last executing test programs: 4.382725584s ago: executing program 3 (id=2286): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40004044, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100001000130400000000f9dbdf25ff010000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x170}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r5, 0x118, 0x2, &(0x7f0000000100)=""/74, 0x4a) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x0, 0x2, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0xa, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r6, &(0x7f00000003c0)="bedbdcb045a0d2492018f901ae6d092a0b17435850d1e18291d906787fa643106d44e2df7fe4636f8d721db3012dcbdd837aefe1b07ba87dc6df040e0fcaa7c98f06004fd29cf8fb454f272b62e95ca2a23d8d6cf629015c03887a48e56b2c969125f16daf45351044ca918aa371ee9d697d65909019098dbeef6043c11eb39cb1a4bc71bdc5757225e2daff3f929888071b158135e448d7e1f6aa7aaf669f653e3be42cfb1c4b0c44223243c2687eda55989f5bee9aa53f281533c8c3c307b77ef4d8360957269478e9d4ad13aacd6752"}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8c37c2b979564e6e) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x702, 0xe, 0x0, &(0x7f0000000380)="a460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.188911284s ago: executing program 3 (id=2289): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000019580)=@newtaction={0x104, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0xf0, 0x1, [@m_skbmod={0xbc, 0x4, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7f}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x10001, 0x20000000, 0x1, 0x7f}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xffffffff, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1004, 0x8, 0x7fff, 0x8}, 0x8}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x30, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x6}}}}]}]}, 0x104}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}]}, 0x84}}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) unshare(0x62040000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r6, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) sendmsg$NFT_BATCH(r2, 0x0, 0x20050800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3.771489607s ago: executing program 1 (id=2294): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000000c0)=0x28) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10008880}, 0x84) sendmsg$nl_route(r2, 0x0, 0x0) 3.644232448s ago: executing program 1 (id=2297): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@newqdisc={0x68, 0x24, 0x400, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x70dab7c4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1}, {0x0, 0x2, 0x1, 0x1, 0x0, 0x9}, 0x0, 0x0, 0x1392}}, @TCA_TBF_PBURST={0x8, 0x7, 0x467}]}}]}, 0x68}}, 0x0) 3.44362473s ago: executing program 1 (id=2301): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004094) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 3.130712986s ago: executing program 1 (id=2305): unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000140)={0x4c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3404}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x1, 0x4443]}, @CTA_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x802}, 0x4000001) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x15, 0x5, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket(0x40000000015, 0x2, 0x7fffffff) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r4) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast1}, 0x226, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4000}) 2.548896573s ago: executing program 0 (id=2310): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x400c844) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x656d42c3, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7f) accept(r1, 0x0, 0x0) getgid() 2.450731041s ago: executing program 2 (id=2311): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db", 0xd}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x44) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r7, 0x40305839, &(0x7f0000000a00)={{r7}, "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"}) (async) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) (async) tee(r6, r0, 0x5, 0x8) (async) close(r3) (async) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040)=0xfdc, &(0x7f00000002c0)=0x4) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x4d) close(0x3) (async) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[], 0xf}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500000000000061107e0000000800040000000000000095000000000000009c5270a36df2664d0a465bef6c2d04b70e46c45ebe95296fb445a66e8f7bdcaa84854e4ed3755aa124980e27b3bacb3ae8cecbf0677916113ba6e1af699b8f3821b86994c9472f9270fb9a7b7aad7e7a58a29622592aee3dceef8f86b9ffa394ed150d1f2bc65c8688de6219f765f6ed93af512c4be5c0b756df3862f2c05f5fbf187c4a798249"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.449044133s ago: executing program 4 (id=2312): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r3, @ANYBLOB="003000000000000024001280110001006272696467651f736c617665000000000c0005"], 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x15, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0x7, 0x5, 0x1, 0x30, 0x4}, @generic={0xff, 0x4, 0xb, 0x7, 0xfde0}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xc8b, 0xaa, &(0x7f0000000100)=""/170, 0x41000, 0x1, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x5, 0x3, 0x6, 0x8}, {0x2, 0x2, 0x3, 0xa}, {0x1, 0x5, 0x10, 0x3}], 0x10, 0xc, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000340)=r4, 0x4) (async) setsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, 0x0) 2.347437806s ago: executing program 0 (id=2313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x6, 0x8, 0x8, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x7, 0x11, 0x0, 0x1, [@generic="2fe5af"]}]}, 0x1c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x6, 0x8, 0x8, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x7, 0x11, 0x0, 0x1, [@generic="2fe5af"]}]}, 0x1c}], 0x1}, 0x0) (async) 2.124601535s ago: executing program 2 (id=2314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)={0x24, r1, 0xb3d3e8a28760fb9b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe8a6859d47251f48}]}]}]}, 0x24}}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000003}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.030895604s ago: executing program 0 (id=2315): getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x49, "7300eab153a753de1d61668bd8917c2ff9b47dc608fe89a6a412af62e90da2d9477cf9c66b8457798140b3a9cb40ba15c2cadbdb156bb54a6c5def368ca512d041c70a8aa0777cc72e"}, &(0x7f0000000140)=0x51) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="b60a00000000000063110b000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x3, 0x1, 0x5, 0x100, 0x8, 0x5, 0x85e, r0}, &(0x7f0000000280)=0x20) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x800000, 0x3, 0x3}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x6}}) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000300)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06d6d8da5b6b0e9a16c26cc12ccac75ba6580e88370200c54c1960b89c40ebb373", 0x48}], 0x1}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0x583, 0xf2, 0x101, 0x5, 0x7, 0xc77, 0xa, 0x1, 0x25, 0x0, 0x2, 0x5, 0x9, 0x1000, 0x7, 0x81, 0x0, 0xf7, 0x1, 0x0, 0x4, 0x3}}) 2.029921293s ago: executing program 4 (id=2316): unshare(0x24020400) r0 = socket(0x2, 0x0, 0x6) r1 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x9a, 0x10001, 0x70, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x80, 0x9, 0xa446}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xb, [@union={0x4, 0x2, 0x0, 0x5, 0x1, 0x8, [{0xd}, {0x10, 0x1, 0x81}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x4}}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x10, 0x5}, {0xa, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x4}]}]}, {0x0, [0x61, 0x61, 0x61, 0x0, 0x0, 0x61, 0x61, 0x0, 0x61]}}, &(0x7f0000000380)=""/43, 0x9b, 0x2b, 0x0, 0x9, 0x10000, @value}, 0x28) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r6, &(0x7f0000000180), 0x0}, 0x20) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x8001, 0x10}, 0xc) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, 0x0, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x6c3412c0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x30, r13, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x1f, &(0x7f0000000140)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x521a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x26d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x0, 0x23, &(0x7f0000000280)=""/35, 0x40f00, 0x4, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000500)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x0, 0x2}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000800)=[0x1, r6, r7, r8, 0xffffffffffffffff, r10, r11, r15, r16], &(0x7f0000000840)=[{0x3, 0x1, 0x2, 0x8}, {0x2, 0x2, 0x3}, {0x4, 0x1, 0xc, 0x5}, {0x3, 0x3, 0x4, 0x5}, {0x4, 0x4, 0x0, 0xb}, {0x1, 0x5, 0xd, 0x4}, {0x4, 0x3, 0x2}, {0x5, 0x2, 0x9, 0x5}, {0x4, 0x3, 0x3, 0x2}, {0x2, 0x3, 0x10, 0xa}], 0x10, 0x3, @void, @value}, 0x94) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x4) bind$can_j1939(r0, &(0x7f0000000400)={0x1d, 0x0, 0x2}, 0x18) 1.960726546s ago: executing program 2 (id=2317): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x2e8}}], 0x2, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "000001006b2d3cdb", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1.8790837s ago: executing program 0 (id=2318): r0 = socket$tipc(0x1e, 0x6, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='syzkaller0\x00'}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x2, 0x12, 0x0, 0x2, 0x3, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x3, 0x4e20}]}, 0x18}}, 0x40080) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) (async) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1620}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004400c}, 0x844) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x1c, 0x21, 0x11}, 0x1c}}, 0x0) (async, rerun: 64) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) (async, rerun: 64) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) bind$inet6(r7, &(0x7f0000000000)={0x2d, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) r9 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 64) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async, rerun: 64) sendmmsg$inet(r8, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) (async) sendmmsg$inet(r8, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)="6870f038c53094b1edfba05540c3fbcd107be1021bad83bb6e88af42b2e2209284b03a6d4aa2cf5b65c8e62309de960fc279cfddc119510b1f899581ada38248cc6f0997e197bf09e647a8f8ce802fcb833ea90711ab59a9beac79fa634d8a276466790a3a4c7ae040e9ad09d5b859830cb8a93fe75021f316756e345200a6d0f0bc1015371f443b2e6f6bc17dcec3dee88f320459b9981109bd5c6e7704d68e4c271d3a13063860877edf38ab9067e70806", 0xb2}, {&(0x7f0000000c40)="7c8a365265b40ce966bf4b65964dc9d76c26a0017060951f978b718294105e13246c91bf165fa99f6806c287a004267de0175bd7e0b7995ad4e02b9033236a4b4ee49b8ae8ee95d1776da62d402b9a66fe288f3ee52a597f5ce675918601a1d9104522765fb803b7c7024db0c4f42a8b3a5370258709c2e2cfad1559326a7d2e0e81a261b7b1bde7829c8cc2d02b511858f77bcae5ac7ff334b5444424ed8008233430ff955b8315a70abbfe162b316ff6c433482594e5d03f1578435fbc46fb7b161e05", 0xc4}, {&(0x7f0000001180)="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", 0x44b}], 0x3}}], 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x891}, 0x4000) (rerun: 32) 1.80685066s ago: executing program 2 (id=2319): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) r1 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r2, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$SEG6(0x0, r1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3], 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000104000000000000000000005c19a2b4505e8062f40000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000800290008c901000800280000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x118, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x104, 0x1, [@m_ife={0x100, 0x3, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7ff}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x101}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x7, 0x8}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffff9}]}]}, {0x53, 0x6, "4cf6886c4ff3c159387aa814e090f459b5d984421d3234cc28f6d7637cf7e5db65c82436b231b1b3f65a8cb9b20e8c49ea93c24e32c4511519584c7a3246aabf58bc0e65694f22ac4401b8b7e570d2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x118}}, 0x40) 1.629236803s ago: executing program 4 (id=2320): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000000c0)=0x28) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x24000000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000000100)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route(r3, 0x0, 0x0) 1.574033706s ago: executing program 2 (id=2321): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 32) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, 0x8) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x62, 0x0, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000003277fbac141416e000030a89079f03b180004408050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(0x3) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c0000000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000002808000640ffffff00400000000c0a010100000000000000000700000008000440000000000900010073797a3000000000180003801400008008000340000000020800028004000100140000001000010000000000000000000084000a000000000000"], 0xd4}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) close(r2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="28007a3c7bc78b00000308030000000000000000000000fffd0c00048008000140ef000008050003"], 0x28}, 0x1, 0x0, 0x0, 0x4040104}, 0x0) (async) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0)=r5) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c98012887634086d3ff702c1ffe80000000000000"], 0xffdd) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x70, @mcast2, 0x3}, 0x1c) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075000000950000000078bee6847b2a204b5b08e4326c410994ca37b227bcd378110d107eff556a5a78727d0f06229d0426efa6486b7c023435a9"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x4, 0x10}, {0xffe0, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xdd1}]}}]}, 0x44}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (rerun: 64) 1.439055211s ago: executing program 0 (id=2322): mmap(&(0x7f0000b19000/0x3000)=nil, 0x3000, 0x7000003, 0x11, 0xffffffffffffffff, 0x1f6aa000) unshare(0x6a040000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400012d5f0eaaaf20c700", @ANYRES16=r4, @ANYBLOB="01000000000000000000020202000900030073797a30000000000900010073797a30000000000500040001000000"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x13, r5, 0x2a1ca000) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x7f, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x8, 0x7, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe, 0xfff, 0x59, @rand_addr=' \x01\x00', @empty, 0x8000, 0x7800, 0x2, 0x7}}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020"], 0x80}}, 0x4814) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x20, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x802a]}}]}}]}, 0x8c}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x98, 0x8, 0xfa04, 0x0, 0x6c02, 0x2e0, 0x194, 0x194, 0x2e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x0, 0x0, 0x28}, 0x0, 0x208, 0x248, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x2}}, @common=@inet=@sctp={{0x148}, {[0x4e22, 0x4e22], [0x4e23, 0x4e20], [0x3, 0x1, 0x1, 0x7, 0x7, 0x2712, 0xff, 0x1, 0x1, 0xff, 0xffff8000, 0x6, 0x7, 0x2, 0x5, 0x1, 0xdac8, 0x9, 0xe8d6, 0x5, 0x5000000, 0xa, 0x5, 0x1d, 0x3f2, 0x6, 0x84, 0x0, 0x5, 0x2, 0x7fff, 0x71, 0x3, 0x101, 0x6, 0xffff, 0x1, 0x5, 0x3ff, 0x3, 0xfffffff9, 0xffffffc2, 0x9, 0x9, 0x9, 0x100, 0x1, 0x40, 0x2, 0x8, 0x3, 0x3, 0x3843, 0x4, 0x4, 0x10000, 0x4, 0xb, 0x5e0, 0x1ff, 0x6, 0x4, 0x1, 0x3], 0x2, [{0x6, 0x8, 0x9}, {0x8, 0x5, 0x9}, {0xf, 0x5f, 0x9}, {0xcb, 0xff}], 0x0, 0x3, 0x7}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x14, "c8a743593106c4690b82f0909f8ce2baf0914bcc2e74a98543baf2268d7a"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 1.438137252s ago: executing program 3 (id=2323): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r1 = gettid() write$cgroup_pid(r0, &(0x7f0000000100)=r1, 0x12) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000140)=0x5, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x14) 1.397740007s ago: executing program 4 (id=2324): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x200000) (async, rerun: 64) r2 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x20000}, 0x24}}, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) write$tun(r6, &(0x7f0000000a00)=ANY=[@ANYBLOB="0104000000003d000000604966cd0017060100000000000000000000ffffffffffff000000000000000000000000000000014e244e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="504546d6294416e4ff6500eaa58a40df69fe30d921ab64c29262014434b768151430afcb1af0d521ca8ed3a87eca19aaf6354e3b5dfaf6ddc3415a548cc627655f87d4f831cb4ca7a8777b9fdfae6db4dc5994bd13f164cee746f85bc38b32bea31c5aafca305314eec902028ab729a0f794866d9d2b7931f63df6637b8635f619afd2f01de0edcfa87c5a56da9f56a6d0485688e7c595eda9c55d9c3cb608a949cd5015f382bbbdd07f99b43a531d828f548bb23a778f83297dd22da50f9ab4dfa77403f96f22a8"], 0x49) (async, rerun: 32) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x10, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xe}}}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff2, 0xfff3}, {}, {0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}}, 0x800) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="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"/282], 0x114}], 0x1}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) (async, rerun: 32) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 32) r11 = socket(0x15, 0x5, 0x0) (async) r12 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0) (async, rerun: 64) getsockopt(r11, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (rerun: 64) 1.303486596s ago: executing program 3 (id=2325): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000740000000000019078ac1e0001ac1414aa05009078e00400e0670000000000005d00030000ac1414aa7f00000183ea00070321443c00030a01010100000000000000000000007f00000000ac14d5eb000000000000000000000000ac1414000000000000100002000000000000000000"], 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fd50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="ac352ae365311a30bc8fcd433493d7e43b836fda8a485493071a8c12f803c16753ebee0d6828782b40a5a24fdf93945175c80a0f487d45c7e68581aed1", 0x3d}, {&(0x7f0000000700)="eea4bed2865091489aaef2ca98d94e6b5801524dd4ed6125433d5f264cb5d436eb8ede0fdc159495d5e30afa70be3e8e3a981d2a4799fbf3b55cffffffffffffffffa9eb6a6ec9ab24b3c438a6f408ba3e25a6b69f2b44be03eb114ab1bece1d41d4e6c5ba3fdc63f1f89628044d9f124d320054f13586fe50d6559497a75fe5bb077a0df3d8c67f123d93aeb474a53540d3d16b7d54132543d9558df07e9cbe90ddba9e440020c93f0314ca1e335f39ee83e0572b04651fd0863ba313c6358b96ed9f", 0xc3}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r3, 0x0, 0x1}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004380)=ANY=[@ANYBLOB="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"], 0x1dc0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0xd, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.246650394s ago: executing program 2 (id=2326): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000008000000008ffcb7f44ed766cc1af40000000000000000730133000000000095080000d9d153d50590d868b22c0ec523cc8dfb1e5b04490ed8b062f41e92c949cc78955cc51c7b7eb880c61db8512cfca483a6d1df44d858aa0dc7a4f357df800842d74f367c3d73eedb8bb6ef81ddb26e8cfbb298f9a7112c8d5e5a67ae40d9a325f06fe624873fe54c537775471b32"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r7, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/21, 0x15}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x57401286d6ad44eb, 0x0) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) write$tun(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xad) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r10, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000280), {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1, 0x6, 0xfffffff7, 'syz1\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xff, 'wg2\x00', 'macvlan0\x00', {0xff}, {}, 0x29, 0x1, 0x14}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000010000009"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32=r9, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) 1.178087758s ago: executing program 1 (id=2327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) splice(r3, &(0x7f0000000200)=0x6, r1, &(0x7f0000000240)=0x10000, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x61, 0x0, 0x29) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000040000aa0000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x3000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, &(0x7f0000000200)=0x9c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000003e00)=[{{&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000700000086080000000300ac"], 0x18}}], 0x1, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.163003137s ago: executing program 4 (id=2328): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000004000091efffffffffddbdf250300000004001ffc0c0001"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x4010, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f00000020c0)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x8000003, 0x5e, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x8000, 0x0, 0x20208}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f00000020c0)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x8000003, 0x5e, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x8000, 0x0, 0x20208}}) 992.80511ms ago: executing program 3 (id=2329): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, r0, 0x4d124000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 870.756324ms ago: executing program 4 (id=2330): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) shutdown(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = accept4$unix(r0, &(0x7f00000007c0), &(0x7f0000000280)=0x6e, 0x80000) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000004c0)={0x1, 0x8}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) close(0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000240)=0x5, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000004900)=[{{&(0x7f00000003c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000100)=""/1, 0x1}, {&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000840)=""/211, 0xd3}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000a40)=""/86, 0x56}], 0x7, &(0x7f0000000b40)=""/157, 0x9d}, 0xd57e}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000c00)=""/137, 0x89}], 0x1, &(0x7f0000000cc0)=""/84, 0x54}, 0x85ae}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001340)=""/68, 0x44}], 0x1, &(0x7f00000013c0)=""/164, 0xa4}, 0x7}, {{&(0x7f0000001480)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000e40)=""/185, 0xb9}, {&(0x7f00000015c0)=""/234, 0xea}, {&(0x7f0000000540)=""/59, 0x3b}, {&(0x7f00000016c0)=""/67, 0x43}, {&(0x7f0000001740)=""/195, 0xc3}, {&(0x7f0000001840)=""/91, 0x5b}, {&(0x7f00000018c0)=""/172, 0xac}], 0x7}, 0x5}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/196, 0xc4}, {&(0x7f0000000780)=""/50, 0x32}], 0x2, &(0x7f0000001c00)=""/199, 0xc7}, 0x1}, {{&(0x7f0000001d00)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000002140)=""/237, 0xed}, 0xd748}, {{&(0x7f0000002240)=@isdn, 0x80, &(0x7f0000002700)=[{&(0x7f00000022c0)=""/88, 0x58}, {&(0x7f0000002340)=""/142, 0x8e}, {&(0x7f0000002400)=""/234, 0xea}, {&(0x7f0000002600)=""/130, 0x82}, {&(0x7f0000003900)=""/4085, 0xff5}, {&(0x7f0000001e00)=""/44, 0x2c}], 0x6, &(0x7f0000002780)=""/76, 0x4c}, 0x14d631ab}], 0x7, 0x60010020, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000e00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd70007edbdf2503000000050029000100000005003500020000000a000900aaaaaaaaaabb0000050033000200000005003500ff000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c084) 209.128574ms ago: executing program 1 (id=2331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022bbd7000000000000200de44000061000000000008006100004000"], 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000ba00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r4}, 0x18) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 115.135395ms ago: executing program 0 (id=2332): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x9, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r1, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x1, 0x4) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x40000000, 0x0, 0xff}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@private, 0xffffffde, 0x4, 0x3}}, 0xe8) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000038fd5aaf569fb5e4a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 0s ago: executing program 3 (id=2333): socketpair(0x27, 0x80000, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000040)={0x1, @exit_sniff_mode={{0x804, 0x2}, {0xc9}}}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffffff, 0x4d}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "efaf689392893138458a5e45d4537079bfef88ddebf7c74e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "aef22ac03dfc7ad3a9a9fd4d54028a84592181abbee3c58d"}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x4051}, 0x1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x138e75e3, 0x0, 0xe, 0x10002, 0x1, 0x8, '\x00', 0x0, r5, 0x4, 0x4, 0x3, 0xa, @void, @value, @value=r6}, 0x50) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r8, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000040}, 0x4000000) syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), r0) r9 = socket(0x15, 0x80000, 0x3) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r8, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4004850) r10 = socket$netlink(0x10, 0x3, 0x4) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r9) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x1c0, r11, 0x400, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10}, 0x8004) sendfile(r9, r10, &(0x7f00000008c0)=0x3, 0xfffffffffffffeff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900), 0x210000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x120, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xb1, 0xac, "a8be69d4500f6d576d13c4a7a3898ea86d56c47d9cc9d9e3f2bbc17e1143f32ec8974f4c2d3dfa0f4b73c078a6e3a65adae592812d9edb6395b4325f1f5e54ddb340fa8bb3b48688beab0ade3a08be738d60e329eca33fad9d6c31bbe3b73ef9252c5755f01ef3f2720a7cac1d876f1bf60432ff6776f430a4198ed818bb8225731b3eaaac0da1a540a935b5baff365e4913f3d5788e6c02ddf2e0d03ed80668253258cad89472dba564f445b2"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x22}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000851}, 0x20004804) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0x7, 0x10, 0x5, 0x101, {{0x8, 0x4, 0x1, 0x34, 0x20, 0x65, 0x0, 0x7, 0x29, 0x0, @private=0xa010100, @local, {[@end, @generic={0x86, 0x9, "31b19454b4cfc9"}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x2, '\x00', r13, r5, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$key(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x2, 0x12, 0x5, 0x6, 0xc, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_key={0x6, 0x8, 0x140, 0x0, "e500405e1ee8d498a1208ab559dafe5d0d2697ffed978c87573f46ffed32e4fe2fbe7981018454cc"}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x60}}, 0x40040) socketpair(0x25, 0xa, 0x9, &(0x7f0000000d80)={0xffffffffffffffff}) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e00), r9) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r14, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r15, 0x2, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={0xffffffffffffffff, 0x0, 0xe8, 0x7f, &(0x7f0000000f00)="16fe0c1ce2eb74dd08b963ff8944d6f34b68244564ac760d6ef06914836a2bb59e2d10151860343567a68ee3cf43a0ad10a6b1c43862684bc1dd3f71299ac9c9e6d0bffc515d744f05ead1f570e8a1080c6ce823e90026bf28da084a93b88987653adf0e15167a355b0bf7c4c0d31a22ca8058e4535a2d040749a0085bf2513be5c59c7e1c4651e189b153ba7a509f5a2b244bef376321484f646564db92731093d9eaa574f50f45cc6b22d3b3ad37dc2da8e6f646117dd7ec4619525730e14b10f14fc256389444d8ea124bdd0365a88b29a8e92db73183769291d170cb5a09d47d3af7f34613a5", &(0x7f0000001000)=""/127, 0x8, 0x0, 0x1, 0x23, &(0x7f0000001080)="ec", &(0x7f00000010c0)="be908954dff3386981577413f85865e11de350906dcd689f3714bb34bb0388d20fb7e5", 0x2, 0x0, 0x3ff}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001300)={'wg1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x2, &(0x7f0000001180)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x10}], &(0x7f00000011c0)='syzkaller\x00', 0xb, 0xf5, &(0x7f0000001200)=""/245, 0x41100, 0x2b, '\x00', r16, 0x25, r5, 0x8, &(0x7f0000001340)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001380)=[r7, r7], &(0x7f00000013c0)=[{0x1, 0x199, 0x0, 0x8}, {0x3, 0x4, 0x7, 0x3}, {0x4, 0x4, 0x2, 0xc}], 0x10, 0x80000000, @void, @value}, 0x94) kernel console output (not intermixed with test programs): m netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.152283][ T9640] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.390565][ T9657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.961'. [ 192.667781][ T5846] Bluetooth: hci0: command 0x0401 tx timeout [ 192.675142][ T9662] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 192.780448][ T9682] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.967'. [ 192.791008][ T9682] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.967'. [ 192.801326][ T9645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.959'. [ 192.849105][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 193.452114][ T9712] netlink: 104 bytes leftover after parsing attributes in process `syz.3.972'. [ 193.550968][ T9718] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 193.853318][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 194.009627][ T9734] tun0: tun_chr_ioctl cmd 1074025677 [ 194.015275][ T9734] tun0: linktype set to 769 [ 194.030529][ T9734] bond0: option mode: unable to set because the bond device is up [ 194.103283][ T9734] netlink: 140 bytes leftover after parsing attributes in process `syz.1.977'. [ 194.142627][ T9736] x_tables: duplicate underflow at hook 2 [ 194.213223][ T9743] netlink: 'syz.0.980': attribute type 11 has an invalid length. [ 194.228689][ T9744] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 194.331257][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.982'. [ 194.518323][ T9751] dummy0: entered promiscuous mode [ 194.530990][ T9751] macsec1: entered promiscuous mode [ 194.551416][ T9751] dummy0: left promiscuous mode [ 194.748595][ T5858] Bluetooth: hci0: command 0x0401 tx timeout [ 194.834125][ T9771] netlink: 'syz.1.989': attribute type 5 has an invalid length. [ 194.849961][ T9775] netlink: 'syz.0.990': attribute type 4 has an invalid length. [ 194.861977][ T9775] netlink: 'syz.0.990': attribute type 4 has an invalid length. [ 195.142300][ T9793] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 195.165154][ T9793] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 195.229004][ T9791] netlink: 'syz.1.993': attribute type 39 has an invalid length. [ 195.584121][ T9803] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.604350][ T9803] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.633461][ T9803] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.657673][ T9803] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.815694][ T974] lo speed is unknown, defaulting to 1000 [ 195.897431][ T9808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.906481][ T9808] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.931814][ T9808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.994807][ T974] lo speed is unknown, defaulting to 1000 [ 196.013513][ T977] lo speed is unknown, defaulting to 1000 [ 196.497966][ T29] audit: type=1804 audit(1739396260.442:4): pid=9841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1006" name="/newroot/200/cgroup.controllers" dev="tmpfs" ino=1049 res=1 errno=0 [ 196.572253][ T29] audit: type=1800 audit(1739396260.442:5): pid=9841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1006" name="cgroup.controllers" dev="tmpfs" ino=1049 res=0 errno=0 [ 196.703135][ T9853] lo speed is unknown, defaulting to 1000 [ 196.830588][ T9857] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 196.914188][ T9857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.995618][ T9868] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 197.038056][ T9871] __nla_validate_parse: 11 callbacks suppressed [ 197.038076][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1016'. [ 197.055262][ T9871] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1016'. [ 197.108716][ T9872] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1016'. [ 197.141322][ T9872] batadv1: entered promiscuous mode [ 197.146807][ T9872] batadv1: entered allmulticast mode [ 197.178778][ T9871] batadv1: entered promiscuous mode [ 197.198504][ T9871] batadv1: entered allmulticast mode [ 197.752051][ T9898] IPVS: length: 186 != 24 [ 197.761563][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 197.780818][ T9901] netlink: 'syz.3.1026': attribute type 21 has an invalid length. [ 197.789400][ T9901] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 197.840832][ T9899] batadv1: entered promiscuous mode [ 198.120667][ T9921] netlink: 'syz.0.1031': attribute type 3 has an invalid length. [ 198.461906][ T9939] netlink: 'syz.1.1036': attribute type 21 has an invalid length. [ 198.482698][ T9942] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1037'. [ 198.495844][ T9942] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 198.651582][ T9951] netlink: 'syz.3.1041': attribute type 11 has an invalid length. [ 198.697782][ T9953] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 199.023255][ T9969] bond3: entered promiscuous mode [ 199.040544][ T9969] bond3: entered allmulticast mode [ 199.046189][ T9969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.208706][ T9972] lo speed is unknown, defaulting to 1000 [ 199.706304][T10004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1054'. [ 199.750535][T10004] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 200.002701][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 200.116872][ T5861] Bluetooth: hci4: command 0x0405 tx timeout [ 200.291807][T10035] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1063'. [ 200.431577][T10037] lo speed is unknown, defaulting to 1000 [ 200.493119][T10040] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 200.510644][T10040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1066'. [ 200.524741][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 200.693676][T10046] netlink: 'syz.2.1068': attribute type 39 has an invalid length. [ 200.956685][T10062] netlink: 'syz.0.1072': attribute type 30 has an invalid length. [ 201.134862][ T5846] Bluetooth: hci4: link tx timeout [ 201.140807][ T5846] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 201.151486][ T5846] Bluetooth: hci4: link tx timeout [ 201.156654][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.306768][T10074] lo speed is unknown, defaulting to 1000 [ 201.793112][ T5857] Bluetooth: hci1: command 0x0401 tx timeout [ 201.795873][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 201.799505][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 201.812439][ T5846] Bluetooth: hci0: command 0x0401 tx timeout [ 202.170793][T10096] netlink: 'syz.0.1079': attribute type 10 has an invalid length. [ 202.209938][T10096] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 202.308095][T10101] lo speed is unknown, defaulting to 1000 [ 202.381501][T10109] __nla_validate_parse: 4 callbacks suppressed [ 202.381522][T10109] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1082'. [ 202.948590][T10138] veth0_to_team: entered promiscuous mode [ 202.954392][T10138] veth0_to_team: entered allmulticast mode [ 202.955389][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1089'. [ 202.970423][T10142] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1089'. [ 203.049974][T10136] lo speed is unknown, defaulting to 1000 [ 203.093222][T10147] bridge2: entered promiscuous mode [ 203.142414][T10147] bridge2: entered allmulticast mode [ 203.185843][T10147] team0: Port device bridge2 added [ 203.243157][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 