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.616466][T13389] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.663247][T13389] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.727762][T13389] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 302.005564][T13389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.113877][T13389] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.132912][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2135'. [ 302.135461][ T7614] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.149058][ T7614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.185314][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.192545][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.226080][T13551] lo speed is unknown, defaulting to 1000 [ 302.246068][T13551] lo speed is unknown, defaulting to 1000 [ 302.322240][T13559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2135'. [ 302.894543][T13389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.086944][T13389] veth0_vlan: entered promiscuous mode [ 303.142218][T13389] veth1_vlan: entered promiscuous mode [ 303.192497][T13599] lo speed is unknown, defaulting to 1000 [ 303.231213][T13599] lo speed is unknown, defaulting to 1000 [ 303.332746][T13604] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2144'. [ 303.340344][ T5853] Bluetooth: hci0: command 0x040f tx timeout [ 303.350622][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 303.356683][T13389] veth0_macvtap: entered promiscuous mode [ 303.674021][T13389] veth1_macvtap: entered promiscuous mode [ 303.792805][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.846710][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.891381][T13389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.965897][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.021254][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.071683][T13389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.217258][T13389] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.239928][T13389] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.248701][T13389] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.290140][T13389] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.347490][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 304.516993][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2151'. [ 304.610461][T13628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2152'. [ 304.633470][T13630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2151'. [ 304.771625][T13628] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.788296][T13628] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.806478][T13628] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.815730][T13628] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.844898][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.877503][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.953701][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.010160][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.221024][T13639] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.257327][T13639] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.281696][T13639] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.322641][T13639] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.420220][ T5853] Bluetooth: hci0: command 0x040f tx timeout [ 305.426526][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 305.476550][T13646] netlink: 'syz.3.2157': attribute type 39 has an invalid length. [ 305.508595][T13637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.534433][T13637] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.581859][T13637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.648759][ T5891] lo speed is unknown, defaulting to 1000 [ 305.924239][T13659] netlink: 'syz.4.2160': attribute type 21 has an invalid length. [ 305.932867][T13659] __nla_validate_parse: 1 callbacks suppressed [ 305.932888][T13659] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2160'. [ 305.955426][T13659] netlink: 'syz.4.2160': attribute type 5 has an invalid length. [ 305.963965][T13659] netlink: 'syz.4.2160': attribute type 6 has an invalid length. [ 305.972234][T13659] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2160'. [ 305.994428][T13660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2160'. [ 306.164017][T13659] hsr0: entered promiscuous mode [ 306.186964][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2160'. [ 306.212120][T13659] hsr_slave_0: left promiscuous mode [ 306.224474][T13659] hsr_slave_1: left promiscuous mode [ 