last executing test programs: 2m29.234434433s ago: executing program 1 (id=1004): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) unshare(0x40020000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000031995810cb8a89dba8b7eb99222a316ae0f1337e5d913b0bb7a446ab14c43463878f2a6539dc93a951b414d2a777344d731ea85f67a21a06d8d8f2293e27699d8c5a80477297962a78bf9dae21a728fe13de72115bb864482c0668478e872181477a2347d1af13c9da76e108a1fd1d3c94b5022d76", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r2, 0x0, 0x2}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/21], 0x50) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000240)={@initdev, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) (async) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff1}, 0xe) (async) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff1}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$tipc(0x1e, 0x5, 0x0) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x8a, &(0x7f0000000000)={0x40000042}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x8a, &(0x7f0000000000)={0x40000042}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000000c0)={r6, r6, 0x206, 0x0, 0x0, 0x2, 0x84, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000000c0)={r6, r6, 0x206, 0x0, 0x0, 0x2, 0x84, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) socket$kcm(0x2, 0x1, 0x84) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2m28.200182518s ago: executing program 1 (id=1011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000780)="2cb6e2584c90c200"/24, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0xffffff70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000900)}, 0x4}, {{&(0x7f0000000140)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000001940)=""/218, 0xda}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000240)=""/47, 0x26}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000600)=""/145, 0x91}, {&(0x7f0000000340)=""/82, 0x52}, {&(0x7f0000000700)=""/82, 0x52}], 0x9}, 0x40}], 0x4000011, 0x2000, 0x0) 2m24.570024108s ago: executing program 4 (id=1049): unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000300000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={0x0, 0xa59}, 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x38, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb8}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd90}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x1, 0x1, 0x1, 0x8, 0x6, 0xc, 0xfffffffffffffff4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x1e00, 0x13, '\x00', 0x0, @fallback=0x4, r3, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x1, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[r3, r0, r0, r3, r0, r3, r0], &(0x7f00000004c0)=[{0x2, 0x5, 0xc, 0x7}, {0x3, 0x1, 0xb, 0x1}], 0x10, 0x2, @void, @value}, 0x94) r5 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r6, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)=0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r10, 0x0, 0x485, 0x0, 0x0) close(0x3) 2m22.220098458s ago: executing program 1 (id=1065): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'gre0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x9}}) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f0000000200)=0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {0x5}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r5, 0x10e, 0xc, 0x0, &(0x7f0000000a00)=0x56) socketpair(0x1e, 0x2, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$pptp(r7, &(0x7f0000000100)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000160a010000000000000000000100000a0900010073797a30000000000900020073797a3000000000380000001a0a0108000b000000000000010000000900020073797a3000000000090001"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m22.02278385s ago: executing program 1 (id=1069): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0x2900], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x29}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5, 0x0, 0x78}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) 2m21.977387038s ago: executing program 4 (id=1070): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000003c7433b08c2d1393d000000079020000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) (async) recvmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2) (async) sendmsg$tipc(r2, &(0x7f0000002640)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, &(0x7f0000002500)=[{&(0x7f00000001c0)='yg', 0x2}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001200)=""/2, 0x2}], 0x1, &(0x7f00000046c0)=""/244, 0xf4}, 0x0) 2m21.823609087s ago: executing program 3 (id=1072): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x20000040}, 0x20050800) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x20000040}, 0x20050800) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) socket$nl_netfilter(0x10, 0x3, 0xc) 2m21.682663004s ago: executing program 4 (id=1073): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000100)=""/103, 0x67}], 0x1) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80800) 2m21.505347311s ago: executing program 3 (id=1076): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000780)="2cb6e2584c90c200"/24, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) 2m21.442302825s ago: executing program 4 (id=1077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x201}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x9, 0x9, 0x0, 0x7fffffff, 0xa7, 0x3ff, 0xc8, 0x1}, &(0x7f0000000280)=0x20) 2m21.318889222s ago: executing program 3 (id=1080): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xa, 0xfff, 0x7cef, 0x20000000, 0xfffffffe}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000004c0)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x70d300, 0x0) pipe(&(0x7f00000010c0)={0xffffffffffffffff}) syz_emit_ethernet(0x7a, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0961d3", 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) splice(r6, 0x0, r5, 0x0, 0x7fffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m21.284450614s ago: executing program 1 (id=1081): socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_audit(0x10, 0x3, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9641, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = gettid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x20000081) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000240)={r0, 0x7, 0x5, 0xd968}) write$cgroup_pid(r2, &(0x7f0000000380)=r3, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\t\x00'], 0x5) unshare(0x20000400) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r6}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2m21.281949751s ago: executing program 2 (id=1082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2a4, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3be}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x32a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "dbe85dc10212c6fb3afb5b6f99a6750ee23bbfd51cce0b3438ce559a001078"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "20de6a310257dded9c6167f34d076ec958a5b6510c"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b9b40d2676961a187e582342a66c1d7db62485d6f321d9182f66bb4b2b25b509"}}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x766}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "47e3eebfb6c1b2204f95dcd241b31cc72fd54a681447386190e2f4400b1a752b"}}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9244}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf44}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000540)={0x598, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xe8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x247e}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa07}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6e01}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x21e}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfff, @remote, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x38}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x791f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @mcast1, 0xe}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7fff, @mcast1, 0x5ca}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffc, @local, 0x3}}}}]}, @TIPC_NLA_NODE={0x22c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "654a53e6ffb001a61a963c628afb91000285fd37d4395eaa54e46eb86475da"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x28}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1d76}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "56df8a7da0a99ff46e2c4100641fff4e6cbe50662c7dcc0c83179a2296c878b78989680015320938561918f7251f91a5f0b89929da7b8b88820597cf7bcdb1fb8187299cfe0a43717dfa10dec68cf138ae975f7dd4a600e5aa98a1e0f712c5b0737838d4717d1c50bf14430dd174f5bdefc1180d68bc854a00709dc348e20889a81599e083ddbe06bd86406b37f4ee704dec477a92766ee450e3ace67571392cc044"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}]}, 0x598}, 0x1, 0x0, 0x0, 0x24000000}, 0x40c0000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c00)=0x0) sendmsg$nl_generic(r3, &(0x7f0000001f40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f00)={&(0x7f0000000c40)={0x12ac, 0x31, 0x200, 0x70bd28, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xea, 0x0, 0x0, @fd=r3}, @nested={0x116f, 0x2c, 0x0, 0x1, [@nested={0x4, 0xf}, @generic="331b910c5b6c2819370e8ec5", @generic="cfa506fda418b642ccc2d693dc23a78cf5e283398308735a475d32749e3ca65d8febe677fb93316a5fcd7bd74bcfe8159438b981a387b5b33939e0e917008e5a3471e1448092d7cb4ddc76ab8f6ce83f55d87c9123200beb587cdd958effcf89a0b3467f605e8bc055bcc0292a063080e2fb85da8a051e52401bbbb393ae73edd29c13f4c4b3683cb8c6b551065be8960594a4c2b52b86e3c1fff4a35c25e036827b38f8a60211", @typed={0x8, 0xe2, 0x0, 0x0, @u32=0xab}, @generic="37edf8f14cfc13f2d0a02fd01dfcebbbbfa3026979d02621e7e8f8974006f5c6810910c20ad963a68c8e60f24d5a5e3b70c146411d2a59c28bc4bb0cd0ab798c0cb9b317e0ad80dc5ef2a7a250282bc4519500b772fce58721b95fe1c03003d4dd88c68c444f428aea35f12753e14a0ec0d26ed6467470dffba86374972494ef43f408a73a28711bcc62303fc1bce580e67c5c0c30f3696d1d91e10fbf5a71bb6d337530", @generic="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", @typed={0x8, 0xb3, 0x0, 0x0, @uid=r4}]}, @generic="eb3181c497d8298c9e26ffede86951b2137162276c8f653566ddd6d5121a3eeadb12095d0ed7a1f3695381a3de0a715c5c46a1d1066d73e397ae7b21a6fd04c3e1a575e7eacd359da20b84c0e8d196f6a2754af2b99f6006bf3c126ddfbd02fecce8576461f18a55b48097dbb763c0882eaa0e8df2a635771eb3681f743296450a535b1554e044f73d693272b75639bf2777d2", @typed={0xc, 0xd9, 0x0, 0x0, @u64=0x1}, @nested={0x62, 0x13b, 0x0, 0x1, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x10}, @generic="ee84e848fceaa1a89abc71b48326663fc526a8162ae4abf7b214dae6c82f8d65e8f3efd2246ca23922778ef05589ecf62ce02973d62b3e9ad841260440b3ad18a2ed955b1fcf2e2d1cbfb1db9c030d05bb28"]}, @generic="6d8d55ea635f3f8133d5ac80b5f0179f1077d5a4dc327fb32744"]}, 0x12ac}, 0x1, 0x0, 0x0, 0xc880}, 0x20000000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001f80), 0x8) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001fc0)={r5}, 0x8) (async) socket$unix(0x1, 0x5, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000020c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000002180)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, r8, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x80) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000021c0), 0x4) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002200)) (async) syz_genetlink_get_family_id$smc(&(0x7f0000002240), r3) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000022c0)=0x0) sendmsg$nl_generic(r5, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002440)={&(0x7f0000002300)={0x138, 0x36, 0x800, 0x70bd26, 0x25dfdbfc, {0x11}, [@typed={0x8, 0x91, 0x0, 0x0, @ipv4=@broadcast}, @generic="2d8c39e7e98cd4121eecb8e3ade02b71a08cd551d71a1826225089df0a80ccb6f3d994627197d1d92e408fc2405b682d2669ca161b4cc4dc4e4e160abd763635c779db", @nested={0x10, 0xa5, 0x0, 0x1, [@typed={0xc, 0xd3, 0x0, 0x0, @u64=0x3}]}, @nested={0xc6, 0x13c, 0x0, 0x1, [@typed={0x8, 0xad, 0x0, 0x0, @pid=r11}, @generic="86ebd89567e5fa42bbe37ad168eb23ab91885c27fb1f6e4233255aa3b06ea427c9fc1e2f8d98a2ea58cdca3fa4fffa46050e8b5488479fa872eba3998ecea1e813cde5f89be4fc6dfda2ccf4778fe9c9b64df1b0511ff1fce8513f6db9c0f12d93e721ee17b4db4bf5fd394940a901236f605a402d08a5ede1942e90eb79691c618093d3ddcf83be5800167dbe5405fe5ebb84a4fa289125124bef6cbcc3ae19c515707032d2aa17505e", @typed={0x8, 0x130, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xd4}, @nested={0x4, 0xc}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) (async, rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f00000024c0)={r5, r5}, 0xc) (async, rerun: 64) socket$inet_sctp(0x2, 0x91fe4ea75538f37d, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000002a40)={'syztnl0\x00', &(0x7f00000029c0)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0x7f, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x700, 0x8009, 0x0, 0x7}}) sendmsg$inet(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002500)="82c18cb1306f37300b0748353c77b9579f2040f2b8fa90728d0343a1df5a121cba4bea5c4fb1f100d13945b8c98e171db12e76b0dd5dd794ecbfbe725f454792d982e6708757c8c3393c62caecdfc535b3bff1050403c68918e867503861b17ad204c18767989904f5e82366b5aab2f36fccec99462f35b0d4962755979af7eeb96f5c2a287d38e265fb1ecfbc60405102444669ffdf955cf61e6108f674fc9beea4a56cf4770a5a223ac11f6244e3663f449ae05f08247a73608348fcb6c2ba7c675fe62c2ff103c3e77e82d6e22c9c416f852a2689dd", 0xd7}, {&(0x7f0000002600)="376d083597f6cd7b6f1bbf065189cdc8f8a014b3c17c569e0622cda67ad8600e523da938744c689c50223df6dcdfcd712e85f3a7a0ff2f4b39de204bc1d07ef05eb4ff72cab4bb7be4dccb27e2acc841d037134e3e85c1e3175831761bf5544eab", 0x61}, {&(0x7f0000002680)="0f8ffaf56c2137c9366cfcd2ba012d42bf19fac5a6910210b4efbf58aaa5fe113a69e5216419cf0022f516b08a51a8052bf01fd1ff088d7623ed8d3d88cbd8a04e4b813d6ed5ac13142e4cb89294523a66eb66485925e1756fe93384ed1bb70ea0ae0bc23574fde7018373aafaacfef3ae45db98a5c8db55d24b882adfaf00f7727352b9adb642e09bf85742e341a0fccc3f79d16c5e44e8b495fdeb78a39422d19858051d9ff03cfa4d1c9e0c4ebe66884034f3e7f8e4839a00cb99ebf956eeb91e2caa29fc285a61f7aec7df975ed8df8bd535b0", 0xd5}, {&(0x7f0000002780)="30e453cf7b5abdb554ad13c39fea8cca8860c7918f66258c752f078a760ede06df9fe7f21f4e3216c9b446d3a32bd3aaeba79c3c43f7905db09df413c3da33baad16a398fe3f842f1a42db8676d7013a40bff6078ee71cb768d98a26141c136072aff9595169acbb21e63b0a2d4fb97f77f527d3f55159f0bdff79f8ee4c3283a700ed0b2bf2da99cc406e4cb9e07da938a826964fd9fa7d43536efdc83a77c370196bdbfa320eaf6e80499d200d60745ac833ab919459b2eae1403e52f3e57890708e7f987bdc97eb86afd5fc95db7dca19911cbb3504d474d3dd9f6f1d7e8599f06c7ea703c3ba0177e4d960dc70ee", 0xf0}, {&(0x7f0000002880)}, {&(0x7f00000028c0)="3e3a54f962c68b89044dd5d458320fdb4e20925cf3341bdc88e1f4f3cbd151523cea52951d98edc6736ab454c2feff979cbc8243ab76a536152f90ad67e0933301f4921f524cf671d14d834cb5ee", 0x4e}], 0x6, &(0x7f0000002a80)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast2, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2c02}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_retopts={{0x60, 0x0, 0x7, {[@generic={0x88, 0x5, "7344a5"}, @generic={0x83, 0x12, "080d9a672ba6f77100dd108aa13c3242"}, @timestamp_addr={0x44, 0x34, 0x5f, 0x1, 0x6, [{@private=0x7, 0xf}, {@broadcast, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xa51}, {@local, 0x6}, {@rand_addr=0x64010101, 0x7}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x110}, 0x4000000) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003d00)={0xffffffffffffffff, 0xb}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000003e00)={0xe, 0xb, &(0x7f0000002c00)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], &(0x7f0000002c80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000002cc0)=""/4096, 0x41000, 0x42, '\x00', r12, @sk_skb=0x26, r5, 0x8, &(0x7f0000003cc0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x2, &(0x7f0000003d80)=[r5, r5, r5, r5, r13, r6, 0xffffffffffffffff], &(0x7f0000003dc0)=[{0x3, 0x2, 0xc, 0x6}, {0x5, 0x5, 0x2}], 0x10, 0x80000001, @void, @value}, 0x94) 2m21.107769787s ago: executing program 1 (id=1083): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x7e, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="05e785b26d12b681642448929a63982866d98badcdf49707551e217c920e4c2954c3db686f350f7127c7435ff29f7784bc3b864069423e1c737c412eff4d6070", @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800000000000000005050018"], 0x44}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x300, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m21.107074649s