203.256288][T10160] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1091'. [ 203.309256][T10156] sctp: [Deprecated]: syz.4.1091 (pid 10156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.309256][T10156] Use struct sctp_sack_info instead [ 203.352256][T10137] lo speed is unknown, defaulting to 1000 [ 203.385122][T10160] netlink: 'syz.4.1091': attribute type 1 has an invalid length. [ 203.406208][T10163] xt_l2tp: invalid flags combination: 4 [ 203.426344][T10163] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1093'. [ 203.722536][T10171] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1095'. [ 203.762663][T10171] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1095'. [ 204.328530][T10183] bridge2: entered promiscuous mode [ 204.333812][T10183] bridge2: entered allmulticast mode [ 204.342129][T10183] team0: Device bridge2 is up. Set it down before adding it as a team port [ 204.391897][T10187] openvswitch: netlink: nsh attribute has 3 unknown bytes. [ 204.408492][T10186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1100'. [ 204.418980][T10187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.435218][T10187] netlink: 'syz.2.1101': attribute type 1 has an invalid length. [ 204.445134][T10187] netlink: 'syz.2.1101': attribute type 4 has an invalid length. [ 204.454425][T10187] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1101'. [ 204.464210][T10187] NCSI netlink: No device for ifindex 458760 [ 204.660606][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 204.710564][T10196] 8021q: adding VLAN 0 to HW filter on device team1 [ 204.788490][T10197] netlink: 'syz.1.1103': attribute type 47 has an invalid length. [ 204.821689][T10197] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 204.911254][ T29] audit: type=1804 audit(1739396268.872:6): pid=10208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1107" name="/newroot/223/cgroup.controllers" dev="tmpfs" ino=1165 res=1 errno=0 [ 204.968525][ T29] audit: type=1800 audit(1739396268.872:7): pid=10208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1107" name="cgroup.controllers" dev="tmpfs" ino=1165 res=0 errno=0 [ 204.993975][T10213] openvswitch: netlink: Missing valid actions attribute. [ 205.021238][T10213] openvswitch: netlink: Actions may not be safe on all matching packets [ 205.180930][T10226] vlan4: entered promiscuous mode [ 205.307739][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 206.511572][T10239] hsr0: left promiscuous mode [ 206.821627][T10239] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.837803][T10239] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.846205][T10239] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.866387][T10239] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.953619][T10259] netlink: 'syz.0.1123': attribute type 12 has an invalid length. [ 206.989999][T10261] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 207.151826][T10265] 0ªX¹¦D: renamed from gretap0 [ 207.163395][T10265] 0ªX¹¦D: entered allmulticast mode [ 207.179960][T10265] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 207.270589][T10275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.280738][T10276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.916312][T10307] __nla_validate_parse: 8 callbacks suppressed [ 207.916334][T10307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1136'. [ 207.936572][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1136'. [ 207.946207][T10307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1136'. [ 207.987626][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1136'. [ 208.008437][T10307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1136'. [ 208.020605][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1136'. [ 208.037348][T10307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1136'. [ 208.051065][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1136'. [ 208.091248][T10307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1136'. [ 208.110768][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 208.128610][T10310] bridge0: Device is already in use. [ 208.407156][T10326] macsec1: entered allmulticast mode [ 208.424413][T10326] macvlan1: entered allmulticast mode [ 208.440699][T10326] macvlan1: left allmulticast mode [ 208.537464][T10334] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 208.590642][T10334] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 208.632672][T10334] netlink: 'syz.0.1146': attribute type 2 has an invalid length. [ 208.857941][T10355] FAULT_INJECTION: forcing a failure. [ 208.857941][T10355] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 208.898444][T10355] CPU: 1 UID: 0 PID: 10355 Comm: syz.2.1151 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 208.898476][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 208.898489][T10355] Call Trace: [ 208.898496][T10355] [ 208.898505][T10355] dump_stack_lvl+0x241/0x360 [ 208.898536][T10355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.898558][T10355] ? __pfx__printk+0x10/0x10 [ 208.898604][T10355] ? __pfx_lock_release+0x10/0x10 [ 208.898642][T10355] should_fail_ex+0x40a/0x550 [ 208.898672][T10355] _copy_from_user+0x2d/0xb0 [ 208.898694][T10355] sctp_setsockopt+0xcc/0x11c0 [ 208.898725][T10355] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 208.898751][T10355] do_sock_setsockopt+0x3af/0x720 [ 208.898787][T10355] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 208.898823][T10355] ? __fget_files+0x395/0x410 [ 208.898845][T10355] ? __fget_files+0x2a/0x410 [ 208.898873][T10355] __x64_sys_setsockopt+0x1ee/0x280 [ 208.898910][T10355] do_syscall_64+0xf3/0x230 [ 208.898940][T10355] ? clear_bhb_loop+0x35/0x90 [ 208.898972][T10355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.899000][T10355] RIP: 0033:0x7fcc88f8cde9 [ 208.899018][T10355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.899034][T10355] RSP: 002b:00007fcc89e9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.899056][T10355] RAX: ffffffffffffffda RBX: 00007fcc891a5fa0 RCX: 00007fcc88f8cde9 [ 208.899071][T10355] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000003 [ 208.899083][T10355] RBP: 00007fcc89e9e090 R08: 0000000000000090 R09: 0000000000000000 [ 208.899096][T10355] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.899110][T10355] R13: 0000000000000000 R14: 00007fcc891a5fa0 R15: 00007ffe81ebed18 [ 208.899138][T10355] [ 208.951235][T10359] x_tables: duplicate underflow at hook 1 [ 209.131484][T10359] raw_sendmsg: syz.3.1152 forgot to set AF_INET. Fix it! [ 209.726313][T10394] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 209.984724][T10398] FAULT_INJECTION: forcing a failure. [ 209.984724][T10398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.030897][T10398] CPU: 1 UID: 0 PID: 10398 Comm: syz.0.1166 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 210.030931][T10398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 210.030944][T10398] Call Trace: [ 210.030952][T10398] [ 210.030961][T10398] dump_stack_lvl+0x241/0x360 [ 210.030992][T10398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.031015][T10398] ? __pfx__printk+0x10/0x10 [ 210.031055][T10398] ? snprintf+0xda/0x120 [ 210.031082][T10398] should_fail_ex+0x40a/0x550 [ 210.031112][T10398] _copy_to_user+0x31/0xb0 [ 210.031137][T10398] simple_read_from_buffer+0xca/0x150 [ 210.031173][T10398] proc_fail_nth_read+0x1e9/0x250 [ 210.031211][T10398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.031248][T10398] ? rw_verify_area+0x243/0x630 [ 210.031276][T10398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.031311][T10398] vfs_read+0x1f8/0xb40 [ 210.031340][T10398] ? fdget_pos+0x254/0x320 [ 210.031365][T10398] ? __pfx___mutex_lock+0x10/0x10 [ 210.031395][T10398] ? __pfx_vfs_read+0x10/0x10 [ 210.031426][T10398] ? __fget_files+0x2a/0x410 [ 210.031450][T10398] ? __fget_files+0x395/0x410 [ 210.031472][T10398] ? __fget_files+0x2a/0x410 [ 210.031504][T10398] ksys_read+0x18f/0x2b0 [ 210.031543][T10398] ? __pfx_ksys_read+0x10/0x10 [ 210.031572][T10398] ? do_syscall_64+0x100/0x230 [ 210.031605][T10398] ? do_syscall_64+0xb6/0x230 [ 210.031637][T10398] do_syscall_64+0xf3/0x230 [ 210.031667][T10398] ? clear_bhb_loop+0x35/0x90 [ 210.031702][T10398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.031730][T10398] RIP: 0033:0x7ff64d38b7fc [ 210.031748][T10398] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 210.031766][T10398] RSP: 002b:00007ff64e135030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.031789][T10398] RAX: ffffffffffffffda RBX: 00007ff64d5a5fa0 RCX: 00007ff64d38b7fc [ 210.031806][T10398] RDX: 000000000000000f RSI: 00007ff64e1350a0 RDI: 0000000000000006 [ 210.031819][T10398] RBP: 00007ff64e135090 R08: 0000000000000000 R09: 0000000000000000 [ 210.031832][T10398] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.031845][T10398] R13: 0000000000000000 R14: 00007ff64d5a5fa0 R15: 00007ffe036dc698 [ 210.031877][T10398] [ 210.490495][T10408] syz.4.1168 (10408) used obsolete PPPIOCDETACH ioctl [ 210.505949][T10411] syzkaller1: entered promiscuous mode [ 210.547895][T10411] syzkaller1: entered allmulticast mode [ 210.630026][T10419] netlink: 'syz.3.1172': attribute type 21 has an invalid length. [ 211.838649][T10471] netlink: 'syz.2.1185': attribute type 2 has an invalid length. [ 212.960106][T10560] __nla_validate_parse: 164 callbacks suppressed [ 212.960127][T10560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1205'. [ 212.984618][T10560] nbd: must specify at least one socket [ 212.991236][T10559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1205'. [ 212.993078][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 213.003244][T10559] nbd: must specify at least one socket [ 213.125194][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1209'. [ 213.220369][T10573] xt_nfacct: accounting object `syz1' does not exists [ 213.686866][T10592] netlink: 'syz.1.1214': attribute type 1 has an invalid length. [ 213.697887][T10592] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1214'. [ 214.187048][T10621] lo speed is unknown, defaulting to 1000 [ 214.234665][T10626] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 214.245203][T10627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1222'. [ 214.261510][T10626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.762676][T10644] lo speed is unknown, defaulting to 1000 [ 215.037980][T10658] netlink: 'syz.3.1235': attribute type 2 has an invalid length. [ 215.045818][T10658] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1235'. [ 215.196683][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 215.237134][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 215.314649][T10669] vlan0: entered promiscuous mode [ 215.691488][T10684] lo speed is unknown, defaulting to 1000 [ 216.052254][T10708] tipc: Started in network mode [ 216.057191][T10708] tipc: Node identity ffffffff, cluster identity 4711 [ 216.067973][T10708] tipc: Node number set to 4294967295 [ 216.265264][T10719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1255'. [ 216.730286][T10741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.320589][T10771] syz.4.1272: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.346358][T10771] CPU: 1 UID: 0 PID: 10771 Comm: syz.4.1272 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 217.346391][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 217.346405][T10771] Call Trace: [ 217.346413][T10771] [ 217.346422][T10771] dump_stack_lvl+0x241/0x360 [ 217.346454][T10771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.346476][T10771] ? __pfx__printk+0x10/0x10 [ 217.346517][T10771] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 217.346542][T10771] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 217.346570][T10771] warn_alloc+0x278/0x410 [ 217.346601][T10771] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 217.346633][T10771] ? __pfx_warn_alloc+0x10/0x10 [ 217.346663][T10771] ? kasan_save_track+0x3f/0x80 [ 217.346691][T10771] ? __kasan_kmalloc+0x98/0xb0 [ 217.346724][T10771] ? xsk_setsockopt+0x4ea/0x950 [ 217.346746][T10771] ? do_sock_setsockopt+0x3af/0x720 [ 217.346777][T10771] ? __x64_sys_setsockopt+0x1ee/0x280 [ 217.346809][T10771] ? do_syscall_64+0xf3/0x230 [ 217.346837][T10771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.346877][T10771] __vmalloc_node_range_noprof+0x126/0x1380 [ 217.346938][T10771] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.346973][T10771] ? __kasan_kmalloc+0x98/0xb0 [ 217.347011][T10771] vmalloc_user_noprof+0x74/0x80 [ 217.347040][T10771] ? xskq_create+0xb6/0x170 [ 217.347064][T10771] xskq_create+0xb6/0x170 [ 217.347098][T10771] xsk_init_queue+0xa1/0x100 [ 217.347126][T10771] xsk_setsockopt+0x4ea/0x950 [ 217.347154][T10771] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.347179][T10771] ? __pfx_aa_sk_perm+0x10/0x10 [ 217.347210][T10771] ? aa_sock_opt_perm+0x79/0x120 [ 217.347246][T10771] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.347273][T10771] do_sock_setsockopt+0x3af/0x720 [ 217.347314][T10771] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 217.347363][T10771] ? __fget_files+0x395/0x410 [ 217.347386][T10771] ? __fget_files+0x2a/0x410 [ 217.347419][T10771] __x64_sys_setsockopt+0x1ee/0x280 [ 217.347461][T10771] do_syscall_64+0xf3/0x230 [ 217.347492][T10771] ? clear_bhb_loop+0x35/0x90 [ 217.347524][T10771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.347552][T10771] RIP: 0033:0x7fd4ed38cde9 [ 217.347571][T10771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.347589][T10771] RSP: 002b:00007fd4ee116038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.347612][T10771] RAX: ffffffffffffffda RBX: 00007fd4ed5a5fa0 RCX: 00007fd4ed38cde9 [ 217.347628][T10771] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 217.347641][T10771] RBP: 00007fd4ed40e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 217.347655][T10771] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.347668][T10771] R13: 0000000000000000 R14: 00007fd4ed5a5fa0 R15: 00007fff9139f708 [ 217.347700][T10771] [ 217.647258][T10771] Mem-Info: [ 217.652747][T10771] active_anon:6585 inactive_anon:0 isolated_anon:0 [ 217.652747][T10771] active_file:1423 inactive_file:38357 isolated_file:0 [ 217.652747][T10771] unevictable:768 dirty:186 writeback:0 [ 217.652747][T10771] slab_reclaimable:11600 slab_unreclaimable:103826 [ 217.652747][T10771] mapped:28429 shmem:1451 pagetables:760 [ 217.652747][T10771] sec_pagetables:0 bounce:0 [ 217.652747][T10771] kernel_misc_reclaimable:0 [ 217.652747][T10771] free:1329194 free_pcp:2407 free_cma:0 [ 217.702850][T10771] Node 0 active_anon:26440kB inactive_anon:0kB active_file:5692kB inactive_file:153352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113716kB dirty:744kB writeback:0kB shmem:4268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12128kB pagetables:3040kB sec_pagetables:0kB all_unreclaimable? no [ 217.771028][T10771] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 217.805008][T10771] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.832488][T10771] lowmem_reserve[]: 0 2491 2491 0 0 [ 217.837859][T10771] Node 0 DMA32 free:1407396kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:26504kB inactive_anon:0kB active_file:5692kB inactive_file:152772kB unevictable:1536kB writepending:744kB present:3129332kB managed:2551076kB mlocked:0kB bounce:0kB free_pcp:2720kB local_pcp:1076kB free_cma:0kB [ 217.868962][T10771] lowmem_reserve[]: 0 0 0 0 0 [ 217.873759][T10771] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 217.901170][T10771] lowmem_reserve[]: 0 0 0 0 0 [ 217.905986][T10771] Node 1 Normal free:3901140kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.961138][T10771] lowmem_reserve[]: 0 0 0 0 0 [ 217.969770][T10771] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 217.990370][T10771] Node 0 DMA32: 965*4kB (UME) 718*8kB (UME) 164*16kB (UM) 450*32kB (UME) 396*64kB (UME) 83*128kB (UME) 33*256kB (UM) 13*512kB (UM) 6*1024kB (UM) 8*2048kB (UME) 319*4096kB (UM) = 1406852kB [ 218.046632][T10771] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 218.081044][T10771] Node 1 Normal: 207*4kB (UE) 47*8kB (UME) 38*16kB (UME) 236*32kB (UME) 105*64kB (UME) 30*128kB (UME) 13*256kB (UM) 10*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 943*4096kB (M) = 3901140kB [ 218.128387][T10771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.144049][T10771] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.155888][T10771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.177663][T10771] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.195702][T10795] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 218.197341][T10771] 41214 total pagecache pages [ 218.218805][T10771] 0 pages in swap cache [ 218.223920][T10771] Free swap = 124996kB [ 218.236019][T10771] Total swap = 124996kB [ 218.241166][T10771] 2097051 pages RAM [ 218.241961][T10793] xt_CT: No such helper "snmp" [ 218.245615][T10771] 0 pages HighMem/MovableOnly [ 218.263345][T10771] 427496 pages reserved [ 218.270177][T10771] 0 pages cma reserved [ 218.411765][T10806] tipc: Can't bind to reserved service type 0 [ 218.766136][T10828] netlink: 'syz.2.1287': attribute type 3 has an invalid length. [ 218.779293][T10826] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 218.806759][T10828] __nla_validate_parse: 2 callbacks suppressed [ 218.806778][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 218.830923][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 218.842312][T10828] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1287'. [ 218.872013][T10831] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 218.880000][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1290'. [ 219.075046][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 219.131198][T10840] bridge_slave_1 (unregistering): left allmulticast mode [ 219.143608][T10840] bridge_slave_1 (unregistering): left promiscuous mode [ 219.166542][T10840] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.202887][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1295'. [ 219.214245][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1295'. [ 219.296265][T10849] ip6gretap0: entered promiscuous mode [ 219.306866][T10849] ip6gretap0: left promiscuous mode [ 219.406533][T10855] lo speed is unknown, defaulting to 1000 [ 219.682583][T10870] vlan2: entered promiscuous mode [ 219.705070][T10870] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 