last executing test programs: 1m2.789869046s ago: executing program 1 (id=561): syz_emit_ethernet(0x1a1, &(0x7f0000000240)={@empty, @remote, @void, {@mpls_uc={0x8847, {[{0x726, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x1}], @ipv4=@igmp={{0x26, 0x4, 0x1, 0xa, 0x187, 0x66, 0x0, 0x0, 0x2, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x29}, {[@noop, @rr={0x7, 0x1b, 0x60, [@broadcast, @private=0xa010100, @local, @empty, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0xc, 0xde, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x7f, 0x3, 0x0, [{@loopback, 0x9}, {@multicast1, 0x1}, {@private=0xa010102, 0xfffffff3}, {@loopback, 0x8}, {@multicast1, 0x9}, {@private=0xa010102, 0x10001}]}, @timestamp_addr={0x44, 0x24, 0x4c, 0x1, 0xc, [{@local, 0x7}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}, {0x13, 0x0, 0x0, @local, "fcf89ef7020a942176f3b17f26833c78bfff35bc4ed3db5d85f5bb34473c1b77d4cf8c6863a9e34a35eb38aad1205e1bd7627ec3ff8c3f1460b1f8e4a9a61f3c892da72eb06468a75a74251f4a1f1d5af2ec21bbf782d6cc38e93141fb09327f224bc56260b9c8c38ea3ff5a0d1007c3258fa795ae449ca7f75a6faa84bc2d3e52549aaccbc32e6771717d1c8cebd4073099a2931bc0760874e46e3a7cb356d01816d9bfb87cd75555531986398b99ac9068698eead79b423d38528575fa9a7a9104f5ab85a4f923f45977fc68b0e7542919c38e9d8827776c095aec1f2d84e10af02be4ef46f8"}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0xb23, 0x447, 0x582, 0xcb2]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xbd}, 0x1c) 52.790956592s ago: executing program 1 (id=561): syz_emit_ethernet(0x1a1, &(0x7f0000000240)={@empty, @remote, @void, {@mpls_uc={0x8847, {[{0x726, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x1}], @ipv4=@igmp={{0x26, 0x4, 0x1, 0xa, 0x187, 0x66, 0x0, 0x0, 0x2, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x29}, {[@noop, @rr={0x7, 0x1b, 0x60, [@broadcast, @private=0xa010100, @local, @empty, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0xc, 0xde, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x7f, 0x3, 0x0, [{@loopback, 0x9}, {@multicast1, 0x1}, {@private=0xa010102, 0xfffffff3}, {@loopback, 0x8}, {@multicast1, 0x9}, {@private=0xa010102, 0x10001}]}, @timestamp_addr={0x44, 0x24, 0x4c, 0x1, 0xc, [{@local, 0x7}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}, {0x13, 0x0, 0x0, @local, "fcf89ef7020a942176f3b17f26833c78bfff35bc4ed3db5d85f5bb34473c1b77d4cf8c6863a9e34a35eb38aad1205e1bd7627ec3ff8c3f1460b1f8e4a9a61f3c892da72eb06468a75a74251f4a1f1d5af2ec21bbf782d6cc38e93141fb09327f224bc56260b9c8c38ea3ff5a0d1007c3258fa795ae449ca7f75a6faa84bc2d3e52549aaccbc32e6771717d1c8cebd4073099a2931bc0760874e46e3a7cb356d01816d9bfb87cd75555531986398b99ac9068698eead79b423d38528575fa9a7a9104f5ab85a4f923f45977fc68b0e7542919c38e9d8827776c095aec1f2d84e10af02be4ef46f8"}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0xb23, 0x447, 0x582, 0xcb2]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xbd}, 0x1c) 41.49973671s ago: executing program 1 (id=561): syz_emit_ethernet(0x1a1, &(0x7f0000000240)={@empty, @remote, @void, {@mpls_uc={0x8847, {[{0x726, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x1}], @ipv4=@igmp={{0x26, 0x4, 0x1, 0xa, 0x187, 0x66, 0x0, 0x0, 0x2, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x29}, {[@noop, @rr={0x7, 0x1b, 0x60, [@broadcast, @private=0xa010100, @local, @empty, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0xc, 0xde, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x7f, 0x3, 0x0, [{@loopback, 0x9}, {@multicast1, 0x1}, {@private=0xa010102, 0xfffffff3}, {@loopback, 0x8}, {@multicast1, 0x9}, {@private=0xa010102, 0x10001}]}, @timestamp_addr={0x44, 0x24, 0x4c, 0x1, 0xc, [{@local, 0x7}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}, {0x13, 0x0, 0x0, @local, "fcf89ef7020a942176f3b17f26833c78bfff35bc4ed3db5d85f5bb34473c1b77d4cf8c6863a9e34a35eb38aad1205e1bd7627ec3ff8c3f1460b1f8e4a9a61f3c892da72eb06468a75a74251f4a1f1d5af2ec21bbf782d6cc38e93141fb09327f224bc56260b9c8c38ea3ff5a0d1007c3258fa795ae449ca7f75a6faa84bc2d3e52549aaccbc32e6771717d1c8cebd4073099a2931bc0760874e46e3a7cb356d01816d9bfb87cd75555531986398b99ac9068698eead79b423d38528575fa9a7a9104f5ab85a4f923f45977fc68b0e7542919c38e9d8827776c095aec1f2d84e10af02be4ef46f8"}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0xb23, 0x447, 0x582, 0xcb2]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xbd}, 0x1c) 31.733914517s ago: executing program 1 (id=561): syz_emit_ethernet(0x1a1, &(0x7f0000000240)={@empty, @remote, @void, {@mpls_uc={0x8847, {[{0x726, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x1}], @ipv4=@igmp={{0x26, 0x4, 0x1, 0xa, 0x187, 0x66, 0x0, 0x0, 0x2, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x29}, {[@noop, @rr={0x7, 0x1b, 0x60, [@broadcast, @private=0xa010100, @local, @empty, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0xc, 0xde, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x7f, 0x3, 0x0, [{@loopback, 0x9}, {@multicast1, 0x1}, {@private=0xa010102, 0xfffffff3}, {@loopback, 0x8}, {@multicast1, 0x9}, {@private=0xa010102, 0x10001}]}, @timestamp_addr={0x44, 0x24, 0x4c, 0x1, 0xc, [{@local, 0x7}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}, {0x13, 0x0, 0x0, @local, "fcf89ef7020a942176f3b17f26833c78bfff35bc4ed3db5d85f5bb34473c1b77d4cf8c6863a9e34a35eb38aad1205e1bd7627ec3ff8c3f1460b1f8e4a9a61f3c892da72eb06468a75a74251f4a1f1d5af2ec21bbf782d6cc38e93141fb09327f224bc56260b9c8c38ea3ff5a0d1007c3258fa795ae449ca7f75a6faa84bc2d3e52549aaccbc32e6771717d1c8cebd4073099a2931bc0760874e46e3a7cb356d01816d9bfb87cd75555531986398b99ac9068698eead79b423d38528575fa9a7a9104f5ab85a4f923f45977fc68b0e7542919c38e9d8827776c095aec1f2d84e10af02be4ef46f8"}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0xb23, 0x447, 0x582, 0xcb2]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xbd}, 0x1c) 19.648353249s ago: executing program 1 (id=561): syz_emit_ethernet(0x1a1, &(0x7f0000000240)={@empty, @remote, @void, {@mpls_uc={0x8847, {[{0x726, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x1}], @ipv4=@igmp={{0x26, 0x4, 0x1, 0xa, 0x187, 0x66, 0x0, 0x0, 0x2, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x29}, {[@noop, @rr={0x7, 0x1b, 0x60, [@broadcast, @private=0xa010100, @local, @empty, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0xc, 0xde, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x7f, 0x3, 0x0, [{@loopback, 0x9}, {@multicast1, 0x1}, {@private=0xa010102, 0xfffffff3}, {@loopback, 0x8}, {@multicast1, 0x9}, {@private=0xa010102, 0x10001}]}, @timestamp_addr={0x44, 0x24, 0x4c, 0x1, 0xc, [{@local, 0x7}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}, {0x13, 0x0, 0x0, @local, "fcf89ef7020a942176f3b17f26833c78bfff35bc4ed3db5d85f5bb34473c1b77d4cf8c6863a9e34a35eb38aad1205e1bd7627ec3ff8c3f1460b1f8e4a9a61f3c892da72eb06468a75a74251f4a1f1d5af2ec21bbf782d6cc38e93141fb09327f224bc56260b9c8c38ea3ff5a0d1007c3258fa795ae449ca7f75a6faa84bc2d3e52549aaccbc32e6771717d1c8cebd4073099a2931bc0760874e46e3a7cb356d01816d9bfb87cd75555531986398b99ac9068698eead79b423d38528575fa9a7a9104f5ab85a4f923f45977fc68b0e7542919c38e9d8827776c095aec1f2d84e10af02be4ef46f8"}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0xb23, 0x447, 0x582, 0xcb2]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xbd}, 0x1c) 6.387152574s ago: executing program 1 (id=561): syz_emit_ethernet(0x1a1, &(0x7f0000000240)={@empty, @remote, @void, {@mpls_uc={0x8847, {[{0x726, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x1}], @ipv4=@igmp={{0x26, 0x4, 0x1, 0xa, 0x187, 0x66, 0x0, 0x0, 0x2, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x29}, {[@noop, @rr={0x7, 0x1b, 0x60, [@broadcast, @private=0xa010100, @local, @empty, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0xc, 0xde, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x7f, 0x3, 0x0, [{@loopback, 0x9}, {@multicast1, 0x1}, {@private=0xa010102, 0xfffffff3}, {@loopback, 0x8}, {@multicast1, 0x9}, {@private=0xa010102, 0x10001}]}, @timestamp_addr={0x44, 0x24, 0x4c, 0x1, 0xc, [{@local, 0x7}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}, {0x13, 0x0, 0x0, @local, "fcf89ef7020a942176f3b17f26833c78bfff35bc4ed3db5d85f5bb34473c1b77d4cf8c6863a9e34a35eb38aad1205e1bd7627ec3ff8c3f1460b1f8e4a9a61f3c892da72eb06468a75a74251f4a1f1d5af2ec21bbf782d6cc38e93141fb09327f224bc56260b9c8c38ea3ff5a0d1007c3258fa795ae449ca7f75a6faa84bc2d3e52549aaccbc32e6771717d1c8cebd4073099a2931bc0760874e46e3a7cb356d01816d9bfb87cd75555531986398b99ac9068698eead79b423d38528575fa9a7a9104f5ab85a4f923f45977fc68b0e7542919c38e9d8827776c095aec1f2d84e10af02be4ef46f8"}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0xb23, 0x447, 0x582, 0xcb2]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xbd}, 0x1c) 4.763431358s ago: executing program 4 (id=1312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x140d, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d0429bd7000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="10000000200800001c0012800b00010062726964676500000c00028006002700e905000002"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.305992327s ago: executing program 4 (id=1317): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES32=r4, @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x2000c861) socket(0x10, 0x80803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="840100001900010000000000000000001d010900500012804a002100c9a7befe6f6d645a9a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fde500002001068004007580a5006c80080060009830bd8dc587880442b1d96a24a07165559173dbcae44a3a719313af0749d07a14975991b8b2154188fc987cf88916d336ebf34a44c2ac7e13c59c0d92d29fa0079e84e1cacd2296c3764857af7dbf64037c201d0396220226df1b049d2e1ec43d9c992c4e40477b04b24a", @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtclass={0x60, 0x28, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x2, 0x6}, {0x9, 0xe}, {0xd, 0xd}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xf4}}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x10, 0xbd}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x91) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r7, &(0x7f0000000040), 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) (async) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4f1}, 0x40040) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400020000000900020073797a300000000005000400020000000900020073797a3200000000050001000600000011000300686173683a69702c706f727400000000"], 0x58}}, 0x0) 3.688738068s ago: executing program 0 (id=1323): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") 3.498880185s ago: executing program 3 (id=1325): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b06000000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) unshare(0x8040480) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000814, &(0x7f0000000380)={0xa, 0x4e20, 0x6, @remote}, 0x1c) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000080), 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffe97, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x0, 0x3, 0x1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2.33808442s ago: executing program 3 (id=1326): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = accept4(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80, 0x100000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xb0, 0x8, 0x9, 0x1, 0x7]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@buf={0x7c, &(0x7f00000001c0)="a4c7be91dcc1ac376ed91a48c4ae16f12220051cf572213e8ec173f5bf0efe16e01446ac76cced6754a8effba2fac1ebc0a15335c3d5d5b24ebc007c30558622cf6b313ae4db5a6c2bf52636a9e7f61bc36903d940f3bcac55b50616e7222d6fd345e8f2cc4e1142753466fd2e612c2a00265b9ea44c8b813f493908"}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000280), 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9261}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x801}, 0x20004004) socketpair(0xa, 0x4, 0x4, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x24}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) bind$netlink(r0, &(0x7f0000000680)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc) read(r4, &(0x7f00000006c0)=""/252, 0xfc) write$cgroup_subtree(r3, &(0x7f00000007c0)={[{0x2d, 'pids'}, {0x2d, 'net_cls'}]}, 0xf) sendmsg$key(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x2, 0xc, 0x0, 0x0, 0x7, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d6}, @sadb_address={0x3, 0x7, 0x33, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010100}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r5, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10001, 0x57}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a40), r3) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0xb}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x29}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4880}, 0x24000000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000b80)={0x0, 0x2710}, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000ec0)={'gre0\x00', &(0x7f0000000e40)={'tunl0\x00', 0x0, 0x7, 0x700, 0x8a, 0xb4ac, {{0x10, 0x4, 0x0, 0x1a, 0x40, 0x66, 0x0, 0x5, 0x2f, 0x0, @remote, @private=0xa010102, {[@ssrr={0x89, 0xb, 0x92, [@rand_addr=0x64010102, @multicast2]}, @timestamp_addr={0x44, 0xc, 0xdf, 0x1, 0x1, [{@local, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x1d, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x4}, {@loopback, 0xd0}]}]}}}}}) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f00), 0x4) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000fc0), 0x8) pipe(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1b, 0x8, &(0x7f0000000d00)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffc01}, @alu={0x7, 0x1, 0x0, 0x6, 0x2, 0xffffffffffffffc0, 0x1}], &(0x7f0000000d40)='GPL\x00', 0x40, 0x90, &(0x7f0000000d80)=""/144, 0x41000, 0x89, '\x00', r10, @fallback=0xf, r11, 0x8, &(0x7f0000000f40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000f80)={0x4, 0x4, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000001100)=[r12, r13, r14, 0xffffffffffffffff], &(0x7f0000001140)=[{0x5, 0x1, 0x2, 0xc}, {0x2, 0x1, 0x1, 0x5}, {0x0, 0x2, 0x0, 0xe}], 0x10, 0x7, @void, @value}, 0x94) 2.33731491s ago: executing program 0 (id=1327): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @private2, 0x4}, 0x1c) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x15, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockname$packet(r2, 0x0, &(0x7f0000000440)) 2.211619004s ago: executing program 0 (id=1329): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlinkprop={0xc0, 0x6c, 0x50f, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x4308}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x5}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_PHYS_PORT_ID={0x14, 0x22, "0320d010030000006932f4764cd35600"}, @IFLA_EVENT={0x8, 0x2c, 0xfffffffc}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_MAP={0x24, 0xe, {0x100000000, 0x9, 0x4, 0x58, 0x8, 0x1}}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x40}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket$inet(0x2, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r7, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x306) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)={0x3, 'team_slave_1\x00', {0x3}, 0x3}) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x20000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x3000000) 2.006992615s ago: executing program 3 (id=1331): setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x7f}, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x3, &(0x7f00000003c0)={{r3}, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0xc, 0x12, r1, 0x913e0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000037cf713f4969064f8542000000009ff8061850c32f68b9528f37738ff9930e24859d9a3726b9e4e5"], 0x28}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000000000000000000701"], 0x28}}, 0x0) r6 = socket(0x40000000015, 0x1, 0x3) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000000), 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x8000004, @loopback}, 0x1c) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0xe, 0x4) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 1.766987146s ago: executing program 0 (id=1333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0xffa1, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) 1.763956055s ago: executing program 3 (id=1334): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f00000002c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x7f000000, @multicast1}, @address_request}}}}, 0x0) 1.664446531s ago: executing program 2 (id=1335): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b9eb03076003088cb89e08f586dd", 0x0, 0x402f, 0x60000000, 0xfffffffffffffd5e, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='netfs_read\x00', r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r4, 0x8982, 0x20000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x9}, 0x10) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf251200000008000300", @ANYRES32=r9, @ANYBLOB="0a00004df1661600000000010800fad266021180"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x8004) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket(0x200000100000011, 0x803, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r11 = accept4(r10, 0x0, 0x0, 0x80000) recvmsg$kcm(r11, 0x0, 0x100) recvmsg$unix(r11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) socket$inet_dccp(0x2, 0x6, 0x0) 1.591131031s ago: executing program 3 (id=1336): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000051}, 0x48000) 1.458326352s ago: executing program 2 (id=1337): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}}, 0x24) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000110001"], 0xb8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYBLOB="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"], 0x48}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000003f80)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000a80)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x10, 0x0, 0x0, [0x0, 0x0, 0xfd3, 0x0]}]}}}], 0x40}}], 0x1, 0x0) 1.45802596s ago: executing program 3 (id=1338): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, 0xffffffffffffffff, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet6(0xa, 0x803, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r1}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x80000000000008, 0x4, 0xfffffffffffffa9f, 0x2, 0x1, 0x4b3]}, &(0x7f0000000000)=0x78) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0xa0003b40, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x40) 1.389290568s ago: executing program 2 (id=1339): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @private2, 0x4}, 0x1c) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r1 = socket(0x15, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockname$packet(r1, 0x0, &(0x7f0000000440)) 1.238475449s ago: executing program 2 (id=1340): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x29, 0x0, &(0x7f0000000240)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x34}]}, &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d40)="9b3837ab", 0x4}], 0x1}}], 0x1, 0x44040050) (async) sendmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d40)="9b3837ab", 0x4}], 0x1}}], 0x1, 0x44040050) listen(r1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9905}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r6, &(0x7f0000000000)='1', 0x1, 0x4850, &(0x7f0000000200)={0x11, 0xf8, r9, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x54, r12, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x10, 0x8f, 0xd683, 0x1ff, 0x2, r7, 0x3, '\x00', r9, r10, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r13, r5, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r13, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r14 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) ioctl$sock_ax25_SIOCDELRT(r14, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$sock_ax25_SIOCDELRT(r14, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xc3ff}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xc3ff}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.074205229s ago: executing program 2 (id=1341): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(0xffffffffffffffff, 0x6) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @info_request={0xf, 0x0, 0x0, 0x5, 0xe}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x1000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001440)={'vlan0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, [0x0, 0x0, 0x0, 0xfffffffe], [0x105]}}) r5 = socket(0x200000000000011, 0x3, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, r4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, &(0x7f0000000e40)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4440}, 0x48104) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 953.690467ms ago: executing program 0 (id=1342): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8948, &(0x7f0000000580)={'bond0\x00', 0x10001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 792.084035ms ago: executing program 0 (id=1343): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006c00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x50, 0xff, 0x0, 0x4}, {0x6, 0x60, 0x0, 0x2}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r3, 0x206, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf9c085fa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2850}, 0x4040005) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x6cc80, 0x80000000, 0x7fffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x801, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}]}]}], {0x14, 0x10}}, 0xb4}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r9}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r11], 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) 634.180354ms ago: executing program 2 (id=1344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000200)=""/132, &(0x7f00000002c0)=0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfff3, 0x4}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) socket$l2tp6(0xa, 0x2, 0x73) close(r1) 510.674431ms ago: executing program 4 (id=1345): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0xffff}, {0x6, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x18}]}}]}, 0x44}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0xc8, &(0x7f0000000240)="cb83ce4fe40db956f853659b174692f49ddffdc19657f9a57466534cf820eab7f9b75ac80aa7773fff4e4aa4fc9b2ebf6651e4ba3128735e7eb0bf256c74e578ac53c6512e5dee3a140b71eae2ec273e0dfdd00250a98cda4f94cea4e22c72ca50b40733d89660c21798ed09a579223e4e2d872b303d6f9078bf2c5f0d74f72b60f0275036a812aaa21426ba2279cb4ec68e303b6742b7a570b76bd24d6050f731a39dcef8f2865700b1db26fea3f3b5fdd7a043dcab8346021860dd767b44567a44f7c3f73ca658", 0xf8, 0x0, &(0x7f0000000340)="351880627dd5d3d463cd79e4fab6d7ae08f86485abd87978b5d04d9c5693a88dcfdf7eff0de9bf1da604b7e1e6eb43389d07ae1f94c994b208c1dcdf9ff1729194a6fa64ab5cf63d6c64869ae7c295c94ab083a276227e5881a155c28fa539b7bfe8ef7147a908784310af91bba2a7e1bb3c274a6aa050df7093d35632cf31ebacb2a46f636205846626c5b314fedcf9c7f466d45125760b9284d2c612b84ee846ec71f6c0521c9eecde89fa03d4cc9d929f124502952475e8896a6e175bcdd0d4a31be3bb009f970493bcd50b5284881ce9f944243e1df446c478f5f8fa60a9c7830ccfdaef3929b54e90c690b9b9a843f996bc0907f3a7"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r2, &(0x7f0000000900)={0x18, 0x2, {0x0, @private}}, 0x1e) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 358.563766ms ago: executing program 4 (id=1346): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f00000002c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0xe0000000, @multicast1}, @address_request}}}}, 0x0) 154.273235ms ago: executing program 4 (id=1347): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) 0s ago: executing program 4 (id=1348): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x3}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) (async, rerun: 32) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000280)=""/25, &(0x7f0000000240)=0x19) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004090) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001140)={'erspan0\x00', &(0x7f0000001000)={'syztnl0\x00', 0x0, 0x80, 0x10, 0x200, 0xf, {{0x43, 0x4, 0x0, 0xa, 0x10c, 0x65, 0x0, 0xa, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@ssrr={0x89, 0x17, 0xbc, [@broadcast, @private=0xa010100, @loopback, @local, @multicast1]}, @cipso={0x86, 0x71, 0x1, [{0x5, 0xe, "2af172171c8636238e89224d"}, {0x5, 0x12, "db6f2e631837e61aaaa5fec931a34904"}, {0x0, 0x11, "475939c19d30307ee104343ef6ad86"}, {0x1, 0x6, 'r2ol'}, {0x6, 0xa, "de4ef2ec3dc824a4"}, {0x0, 0xb, "23bb6f6172419b31ba"}, {0x7, 0x5, "11d2a3"}, {0x7, 0xe, "0bd9bf99d1b5749282c8b47e"}, {0x5, 0x3, "db"}, {0x6, 0x9, "71ab203a3d83bd"}]}, @timestamp_prespec={0x44, 0x2c, 0x9f, 0x3, 0x3, [{@rand_addr=0x64010100, 0x9}, {@remote, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@broadcast, 0x57}, {@multicast1, 0x3}]}, @rr={0x7, 0x27, 0xd7, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010101, @remote, @rand_addr=0x64010100, @remote]}, @generic={0x88, 0xd, "36c0028457498ae588a41e"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x41, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001180)={0x230, 0x12, 0x100, 0x70bd2b, 0x25dfdbff, {0x2a, 0x6, 0xfb, 0x6, {0x4e21, 0x4e23, [0x8c, 0x7d6, 0x9, 0x8], [0x2, 0xf, 0x6, 0x7f], r4, [0x5, 0x5]}, 0x101, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "66d724510474d4cf84f3814d1fbb1c46d684f14ad305c68318491e38de17828b3153afcbad3d250514661ca9ac826dacda57d31f543614b4b0057e8c93f3e8d5f9a749058e3c56d1bc71277fa72880a25317ea689eacf3bce703dc1393cfe1c36d5fb1223faa221e36c8dbb10a5ceaf0c4d1794e2b1f9cfa7df251074acbe1f3f6fa301dd2315ae338dcaea893e67e606b409c2e552f96c0a4692182fa68779c5c4f1f6a2b9f42792cbd4fe814efa9e06cdf3e70bd138e3074a355"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "c0a9743c80ebd08e82f42015f99bef5f97ca75690e7b68d249449f124997faea72f3e2b960c5cdd9076d798ba00ba0ad41f19b6819265736a334079a5dade80630f35be979a014094b9b0351655f890c7468ff2c74a237e8bbda9cf7c4b9e57879cef5fa8b09f8bfb2e0669118d81fbb62d290cfe27c1bb39bc27207894e2d9a4c89438cc91fa2945b58e56ae1e5d513c2ccee3013546031df2c97e119691cd30ddd00f956db2322f9d680182134d561d9afbcfbfe44f3d3ab5b5d79bfdbbdbf4385cc567bfa4e48e4fb4442fe8ccd0cfd63294d02aacc8f5916eb2b5152d2f9108937bf166960bc3907be7bdd5c"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "08b6931e9e1691b2b13fdd30a58255dc96e8c65eec41916d68ee4194084375009ee84c43369879a9"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x230}, 0x1, 0x0, 0x0, 0xb052cd85161a4465}, 0x20004000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000680)={r6, 0x8}, 0x14) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x4001, 0x3, 0x440, 0x318, 0xb, 0x148, 0x0, 0x148, 0x3a8, 0x242, 0x240, 0x3a8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x0, 0x2d0, 0x318, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xb}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) (rerun: 32) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): t 6081 - 0 [ 130.132440][ T5847] Bluetooth: hci4: command tx timeout [ 130.230379][ T8128] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 130.333282][ T8128] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 130.359752][ T8128] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 130.424748][ T8128] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 130.833845][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.677'. [ 130.870353][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.018941][ T8128] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.039404][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.047411][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.098736][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.105918][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.161337][ T8128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.204223][ T8128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.263119][ T8349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.636266][ T8128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.713746][ T8128] veth0_vlan: entered promiscuous mode [ 131.741602][ T8128] veth1_vlan: entered promiscuous mode [ 131.773882][ T8128] veth0_macvtap: entered promiscuous mode [ 131.807931][ T8128] veth1_macvtap: entered promiscuous mode [ 131.846150][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.861891][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.885726][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.903709][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.932800][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.963745][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.976261][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.995454][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.010356][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.020625][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.031563][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.052707][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.084997][ T8128] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.093760][ T8128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.111364][ T8128] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.121417][ T8128] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.195028][ T5847] Bluetooth: hci4: command tx timeout [ 132.265769][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.275421][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.347726][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.368678][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.393177][ T8401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.695'. [ 132.407761][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'. [ 132.418591][ T8401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.695'. [ 132.496352][ T8372] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 132.619208][ T8409] netlink: 'syz.4.699': attribute type 24 has an invalid length. [ 132.634874][ T8376] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 132.892881][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'. [ 132.916718][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'. [ 132.944768][ T8418] netlink: 5 bytes leftover after parsing attributes in process `syz.0.702'. [ 132.946597][ T8422] FAULT_INJECTION: forcing a failure. [ 132.946597][ T8422] name failslab, interval 1, probability 0, space 0, times 1 [ 132.959940][ T8418] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 133.014451][ T8422] CPU: 0 UID: 0 PID: 8422 Comm: syz.4.704 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 133.025100][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 133.035169][ T8422] Call Trace: [ 133.038443][ T8422] [ 133.041368][ T8422] dump_stack_lvl+0x241/0x360 [ 133.046496][ T8422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.051697][ T8422] ? __pfx__printk+0x10/0x10 [ 133.056290][ T8422] ? __kmalloc_cache_noprof+0x48/0x390 [ 133.061763][ T8422] ? __pfx___might_resched+0x10/0x10 [ 133.067050][ T8422] should_fail_ex+0x3b0/0x4e0 [ 133.071727][ T8422] should_failslab+0xac/0x100 [ 133.076415][ T8422] __kmalloc_cache_noprof+0x70/0x390 [ 133.081705][ T8422] ? call_usermodehelper_setup+0x8e/0x270 [ 133.087426][ T8422] ? trace_kmalloc+0x1f/0xd0 [ 133.092019][ T8422] call_usermodehelper_setup+0x8e/0x270 [ 133.097572][ T8422] ? __pfx_free_modprobe_argv+0x10/0x10 [ 133.103134][ T8422] __request_module+0x3cd/0x640 [ 133.107991][ T8422] ? capable+0x79/0xe0 [ 133.112065][ T8422] ? __pfx___request_module+0x10/0x10 [ 133.117447][ T8422] ? bpf_lsm_capable+0x9/0x10 [ 133.122123][ T8422] ? security_capable+0x7e/0x2d0 [ 133.127068][ T8422] ? dev_load+0x21/0x1f0 [ 133.131312][ T8422] dev_load+0x18f/0x1f0 [ 133.135466][ T8422] ieee802154_sock_ioctl+0x1b4/0x3e0 [ 133.140752][ T8422] ? tomoyo_path_number_perm+0x679/0x860 [ 133.146389][ T8422] ? __pfx_ieee802154_sock_ioctl+0x10/0x10 [ 133.152204][ T8422] ? __lock_acquire+0x1397/0x2100 [ 133.157224][ T8422] ? tomoyo_path_number_perm+0x206/0x860 [ 133.162865][ T8422] sock_do_ioctl+0x158/0x460 [ 133.167457][ T8422] ? __pfx_sock_do_ioctl+0x10/0x10 [ 133.172579][ T8422] sock_ioctl+0x626/0x8e0 [ 133.177015][ T8422] ? __pfx_sock_ioctl+0x10/0x10 [ 133.181898][ T8422] ? __fget_files+0x2a/0x410 [ 133.186500][ T8422] ? __fget_files+0x2a/0x410 [ 133.191095][ T8422] ? __pfx_sock_ioctl+0x10/0x10 [ 133.195945][ T8422] __se_sys_ioctl+0xf5/0x170 [ 133.200533][ T8422] do_syscall_64+0xf3/0x230 [ 133.205122][ T8422] ? clear_bhb_loop+0x35/0x90 [ 133.209818][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.215744][ T8422] RIP: 0033:0x7f521df85d29 [ 133.220168][ T8422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.239789][ T8422] RSP: 002b:00007f521ecf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.248214][ T8422] RAX: ffffffffffffffda RBX: 00007f521e175fa0 RCX: 00007f521df85d29 [ 133.256181][ T8422] RDX: 0000000020000200 RSI: 0000000000008916 RDI: 0000000000000005 [ 133.264149][ T8422] RBP: 00007f521ecf9090 R08: 0000000000000000 R09: 0000000000000000 [ 133.272116][ T8422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.280090][ T8422] R13: 0000000000000000 R14: 00007f521e175fa0 R15: 00007ffd3521ff68 [ 133.288073][ T8422] [ 133.304276][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.315996][ T8418] 0ªX¹¦Dö»: entered allmulticast mode [ 133.717825][ T2999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.898595][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.712'. [ 134.270942][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.281980][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.291197][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.305549][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.315325][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 134.324404][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.429478][ T8470] netlink: 'syz.0.716': attribute type 6 has an invalid length. [ 134.555911][ T8472] netlink: 68 bytes leftover after parsing attributes in process `syz.3.717'. [ 134.570564][ T8475] netlink: 68 bytes leftover after parsing attributes in process `syz.3.717'. [ 134.596174][ T2999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.626784][ T8475] netlink: 64 bytes leftover after parsing attributes in process `syz.3.717'. [ 134.639565][ T8478] IPVS: length: 253 != 24 [ 134.647066][ T8472] netlink: 64 bytes leftover after parsing attributes in process `syz.3.717'. [ 134.668279][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.717'. [ 134.807557][ T2999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.908131][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.720'. [ 134.937976][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 134.964114][ T8487] netlink: 'syz.2.720': attribute type 1 has an invalid length. [ 134.983545][ T2999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.146943][ T8493] bridge3: entered promiscuous mode [ 135.152456][ T8493] bridge3: entered allmulticast mode [ 135.166840][ T8490] bridge0: port 3(ip6gretap0) entered blocking state [ 135.200415][ T8490] bridge0: port 3(ip6gretap0) entered disabled state [ 135.224721][ T8490] ip6gretap0: entered allmulticast mode [ 135.265131][ T8490] ip6gretap0: entered promiscuous mode [ 135.286075][ T8490] bridge0: port 3(ip6gretap0) entered blocking state [ 135.292878][ T8490] bridge0: port 3(ip6gretap0) entered forwarding state [ 135.431460][ T8460] chnl_net:caif_netlink_parms(): no params data found [ 135.481911][ T2999] bridge_slave_1: left allmulticast mode [ 135.495948][ T2999] bridge_slave_1: left promiscuous mode [ 135.502080][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.522690][ T2999] bridge_slave_0: left allmulticast mode [ 135.541420][ T2999] bridge_slave_0: left promiscuous mode [ 135.553830][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.100713][ T2999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.112025][ T2999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.122568][ T2999] bond0 (unregistering): Released all slaves [ 136.259070][ T8525] C: renamed from team_slave_0 [ 136.283227][ T8525] netlink: 'syz.4.729': attribute type 1 has an invalid length. [ 136.332167][ T8525] net_ratelimit: 23 callbacks suppressed [ 136.332188][ T8525] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 136.356823][ T5847] Bluetooth: hci4: command tx timeout [ 136.579229][ T8460] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.595722][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.604465][ T8460] bridge_slave_0: entered allmulticast mode [ 136.621854][ T8460] bridge_slave_0: entered promiscuous mode [ 136.758551][ T8544] SET target dimension over the limit! [ 136.813337][ T8551] netlink: 'syz.3.735': attribute type 3 has an invalid length. [ 136.831964][ T8553] netlink: 'syz.2.733': attribute type 10 has an invalid length. [ 136.832517][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.844179][ T8551] netlink: 'syz.3.735': attribute type 3 has an invalid length. [ 136.874887][ T8551] netlink: 'syz.3.735': attribute type 3 has an invalid length. [ 136.876580][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.891753][ T8558] netlink: 'syz.2.733': attribute type 10 has an invalid length. [ 136.893008][ T8551] netlink: 'syz.3.735': attribute type 3 has an invalid length. [ 136.923485][ T8460] bridge_slave_1: entered allmulticast mode [ 136.933336][ T8460] bridge_slave_1: entered promiscuous mode [ 136.941732][ T8544] netlink: 140 bytes leftover after parsing attributes in process `syz.2.733'. [ 136.967673][ T8548] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 136.982850][ T8548] netlink: 112 bytes leftover after parsing attributes in process `syz.0.736'. [ 137.042597][ T8558] bridge0: port 3(team0) entered blocking state [ 137.060260][ T8558] bridge0: port 3(team0) entered disabled state [ 137.068236][ T8558] team0: entered allmulticast mode [ 137.075580][ T8558] team_slave_0: entered allmulticast mode [ 137.081472][ T8558] team_slave_1: entered allmulticast mode [ 137.089947][ T8558] team0: entered promiscuous mode [ 137.096449][ T8558] team_slave_0: entered promiscuous mode [ 137.103306][ T8558] team_slave_1: entered promiscuous mode [ 137.201588][ T8460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.239632][ T8460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.388964][ T8460] team0: Port device team_slave_0 added [ 137.418912][ T8460] team0: Port device team_slave_1 added [ 137.519545][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.546150][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.615911][ T8460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.675601][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.708995][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.757012][ T8460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.922642][ T2999] hsr_slave_0: left promiscuous mode [ 137.931984][ T2999] hsr_slave_1: left promiscuous mode [ 137.948819][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.965195][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.983406][ T8595] No such timeout policy "syz0" [ 138.000659][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.014672][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.023816][ T8595] No such timeout policy "syz0" [ 138.062696][ T2999] veth1_macvtap: left promiscuous mode [ 138.069693][ T2999] veth0_macvtap: left promiscuous mode [ 138.075971][ T2999] veth1_vlan: left promiscuous mode [ 138.081245][ T2999] veth0_vlan: left promiscuous mode [ 138.434945][ T5847] Bluetooth: hci4: command tx timeout [ 138.655277][ T2999] team0 (unregistering): Port device team_slave_1 removed [ 138.712242][ T2999] team0 (unregistering): Port device team_slave_0 removed [ 139.485833][ T8614] __nla_validate_parse: 3 callbacks suppressed [ 139.485860][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.749'. [ 139.506327][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.749'. [ 139.531336][ T8460] hsr_slave_0: entered promiscuous mode [ 139.549953][ T8460] hsr_slave_1: entered promiscuous mode [ 139.613064][ T8460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.631470][ T8460] Cannot create hsr debugfs directory [ 140.116998][ T8631] tipc: Can't bind to reserved service type 1 [ 140.514904][ T5847] Bluetooth: hci4: command tx timeout [ 140.853080][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 140.864740][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 140.896102][ T8650] team0 (unregistering): Port device team_slave_0 removed [ 140.923250][ T8650] team0 (unregistering): Port device team_slave_1 removed [ 140.954947][ T8460] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.972859][ T8460] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.003730][ T8460] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.013356][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 141.019130][ T8460] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.300477][ T8460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.363575][ T8460] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.437783][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.444949][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.535055][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.542210][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.687765][ T8680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.764'. [ 141.749143][ T8680] netlink: 56 bytes leftover after parsing attributes in process `syz.3.764'. [ 141.766984][ T8687] netlink: 830 bytes leftover after parsing attributes in process `syz.0.762'. [ 141.815761][ T8687] veth0_to_bond: entered promiscuous mode [ 141.844691][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.765'. [ 142.036509][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.767'. [ 142.049184][ T8694] IPv6: sit2: Disabled Multicast RS [ 142.083548][ T8460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.213136][ T8704] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.281260][ T8460] veth0_vlan: entered promiscuous mode [ 142.315870][ T8704] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.352728][ T8460] veth1_vlan: entered promiscuous mode [ 142.402692][ T8704] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.464016][ T8704] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.519820][ T8460] veth0_macvtap: entered promiscuous mode [ 142.558104][ T8460] veth1_macvtap: entered promiscuous mode [ 142.594525][ T5847] Bluetooth: hci4: command tx timeout [ 142.601382][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.627898][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.658118][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.680712][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.699518][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.759845][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.789730][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.809266][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.823095][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.843919][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.855558][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.905631][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.967483][ T8460] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.992834][ T8460] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.011918][ T8460] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.023314][ T8460] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.051894][ T8704] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.091659][ T8704] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.182805][ T8704] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.226733][ T8704] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.331759][ T8744] ip6gretap2: entered promiscuous mode [ 143.379569][ T8744] ip6gretap2: entered allmulticast mode [ 143.444959][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.469042][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.624716][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.655719][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.151391][ T8767] validate_nla: 1 callbacks suppressed [ 144.151410][ T8767] netlink: 'syz.0.783': attribute type 21 has an invalid length. [ 144.570025][ T2999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.707688][ T2999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.822318][ T2999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.869545][ T2999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.967338][ T2999] bridge_slave_1: left allmulticast mode [ 144.973037][ T2999] bridge_slave_1: left promiscuous mode [ 144.980599][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.990062][ T2999] bridge_slave_0: left allmulticast mode [ 145.004240][ T2999] bridge_slave_0: left promiscuous mode [ 145.010015][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.451024][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.471160][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.490155][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.516614][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.539829][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.555585][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.597142][ T2999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.609166][ T2999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.621056][ T2999] bond0 (unregistering): Released all slaves [ 146.497256][ T8807] chnl_net:caif_netlink_parms(): no params data found [ 146.819487][ T8847] __nla_validate_parse: 5 callbacks suppressed [ 146.819507][ T8847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.799'. [ 146.871762][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.796'. [ 146.967154][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.984581][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.991899][ T8807] bridge_slave_0: entered allmulticast mode [ 147.005935][ T8807] bridge_slave_0: entered promiscuous mode [ 147.025307][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.032482][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.041535][ T8807] bridge_slave_1: entered allmulticast mode [ 147.048440][ T8807] bridge_slave_1: entered promiscuous mode [ 147.070049][ T2999] hsr_slave_0: left promiscuous mode [ 147.080697][ T2999] hsr_slave_1: left promiscuous mode [ 147.094486][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.101965][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.120978][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.128740][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.163534][ T2999] veth1_macvtap: left promiscuous mode [ 147.169408][ T2999] veth0_macvtap: left promiscuous mode [ 147.175324][ T2999] veth1_vlan: left promiscuous mode [ 147.180594][ T2999] veth0_vlan: left promiscuous mode [ 147.599209][ T2999] team0 (unregistering): Port device team_slave_1 removed [ 147.639996][ T2999] team0 (unregistering): Port device team_slave_0 removed [ 147.644753][ T5847] Bluetooth: hci4: command tx timeout [ 148.128925][ T8807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.206014][ T8807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.358098][ T8807] team0: Port device team_slave_0 added [ 148.441521][ T8807] team0: Port device team_slave_1 added [ 148.482117][ T8863] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 148.512920][ T8863] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 148.534207][ T8863] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 148.542550][ T8863] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 148.560511][ T8863] geneve3: entered promiscuous mode [ 148.576386][ T8863] geneve3: entered allmulticast mode [ 148.723987][ T8870] netlink: 'syz.3.806': attribute type 10 has an invalid length. [ 148.732166][ T8870] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.806'. [ 148.743522][ T8870] openvswitch: netlink: Flow key attr not present in new flow. [ 148.797156][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.814845][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.895525][ T8807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.985143][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.992145][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.043821][ T8807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.159227][ T8807] hsr_slave_0: entered promiscuous mode [ 149.172916][ T8807] hsr_slave_1: entered promiscuous mode [ 149.195050][ T8807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.207046][ T8807] Cannot create hsr debugfs directory [ 149.433641][ T8890] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 149.545591][ T8892] netlink: 44 bytes leftover after parsing attributes in process `syz.2.815'. [ 149.624688][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 149.633902][ T8892] netlink: 48 bytes leftover after parsing attributes in process `syz.2.815'. [ 149.676624][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 149.685781][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.818'. [ 149.721404][ T5847] Bluetooth: hci4: command tx timeout [ 149.729269][ T8900] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.816'. [ 149.783115][ T8909] netlink: 'syz.0.817': attribute type 1 has an invalid length. [ 149.829170][ T8912] netlink: 5424 bytes leftover after parsing attributes in process `syz.4.820'. [ 150.056844][ T8914] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 150.100044][ T8914] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 150.146913][ T8902] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 150.483660][ T8935] netlink: 'syz.3.825': attribute type 3 has an invalid length. [ 150.503894][ T8937] netlink: 'syz.4.826': attribute type 2 has an invalid length. [ 150.673459][ T8807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.710172][ T8807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.780543][ T8807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.791897][ T8807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.951621][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.997463][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.030583][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.037859][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.073377][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.080644][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.201266][ T8807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.496625][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.629728][ T8979] pimreg: entered allmulticast mode [ 151.641287][ T8979] netlink: 'syz.4.838': attribute type 1 has an invalid length. [ 151.663142][ T8979] netlink: 'syz.4.838': attribute type 2 has an invalid length. [ 151.671495][ T8979] netlink: 'syz.4.838': attribute type 2 has an invalid length. [ 151.687581][ T8979] netlink: 'syz.4.838': attribute type 1 has an invalid length. [ 151.763421][ T8807] veth0_vlan: entered promiscuous mode [ 151.794694][ T5847] Bluetooth: hci4: command tx timeout [ 151.878371][ T8807] veth1_vlan: entered promiscuous mode [ 151.888414][ T8988] netlink: 'syz.4.841': attribute type 9 has an invalid length. [ 152.023070][ T8807] veth0_macvtap: entered promiscuous mode [ 152.207409][ T8807] veth1_macvtap: entered promiscuous mode [ 152.272060][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.294286][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.321805][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.332603][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.363044][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.366009][ T9010] __nla_validate_parse: 3 callbacks suppressed [ 152.366026][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 152.446650][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.490537][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.513890][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.538603][ T9021] xt_policy: output policy not valid in PREROUTING and INPUT [ 152.547492][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.559186][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.562469][ T9024] netlink: 32 bytes leftover after parsing attributes in