ago: executing program 0 (id=1084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000d060104000000000000000000000000050001"], 0x1c}}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3e9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}, 0x420}}, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="03002ebd7000ffdbdf255c00000008000300", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x24}, 0x40) 2m20.951689966s ago: executing program 2 (id=1085): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000000)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) (async) shutdown(r5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000040000001200000002000600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r3], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) (async) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000080)=0x80000000, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x7, "0441b613a3"}, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@ifindex, r2, 0x2f, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000007000000000000000000000000000000000000000000e9f5eaeb1872b51dc96363b1b546ff0148d1258fff06829f4fd2fa83ee0b19298eb2ed2ceaaf7a011638b29937145187187bc5225da2fb2f6a255b"], 0x48) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r8, 0xffffffffffffffff, 0x2b, 0x0, 0x4000, @void, @value}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4d, @void, @value}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20080009}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffffb, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) 2m20.95140731s ago: executing program 0 (id=1086): r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f00000049c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x10001, @local, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="96", 0x1}], 0x1}}], 0x1, 0x30000840) 2m20.732888079s ago: executing program 2 (id=1087): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000100)=""/103, 0x67}], 0x1) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80800) 2m20.705138426s ago: executing program 0 (id=1088): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0xc3}], 0x1, 0x0, 0x0) 2m20.434609571s ago: executing program 0 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}, 0x1, 0xd00000000000000}, 0x0) 2m20.434251421s ago: executing program 4 (id=1090): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000780)="2cb6e2584c90c200"/24, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) 2m20.341847662s ago: executing program 2 (id=1091): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000040900020073797a31000000000900010073797a30000000000800054000000021480000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000001c000380180000800800034000000002090009"], 0xcc}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009"], 0x54}}, 0x0) (async, rerun: 64) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@allocspi={0x11c, 0x16, 0x1, 0x70bd2b, 0x25dfdbff, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4e21, 0x800, 0x4e22, 0x400, 0x2, 0x20, 0x20, 0x73}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@remote, {0x9, 0xdf85, 0xa9bb, 0x6, 0xb30, 0x5, 0x2000000, 0x2}, {0x1, 0x101, 0x2, 0x1}, {0x2, 0x8000, 0x9}, 0x70bd29, 0x0, 0x2, 0x3, 0x9}, 0x4, 0x8}, [@lifetime_val={0x24, 0x9, {0x8, 0xfffffffffffffffc, 0x2, 0x31}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$kcm(0x2b, 0x1, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m20.285442028s ago: executing program 3 (id=1092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xaf) 2m19.996502604s ago: executing program 4 (id=1093): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000400)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp, 0x2}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000a05000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d61"], 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) 2m19.937881368s ago: executing program 3 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000fff000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a3200000000880004"], 0xdc}}, 0x0) 2m19.776273282s ago: executing program 2 (id=1095): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback, 0x700}, 0x1c) 2m19.710087082s ago: executing program 0 (id=1096): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1d, &(0x7f0000000740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @jmp={0x5, 0x0, 0xd, 0x0, 0xa, 0x0, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000001c0)=0x45e2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000240)=0x2, 0x4) sendmmsg(r1, &(0x7f000000bb00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x45833af92e4a39fd, 0x0) 2m17.647800783s ago: executing program 3 (id=1097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}}, 0x44}, 0x1, 0x0, 0x0, 0x84840}, 0x8040) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}}, 0x44}, 0x1, 0x0, 0x0, 0x84840}, 0x8040) (async) 2m13.821981209s ago: executing program 2 (id=1098): r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f00000049c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x10001, @local, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="96", 0x1}], 0x1}}], 0x1, 0x30000840) 2m5.450966848s ago: executing program 0 (id=1099): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d0400003f000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 2m3.938676982s ago: executing program 32 (id=1083): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x7e, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="05e785b26d12b681642448929a63982866d98badcdf49707551e217c920e4c2954c3db686f350f7127c7435ff29f7784bc3b864069423e1c737c412eff4d6070", @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800000000000000005050018"], 0x44}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x300, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m31.74302295s ago: executing program 33 (id=1093): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000400)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp, 0x2}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000a05000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d61"], 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) 59.092603367s ago: executing program 34 (id=1099): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d0400003f000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 35.019618615s ago: executing program 35 (id=1098): r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f00000049c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x10001, @local, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="96", 0x1}], 0x1}}], 0x1, 0x30000840) 0s ago: executing program 36 (id=1097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}}, 0x44}, 0x1, 0x0, 0x0, 0x84840}, 0x8040) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}}, 0x44}, 0x1, 0x0, 0x0, 0x84840}, 0x8040) (async) kernel console output (not intermixed with test programs): enamed from eth2 [ 81.840182][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.894394][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.910287][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.933371][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.944146][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.030562][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.042406][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.076596][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.091524][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.148076][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.178248][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.188711][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.200323][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.219902][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.264232][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.315182][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.332045][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.361307][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.368621][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.380629][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.387810][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.406476][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.413751][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.429194][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.447474][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.454635][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.491531][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.518168][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.529051][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.565453][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.572578][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.585558][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.592782][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.749553][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.828716][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.867840][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.882374][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.889643][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.903663][ T5834] Bluetooth: hci3: command tx timeout [ 82.926352][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.933528][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.984000][ T5834] Bluetooth: hci4: command tx timeout [ 83.040151][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.061612][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.068744][ T5834] Bluetooth: hci2: command tx timeout [ 83.068801][ T5834] Bluetooth: hci1: command tx timeout [ 83.072904][ T5834] Bluetooth: hci0: command tx timeout [ 83.099013][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.106203][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.167819][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.175098][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.197823][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.251652][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.360379][ T5831] veth0_vlan: entered promiscuous mode [ 83.385274][ T5844] veth0_vlan: entered promiscuous mode [ 83.399099][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.439527][ T5831] veth1_vlan: entered promiscuous mode [ 83.490128][ T5836] veth0_vlan: entered promiscuous mode [ 83.510381][ T5844] veth1_vlan: entered promiscuous mode [ 83.528212][ T5836] veth1_vlan: entered promiscuous mode [ 83.590382][ T5831] veth0_macvtap: entered promiscuous mode [ 83.614173][ T5832] veth0_vlan: entered promiscuous mode [ 83.633725][ T5831] veth1_macvtap: entered promiscuous mode [ 83.650449][ T5844] veth0_macvtap: entered promiscuous mode [ 83.664449][ T5836] veth0_macvtap: entered promiscuous mode [ 83.679091][ T5832] veth1_vlan: entered promiscuous mode [ 83.691348][ T5836] veth1_macvtap: entered promiscuous mode [ 83.716997][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.729387][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.739039][ T5844] veth1_macvtap: entered promiscuous mode [ 83.759607][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.768916][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.779005][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.789289][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.817066][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.828571][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.840366][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.858475][ T5832] veth0_macvtap: entered promiscuous mode [ 83.877429][ T5832] veth1_macvtap: entered promiscuous mode [ 83.885118][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.896040][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.908394][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.918441][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.929157][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.939723][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.951139][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.965292][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.982364][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.000710][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.010325][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.020016][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.032639][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.045986][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.057354][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.071127][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.083920][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.095100][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.154928][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.173966][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.185162][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.195206][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.215083][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.226650][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.238251][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.251803][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.261851][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.273052][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.284100][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.300900][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.311635][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.322156][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.336494][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.347655][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.365085][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.376384][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.423852][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.433406][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.442144][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.451150][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.484646][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.493002][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.588487][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.601102][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.609074][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.618204][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.702370][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.723996][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.737783][ T5837] veth0_vlan: entered promiscuous mode [ 84.771134][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.781131][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.812135][ T5837] veth1_vlan: entered promiscuous mode [ 84.835935][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.895863][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.910706][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.936472][ T5837] veth0_macvtap: entered promiscuous mode [ 84.987316][ T5837] veth1_macvtap: entered promiscuous mode [ 84.993992][ T5834] Bluetooth: hci3: command tx timeout [ 84.999782][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.039723][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.052178][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.069169][ T5834] Bluetooth: hci4: command tx timeout [ 85.097245][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.129481][ T5919] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 85.149227][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.154046][ T5834] Bluetooth: hci0: command tx timeout [ 85.160767][ T55] Bluetooth: hci1: command tx timeout [ 85.165845][ T5834] Bluetooth: hci2: command tx timeout [ 85.188947][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.213218][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.241053][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.252026][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.282737][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.292613][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.319289][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.335281][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.347789][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.395583][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.418281][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.441643][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.453160][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.465137][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.475845][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.487614][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.498830][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.547943][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.569860][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.601942][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.625873][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.807885][ T5938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.068091][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.107975][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.149634][ T5943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.276107][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.309576][ T5943] wireguard0: entered promiscuous mode [ 86.325665][ T5943] wireguard0: entered allmulticast mode [ 86.336925][ T5945] netlink: 'syz.3.4': attribute type 32 has an invalid length. [ 86.352993][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.388973][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.408073][ T5945] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17) [ 86.435253][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.472321][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.021264][ T5955] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 87.063234][ T5834] Bluetooth: hci3: command tx timeout [ 87.071250][ T9] cfg80211: failed to load regulatory.db [ 87.144827][ T5834] Bluetooth: hci4: command tx timeout [ 87.222885][ T5834] Bluetooth: hci1: command tx timeout [ 87.223458][ T5850] Bluetooth: hci0: command tx timeout [ 87.233638][ T5834] Bluetooth: hci2: command tx timeout [ 88.841185][ T5996] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21'. [ 90.079118][ T6032] Cannot find add_set index 1 as target [ 90.087921][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 90.126490][ T6033] Cannot find add_set index 1 as target [ 90.194199][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.219229][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.657688][ T6053] warning: `syz.3.