306.243221][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2160'. [ 306.330680][T13659] hsr0 (unregistering): left promiscuous mode [ 306.999002][T13693] lo speed is unknown, defaulting to 1000 [ 307.015545][T13693] lo speed is unknown, defaulting to 1000 [ 307.079162][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2167'. [ 307.145911][T13697] vlan6: entered promiscuous mode [ 307.652547][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.680923][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.692790][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.721361][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.740491][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.748605][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.821064][T13719] Bluetooth: MGMT ver 1.23 [ 307.841942][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2175'. [ 307.851306][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 307.860649][T13726] netlink: 'syz.2.2175': attribute type 13 has an invalid length. [ 307.868826][T13726] netlink: 'syz.2.2175': attribute type 12 has an invalid length. [ 307.879308][T13714] lo speed is unknown, defaulting to 1000 [ 307.929908][T13714] lo speed is unknown, defaulting to 1000 [ 308.105965][T13727] lo speed is unknown, defaulting to 1000 [ 308.143652][T13727] lo speed is unknown, defaulting to 1000 [ 308.184109][T13730] gre2: entered promiscuous mode [ 308.435597][T13738] lo speed is unknown, defaulting to 1000 [ 308.474111][T13714] chnl_net:caif_netlink_parms(): no params data found [ 308.637611][T13738] lo speed is unknown, defaulting to 1000 [ 308.666475][T13752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2179'. [ 308.870526][T13755] Cannot find del_set index 286 as target [ 308.934719][T13749] lo speed is unknown, defaulting to 1000 [ 309.042442][T13714] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.084775][T13714] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.103368][T13714] bridge_slave_0: entered allmulticast mode [ 309.128046][T13714] bridge_slave_0: entered promiscuous mode [ 309.202386][T13762] netlink: 'syz.3.2183': attribute type 2 has an invalid length. [ 309.204521][T13714] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.220039][T13714] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.227413][T13714] bridge_slave_1: entered allmulticast mode [ 309.241291][T13714] bridge_slave_1: entered promiscuous mode [ 309.459176][T13749] lo speed is unknown, defaulting to 1000 [ 309.714261][T13714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.743407][T13714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.820374][ T5850] Bluetooth: hci0: command tx timeout [ 309.900701][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 310.174617][T13714] team0: Port device team_slave_0 added [ 310.293977][T13714] team0: Port device team_slave_1 added [ 310.416410][T13714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.423992][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.450355][T13714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.463477][T13714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.470600][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.496930][T13714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.681965][T13714] hsr_slave_0: entered promiscuous mode [ 310.688480][T13714] hsr_slave_1: entered promiscuous mode [ 310.706873][T13714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.718188][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2185'. [ 310.719936][T13714] Cannot create hsr debugfs directory [ 311.241824][T13714] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.316349][T13793] sch_fq: defrate 0 ignored. [ 311.427938][T13714] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.453965][T13799] netlink: 'syz.2.2190': attribute type 13 has an invalid length. [ 311.637070][T13799] gretap0: refused to change device tx_queue_len [ 311.664789][T13799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 311.725189][T13714] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.742886][ T5891] lo speed is unknown, defaulting to 1000 [ 311.850219][T13714] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.901117][ T5850] Bluetooth: hci0: command 0x041b tx timeout [ 311.908772][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 312.137756][T13714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.184187][T13714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.233626][T13714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.267905][T13714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.298260][T13812] ================================================================== [ 