219.765584][T10870] bridge0: entered promiscuous mode [ 219.790479][T10870] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 219.997904][T10875] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.089841][T10877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.316317][T10855] lo speed is unknown, defaulting to 1000 [ 220.438171][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 220.530413][T10900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.539548][T10900] bond0: (slave bond3): Enslaving as an active interface with an up link [ 220.718229][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 220.757953][T10907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1313'. [ 220.925853][T10894] lo speed is unknown, defaulting to 1000 [ 221.217453][T10895] openvswitch: netlink: IPv6 tunnel dst address is zero [ 222.028652][T10952] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 222.113056][ T5861] Bluetooth: hci0: command 0x0401 tx timeout [ 223.074764][T10992] netlink: 'syz.3.1341': attribute type 25 has an invalid length. [ 223.096248][T10994] netlink: 'syz.1.1340': attribute type 3 has an invalid length. [ 223.671351][T11021] syzkaller1: entered promiscuous mode [ 223.677072][T11021] syzkaller1: entered allmulticast mode [ 223.742479][T11021] netlink: 'syz.0.1350': attribute type 5 has an invalid length. [ 224.005315][T11043] netlink: 'syz.4.1359': attribute type 10 has an invalid length. [ 224.045290][T11043] team0: Device ipvlan1 failed to register rx_handler [ 224.245096][T11054] lo speed is unknown, defaulting to 1000 [ 224.439614][T11064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.619821][T11074] netlink: 'syz.4.1366': attribute type 4 has an invalid length. [ 224.724262][T11076] __nla_validate_parse: 8 callbacks suppressed [ 224.724284][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 224.784147][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 224.832030][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1368'. [ 226.085551][T11124] bridge5: entered promiscuous mode [ 226.097709][T11124] bridge5: entered allmulticast mode [ 226.099926][T11123] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1382'. [ 226.127764][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 226.143009][T11124] team0: Port device bridge5 added [ 226.203268][T11124] bridge0: port 1(ip6gretap0) entered blocking state [ 226.238298][T11124] bridge0: port 1(ip6gretap0) entered disabled state [ 226.245284][T11124] ip6gretap0: entered allmulticast mode [ 226.281357][T11124] ip6gretap0: left allmulticast mode [ 226.632699][T11144] lo speed is unknown, defaulting to 1000 [ 227.007798][T11163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.058250][T11162] lo speed is unknown, defaulting to 1000 [ 227.676065][T11190] FAULT_INJECTION: forcing a failure. [ 227.676065][T11190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.710300][T11190] CPU: 0 UID: 0 PID: 11190 Comm: syz.2.1397 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 227.710332][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 227.710345][T11190] Call Trace: [ 227.710353][T11190] [ 227.710362][T11190] dump_stack_lvl+0x241/0x360 [ 227.710392][T11190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.710415][T11190] ? __pfx__printk+0x10/0x10 [ 227.710451][T11190] ? __pfx_lock_release+0x10/0x10 [ 227.710490][T11190] should_fail_ex+0x40a/0x550 [ 227.710520][T11190] _copy_from_iter+0x1e9/0x1c20 [ 227.710552][T11190] ? __virt_addr_valid+0x183/0x530 [ 227.710603][T11190] ? __alloc_skb+0x28f/0x440 [ 227.710634][T11190] ? __pfx__copy_from_iter+0x10/0x10 [ 227.710667][T11190] ? __virt_addr_valid+0x183/0x530 [ 227.710699][T11190] ? __virt_addr_valid+0x183/0x530 [ 227.710728][T11190] ? __virt_addr_valid+0x45f/0x530 [ 227.710761][T11190] ? __phys_addr_symbol+0x2f/0x70 [ 227.710790][T11190] ? __check_object_size+0x47a/0x730 [ 227.710817][T11190] netlink_sendmsg+0x73d/0xcb0 [ 227.710852][T11190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.710879][T11190] ? aa_sock_msg_perm+0x91/0x160 [ 227.710913][T11190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.710934][T11190] __sock_sendmsg+0x221/0x270 [ 227.710963][T11190] ____sys_sendmsg+0x52a/0x7e0 [ 227.710992][T11190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.711024][T11190] ? __fget_files+0x2a/0x410 [ 227.711051][T11190] ? __fget_files+0x2a/0x410 [ 227.711082][T11190] __sys_sendmsg+0x269/0x350 [ 227.711108][T11190] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.711142][T11190] ? do_sys_openat2+0x17a/0x1d0 [ 227.711193][T11190] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.711224][T11190] ? do_syscall_64+0x100/0x230 [ 227.711258][T11190] ? do_syscall_64+0xb6/0x230 [ 227.711290][T11190] do_syscall_64+0xf3/0x230 [ 227.711321][T11190] ? clear_bhb_loop+0x35/0x90 [ 227.711354][T11190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.711382][T11190] RIP: 0033:0x7fcc88f8cde9 [ 227.711402][T11190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.711419][T11190] RSP: 002b:00007fcc89e9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.711443][T11190] RAX: ffffffffffffffda RBX: 00007fcc891a5fa0 RCX: 00007fcc88f8cde9 [ 227.711459][T11190] RDX: 0000000000000000 RSI: 0000400000000500 RDI: 0000000000000003 [ 227.711473][T11190] RBP: 00007fcc89e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 227.711486][T11190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.711499][T11190] R13: 0000000000000000 R14: 00007fcc891a5fa0 R15: 00007ffe81ebed18 [ 227.711530][T11190] [ 227.795651][T11194] netlink: 'syz.3.1399': attribute type 21 has an invalid length. [ 228.037716][T11194] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 228.264467][T11206] lo speed is unknown, defaulting to 1000 [ 228.502282][T11218] xt_TCPMSS: Only works on TCP SYN packets [ 229.139117][ T46] IPVS: starting estimator thread 0... [ 229.223655][T11241] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.243899][T11239] IPVS: using max 19 ests per chain, 45600 per kthread [ 229.291481][T11247] FAULT_INJECTION: forcing a failure. [ 229.291481][T11247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.339691][T11247] CPU: 1 UID: 0 PID: 11247 Comm: syz.4.1416 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 229.339723][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 229.339736][T11247] Call Trace: [ 229.339744][T11247] [ 229.339753][T11247] dump_stack_lvl+0x241/0x360 [ 229.339783][T11247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.339805][T11247] ? __pfx__printk+0x10/0x10 [ 229.339844][T11247] ? snprintf+0xda/0x120 [ 229.339870][T11247] should_fail_ex+0x40a/0x550 [ 229.339899][T11247] _copy_to_user+0x31/0xb0 [ 229.339922][T11247] simple_read_from_buffer+0xca/0x150 [ 229.339957][T11247] proc_fail_nth_read+0x1e9/0x250 [ 229.339993][T11247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.340029][T11247] ? rw_verify_area+0x243/0x630 [ 229.340056][T11247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.340090][T11247] vfs_read+0x1f8/0xb40 [ 229.340118][T11247] ? fdget_pos+0x254/0x320 [ 229.340141][T11247] ? __pfx___mutex_lock+0x10/0x10 [ 229.340170][T11247] ? __pfx_vfs_read+0x10/0x10 [ 229.340199][T11247] ? __fget_files+0x2a/0x410 [ 229.340223][T11247] ? __fget_files+0x395/0x410 [ 229.340244][T11247] ? __fget_files+0x2a/0x410 [ 229.340275][T11247] ksys_read+0x18f/0x2b0 [ 229.340304][T11247] ? __pfx_ksys_read+0x10/0x10 [ 229.340332][T11247] ? do_syscall_64+0x100/0x230 [ 229.340365][T11247] ? do_syscall_64+0xb6/0x230 [ 229.340395][T11247] do_syscall_64+0xf3/0x230 [ 229.340423][T11247] ? clear_bhb_loop+0x35/0x90 [ 229.340461][T11247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.340489][T11247] RIP: 0033:0x7fd4ed38b7fc [ 229.340507][T11247] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 229.340525][T11247] RSP: 002b:00007fd4ee116030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.340547][T11247] RAX: ffffffffffffffda RBX: 00007fd4ed5a5fa0 RCX: 00007fd4ed38b7fc [ 229.340562][T11247] RDX: 000000000000000f RSI: 00007fd4ee1160a0 RDI: 0000000000000004 [ 229.340576][T11247] RBP: 00007fd4ee116090 R08: 0000000000000000 R09: 0000000000000000 [ 229.340588][T11247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.340601][T11247] R13: 0000000000000000 R14: 00007fd4ed5a5fa0 R15: 00007fff9139f708 [ 229.340631][T11247] [ 229.578094][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1415'. [ 229.578193][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 230.055962][T11274] openvswitch: netlink: Message has 8 unknown bytes. [ 230.134408][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 230.152433][T11274] netlink: 'syz.4.1424': attribute type 12 has an invalid length. [ 230.241519][T11280] netlink: 'syz.3.1426': attribute type 5 has an invalid length. [ 230.330512][T11284] netdevsim netdevsim2: Direct firmware load for / [ 230.330512][T11284] failed with error -2 [ 230.349371][T11284] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 230.349371][T11284] [ 230.512725][T11290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1428'. [ 230.546552][T11292] nbd: must specify at least one socket [ 230.558185][T11292] netlink: 'syz.1.1430': attribute type 1 has an invalid length. [ 230.597539][T11294] No such timeout policy "syz0" [ 230.692987][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1431'. [ 231.265621][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1438'. [ 231.300377][T11316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1438'. [ 231.357082][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1440'. [ 231.375875][T11321] vlan4: entered promiscuous mode [ 231.740265][T11339] siw: device registration error -23 [ 232.128478][T11360] ip6tnl2: entered promiscuous mode [ 232.299774][T11366] netlink: 'syz.3.1454': attribute type 21 has an invalid length. [ 232.317714][T11366] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.325570][T11366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.332942][T11366] IPv6: NLM_F_CREATE should be set when creating new route [ 232.340264][T11366] IPv6: NLM_F_CREATE should be set when creating new route [ 232.347564][T11366] IPv6: NLM_F_CREATE should be set when creating new route [ 232.381566][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'. [ 233.164751][T11418] netlink: 'syz.1.1467': attribute type 10 has an invalid length. [ 233.362892][T11425] FAULT_INJECTION: forcing a failure. [ 233.362892][T11425] name failslab, interval 1, probability 0, space 0, times 0 [ 233.392179][T11425] CPU: 0 UID: 0 PID: 11425 Comm: syz.1.1471 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 233.392212][T11425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 233.392226][T11425] Call Trace: [ 233.392234][T11425] [ 233.392243][T11425] dump_stack_lvl+0x241/0x360 [ 233.392277][T11425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.392301][T11425] ? __pfx__printk+0x10/0x10 [ 233.392337][T11425] ? __kmalloc_cache_noprof+0x48/0x390 [ 233.392363][T11425] ? __pfx___might_resched+0x10/0x10 [ 233.392395][T11425] should_fail_ex+0x40a/0x550 [ 233.392424][T11425] should_failslab+0xac/0x100 [ 233.392448][T11425] __kmalloc_cache_noprof+0x70/0x390 [ 233.392471][T11425] ? nf_tables_commit+0x911/0x9180 [ 233.392498][T11425] nf_tables_commit+0x911/0x9180 [ 233.392544][T11425] ? __folio_put+0x2b3/0x360 [ 233.392582][T11425] ? __pfx_nf_tables_commit+0x10/0x10 [ 233.392604][T11425] ? free_large_kmalloc+0xfe/0x180 [ 233.392628][T11425] ? nf_tables_newrule+0x23c5/0x2980 [ 233.392650][T11425] ? kfree+0x212/0x430 [ 233.392669][T11425] ? nft_trans_rule_add+0x30f/0x430 [ 233.392700][T11425] ? nf_tables_newrule+0x245a/0x2980 [ 233.392739][T11425] ? __pfx_nf_tables_newrule+0x10/0x10 [ 233.392778][T11425] ? __nla_parse+0x40/0x60 [ 233.392811][T11425] nfnetlink_rcv+0xc77/0x2ab0 [ 233.392837][T11425] ? __pfx_validate_chain+0x10/0x10 [ 233.392891][T11425] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 233.392929][T11425] ? __lock_acquire+0x1397/0x2100 [ 233.392995][T11425] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.393018][T11425] ? __pfx_lock_release+0x10/0x10 [ 233.393060][T11425] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.393083][T11425] netlink_unicast+0x7f6/0x990 [ 233.393127][T11425] ? __pfx_netlink_unicast+0x10/0x10 [ 233.393156][T11425] ? __virt_addr_valid+0x45f/0x530 [ 233.393197][T11425] ? __phys_addr_symbol+0x2f/0x70 [ 233.393228][T11425] ? __check_object_size+0x47a/0x730 [ 233.393254][T11425] netlink_sendmsg+0x8e4/0xcb0 [ 233.393289][T11425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.393317][T11425] ? aa_sock_msg_perm+0x91/0x160 [ 233.393352][T11425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.393372][T11425] __sock_sendmsg+0x221/0x270 [ 233.393403][T11425] ____sys_sendmsg+0x52a/0x7e0 [ 233.393432][T11425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.393463][T11425] ? __fget_files+0x2a/0x410 [ 233.393489][T11425] ? __fget_files+0x2a/0x410 [ 233.393522][T11425] __sys_sendmsg+0x269/0x350 [ 233.393548][T11425] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.393582][T11425] ? do_sys_openat2+0x17a/0x1d0 [ 233.393635][T11425] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.393666][T11425] ? do_syscall_64+0x100/0x230 [ 233.393700][T11425] ? do_syscall_64+0xb6/0x230 [ 233.393737][T11425] do_syscall_64+0xf3/0x230 [ 233.393762][T11425] ? clear_bhb_loop+0x35/0x90 [ 233.393789][T11425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.393811][T11425] RIP: 0033:0x7febc538cde9 [ 233.393827][T11425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.393842][T11425] RSP: 002b:00007febc6142038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.393882][T11425] RAX: ffffffffffffffda RBX: 00007febc55a5fa0 RCX: 00007febc538cde9 [ 233.393896][T11425] RDX: 0000000000000000 RSI: 0000400000000500 RDI: 0000000000000003 [ 233.393906][T11425] RBP: 00007febc6142090 R08: 0000000000000000 R09: 0000000000000000 [ 233.393917][T11425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.393929][T11425] R13: 0000000000000000 R14: 00007febc55a5fa0 R15: 00007ffc22e05388 [ 233.393953][T11425] [ 233.940424][T11440] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1473'. [ 233.969656][T11440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1473'. [ 233.979163][T11440] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1473'. [ 234.303799][T11459] lo speed is unknown, defaulting to 1000 [ 234.748096][T11478] netlink: 'syz.0.1484': attribute type 13 has an invalid length. [ 234.764930][T11478] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 234.773110][T11478] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 234.856685][T11480] FAULT_INJECTION: forcing a failure. [ 234.856685][T11480] name failslab, interval 1, probability 0, space 0, times 0 [ 234.871406][T11480] CPU: 0 UID: 0 PID: 11480 Comm: syz.0.1485 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 234.871436][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 234.871450][T11480] Call Trace: [ 234.871457][T11480] [ 234.871465][T11480] dump_stack_lvl+0x241/0x360 [ 234.871496][T11480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.871519][T11480] ? __pfx__printk+0x10/0x10 [ 234.871556][T11480] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 234.871581][T11480] ? __pfx___might_resched+0x10/0x10 [ 234.871610][T11480] should_fail_ex+0x40a/0x550 [ 234.871640][T11480] should_failslab+0xac/0x100 [ 234.871669][T11480] __kmalloc_node_noprof+0xe1/0x4d0 [ 234.871691][T11480] ? __kvmalloc_node_noprof+0x72/0x190 [ 234.871725][T11480] __kvmalloc_node_noprof+0x72/0x190 [ 234.871753][T11480] nf_tables_commit+0xc4f/0x9180 [ 234.871806][T11480] ? __folio_put+0x2b3/0x360 [ 234.871844][T11480] ? __pfx_nf_tables_commit+0x10/0x10 [ 234.871867][T11480] ? free_large_kmalloc+0xfe/0x180 [ 234.871890][T11480] ? nf_tables_newrule+0x23c5/0x2980 [ 234.871913][T11480] ? kfree+0x212/0x430 [ 234.871932][T11480] ? nft_trans_rule_add+0x30f/0x430 [ 234.871963][T11480] ? nf_tables_newrule+0x245a/0x2980 [ 234.872002][T11480] ? __pfx_nf_tables_newrule+0x10/0x10 [ 234.872042][T11480] ? __nla_parse+0x40/0x60 [ 234.872075][T11480] nfnetlink_rcv+0xc77/0x2ab0 [ 234.872101][T11480] ? __pfx_validate_chain+0x10/0x10 [ 234.872157][T11480] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 234.872196][T11480] ? __lock_acquire+0x1397/0x2100 [ 234.872264][T11480] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.872286][T11480] ? __pfx_lock_release+0x10/0x10 [ 234.872331][T11480] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.872356][T11480] netlink_unicast+0x7f6/0x990 [ 234.872401][T11480] ? __pfx_netlink_unicast+0x10/0x10 [ 234.872431][T11480] ? __virt_addr_valid+0x45f/0x530 [ 234.872464][T11480] ? __phys_addr_symbol+0x2f/0x70 [ 234.872495][T11480] ? __check_object_size+0x47a/0x730 [ 234.872521][T11480] netlink_sendmsg+0x8e4/0xcb0 [ 234.872557][T11480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.872585][T11480] ? aa_sock_msg_perm+0x91/0x160 [ 234.872620][T11480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.872640][T11480] __sock_sendmsg+0x221/0x270 [ 234.872670][T11480] ____sys_sendmsg+0x52a/0x7e0 [ 234.872701][T11480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.872731][T11480] ? __fget_files+0x2a/0x410 [ 234.872758][T11480] ? __fget_files+0x2a/0x410 [ 234.872797][T11480] __sys_sendmsg+0x269/0x350 [ 234.872823][T11480] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.872858][T11480] ? do_sys_openat2+0x17a/0x1d0 [ 234.872911][T11480] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.872943][T11480] ? do_syscall_64+0x100/0x230 [ 234.872977][T11480] ? do_syscall_64+0xb6/0x230 [ 234.873010][T11480] do_syscall_64+0xf3/0x230 [ 234.873040][T11480] ? clear_bhb_loop+0x35/0x90 [ 234.873073][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.873102][T11480] RIP: 0033:0x7ff64d38cde9 [ 234.873120][T11480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.873138][T11480] RSP: 002b:00007ff64e135038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.873161][T11480] RAX: ffffffffffffffda RBX: 00007ff64d5a5fa0 RCX: 00007ff64d38cde9 [ 234.873177][T11480] RDX: 0000000000000000 RSI: 0000400000000500 RDI: 0000000000000003 [ 234.873190][T11480] RBP: 00007ff64e135090 R08: 0000000000000000 R09: 0000000000000000 [ 234.873204][T11480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.873216][T11480] R13: 0000000000000000 R14: 00007ff64d5a5fa0 R15: 00007ffe036dc698 [ 234.873249][T11480] [ 