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.758907][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 90.864938][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 91.019388][ T6068] openvswitch: netlink: Missing valid actions attribute. [ 91.033024][ T6068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.340567][ T6078] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 91.423761][ T6080] xt_ipcomp: unknown flags F7 [ 91.492926][ T6080] netlink: 32 bytes leftover after parsing attributes in process `syz.1.48'. [ 91.554329][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 91.572975][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 91.982971][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.990994][ T6097] batadv_slave_1: entered promiscuous mode [ 92.043416][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54'. [ 92.170485][ T47] IPVS: starting estimator thread 0... [ 92.192996][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 92.232315][ T6105] tc_dump_action: action bad kind [ 92.292920][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.58'. [ 92.322917][ T6103] IPVS: using max 21 ests per chain, 50400 per kthread [ 92.543276][ T6117] netlink: 'syz.2.62': attribute type 72 has an invalid length. [ 92.551314][ T6117] netlink: 200 bytes leftover after parsing attributes in process `syz.2.62'. [ 92.735770][ T6123] netlink: 52 bytes leftover after parsing attributes in process `syz.1.64'. [ 92.919824][ T47] IPVS: starting estimator thread 0... [ 92.926289][ T6134] FAULT_INJECTION: forcing a failure. [ 92.926289][ T6134] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.948044][ T6134] CPU: 1 UID: 0 PID: 6134 Comm: syz.0.65 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 92.948074][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.948090][ T6134] Call Trace: [ 92.948097][ T6134] [ 92.948105][ T6134] dump_stack_lvl+0x241/0x360 [ 92.948139][ T6134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.948161][ T6134] ? __pfx__printk+0x10/0x10 [ 92.948184][ T6134] ? __pfx_lock_release+0x10/0x10 [ 92.948223][ T6134] should_fail_ex+0x40a/0x550 [ 92.948258][ T6134] _copy_from_iter+0x1df/0x1c40 [ 92.948283][ T6134] ? __virt_addr_valid+0x183/0x530 [ 92.948304][ T6134] ? __pfx_lock_release+0x10/0x10 [ 92.948341][ T6134] ? __alloc_skb+0x28f/0x440 [ 92.948363][ T6134] ? __pfx__copy_from_iter+0x10/0x10 [ 92.948389][ T6134] ? __virt_addr_valid+0x183/0x530 [ 92.948407][ T6134] ? __virt_addr_valid+0x183/0x530 [ 92.948425][ T6134] ? __virt_addr_valid+0x45f/0x530 [ 92.948445][ T6134] ? __phys_addr_symbol+0x2f/0x70 [ 92.948463][ T6134] ? __check_object_size+0x47a/0x730 [ 92.948495][ T6134] netlink_sendmsg+0x742/0xcb0 [ 92.948527][ T6134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.948551][ T6134] ? aa_sock_msg_perm+0x91/0x160 [ 92.948588][ T6134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.948606][ T6134] __sock_sendmsg+0x221/0x270 [ 92.948640][ T6134] sock_write_iter+0x2d7/0x3f0 [ 92.948671][ T6134] ? __pfx_sock_write_iter+0x10/0x10 [ 92.948739][ T6134] do_iter_readv_writev+0x71a/0x9d0 [ 92.948770][ T6134] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 92.948807][ T6134] ? bpf_lsm_file_permission+0x9/0x10 [ 92.948837][ T6134] ? rw_verify_area+0x243/0x630 [ 92.948861][ T6134] vfs_writev+0x38b/0xbc0 [ 92.948906][ T6134] ? __pfx_vfs_writev+0x10/0x10 [ 92.948948][ T6134] ? do_sys_openat2+0x17a/0x1d0 [ 92.948978][ T6134] ? __fget_files+0x2a/0x410 [ 92.949011][ T6134] ? __fget_files+0x395/0x410 [ 92.949041][ T6134] ? __fget_files+0x2a/0x410 [ 92.949078][ T6134] do_writev+0x1b6/0x360 [ 92.949112][ T6134] ? __pfx_do_writev+0x10/0x10 [ 92.949143][ T6134] ? do_syscall_64+0x100/0x230 [ 92.949178][ T6134] ? do_syscall_64+0xb6/0x230 [ 92.949222][ T6134] do_syscall_64+0xf3/0x230 [ 92.949251][ T6134] ? clear_bhb_loop+0x35/0x90 [ 92.949282][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.949318][ T6134] RIP: 0033:0x7f687a98d169 [ 92.949340][ T6134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.949356][ T6134] RSP: 002b:00007f687a7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 92.949377][ T6134] RAX: ffffffffffffffda RBX: 00007f687aba6160 RCX: 00007f687a98d169 [ 92.949392][ T6134] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007 [ 92.949404][ T6134] RBP: 00007f687a7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.949416][ T6134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.949427][ T6134] R13: 0000000000000001 R14: 00007f687aba6160 R15: 00007ffce23af088 [ 92.949455][ T6134] [ 93.324710][ T6133] IPVS: using max 19 ests per chain, 45600 per kthread [ 93.554108][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.64'. [ 93.596597][ T6146] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.646834][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.656114][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.846530][ T6156] FAULT_INJECTION: forcing a failure. [ 93.846530][ T6156] name failslab, interval 1, probability 0, space 0, times 0 [ 93.882321][ T6156] CPU: 1 UID: 0 PID: 6156 Comm: syz.1.73 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 93.882350][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.882363][ T6156] Call Trace: [ 93.882370][ T6156] [ 93.882378][ T6156] dump_stack_lvl+0x241/0x360 [ 93.882411][ T6156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.882434][ T6156] ? __pfx__printk+0x10/0x10 [ 93.882458][ T6156] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 93.882489][ T6156] ? __pfx___might_resched+0x10/0x10 [ 93.882522][ T6156] should_fail_ex+0x40a/0x550 [ 93.882560][ T6156] should_failslab+0xac/0x100 [ 93.882588][ T6156] __kmalloc_node_noprof+0xe1/0x4d0 [ 93.882616][ T6156] ? __kvmalloc_node_noprof+0x72/0x190 [ 93.882659][ T6156] __kvmalloc_node_noprof+0x72/0x190 [ 93.882692][ T6156] alloc_netdev_mqs+0x92c/0x1210 [ 93.882729][ T6156] rtnl_create_link+0x2f9/0xc90 [ 93.882764][ T6156] rtnl_newlink_create+0x2e1/0xbd0 [ 93.882792][ T6156] ? __mutex_lock+0x602/0x1010 [ 93.882827][ T6156] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 93.882852][ T6156] ? __pfx___mutex_lock+0x10/0x10 [ 93.882890][ T6156] ? ns_capable+0x8a/0xf0 [ 93.882916][ T6156] rtnl_newlink+0x167a/0x1d90 [ 93.882938][ T6156] ? stack_depot_save_flags+0x37/0x940 [ 93.882993][ T6156] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.883010][ T6156] ? __netlink_deliver_tap+0x561/0x7f0 [ 93.883045][ T6156] ? __pfx_validate_chain+0x10/0x10 [ 93.883066][ T6156] ? __sock_sendmsg+0x221/0x270 [ 93.883095][ T6156] ? ____sys_sendmsg+0x53a/0x860 [ 93.883119][ T6156] ? __sys_sendmsg+0x269/0x350 [ 93.883141][ T6156] ? do_syscall_64+0xf3/0x230 [ 93.883169][ T6156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.883219][ T6156] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 93.883255][ T6156] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.883296][ T6156] ? mark_lock+0x9a/0x360 [ 93.883320][ T6156] ? __lock_acquire+0x1397/0x2100 [ 93.883386][ T6156] ? __pfx_lock_release+0x10/0x10 [ 93.883431][ T6156] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.883452][ T6156] rtnetlink_rcv_msg+0x791/0xcf0 [ 93.883483][ T6156] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 93.883521][ T6156] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.883563][ T6156] ? ref_tracker_free+0x643/0x7e0 [ 93.883591][ T6156] netlink_rcv_skb+0x206/0x480 [ 93.883625][ T6156] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.883660][ T6156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.883716][ T6156] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.883753][ T6156] netlink_unicast+0x7f6/0x990 [ 93.883792][ T6156] ? __pfx_netlink_unicast+0x10/0x10 [ 93.883819][ T6156] ? __virt_addr_valid+0x45f/0x530 [ 93.883840][ T6156] ? __phys_addr_symbol+0x2f/0x70 [ 93.883860][ T6156] ? __check_object_size+0x47a/0x730 [ 93.883894][ T6156] netlink_sendmsg+0x8de/0xcb0 [ 93.883927][ T6156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.883953][ T6156] ? aa_sock_msg_perm+0x91/0x160 [ 93.883998][ T6156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.884016][ T6156] __sock_sendmsg+0x221/0x270 [ 93.884050][ T6156] ____sys_sendmsg+0x53a/0x860 [ 93.884085][ T6156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.884109][ T6156] ? __fget_files+0x2a/0x410 [ 93.884143][ T6156] ? __fget_files+0x2a/0x410 [ 93.884184][ T6156] __sys_sendmsg+0x269/0x350 [ 93.884215][ T6156] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.884256][ T6156] ? do_sys_openat2+0x17a/0x1d0 [ 93.884315][ T6156] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.884349][ T6156] ? do_syscall_64+0x100/0x230 [ 93.884383][ T6156] ? do_syscall_64+0xb6/0x230 [ 93.884417][ T6156] do_syscall_64+0xf3/0x230 [ 93.884448][ T6156] ? clear_bhb_loop+0x35/0x90 [ 93.884480][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.884508][ T6156] RIP: 0033:0x7fbc0b78d169 [ 93.884526][ T6156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.884543][ T6156] RSP: 002b:00007fbc0c610038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.884565][ T6156] RAX: ffffffffffffffda RBX: 00007fbc0b9a5fa0 RCX: 00007fbc0b78d169 [ 93.884580][ T6156] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 93.884593][ T6156] RBP: 00007fbc0c610090 R08: 0000000000000000 R09: 0000000000000000 [ 93.884605][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.884617][ T6156] R13: 0000000000000000 R14: 00007fbc0b9a5fa0 R15: 00007ffff9a8b6f8 [ 93.884648][ T6156] [ 94.337362][ T6158] FAULT_INJECTION: forcing a failure. [ 94.337362][ T6158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.350871][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.0.74 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 94.350898][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.350910][ T6158] Call Trace: [ 94.350917][ T6158] [ 94.350925][ T6158] dump_stack_lvl+0x241/0x360 [ 94.350956][ T6158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.350978][ T6158] ? __pfx__printk+0x10/0x10 [ 94.351000][ T6158] ? __pfx_lock_release+0x10/0x10 [ 94.351040][ T6158] should_fail_ex+0x40a/0x550 [ 94.351074][ T6158] _copy_from_user+0x2d/0xb0 [ 94.351103][ T6158] copy_msghdr_from_user+0xae/0x680 [ 94.351133][ T6158] ? __pfx___might_resched+0x10/0x10 [ 94.351163][ T6158] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 94.351198][ T6158] ? __sys_sendmmsg+0x392/0x720 [ 94.351223][ T6158] ? __might_fault+0xaa/0x120 [ 94.351247][ T6158] __sys_sendmmsg+0x32b/0x720 [ 94.351283][ T6158] ? __pfx___sys_sendmmsg+0x10/0x10 [ 94.351319][ T6158] ? __pfx_lock_release+0x10/0x10 [ 94.351346][ T6158] ? kstrtouint_from_user+0x128/0x190 [ 94.351391][ T6158] ? ksys_write+0x22a/0x2b0 [ 94.351412][ T6158] ? __pfx_lock_release+0x10/0x10 [ 94.351448][ T6158] ? sb_end_write+0xe9/0x1c0 [ 94.351477][ T6158] ? vfs_write+0x7fa/0xd10 [ 94.351500][ T6158] ? __mutex_unlock_slowpath+0x227/0x800 [ 94.351557][ T6158] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 94.351589][ T6158] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.351621][ T6158] ? do_syscall_64+0x100/0x230 [ 94.351654][ T6158] __x64_sys_sendmmsg+0xa0/0xb0 [ 94.351681][ T6158] do_syscall_64+0xf3/0x230 [ 94.351717][ T6158] ? clear_bhb_loop+0x35/0x90 [ 94.351748][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.351775][ T6158] RIP: 0033:0x7f687a98d169 [ 94.351792][ T6158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.351808][ T6158] RSP: 002b:00007f687a7f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 94.351828][ T6158] RAX: ffffffffffffffda RBX: 00007f687aba5fa0 RCX: 00007f687a98d169 [ 94.351843][ T6158] RDX: 0000000004000070 RSI: 0000200000003b80 RDI: 0000000000000005 [ 94.351855][ T6158] RBP: 00007f687a7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 94.351867][ T6158] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 94.351878][ T6158] R13: 0000000000000000 R14: 00007f687aba5fa0 R15: 00007ffce23af088 [ 94.351906][ T6158] [ 94.633519][ T6161] xt_bpf: check failed: parse error [ 94.689668][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 95.599866][ T6206] netlink: 'syz.1.88': attribute type 21 has an invalid length. [ 95.836841][ T6208] bond1 (unregistering): Released all slaves [ 95.953626][ T6217] gretap0: entered promiscuous mode [ 95.964566][ T6217] gretap0: left promiscuous mode [ 96.399801][ T6239] FAULT_INJECTION: forcing a failure. [ 96.399801][ T6239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.405720][ T6242] xt_socket: unknown flags 0x8 [ 96.480619][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.3.102 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 96.480650][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.480663][ T6239] Call Trace: [ 96.480671][ T6239] [ 96.480679][ T6239] dump_stack_lvl+0x241/0x360 [ 96.480711][ T6239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.480735][ T6239] ? __pfx__printk+0x10/0x10 [ 96.480762][ T6239] ? vfs_write+0x7fa/0xd10 [ 96.480787][ T6239] should_fail_ex+0x40a/0x550 [ 96.480824][ T6239] _copy_to_user+0x31/0xb0 [ 96.480866][ T6239] put_timespec64+0xfa/0x150 [ 96.480901][ T6239] ? __pfx_put_timespec64+0x10/0x10 [ 96.480944][ T6239] __x64_sys_recvmmsg+0x1e8/0x250 [ 96.480976][ T6239] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 96.481006][ T6239] ? do_syscall_64+0x100/0x230 [ 96.481041][ T6239] ? do_syscall_64+0xb6/0x230 [ 96.481075][ T6239] do_syscall_64+0xf3/0x230 [ 96.481106][ T6239] ? clear_bhb_loop+0x35/0x90 [ 96.481139][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.481167][ T6239] RIP: 0033:0x7f278db8d169 [ 96.481185][ T6239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.481202][ T6239] RSP: 002b:00007f278e99b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 96.481224][ T6239] RAX: ffffffffffffffda RBX: 00007f278dda6080 RCX: 00007f278db8d169 [ 96.481239][ T6239] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 96.481252][ T6239] RBP: 00007f278e99b090 R08: 0000200000000240 R09: 0000000000000000 [ 96.481265][ T6239] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 96.481277][ T6239] R13: 0000000000000000 R14: 00007f278dda6080 R15: 