process `syz.2.850'. [ 152.570699][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.598974][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.628748][ T8982] netlink: 'syz.0.839': attribute type 21 has an invalid length. [ 152.655344][ T8982] netlink: 128 bytes leftover after parsing attributes in process `syz.0.839'. [ 152.676545][ T8982] netlink: 3 bytes leftover after parsing attributes in process `syz.0.839'. [ 152.715380][ T8807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.739737][ T8807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.758870][ T8807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.786552][ T8807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.046291][ T9028] syz.2.852: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 153.069499][ T9028] CPU: 1 UID: 0 PID: 9028 Comm: syz.2.852 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 153.080123][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 153.080188][ T9028] Call Trace: [ 153.080196][ T9028] [ 153.080205][ T9028] dump_stack_lvl+0x241/0x360 [ 153.080236][ T9028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.080266][ T9028] ? __pfx__printk+0x10/0x10 [ 153.080297][ T9028] ? __rcu_read_unlock+0xa1/0x110 [ 153.080321][ T9028] warn_alloc+0x278/0x410 [ 153.080346][ T9028] ? __pfx_warn_alloc+0x10/0x10 [ 153.080371][ T9028] ? xskq_create+0xb6/0x170 [ 153.080395][ T9028] ? __get_vm_area_node+0x1c8/0x2d0 [ 153.080420][ T9028] ? __get_vm_area_node+0x25c/0x2d0 [ 153.080451][ T9028] __vmalloc_node_range_noprof+0x62f/0x1380 [ 153.080498][ T9028] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 153.080528][ T9028] ? __kasan_kmalloc+0x98/0xb0 [ 153.080553][ T9028] vmalloc_user_noprof+0x74/0x80 [ 153.080570][ T9028] ? xskq_create+0xb6/0x170 [ 153.080592][ T9028] xskq_create+0xb6/0x170 [ 153.080618][ T9028] xsk_init_queue+0xa1/0x100 [ 153.080643][ T9028] xsk_setsockopt+0x598/0x950 [ 153.080668][ T9028] ? __pfx_xsk_setsockopt+0x10/0x10 [ 153.080692][ T9028] ? __pfx_aa_sk_perm+0x10/0x10 [ 153.080721][ T9028] ? __pfx_lock_acquire+0x10/0x10 [ 153.080742][ T9028] ? aa_sock_opt_perm+0x79/0x120 [ 153.080766][ T9028] ? __pfx_xsk_setsockopt+0x10/0x10 [ 153.080789][ T9028] do_sock_setsockopt+0x3af/0x720 [ 153.080818][ T9028] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 153.080844][ T9028] ? __fget_files+0x395/0x410 [ 153.080867][ T9028] ? __fget_files+0x2a/0x410 [ 153.080899][ T9028] __x64_sys_setsockopt+0x1ee/0x280 [ 153.080925][ T9028] do_syscall_64+0xf3/0x230 [ 153.080946][ T9028] ? clear_bhb_loop+0x35/0x90 [ 153.193550][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.195697][ T9028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.195726][ T9028] RIP: 0033:0x7f26b3d85d29 [ 153.195744][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.195758][ T9028] RSP: 002b:00007f26b4c78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.195780][ T9028] RAX: ffffffffffffffda RBX: 00007f26b3f75fa0 RCX: 00007f26b3d85d29 [ 153.195793][ T9028] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006 [ 153.195805][ T9028] RBP: 00007f26b3e01aa8 R08: 0000000000000004 R09: 0000000000000000 [ 153.208019][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.210918][ T9028] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 153.230861][ T9028] R13: 0000000000000000 R14: 00007f26b3f75fa0 R15: 00007ffcc9d7fec8 [ 153.333294][ T9028] [ 153.337571][ T9028] Mem-Info: [ 153.352136][ T9028] active_anon:7093 inactive_anon:0 isolated_anon:0 [ 153.352136][ T9028] active_file:1527 inactive_file:38295 isolated_file:0 [ 153.352136][ T9028] unevictable:768 dirty:219 writeback:0 [ 153.352136][ T9028] slab_reclaimable:10957 slab_unreclaimable:104204 [ 153.352136][ T9028] mapped:32523 shmem:4296 pagetables:654 [ 153.352136][ T9028] sec_pagetables:0 bounce:0 [ 153.352136][ T9028] kernel_misc_reclaimable:0 [ 153.352136][ T9028] free:1326370 free_pcp:2302 free_cma:0 [ 153.399729][ T9028] Node 0 active_anon:28372kB inactive_anon:0kB active_file:6108kB inactive_file:153108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130092kB dirty:872kB writeback:0kB shmem:15648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11096kB pagetables:2516kB sec_pagetables:0kB all_unreclaimable? no [ 153.450374][ T9028] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 153.451209][ T9043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.484452][ T9028] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.525380][ T9028] lowmem_reserve[]: 0 2465 2466 0 0 [ 153.530708][ T9028] Node 0 DMA32 free:1376596kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:28336kB inactive_anon:0kB active_file:6108kB inactive_file:152284kB unevictable:1536kB writepending:868kB present:3129332kB managed:2552756kB mlocked:0kB bounce:0kB free_pcp:9740kB local_pcp:5512kB free_cma:0kB [ 153.561680][ T9028] lowmem_reserve[]: 0 0 0 0 0 [ 153.567441][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.576953][ T9042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.602488][ T9028] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 153.629815][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.660942][ T9028] lowmem_reserve[]: 0 0 0 0 0 [ 153.669821][ T9051] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 153.674192][ T9028] Node 1 Normal free:3913060kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:164kB local_pcp:0kB free_cma:0kB [ 153.707016][ T9028] lowmem_reserve[]: 0 0 0 0 0 [ 153.711793][ T9028] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 153.726934][ T9028] Node 0 DMA32: 349*4kB (UME) 197*8kB (UME) 62*16kB (UME) 83*32kB (UE) 125*64kB (UME) 251*128kB (UME) 273*256kB (UM) 147*512kB (UME) 63*1024kB (UME) 5*2048kB (UME) 272*4096kB (UM) = 1380764kB [ 153.748167][ T9028] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 153.765191][ T9028] Node 1 Normal: 191*4kB (UM) 53*8kB (UME) 36*16kB (UME) 184*32kB (UME) 80*64kB (UME) 35*128kB (UME) 12*256kB (UM) 7*512kB (UME) 4*1024kB (UME) 5*2048kB (UE) 946*4096kB (M) = 3913060kB [ 153.789704][ T9028] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 153.803161][ T9028] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 153.824255][ T9028] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 153.835143][ T9028] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 153.847524][ T9028] 43118 total pagecache pages [ 153.854616][ T9028] 0 pages in swap cache [ 153.858944][ T9028] Free swap = 124996kB [ 153.863123][ T9028] Total swap = 124996kB [ 153.868331][ T9028] 2097051 pages RAM [ 153.872303][ T9028] 0 pages HighMem/MovableOnly [ 153.882408][ T5847] Bluetooth: hci4: command tx timeout [ 153.893452][ T9028] 427012 pages reserved [ 153.898641][ T9028] 0 pages cma reserved [ 154.228379][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.470728][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.530918][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.640395][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.721449][ T11] bridge_slave_1: left allmulticast mode [ 154.729398][ T11] bridge_slave_1: left promiscuous mode [ 154.735506][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.748061][ T11] bridge_slave_0: left allmulticast mode [ 154.753737][ T11] bridge_slave_0: left promiscuous mode [ 154.760799][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.009540][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 155.034632][ T9081] validate_nla: 3 callbacks suppressed [ 155.034652][ T9081] netlink: 'syz.4.865': attribute type 30 has an invalid length. [ 155.071907][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 155.087416][ T9083] netlink: 56 bytes leftover after parsing attributes in process `syz.0.862'. [ 155.132415][ T9083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.862'. [ 155.422009][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.445694][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.455760][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.464331][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.483996][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.501292][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.610614][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.636317][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.650435][ T11] bond0 (unregistering): Released all slaves [ 155.658577][ T9098] x_tables: duplicate underflow at hook 2 [ 155.678742][ T9079] bridge0: port 4(hsr0) entered blocking state [ 155.686291][ T9079] bridge0: port 4(hsr0) entered disabled state [ 155.692785][ T9079] hsr0: entered allmulticast mode [ 155.698968][ T9079] hsr_slave_0: entered allmulticast mode [ 155.705742][ T9079] hsr_slave_1: entered allmulticast mode [ 155.716409][ T9079] hsr0: entered promiscuous mode [ 155.908622][ T9104] netlink: 76 bytes leftover after parsing attributes in process `syz.4.867'. [ 155.969946][ T9104] netlink: 56 bytes leftover after parsing attributes in process `syz.4.867'. [ 156.432207][ T11] hsr_slave_0: left promiscuous mode [ 156.464556][ T11] hsr_slave_1: left promiscuous mode [ 156.470701][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.486597][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.515202][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.522688][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.601644][ T11] veth1_macvtap: left promiscuous mode [ 156.627896][ T11] veth0_macvtap: left promiscuous mode [ 156.633643][ T11] veth1_vlan: left promiscuous mode [ 156.659558][ T11] veth0_vlan: left promiscuous mode [ 156.817848][ T1204] hid-generic 0005:7FFF:0008.0001: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 157.449788][ T11] team0 (unregistering): Port device team_slave_1 removed [ 157.501145][ T11] team0 (unregistering): Port device team_slave_0 removed [ 157.560244][ T5847] Bluetooth: hci4: command tx timeout [ 157.964959][ T9139] IPv6: sit1: Disabled Multicast RS [ 157.970993][ T9139] sit1: entered allmulticast mode [ 158.240894][ T9168] __nla_validate_parse: 4 callbacks suppressed [ 158.240913][ T9168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.888'. [ 158.252939][ T9095] chnl_net:caif_netlink_parms(): no params data found [ 158.386793][ T9170] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 158.400290][ T9170] netlink: 224 bytes leftover after parsing attributes in process `syz.2.887'. [ 158.635613][ T9189] netlink: 'syz.0.891': attribute type 2 has an invalid length. [ 158.677863][ T9189] netlink: 'syz.0.891': attribute type 4 has an invalid length. [ 158.694760][ T9095] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.702016][ T9095] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.709969][ T9095] bridge_slave_0: entered allmulticast mode [ 158.725668][ T9095] bridge_slave_0: entered promiscuous mode [ 158.749859][ T9095] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.768945][ T9095] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.794701][ T9095] bridge_slave_1: entered allmulticast mode [ 158.801816][ T9095] bridge_slave_1: entered promiscuous mode [ 158.917716][ T9095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.950935][ T9095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.020706][ T9095] team0: Port device team_slave_0 added [ 159.052815][ T9197] netlink: 'syz.0.893': attribute type 11 has an invalid length. [ 159.092890][ T9095] team0: Port device team_slave_1 added [ 159.124925][ T9199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.894'. [ 159.181394][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.894'. [ 159.182800][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.222955][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.266096][ T9095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.278824][ T9204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.318419][ T9204] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 159.345252][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.352438][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.455141][ T9095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.616074][ T9095] hsr_slave_0: entered promiscuous mode [ 159.625230][ T9095] hsr_slave_1: entered promiscuous mode [ 159.634349][ T5847] Bluetooth: hci4: command tx timeout [ 159.650412][ T9095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.666055][ T9095] Cannot create hsr debugfs directory [ 159.672602][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'. [ 160.703846][ T9095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.728231][ T9095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.777044][ T9095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.801496][ T9095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.143563][ T9095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.162848][ T9095] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.183535][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.190731][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.239115][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.246431][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.289207][ T9095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.310434][ T9095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.478201][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 161.610113][ T9292] netlink: 'syz.4.920': attribute type 10 has an invalid length. [ 161.618886][ T9292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.920'. [ 161.641261][ T9292] ipvlan1: entered promiscuous mode [ 161.674171][ T9292] ipvlan1: entered allmulticast mode [ 161.704981][ T9292] veth0_vlan: entered allmulticast mode [ 161.714469][ T5847] Bluetooth: hci4: command tx timeout [ 161.726803][ T9292] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 161.841081][ T9095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.908081][ T9300] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 161.987790][ T9095] veth0_vlan: entered promiscuous mode [ 162.009535][ T9095] veth1_vlan: entered promiscuous mode [ 162.066407][ T9095] veth0_macvtap: entered promiscuous mode [ 162.077939][ T9095] veth1_macvtap: entered promiscuous mode [ 162.122712][ T9095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.159105][ T9095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.188485][ T9095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.201027][ T9095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.219360][ T9311] sctp: [Deprecated]: syz.0.925 (pid 9311) Use of int in maxseg socket option. [ 162.219360][ T9311] Use struct sctp_assoc_value instead [ 162.246151][ T9095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.253524][ T9309] netlink: 184 bytes leftover after parsing attributes in process `syz.3.926'. [ 162.280425][ T9095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.300773][ T9095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.312225][ T9313] xt_l2tp: wrong L2TP version: 0 [ 162.312698][ T9095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.328203][ T9095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.330194][ T9313] xt_l2tp: wrong L2TP version: 0 [ 162.338050][ T9095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.338073][ T9095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.339191][ T9095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.374676][ T9313] xt_l2tp: wrong L2TP version: 0 [ 162.379767][ T9313] xt_l2tp: wrong L2TP version: 0 [ 162.386980][ T9313] xt_l2tp: wrong L2TP version: 0 [ 162.392094][ T9313] xt_l2tp: wrong L2TP version: 0 [ 162.398264][ T9313] xt_l2tp: wrong L2TP version: 0 [ 162.403365][ T9313] xt_l2tp: wrong L2TP version: 0 [ 162.413026][ T9095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.422434][ T9095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.431672][ T9095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.441063][ T9095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.457043][ T9313] xt_l2tp: wrong L2TP version: 0 [ 162.484875][ T9313] xt_l2tp: wrong L2TP version: 0 [ 162.737914][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 162.748858][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.757792][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.796293][ T9331] netlink: 'syz.3.929': attribute type 1 has an invalid length. [ 162.933569][ T9337] macvlan1: entered promiscuous mode [ 162.975726][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.014999][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.018174][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 164.038605][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.945'. [ 164.054412][ T9387] tc_dump_action: action bad kind [ 164.233884][ T3546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.406948][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.418822][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.427165][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.460153][ T3546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.472450][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.481456][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 165.489502][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.677287][ T3546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.734649][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 165.849832][ T3546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.046405][ T9419] chnl_net:caif_netlink_parms(): no params data found [ 166.094505][ T3546] bridge_slave_1: left allmulticast mode [ 166.100220][ T3546] bridge_slave_1: left promiscuous mode [ 166.113883][ T3546] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.132055][ T9459] syz.2.965: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.148505][ T3546] bridge_slave_0: left allmulticast mode [ 166.167393][ T3546] bridge_slave_0: left promiscuous mode [ 166.173195][ T3546] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.194810][ T9459] CPU: 0 UID: 0 PID: 9459 Comm: syz.2.965 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 166.205477][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 166.215560][ T9459] Call Trace: [ 166.218847][ T9459] [ 166.221777][ T9459] dump_stack_lvl+0x241/0x360 [ 166.226473][ T9459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.231704][ T9459] ? __pfx__printk+0x10/0x10 [ 166.236319][ T9459] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 166.242755][ T9459] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 166.249274][ T9459] warn_alloc+0x278/0x410 [ 166.253695][ T9459] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 166.259806][ T9459] ? __pfx_warn_alloc+0x10/0x10 [ 166.264672][ T9459] ? kasan_save_track+0x3f/0x80 [ 166.269531][ T9459] ? __kasan_kmalloc+0x98/0xb0 [ 166.274323][ T9459] ? xsk_setsockopt+0x4ea/0x950 [ 166.279190][ T9459] ? do_sock_setsockopt+0x3af/0x720 [ 166.284397][ T9459] ? __x64_sys_setsockopt+0x1ee/0x280 [ 166.289785][ T9459] ? do_syscall_64+0xf3/0x230 [ 166.294478][ T9459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.300602][ T9459] __vmalloc_node_range_noprof+0x126/0x1380 [ 166.306520][ T9459] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.312857][ T9459] ? __kasan_kmalloc+0x98/0xb0 [ 166.317648][ T9459] vmalloc_user_noprof+0x74/0x80 [ 166.322614][ T9459] ? xskq_create+0xb6/0x170 [ 166.327132][ T9459] xskq_create+0xb6/0x170 [ 166.331476][ T9459] xsk_init_queue+0xa1/0x100 [ 166.336081][ T9459] xsk_setsockopt+0x4ea/0x950 [ 166.340771][ T9459] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.345978][ T9459] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.350839][ T9459] ? aa_sock_opt_perm+0x79/0x120 [ 166.355788][ T9459] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.360992][ T9459] do_sock_setsockopt+0x3af/0x720 [ 166.366025][ T9459] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 166.371575][ T9459] ? __fget_files+0x395/0x410 [ 166.376253][ T9459] ? __fget_files+0x2a/0x410 [ 166.380854][ T9459] __x64_sys_setsockopt+0x1ee/0x280 [ 166.386235][ T9459] do_syscall_64+0xf3/0x230 [ 166.390743][ T9459] ? clear_bhb_loop+0x35/0x90 [ 166.395449][ T9459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.401347][ T9459] RIP: 0033:0x7f26b3d85d29 [ 166.405766][ T9459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.425556][ T9459] RSP: 002b:00007f26b4c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.433975][ T9459] RAX: ffffffffffffffda RBX: 00007f26b3f76080 RCX: 00007f26b3d85d29 [ 166.441951][ T9459] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 166.449940][ T9459] RBP: 00007f26b3e01aa8 R08: 0000000000000004 R09: 0000000000000000 [ 166.457916][ T9459] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.465975][ T9459] R13: 0000000000000000 R14: 00007f26b3f76080 R15: 00007ffcc9d7fec8 [ 166.473959][ T9459] [ 166.481173][ T9459] Mem-Info: [ 166.484457][ T9459] active_anon:3628 inactive_anon:0 isolated_anon:0 [ 166.484457][ T9459] active_file:1527 inactive_file:38304 isolated_file:0 [ 166.484457][ T9459] unevictable:768 dirty:191 writeback:0 [ 166.484457][ T9459] slab_reclaimable:11224 slab_unreclaimable:106264 [ 166.484457][ T9459] mapped:28555 shmem:1427 pagetables:610 [ 166.484457][ T9459] sec_pagetables:0 bounce:0 [ 166.484457][ T9459] kernel_misc_reclaimable:0 [ 166.484457][ T9459] free:1326322 free_pcp:4708 free_cma:0 [ 166.584463][ T9459] Node 0 active_anon:14412kB inactive_anon:0kB active_file:6108kB inactive_file:153144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114220kB dirty:760kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11144kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no [ 166.619779][ T9459] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 166.650756][ T9459] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.678791][ T9459] lowmem_reserve[]: 0 2465 2466 0 0 [ 166.704532][ T9459] Node 0 DMA32 free:1376644kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:14576kB inactive_anon:0kB active_file:6108kB inactive_file:152320kB unevictable:1536kB writepending:756kB present:3129332kB managed:2552756kB mlocked:0kB bounce:0kB free_pcp:18768kB local_pcp:10844kB free_cma:0kB [ 166.755521][ T9459] lowmem_reserve[]: 0 0 0 0 0 [ 166.773216][ T9459] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 166.802369][ T9459] lowmem_reserve[]: 0 0 0 0 0 [ 166.816758][ T9459] Node 1 Normal free:3913060kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:0kB free_cma:0kB [ 166.857372][ T9459] lowmem_reserve[]: 0 0 0 0 0 [ 166.862318][ T9459] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.875692][ T9459] Node 0 DMA32: 31*4kB (M) 23*8kB (ME) 2*16kB (ME) 25*32kB (UME) 72*64kB (UME) 298*128kB (UM) 272*256kB (UME) 147*512kB (UME) 62*1024kB (UM) 5*2048kB (UME) 272*4096kB (UM) = 1376628kB [ 166.894757][ T9459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 166.912535][ T9459] Node 1 Normal: 191*4kB (UM) 53*8kB (UME) 36*16kB (UME) 184*32kB (UME) 80*64kB (UME) 35*128kB (UME) 12*256kB (UM) 7*512kB (UME) 4*1024kB (UME) 5*2048kB (UE) 946*4096kB (M) = 3913060kB [ 166.932491][ T9459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.961656][ T9459] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.971397][ T9459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.981604][ T9459] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.012506][ T9459] 41258 total pagecache pages [ 167.023126][ T9459] 0 pages in swap cache [ 167.031070][ T9459] Free swap = 124996kB [ 167.036113][ T9459] Total swap = 124996kB [ 167.040491][ T9459] 2097051 pages RAM [ 167.044933][ T9459] 0 pages HighMem/MovableOnly [ 167.049721][ T9459] 427012 pages reserved [ 167.053939][ T9459] 0 pages cma reserved [ 167.089170][ T9471] netlink: 'syz.4.968': attribute type 1 has an invalid length. [ 167.241288][ T3546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.252733][ T3546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.263397][ T3546] bond0 (unregistering): Released all slaves [ 167.447295][ T9477] netlink: 31 bytes leftover after parsing attributes in process `syz.3.969'. [ 167.554318][ T5847] Bluetooth: hci4: command tx timeout [ 167.666291][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 167.693255][ T9494] netlink: 36 bytes leftover after parsing attributes in process `syz.4.972'. [ 167.779521][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.790784][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.808435][ T9419] bridge_slave_0: entered allmulticast mode [ 167.819872][ T9419] bridge_slave_0: entered promiscuous mode [ 167.878659][ T9494] vlan2: entered allmulticast mode [ 167.918943][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.947144][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.974892][ T9419] bridge_slave_1: entered allmulticast mode [ 167.985869][ T9419] bridge_slave_1: entered promiscuous mode [ 168.117044][ T9419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.276377][ T9522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.979'. [ 168.292695][ T9521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.979'. [ 168.302427][ T9522] openvswitch: netlink: ufid size 652 bytes exceeds the range (1, 16) [ 168.312887][ T9521] openvswitch: netlink: ufid size 652 bytes exceeds the range (1, 16) [ 168.330533][ T9521] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 168.359928][ T9522] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 168.577983][ T9512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.588492][ T9512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.599031][ T9512] bond0 (unregistering): Released all slaves [ 168.618650][ T9514] erspan1: entered promiscuous mode [ 168.623999][ T9514] erspan1: entered allmulticast mode [ 168.632072][ T9419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.688379][ T3546] hsr_slave_0: left promiscuous mode [ 168.704512][ T3546] hsr_slave_1: left promiscuous mode [ 168.711360][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.729372][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.738035][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.755908][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.797590][ T3546] veth1_macvtap: left promiscuous mode [ 168.803174][ T3546] veth0_macvtap: left promiscuous mode [ 168.819248][ T3546] veth1_vlan: left promiscuous mode [ 168.828953][ T3546] veth0_vlan: left promiscuous mode [ 168.950455][ T9544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.984'. [ 169.381070][ T3546] team0 (unregistering): Port device team_slave_1 removed [ 169.431586][ T3546] team0 (unregistering): Port device team_slave_0 removed [ 169.644724][ T5847] Bluetooth: hci4: command tx timeout [ 169.924578][ T9419] team0: Port device team_slave_0 added [ 169.968964][ T9419] team0: Port device team_slave_1 added [ 170.064178][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.071260][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.110690][ T9419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.127199][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.135059][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.194849][ T9419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.220285][ T9565] netlink: 48 bytes leftover after parsing attributes in process `syz.2.988'. [ 170.333629][ T9565] xt_CT: No such helper "netbios-ns" [ 170.367682][ T9575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.991'. [ 170.383580][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.991'. [ 170.392974][ T9575] netlink: 32 bytes leftover after parsing attributes in process `syz.4.991'. [ 170.405433][ T9575] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 170.513317][ T9419] hsr_slave_0: entered promiscuous mode [ 170.521469][ T9419] hsr_slave_1: entered promiscuous mode [ 170.528346][ T9419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.536273][ T9419] Cannot create hsr debugfs directory [ 170.717766][ T9584] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 170.792998][ T9597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.996'. [ 170.943986][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 171.176486][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 171.196981][ T9620] netlink: 'syz.3.1005': attribute type 10 has an invalid length. [ 171.228262][ T9617] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1003'. [ 171.295780][ T9617] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1003'. [ 171.309554][ T9419] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.324888][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 171.344749][ T9617] netlink: 'syz.4.1003': attribute type 2 has an invalid length. [ 171.357211][ T9419] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.386927][ T9419] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.429477][ T9419] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.457652][ T9628] Unsupported ieee802154 address type: 0 [ 171.656127][ T9638] hsr0: left allmulticast mode [ 171.660960][ T9638] hsr_slave_0: left allmulticast mode [ 171.704966][ T9638] hsr_slave_1: left allmulticast mode [ 171.710491][ T9638] hsr0: left promiscuous mode [ 171.716111][ T5847] Bluetooth: hci4: command tx timeout [ 171.721909][ T9638] bridge0: port 4(hsr0) entered disabled state [ 171.751956][ T9638] ip6gretap0: left allmulticast mode [ 171.760704][ T9638] ip6gretap0: left promiscuous mode [ 171.777809][ T9638] bridge0: port 3(ip6gretap0) entered disabled state [ 171.825170][ T9638] bridge_slave_1: left allmulticast mode [ 171.830874][ T9638] bridge_slave_1: left promiscuous mode [ 171.837531][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.848968][ T9638] bridge_slave_0: left allmulticast mode [ 171.861523][ T9638] bridge_slave_0: left promiscuous mode [ 171.870559][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.973778][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.012278][ T9419] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.080202][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.087425][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.100560][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.107788][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.266861][ T9663] sctp: [Deprecated]: syz.4.1013 (pid 9663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.266861][ T9663] Use struct sctp_sack_info instead [ 172.593752][ T9419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.683265][ T9419] veth0_vlan: entered promiscuous mode [ 172.736851][ T9419] veth1_vlan: entered promiscuous mode [ 172.799503][ T9419] veth0_macvtap: entered promiscuous mode [ 172.815800][ T9419] veth1_macvtap: entered promiscuous mode [ 172.846774][ T9688] FAULT_INJECTION: forcing a failure. [ 172.846774][ T9688] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 172.872373][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.892474][ T9688] CPU: 0 UID: 0 PID: 9688 Comm: syz.4.1022 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 172.903217][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 172.913306][ T9688] Call Trace: [ 172.916616][ T9688] [ 172.919565][ T9688] dump_stack_lvl+0x241/0x360 [ 172.922624][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.924259][ T9688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.924312][ T9688] ? __pfx__printk+0x10/0x10 [ 172.924340][ T9688] ? __pfx_lock_release+0x10/0x10 [ 172.924362][ T9688] ? __lock_acquire+0x1397/0x2100 [ 172.924390][ T9688] should_fail_ex+0x3b0/0x4e0 [ 172.924416][ T9688] _copy_from_user+0x2f/0xc0 [ 172.924443][ T9688] kstrtouint_from_user+0xc6/0x190 [ 172.924469][ T9688] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 172.924494][ T9688] ? __pfx_lock_acquire+0x10/0x10 [ 172.924536][ T9688] proc_fail_nth_write+0xaa/0x2d0 [ 172.924559][ T9688] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 172.924587][ T9688] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.924615][ T9688] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.924639][ T9688] vfs_write+0x2a3/0xd30 [ 172.924668][ T9688] ? __pfx_vfs_write+0x10/0x10 [ 172.924692][ T9688] ? __fget_files+0x2a/0x410 [ 172.924718][ T9688] ? __fget_files+0x395/0x410 [ 172.924740][ T9688] ? __fget_files+0x2a/0x410 [ 172.924774][ T9688] ksys_write+0x18f/0x2b0 [ 172.924794][ T9688] ? __pfx_ksys_write+0x10/0x10 [ 172.924810][ T9688] ? do_syscall_64+0x100/0x230 [ 172.924834][ T9688] ? do_syscall_64+0xb6/0x230 [ 172.924858][ T9688] do_syscall_64+0xf3/0x230 [ 172.924879][ T9688] ? clear_bhb_loop+0x35/0x90 [ 173.052202][ T9688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.058194][ T9688] RIP: 0033:0x7f521df847df [ 173.062610][ T9688] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 173.082224][ T9688] RSP: 002b:00007f521ecf9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 173.090645][ T9688] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f521df847df [ 173.098622][ T9688] RDX: 0000000000000001 RSI: 00007f521ecf90a0 RDI: 0000000000000006 [ 173.106595][ T9688] RBP: 00007f521ecf9090 R08: 0000000000000000 R09: 0000000000000000 [ 173.114573][ T9688] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 173.122548][ T9688] R13: 0000000000000000 R14: 00007f521e175fa0 R15: 00007ffd3521ff68 [ 173.130534][ T9688] [ 173.147540][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.158496][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.175783][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.207058][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.227387][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.274191][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.284765][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.294759][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.305290][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.316516][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.328685][ T9419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.337517][ T9419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.346284][ T9419] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.355680][ T9419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.430972][ T9695] veth0_vlan: entered allmulticast mode [ 173.533047][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.561659][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.631006][ T7726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.650869][ T7726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.800907][ T5847] Bluetooth: hci4: command tx timeout [ 174.683252][ T9744] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 174.872668][ T9738] xt_policy: output policy not valid in PREROUTING and INPUT [ 174.919419][ T9738] netlink: 'syz.0.1039': attribute type 21 has an invalid length. [ 174.945134][ T9738] netlink: 'syz.0.1039': attribute type 5 has an invalid length. [ 174.953179][ T9738] netlink: 'syz.0.1039': attribute type 6 has an invalid length. [ 175.522249][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.036451][ C0] bridge0: received packet on gretap1 with own address as source address (addr:f2:74:19:b2:ea:1b, vlan:0) [ 176.409091][ T9779] __nla_validate_parse: 10 callbacks suppressed [ 176.409113][ T9779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1050'. [ 176.465931][ T9777] SET target dimension over the limit! [ 176.754394][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 176.793004][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.889759][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.913947][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.945190][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.965509][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.980816][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 176.988238][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.039626][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.131248][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.292805][ T35] bridge_slave_1: left allmulticast mode [ 177.309352][ T35] bridge_slave_1: left promiscuous mode [ 177.324982][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.339678][ T35] bridge_slave_0: left allmulticast mode [ 177.367902][ T35] bridge_slave_0: left promiscuous mode [ 177.373685][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.753194][ T9832] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 177.889726][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.900930][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.914605][ T35] bond0 (unregistering): Released all slaves [ 177.933250][ T9837] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 177.937408][ T9823] sit0: entered promiscuous mode [ 177.945938][ T9823] vlan0: entered promiscuous mode [ 177.955759][ T9823] sit0: left promiscuous mode [ 178.569295][ T9801] chnl_net:caif_netlink_parms(): no params data found [ 178.688820][ T35] hsr_slave_0: left promiscuous mode [ 178.708975][ T35] hsr_slave_1: left promiscuous mode [ 178.741446][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.749505][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.770328][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.798853][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.849826][ T35] veth1_macvtap: left promiscuous mode [ 178.862915][ T35] veth0_macvtap: left promiscuous mode [ 178.878293][ T35] veth1_vlan: left promiscuous mode [ 178.907412][ T35] veth0_vlan: left promiscuous mode [ 179.074360][ T5847] Bluetooth: hci4: command tx timeout [ 179.601408][ T35] team0 (unregistering): Port device team_slave_1 removed [ 179.663069][ T35] team0 (unregistering): Port device team_slave_0 removed [ 179.730235][ T9881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1080'. [ 180.192190][ T9856] lo speed is unknown, defaulting to 1000 [ 180.227831][ T9881] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.240367][ T9881] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.249333][ T9881] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.258033][ T9881] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.293717][ T9801] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.310585][ T9801] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.322754][ T9801] bridge_slave_0: entered allmulticast mode [ 180.331663][ T9801] bridge_slave_0: entered promiscuous mode [ 180.341256][ T9801] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.349157][ T9801] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.357061][ T9801] bridge_slave_1: entered allmulticast mode [ 180.364821][ T9801] bridge_slave_1: entered promiscuous mode [ 180.372218][ T9856] lo speed is unknown, defaulting to 1000 [ 180.416746][ T9856] lo speed is unknown, defaulting to 1000 [ 180.420108][ T9801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.441414][ T9801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.614946][ T9801] team0: Port device team_slave_0 added [ 180.628625][ T9856] infiniband syz0: set active [ 180.633451][ T5848] lo speed is unknown, defaulting to 1000 [ 180.640317][ T9856] infiniband syz0: added lo [ 180.646336][ T9856] syz0: rxe_create_cq: returned err = -12 [ 180.650136][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'. [ 180.652498][ T9856] infiniband syz0: Couldn't create ib_mad CQ [ 180.669033][ T9856] infiniband syz0: Couldn't open port 1 [ 180.670758][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 180.685123][ T9801] team0: Port device team_slave_1 added [ 180.691178][ T9856] RDS/IB: syz0: added [ 180.695942][ T9856] smc: adding ib device syz0 with port count 1 [ 180.702368][ T9856] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 180.709753][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 180.710727][ T5853] lo speed is unknown, defaulting to 1000 [ 180.797537][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 180.852060][ T9897] bond0: entered promiscuous mode [ 180.862413][ T9897] bond0: entered allmulticast mode [ 180.869807][ T9897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.880416][ T9856] lo speed is unknown, defaulting to 1000 [ 180.897791][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.917652][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.957721][ T9801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.980038][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.992405][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.020545][ T9801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.032492][ T9856] lo speed is unknown, defaulting to 1000 [ 181.067442][ T9801] hsr_slave_0: entered promiscuous mode [ 181.074215][ T9801] hsr_slave_1: entered promiscuous mode [ 181.085052][ T9801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.092744][ T9801] Cannot create hsr debugfs directory [ 181.150459][ T9901] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 181.170088][ T5847] Bluetooth: hci4: command tx timeout [ 181.472284][ T9856] lo speed is unknown, defaulting to 1000 [ 181.548226][ T9913] netlink: 'syz.2.1089': attribute type 3 has an invalid length. [ 181.587690][ T9913] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1089'. [ 181.616495][ T9916] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 181.616630][ T9856] lo speed is unknown, defaulting to 1000 [ 181.781914][ T9856] lo speed is unknown, defaulting to 1000 [ 181.974740][ T9937] set match dimension is over the limit! [ 182.160742][ T9856] lo speed is unknown, defaulting to 1000 [ 182.181087][ T9801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.216845][ T9801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.243035][ T9946] sctp: [Deprecated]: syz.4.1099 (pid 9946) Use of int in max_burst socket option deprecated. [ 182.243035][ T9946] Use struct sctp_assoc_value instead [ 182.260224][ T9801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.279828][ T9801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.386419][ T9953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1100'. [ 182.513552][ T9801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.601974][ T9801] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.642903][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.650090][ T7726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.707394][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.714615][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.786230][ T9801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.796752][ T9801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.935506][ T9974] geneve3: entered promiscuous mode [ 182.940791][ T9974] geneve3: entered allmulticast mode [ 182.984890][ T9977] netlink: 'syz.2.1107': attribute type 4 has an invalid length. [ 183.047591][ T9974] netlink: 'syz.2.1107': attribute type 4 has an invalid length. [ 183.151176][ T9801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.236805][ T5847] Bluetooth: hci4: command tx timeout [ 183.276982][ T9801] veth0_vlan: entered promiscuous mode [ 183.295634][ T9801] veth1_vlan: entered promiscuous mode [ 183.329355][ T9801] veth0_macvtap: entered promiscuous mode [ 183.390363][ T9801] veth1_macvtap: entered promiscuous mode [ 183.426399][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.444586][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.455231][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.468391][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.481501][ T9801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.507490][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.519101][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.529661][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.540480][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.551064][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.564945][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.578790][ T9801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.607821][ T9801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.617776][ T9801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.642755][ T9801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.674606][ T9801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.718745][ T9999] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 183.832736][ T4912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.859184][ T4912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.941178][T10004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1113'. [ 183.947321][ T4912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.954879][T10004] tipc: Enabled bearer , priority 3 [ 183.966359][ T4912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.246077][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 184.352306][T10023] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1120'. [ 184.383316][T10023] SET target dimension over the limit! [ 184.608258][T10039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.682146][T10043] netlink: 'syz.4.1123': attribute type 3 has an invalid length. [ 184.693501][T10043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.693671][T10044] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 184.728853][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.751482][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.762547][T10044] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 184.774420][T10044] bond0: (slave vti0): Error -95 calling set_mac_address [ 184.946586][ T8] tipc: Node number set to 3270362539 [ 184.966615][T10051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1123'. [ 185.001651][T10051] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1123'. [ 185.163987][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 185.300697][T10071] netlink: 'syz.0.1130': attribute type 10 has an invalid length. [ 185.330014][ T29] audit: type=1107 audit(1734692404.927:3): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 185.356233][T10062] netlink: 'syz.0.1130': attribute type 10 has an invalid length. [ 185.459385][ T1129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.547185][T10072] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1132'. [ 185.584680][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 186.400786][ T1129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.483343][T10080] syz.3.1135[10080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.483448][T10080] syz.3.1135[10080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.510480][T10080] syz.3.1135[10080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.671087][T10083] netlink: 'syz.0.1133': attribute type 10 has an invalid length. [ 186.707489][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.717866][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.726097][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.730381][T10083] syz_tun: entered promiscuous mode [ 186.741970][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.755673][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 186.764516][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.787458][T10083] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 186.987764][ T1129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.030658][T10098] vlan2: entered promiscuous mode [ 187.039680][T10080] lo speed is unknown, defaulting to 1000 [ 187.050198][T10098] veth0_to_bridge: entered promiscuous mode [ 187.063999][T10098] vlan2: entered allmulticast mode [ 187.070627][T10098] veth0_to_bridge: entered allmulticast mode [ 187.118456][T10098] veth0_to_bridge: left allmulticast mode [ 187.124653][T10098] veth0_to_bridge: left promiscuous mode [ 187.202036][ T1129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.223794][T10088] lo speed is unknown, defaulting to 1000 [ 187.485901][ T1129] bridge_slave_1: left allmulticast mode [ 187.491720][ T1129] bridge_slave_1: left promiscuous mode [ 187.522611][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.532710][ T1129] bridge_slave_0: left allmulticast mode [ 187.540710][T10106] netlink: 'syz.3.1141': attribute type 4 has an invalid length. [ 187.557826][ T1129] bridge_slave_0: left promiscuous mode [ 187.563600][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.583363][T10107] __nla_validate_parse: 1 callbacks suppressed [ 187.583384][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 187.593249][T10108] netlink: 'syz.3.1141': attribute type 4 has an invalid length. [ 187.602593][T10107] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1142'. [ 188.000474][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.012982][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.023696][ T1129] bond0 (unregistering): Released all slaves [ 188.053595][T10086] lo speed is unknown, defaulting to 1000 [ 188.369569][T10115] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1145'. [ 188.588916][T10122] netlink: 'syz.3.1148': attribute type 21 has an invalid length. [ 188.614767][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 188.623877][T10122] netlink: 'syz.3.1148': attribute type 20 has an invalid length. [ 188.672361][T10129] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 188.740238][T10124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.829142][T10124] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.836931][ T5846] Bluetooth: hci4: command tx timeout [ 188.898309][T10124] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.108730][T10086] chnl_net:caif_netlink_parms(): no params data found [ 189.169648][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 189.228317][ T1129] hsr_slave_0: left promiscuous mode [ 189.237166][ T1129] hsr_slave_1: left promiscuous mode [ 189.243326][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.264692][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.287956][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.304621][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.363021][ T1129] veth1_macvtap: left promiscuous mode [ 189.369467][ T1129] veth0_macvtap: left promiscuous mode [ 189.377157][ T1129] veth1_vlan: left promiscuous mode [ 189.383102][ T1129] veth0_vlan: left promiscuous mode [ 189.543634][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 190.060568][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 190.103465][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 190.710775][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 190.731075][T10086] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.738845][T10086] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.746157][T10086] bridge_slave_0: entered allmulticast mode [ 190.753197][T10086] bridge_slave_0: entered promiscuous mode [ 190.762532][T10086] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.769829][T10086] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.777142][T10086] bridge_slave_1: entered allmulticast mode [ 190.784243][T10086] bridge_slave_1: entered promiscuous mode [ 190.790940][T10170] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 190.914761][ T54] Bluetooth: hci4: command tx timeout [ 190.919726][T10086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.970458][T10086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.069965][T10086] team0: Port device team_slave_0 added [ 191.087750][T10179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1157'. [ 191.106493][T10086] team0: Port device team_slave_1 added [ 191.228743][T10086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.248856][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.306953][T10086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.327988][T10170] lo speed is unknown, defaulting to 1000 [ 191.330614][T10086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.366481][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.446899][T10086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.557969][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 191.565254][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 191.615099][T10086] hsr_slave_0: entered promiscuous mode [ 191.625185][T10086] hsr_slave_1: entered promiscuous mode [ 191.648437][T10086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.664822][T10086] Cannot create hsr debugfs directory [ 191.903387][T10195] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.011179][T10195] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.091945][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1165'. [ 192.131593][T10212] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1165'. [ 