235.254784][T11483] __nla_validate_parse: 6 callbacks suppressed [ 235.254808][T11483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1487'. [ 235.487267][T11494] macvlan2: entered promiscuous mode [ 235.492837][T11494] macvlan2: entered allmulticast mode [ 235.500316][T11494] bond0: entered allmulticast mode [ 235.505851][T11494] bond_slave_0: entered allmulticast mode [ 235.513236][T11494] bond_slave_1: entered allmulticast mode [ 235.519427][T11494] bridge0: entered allmulticast mode [ 235.525625][T11494] bond0: entered promiscuous mode [ 235.531516][T11494] bond_slave_0: entered promiscuous mode [ 235.539062][T11494] bond_slave_1: entered promiscuous mode [ 235.568447][T11494] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 235.578072][T11494] team0: Port device macvlan2 added [ 235.728201][T11504] FAULT_INJECTION: forcing a failure. [ 235.728201][T11504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.787784][T11504] CPU: 0 UID: 0 PID: 11504 Comm: syz.2.1495 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 235.787819][T11504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 235.787832][T11504] Call Trace: [ 235.787840][T11504] [ 235.787849][T11504] dump_stack_lvl+0x241/0x360 [ 235.787879][T11504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.787902][T11504] ? __pfx__printk+0x10/0x10 [ 235.787942][T11504] ? snprintf+0xda/0x120 [ 235.787966][T11504] should_fail_ex+0x40a/0x550 [ 235.788001][T11504] _copy_to_user+0x31/0xb0 [ 235.788025][T11504] simple_read_from_buffer+0xca/0x150 [ 235.788063][T11504] proc_fail_nth_read+0x1e9/0x250 [ 235.788099][T11504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.788136][T11504] ? rw_verify_area+0x243/0x630 [ 235.788163][T11504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.788198][T11504] vfs_read+0x1f8/0xb40 [ 235.788227][T11504] ? fdget_pos+0x254/0x320 [ 235.788251][T11504] ? __pfx___mutex_lock+0x10/0x10 [ 235.788282][T11504] ? __pfx_vfs_read+0x10/0x10 [ 235.788307][T11504] ? do_sys_openat2+0x17a/0x1d0 [ 235.788334][T11504] ? __fget_files+0x2a/0x410 [ 235.788359][T11504] ? __fget_files+0x395/0x410 [ 235.788380][T11504] ? __fget_files+0x2a/0x410 [ 235.788413][T11504] ksys_read+0x18f/0x2b0 [ 235.788444][T11504] ? __pfx_ksys_read+0x10/0x10 [ 235.788473][T11504] ? do_syscall_64+0x100/0x230 [ 235.788506][T11504] ? do_syscall_64+0xb6/0x230 [ 235.788540][T11504] do_syscall_64+0xf3/0x230 [ 235.788570][T11504] ? clear_bhb_loop+0x35/0x90 [ 235.788603][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.788632][T11504] RIP: 0033:0x7fcc88f8b7fc [ 235.788651][T11504] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 235.788669][T11504] RSP: 002b:00007fcc89e9e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.788692][T11504] RAX: ffffffffffffffda RBX: 00007fcc891a5fa0 RCX: 00007fcc88f8b7fc [ 235.788708][T11504] RDX: 000000000000000f RSI: 00007fcc89e9e0a0 RDI: 0000000000000004 [ 235.788721][T11504] RBP: 00007fcc89e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 235.788734][T11504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.788746][T11504] R13: 0000000000000000 R14: 00007fcc891a5fa0 R15: 00007ffe81ebed18 [ 235.788779][T11504] [ 236.090998][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'. [ 236.594094][T11532] netlink: 'syz.2.1504': attribute type 8 has an invalid length. [ 236.607058][T11525] lo speed is unknown, defaulting to 1000 [ 236.631090][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1503'. [ 236.779670][T11542] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 236.826053][T11542] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1506'. [ 236.976675][T11548] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:19974 [ 236.985687][T11551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.023430][T11548] netlink: 'syz.1.1509': attribute type 10 has an invalid length. [ 237.051382][T11548] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1509'. [ 237.103255][T11548] sctp: [Deprecated]: syz.1.1509 (pid 11548) Use of int in maxseg socket option. [ 237.103255][T11548] Use struct sctp_assoc_value instead [ 237.179689][T11556] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 237.642272][T11573] lo speed is unknown, defaulting to 1000 [ 237.792234][T11578] gretap1: entered promiscuous mode [ 238.053748][T11583] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.515970][T11599] xt_bpf: check failed: parse error [ 238.592215][T11601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1525'. [ 238.694805][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'. [ 239.000162][T11620] netlink: 'syz.2.1532': attribute type 10 has an invalid length. [ 239.027920][T11620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1532'. [ 239.100573][T11620] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 239.156976][T11620] team0: Failed to send options change via netlink (err -105) [ 239.190797][T11620] team0: Port device geneve0 added [ 239.240171][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'. [ 239.364577][T11640] netlink: 'syz.0.1536': attribute type 10 has an invalid length. [ 239.378711][T11640] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1536'. [ 239.506886][T11649] netlink: 'syz.3.1538': attribute type 10 has an invalid length. [ 239.719686][T11659] xt_CT: No such helper "snmp" [ 239.850765][T11668] vlan3: entered allmulticast mode [ 239.863849][T11649] infiniband syz1: set down [ 239.868668][T11649] infiniband syz1: added team_slave_0 [ 239.943218][T11649] RDS/IB: syz1: added [ 239.947411][T11649] smc: adding ib device syz1 with port count 1 [ 239.956029][T11649] smc: ib device syz1 port 1 has pnetid [ 240.300810][T11680] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 240.332877][T11680] __nla_validate_parse: 4 callbacks suppressed [ 240.332899][T11680] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1548'. [ 240.376971][T11680] team0: entered promiscuous mode [ 240.382260][T11680] team_slave_0: entered promiscuous mode [ 240.396989][T11680] team_slave_1: entered promiscuous mode [ 240.403418][T11680] geneve0: entered promiscuous mode [ 240.419550][T11680] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.426936][T11680] bridge0: port 3(team0) entered blocking state [ 240.441839][T11680] bridge0: port 3(team0) entered disabled state [ 240.454146][T11680] team0: entered allmulticast mode [ 240.471729][T11680] team_slave_0: entered allmulticast mode [ 240.491506][T11680] team_slave_1: entered allmulticast mode [ 240.504078][T11680] geneve0: entered allmulticast mode [ 240.541910][T11680] team0: left allmulticast mode [ 240.546847][T11680] team_slave_0: left allmulticast mode [ 240.555857][T11680] team_slave_1: left allmulticast mode [ 240.565433][T11680] geneve0: left allmulticast mode [ 240.581326][T11687] bridge0: port 2(dummy0) entered blocking state [ 240.592033][T11687] bridge0: port 2(dummy0) entered disabled state [ 240.605976][T11687] dummy0: entered allmulticast mode [ 240.615373][T11687] dummy0: entered promiscuous mode [ 240.629049][T11692] dummy0: left allmulticast mode [ 240.655966][T11692] dummy0: left promiscuous mode [ 240.663546][T11692] bridge0: port 2(dummy0) entered disabled state [ 241.014608][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 241.054045][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 241.069830][T11709] netlink: 'syz.1.1557': attribute type 5 has an invalid length. [ 241.141907][T11709] netlink: 'syz.1.1557': attribute type 6 has an invalid length. [ 241.533636][T11729] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 241.569312][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1566'. [ 241.594153][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 241.605623][T11729] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1566'. [ 241.625182][T11729] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 241.816184][T11744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1569'. [ 241.862427][T11747] tipc: MTU too low for tipc bearer [ 241.910243][T11749] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1572'. [ 242.020520][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 242.109236][T11756] dvmrp1: entered allmulticast mode [ 242.126709][T11755] dvmrp1: left allmulticast mode [ 242.382873][T11765] lo speed is unknown, defaulting to 1000 [ 242.410324][T11767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1580'. [ 242.471707][T11771] netlink: 'syz.3.1581': attribute type 58 has an invalid length. [ 242.790178][T11779] lo speed is unknown, defaulting to 1000 [ 243.294461][T11770] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 244.328358][T11837] veth3: entered promiscuous mode [ 244.335747][T11837] bond0: (slave veth3): Enslaving as an active interface with an up link [ 244.480863][T11843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.513979][T11837] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÊØ¢…D£øUDŒw˜}z [ 244.651221][T11854] netlink: 'syz.4.1602': attribute type 25 has an invalid length. [ 244.736889][T11860] lo speed is unknown, defaulting to 1000 [ 245.078331][T11879] FAULT_INJECTION: forcing a failure. [ 245.078331][T11879] name failslab, interval 1, probability 0, space 0, times 0 [ 245.107136][T11879] CPU: 0 UID: 0 PID: 11879 Comm: syz.0.1612 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 245.107170][T11879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 245.107195][T11879] Call Trace: [ 245.107203][T11879] [ 245.107212][T11879] dump_stack_lvl+0x241/0x360 [ 245.107244][T11879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.107267][T11879] ? __pfx__printk+0x10/0x10 [ 245.107303][T11879] ? kmem_cache_alloc_noprof+0x48/0x380 [ 245.107328][T11879] ? __pfx___might_resched+0x10/0x10 [ 245.107364][T11879] should_fail_ex+0x40a/0x550 [ 245.107395][T11879] should_failslab+0xac/0x100 [ 245.107417][T11879] ? skb_clone+0x20c/0x390 [ 245.107437][T11879] kmem_cache_alloc_noprof+0x70/0x380 [ 245.107466][T11879] skb_clone+0x20c/0x390 [ 245.107495][T11879] netlink_trim+0x19d/0x2e0 [ 245.107529][T11879] netlink_broadcast_filtered+0x76/0x12a0 [ 245.107560][T11879] ? __pfx_lock_release+0x10/0x10 [ 245.107609][T11879] nlmsg_notify+0xfb/0x1c0 [ 245.107634][T11879] nf_tables_commit+0x7c69/0x9180 [ 245.107696][T11879] ? __pfx_nf_tables_commit+0x10/0x10 [ 245.107718][T11879] ? free_large_kmalloc+0xfe/0x180 [ 245.107743][T11879] ? nf_tables_newrule+0x23c5/0x2980 [ 245.107765][T11879] ? kfree+0x212/0x430 [ 245.107783][T11879] ? nft_trans_rule_add+0x30f/0x430 [ 245.107815][T11879] ? nf_tables_newrule+0x245a/0x2980 [ 245.107854][T11879] ? __pfx_nf_tables_newrule+0x10/0x10 [ 245.107893][T11879] ? __nla_parse+0x40/0x60 [ 245.107926][T11879] nfnetlink_rcv+0xc77/0x2ab0 [ 245.107952][T11879] ? __pfx_validate_chain+0x10/0x10 [ 245.108006][T11879] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 245.108046][T11879] ? __lock_acquire+0x1397/0x2100 [ 245.108112][T11879] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.108135][T11879] ? __pfx_lock_release+0x10/0x10 [ 245.108180][T11879] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.108205][T11879] netlink_unicast+0x7f6/0x990 [ 245.108245][T11879] ? __pfx_netlink_unicast+0x10/0x10 [ 245.108275][T11879] ? __virt_addr_valid+0x45f/0x530 [ 245.108308][T11879] ? __phys_addr_symbol+0x2f/0x70 [ 245.108339][T11879] ? __check_object_size+0x47a/0x730 [ 245.108375][T11879] netlink_sendmsg+0x8e4/0xcb0 [ 245.108411][T11879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.108438][T11879] ? aa_sock_msg_perm+0x91/0x160 [ 245.108473][T11879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.108493][T11879] __sock_sendmsg+0x221/0x270 [ 245.108523][T11879] ____sys_sendmsg+0x52a/0x7e0 [ 245.108554][T11879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.108585][T11879] ? __fget_files+0x2a/0x410 [ 245.108612][T11879] ? __fget_files+0x2a/0x410 [ 245.108645][T11879] __sys_sendmsg+0x269/0x350 [ 245.108671][T11879] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.108707][T11879] ? do_sys_openat2+0x17a/0x1d0 [ 245.108756][T11879] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.108788][T11879] ? do_syscall_64+0x100/0x230 [ 245.108823][T11879] ? do_syscall_64+0xb6/0x230 [ 245.108855][T11879] do_syscall_64+0xf3/0x230 [ 245.108886][T11879] ? clear_bhb_loop+0x35/0x90 [ 245.108918][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.108947][T11879] RIP: 0033:0x7ff64d38cde9 [ 245.108967][T11879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.108984][T11879] RSP: 002b:00007ff64e135038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.109008][T11879] RAX: ffffffffffffffda RBX: 00007ff64d5a5fa0 RCX: 00007ff64d38cde9 [ 245.109023][T11879] RDX: 0000000000000000 RSI: 0000400000000500 RDI: 0000000000000003 [ 245.109037][T11879] RBP: 00007ff64e135090 R08: 0000000000000000 R09: 0000000000000000 [ 245.109051][T11879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.109063][T11879] R13: 0000000000000000 R14: 00007ff64d5a5fa0 R15: 00007ffe036dc698 [ 245.109095][T11879] [ 245.881680][T11888] __nla_validate_parse: 9 callbacks suppressed [ 245.881704][T11888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1616'. [ 245.970647][T11892] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 246.159686][T11895] netlink: 'syz.3.1618': attribute type 7 has an invalid length. [ 246.387424][T11910] pim6reg: entered allmulticast mode [ 246.397847][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 246.448611][T11916] pim6reg: left allmulticast mode [ 246.448686][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 246.602008][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 246.844209][T11935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.916840][T11941] SET target dimension over the limit! [ 246.936668][T11941] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 247.230562][T11953] openvswitch: netlink: Message has 8 unknown bytes. [ 247.316750][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1636'. [ 247.342921][T11956] FAULT_INJECTION: forcing a failure. [ 247.342921][T11956] name failslab, interval 1, probability 0, space 0, times 0 [ 247.375884][T11956] CPU: 1 UID: 0 PID: 11956 Comm: syz.3.1639 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 247.375924][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 247.375938][T11956] Call Trace: [ 247.375946][T11956] [ 247.375954][T11956] dump_stack_lvl+0x241/0x360 [ 247.375985][T11956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.376006][T11956] ? __pfx__printk+0x10/0x10 [ 247.376043][T11956] ? kmem_cache_alloc_noprof+0x48/0x380 [ 247.376072][T11956] ? __pfx___might_resched+0x10/0x10 [ 247.376101][T11956] should_fail_ex+0x40a/0x550 [ 247.376130][T11956] should_failslab+0xac/0x100 [ 247.376153][T11956] ? skb_clone+0x20c/0x390 [ 247.376173][T11956] kmem_cache_alloc_noprof+0x70/0x380 [ 247.376198][T11956] skb_clone+0x20c/0x390 [ 247.376221][T11956] netlink_trim+0x19d/0x2e0 [ 247.376257][T11956] netlink_broadcast_filtered+0x76/0x12a0 [ 247.376289][T11956] ? __pfx_lock_release+0x10/0x10 [ 247.376338][T11956] nlmsg_notify+0xfb/0x1c0 [ 247.376364][T11956] nf_tables_commit+0x7c69/0x9180 [ 247.376426][T11956] ? __pfx_nf_tables_commit+0x10/0x10 [ 247.376448][T11956] ? free_large_kmalloc+0xfe/0x180 [ 247.376472][T11956] ? nf_tables_newrule+0x23c5/0x2980 [ 247.376494][T11956] ? kfree+0x212/0x430 [ 247.376512][T11956] ? nft_trans_rule_add+0x30f/0x430 [ 247.376543][T11956] ? nf_tables_newrule+0x245a/0x2980 [ 247.376581][T11956] ? __pfx_nf_tables_newrule+0x10/0x10 [ 247.376620][T11956] ? __nla_parse+0x40/0x60 [ 247.376653][T11956] nfnetlink_rcv+0xc77/0x2ab0 [ 247.376715][T11956] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 247.376796][T11956] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.376815][T11956] ? skb_clone+0x240/0x390 [ 247.376836][T11956] ? __pfx_lock_release+0x10/0x10 [ 247.376881][T11956] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.376913][T11956] netlink_unicast+0x7f6/0x990 [ 247.376954][T11956] ? __pfx_netlink_unicast+0x10/0x10 [ 247.376983][T11956] ? __virt_addr_valid+0x45f/0x530 [ 247.377016][T11956] ? __phys_addr_symbol+0x2f/0x70 [ 247.377047][T11956] ? __check_object_size+0x47a/0x730 [ 247.377074][T11956] netlink_sendmsg+0x8e4/0xcb0 [ 247.377109][T11956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.377136][T11956] ? aa_sock_msg_perm+0x91/0x160 [ 247.377171][T11956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.377191][T11956] __sock_sendmsg+0x221/0x270 [ 247.377221][T11956] ____sys_sendmsg+0x52a/0x7e0 [ 247.377251][T11956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.377283][T11956] ? __fget_files+0x2a/0x410 [ 247.377310][T11956] ? __fget_files+0x2a/0x410 [ 247.377342][T11956] __sys_sendmsg+0x269/0x350 [ 247.377369][T11956] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.377403][T11956] ? do_sys_openat2+0x17a/0x1d0 [ 247.377455][T11956] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.377486][T11956] ? do_syscall_64+0x100/0x230 [ 247.377518][T11956] ? do_syscall_64+0xb6/0x230 [ 247.377550][T11956] do_syscall_64+0xf3/0x230 [ 247.377579][T11956] ? clear_bhb_loop+0x35/0x90 [ 247.377613][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.377640][T11956] RIP: 0033:0x7fb88618cde9 [ 247.377659][T11956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.377676][T11956] RSP: 002b:00007fb883ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.377699][T11956] RAX: ffffffffffffffda RBX: 00007fb8863a5fa0 RCX: 00007fb88618cde9 [ 247.377715][T11956] RDX: 0000000000000000 RSI: 0000400000000500 RDI: 0000000000000003 [ 247.377729][T11956] RBP: 00007fb883ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.377742][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.377755][T11956] R13: 0000000000000000 R14: 00007fb8863a5fa0 R15: 00007ffceb6989b8 [ 247.377788][T11956] [ 247.743026][T11953] netlink: 'syz.4.1636': attribute type 12 has an invalid length. [ 248.219862][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'. [ 248.240060][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'. [ 248.272636][T11988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1649'. [ 248.280576][T11981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1649'. [ 248.500822][T11999] FAULT_INJECTION: forcing a failure. [ 248.500822][T11999] name failslab, interval 1, probability 0, space 0, times 0 [ 248.527651][T11999] CPU: 0 UID: 0 PID: 11999 Comm: syz.4.1651 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 248.527683][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 