00007ffe9486c538 [ 96.481306][ T6239] [ 96.573132][ T6236] __nla_validate_parse: 7 callbacks suppressed [ 96.573154][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 96.729825][ T6236] netlink: 'syz.4.103': attribute type 126 has an invalid length. [ 97.084144][ T6250] Zero length message leads to an empty skb [ 97.139279][ T6255] netlink: 'syz.3.105': attribute type 27 has an invalid length. [ 97.212925][ T6261] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.108'. [ 97.256483][ T6261] openvswitch: netlink: Missing key (keys=40, expected=80) [ 97.356688][ T6268] netlink: 'syz.0.107': attribute type 10 has an invalid length. [ 97.476803][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.111'. [ 97.629541][ T6279] FAULT_INJECTION: forcing a failure. [ 97.629541][ T6279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.667435][ T6279] CPU: 1 UID: 0 PID: 6279 Comm: syz.0.114 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 97.667468][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.667481][ T6279] Call Trace: [ 97.667488][ T6279] [ 97.667497][ T6279] dump_stack_lvl+0x241/0x360 [ 97.667528][ T6279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.667550][ T6279] ? __pfx__printk+0x10/0x10 [ 97.667573][ T6279] ? __pfx_lock_release+0x10/0x10 [ 97.667615][ T6279] should_fail_ex+0x40a/0x550 [ 97.667660][ T6279] _copy_from_user+0x2d/0xb0 [ 97.667691][ T6279] copy_msghdr_from_user+0xae/0x680 [ 97.667724][ T6279] ? __pfx___might_resched+0x10/0x10 [ 97.667765][ T6279] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 97.667803][ T6279] ? __sys_sendmmsg+0x392/0x720 [ 97.667829][ T6279] ? __might_fault+0xaa/0x120 [ 97.667855][ T6279] __sys_sendmmsg+0x32b/0x720 [ 97.667893][ T6279] ? __pfx___sys_sendmmsg+0x10/0x10 [ 97.667932][ T6279] ? __pfx_lock_release+0x10/0x10 [ 97.667962][ T6279] ? kstrtouint_from_user+0x128/0x190 [ 97.668009][ T6279] ? ksys_write+0x22a/0x2b0 [ 97.668033][ T6279] ? __pfx_lock_release+0x10/0x10 [ 97.668071][ T6279] ? sb_end_write+0xe9/0x1c0 [ 97.668102][ T6279] ? vfs_write+0x7fa/0xd10 [ 97.668127][ T6279] ? __mutex_unlock_slowpath+0x227/0x800 [ 97.668187][ T6279] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.668222][ T6279] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.668256][ T6279] ? do_syscall_64+0x100/0x230 [ 97.668291][ T6279] __x64_sys_sendmmsg+0xa0/0xb0 [ 97.668320][ T6279] do_syscall_64+0xf3/0x230 [ 97.668351][ T6279] ? clear_bhb_loop+0x35/0x90 [ 97.668385][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.668413][ T6279] RIP: 0033:0x7f687a98d169 [ 97.668431][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.668448][ T6279] RSP: 002b:00007f687a7f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 97.668471][ T6279] RAX: ffffffffffffffda RBX: 00007f687aba5fa0 RCX: 00007f687a98d169 [ 97.668486][ T6279] RDX: 0000000004000070 RSI: 0000200000003b80 RDI: 0000000000000005 [ 97.668499][ T6279] RBP: 00007f687a7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 97.668511][ T6279] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 97.668523][ T6279] R13: 0000000000000000 R14: 00007f687aba5fa0 R15: 00007ffce23af088 [ 97.668553][ T6279] [ 98.131766][ T6293] tipc: Started in network mode [ 98.155361][ T6293] tipc: Node identity fee00000000000000079940000000001, cluster identity 4711 [ 98.164411][ T6293] tipc: Enabling of bearer rejected, failed to enable media [ 98.206628][ T6298] netlink: 'syz.0.121': attribute type 11 has an invalid length. [ 98.221382][ T6298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.121'. [ 98.256364][ T6296] netlink: 'syz.1.120': attribute type 3 has an invalid length. [ 98.293760][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 98.742043][ T6314] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.949384][ T6317] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.189423][ T6314] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.407634][ T6317] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.460497][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'. [ 99.516974][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 99.538337][ T6314] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.716838][ T6317] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.739774][ T6310] netlink: 830 bytes leftover after parsing attributes in process `syz.0.124'. [ 99.831343][ T6314] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.942573][ T6317] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.110481][ T6314] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.130068][ T6314] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.181497][ T6314] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.229315][ T6314] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.265117][ T6317] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.312993][ T6317] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.388918][ T6317] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.403095][ T6360] netlink: 76 bytes leftover after parsing attributes in process `syz.0.141'. [ 100.451132][ T6317] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.452969][ T6362] netlink: 'syz.1.142': attribute type 10 has an invalid length. [ 100.473365][ T6362] netlink: 2 bytes leftover after parsing attributes in process `syz.1.142'. [ 100.534043][ T6362] team0: entered promiscuous mode [ 100.593207][ T6362] team_slave_0: entered promiscuous mode [ 100.637299][ T6362] team_slave_1: entered promiscuous mode [ 100.661634][ T6362] bridge0: port 3(team0) entered blocking state [ 100.683448][ T6362] bridge0: port 3(team0) entered disabled state [ 100.708059][ T6362] team0: entered allmulticast mode [ 100.732877][ T6362] team_slave_0: entered allmulticast mode [ 100.738683][ T6362] team_slave_1: entered allmulticast mode [ 100.774960][ T6362] bridge0: port 3(team0) entered blocking state [ 100.781654][ T6362] bridge0: port 3(team0) entered forwarding state [ 101.347614][ T6400] FAULT_INJECTION: forcing a failure. [ 101.347614][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 101.360726][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.0.152 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 101.360752][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.360764][ T6400] Call Trace: [ 101.360771][ T6400] [ 101.360780][ T6400] dump_stack_lvl+0x241/0x360 [ 101.360811][ T6400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.360834][ T6400] ? __pfx__printk+0x10/0x10 [ 101.360865][ T6400] should_fail_ex+0x40a/0x550 [ 101.360901][ T6400] should_failslab+0xac/0x100 [ 101.360930][ T6400] ? skb_clone+0x20c/0x390 [ 101.360955][ T6400] kmem_cache_alloc_noprof+0x70/0x380 [ 101.360989][ T6400] skb_clone+0x20c/0x390 [ 101.361013][ T6400] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 101.361038][ T6400] dev_queue_xmit_nit+0x249/0xca0 [ 101.361063][ T6400] ? dev_queue_xmit_nit+0x2b/0xca0 [ 101.361085][ T6400] ? validate_xmit_skb+0x9f9/0x1040 [ 101.361117][ T6400] dev_hard_start_xmit+0x15f/0x7d0 [ 101.361144][ T6400] ? __pfx_validate_xmit_skb+0x10/0x10 [ 101.361182][ T6400] __dev_queue_xmit+0x1b73/0x3f40 [ 101.361217][ T6400] ? kasan_save_track+0x51/0x80 [ 101.361245][ T6400] ? sock_write_iter+0x2d7/0x3f0 [ 101.361279][ T6400] ? __dev_queue_xmit+0x2f4/0x3f40 [ 101.361310][ T6400] ? __pfx___dev_queue_xmit+0x10/0x10 [ 101.361354][ T6400] ? __copy_skb_header+0xa7/0x5a0 [ 101.361381][ T6400] ? __asan_memcpy+0x40/0x70 [ 101.361401][ T6400] ? __skb_clone+0x5c/0x6c0 [ 101.361431][ T6400] ? __skb_clone+0x454/0x6c0 [ 101.361465][ T6400] ? skb_clone+0x240/0x390 [ 101.361494][ T6400] __netlink_deliver_tap+0x561/0x7f0 [ 101.361539][ T6400] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.361569][ T6400] netlink_deliver_tap+0x19d/0x1b0 [ 101.361603][ T6400] netlink_unicast+0x7c4/0x990 [ 101.361641][ T6400] ? __pfx_netlink_unicast+0x10/0x10 [ 101.361667][ T6400] ? __virt_addr_valid+0x45f/0x530 [ 101.361689][ T6400] ? __phys_addr_symbol+0x2f/0x70 [ 101.361718][ T6400] ? __check_object_size+0x47a/0x730 [ 101.361748][ T6400] netlink_sendmsg+0x8de/0xcb0 [ 101.361777][ T6400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.361799][ T6400] ? aa_sock_msg_perm+0x91/0x160 [ 101.361835][ T6400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.361851][ T6400] __sock_sendmsg+0x221/0x270 [ 101.361884][ T6400] sock_write_iter+0x2d7/0x3f0 [ 101.361913][ T6400] ? __pfx_sock_write_iter+0x10/0x10 [ 101.361962][ T6400] do_iter_readv_writev+0x71a/0x9d0 [ 101.361991][ T6400] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 101.362020][ T6400] ? bpf_lsm_file_permission+0x9/0x10 [ 101.362049][ T6400] ? rw_verify_area+0x243/0x630 [ 101.362072][ T6400] vfs_writev+0x38b/0xbc0 [ 101.362113][ T6400] ? __pfx_vfs_writev+0x10/0x10 [ 101.362154][ T6400] ? do_sys_openat2+0x17a/0x1d0 [ 101.362189][ T6400] ? __fget_files+0x2a/0x410 [ 101.362220][ T6400] ? __fget_files+0x395/0x410 [ 101.362246][ T6400] ? __fget_files+0x2a/0x410 [ 101.362300][ T6400] do_writev+0x1b6/0x360 [ 101.362333][ T6400] ? __pfx_do_writev+0x10/0x10 [ 101.362362][ T6400] ? do_syscall_64+0x100/0x230 [ 101.362395][ T6400] ? do_syscall_64+0xb6/0x230 [ 101.362427][ T6400] do_syscall_64+0xf3/0x230 [ 101.362457][ T6400] ? clear_bhb_loop+0x35/0x90 [ 101.362489][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.362516][ T6400] RIP: 0033:0x7f687a98d169 [ 101.362534][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.362549][ T6400] RSP: 002b:00007f687a7d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 101.362570][ T6400] RAX: ffffffffffffffda RBX: 00007f687aba6080 RCX: 00007f687a98d169 [ 101.362584][ T6400] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007 [ 101.362596][ T6400] RBP: 00007f687a7d8090 R08: 0000000000000000 R09: 0000000000000000 [ 101.362608][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.362619][ T6400] R13: 0000000000000001 R14: 00007f687aba6080 R15: 00007ffce23af088 [ 101.362649][ T6400] [ 101.802530][ T6404] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.051652][ T6404] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.557849][ T6404] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.576845][ T6420] ip6gretap0: entered promiscuous mode [ 103.588959][ T6420] vlan2: entered promiscuous mode [ 103.654129][ T6404] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.808839][ T6429] __nla_validate_parse: 1 callbacks suppressed [ 103.808859][ T6429] netlink: 104 bytes leftover after parsing attributes in process `syz.1.166'. [ 104.140722][ T6440] netlink: 'syz.3.168': attribute type 10 has an invalid length. [ 104.214741][ T6404] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.337358][ T6404] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.546494][ T6457] xt_connbytes: Forcing CT accounting to be enabled [ 104.554067][ T6456] xt_recent: Unsupported userspace flags (00000042) [ 104.573563][ T6457] Cannot find add_set index 2 as target [ 104.762915][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'. [ 105.318592][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 105.416456][ T6487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.185'. [ 105.610029][ T6493] ip6gretap0: entered promiscuous mode [ 105.626616][ T6493] vlan2: entered promiscuous mode [ 106.116935][ T6511] netlink: 'syz.3.193': attribute type 1 has an invalid length. [ 106.594544][ T6523] tipc: Started in network mode [ 106.609984][ T6523] tipc: Node identity fee00000000000000079940000000001, cluster identity 4711 [ 106.626784][ T6523] tipc: Enabling of bearer rejected, failed to enable media [ 106.734004][ T6525] dccp_v6_rcv: dropped packet with invalid checksum [ 106.885283][ T6533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'. [ 107.082373][ T6541] netlink: 44 bytes leftover after parsing attributes in process `syz.3.205'. [ 107.248107][ T6550] xt_recent: Unsupported userspace flags (00000042) [ 107.369922][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.384290][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.468282][ T6544] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.476980][ T6544] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.483550][ T6556] xt_l2tp: unknown flags: 10 [ 107.485856][ T6544] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.498498][ T6544] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.665582][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.674909][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.697607][ T6553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.740873][ T6559] netlink: 'syz.0.210': attribute type 4 has an invalid length. [ 107.839351][ T6561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.212'. [ 107.925152][ T6563] netlink: 480 bytes leftover after parsing attributes in process `syz.1.211'. [ 107.991776][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 108.020966][ T6565] tipc: Started in network mode [ 108.033059][ T6565] tipc: Node identity ac14140f, cluster identity 4711 [ 108.050444][ T6565] tipc: Enabled bearer , priority 10 [ 108.074897][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 108.271401][ T6573] vlan2: entered promiscuous mode [ 109.179003][ T47] tipc: Node number set to 2886997007 [ 109.479738][ T6616] tipc: Enabling of bearer rejected, failed to enable media [ 109.738973][ T6621] bridge_slave_0: left allmulticast mode [ 109.779118][ T6621] bridge_slave_0: left promiscuous mode [ 109.793134][ T5885] IPVS: starting estimator thread 0... [ 109.800757][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 109.854309][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.893687][ T6626] IPVS: using max 20 ests per chain, 48000 per kthread [ 109.901932][ T6621] bridge_slave_1: left allmulticast mode [ 109.914097][ T6621] bridge_slave_1: left promiscuous mode [ 109.928616][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.958274][ T6621] bond0: (slave bond_slave_0): Releasing backup interface [ 109.985751][ T6621] bond0: (slave bond_slave_1): Releasing backup interface [ 110.040757][ T6621] team0: Port device team_slave_0 removed [ 110.076968][ T6621] team0: Port device team_slave_1 removed [ 110.089163][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.098022][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.115685][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.146851][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.171573][ T6628] tipc: Enabling of bearer rejected, failed to enable media [ 110.261016][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.237'. [ 110.398815][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 110.723696][ T6657] vxcan1: entered allmulticast mode [ 110.789492][ T6658] bond2: entered promiscuous mode [ 110.825806][ T6658] bond2: entered allmulticast mode [ 110.847578][ T6658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.199419][ T6658] bond2 (unregistering): Released all slaves [ 111.393656][ T6671] xt_l2tp: unknown flags: 10 [ 111.749608][ T6678] xt_TCPMSS: Only works on TCP SYN packets [ 111.905063][ T6683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.250'. [ 111.943005][ T6686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.251'. [ 112.208162][ T6695] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 113.125058][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 113.192353][ T6722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.263'. [ 113.280259][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'. [ 113.318817][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 113.327949][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 113.497537][ T6732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.524314][ T6732] batadv_slave_1: entered promiscuous mode [ 113.747851][ T6738] syzkaller0: entered promiscuous mode [ 113.762136][ T6738] syzkaller0: entered allmulticast mode [ 113.896363][ T6746] netlink: 'syz.3.272': attribute type 1 has an invalid length. [ 113.913875][ T6749] netlink: 'syz.1.273': attribute type 10 has an invalid length. [ 115.850273][ T6746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.879774][ T6749] bridge0: port 3(team0) entered disabled state [ 115.912920][ T6749] team0: left allmulticast mode [ 115.917850][ T6749] team_slave_0: left allmulticast mode [ 115.938163][ T6749] team_slave_1: left allmulticast mode [ 115.950805][ T6749] team0: left promiscuous mode [ 115.957469][ T6749] team_slave_0: left promiscuous mode [ 115.968929][ T6749] team_slave_1: left promiscuous mode [ 115.974959][ T6749] bridge0: port 3(team0) entered disabled state [ 115.985489][ T6749] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.995063][ T6749] bond0: (slave team0): Enslaving as an active interface with an up link [ 116.148733][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.157253][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.264047][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.283408][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.400261][ T6759] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.411174][ T6759] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.420459][ T6759] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.430907][ T6759] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.949559][ T6804] syz_tun: entered promiscuous mode [ 116.961245][ T6804] vlan2: entered promiscuous mode [ 116.990108][ T6807] xt_hashlimit: size too large, truncated to 1048576 [ 117.067428][ T6810] xt_hashlimit: size too large, truncated to 1048576 [ 117.653015][ T6827] xt_TCPMSS: Only works on TCP SYN packets [ 117.678282][ T6830] tipc: MTU too low for tipc bearer [ 118.078883][ T6844] netlink: 'syz.0.302': attribute type 11 has an invalid length. [ 118.114625][ T6848] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.241443][ T6848] __nla_validate_parse: 5 callbacks suppressed [ 118.241465][ T6848] netlink: 96 bytes leftover after parsing attributes in process `syz.1.303'. [ 118.273442][ T6855] xt_l2tp: unknown flags: 10 [ 118.452878][ T6861] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 118.460593][ T6861] netlink: 'syz.4.308': attribute type 3 has an invalid length. [ 118.470578][ T6863] xt_bpf: check failed: parse error [ 118.527433][ T6861] netlink: 224 bytes leftover after parsing attributes in process `syz.4.308'. [ 118.590307][ T6868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.312'. [ 118.602621][ T6866] ipt_ECN: cannot use operation on non-tcp rule [ 118.617719][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 118.676439][ T6870] netlink: 56 bytes leftover after parsing attributes in process `syz.2.311'. [ 118.888870][ T6879] xt_hashlimit: size too large, truncated to 1048576 [ 118.953044][ T6884] xt_hashlimit: size too large, truncated to 1048576 [ 119.984592][ T6902] netlink: 'syz.2.321': attribute type 39 has an invalid length. [ 120.571073][ T6929] lo speed is unknown, defaulting to 1000 [ 120.583212][ T6929] lo speed is unknown, defaulting to 1000 [ 120.592208][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 120.601421][ T2149] IPVS: starting estimator thread 0... [ 120.609375][ T6929] lo speed is unknown, defaulting to 1000 [ 120.687991][ T6929] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.697337][ T6934] IPVS: using max 19 ests per chain, 45600 per kthread [ 120.802026][ T6929] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 120.831050][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.334'. [ 120.843147][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 120.858638][ T6945] netlink: 'syz.3.335': attribute type 10 has an invalid length. [ 120.859607][ T6943] rdma_op ffff88805ae029f0 conn xmit_rdma 0000000000000000 [ 120.940247][ T6929] lo speed is unknown, defaulting to 1000 [ 120.967916][ T6929] lo speed is unknown, defaulting to 1000 [ 120.978805][ T6929] lo speed is unknown, defaulting to 1000 [ 120.998540][ T6929] lo speed is unknown, defaulting to 1000 [ 121.010694][ T6929] lo speed is unknown, defaulting to 1000 [ 121.037550][ T6950] tipc: Enabling of bearer rejected, failed to enable media [ 121.144247][ T6954] ipt_ECN: cannot use operation on non-tcp rule [ 121.175200][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 121.225543][ T6956] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.285401][ T6956] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.410795][ T6956] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.444578][ T6956] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.477303][ T6971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.345'. [ 121.740448][ T6980] xt_l2tp: unknown flags: 10 [ 121.848002][ T6982] lo speed is unknown, defaulting to 1000 [ 122.717447][ T7013] xt_TCPMSS: Only works on TCP SYN packets [ 122.805183][ T7020] xt_recent: Unsupported userspace flags (00000042) [ 123.189955][ T7040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 123.497825][ T7034] lo speed is unknown, defaulting to 1000 [ 123.836572][ T7064] __nla_validate_parse: 2 callbacks suppressed [ 123.836596][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.372'. [ 123.882924][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 123.921755][ T7068] FAULT_INJECTION: forcing a failure. [ 123.921755][ T7068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.971161][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.0.374 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 123.971190][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.971203][ T7068] Call Trace: [ 123.971209][ T7068] [ 123.971218][ T7068] dump_stack_lvl+0x241/0x360 [ 123.971253][ T7068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.971276][ T7068] ? __pfx__printk+0x10/0x10 [ 123.971299][ T7068] ? __pfx_lock_release+0x10/0x10 [ 123.971337][ T7068] should_fail_ex+0x40a/0x550 [ 123.971373][ T7068] _copy_from_user+0x2d/0xb0 [ 123.971420][ T7068] copy_msghdr_from_user+0xae/0x680 [ 123.971452][ T7068] ? __pfx___might_resched+0x10/0x10 [ 123.971483][ T7068] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.971520][ T7068] ? __sys_sendmmsg+0x392/0x720 [ 123.971546][ T7068] ? __might_fault+0xaa/0x120 [ 123.971584][ T7068] __sys_sendmmsg+0x32b/0x720 [ 123.971628][ T7068] ? __pfx___sys_sendmmsg+0x10/0x10 [ 123.971666][ T7068] ? __pfx_lock_release+0x10/0x10 [ 123.971694][ T7068] ? kstrtouint_from_user+0x128/0x190 [ 123.971740][ T7068] ? ksys_write+0x22a/0x2b0 [ 123.971762][ T7068] ? __pfx_lock_release+0x10/0x10 [ 123.971817][ T7068] ? sb_end_write+0xe9/0x1c0 [ 123.971848][ T7068] ? vfs_write+0x7fa/0xd10 [ 123.971873][ T7068] ? __mutex_unlock_slowpath+0x227/0x800 [ 123.971932][ T7068] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 123.971967][ T7068] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.972000][ T7068] ? do_syscall_64+0x100/0x230 [ 123.972036][ T7068] __x64_sys_sendmmsg+0xa0/0xb0 [ 123.972064][ T7068] do_syscall_64+0xf3/0x230 [ 123.972095][ T7068] ? clear_bhb_loop+0x35/0x90 [ 123.972140][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.972168][ T7068] RIP: 0033:0x7f687a98d169 [ 123.972185][ T7068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.972206][ T7068] RSP: 002b:00007f687a7f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.972227][ T7068] RAX: ffffffffffffffda RBX: 00007f687aba5fa0 RCX: 00007f687a98d169 [ 123.972241][ T7068] RDX: 0000000004000070 RSI: 0000200000003b80 RDI: 0000000000000005 [ 123.972254][ T7068] RBP: 00007f687a7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 123.972265][ T7068] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 123.972277][ T7068] R13: 0000000000000000 R14: 00007f687aba5fa0 R15: 00007ffce23af088 [ 123.972303][ T7068] [ 124.234499][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 124.259763][ T7064] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 124.478357][ T7078] syz_tun: entered promiscuous mode [ 124.508723][ T7078] vlan2: entered promiscuous mode [ 124.651776][ T7087] lo speed is unknown, defaulting to 1000 [ 124.890639][ T7099] vlan2: entered allmulticast mode [ 124.907418][ T7099] macvlan0: entered allmulticast mode [ 125.029923][ T7087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.380'. [ 125.306470][ T7109] sctp: [Deprecated]: syz.2.388 (pid 7109) Use of int in max_burst socket option. [ 125.306470][ T7109] Use struct sctp_assoc_value instead [ 125.403527][ T7113] xt_l2tp: unknown flags: 10 [ 125.436834][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 125.899305][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802332c000: rx timeout, send abort [ 125.956612][ T7133] netlink: 'syz.2.398': attribute type 21 has an invalid length. [ 126.269214][ T7139] lo speed is unknown, defaulting to 1000 [ 126.408921][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802332c000: abort rx timeout. Force session deactivation [ 126.515016][ T7153] netlink: 68 bytes leftover after parsing attributes in process `syz.4.405'. [ 126.817552][ T7163] ipt_ECN: cannot use operation on non-tcp rule [ 126.851542][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 127.571268][ T7177] xt_bpf: check failed: parse error [ 127.796551][ T7185] netlink: 'syz.4.419': attribute type 10 has an invalid length. [ 128.017853][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 128.143389][ T7195] netlink: 'syz.2.423': attribute type 11 has an invalid length. [ 128.221164][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 128.244666][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 129.176621][ T7237] __nla_validate_parse: 4 callbacks suppressed [ 129.176641][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'. [ 129.193853][ T7237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.440'. [ 129.206093][ T7239] xt_hashlimit: size too large, truncated to 1048576 [ 129.269632][ T7241] xt_hashlimit: size too large, truncated to 1048576 [ 129.476825][ T7244] sctp: [Deprecated]: syz.1.441 (pid 7244) Use of int in max_burst socket option. [ 129.476825][ T7244] Use struct sctp_assoc_value instead [ 129.519946][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 129.669752][ T7249] batadv_slave_1: entered promiscuous mode [ 129.702928][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.444'. [ 129.885976][ T7263] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.979940][ T7264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.989650][ T7268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.451'. [ 130.009699][ T7264] bond0: (slave bond2): Enslaving as an active interface with an up link [ 130.113424][ T7263] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.255293][ T7263] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.339833][ T7277] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.455'. [ 130.356369][ T7277] openvswitch: netlink: Missing key (keys=40, expected=80) [ 130.423071][ T7263] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.458969][ T7281] sctp: [Deprecated]: syz.2.457 (pid 7281) Use of int in max_burst socket option. [ 130.458969][ T7281] Use struct sctp_assoc_value instead [ 130.570525][ T7263] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.649650][ T7263] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.737376][ T7263] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.818727][ T7263] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.960699][ T7306] openvswitch: netlink: Missing valid actions attribute. [ 130.967920][ T7306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.397168][ T7327] sctp: [Deprecated]: syz.3.471 (pid 7327) Use of int in max_burst socket option. [ 131.397168][ T7327] Use struct sctp_assoc_value instead [ 131.459298][ T7332] ipt_ECN: cannot use operation on non-tcp rule [ 131.478283][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 131.526142][ T7335] netlink: 56 bytes leftover after parsing attributes in process `syz.4.474'. [ 131.571029][ T7330] lo speed is unknown, defaulting to 1000 [ 131.753730][ T7343] xt_bpf: check failed: parse error [ 131.759665][ T7342] netlink: 32 bytes leftover after parsing attributes in process `syz.4.476'. [ 131.813896][ T7339] vlan2: entered promiscuous mode [ 131.907256][ T7345] xt_TCPMSS: Only works on TCP SYN packets [ 132.179460][ T7357] netlink: 'syz.2.483': attribute type 10 has an invalid length. [ 132.204463][ T7352] netlink: 'syz.3.482': attribute type 4 has an invalid length. [ 132.217638][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.235145][ T7357] bond0: (slave team0): Enslaving as an active interface with an up link [ 132.419261][ T7362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'. [ 132.433206][ T7362] bridge0: entered promiscuous mode [ 132.439655][ T7362] ip6gretap0: entered promiscuous mode [ 132.458151][ T7362] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 132.735381][ T7372] lo speed is unknown, defaulting to 1000 [ 132.777934][ T7372] lo speed is unknown, defaulting to 1000 [ 132.796535][ T7372] lo speed is unknown, defaulting to 1000 [ 132.850492][ T7372] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 132.936732][ T7378] netlink: 'syz.2.491': attribute type 11 has an invalid length. [ 132.994553][ T7372] lo speed is unknown, defaulting to 1000 [ 133.011416][ T7372] lo speed is unknown, defaulting to 1000 [ 133.022623][ T7372] lo speed is unknown, defaulting to 1000 [ 133.029981][ T7372] lo speed is unknown, defaulting to 1000 [ 133.055176][ T7372] lo speed is unknown, defaulting to 1000 [ 133.163237][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.169756][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.440588][ T7403] xt_hashlimit: size too large, truncated to 1048576 [ 133.484051][ T7407] xt_hashlimit: size too large, truncated to 1048576 [ 133.933256][ T7428] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 134.150949][ T7439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.370030][ T7428] batadv_slave_1: left promiscuous mode [ 134.488268][ T7428] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.497595][ T7428] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.510121][ T7428] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.519641][ T7428] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.575708][ T7429] __nla_validate_parse: 5 callbacks suppressed [ 134.575729][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.509'. [ 134.631672][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.509'. [ 134.673570][ T7433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.509'. [ 134.675466][ T5883] lo speed is unknown, defaulting to 1000 [ 134.703907][ T7433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.509'. [ 134.789348][ T7446] dccp_v6_rcv: dropped packet with invalid checksum [ 134.901205][ T7448] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.515'. [ 134.939605][ T7448] openvswitch: netlink: Missing key (keys=40, expected=80) [ 135.089537][ T7452] netlink: 42 bytes leftover after parsing attributes in process `syz.3.517'. [ 135.202604][ T7456] netlink: 'syz.0.519': attribute type 5 has an invalid length. [ 135.238324][ T7450] syz_tun: entered promiscuous mode [ 135.262611][ T7450] vlan2: entered promiscuous mode [ 135.401363][ T7459] ipt_ECN: cannot use operation on non-tcp rule [ 135.422208][ T7463] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 135.472511][ T7463] netlink: 'syz.0.522': attribute type 2 has an invalid length. [ 135.482170][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 135.536044][ T7466] netlink: 1188 bytes leftover after parsing attributes in process `syz.3.523'. [ 135.850529][ T7477] lo speed is unknown, defaulting to 1000 [ 135.880793][ T7481] netlink: 'syz.0.528': attribute type 10 has an invalid length. [ 135.898533][ T7477] lo speed is unknown, defaulting to 1000 [ 135.902868][ T7481] netlink: 2 bytes leftover after parsing attributes in process `syz.0.528'. [ 135.931151][ T7481] team0: entered promiscuous mode [ 135.940401][ T7481] team_slave_0: entered promiscuous mode [ 135.955057][ T7481] team_slave_1: entered promiscuous mode [ 135.971609][ T7481] bridge0: port 3(team0) entered blocking state [ 135.986294][ T7481] bridge0: port 3(team0) entered disabled state [ 136.024521][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 136.032165][ T7481] team0: entered allmulticast mode [ 136.044896][ T7481] team_slave_0: entered allmulticast mode [ 136.058564][ T7481] team_slave_1: entered allmulticast mode [ 136.072352][ T7486] xt_recent: Unsupported userspace flags (00000042) [ 136.081311][ T7481] bridge0: port 3(team0) entered blocking state [ 136.087734][ T7481] bridge0: port 3(team0) entered forwarding state [ 136.110246][ T7488] netlink: 'syz.4.531': attribute type 21 has an invalid length. [ 136.166279][ T7489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.530'. [ 136.240621][ T7493] xt_bpf: check failed: parse error [ 136.347277][ T7494] netlink: 'syz.4.533': attribute type 10 has an invalid length. [ 136.607855][ T7502] ipt_ECN: cannot use operation on non-tcp rule [ 138.057229][ T7545] lo speed is unknown, defaulting to 1000 [ 138.070707][ T7545] lo speed is unknown, defaulting to 1000 [ 138.216255][ T7544] lo speed is unknown, defaulting to 1000 [ 138.277992][ T7544] lo speed is unknown, defaulting to 1000 [ 138.491308][ T7567] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 138.585218][ T7567] bond1: entered promiscuous mode [ 138.590641][ T7567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.640215][ T7568] batadv1: entered promiscuous mode [ 138.673416][ T7568] batadv1: entered allmulticast mode [ 138.712620][ T7568] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 138.721412][ T7568] bond1: (slave batadv1): making interface the new active one [ 138.759963][ T7568] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 138.884427][ T7623] xt_l2tp: unknown flags: 10 [ 139.233757][ T7628] 8021q: VLANs not supported on ip6gre0 [ 139.661126][ T7642] vlan2: entered allmulticast mode [ 139.686445][ T7642] macvlan0: entered allmulticast mode [ 139.787661][ T7644] lo speed is unknown, defaulting to 1000 [ 139.824786][ T7644] lo speed is unknown, defaulting to 1000 [ 140.131779][ T7673] xt_TCPMSS: Only works on TCP SYN packets [ 140.197543][ T7675] xt_recent: Unsupported userspace flags (00000042) [ 140.325920][ T7681] netlink: 'syz.4.583': attribute type 21 has an invalid length. [ 140.449243][ T7684] openvswitch: netlink: Tunnel attr 208 out of range max 16 [ 140.519986][ T7688] sctp: [Deprecated]: syz.1.585 (pid 7688) Use of int in max_burst socket option. [ 140.519986][ T7688] Use struct sctp_assoc_value instead [ 140.652887][ T7690] __nla_validate_parse: 7 callbacks suppressed [ 140.652907][ T7690] netlink: 40 bytes leftover after parsing attributes in process `syz.4.586'. [ 140.772149][ T7693] tipc: Enabling of bearer rejected, failed to enable media [ 140.968268][ T7701] xt_TCPMSS: Only works on TCP SYN packets [ 141.346635][ T7719] sctp: [Deprecated]: syz.2.597 (pid 7719) Use of int in max_burst socket option. [ 141.346635][ T7719] Use struct sctp_assoc_value instead [ 141.592170][ T7726] netlink: 'syz.3.598': attribute type 9 has an invalid length. [ 141.604805][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 141.621059][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.598'. [ 141.631493][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 141.637804][ T7729] bridge0: entered promiscuous mode [ 141.671203][ T7729] ip6gretap0: entered promiscuous mode [ 141.694975][ T7729] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 141.713285][ T7729] Cannot create hsr debugfs directory [ 141.729503][ T7729] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 141.755169][ T7729] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 141.865499][ T7726] lo speed is unknown, defaulting to 1000 [ 141.872478][ T7726] lo speed is unknown, defaulting to 1000 [ 142.252429][ T7754] lo speed is unknown, defaulting to 1000 [ 142.288053][ T7754] lo speed is unknown, defaulting to 1000 [ 142.335599][ T7762] bond0: (slave team0): Releasing backup interface [ 142.371251][ T7762] bridge_slave_0: left allmulticast mode [ 142.398671][ T7762] bridge_slave_0: left promiscuous mode [ 142.427425][ T7762] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.441147][ T7762] bridge_slave_1: left allmulticast mode [ 142.448536][ T7762] bridge_slave_1: left promiscuous mode [ 142.455725][ T7762] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.470955][ T7762] bond0: (slave bond_slave_0): Releasing backup interface [ 142.526278][ T7762] bond0: (slave bond_slave_1): Releasing backup interface [ 142.547063][ T7766] xt_hashlimit: invalid rate [ 142.593415][ T7762] team0: Failed to send options change via netlink (err -105) [ 142.620711][ T7762] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 142.646210][ T7762] team0: Port device team_slave_0 removed [ 142.678745][ T7762] team0: Failed to send options change via netlink (err -105) [ 142.707425][ T7762] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 142.730314][ T7762] team0: Port device team_slave_1 removed [ 142.740750][ T7762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.767462][ T7762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.779951][ T7762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.806248][ T6790] lo speed is unknown, defaulting to 1000 [ 143.007683][ T7747] IPVS: length: 78 != 8 [ 143.256430][ T7781] FAULT_INJECTION: forcing a failure. [ 143.256430][ T7781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.306470][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.4.619 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 143.306503][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.306515][ T7781] Call Trace: [ 143.306522][ T7781] [ 143.306531][ T7781] dump_stack_lvl+0x241/0x360 [ 143.306568][ T7781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.306590][ T7781] ? __pfx__printk+0x10/0x10 [ 143.306612][ T7781] ? __pfx_lock_release+0x10/0x10 [ 143.306653][ T7781] should_fail_ex+0x40a/0x550 [ 143.306688][ T7781] _copy_from_user+0x2d/0xb0 [ 143.306717][ T7781] copy_msghdr_from_user+0xae/0x680 [ 143.306749][ T7781] ? __pfx___might_resched+0x10/0x10 [ 143.306779][ T7781] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 143.306817][ T7781] ? __sys_sendmmsg+0x392/0x720 [ 143.306841][ T7781] ? __might_fault+0xaa/0x120 [ 143.306867][ T7781] __sys_sendmmsg+0x32b/0x720 [ 143.306903][ T7781] ? __pfx___sys_sendmmsg+0x10/0x10 [ 143.306941][ T7781] ? __pfx_lock_release+0x10/0x10 [ 143.306971][ T7781] ? kstrtouint_from_user+0x128/0x190 [ 143.307018][ T7781] ? ksys_write+0x22a/0x2b0 [ 143.307041][ T7781] ? __pfx_lock_release+0x10/0x10 [ 143.307077][ T7781] ? sb_end_write+0xe9/0x1c0 [ 143.307105][ T7781] ? vfs_write+0x7fa/0xd10 [ 143.307129][ T7781] ? __mutex_unlock_slowpath+0x227/0x800 [ 143.307187][ T7781] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.307221][ T7781] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.307255][ T7781] ? do_syscall_64+0x100/0x230 [ 143.307289][ T7781] __x64_sys_sendmmsg+0xa0/0xb0 [ 143.307317][ T7781] do_syscall_64+0xf3/0x230 [ 143.307348][ T7781] ? clear_bhb_loop+0x35/0x90 [ 143.307382][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.307410][ T7781] RIP: 0033:0x7f2e9758d169 [ 143.307428][ T7781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.307444][ T7781] RSP: 002b:00007f2e98377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.307466][ T7781] RAX: ffffffffffffffda RBX: 00007f2e977a5fa0 RCX: 00007f2e9758d169 [ 143.307480][ T7781] RDX: 0000000004000070 RSI: 0000200000003b80 RDI: 0000000000000005 [ 143.307499][ T7781] RBP: 00007f2e98377090 R08: 0000000000000000 R09: 0000000000000000 [ 143.307531][ T7781] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 143.307549][ T7781] R13: 0000000000000000 R14: 00007f2e977a5fa0 R15: 00007fff639eae38 [ 143.307577][ T7781] [ 143.818275][ T7794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.623'. [ 143.894052][ T7794] gretap0: entered promiscuous mode [ 143.902069][ T7794] gretap0: left promiscuous mode [ 144.032126][ T7799] netlink: 'syz.0.628': attribute type 4 has an invalid length. [ 144.045149][ T7797] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 144.080426][ T7797] netlink: 'syz.2.626': attribute type 2 has an invalid length. [ 144.129499][ T7803] xt_recent: Unsupported userspace flags (00000042) [ 144.322128][ T7808] syzkaller0: entered promiscuous mode [ 144.333837][ T7808] syzkaller0: entered allmulticast mode [ 144.587180][ T7816] tipc: Started in network mode [ 144.592546][ T7820] netlink: 'syz.2.636': attribute type 10 has an invalid length. [ 144.602978][ T7816] tipc: Node identity fee00000000000000079940000000001, cluster identity 4711 [ 144.622763][ T7816] tipc: Enabling of bearer rejected, failed to enable media [ 144.640937][ T7820] netlink: 2 bytes leftover after parsing attributes in process `syz.2.636'. [ 144.653226][ T7819] lo speed is unknown, defaulting to 1000 [ 144.660113][ T7819] lo speed is unknown, defaulting to 1000 [ 144.687980][ T7820] team0: entered promiscuous mode [ 144.698817][ T7820] team_slave_0: entered promiscuous mode [ 144.707845][ T7820] team_slave_1: entered promiscuous mode [ 144.720228][ T7820] bond0: (slave team0): Releasing backup interface [ 144.778206][ T7820] bridge0: port 3(team0) entered blocking state [ 144.785970][ T7820] bridge0: port 3(team0) entered disabled state [ 144.800779][ T7820] team0: entered allmulticast mode [ 144.811911][ T7820] team_slave_0: entered allmulticast mode [ 144.825579][ T7820] team_slave_1: entered allmulticast mode [ 145.724419][ T7848] netlink: 180 bytes leftover after parsing attributes in process `syz.2.644'. [ 145.736616][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.644'. [ 145.772839][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 145.800927][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 145.874905][ T7855] netlink: 'syz.3.647': attribute type 9 has an invalid length. [ 146.014979][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 146.065793][ T7853] netlink: 'syz.2.644': attribute type 4 has an invalid length. [ 146.245370][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 146.266991][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 146.308640][ T7874] netlink: 'syz.2.652': attribute type 11 has an invalid length. [ 146.351081][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 146.703119][ T7872] vlan2: entered promiscuous mode [ 146.892101][ T7879] ipt_ECN: cannot use operation on non-tcp rule [ 146.902504][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 147.046944][ T7882] netlink: 68 bytes leftover after parsing attributes in process `syz.0.657'. [ 147.156543][ T7884] netlink: 'syz.2.656': attribute type 10 has an invalid length. [ 147.242833][ T7888] netlink: 'syz.4.655': attribute type 10 has an invalid length. [ 147.270911][ T7888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.280879][ T7885] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 147.311948][ T7888] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 147.368995][ T7891] lo speed is unknown, defaulting to 1000 [ 147.393988][ T7891] lo speed is unknown, defaulting to 1000 [ 147.623600][ T7885] gretap0: entered promiscuous mode [ 148.057150][ T7911] tipc: Started in network mode [ 148.062116][ T7911] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 148.086989][ T7911] tipc: Enabling of bearer rejected, failed to enable media [ 148.463803][ T7925] netlink: 'syz.1.668': attribute type 10 has an invalid length. [ 148.534770][ T7927] ipt_ECN: cannot use operation on non-tcp rule [ 148.780137][ T7932] vlan2: entered allmulticast mode [ 148.857716][ T7932] macvlan0: entered allmulticast mode [ 148.879322][ T7932] veth1_vlan: entered allmulticast mode [ 149.424676][ T7942] netlink: 'syz.1.674': attribute type 21 has an invalid length. [ 149.704533][ T7930] syz.3.670: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.752919][ T7930] CPU: 0 UID: 0 PID: 7930 Comm: syz.3.670 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 149.752952][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.752964][ T7930] Call Trace: [ 149.752971][ T7930] [ 149.752980][ T7930] dump_stack_lvl+0x241/0x360 [ 149.753013][ T7930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.753038][ T7930] ? __pfx__printk+0x10/0x10 [ 149.753071][ T7930] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 149.753099][ T7930] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 149.753130][ T7930] warn_alloc+0x278/0x410 [ 149.753157][ T7930] ? __pfx_warn_alloc+0x10/0x10 [ 149.753186][ T7930] ? hash_mac_create+0x312/0xf00 [ 149.753212][ T7930] ? __get_vm_area_node+0x1c8/0x2d0 [ 149.753243][ T7930] ? __get_vm_area_node+0x25c/0x2d0 [ 149.753282][ T7930] __vmalloc_node_range_noprof+0x62f/0x1380 [ 149.753330][ T7930] ? rcu_is_watching+0x15/0xb0 [ 149.753352][ T7930] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.753374][ T7930] ? rcu_is_watching+0x15/0xb0 [ 149.753397][ T7930] ? trace_kmalloc+0x1f/0xd0 [ 149.753423][ T7930] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 149.753451][ T7930] ? __kvmalloc_node_noprof+0x72/0x190 [ 149.753487][ T7930] __kvmalloc_node_noprof+0x142/0x190 [ 149.753520][ T7930] ? hash_mac_create+0x312/0xf00 [ 149.753549][ T7930] hash_mac_create+0x312/0xf00 [ 149.753581][ T7930] ? __nla_parse+0x40/0x60 [ 149.753606][ T7930] ? __pfx_hash_mac_create+0x10/0x10 [ 149.753634][ T7930] ip_set_create+0xa78/0x1960 [ 149.753664][ T7930] ? ip_set_create+0x48a/0x1960 [ 149.753694][ T7930] ? __pfx_ip_set_create+0x10/0x10 [ 149.753751][ T7930] ? nfnetlink_rcv_msg+0x225/0x1180 [ 149.753777][ T7930] nfnetlink_rcv_msg+0xbec/0x1180 [ 149.753822][ T7930] ? nfnetlink_rcv_msg+0x225/0x1180 [ 149.753871][ T7930] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 149.753895][ T7930] ? stack_trace_save+0x118/0x1d0 [ 149.753946][ T7930] ? dev_hard_start_xmit+0x27a/0x7d0 [ 149.753985][ T7930] ? __dev_queue_xmit+0x1b73/0x3f40 [ 149.754012][ T7930] ? __netlink_deliver_tap+0x561/0x7f0 [ 149.754044][ T7930] ? netlink_deliver_tap+0x19d/0x1b0 [ 149.754080][ T7930] ? netlink_unicast+0x7c4/0x990 [ 149.754112][ T7930] ? netlink_sendmsg+0x8de/0xcb0 [ 149.754130][ T7930] ? __sock_sendmsg+0x221/0x270 [ 149.754160][ T7930] ? ____sys_sendmsg+0x53a/0x860 [ 149.754183][ T7930] ? __sys_sendmsg+0x269/0x350 [ 149.754224][ T7930] netlink_rcv_skb+0x206/0x480 [ 149.754258][ T7930] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 149.754287][ T7930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.754335][ T7930] ? apparmor_capable+0x13b/0x1b0 [ 149.754363][ T7930] ? bpf_lsm_capable+0x9/0x10 [ 149.754394][ T7930] ? security_capable+0x7e/0x2d0 [ 149.754434][ T7930] nfnetlink_rcv+0x297/0x2ab0 [ 149.754465][ T7930] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 149.754498][ T7930] ? __dev_queue_xmit+0x2f4/0x3f40 [ 149.754528][ T7930] ? __dev_queue_xmit+0x1775/0x3f40 [ 149.754556][ T7930] ? kasan_save_track+0x51/0x80 [ 149.754586][ T7930] ? ____sys_sendmsg+0x53a/0x860 [ 149.754615][ T7930] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 149.754640][ T7930] ? __dev_queue_xmit+0x2f4/0x3f40 [ 149.754672][ T7930] ? __pfx___dev_queue_xmit+0x10/0x10 [ 149.754716][ T7930] ? ref_tracker_free+0x643/0x7e0 [ 149.754739][ T7930] ? __asan_memcpy+0x40/0x70 [ 149.754759][ T7930] ? __pfx_ref_tracker_free+0x10/0x10 [ 149.754778][ T7930] ? __skb_clone+0x5c/0x6c0 [ 149.754819][ T7930] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.754851][ T7930] ? skb_clone+0x240/0x390 [ 149.754878][ T7930] ? __pfx_lock_release+0x10/0x10 [ 149.754912][ T7930] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 149.754957][ T7930] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.754993][ T7930] netlink_unicast+0x7f6/0x990 [ 149.755032][ T7930] ? __pfx_netlink_unicast+0x10/0x10 [ 149.755060][ T7930] ? __virt_addr_valid+0x45f/0x530 [ 149.755088][ T7930] ? __phys_addr_symbol+0x2f/0x70 [ 149.755107][ T7930] ? __check_object_size+0x47a/0x730 [ 149.755152][ T7930] netlink_sendmsg+0x8de/0xcb0 [ 149.755184][ T7930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.755209][ T7930] ? aa_sock_msg_perm+0x91/0x160 [ 149.755248][ T7930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.755267][ T7930] __sock_sendmsg+0x221/0x270 [ 149.755301][ T7930] ____sys_sendmsg+0x53a/0x860 [ 149.755335][ T7930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.755359][ T7930] ? __fget_files+0x2a/0x410 [ 149.755392][ T7930] ? __fget_files+0x2a/0x410 [ 149.755431][ T7930] __sys_sendmsg+0x269/0x350 [ 149.755462][ T7930] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.755531][ T7930] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.755565][ T7930] ? do_syscall_64+0x100/0x230 [ 149.755599][ T7930] ? do_syscall_64+0xb6/0x230 [ 149.755632][ T7930] do_syscall_64+0xf3/0x230 [ 149.755662][ T7930] ? clear_bhb_loop+0x35/0x90 [ 149.755695][ T7930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.755724][ T7930] RIP: 0033:0x7f278db8d169 [ 149.755742][ T7930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.755759][ T7930] RSP: 002b:00007f278e9bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.755783][ T7930] RAX: ffffffffffffffda RBX: 00007f278dda5fa0 RCX: 00007f278db8d169 [ 149.755797][ T7930] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 149.755810][ T7930] RBP: 00007f278dc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 149.755822][ T7930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.755833][ T7930] R13: 0000000000000000 R14: 00007f278dda5fa0 R15: 00007ffe9486c538 [ 149.755862][ T7930] [ 149.756051][ T7930] Mem-Info: [ 150.342943][ T7930] active_anon:4014 inactive_anon:0 isolated_anon:0 [ 150.342943][ T7930] active_file:1612 inactive_file:38329 