192.232914][T10195] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.340605][T10195] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.443007][T10195] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.516673][T10195] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.559042][T10195] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.630779][T10195] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.922924][T10219] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 193.000778][ T5847] Bluetooth: hci4: command tx timeout [ 193.152806][T10224] netlink: 'syz.3.1168': attribute type 1 has an invalid length. [ 193.186901][T10224] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1168'. [ 193.292759][T10086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.349069][T10086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.369547][T10221] lo speed is unknown, defaulting to 1000 [ 193.379965][T10233] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.407429][T10086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.431098][T10086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.630348][T10086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.646231][T10227] rdma_rxe: rxe_newlink: failed to add lo [ 193.698810][T10233] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.736514][T10086] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.792369][T10233] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.841364][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.848586][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.867489][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.874787][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.917200][T10233] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.940187][T10243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1173'. [ 194.151703][T10233] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.185846][T10247] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 194.249835][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'. [ 194.259678][T10249] nbd: couldn't find device at index 0 [ 194.286954][T10233] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.382346][T10233] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.421420][T10233] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.469203][T10086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.593046][T10086] veth0_vlan: entered promiscuous mode [ 194.657466][T10086] veth1_vlan: entered promiscuous mode [ 194.709274][T10267] netlink: 'syz.2.1179': attribute type 8 has an invalid length. [ 194.747368][T10267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.860265][T10086] veth0_macvtap: entered promiscuous mode [ 194.903412][T10086] veth1_macvtap: entered promiscuous mode [ 194.966739][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.992023][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.013846][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.028937][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.040367][T10086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.061709][T10283] netlink: 'syz.0.1183': attribute type 1 has an invalid length. [ 195.074655][ T5847] Bluetooth: hci4: command tx timeout [ 195.085406][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.096251][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.106347][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.118226][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.128340][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.139339][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.150752][T10086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.261375][T10289] bond4 (unregistering): Released all slaves [ 195.339326][T10304] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1187'. [ 195.392062][T10284] lo speed is unknown, defaulting to 1000 [ 195.392877][T10086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.408933][T10086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.418498][T10086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.427836][T10086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.460263][T10304] netlink: 'syz.4.1187': attribute type 1 has an invalid length. [ 195.754736][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.786001][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.795697][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.820075][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.445893][T10333] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1198'. [ 196.522436][T10339] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1200'. [ 196.705593][T10349] GUP no longer grows the stack in syz.3.1206 (10349): 20006000-2000a000 (20005000) [ 196.715875][T10349] CPU: 0 UID: 0 PID: 10349 Comm: syz.3.1206 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 196.726735][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 196.736919][T10349] Call Trace: [ 196.740223][T10349] [ 196.743180][T10349] dump_stack_lvl+0x241/0x360 [ 196.747928][T10349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.753208][T10349] ? __pfx__printk+0x10/0x10 [ 196.757829][T10349] ? find_vma+0xf9/0x170 [ 196.762096][T10349] ? vma_is_secretmem+0xd/0x50 [ 196.766867][T10349] ? check_vma_flags+0x52b/0x5a0 [ 196.771816][T10349] __get_user_pages+0x4385/0x49e0 [ 196.776875][T10349] ? 0xffffffffa00007d4 [ 196.781130][T10349] ? __pfx___get_user_pages+0x10/0x10 [ 196.786529][T10349] __gup_longterm_locked+0x49a/0x17f0 [ 196.791913][T10349] ? __pfx___might_resched+0x10/0x10 [ 196.797216][T10349] ? __pfx___gup_longterm_locked+0x10/0x10 [ 196.803029][T10349] ? down_read+0x82b/0xa40 [ 196.807463][T10349] ? is_valid_gup_args+0x124/0x200 [ 196.812582][T10349] pin_user_pages+0x137/0x1f0 [ 196.817276][T10349] ? __pfx_pin_user_pages+0x10/0x10 [ 196.822470][T10349] ? trace_kmalloc+0x1f/0xd0 [ 196.827070][T10349] xdp_umem_create+0x978/0xf30 [ 196.831859][T10349] xsk_setsockopt+0x732/0x950 [ 196.836553][T10349] ? __pfx_xsk_setsockopt+0x10/0x10 [ 196.841758][T10349] ? __pfx_lock_acquire+0x10/0x10 [ 196.846782][T10349] ? aa_sock_opt_perm+0x79/0x120 [ 196.851990][T10349] ? __pfx_xsk_setsockopt+0x10/0x10 [ 196.857203][T10349] do_sock_setsockopt+0x3af/0x720 [ 196.862243][T10349] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 196.867890][T10349] ? __fget_files+0x395/0x410 [ 196.872573][T10349] ? __fget_files+0x2a/0x410 [ 196.877176][T10349] __x64_sys_setsockopt+0x1ee/0x280 [ 196.882386][T10349] do_syscall_64+0xf3/0x230 [ 196.886896][T10349] ? clear_bhb_loop+0x35/0x90 [ 196.891573][T10349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.897467][T10349] RIP: 0033:0x7fe6ead85d29 [ 196.901929][T10349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.921555][T10349] RSP: 002b:00007fe6ebb17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 196.929984][T10349] RAX: ffffffffffffffda RBX: 00007fe6eaf75fa0 RCX: 00007fe6ead85d29 [ 196.937964][T10349] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000008 [ 196.945945][T10349] RBP: 00007fe6eae01aa8 R08: 0000000000000020 R09: 0000000000000000 [ 196.953917][T10349] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 196.961893][T10349] R13: 0000000000000000 R14: 00007fe6eaf75fa0 R15: 00007ffee6d0a838 [ 196.969893][T10349] [ 196.997094][T10348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.016024][T10348] batadv_slave_0: entered promiscuous mode [ 197.029907][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 197.052750][T10348] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 197.303725][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 197.529294][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.549694][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 197.585663][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 197.965796][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.026740][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.091724][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.178720][ T12] bridge_slave_1: left allmulticast mode [ 198.186409][ T12] bridge_slave_1: left promiscuous mode [ 198.192093][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.200706][ T12] bridge_slave_0: left allmulticast mode [ 198.206756][ T12] bridge_slave_0: left promiscuous mode [ 198.212440][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.570670][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.582599][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.593361][ T12] bond0 (unregistering): Released all slaves [ 198.846062][T10408] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 198.880692][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 199.234861][T10424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1218'. [ 199.275373][T10424] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1218'. [ 199.408951][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.424198][T10428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1220'. [ 199.449237][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.462517][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.484652][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.509781][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 199.539601][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.576741][T10441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.679932][T10446] netlink: 'syz.2.1221': attribute type 10 has an invalid length. [ 199.822209][T10433] team0 (unregistering): left allmulticast mode [ 199.831482][T10433] team_slave_0: left allmulticast mode [ 199.843065][T10433] team_slave_1: left allmulticast mode [ 199.851286][T10433] team0 (unregistering): left promiscuous mode [ 199.863713][T10433] team_slave_0: left promiscuous mode [ 199.872365][T10433] team_slave_1: left promiscuous mode [ 199.885473][T10433] bridge0: port 3(team0) entered disabled state [ 199.919354][T10433] team0 (unregistering): Port device team_slave_0 removed [ 199.934690][T10433] team0 (unregistering): Port device team_slave_1 removed [ 200.043505][ T12] hsr_slave_0: left promiscuous mode [ 200.057354][ T12] hsr_slave_1: left promiscuous mode [ 200.067398][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.084466][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.097926][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.106463][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.142392][ T12] veth1_macvtap: left promiscuous mode [ 200.153285][ T12] veth0_macvtap: left promiscuous mode [ 200.163240][ T12] veth1_vlan: left promiscuous mode [ 200.174777][ T12] veth0_vlan: left promiscuous mode [ 200.280250][T10432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.755861][ T12] team0 (unregistering): Port device team_slave_1 removed [ 200.802126][ T12] team0 (unregistering): Port device team_slave_0 removed [ 201.273638][T10449] bridge_slave_0: default FDB implementation only supports local addresses [ 201.352439][T10454] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1228'. [ 201.366141][T10454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.570491][T10430] lo speed is unknown, defaulting to 1000 [ 201.639397][ T5847] Bluetooth: hci4: command tx timeout [ 201.816898][T10468] ip6erspan0: entered allmulticast mode [ 202.061349][T10477] lo speed is unknown, defaulting to 1000 [ 202.109658][T10430] chnl_net:caif_netlink_parms(): no params data found [ 202.211673][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 202.287058][T10496] Unsupported ieee802154 address type: 0 [ 202.359405][T10430] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.390279][T10430] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.424456][T10430] bridge_slave_0: entered allmulticast mode [ 202.431576][T10430] bridge_slave_0: entered promiscuous mode [ 202.443938][T10430] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.451510][T10430] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.465564][T10430] bridge_slave_1: entered allmulticast mode [ 202.481550][T10430] bridge_slave_1: entered promiscuous mode [ 202.587445][T10430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.620174][T10430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.796318][T10430] team0: Port device team_slave_0 added [ 202.844234][T10430] team0: Port device team_slave_1 added [ 203.008929][T10430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.024987][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.055902][T10430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.094839][T10430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.101993][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.151793][T10430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.241594][T10528] netdevsim netdevsim3 eth0: set [1, 3] type 2 family 0 port 6081 - 0 [ 203.260492][T10528] netdevsim netdevsim3 eth1: set [1, 3] type 2 family 0 port 6081 - 0 [ 203.272771][T10528] netdevsim netdevsim3 eth2: set [1, 3] type 2 family 0 port 6081 - 0 [ 203.285217][T10528] netdevsim netdevsim3 eth3: set [1, 3] type 2 family 0 port 6081 - 0 [ 203.506184][T10548] xt_l2tp: unknown flags: 10 [ 203.553717][T10430] hsr_slave_0: entered promiscuous mode [ 203.604385][T10430] hsr_slave_1: entered promiscuous mode [ 203.627688][T10430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.657563][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'. [ 203.661751][T10430] Cannot create hsr debugfs directory [ 203.715247][ T5847] Bluetooth: hci4: command tx timeout [ 204.047659][T10568] syzkaller0: entered promiscuous mode [ 204.053205][T10568] syzkaller0: entered allmulticast mode [ 204.083131][T10566] batadv1: entered promiscuous mode [ 204.125064][T10568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1258'. [ 204.773817][T10585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1260'. [ 204.783574][T10585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1260'. [ 204.793474][T10585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1260'. [ 204.812053][T10585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1260'. [ 205.794847][ T5847] Bluetooth: hci4: command tx timeout [ 206.697054][T10430] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.733540][T10430] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.769281][T10430] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.831786][T10430] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.055715][T10612] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1269'. [ 207.077332][T10430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.143155][T10430] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.213331][ T9630] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.220629][ T9630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.296685][T10618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 207.306141][ T9630] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.314240][ T9630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.877390][ T5847] Bluetooth: hci4: command tx timeout [ 207.895060][T10430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.925367][T10611] netlink: 'syz.2.1268': attribute type 5 has an invalid length. [ 208.067790][T10430] veth0_vlan: entered promiscuous mode [ 208.086816][T10651] Cannot find del_set index 3 as target [ 208.125129][T10651] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1277'. [ 208.136878][T10430] veth1_vlan: entered promiscuous mode [ 208.159345][T10654] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 208.188796][T10654] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1278'. [ 208.231532][T10430] veth0_macvtap: entered promiscuous mode [ 208.264017][T10430] veth1_macvtap: entered promiscuous mode [ 208.311369][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.351410][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.367422][T10430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.416949][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.427918][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.440549][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.444996][T10665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1280'. [ 208.451915][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.471135][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.485199][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.497754][T10430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.547912][T10430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.558671][T10430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.568039][T10430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.578090][T10430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.817522][ T7726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.840539][ T7726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.860809][T10675] ebt_among: dst integrity fail: 101 [ 208.881131][T10675] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 208.892314][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.911472][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.104762][T10661] delete_channel: no stack [ 209.456414][T10701] netlink: 'syz.4.1290': attribute type 10 has an invalid length. [ 209.518036][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 209.549373][T10701] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 