248.527697][T11999] Call Trace: [ 248.527704][T11999] [ 248.527713][T11999] dump_stack_lvl+0x241/0x360 [ 248.527745][T11999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.527768][T11999] ? __pfx__printk+0x10/0x10 [ 248.527804][T11999] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 248.527830][T11999] ? __pfx___might_resched+0x10/0x10 [ 248.527861][T11999] should_fail_ex+0x40a/0x550 [ 248.527891][T11999] should_failslab+0xac/0x100 [ 248.527915][T11999] kmem_cache_alloc_node_noprof+0x77/0x380 [ 248.527938][T11999] ? __alloc_skb+0x1c3/0x440 [ 248.527973][T11999] __alloc_skb+0x1c3/0x440 [ 248.528003][T11999] ? __pfx_netlink_unicast+0x10/0x10 [ 248.528039][T11999] ? __pfx___alloc_skb+0x10/0x10 [ 248.528080][T11999] ? nlmsg_notify+0x14c/0x1c0 [ 248.528109][T11999] nf_tables_commit+0x7d4f/0x9180 [ 248.528172][T11999] ? __pfx_nf_tables_commit+0x10/0x10 [ 248.528195][T11999] ? free_large_kmalloc+0xfe/0x180 [ 248.528219][T11999] ? nf_tables_newrule+0x23c5/0x2980 [ 248.528242][T11999] ? kfree+0x212/0x430 [ 248.528261][T11999] ? nft_trans_rule_add+0x30f/0x430 [ 248.528291][T11999] ? nf_tables_newrule+0x245a/0x2980 [ 248.528330][T11999] ? __pfx_nf_tables_newrule+0x10/0x10 [ 248.528369][T11999] ? __nla_parse+0x40/0x60 [ 248.528403][T11999] nfnetlink_rcv+0xc77/0x2ab0 [ 248.528428][T11999] ? __pfx_validate_chain+0x10/0x10 [ 248.528484][T11999] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 248.528523][T11999] ? __lock_acquire+0x1397/0x2100 [ 248.528590][T11999] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.528612][T11999] ? __pfx_lock_release+0x10/0x10 [ 248.528657][T11999] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.528681][T11999] netlink_unicast+0x7f6/0x990 [ 248.528723][T11999] ? __pfx_netlink_unicast+0x10/0x10 [ 248.528751][T11999] ? __virt_addr_valid+0x45f/0x530 [ 248.528784][T11999] ? __phys_addr_symbol+0x2f/0x70 [ 248.528815][T11999] ? __check_object_size+0x47a/0x730 [ 248.528843][T11999] netlink_sendmsg+0x8e4/0xcb0 [ 248.528878][T11999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.528905][T11999] ? aa_sock_msg_perm+0x91/0x160 [ 248.528940][T11999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.528960][T11999] __sock_sendmsg+0x221/0x270 [ 248.528990][T11999] ____sys_sendmsg+0x52a/0x7e0 [ 248.529020][T11999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.529052][T11999] ? __fget_files+0x2a/0x410 [ 248.529083][T11999] ? __fget_files+0x2a/0x410 [ 248.529116][T11999] __sys_sendmsg+0x269/0x350 [ 248.529141][T11999] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.529177][T11999] ? do_sys_openat2+0x17a/0x1d0 [ 248.529229][T11999] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.529261][T11999] ? do_syscall_64+0x100/0x230 [ 248.529295][T11999] ? do_syscall_64+0xb6/0x230 [ 248.529328][T11999] do_syscall_64+0xf3/0x230 [ 248.529358][T11999] ? clear_bhb_loop+0x35/0x90 [ 248.529391][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.529419][T11999] RIP: 0033:0x7fd4ed38cde9 [ 248.529438][T11999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.529455][T11999] RSP: 002b:00007fd4ee116038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.529478][T11999] RAX: ffffffffffffffda RBX: 00007fd4ed5a5fa0 RCX: 00007fd4ed38cde9 [ 248.529494][T11999] RDX: 0000000000000000 RSI: 0000400000000500 RDI: 0000000000000003 [ 248.529508][T11999] RBP: 00007fd4ee116090 R08: 0000000000000000 R09: 0000000000000000 [ 248.529521][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.529534][T11999] R13: 0000000000000000 R14: 00007fd4ed5a5fa0 R15: 00007fff9139f708 [ 248.529566][T11999] [ 249.107079][T12006] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1654'. [ 249.127061][T12003] lo speed is unknown, defaulting to 1000 [ 249.148895][T12009] netlink: 'syz.3.1655': attribute type 1 has an invalid length. [ 249.189691][T12009] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 249.569226][T10498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.587397][T10498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.906671][T12050] netlink: 'syz.4.1666': attribute type 30 has an invalid length. [ 250.152664][T12058] netlink: 'syz.2.1669': attribute type 30 has an invalid length. [ 250.261935][T12064] sctp: [Deprecated]: syz.0.1672 (pid 12064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.261935][T12064] Use struct sctp_sack_info instead [ 250.307208][T12064] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 250.662451][T12087] syzkaller1: entered promiscuous mode [ 250.702451][T12087] syzkaller1: entered allmulticast mode [ 250.731763][T12088] team0: Mode changed to "loadbalance" [ 250.866856][T12092] dvmrp0: entered allmulticast mode [ 250.888959][T12098] __nla_validate_parse: 5 callbacks suppressed [ 250.888979][T12098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1683'. [ 250.916943][T12092] dvmrp0: left allmulticast mode [ 251.040252][T12105] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1685'. [ 251.088426][T12105] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 251.119484][T12107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1686'. [ 251.196402][T12116] bridge0: port 2(vlan3) entered blocking state [ 251.207769][T12116] bridge0: port 2(vlan3) entered disabled state [ 251.225616][T12116] vlan3: entered allmulticast mode [ 251.232874][T12116] vlan3: left allmulticast mode [ 251.272415][T12114] dvmrp1: entered allmulticast mode [ 251.317870][T12124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1687'. [ 251.337567][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 251.405269][T12127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1691'. [ 251.681827][T12138] bond0: entered allmulticast mode [ 251.876881][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1695'. [ 252.320835][T12155] : renamed from bond0 (while UP) [ 252.350799][T12155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1698'. [ 252.365264][ T5856] Bluetooth: hci0: command 0x0401 tx timeout [ 252.371496][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 252.434004][T12153] netlink: 'syz.3.1698': attribute type 11 has an invalid length. [ 252.459067][T12153] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1698'. [ 252.524055][T12153] netlink: 'syz.3.1698': attribute type 11 has an invalid length. [ 252.566839][T12153] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1698'. [ 252.592615][T12165] vlan4: entered allmulticast mode [ 252.797602][T12175] sctp: [Deprecated]: syz.3.1704 (pid 12175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.797602][T12175] Use struct sctp_sack_info instead [ 253.233430][T12196] netlink: 'syz.3.1711': attribute type 4 has an invalid length. [ 253.301645][T12198] netlink: 'syz.3.1711': attribute type 4 has an invalid length. [ 253.346948][ T977] lo speed is unknown, defaulting to 1000 [ 253.373955][T12202] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 253.390180][ T977] lo speed is unknown, defaulting to 1000 [ 253.407872][ T46] lo speed is unknown, defaulting to 1000 [ 253.961756][T12230] lo speed is unknown, defaulting to 1000 [ 253.978751][T12233] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 254.076910][T12236] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 255.335915][T12264] team_slave_0: left promiscuous mode [ 255.354413][T12264] team0 (unregistering): Port device team_slave_0 removed [ 255.364635][T12264] team_slave_1: left promiscuous mode [ 255.375500][T12264] team0 (unregistering): Port device team_slave_1 removed [ 255.391949][T12264] bond0: left allmulticast mode [ 255.396956][T12264] bond_slave_0: left allmulticast mode [ 255.407805][T12264] bond_slave_1: left allmulticast mode [ 255.415878][T12264] bridge0: left allmulticast mode [ 255.421630][T12264] bond0: left promiscuous mode [ 255.426652][T12264] bond_slave_0: left promiscuous mode [ 255.432684][T12264] bond_slave_1: left promiscuous mode [ 255.476115][T12264] team0 (unregistering): Port device macvlan2 removed [ 255.493777][T12264] geneve0: left promiscuous mode [ 255.524295][T12264] team0 (unregistering): Port device geneve0 removed [ 255.571275][T12273] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 255.605577][T12280] lo speed is unknown, defaulting to 1000 [ 255.632038][T12280] lo speed is unknown, defaulting to 1000 [ 255.707896][T12280] lo speed is unknown, defaulting to 1000 [ 255.716772][T12280] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 255.836919][T12280] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 256.014227][T12280] lo speed is unknown, defaulting to 1000 [ 256.067904][T12280] lo speed is unknown, defaulting to 1000 [ 256.074843][T12280] lo speed is unknown, defaulting to 1000 [ 256.108254][T12280] lo speed is unknown, defaulting to 1000 [ 256.115137][T12280] lo speed is unknown, defaulting to 1000 [ 256.158382][T12293] __nla_validate_parse: 4 callbacks suppressed [ 256.158405][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 256.209428][T12280] lo speed is unknown, defaulting to 1000 [ 256.277437][T12306] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1745'. [ 256.515718][T12310] lo speed is unknown, defaulting to 1000 [ 256.559924][T12315] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 256.760006][T12317] bridge4: entered promiscuous mode [ 256.765304][T12317] bridge4: entered allmulticast mode [ 256.792738][T12317] team0: Port device bridge4 added [ 256.864150][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1751'. [ 256.880140][T12320] netlink: 'syz.0.1750': attribute type 10 has an invalid length. [ 256.902035][T12320] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 256.934276][T12320] bridge0: port 2(ip6gretap0) entered blocking state [ 256.941500][T12320] bridge0: port 2(ip6gretap0) entered disabled state [ 256.948825][T12320] ip6gretap0: entered allmulticast mode [ 256.968909][T12320] ip6gretap0: entered promiscuous mode [ 257.472268][T12324] lo speed is unknown, defaulting to 1000 [ 257.501839][T12325] ip6tnl2: entered promiscuous mode [ 257.543858][T12325] openvswitch: netlink: Actions may not be safe on all matching packets [ 257.569412][T12310] lo speed is unknown, defaulting to 1000 [ 257.622274][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1752'. [ 257.631293][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1752'. [ 257.904499][T12331] netlink: 'syz.4.1752': attribute type 10 has an invalid length. [ 257.915152][T12312] lo speed is unknown, defaulting to 1000 [ 258.099205][T12334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1754'. [ 258.488298][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'. [ 258.538525][T12324] lo speed is unknown, defaulting to 1000 [ 258.658068][T12312] lo speed is unknown, defaulting to 1000 [ 258.670915][T12352] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 259.079835][T12370] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1766'. [ 259.508321][T12378] sctp: [Deprecated]: syz.2.1769 (pid 12378) Use of int in maxseg socket option. [ 259.508321][T12378] Use struct sctp_assoc_value instead [ 260.243812][T12397] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 260.351312][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1775'. [ 260.781457][T12425] IPVS: Unknown mcast interface: bond0 [ 260.818528][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'. [ 260.926849][T12436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.981537][T12435] netlink: 'syz.3.1787': attribute type 1 has an invalid length. [ 261.123444][T12445] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 261.417876][T12451] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 261.871998][T12473] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 261.898293][T12474] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 261.925030][T12478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.231333][T12498] __nla_validate_parse: 3 callbacks suppressed [ 262.231357][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 262.264553][T12500] netlink: 'syz.3.1805': attribute type 5 has an invalid length. [ 262.348912][ T5861] Bluetooth: hci0: command 0x0401 tx timeout [ 262.555078][T12521] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.563875][T12521] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.573532][T12521] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.582005][T12521] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.590928][T12521] geneve2: entered promiscuous mode [ 262.868814][T12535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1814'. [ 262.900338][T12512] netlink: 'syz.2.1808': attribute type 4 has an invalid length. [ 262.903743][T12538] netlink: 'syz.3.1815': attribute type 1 has an invalid length. [ 262.927531][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1814'. [ 262.938856][T12538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1815'. [ 262.951073][T12512] ip6t_srh: unknown srh invflags 4000 [ 263.187345][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1818'. [ 263.398492][T12562] netlink: 'syz.1.1822': attribute type 6 has an invalid length. [ 263.419199][T12562] netlink: 'syz.1.1822': attribute type 7 has an invalid length. [ 263.450701][T12562] netlink: 'syz.1.1822': attribute type 8 has an invalid length. [ 263.471479][T12567] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1822'. [ 263.687342][T12576] pimreg: entered allmulticast mode [ 263.900523][T12587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1829'. [ 263.967128][T12587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1829'. [ 264.023263][T12587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1829'. [ 264.081365][T12587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1829'. [ 264.153613][T12600] pim6reg: entered allmulticast mode [ 264.474593][T12620] netlink: 'syz.0.1834': attribute type 10 has an invalid length. [ 264.665250][T12628] netlink: 'syz.2.1838': attribute type 11 has an invalid length. [ 264.714595][T12632] sctp: [Deprecated]: syz.1.1840 (pid 12632) Use of int in max_burst socket option. [ 264.714595][T12632] Use struct sctp_assoc_value instead [ 264.737271][T12628] netlink: 'syz.2.1838': attribute type 1 has an invalid length. [ 265.297957][T12661] netlink: 'syz.1.1849': attribute type 1 has an invalid length. [ 265.319418][T12659] bond5: entered promiscuous mode [ 265.324834][T12659] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.356396][T12661] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.732817][T12671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.910371][T12671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.023559][T12671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.160139][T12671] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.214722][T12699] xt_TCPMSS: Only works on TCP SYN packets [ 266.259827][T12702] lo speed is unknown, defaulting to 1000 [ 266.303914][T12671] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.325142][T12671] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.355644][T12671] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.392949][T12671] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.591211][T12707] lo speed is unknown, defaulting to 1000 [ 266.819754][T12702] lo speed is unknown, defaulting to 1000 [ 266.885477][T12719] ip6gretap0: left allmulticast mode [ 266.907656][T12719] ip6gretap0: left promiscuous mode [ 266.918006][T12719] bridge0: port 2(ip6gretap0) entered disabled state [ 266.946828][T12719] bond0: (slave bridge0): Releasing backup interface [ 266.993293][T12719] bridge_slave_0: left allmulticast mode [ 267.008049][T12719] bridge_slave_0: left promiscuous mode [ 267.013916][T12719] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.038067][T12719] bond0: (slave bond_slave_0): Releasing backup interface [ 267.057945][T12719] bond0: (slave bond_slave_1): Releasing backup interface [ 267.081192][T12719] team0: Port device team_slave_0 removed [ 267.090116][T12719] team0: Port device team_slave_1 removed [ 267.096139][T12719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.118709][T12719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.149114][T12719] bond0: (slave netdevsim0): Releasing backup interface [ 267.168065][T12719] bond1: (slave gretap2): Releasing active interface [ 267.201429][T12719] team0: Port device bridge2 removed [ 267.218522][T12719] bond0: (slave bond3): Releasing backup interface [ 267.298237][T12719] bond0: (slave veth3): Releasing backup interface [ 267.345288][T12719] team0: Port device bridge4 removed [ 267.503447][T12715] lo speed is unknown, defaulting to 1000 [ 267.980818][T12732] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 268.101857][T10492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.118545][T10492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.135479][T12715] lo speed is unknown, defaulting to 1000 [ 268.180448][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.190610][T12707] lo speed is unknown, defaulting to 1000 [ 268.199025][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.220680][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.245710][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.267468][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.318295][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.351460][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.394159][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.408150][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.455975][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.470194][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.510380][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.547295][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.563510][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.576540][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.595608][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.649097][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.661249][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.676799][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.720226][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.772790][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.828080][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.857994][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.904024][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.946753][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.964649][T12745] x_tables: duplicate underflow at hook 1 [ 268.992554][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.031064][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.054352][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.096338][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.118396][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.136298][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.152294][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.175934][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.239231][T12754] validate_nla: 3 callbacks suppressed [ 269.239253][T12754] netlink: 'syz.2.1875': attribute type 10 has an invalid length. [ 269.274348][T12754] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 269.284358][T12756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.375447][T12756] __nla_validate_parse: 106 callbacks suppressed [ 269.375471][T12756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1876'. [ 269.455756][T12763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1878'. [ 269.477299][T12763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1878'. [ 269.699775][T12778] netlink: 'syz.0.1880': attribute type 11 has an invalid length. [ 269.897612][T12787] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1885'. [ 270.572669][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 270.870160][T12841] pim6reg: entered allmulticast mode [ 270.876472][T12841] pim6reg: left allmulticast mode [ 271.071888][T12845] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 271.156125][T12845] xt_l2tp: missing protocol rule (udp|l2tpip) [ 271.254211][T12853] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1904'. [ 271.307728][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 271.336600][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 271.568622][T12863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1909'. [ 271.988648][T12869] batadv_slave_1: entered promiscuous mode [ 272.003968][T12865] lo speed is unknown, defaulting to 1000 [ 272.427192][T12860] batadv_slave_1: left promiscuous mode [ 272.478594][T12898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1916'. [ 272.674259][T12865] lo speed is unknown, defaulting to 1000 [ 272.768384][T12911] netlink: 'syz.4.1919': attribute type 1 has an invalid length. [ 272.797757][T12912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1918'. [ 272.835321][T12912] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 272.961481][T12917] bond5: (slave gretap2): making interface the new active one [ 273.002491][T12917] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 273.346438][T12941] syz.2.1928: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 273.412438][T12941] CPU: 1 UID: 0 PID: 12941 Comm: syz.2.1928 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 273.412470][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 273.412483][T12941] Call Trace: [ 273.412490][T12941] [ 273.412499][T12941] dump_stack_lvl+0x241/0x360 [ 273.412529][T12941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.412552][T12941] ? __pfx__printk+0x10/0x10 [ 273.412591][T12941] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 273.412616][T12941] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 273.412643][T12941] warn_alloc+0x278/0x410 [ 273.412677][T12941] ? __pfx_warn_alloc+0x10/0x10 [ 273.412714][T12941] ? xskq_create+0xb6/0x170 [ 273.412737][T12941] ? __get_vm_area_node+0x1c8/0x2d0 [ 273.412763][T12941] ? __get_vm_area_node+0x25c/0x2d0 [ 273.412796][T12941] __vmalloc_node_range_noprof+0x62f/0x1380 [ 273.412856][T12941] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.412890][T12941] ? __kasan_kmalloc+0x98/0xb0 [ 273.412926][T12941] vmalloc_user_noprof+0x74/0x80 [ 273.412954][T12941] ? xskq_create+0xb6/0x170 [ 273.412977][T12941] xskq_create+0xb6/0x170 [ 273.413003][T12941] xsk_init_queue+0xa1/0x100 [ 273.413030][T12941] xsk_setsockopt+0x598/0x950 [ 273.413055][T12941] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.413079][T12941] ? __pfx_aa_sk_perm+0x10/0x10 [ 273.413108][T12941] ? __pfx_lock_acquire+0x10/0x10 [ 273.413135][T12941] ? aa_sock_opt_perm+0x79/0x120 [ 273.413176][T12941] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.413197][T12941] do_sock_setsockopt+0x3af/0x720 [ 273.413237][T12941] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 273.413276][T12941] ? __fget_files+0x395/0x410 [ 273.413297][T12941] ? __fget_files+0x2a/0x410 [ 273.413329][T12941] __x64_sys_setsockopt+0x1ee/0x280 [ 273.413369][T12941] do_syscall_64+0xf3/0x230 [ 273.413400][T12941] ? clear_bhb_loop+0x35/0x90 [ 273.413438][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.413466][T12941] RIP: 0033:0x7fcc88f8cde9 [ 273.413484][T12941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.413502][T12941] RSP: 002b:00007fcc89e9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 273.413526][T12941] RAX: ffffffffffffffda RBX: 00007fcc891a5fa0 RCX: 00007fcc88f8cde9 [ 273.413542][T12941] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 273.413555][T12941] RBP: 00007fcc8900e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 273.413568][T12941] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000000 [ 273.413581][T12941] R13: 0000000000000000 R14: 00007fcc891a5fa0 R15: 00007ffe81ebed18 [ 273.413614][T12941] [ 273.417024][T12941] Mem-Info: [ 273.710659][T12941] active_anon:6573 inactive_anon:0 isolated_anon:0 [ 273.710659][T12941] active_file:1459 inactive_file:38379 isolated_file:0 [ 273.710659][T12941] unevictable:768 dirty:127 writeback:3 [ 273.710659][T12941] slab_reclaimable:11845 slab_unreclaimable:109668 [ 273.710659][T12941] mapped:28463 shmem:1411 pagetables:798 [ 273.710659][T12941] sec_pagetables:0 bounce:0 [ 273.710659][T12941] kernel_misc_reclaimable:0 [ 273.710659][T12941] free:1320841 free_pcp:1110 free_cma:0 [ 273.767729][T12952] netlink: 'syz.4.1929': attribute type 21 has an invalid length. [ 273.775840][T12952] netlink: 'syz.4.1929': attribute type 1 has an invalid length. [ 273.815126][T12941] Node 0 active_anon:26292kB inactive_anon:0kB active_file:5836kB inactive_file:153440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113852kB dirty:508kB writeback:12kB shmem:4108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12572kB pagetables:2992kB sec_pagetables:0kB all_unreclaimable? no [ 273.853861][T12941] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 273.957815][T12941] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.007976][T12941] lowmem_reserve[]: 0 2491 2491 0 0 [ 274.014592][T12941] Node 0 DMA32 free:1369492kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:26256kB inactive_anon:0kB active_file:5836kB inactive_file:152860kB unevictable:1536kB writepending:520kB present:3129332kB managed:2551076kB mlocked:0kB bounce:0kB free_pcp:3332kB local_pcp:2276kB free_cma:0kB [ 274.073922][T12941] lowmem_reserve[]: 0 0 0 0 0 [ 274.080037][T12941] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 274.137645][T12941] lowmem_reserve[]: 0 0 0 0 0 [ 274.142454][T12941] Node 1 Normal free:3901156kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.248455][T12941] lowmem_reserve[]: 0 0 0 0 0 [ 274.253522][T12941] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 274.310942][T12941] Node 0 DMA32: 703*4kB (UM) 331*8kB (UME) 252*16kB (UME) 254*32kB (UME) 201*64kB (UME) 72*128kB (UME) 34*256kB (UME) 13*512kB (UME) 5*1024kB (UM) 4*2048kB (UM) 318*4096kB (UM) = 1370900kB [ 274.367712][T12941] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 274.404897][T12941] Node 1 Normal: 211*4kB (UE) 47*8kB (UME) 38*16kB (UME) 236*32kB (UME) 105*64kB (UME) 30*128kB (UME) 13*256kB (UM) 10*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 943*4096kB (M) = 3901156kB [ 274.450915][T12983] netlink: 'syz.1.1938': attribute type 9 has an invalid length. [ 274.471818][T12941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.492467][T12941] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.506277][T12941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.520474][T12941] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.530122][T12941] 41676 total pagecache pages [ 274.534987][T12941] 0 pages in swap cache [ 274.545157][T12941] Free swap = 124996kB [ 274.549838][T12941] Total swap = 124996kB [ 274.554226][T12941] 2097051 pages RAM [ 274.558893][T12941] 0 pages HighMem/MovableOnly [ 274.563729][T12941] 427496 pages reserved [ 274.570593][T12941] 0 pages cma reserved [ 274.781166][T12995] Bluetooth: MGMT ver 1.23 [ 275.062086][T13002] __nla_validate_parse: 8 callbacks suppressed [ 275.062108][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'. [ 275.703433][T13024] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 275.749564][T13024] netlink: 'syz.2.1948': attribute type 1 has an invalid length. [ 276.472849][T13062] syzkaller0: entered promiscuous mode [ 276.482811][T13062] syzkaller0: entered allmulticast mode [ 276.620968][T13066] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1958'. [ 276.662830][T13070] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.967325][T13085] xt_hashlimit: size too large, truncated to 1048576 [ 277.106526][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1966'. [ 277.188973][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1966'. [ 277.327196][T13098] lo: left allmulticast mode [ 277.339191][T13098] 0ªX¹¦D: left allmulticast mode [ 277.387252][T13098] bridge0: left promiscuous mode [ 277.440830][T13098] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.454189][T13098] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.490475][T13098] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.515727][T13098] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.516000][T13105] can: request_module (can-proto-5) failed. [ 277.546641][T13106] can: request_module (can-proto-5) failed. [ 277.546950][T13098] vlan2: left promiscuous mode [ 277.564130][T13098] ip6tnl2: left promiscuous mode [ 277.576563][T13098] macvlan2: left promiscuous mode [ 277.589343][T13098] macvlan2: left allmulticast mode [ 277.743512][T13116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.888942][T13124] netlink: 'syz.4.1975': attribute type 10 has an invalid length. [ 277.928250][T13124] veth1_macvtap: left promiscuous mode [ 277.959434][T13124] team0: Device veth1_macvtap failed to register rx_handler [ 278.184766][T13137] lo speed is unknown, defaulting to 1000 [ 278.465544][T13159] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1989'. [ 278.762212][T13137] lo speed is unknown, defaulting to 1000 [ 278.927667][T13191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1997'. [ 279.348234][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2002'. [ 279.614805][T13221] syzkaller1: entered promiscuous mode [ 279.638076][T13221] syzkaller1: entered allmulticast mode [ 279.673750][T13221] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2006'. [ 279.699796][T13221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2006'. [ 280.007353][T13235] lo speed is unknown, defaulting to 1000 [ 280.013975][T13240] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 280.078837][T13246] delete_channel: no stack [ 280.123497][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2012'. [ 280.127367][T13248] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2014'. [ 280.157680][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2012'. [ 280.196844][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2012'. [ 280.217683][T13240] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2012'. [ 280.434506][T13235] lo speed is unknown, defaulting to 1000 [ 280.455177][T13252] netlink: 'syz.0.2016': attribute type 32 has an invalid length. [ 280.600672][T13268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2020'. [ 280.631692][T13268] sock: sock_timestamping_bind_phc: sock not bind to device [ 280.658324][T13260] netlink: 'syz.4.2020': attribute type 1 has an invalid length. [ 280.666409][T13260] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2020'. [ 280.839075][T13278] x_tables: unsorted entry at hook 3 [ 281.045492][T13293] openvswitch: netlink: Actions may not be safe on all matching packets [ 281.407902][T13301] xt_nfacct: accounting object `syz0' does not exists [ 281.427772][T13301] IPVS: set_ctl: invalid protocol: 22 172.30.1.5:0 [ 281.630018][T13315] lo speed is unknown, defaulting to 1000 [ 282.028796][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 282.332224][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'. [ 282.367322][T13315] lo speed is unknown, defaulting to 1000 [ 282.623067][T13359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2045'. [ 282.752640][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2045'. [ 283.136888][T13383] netlink: 'syz.2.2052': attribute type 9 has an invalid length. [ 283.300591][T13385] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 283.328222][T13391] netlink: 'syz.0.2055': attribute type 1 has an invalid length. [ 283.342278][T13387] RDS: rds_bind could not find a transport for ::4000:0:40:0, load rds_tcp or rds_rdma? [ 283.354094][T13391] netlink: 'syz.0.2055': attribute type 3 has an invalid length. [ 283.393692][T13394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.556069][T13403] ipvlan2: entered promiscuous mode [ 283.573545][T13403] bridge4: port 1(ipvlan2) entered blocking state [ 283.581491][T13403] bridge4: port 1(ipvlan2) entered disabled state [ 283.588539][T13403] ipvlan2: entered allmulticast mode [ 283.593870][T13403] bridge4: entered allmulticast mode [ 283.601412][T13403] ipvlan2: left allmulticast mode [ 283.606608][T13403] bridge4: left allmulticast mode [ 283.785384][T13413] syzkaller0: entered allmulticast mode [ 284.152491][T13426] bridge0: port 3(ipvlan2) entered blocking state [ 284.167881][T13426] bridge0: port 3(ipvlan2) entered disabled state [ 284.178386][T13426] ipvlan2: entered allmulticast mode [ 284.183724][T13426] bridge0: entered allmulticast mode [ 284.199586][T13426] ipvlan2: left allmulticast mode [ 284.204678][T13426] bridge0: left allmulticast mode [ 284.226465][T13433] tun0: tun_chr_ioctl cmd 35108 [ 284.236859][T13438] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 284.465088][T13449] lo speed is unknown, defaulting to 1000 [ 284.627056][T13459] openvswitch: netlink: Flow actions attr not present in new flow. [ 285.380693][T13481] __nla_validate_parse: 7 callbacks suppressed [ 285.380789][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2081'. [ 285.409840][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2081'. [ 285.711163][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 286.846906][T13453] sit0: entered promiscuous mode [ 286.852116][T13453] netlink: 'syz.4.2073': attribute type 1 has an invalid length. [ 286.860218][T13453] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2073'. [ 286.926267][T13474] lo: entered promiscuous mode [ 286.960831][T13474] tunl0: entered promiscuous mode [ 286.988844][T13474] gre0: entered promiscuous mode [ 287.013288][T13474] gretap0: entered promiscuous mode [ 287.025500][T13474] erspan0: entered promiscuous mode [ 287.035394][T13474] ip_vti0: entered promiscuous mode [ 287.052213][T13474] ip6_vti0: entered promiscuous mode [ 287.065448][T13474] ip6tnl0: entered promiscuous mode [ 287.075701][T13474] ip6gre0: entered promiscuous mode [ 287.085960][T13474] syz_tun: entered promiscuous mode [ 287.095036][T13474] ip6gretap0: entered promiscuous mode [ 287.103483][T13474] bridge0: entered promiscuous mode [ 287.112495][T13474] bond0: entered promiscuous mode [ 287.118213][T13474] bond_slave_0: entered promiscuous mode [ 287.123975][T13474] bond_slave_1: entered promiscuous mode [ 287.132020][T13474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.139662][T13474] team0: entered promiscuous mode [ 287.144709][T13474] team_slave_0: entered promiscuous mode [ 287.152876][T13474] team_slave_1: entered promiscuous mode [ 287.159670][T13474] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.166876][T13474] dummy0: entered promiscuous mode [ 287.173447][T13474] nlmon0: entered promiscuous mode [ 287.179879][T13474] caif0: entered promiscuous mode [ 287.184920][T13474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.215318][T13489] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 287.228529][ T5894] lo speed is unknown, defaulting to 1000 [ 287.234753][T13449] lo speed is unknown, defaulting to 1000 [ 287.394482][T13502] lo speed is unknown, defaulting to 1000 [ 287.568436][T13512] netlink: 'syz.2.2091': attribute type 2 has an invalid length. [ 287.576234][T13512] netlink: 'syz.2.2091': attribute type 1 has an invalid length. [ 287.617550][T13512] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2091'. [ 287.831499][T13519] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2094'. [ 288.280850][T13538] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 288.311855][T13502] lo speed is unknown, defaulting to 1000 [ 288.632274][T13551] lo speed is unknown, defaulting to 1000 [ 289.394316][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'. [ 289.442921][T13551] lo speed is unknown, defaulting to 1000 [ 289.674890][T13585] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 290.841931][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 290.898089][T13612] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2116'. [ 291.084148][T13616] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 291.481336][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 291.557629][T13629] lo speed is unknown, defaulting to 1000 [ 291.610340][T13631] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2124'. [ 291.626402][T13631] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2124'. [ 291.777740][T13635] netlink: 'syz.2.2125': attribute type 10 has an invalid length. [ 291.785640][T13635] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2125'. [ 291.991562][T13648] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 292.069454][T13629] lo speed is unknown, defaulting to 1000 [ 292.248184][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 292.257242][T13656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2132'. [ 292.485903][T13667] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 293.010345][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2138'. [ 293.084558][T13690] veth8: entered allmulticast mode [ 293.138733][T13692] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 