isolated_file:0 [ 150.342943][ T7930] unevictable:768 dirty:205 writeback:0 [ 150.342943][ T7930] slab_reclaimable:10345 slab_unreclaimable:106072 [ 150.342943][ T7930] mapped:29658 shmem:1431 pagetables:902 [ 150.342943][ T7930] sec_pagetables:0 bounce:0 [ 150.342943][ T7930] kernel_misc_reclaimable:0 [ 150.342943][ T7930] free:1330406 free_pcp:646 free_cma:0 [ 150.432710][ T7930] Node 0 active_anon:16056kB inactive_anon:0kB active_file:6448kB inactive_file:153240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118632kB dirty:816kB writeback:0kB shmem:4188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12980kB pagetables:3108kB sec_pagetables:0kB all_unreclaimable? no [ 150.468118][ T7930] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 150.499022][ T7930] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.533873][ T7930] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 150.539744][ T7930] Node 0 DMA32 free:1401716kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:15916kB inactive_anon:0kB active_file:6448kB inactive_file:152924kB unevictable:1536kB writepending:816kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:2160kB local_pcp:992kB free_cma:0kB [ 150.582906][ T7930] lowmem_reserve[]: 0 0 0 0 0 [ 150.587937][ T7930] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 150.624884][ T7930] lowmem_reserve[]: 0 0 0 0 0 [ 150.629705][ T7930] Node 1 Normal free:3905792kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.668226][ T7930] lowmem_reserve[]: 0 0 0 0 0 [ 150.677421][ T7930] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.776425][ T7930] Node 0 DMA32: 340*4kB (UME) 181*8kB (UME) 353*16kB (UME) 847*32kB (UME) 754*64kB (UME) 113*128kB (UME) 36*256kB (UM) 24*512kB (UME) 10*1024kB (UM) 11*2048kB (UM) 305*4096kB (UM) = 1401832kB [ 150.867886][ T7930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 150.906079][ T7930] Node 1 Normal: 222*4kB (UM) 47*8kB (UME) 37*16kB (UME) 216*32kB (UME) 95*64kB (UME) 28*128kB (UME) 15*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (UM) = 3905792kB [ 150.932760][ T7930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.942418][ T7930] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.986643][ T7930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.003724][ T7930] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.017959][ T7930] 41372 total pagecache pages [ 151.022881][ T7930] 0 pages in swap cache [ 151.027072][ T7930] Free swap = 124996kB [ 151.031253][ T7930] Total swap = 124996kB [ 151.035575][ T7930] 2097051 pages RAM [ 151.039460][ T7930] 0 pages HighMem/MovableOnly [ 151.065199][ T7930] 427906 pages reserved [ 151.069531][ T7930] 0 pages cma reserved [ 151.115003][ T7978] netlink: 'syz.2.690': attribute type 11 has an invalid length. [ 151.592279][ T7999] netlink: 'syz.4.698': attribute type 6 has an invalid length. [ 151.653522][ T8001] netlink: 'syz.2.699': attribute type 1 has an invalid length. [ 151.665396][ T8001] netlink: 'syz.2.699': attribute type 2 has an invalid length. [ 151.680849][ T7995] lo speed is unknown, defaulting to 1000 [ 151.719522][ T7995] lo speed is unknown, defaulting to 1000 [ 151.782952][ T8004] __nla_validate_parse: 5 callbacks suppressed [ 151.782975][ T8004] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.700'. [ 151.833105][ T8004] openvswitch: netlink: Missing key (keys=40, expected=80) [ 151.949507][ T8010] xt_TCPMSS: Only works on TCP SYN packets [ 152.140001][ T8012] syz_tun: entered allmulticast mode [ 152.162931][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 152.179699][ T8016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.705'. [ 152.459291][ T8022] xt_bpf: check failed: parse error [ 152.508947][ T8011] syz_tun: left allmulticast mode [ 152.592161][ T8027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.707'. [ 152.768645][ T7604] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.777313][ T7604] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.792940][ T2149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.824911][ T8030] tipc: Enabling of bearer rejected, failed to enable media [ 152.890409][ T8035] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 1, id = 0 [ 152.988718][ T8037] openvswitch: netlink: nsh attribute has 30944 unknown bytes. [ 152.996701][ T8037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.063053][ T2149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.562879][ T2149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.727964][ T8055] netlink: 168 bytes leftover after parsing attributes in process `syz.4.719'. [ 154.156562][ T7919] Set syz1 is full, maxelem 65536 reached [ 154.320955][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 154.372894][ T8063] netlink: 'syz.0.722': attribute type 10 has an invalid length. [ 154.380688][ T8063] netlink: 2 bytes leftover after parsing attributes in process `syz.0.722'. [ 154.510562][ T8069] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 154.606726][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.723'. [ 154.796504][ T8083] vlan2: entered promiscuous mode [ 155.172798][ T5883] IPVS: starting estimator thread 0... [ 155.174692][ T8101] veth1_vlan: left allmulticast mode [ 155.222626][ T8101] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 155.249499][ T8101] netlink: 'syz.1.738': attribute type 2 has an invalid length. [ 155.264709][ T8104] IPVS: using max 22 ests per chain, 52800 per kthread [ 155.319729][ T8109] FAULT_INJECTION: forcing a failure. [ 155.319729][ T8109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.346779][ T8109] CPU: 0 UID: 0 PID: 8109 Comm: syz.2.741 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 155.346820][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.346836][ T8109] Call Trace: [ 155.346847][ T8109] [ 155.346859][ T8109] dump_stack_lvl+0x241/0x360 [ 155.346905][ T8109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.346942][ T8109] ? __pfx__printk+0x10/0x10 [ 155.346964][ T8109] ? __pfx_lock_release+0x10/0x10 [ 155.347003][ T8109] should_fail_ex+0x40a/0x550 [ 155.347040][ T8109] _copy_from_user+0x2d/0xb0 [ 155.347069][ T8109] copy_msghdr_from_user+0xae/0x680 [ 155.347100][ T8109] ? __pfx___might_resched+0x10/0x10 [ 155.347131][ T8109] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 155.347167][ T8109] ? __sys_sendmmsg+0x392/0x720 [ 155.347193][ T8109] ? __might_fault+0xaa/0x120 [ 155.347219][ T8109] __sys_sendmmsg+0x32b/0x720 [ 155.347255][ T8109] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.347293][ T8109] ? __pfx_lock_release+0x10/0x10 [ 155.347322][ T8109] ? kstrtouint_from_user+0x128/0x190 [ 155.347369][ T8109] ? ksys_write+0x22a/0x2b0 [ 155.347392][ T8109] ? __pfx_lock_release+0x10/0x10 [ 155.347430][ T8109] ? sb_end_write+0xe9/0x1c0 [ 155.347472][ T8109] ? vfs_write+0x7fa/0xd10 [ 155.347496][ T8109] ? __mutex_unlock_slowpath+0x227/0x800 [ 155.347565][ T8109] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.347598][ T8109] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.347630][ T8109] ? do_syscall_64+0x100/0x230 [ 155.347664][ T8109] __x64_sys_sendmmsg+0xa0/0xb0 [ 155.347691][ T8109] do_syscall_64+0xf3/0x230 [ 155.347721][ T8109] ? clear_bhb_loop+0x35/0x90 [ 155.347753][ T8109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.347780][ T8109] RIP: 0033:0x7f7c7598d169 [ 155.347797][ T8109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.347813][ T8109] RSP: 002b:00007f7c767e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.347835][ T8109] RAX: ffffffffffffffda RBX: 00007f7c75ba5fa0 RCX: 00007f7c7598d169 [ 155.347849][ T8109] RDX: 0000000004000070 RSI: 0000200000003b80 RDI: 0000000000000005 [ 155.347861][ T8109] RBP: 00007f7c767e4090 R08: 0000000000000000 R09: 0000000000000000 [ 155.347873][ T8109] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 155.347884][ T8109] R13: 0000000000000000 R14: 00007f7c75ba5fa0 R15: 00007ffe27c13828 [ 155.347913][ T8109] [ 155.643383][ T8116] syzkaller0: entered promiscuous mode [ 155.652782][ T8116] syzkaller0: entered allmulticast mode [ 155.715045][ T8118] netlink: 56 bytes leftover after parsing attributes in process `syz.3.745'. [ 155.759016][ T8123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.747'. [ 155.772357][ T8123] gretap0: entered promiscuous mode [ 155.781130][ T8123] gretap0: left promiscuous mode [ 155.827094][ T8128] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 0 [ 155.838906][ T8127] xt_bpf: check failed: parse error [ 155.987598][ T8132] vlan2: entered promiscuous mode [ 156.120490][ T8144] netlink: 'syz.3.755': attribute type 10 has an invalid length. [ 156.323710][ T8149] netlink: 'syz.0.756': attribute type 9 has an invalid length. [ 156.341689][ T8149] netlink: 'syz.0.756': attribute type 6 has an invalid length. [ 156.372200][ T8149] netlink: 'syz.0.756': attribute type 7 has an invalid length. [ 156.410722][ T8149] netlink: 'syz.0.756': attribute type 8 has an invalid length. [ 156.451778][ T8160] openvswitch: netlink: Missing valid actions attribute. [ 156.483264][ T8160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.600322][ T8167] xt_TCPMSS: Only works on TCP SYN packets [ 156.617682][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.659285][ T8166] bridge_slave_1 (unregistering): left allmulticast mode [ 156.666765][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.685999][ T8166] bridge_slave_1 (unregistering): left promiscuous mode [ 156.704643][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.712363][ T8174] xt_hashlimit: size too large, truncated to 1048576 [ 156.773793][ T8177] xt_hashlimit: size too large, truncated to 1048576 [ 157.281107][ T8186] __nla_validate_parse: 3 callbacks suppressed [ 157.281127][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 157.347747][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.770'. [ 157.520577][ T8198] netlink: 180 bytes leftover after parsing attributes in process `syz.4.771'. [ 157.532192][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.771'. [ 157.549955][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.771'. [ 157.559820][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.771'. [ 157.593384][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 157.609187][ T8199] siw: device registration error -23 [ 157.660665][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 157.732477][ T8206] netlink: 168 bytes leftover after parsing attributes in process `syz.0.769'. [ 158.059017][ T8212] vlan2: entered promiscuous mode [ 158.070884][ T8212] syz_tun: entered promiscuous mode [ 158.328332][ T8220] xt_l2tp: unknown flags: 10 [ 158.401010][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.781'. [ 158.458763][ T8223] bridge0: entered promiscuous mode [ 158.499014][ T8223] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 158.508519][ T8223] Cannot create hsr debugfs directory [ 158.514555][ T8223] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 158.684312][ T8234] xt_bpf: check failed: parse error [ 158.720779][ T8238] netlink: 'syz.2.788': attribute type 1 has an invalid length. [ 158.854726][ T8242] FAULT_INJECTION: forcing a failure. [ 158.854726][ T8242] name failslab, interval 1, probability 0, space 0, times 0 [ 158.881175][ T8245] tipc: Enabling of bearer rejected, failed to enable media [ 158.897633][ T8242] CPU: 0 UID: 0 PID: 8242 Comm: syz.3.791 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 158.897663][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.897675][ T8242] Call Trace: [ 158.897682][ T8242] [ 158.897690][ T8242] dump_stack_lvl+0x241/0x360 [ 158.897721][ T8242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.897762][ T8242] ? __pfx__printk+0x10/0x10 [ 158.897786][ T8242] ? __kmalloc_noprof+0xb5/0x4c0 [ 158.897815][ T8242] ? __pfx___might_resched+0x10/0x10 [ 158.897850][ T8242] should_fail_ex+0x40a/0x550 [ 158.897887][ T8242] should_failslab+0xac/0x100 [ 158.897917][ T8242] __kmalloc_noprof+0xdd/0x4c0 [ 158.897946][ T8242] ? nla_strdup+0x9c/0x140 [ 158.897966][ T8242] ? __kasan_kmalloc+0x98/0xb0 [ 158.897994][ T8242] nla_strdup+0x9c/0x140 [ 158.898020][ T8242] nf_tables_newtable+0x59b/0x1e10 [ 158.898046][ T8242] ? nfnl_pernet+0x23/0x240 [ 158.898077][ T8242] ? __pfx_nf_tables_newtable+0x10/0x10 [ 158.898107][ T8242] ? __nla_parse+0x40/0x60 [ 158.898135][ T8242] nfnetlink_rcv+0x14e3/0x2ab0 [ 158.898195][ T8242] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 158.898271][ T8242] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.898303][ T8242] ? skb_clone+0x240/0x390 [ 158.898331][ T8242] ? __pfx_lock_release+0x10/0x10 [ 158.898378][ T8242] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.898414][ T8242] netlink_unicast+0x7f6/0x990 [ 158.898452][ T8242] ? __pfx_netlink_unicast+0x10/0x10 [ 158.898497][ T8242] ? __virt_addr_valid+0x45f/0x530 [ 158.898517][ T8242] ? __phys_addr_symbol+0x2f/0x70 [ 158.898536][ T8242] ? __check_object_size+0x47a/0x730 [ 158.898568][ T8242] netlink_sendmsg+0x8de/0xcb0 [ 158.898600][ T8242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.898625][ T8242] ? aa_sock_msg_perm+0x91/0x160 [ 158.898662][ T8242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.898680][ T8242] __sock_sendmsg+0x221/0x270 [ 158.898715][ T8242] ____sys_sendmsg+0x53a/0x860 [ 158.898748][ T8242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.898771][ T8242] ? __fget_files+0x2a/0x410 [ 158.898804][ T8242] ? __fget_files+0x2a/0x410 [ 158.898842][ T8242] __sys_sendmsg+0x269/0x350 [ 158.898872][ T8242] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.898911][ T8242] ? do_sys_openat2+0x17a/0x1d0 [ 158.898967][ T8242] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.898999][ T8242] ? do_syscall_64+0x100/0x230 [ 158.899033][ T8242] ? do_syscall_64+0xb6/0x230 [ 158.899065][ T8242] do_syscall_64+0xf3/0x230 [ 158.899095][ T8242] ? clear_bhb_loop+0x35/0x90 [ 158.899127][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.899153][ T8242] RIP: 0033:0x7f278db8d169 [ 158.899170][ T8242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.899186][ T8242] RSP: 002b:00007f278e9bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.899206][ T8242] RAX: ffffffffffffffda RBX: 00007f278dda5fa0 RCX: 00007f278db8d169 [ 158.899221][ T8242] RDX: 0000000020000040 RSI: 0000200000000080 RDI: 0000000000000003 [ 158.899234][ T8242] RBP: 00007f278e9bc090 R08: 0000000000000000 R09: 0000000000000000 [ 158.899245][ T8242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.899257][ T8242] R13: 0000000000000000 R14: 00007f278dda5fa0 R15: 00007ffe9486c538 [ 158.899286][ T8242] [ 159.962960][ T8268] xt_TCPMSS: Only works on TCP SYN packets [ 160.040232][ T8266] xt_CT: No such helper "snmp" [ 160.389648][ T8278] lo speed is unknown, defaulting to 1000 [ 160.408633][ T8278] lo speed is unknown, defaulting to 1000 [ 160.524075][ T8282] nlmon0: Master is either lo or non-ether device [ 160.714948][ T8293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.955865][ T8301] bond0: (slave batadv0): Releasing backup interface [ 161.023922][ T5883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.398093][ T8317] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 161.499135][ T6790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.799663][ T8328] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 161.920846][ T8334] vlan3: entered promiscuous mode [ 162.008907][ T8338] xt_l2tp: unknown flags: 10 [ 162.502600][ T8347] lo speed is unknown, defaulting to 1000 [ 162.534128][ T8347] lo speed is unknown, defaulting to 1000 [ 162.615442][ T8353] xt_bpf: check failed: parse error [ 162.677620][ T8356] __nla_validate_parse: 15 callbacks suppressed [ 162.677642][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 162.942169][ T8366] netlink: 'syz.4.836': attribute type 21 has an invalid length. [ 163.108694][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 163.130113][ T8372] netlink: 180 bytes leftover after parsing attributes in process `syz.4.839'. [ 163.143093][ T8369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.837'. [ 163.164554][ T8372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.839'. [ 163.179798][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.839'. [ 163.208818][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.839'. [ 163.284241][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 163.846358][ T8399] sit0: entered promiscuous mode [ 163.851506][ T8399] netlink: 'syz.2.851': attribute type 1 has an invalid length. [ 163.868031][ T8399] netlink: 1 bytes leftover after