210.160789][T10739] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.181060][T10739] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.231684][T10739] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.241902][T10739] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.320921][T10739] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.348538][T10739] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.421376][T10739] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.434308][T10739] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.507473][T10739] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.534637][T10739] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.599802][T10739] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.620162][T10739] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.718896][ T9630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.757420][T10739] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.784828][T10739] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.828980][T10739] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.839372][T10739] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.169028][ T9630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.260538][ T9630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.319752][ T9630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.415672][ T9630] bridge_slave_1: left allmulticast mode [ 211.421384][ T9630] bridge_slave_1: left promiscuous mode [ 211.427847][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.467311][ T9630] bridge_slave_0: left allmulticast mode [ 211.473779][ T9630] bridge_slave_0: left promiscuous mode [ 211.479847][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.083249][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.106789][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.119528][ T9630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.134787][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.149913][ T9630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.158896][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.170144][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.170969][ T9630] bond0 (unregistering): Released all slaves [ 212.193614][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.200727][T10753] netlink: 3846 bytes leftover after parsing attributes in process `syz.0.1308'. [ 212.534741][T10761] lo speed is unknown, defaulting to 1000 [ 212.652719][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 212.836268][T10781] netlink: 'syz.3.1319': attribute type 2 has an invalid length. [ 212.846507][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'. [ 213.218251][ T9630] hsr_slave_0: left promiscuous mode [ 213.225698][ T9630] hsr_slave_1: left promiscuous mode [ 213.246288][ T9630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.263449][ T9630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.285823][ T9630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.320349][ T9630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.401615][ T9630] veth1_macvtap: left promiscuous mode [ 213.408244][ T9630] veth0_macvtap: left promiscuous mode [ 213.413960][ T9630] veth1_vlan: left promiscuous mode [ 213.431723][ T9630] veth0_vlan: left promiscuous mode [ 213.977232][ T9630] team0 (unregistering): Port device team_slave_1 removed [ 214.030946][ T9630] team0 (unregistering): Port device team_slave_0 removed [ 214.358070][ T5847] Bluetooth: hci4: command tx timeout [ 214.623166][T10761] chnl_net:caif_netlink_parms(): no params data found [ 214.696089][T10830] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1328'. [ 214.753329][T10830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1328'. [ 214.763764][T10830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1328'. [ 214.774701][T10830] netlink: 'syz.2.1328': attribute type 6 has an invalid length. [ 214.846820][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'. [ 214.939503][T10761] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.948012][T10761] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.967396][T10761] bridge_slave_0: entered allmulticast mode [ 214.985512][T10761] bridge_slave_0: entered promiscuous mode [ 215.010396][T10761] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.028254][T10761] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.036661][T10761] bridge_slave_1: entered allmulticast mode [ 215.043524][T10761] bridge_slave_1: entered promiscuous mode [ 215.131653][T10761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.194909][T10761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.221446][T10849] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.300149][T10761] team0: Port device team_slave_0 added [ 215.312648][T10849] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.349027][T10761] team0: Port device team_slave_1 added [ 215.392879][T10849] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.471836][T10856] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1337'. [ 215.486767][T10761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.493776][T10761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.545111][T10761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.562624][T10849] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.602600][T10761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.628257][T10761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.675835][T10761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.747044][T10864] gtp1: entered promiscuous mode [ 215.758627][T10849] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.776667][T10849] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.801875][T10849] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.845890][T10849] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.997975][T10761] hsr_slave_0: entered promiscuous mode [ 216.026674][T10868] netlink: 'syz.2.1341': attribute type 4 has an invalid length. [ 216.036991][T10761] hsr_slave_1: entered promiscuous mode [ 216.050630][T10761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.069235][T10761] Cannot create hsr debugfs directory [ 216.090081][T10859] lo speed is unknown, defaulting to 1000 [ 216.428281][T10874] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.439986][ T5847] Bluetooth: hci4: command tx timeout [ 216.517089][T10878] syzkaller0: entered promiscuous mode [ 216.522742][T10878] syzkaller0: entered allmulticast mode [ 216.549509][T10874] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.669857][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 216.706962][T10874] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.823818][ T12] smc: removing ib device syz2 [ 217.003187][T10874] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.026006][T10893] xt_bpf: check failed: parse error [ 217.031375][T10893] xt_bpf: check failed: parse error [ 217.039660][T10893] xt_bpf: check failed: parse error [ 217.045786][T10893] xt_bpf: check failed: parse error [ 217.051201][T10893] xt_bpf: check failed: parse error [ 217.058184][T10893] xt_bpf: check failed: parse error [ 217.063636][T10893] xt_bpf: check failed: parse error [ 218.514946][ T5847] Bluetooth: hci4: command tx timeout [ 219.077172][ T5848] ================================================================== [ 219.085282][ T5848] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 219.094066][ T5848] Read of size 8 at addr ffff88805c7902e8 by task kworker/1:3/5848 [ 219.101958][ T5848] [ 219.104278][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: kworker/1:3 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 219.115069][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 219.125123][ T5848] Workqueue: events smc_ib_port_event_work [ 219.130926][ T5848] Call Trace: [ 219.134200][ T5848] [ 219.137139][ T5848] dump_stack_lvl+0x241/0x360 [ 219.141859][ T5848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.147069][ T5848] ? __pfx__printk+0x10/0x10 [ 219.151658][ T5848] ? _printk+0xd5/0x120 [ 219.155805][ T5848] ? __virt_addr_valid+0x183/0x530 [ 219.160899][ T5848] ? __virt_addr_valid+0x183/0x530 [ 219.165997][ T5848] print_report+0x169/0x550 [ 219.170513][ T5848] ? __virt_addr_valid+0x183/0x530 [ 219.175642][ T5848] ? __virt_addr_valid+0x183/0x530 [ 219.180746][ T5848] ? __virt_addr_valid+0x45f/0x530 [ 219.185857][ T5848] ? __phys_addr+0xba/0x170 [ 219.190376][ T5848] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 219.196366][ T5848] kasan_report+0x143/0x180 [ 219.200856][ T5848] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 219.206823][ T5848] __ethtool_get_link_ksettings+0x6e/0x190 [ 219.212621][ T5848] ib_get_eth_speed+0x160/0x800 [ 219.217485][ T5848] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 219.222845][ T5848] ? rxe_query_port+0x4f/0x260 [ 219.227600][ T5848] rxe_query_port+0x76/0x260 [ 219.232282][ T5848] ib_query_port+0x166/0x7d0 [ 219.236896][ T5848] smc_ib_port_event_work+0x14e/0xa50 [ 219.242312][ T5848] ? process_scheduled_works+0x976/0x1840 [ 219.248069][ T5848] process_scheduled_works+0xa66/0x1840 [ 219.253623][ T5848] ? __pfx_process_scheduled_works+0x10/0x10 [ 219.259598][ T5848] ? assign_work+0x364/0x3d0 [ 219.264178][ T5848] worker_thread+0x870/0xd30 [ 219.268850][ T5848] ? __kthread_parkme+0x169/0x1d0 [ 219.273863][ T5848] ? __pfx_worker_thread+0x10/0x10 [ 219.279072][ T5848] kthread+0x2f0/0x390 [ 219.283175][ T5848] ? __pfx_worker_thread+0x10/0x10 [ 219.288285][ T5848] ? __pfx_kthread+0x10/0x10 [ 219.292982][ T5848] ret_from_fork+0x4b/0x80 [ 219.297402][ T5848] ? __pfx_kthread+0x10/0x10 [ 219.301979][ T5848] ret_from_fork_asm+0x1a/0x30 [ 219.306746][ T5848] [ 219.309758][ T5848] [ 219.312073][ T5848] Allocated by task 5840: [ 219.316385][ T5848] kasan_save_track+0x3f/0x80 [ 219.321066][ T5848] __kasan_kmalloc+0x98/0xb0 [ 219.325731][ T5848] __kmalloc_node_noprof+0x290/0x4d0 [ 219.331010][ T5848] __kvmalloc_node_noprof+0x72/0x190 [ 219.336818][ T5848] alloc_netdev_mqs+0xa4/0x1080 [ 219.341688][ T5848] rtnl_create_link+0x2f9/0xc20 [ 219.346541][ T5848] rtnl_newlink_create+0x210/0xa40 [ 219.351648][ T5848] rtnl_newlink+0x1c7e/0x2210 [ 219.356328][ T5848] rtnetlink_rcv_msg+0x791/0xcf0 [ 219.361358][ T5848] netlink_rcv_skb+0x1e3/0x430 [ 219.366112][ T5848] netlink_unicast+0x7f6/0x990 [ 219.370863][ T5848] netlink_sendmsg+0x8e4/0xcb0 [ 219.375631][ T5848] __sock_sendmsg+0x221/0x270 [ 219.380303][ T5848] __sys_sendto+0x363/0x4c0 [ 219.384812][ T5848] __x64_sys_sendto+0xde/0x100 [ 219.389597][ T5848] do_syscall_64+0xf3/0x230 [ 219.394106][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.399992][ T5848] [ 219.402304][ T5848] Freed by task 10880: [ 219.406370][ T5848] kasan_save_track+0x3f/0x80 [ 219.411033][ T5848] kasan_save_free_info+0x40/0x50 [ 219.416223][ T5848] __kasan_slab_free+0x59/0x70 [ 219.420975][ T5848] kfree+0x196/0x430 [ 219.424858][ T5848] device_release+0x99/0x1c0 [ 219.429439][ T5848] kobject_put+0x22f/0x480 [ 219.433932][ T5848] netdev_run_todo+0xe79/0x1000 [ 219.438780][ T5848] rtnl_dellink+0x760/0x8d0 [ 219.443299][ T5848] rtnetlink_rcv_msg+0x791/0xcf0 [ 219.448266][ T5848] netlink_rcv_skb+0x1e3/0x430 [ 219.453035][ T5848] netlink_unicast+0x7f6/0x990 [ 219.457792][ T5848] netlink_sendmsg+0x8e4/0xcb0 [ 219.462549][ T5848] __sock_sendmsg+0x221/0x270 [ 219.467232][ T5848] ____sys_sendmsg+0x52a/0x7e0 [ 219.471988][ T5848] __sys_sendmsg+0x269/0x350 [ 219.476572][ T5848] do_syscall_64+0xf3/0x230 [ 219.481068][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.486964][ T5848] [ 219.489295][ T5848] The buggy address belongs to the object at ffff88805c790000 [ 219.489295][ T5848] which belongs to the cache kmalloc-cg-4k of size 4096 [ 219.503624][ T5848] The buggy address is located 744 bytes inside of [ 219.503624][ T5848] freed 4096-byte region [ffff88805c790000, ffff88805c791000) [ 219.517788][ T5848] [ 219.520149][ T5848] The buggy address belongs to the physical page: [ 219.526578][ T5848] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c790 [ 219.535351][ T5848] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 219.543853][ T5848] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 219.551382][ T5848] page_type: f5(slab) [ 219.555347][ T5848] raw: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 219.564047][ T5848] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 219.572622][ T5848] head: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 219.581319][ T5848] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 219.589993][ T5848] head: 00fff00000000003 ffffea000171e401 ffffffffffffffff 0000000000000000 [ 219.598668][ T5848] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 219.607334][ T5848] page dumped because: kasan: bad access detected [ 219.613739][ T5848] page_owner tracks the page as allocated [ 219.619549][ T5848] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5840, tgid 5840 (syz-executor), ts 67692772555, free_ts 17986533106 [ 219.642644][ T5848] post_alloc_hook+0x1f3/0x230 [ 219.647430][ T5848] get_page_from_freelist+0x365c/0x37a0 [ 219.652969][ T5848] __alloc_pages_noprof+0x292/0x710 [ 219.658156][ T5848] alloc_pages_mpol_noprof+0x3e8/0x680 [ 219.663613][ T5848] alloc_slab_page+0x6a/0x110 [ 219.668284][ T5848] allocate_slab+0x5a/0x2b0 [ 219.672768][ T5848] ___slab_alloc+0xc27/0x14a0 [ 219.677458][ T5848] __slab_alloc+0x58/0xa0 [ 219.681774][ T5848] __kmalloc_node_noprof+0x2ee/0x4d0 [ 219.687073][ T5848] __kvmalloc_node_noprof+0x72/0x190 [ 219.692378][ T5848] alloc_netdev_mqs+0xa4/0x1080 [ 219.697239][ T5848] rtnl_create_link+0x2f9/0xc20 [ 219.702089][ T5848] rtnl_newlink_create+0x210/0xa40 [ 219.707192][ T5848] rtnl_newlink+0x1c7e/0x2210 [ 219.711860][ T5848] rtnetlink_rcv_msg+0x791/0xcf0 [ 219.716813][ T5848] netlink_rcv_skb+0x1e3/0x430 [ 219.721563][ T5848] page last free pid 1 tgid 1 stack trace: [ 219.727357][ T5848] free_unref_page+0xd3f/0x1010 [ 219.732203][ T5848] free_contig_range+0x14c/0x430 [ 219.737145][ T5848] destroy_args+0x92/0x910 [ 219.741574][ T5848] debug_vm_pgtable+0x4be/0x550 [ 219.746431][ T5848] do_one_initcall+0x248/0x870 [ 219.751182][ T5848] do_initcall_level+0x157/0x210 [ 219.756111][ T5848] do_initcalls+0x3f/0x80 [ 219.760423][ T5848] kernel_init_freeable+0x435/0x5d0 [ 219.765600][ T5848] kernel_init+0x1d/0x2b0 [ 219.769920][ T5848] ret_from_fork+0x4b/0x80 [ 219.774335][ T5848] ret_from_fork_asm+0x1a/0x30 [ 219.779084][ T5848] [ 219.781389][ T5848] Memory state around the buggy address: [ 219.787012][ T5848] ffff88805c790180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.795070][ T5848] ffff88805c790200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.803118][ T5848] >ffff88805c790280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.811164][ T5848] ^ [ 219.818603][ T5848] ffff88805c790300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.826647][ T5848] ffff88805c790380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.834795][ T5848] ================================================================== [ 219.846339][ T5848] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 219.853678][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: kworker/1:3 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 219.864479][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 219.874527][ T5848] Workqueue: events smc_ib_port_event_work [ 219.880327][ T5848] Call Trace: [ 219.883594][ T5848] [ 219.886513][ T5848] dump_stack_lvl+0x241/0x360 [ 219.891179][ T5848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.896403][ T5848] ? __pfx__printk+0x10/0x10 [ 219.900979][ T5848] ? preempt_schedule+0xe1/0xf0 [ 219.905830][ T5848] ? vscnprintf+0x5d/0x90 [ 219.910172][ T5848] panic+0x349/0x880 [ 219.914089][ T5848] ? check_panic_on_warn+0x21/0xb0 [ 219.919188][ T5848] ? __pfx_panic+0x10/0x10 [ 219.923603][ T5848] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 219.929694][ T5848] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 219.936033][ T5848] ? print_report+0x502/0x550 [ 219.940706][ T5848] check_panic_on_warn+0x86/0xb0 [ 219.945636][ T5848] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 219.951694][ T5848] end_report+0x77/0x160 [ 219.955976][ T5848] kasan_report+0x154/0x180 [ 219.960499][ T5848] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 219.966488][ T5848] __ethtool_get_link_ksettings+0x6e/0x190 [ 219.972296][ T5848] ib_get_eth_speed+0x160/0x800 [ 219.977149][ T5848] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 219.982526][ T5848] ? rxe_query_port+0x4f/0x260 [ 219.987287][ T5848] rxe_query_port+0x76/0x260 [ 219.991898][ T5848] ib_query_port+0x166/0x7d0 [ 219.996510][ T5848] smc_ib_port_event_work+0x14e/0xa50 [ 220.001899][ T5848] ? process_scheduled_works+0x976/0x1840 [ 220.007648][ T5848] process_scheduled_works+0xa66/0x1840 [ 220.013239][ T5848] ? __pfx_process_scheduled_works+0x10/0x10 [ 220.019219][ T5848] ? assign_work+0x364/0x3d0 [ 220.023804][ T5848] worker_thread+0x870/0xd30 [ 220.028398][ T5848] ? __kthread_parkme+0x169/0x1d0 [ 220.033417][ T5848] ? __pfx_worker_thread+0x10/0x10 [ 220.038525][ T5848] kthread+0x2f0/0x390 [ 220.042587][ T5848] ? __pfx_worker_thread+0x10/0x10 [ 220.047718][ T5848] ? __pfx_kthread+0x10/0x10 [ 220.052305][ T5848] ret_from_fork+0x4b/0x80 [ 220.056804][ T5848] ? __pfx_kthread+0x10/0x10 [ 220.061395][ T5848] ret_from_fork_asm+0x1a/0x30 [ 220.066157][ T5848] [ 220.069537][ T5848] Kernel Offset: disabled [ 220.073858][ T5848] Rebooting in 86400 seconds..