312.306396][T13812] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 312.315475][T13812] Write of size 8 at addr ffff88805bdde430 by task syz.4.2195/13812 [ 312.323491][T13812] [ 312.325846][T13812] CPU: 0 UID: 0 PID: 13812 Comm: syz.4.2195 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 312.325876][T13812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 312.325902][T13812] Call Trace: [ 312.325911][T13812] [ 312.325920][T13812] dump_stack_lvl+0x241/0x360 [ 312.325950][T13812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.325974][T13812] ? __pfx__printk+0x10/0x10 [ 312.325996][T13812] ? _printk+0xd5/0x120 [ 312.326016][T13812] ? __virt_addr_valid+0x183/0x530 [ 312.326037][T13812] ? __virt_addr_valid+0x183/0x530 [ 312.326059][T13812] print_report+0x16e/0x5b0 [ 312.326086][T13812] ? __virt_addr_valid+0x183/0x530 [ 312.326105][T13812] ? __virt_addr_valid+0x183/0x530 [ 312.326124][T13812] ? __virt_addr_valid+0x45f/0x530 [ 312.326145][T13812] ? __phys_addr+0xba/0x170 [ 312.326164][T13812] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 312.326190][T13812] kasan_report+0x143/0x180 [ 312.326218][T13812] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 312.326248][T13812] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 312.326275][T13812] wg_socket_init+0x78f/0xea0 [ 312.326309][T13812] ? __pfx_wg_socket_init+0x10/0x10 [ 312.326338][T13812] ? __pfx_wg_receive+0x10/0x10 [ 312.326375][T13812] ? __local_bh_enable_ip+0x168/0x200 [ 312.326401][T13812] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 312.326427][T13812] ? dst_cache_reset_now+0x1f0/0x220 [ 312.326468][T13812] wg_set_device+0x710/0x20d0 [ 312.326510][T13812] ? __pfx___nla_validate_parse+0x10/0x10 [ 312.326538][T13812] ? __pfx_wg_set_device+0x10/0x10 [ 312.326584][T13812] ? __nla_parse+0x40/0x60 [ 312.326609][T13812] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 312.326642][T13812] genl_rcv_msg+0xb1f/0xec0 [ 312.326673][T13812] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.326714][T13812] ? __pfx_lock_acquire+0x10/0x10 [ 312.326746][T13812] ? __pfx_wg_set_device+0x10/0x10 [ 312.326780][T13812] ? __pfx___might_resched+0x10/0x10 [ 312.326814][T13812] netlink_rcv_skb+0x206/0x480 [ 312.326847][T13812] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.326874][T13812] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.326914][T13812] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 312.326956][T13812] genl_rcv+0x28/0x40 [ 312.326979][T13812] netlink_unicast+0x7f6/0x990 [ 312.327013][T13812] ? __pfx_netlink_unicast+0x10/0x10 [ 312.327042][T13812] ? __virt_addr_valid+0x45f/0x530 [ 312.327062][T13812] ? __phys_addr_symbol+0x2f/0x70 [ 312.327082][T13812] ? __check_object_size+0x47a/0x730 [ 312.327113][T13812] netlink_sendmsg+0x8de/0xcb0 [ 312.327140][T13812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.327163][T13812] ? aa_sock_msg_perm+0x91/0x160 [ 312.327200][T13812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.327219][T13812] __sock_sendmsg+0x221/0x270 [ 312.327253][T13812] ____sys_sendmsg+0x53a/0x860 [ 312.327284][T13812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.327309][T13812] ? __fget_files+0x2a/0x410 [ 312.327342][T13812] ? __fget_files+0x2a/0x410 [ 312.327378][T13812] __sys_sendmsg+0x269/0x350 [ 312.327406][T13812] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.327461][T13812] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.327495][T13812] ? do_syscall_64+0x100/0x230 [ 312.327529][T13812] ? do_syscall_64+0xb6/0x230 [ 312.327562][T13812] do_syscall_64+0xf3/0x230 [ 312.327593][T13812] ? clear_bhb_loop+0x35/0x90 [ 312.327626][T13812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.327665][T13812] RIP: 0033:0x7fb45c98d169 [ 312.327683][T13812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.327702][T13812] RSP: 002b:00007fb45d7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.327727][T13812] RAX: ffffffffffffffda RBX: 00007fb45cba5fa0 RCX: 00007fb45c98d169 [ 312.327743][T13812] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 312.327757][T13812] RBP: 00007fb45ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 312.327770][T13812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.327784][T13812] R13: 0000000000000000 R14: 00007fb45cba5fa0 R15: 00007fffa4bc5848 [ 312.327808][T13812] [ 312.327816][T13812] [ 312.725218][T13812] Allocated by task 13318: [ 312.729644][T13812] kasan_save_track+0x3f/0x80 [ 312.734367][T13812] __kasan_slab_alloc+0x66/0x80 [ 312.739236][T13812] kmem_cache_alloc_noprof+0x1d9/0x380 [ 312.744717][T13812] sk_prot_alloc+0x58/0x210 [ 312.749233][T13812] sk_alloc+0x3e/0x370 [ 312.753318][T13812] inet_create+0x648/0xea0 [ 312.757752][T13812] __sock_create+0x4c0/0xa30 [ 312.762380][T13812] __sys_socket+0x150/0x3c0 [ 312.766986][T13812] __x64_sys_socket+0x7a/0x90 [ 312.771673][T13812] do_syscall_64+0xf3/0x230 [ 312.776200][T13812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.782109][T13812] [ 312.784455][T13812] Freed by task 13316: [ 312.788527][T13812] kasan_save_track+0x3f/0x80 [ 312.793221][T13812] kasan_save_free_info+0x40/0x50 [ 312.798277][T13812] __kasan_slab_free+0x59/0x70 [ 312.803055][T13812] kmem_cache_free+0x195/0x410 [ 312.807923][T13812] __sk_destruct+0x4fd/0x690 [ 312.812527][T13812] inet_release+0x17d/0x200 [ 312.817042][T13812] sock_close+0xbc/0x240 [ 312.821308][T13812] __fput+0x3e9/0x9f0 [ 312.825309][T13812] task_work_run+0x24f/0x310 [ 312.829905][T13812] do_exit+0xa2a/0x2940 [ 312.834077][T13812] do_group_exit+0x207/0x2c0 [ 312.838698][T13812] __x64_sys_exit_group+0x3f/0x40 [ 312.843742][T13812] x64_sys_call+0x26a8/0x26b0 [ 312.848433][T13812] do_syscall_64+0xf3/0x230 [ 312.853223][T13812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.859137][T13812] [ 312.861471][T13812] The buggy address belongs to the object at ffff88805bdddd00 [ 312.861471][T13812] which belongs to the cache UDP of size 1856 [ 312.875270][T13812] The buggy address is located 1840 bytes inside of [ 312.875270][T13812] freed 1856-byte region [ffff88805bdddd00, ffff88805bdde440) [ 312.889287][T13812] [ 312.891621][T13812] The buggy address belongs to the physical page: [ 312.898050][T13812] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bddc5c0 pfn:0x5bdd8 [ 312.908217][T13812] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 312.916717][T13812] memcg:ffff888032de2b01 [ 312.921053][T13812] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 312.928946][T13812] page_type: f5(slab) [ 312.932932][T13812] raw: 00fff00000000040 ffff888020287780 ffffea0000a2e000 dead000000000003 [ 312.941522][T13812] raw: ffff88805bddc5c0 000000000010000e 00000000f5000000 ffff888032de2b01 [ 312.950121][T13812] head: 00fff00000000040 ffff888020287780 ffffea0000a2e000 dead000000000003 [ 312.958806][T13812] head: ffff88805bddc5c0 000000000010000e 00000000f5000000 ffff888032de2b01 [ 312.967483][T13812] head: 00fff00000000003 ffffea00016f7601 ffffffffffffffff 0000000000000000 [ 312.976160][T13812] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 312.984834][T13812] page dumped because: kasan: bad access detected [ 312.991290][T13812] page_owner tracks the page as allocated [ 312.997035][T13812] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6745, tgid 6744 (syz.3.223), ts 110311910008, free_ts 110263337166 [ 313.018321][T13812] post_alloc_hook+0x1f4/0x240 [ 313.023109][T13812] get_page_from_freelist+0x365c/0x37a0 [ 313.028665][T13812] __alloc_frozen_pages_noprof+0x292/0x710 [ 313.034477][T13812] alloc_pages_mpol+0x311/0x660 [ 313.039337][T13812] allocate_slab+0x8f/0x3a0 [ 313.043850][T13812] ___slab_alloc+0xc27/0x14a0 [ 313.048547][T13812] __slab_alloc+0x58/0xa0 [ 313.052909][T13812] kmem_cache_alloc_noprof+0x268/0x380 [ 313.058389][T13812] sk_prot_alloc+0x58/0x210 [ 313.062905][T13812] sk_alloc+0x3e/0x370 [ 313.066981][T13812] inet_create+0x648/0xea0 [ 313.071411][T13812] __sock_create+0x4c0/0xa30 [ 313.076018][T13812] __sys_socket+0x150/0x3c0 [ 313.080545][T13812] __x64_sys_socket+0x7a/0x90 [ 313.085229][T13812] do_syscall_64+0xf3/0x230 [ 313.089754][T13812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.095684][T13812] page last free pid 5839 tgid 5839 stack trace: [ 313.102025][T13812] free_frozen_pages+0xe0d/0x10e0 [ 313.107063][T13812] __put_partials+0x160/0x1c0 [ 313.111747][T13812] put_cpu_partial+0x17c/0x250 [ 313.116605][T13812] __slab_free+0x290/0x380 [ 313.121137][T13812] qlist_free_all+0x9a/0x140 [ 313.125768][T13812] kasan_quarantine_reduce+0x14f/0x170 [ 313.131233][T13812] __kasan_slab_alloc+0x23/0x80 [ 313.136092][T13812] kmem_cache_alloc_noprof+0x1d9/0x380 [ 313.141572][T13812] getname_flags+0xb7/0x540 [ 313.146092][T13812] vfs_fstatat+0x41/0x150 [ 313.150440][T13812] __x64_sys_newfstatat+0x11d/0x1a0 [ 313.155655][T13812] do_syscall_64+0xf3/0x230 [ 313.160175][T13812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.166089][T13812] [ 313.168418][T13812] Memory state around the buggy address: [ 313.174049][T13812] ffff88805bdde300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.182202][T13812] ffff88805bdde380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.190271][T13812] >ffff88805bdde400: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 313.198337][T13812] ^ [ 313.203977][T13812] ffff88805bdde480: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 