293.229910][T13698] xt_TCPMSS: Only works on TCP SYN packets [ 293.615751][T13717] lo speed is unknown, defaulting to 1000 [ 293.650387][T13726] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2150'. [ 293.832215][T13734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.913302][T13734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.924869][T13739] netlink: 'syz.0.2153': attribute type 5 has an invalid length. [ 293.961256][T13734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.364273][T13717] lo speed is unknown, defaulting to 1000 [ 294.655436][T13769] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 294.669641][T13769] macvlan3: entered allmulticast mode [ 294.675277][T13769] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 294.696194][T13769] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 294.740024][T13773] xt_TCPMSS: Only works on TCP SYN packets [ 294.945845][T13780] xt_TPROXY: Can be used only with -p tcp or -p udp [ 295.956731][T13831] FAULT_INJECTION: forcing a failure. [ 295.956731][T13831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.997743][T13831] CPU: 0 UID: 0 PID: 13831 Comm: syz.2.2182 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 295.997782][T13831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 295.997795][T13831] Call Trace: [ 295.997803][T13831] [ 295.997811][T13831] dump_stack_lvl+0x241/0x360 [ 295.997843][T13831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.997865][T13831] ? __pfx__printk+0x10/0x10 [ 295.997901][T13831] ? __pfx_lock_release+0x10/0x10 [ 295.997940][T13831] should_fail_ex+0x40a/0x550 [ 295.997970][T13831] _copy_from_user+0x2d/0xb0 [ 295.997993][T13831] copy_msghdr_from_user+0xae/0x680 [ 295.998027][T13831] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 295.998052][T13831] ? __fget_files+0x2a/0x410 [ 295.998079][T13831] ? __fget_files+0x2a/0x410 [ 295.998111][T13831] __sys_sendmsg+0x209/0x350 [ 295.998135][T13831] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.998167][T13831] ? do_sys_openat2+0x17a/0x1d0 [ 295.998215][T13831] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.998246][T13831] ? do_syscall_64+0x100/0x230 [ 295.998279][T13831] ? do_syscall_64+0xb6/0x230 [ 295.998310][T13831] do_syscall_64+0xf3/0x230 [ 295.998336][T13831] ? clear_bhb_loop+0x35/0x90 [ 295.998363][T13831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.998390][T13831] RIP: 0033:0x7fcc88f8cde9 [ 295.998408][T13831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.998425][T13831] RSP: 002b:00007fcc89e9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.998448][T13831] RAX: ffffffffffffffda RBX: 00007fcc891a5fa0 RCX: 00007fcc88f8cde9 [ 295.998464][T13831] RDX: 0000000000000000 RSI: 00004000000004c0 RDI: 0000000000000004 [ 295.998477][T13831] RBP: 00007fcc89e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 295.998490][T13831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.998502][T13831] R13: 0000000000000000 R14: 00007fcc891a5fa0 R15: 00007ffe81ebed18 [ 295.998534][T13831] [ 296.005386][T13828] lo speed is unknown, defaulting to 1000 [ 296.347835][T13843] __nla_validate_parse: 5 callbacks suppressed [ 296.347856][T13843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2186'. [ 296.445642][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 296.721470][T13863] netlink: 'syz.3.2188': attribute type 21 has an invalid length. [ 296.747143][T13863] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2188'. [ 296.953691][T13867] lo speed is unknown, defaulting to 1000 [ 297.110335][T13879] FAULT_INJECTION: forcing a failure. [ 297.110335][T13879] name failslab, interval 1, probability 0, space 0, times 0 [ 297.157782][T13879] CPU: 0 UID: 0 PID: 13879 Comm: syz.2.2195 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 297.157815][T13879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 297.157828][T13879] Call Trace: [ 297.157836][T13879] [ 297.157844][T13879] dump_stack_lvl+0x241/0x360 [ 297.157875][T13879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.157899][T13879] ? __pfx__printk+0x10/0x10 [ 297.157935][T13879] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 297.157961][T13879] ? __pfx___might_resched+0x10/0x10 [ 297.157993][T13879] should_fail_ex+0x40a/0x550 [ 297.158022][T13879] should_failslab+0xac/0x100 [ 297.158047][T13879] kmem_cache_alloc_node_noprof+0x77/0x380 [ 297.158070][T13879] ? __alloc_skb+0x1c3/0x440 [ 297.158105][T13879] __alloc_skb+0x1c3/0x440 [ 297.158142][T13879] ? __pfx___alloc_skb+0x10/0x10 [ 297.158175][T13879] ? netlink_autobind+0xd6/0x2f0 [ 297.158196][T13879] ? netlink_autobind+0x2b0/0x2f0 [ 297.158223][T13879] netlink_sendmsg+0x638/0xcb0 [ 297.158257][T13879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.158285][T13879] ? aa_sock_msg_perm+0x91/0x160 [ 297.158319][T13879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.158340][T13879] __sock_sendmsg+0x221/0x270 [ 297.158369][T13879] ____sys_sendmsg+0x52a/0x7e0 [ 297.158398][T13879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.158430][T13879] ? __fget_files+0x2a/0x410 [ 297.158457][T13879] ? __fget_files+0x2a/0x410 [ 297.158498][T13879] __sys_sendmsg+0x269/0x350 [ 297.158524][T13879] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.158558][T13879] ? do_sys_openat2+0x17a/0x1d0 [ 297.158609][T13879] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.158640][T13879] ? do_syscall_64+0x100/0x230 [ 297.158674][T13879] ? do_syscall_64+0xb6/0x230 [ 297.158706][T13879] do_syscall_64+0xf3/0x230 [ 297.158735][T13879] ? clear_bhb_loop+0x35/0x90 [ 297.158769][T13879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.158797][T13879] RIP: 0033:0x7fcc88f8cde9 [ 297.158815][T13879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.158832][T13879] RSP: 002b:00007fcc89e9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.158855][T13879] RAX: ffffffffffffffda RBX: 00007fcc891a5fa0 RCX: 00007fcc88f8cde9 [ 297.158870][T13879] RDX: 0000000000000000 RSI: 00004000000004c0 RDI: 0000000000000004 [ 297.158884][T13879] RBP: 00007fcc89e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 297.158898][T13879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.158910][T13879] R13: 0000000000000000 R14: 00007fcc891a5fa0 R15: 00007ffe81ebed18 [ 297.158941][T13879] [ 297.497406][T13881] lo speed is unknown, defaulting to 1000 [ 297.544910][T13828] lo speed is unknown, defaulting to 1000 [ 297.879829][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 298.051190][T13899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2200'. [ 298.269134][T13867] lo speed is unknown, defaulting to 1000 [ 298.346606][T13881] lo speed is unknown, defaulting to 1000 [ 298.346755][T13912] bridge0: port 1(dummy0) entered blocking state [ 298.367730][T13912] bridge0: port 1(dummy0) entered disabled state [ 298.400563][T13912] dummy0: entered allmulticast mode [ 298.416219][T13912] dummy0: entered promiscuous mode [ 298.444990][T13915] dummy0: left allmulticast mode [ 298.454494][T13915] dummy0: left promiscuous mode [ 298.463317][T13915] bridge0: port 1(dummy0) entered disabled state [ 298.985194][T13926] netlink: 'syz.2.2207': attribute type 29 has an invalid length. [ 299.068396][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2209'. [ 299.693471][T13952] lo speed is unknown, defaulting to 1000 [ 299.989823][T13970] bridge8: entered promiscuous mode [ 300.005755][T13970] bridge8: entered allmulticast mode [ 300.033751][T13970] team0: Port device bridge8 added [ 300.067160][T13975] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2219'. [ 300.234128][T13984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2222'. [ 300.264653][T13984] netlink: 85 bytes leftover after parsing attributes in process `syz.3.2222'. [ 300.287832][T13979] lo speed is unknown, defaulting to 1000 [ 300.455205][T13952] lo speed is unknown, defaulting to 1000 [ 300.606580][T13994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2225'. [ 300.662678][T13988] tc_dump_action: action bad kind [ 300.705246][T13988] bond0: (slave syz_tun): Releasing backup interface [ 301.049295][T13979] lo speed is unknown, defaulting to 1000 [ 302.097924][T14038] lo speed is unknown, defaulting to 1000 [ 302.263136][T14054] netlink: 'syz.0.2243': attribute type 4 has an invalid length. [ 302.379324][T14057] vlan2: entered promiscuous mode [ 302.394838][T14057] vlan2: entered allmulticast mode [ 302.404834][T14057] bridge0: entered allmulticast mode [ 302.423211][T14058] __nla_validate_parse: 2 callbacks suppressed [ 302.423231][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2244'. [ 302.457887][T14058] bridge_slave_1: left allmulticast mode [ 302.470973][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2245'. [ 302.474666][T14057] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2244'. [ 302.494664][T14058] bridge_slave_1: left promiscuous mode [ 302.503957][T14057] unsupported nlmsg_type 40 [ 302.515700][T14058] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.525906][T14058] bridge_slave_0: left allmulticast mode [ 302.532076][T14058] bridge_slave_0: left promiscuous mode [ 302.543840][T14058] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.573532][T14058] bridge0: left allmulticast mode [ 302.675820][T14069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2247'. [ 302.716205][T14063] netlink: 'syz.0.2246': attribute type 3 has an invalid length. [ 302.989030][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 303.015821][T14038] lo speed is unknown, defaulting to 1000 [ 303.022877][T14079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2251'. [ 304.006397][T14118] netlink: 'syz.4.2266': attribute type 13 has an invalid length. [ 304.161346][T14123] netlink: 'syz.3.2269': attribute type 2 has an invalid length. [ 304.176175][T14123] fþ²¹¥‰: entered promiscuous mode [ 304.580889][T14148] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2275'. [ 304.612754][T14148] netlink: 'syz.1.2275': attribute type 10 has an invalid length. [ 304.633496][T14148] batman_adv: batadv0: Adding interface: team0 [ 304.658817][T14148] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 304.724884][T14148] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 304.834639][T14163] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2282'. [ 305.200408][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2286'. [ 305.222849][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2287'. [ 305.255214][T14175] nbd: socks must be embedded in a SOCK_ITEM attr [ 305.502449][T14188] lo speed is unknown, defaulting to 1000 [ 305.623336][T14198] veth0_vlan: left allmulticast mode [ 305.645172][T14198] ip6gre1: left allmulticast mode [ 305.669205][T14198] batadv1: left promiscuous mode [ 305.691167][T14198] bridge2: left promiscuous mode [ 305.696183][T14198] bridge2: left allmulticast mode [ 305.708611][T14198] veth3: left promiscuous mode [ 305.724232][T14198] bridge4: left promiscuous mode [ 305.734198][T14198] bridge4: left allmulticast mode [ 305.747314][T14198] bond5: left promiscuous mode [ 305.947984][ T5861] Bluetooth: hci4: command 0x0405 tx timeout [ 306.060311][T14188] lo speed is unknown, defaulting to 1000 [ 306.112585][T14218] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.130893][T14218] bond0: (slave bond7): Enslaving as an active interface with an up link [ 306.509578][T14238] lo speed is unknown, defaulting to 1000 [ 307.109028][T14265] netlink: 'syz.2.2311': attribute type 29 has an invalid length. [ 307.153365][T14265] netlink: 'syz.2.2311': attribute type 29 has an invalid length. [ 307.218981][T14238] lo speed is unknown, defaulting to 1000 [ 307.827866][T14294] __nla_validate_parse: 7 callbacks suppressed [ 307.827887][T14294] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2319'. [ 308.028106][ T5861] Bluetooth: hci4: command 0x0405 tx timeout [ 308.119849][T14302] sctp: [Deprecated]: syz.2.2321 (pid 14302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.119849][T14302] Use struct sctp_sack_info instead [ 308.266994][T14309] lo speed is unknown, defaulting to 1000 [ 308.505939][T14323] syzkaller1: entered promiscuous mode [ 308.526768][T14323] syzkaller1: entered allmulticast mode [ 308.532918][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2328'. [ 308.558117][T14325] netlink: get zone limit has 8 unknown bytes [ 308.943393][T14309] lo speed is unknown, defaulting to 1000 [ 309.525166][T14342] sctp: [Deprecated]: syz.0.2332 (pid 14342) Use of int in max_burst socket option deprecated. [ 309.525166][T14342] Use struct sctp_assoc_value instead [ 309.572458][T14333] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 309.585107][T14333] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 309.593534][T14333] CPU: 1 UID: 0 PID: 14333 Comm: syz.4.2330 Not tainted 6.14.0-rc1-syzkaller-00303-g4e41231249f4 #0 [ 309.604429][T14333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 309.614512][T14333] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 309.620003][T14333] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d bb c8 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 18 37 8b 00 48 be 00 00 00 00 00 fc [ 309.639630][T14333] RSP: 0018:ffffc900057af770 EFLAGS: 00010006 [ 309.645717][T14333] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 309.653718][T14333] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 309.661719][T14333] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 309.669706][T14333] R10: dffffc0000000000 R11: fffffbfff2036aaf R12: ffff88804be40000 [ 309.677689][T14333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 309.685666][T14333] FS: 00007fd4eb1f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 309.694621][T14333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.701224][T14333] CR2: 000000110c3d8bc7 CR3: 0000000060320000 CR4: 00000000003526f0 [ 309.709238][T14333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.717323][T14333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.725311][T14333] Call Trace: [ 309.728612][T14333] [ 309.731567][T14333] ? __die_body+0x5f/0xb0 [ 309.735940][T14333] ? die_addr+0xb0/0xe0 [ 309.740123][T14333] ? exc_general_protection+0x3dd/0x5d0 [ 309.745698][T14333] ? asm_exc_general_protection+0x26/0x30 [ 309.751463][T14333] ? __lock_acquire+0x6a/0x2100 [ 309.756347][T14333] ? mark_lock+0x9a/0x360 [ 309.760703][T14333] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 309.766706][T14333] lock_acquire+0x1ed/0x550 [ 309.771227][T14333] ? add_wait_queue+0x46/0x180 [ 309.776007][T14333] ? __pfx_lock_acquire+0x10/0x10 [ 309.781045][T14333] ? queue_work_on+0x25f/0x380 [ 309.785890][T14333] ? __local_bh_enable_ip+0x168/0x200 [ 309.791306][T14333] ? __pfx_queue_work_on+0x10/0x10 [ 309.796439][T14333] ? __local_bh_enable_ip+0x168/0x200 [ 309.801821][T14333] ? vsock_loopback_send_pkt+0xb6/0x100 [ 309.807471][T14333] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 309.813210][T14333] ? do_raw_spin_unlock+0x13c/0x8b0 [ 309.818420][T14333] _raw_spin_lock_irqsave+0xd5/0x120 [ 309.823744][T14333] ? add_wait_queue+0x46/0x180 [ 309.828555][T14333] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 309.834472][T14333] ? virtio_transport_send_pkt_info+0xd13/0x10b0 [ 309.840818][T14333] add_wait_queue+0x46/0x180 [ 309.845430][T14333] virtio_transport_release+0x4c4/0xce0 [ 309.850991][T14333] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 309.856982][T14333] ? __pfx_virtio_transport_release+0x10/0x10 [ 309.863058][T14333] ? __pfx_woken_wake_function+0x10/0x10 [ 309.868709][T14333] ? __local_bh_enable_ip+0x168/0x200 [ 309.874086][T14333] ? __vsock_release+0xa4/0x4f0 [ 309.878951][T14333] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 309.884943][T14333] ? __vsock_release+0x2c/0x4f0 [ 309.890962][T14333] ? do_raw_spin_unlock+0x13c/0x8b0 [ 309.896211][T14333] ? __vsock_release+0x3b/0x4f0 [ 309.901094][T14333] __vsock_release+0xf1/0x4f0 [ 309.906107][T14333] vsock_release+0x97/0x100 [ 309.910721][T14333] sock_close+0xbc/0x240 [ 309.915172][T14333] ? __pfx_sock_close+0x10/0x10 [ 309.920057][T14333] __fput+0x3e9/0x9f0 [ 309.924068][T14333] task_work_run+0x24f/0x310 [ 309.928686][T14333] ? __pfx_task_work_run+0x10/0x10 [ 309.933830][T14333] ? syscall_exit_to_user_mode+0xa3/0x340 [ 309.939569][T14333] syscall_exit_to_user_mode+0x13f/0x340 [ 309.945223][T14333] do_syscall_64+0x100/0x230 [ 309.949838][T14333] ? clear_bhb_loop+0x35/0x90 [ 309.954547][T14333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.960489][T14333] RIP: 0033:0x7fd4ed38cde9 [ 309.964926][T14333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.984551][T14333] RSP: 002b:00007fd4eb1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 309.992985][T14333] RAX: 0000000000000007 RBX: 00007fd4ed5a6080 RCX: 00007fd4ed38cde9 [ 310.001158][T14333] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000040 [ 310.009153][T14333] RBP: 00007fd4ed40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 310.017138][T14333] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 310.025118][T14333] R13: 0000000000000001 R14: 00007fd4ed5a6080 R15: 00007fff9139f708 [ 310.033108][T14333] [ 310.036130][T14333] Modules linked in: [ 310.040048][T14333] ---[ end trace 0000000000000000 ]--- [ 310.045508][T14333] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 310.050988][T14333] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d bb c8 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 18 37 8b 00 48 be 00 00 00 00 00 fc [ 310.070603][T14333] RSP: 0018:ffffc900057af770 EFLAGS: 00010006 [ 310.076681][T14333] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 310.084659][T14333] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 310.092637][T14333] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 310.100612][T14333] R10: dffffc0000000000 R11: fffffbfff2036aaf R12: ffff88804be40000 [ 310.108596][T14333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 310.116573][T14333] FS: 00007fd4eb1f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 310.125508][T14333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.132098][T14333] CR2: 000000110c3d8bc7 CR3: 0000000060320000 CR4: 00000000003526f0 [ 310.140084][T14333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.148066][T14333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.156062][T14333] Kernel panic - not syncing: Fatal exception [ 310.162419][T14333] Kernel Offset: disabled [ 310.166757][T14333] Rebooting in 86400 seconds..