313.212049][T13812] ffff88805bdde500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.220120][T13812] ================================================================== [ 313.230050][T13812] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 313.237295][T13812] CPU: 0 UID: 0 PID: 13812 Comm: syz.4.2195 Not tainted 6.14.0-rc7-syzkaller-01407-g6f13bec53a48 #0 [ 313.248100][T13812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.258198][T13812] Call Trace: [ 313.261509][T13812] [ 313.264468][T13812] dump_stack_lvl+0x241/0x360 [ 313.269173][T13812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.274489][T13812] ? __pfx__printk+0x10/0x10 [ 313.279114][T13812] ? vscnprintf+0x5d/0x90 [ 313.283567][T13812] panic+0x349/0x880 [ 313.287484][T13812] ? check_panic_on_warn+0x21/0xb0 [ 313.292621][T13812] ? __pfx_panic+0x10/0x10 [ 313.297045][T13812] ? mark_lock+0x9a/0x360 [ 313.301393][T13812] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 313.307304][T13812] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 313.313223][T13812] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 313.319567][T13812] ? print_report+0x519/0x5b0 [ 313.324263][T13812] check_panic_on_warn+0x86/0xb0 [ 313.329245][T13812] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 313.335248][T13812] end_report+0x77/0x160 [ 313.339514][T13812] kasan_report+0x154/0x180 [ 313.344038][T13812] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 313.350041][T13812] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 313.355868][T13812] wg_socket_init+0x78f/0xea0 [ 313.360570][T13812] ? __pfx_wg_socket_init+0x10/0x10 [ 313.365798][T13812] ? __pfx_wg_receive+0x10/0x10 [ 313.370672][T13812] ? __local_bh_enable_ip+0x168/0x200 [ 313.376059][T13812] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 313.381795][T13812] ? dst_cache_reset_now+0x1f0/0x220 [ 313.387105][T13812] wg_set_device+0x710/0x20d0 [ 313.391819][T13812] ? __pfx___nla_validate_parse+0x10/0x10 [ 313.397554][T13812] ? __pfx_wg_set_device+0x10/0x10 [ 313.402699][T13812] ? __nla_parse+0x40/0x60 [ 313.407131][T13812] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 313.413478][T13812] genl_rcv_msg+0xb1f/0xec0 [ 313.418033][T13812] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.423086][T13812] ? __pfx_lock_acquire+0x10/0x10 [ 313.428136][T13812] ? __pfx_wg_set_device+0x10/0x10 [ 313.433283][T13812] ? __pfx___might_resched+0x10/0x10 [ 313.438599][T13812] netlink_rcv_skb+0x206/0x480 [ 313.443385][T13812] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.448428][T13812] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 313.453747][T13812] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 313.459230][T13812] genl_rcv+0x28/0x40 [ 313.463225][T13812] netlink_unicast+0x7f6/0x990 [ 313.468011][T13812] ? __pfx_netlink_unicast+0x10/0x10 [ 313.473310][T13812] ? __virt_addr_valid+0x45f/0x530 [ 313.478433][T13812] ? __phys_addr_symbol+0x2f/0x70 [ 313.483467][T13812] ? __check_object_size+0x47a/0x730 [ 313.488785][T13812] netlink_sendmsg+0x8de/0xcb0 [ 313.493565][T13812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.499037][T13812] ? aa_sock_msg_perm+0x91/0x160 [ 313.504010][T13812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.509329][T13812] __sock_sendmsg+0x221/0x270 [ 313.514039][T13812] ____sys_sendmsg+0x53a/0x860 [ 313.518823][T13812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.524121][T13812] ? __fget_files+0x2a/0x410 [ 313.528731][T13812] ? __fget_files+0x2a/0x410 [ 313.533352][T13812] __sys_sendmsg+0x269/0x350 [ 313.537992][T13812] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.543139][T13812] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.549487][T13812] ? do_syscall_64+0x100/0x230 [ 313.554281][T13812] ? do_syscall_64+0xb6/0x230 [ 313.558981][T13812] do_syscall_64+0xf3/0x230 [ 313.563505][T13812] ? clear_bhb_loop+0x35/0x90 [ 313.568223][T13812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.574132][T13812] RIP: 0033:0x7fb45c98d169 [ 313.578560][T13812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.598188][T13812] RSP: 002b:00007fb45d7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.606625][T13812] RAX: ffffffffffffffda RBX: 00007fb45cba5fa0 RCX: 00007fb45c98d169 [ 313.614612][T13812] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 313.622600][T13812] RBP: 00007fb45ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 313.630581][T13812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.638819][T13812] R13: 0000000000000000 R14: 00007fb45cba5fa0 R15: 00007fffa4bc5848 [ 313.646817][T13812] [ 313.650132][T13812] Kernel Offset: disabled [ 313.654470][T13812] Rebooting in 86400 seconds..