parsing attributes in process `syz.2.851'. [ 163.913882][ T8402] xt_recent: Unsupported userspace flags (00000042) [ 164.055146][ T8409] siw: device registration error -23 [ 164.060834][ T8410] netlink: 56 bytes leftover after parsing attributes in process `syz.4.857'. [ 164.184719][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 164.231077][ T8417] sit0: left promiscuous mode [ 164.270939][ T8417] team0: left allmulticast mode [ 164.297756][ T8417] team_slave_0: left allmulticast mode [ 164.309833][ T8417] team_slave_1: left allmulticast mode [ 164.319009][ T8417] team0: left promiscuous mode [ 164.328142][ T8417] team_slave_0: left promiscuous mode [ 164.345986][ T8417] team_slave_1: left promiscuous mode [ 164.352056][ T8417] bridge0: port 3(team0) entered disabled state [ 164.387534][ T8417] bridge_slave_0: left allmulticast mode [ 164.393804][ T8417] bridge_slave_0: left promiscuous mode [ 164.399871][ T8417] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.420920][ T8417] bridge_slave_1: left allmulticast mode [ 164.431023][ T8417] bridge_slave_1: left promiscuous mode [ 164.443890][ T8417] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.466033][ T8417] bond0: (slave bond_slave_0): Releasing backup interface [ 164.487874][ T8417] bond0: (slave bond_slave_1): Releasing backup interface [ 164.511315][ T8417] team0: Failed to send options change via netlink (err -105) [ 164.519141][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.540905][ T8417] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 164.562756][ T8417] team0: Port device team_slave_0 removed [ 164.607256][ T8417] team0: Failed to send options change via netlink (err -105) [ 164.619157][ T8417] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 164.629244][ T8417] team0: Port device team_slave_1 removed [ 164.637003][ T8417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.645824][ T8417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.659750][ T8417] syzkaller0: left promiscuous mode [ 164.666187][ T8417] syzkaller0: left allmulticast mode [ 164.687700][ T8417] bond1: left promiscuous mode [ 164.702116][ T8439] netlink: 'syz.3.866': attribute type 10 has an invalid length. [ 164.704713][ T8417] batadv1: left promiscuous mode [ 164.719055][ T8417] batadv1: left allmulticast mode [ 164.728611][ T8417] bond1: (slave batadv1): Releasing active interface [ 164.753279][ T8439] team0: entered promiscuous mode [ 164.772882][ T8439] team_slave_0: entered promiscuous mode [ 164.783561][ T8439] team_slave_1: entered promiscuous mode [ 164.801233][ T8439] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.808540][ T8439] bridge0: port 3(team0) entered blocking state [ 164.815386][ T8439] bridge0: port 3(team0) entered disabled state [ 164.822174][ T8439] team0: entered allmulticast mode [ 164.844719][ T8439] team_slave_0: entered allmulticast mode [ 164.851284][ T8439] team_slave_1: entered allmulticast mode [ 164.869145][ T8441] syzkaller0: entered promiscuous mode [ 164.884351][ T8441] syzkaller0: entered allmulticast mode [ 165.232934][ T8455] netlink: 'syz.3.872': attribute type 4 has an invalid length. [ 165.391320][ T8463] lo speed is unknown, defaulting to 1000 [ 165.434362][ T8463] lo speed is unknown, defaulting to 1000 [ 165.453381][ T8472] xt_bpf: check failed: parse error [ 165.628682][ T8475] dccp_v6_rcv: dropped packet with invalid checksum [ 165.800597][ T8481] netlink: 'syz.0.884': attribute type 21 has an invalid length. [ 166.878075][ T8506] netlink: 'syz.0.893': attribute type 10 has an invalid length. [ 167.201401][ T8513] xt_TCPMSS: Only works on TCP SYN packets [ 167.258760][ T8519] Set syz1 is full, maxelem 65536 reached [ 167.491418][ T8525] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 167.798270][ T8535] vlan2: entered promiscuous mode [ 168.245619][ T8539] __nla_validate_parse: 3 callbacks suppressed [ 168.245640][ T8539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.906'. [ 168.395646][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.907'. [ 168.710074][ T8557] netlink: 32 bytes leftover after parsing attributes in process `syz.4.912'. [ 169.211379][ T8571] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 169.229940][ T8571] netlink: 'syz.0.916': attribute type 2 has an invalid length. [ 169.241625][ T8572] dccp_v6_rcv: dropped packet with invalid checksum [ 169.955513][ T8601] netlink: 'syz.0.926': attribute type 10 has an invalid length. [ 170.279129][ T8611] netlink: 'syz.0.930': attribute type 10 has an invalid length. [ 170.295701][ T8611] netlink: 2 bytes leftover after parsing attributes in process `syz.0.930'. [ 170.451090][ T8613] xt_TCPMSS: Only works on TCP SYN packets [ 170.675370][ T8624] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 170.710089][ T8626] netlink: 'syz.3.934': attribute type 2 has an invalid length. [ 171.026433][ T8634] netlink: 56 bytes leftover after parsing attributes in process `syz.0.937'. [ 171.231958][ T8641] netlink: 'syz.1.940': attribute type 10 has an invalid length. [ 171.243001][ T8637] xt_hashlimit: size too large, truncated to 1048576 [ 171.300849][ T8642] xt_hashlimit: size too large, truncated to 1048576 [ 171.786979][ T8659] xt_l2tp: unknown flags: 10 [ 172.317902][ T8675] netlink: 504 bytes leftover after parsing attributes in process `syz.3.949'. [ 172.512554][ T8681] vlan3: entered promiscuous mode [ 172.635202][ T8685] FAULT_INJECTION: forcing a failure. [ 172.635202][ T8685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.660878][ T8685] CPU: 0 UID: 0 PID: 8685 Comm: syz.2.957 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 172.660908][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.660920][ T8685] Call Trace: [ 172.660927][ T8685] [ 172.660935][ T8685] dump_stack_lvl+0x241/0x360 [ 172.660965][ T8685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.660987][ T8685] ? __pfx__printk+0x10/0x10 [ 172.661009][ T8685] ? __pfx_lock_release+0x10/0x10 [ 172.661048][ T8685] should_fail_ex+0x40a/0x550 [ 172.661083][ T8685] _copy_from_iter+0x1df/0x1c40 [ 172.661108][ T8685] ? __virt_addr_valid+0x183/0x530 [ 172.661128][ T8685] ? __pfx_lock_release+0x10/0x10 [ 172.661164][ T8685] ? __alloc_skb+0x28f/0x440 [ 172.661195][ T8685] ? __pfx__copy_from_iter+0x10/0x10 [ 172.661221][ T8685] ? __virt_addr_valid+0x183/0x530 [ 172.661239][ T8685] ? __virt_addr_valid+0x183/0x530 [ 172.661257][ T8685] ? __virt_addr_valid+0x45f/0x530 [ 172.661275][ T8685] ? __phys_addr_symbol+0x2f/0x70 [ 172.661293][ T8685] ? __check_object_size+0x47a/0x730 [ 172.661326][ T8685] netlink_sendmsg+0x742/0xcb0 [ 172.661358][ T8685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.661383][ T8685] ? aa_sock_msg_perm+0x91/0x160 [ 172.661420][ T8685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.661437][ T8685] __sock_sendmsg+0x221/0x270 [ 172.661469][ T8685] ____sys_sendmsg+0x53a/0x860 [ 172.661504][ T8685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.661527][ T8685] ? __fget_files+0x2a/0x410 [ 172.661561][ T8685] ? __fget_files+0x2a/0x410 [ 172.661599][ T8685] __sys_sendmsg+0x269/0x350 [ 172.661630][ T8685] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.661668][ T8685] ? do_sys_openat2+0x17a/0x1d0 [ 172.661723][ T8685] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.661754][ T8685] ? do_syscall_64+0x100/0x230 [ 172.661787][ T8685] ? do_syscall_64+0xb6/0x230 [ 172.661825][ T8685] do_syscall_64+0xf3/0x230 [ 172.661854][ T8685] ? clear_bhb_loop+0x35/0x90 [ 172.661887][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.661915][ T8685] RIP: 0033:0x7f7c7598d169 [ 172.661932][ T8685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.661950][ T8685] RSP: 002b:00007f7c767e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.661973][ T8685] RAX: ffffffffffffffda RBX: 00007f7c75ba5fa0 RCX: 00007f7c7598d169 [ 172.661988][ T8685] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 172.662000][ T8685] RBP: 00007f7c767e4090 R08: 0000000000000000 R09: 0000000000000000 [ 172.662012][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.662023][ T8685] R13: 0000000000000000 R14: 00007f7c75ba5fa0 R15: 00007ffe27c13828 [ 172.662052][ T8685] [ 173.025036][ T8694] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 173.050401][ T8689] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.956'. [ 173.060329][ T8689] openvswitch: netlink: Missing key (keys=40, expected=80) [ 173.108234][ T8697] netlink: 32 bytes leftover after parsing attributes in process `syz.1.958'. [ 173.273243][ T8704] netlink: 180 bytes leftover after parsing attributes in process `syz.2.964'. [ 173.301175][ T8707] lo speed is unknown, defaulting to 1000 [ 173.308178][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'. [ 173.328335][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.964'. [ 173.328783][ T8707] lo speed is unknown, defaulting to 1000 [ 173.340116][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.964'. [ 173.593859][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 173.974958][ T8724] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 175.081886][ T8747] netlink: 32 bytes leftover after parsing attributes in process `syz.4.973'. [ 175.130153][ T8747] FAULT_INJECTION: forcing a failure. [ 175.130153][ T8747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.171580][ T8747] CPU: 0 UID: 0 PID: 8747 Comm: syz.4.973 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 175.171613][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.171626][ T8747] Call Trace: [ 175.171634][ T8747] [ 175.171642][ T8747] dump_stack_lvl+0x241/0x360 [ 175.171674][ T8747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.171697][ T8747] ? __pfx__printk+0x10/0x10 [ 175.171723][ T8747] ? snprintf+0xda/0x120 [ 175.171749][ T8747] should_fail_ex+0x40a/0x550 [ 175.171785][ T8747] _copy_to_user+0x31/0xb0 [ 175.171815][ T8747] simple_read_from_buffer+0xca/0x150 [ 175.171846][ T8747] proc_fail_nth_read+0x1e9/0x250 [ 175.171877][ T8747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.171909][ T8747] ? rw_verify_area+0x243/0x630 [ 175.171929][ T8747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.171960][ T8747] vfs_read+0x1f8/0xb40 [ 175.171983][ T8747] ? fdget_pos+0x254/0x320 [ 175.172013][ T8747] ? __pfx___mutex_lock+0x10/0x10 [ 175.172043][ T8747] ? __pfx_vfs_read+0x10/0x10 [ 175.172061][ T8747] ? do_sys_openat2+0x17a/0x1d0 [ 175.172094][ T8747] ? __fget_files+0x2a/0x410 [ 175.172125][ T8747] ? __fget_files+0x395/0x410 [ 175.172153][ T8747] ? __fget_files+0x2a/0x410 [ 175.172192][ T8747] ksys_read+0x18f/0x2b0 [ 175.172216][ T8747] ? __pfx_ksys_read+0x10/0x10 [ 175.172238][ T8747] ? do_syscall_64+0x100/0x230 [ 175.172271][ T8747] ? do_syscall_64+0xb6/0x230 [ 175.172304][ T8747] do_syscall_64+0xf3/0x230 [ 175.172340][ T8747] ? clear_bhb_loop+0x35/0x90 [ 175.172372][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.172415][ T8747] RIP: 0033:0x7f2e9758bb7c [ 175.172433][ T8747] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 175.172449][ T8747] RSP: 002b:00007f2e98377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.172471][ T8747] RAX: ffffffffffffffda RBX: 00007f2e977a5fa0 RCX: 00007f2e9758bb7c [ 175.172486][ T8747] RDX: 000000000000000f RSI: 00007f2e983770a0 RDI: 0000000000000004 [ 175.172498][ T8747] RBP: 00007f2e98377090 R08: 0000000000000000 R09: 0000000000000000 [ 175.172511][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.172523][ T8747] R13: 0000000000000000 R14: 00007f2e977a5fa0 R15: 00007fff639eae38 [ 175.172552][ T8747] [ 175.453440][ T8750] gretap0: left promiscuous mode [ 175.728206][ T8756] netlink: 'syz.3.975': attribute type 10 has an invalid length. [ 175.764026][ T8757] netlink: 252 bytes leftover after parsing attributes in process `syz.4.976'. [ 175.784813][ T8756] netlink: 2 bytes leftover after parsing attributes in process `syz.3.975'. [ 175.927323][ T8750] batadv_slave_1: left promiscuous mode [ 176.135869][ T8750] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.157391][ T8750] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.166873][ T8750] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.185450][ T8750] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.269663][ T8750] syzkaller0: left promiscuous mode [ 176.282836][ T8750] syzkaller0: left allmulticast mode [ 176.290725][ T5933] lo speed is unknown, defaulting to 1000 [ 176.569397][ T8770] siw: device registration error -23 [ 176.638140][ T8772] ipt_ECN: cannot use operation on non-tcp rule [ 176.667983][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'. [ 177.281364][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 177.635682][ T8810] FAULT_INJECTION: forcing a failure. [ 177.635682][ T8810] name failslab, interval 1, probability 0, space 0, times 0 [ 177.677254][ T8810] CPU: 0 UID: 0 PID: 8810 Comm: syz.2.994 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 177.677288][ T8810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.677301][ T8810] Call Trace: [ 177.677309][ T8810] [ 177.677318][ T8810] dump_stack_lvl+0x241/0x360 [ 177.677353][ T8810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.677378][ T8810] ? __pfx__printk+0x10/0x10 [ 177.677403][ T8810] ? __kmalloc_noprof+0xb5/0x4c0 [ 177.677432][ T8810] ? __pfx___might_resched+0x10/0x10 [ 177.677458][ T8810] ? aa_get_newest_label+0xff/0x6f0 [ 177.677490][ T8810] ? genl_get_cmd+0x19e/0xce0 [ 177.677530][ T8810] should_fail_ex+0x40a/0x550 [ 177.677566][ T8810] should_failslab+0xac/0x100 [ 177.677594][ T8810] __kmalloc_noprof+0xdd/0x4c0 [ 177.677622][ T8810] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 177.677647][ T8810] ? apparmor_capable+0x13b/0x1b0 [ 177.677675][ T8810] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 177.677709][ T8810] genl_rcv_msg+0x80b/0xec0 [ 177.677742][ T8810] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.677795][ T8810] ? __pfx_lock_acquire+0x10/0x10 [ 177.677825][ T8810] ? __pfx_seg6_genl_set_tunsrc+0x10/0x10 [ 177.677851][ T8810] ? __pfx___might_resched+0x10/0x10 [ 177.677898][ T8810] netlink_rcv_skb+0x206/0x480 [ 177.677931][ T8810] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.677957][ T8810] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.678020][ T8810] genl_rcv+0x28/0x40 [ 177.678043][ T8810] netlink_unicast+0x7f6/0x990 [ 177.678081][ T8810] ? __pfx_netlink_unicast+0x10/0x10 [ 177.678108][ T8810] ? __virt_addr_valid+0x45f/0x530 [ 177.678128][ T8810] ? __phys_addr_symbol+0x2f/0x70 [ 177.678147][ T8810] ? __check_object_size+0x47a/0x730 [ 177.678180][ T8810] netlink_sendmsg+0x8de/0xcb0 [ 177.678212][ T8810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.678236][ T8810] ? aa_sock_msg_perm+0x91/0x160 [ 177.678273][ T8810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.678290][ T8810] __sock_sendmsg+0x221/0x270 [ 177.678324][ T8810] ____sys_sendmsg+0x53a/0x860 [ 177.678359][ T8810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.678382][ T8810] ? __fget_files+0x2a/0x410 [ 177.678415][ T8810] ? __fget_files+0x2a/0x410 [ 177.678455][ T8810] __sys_sendmsg+0x269/0x350 [ 177.678486][ T8810] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.678525][ T8810] ? do_sys_openat2+0x17a/0x1d0 [ 177.678582][ T8810] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.678615][ T8810] ? do_syscall_64+0x100/0x230 [ 177.678650][ T8810] ? do_syscall_64+0xb6/0x230 [ 177.678683][ T8810] do_syscall_64+0xf3/0x230 [ 177.678712][ T8810] ? clear_bhb_loop+0x35/0x90 [ 177.678745][ T8810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.678771][ T8810] RIP: 0033:0x7f7c7598d169 [ 177.678789][ T8810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.678805][ T8810] RSP: 002b:00007f7c767e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.678826][ T8810] RAX: ffffffffffffffda RBX: 00007f7c75ba5fa0 RCX: 00007f7c7598d169 [ 177.678840][ T8810] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 177.678852][ T8810] RBP: 00007f7c767e4090 R08: 0000000000000000 R09: 0000000000000000 [ 177.678863][ T8810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.678874][ T8810] R13: 0000000000000000 R14: 00007f7c75ba5fa0 R15: 00007ffe27c13828 [ 177.678911][ T8810] [ 178.471171][ T8837] __nla_validate_parse: 3 callbacks suppressed [ 178.471192][ T8837] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1003'. [ 178.549612][ T8843] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1003'. [ 178.685016][ T8838] lo speed is unknown, defaulting to 1000 [ 178.693765][ T8838] lo speed is unknown, defaulting to 1000 [ 179.009657][ T8854] tipc: Enabling of bearer rejected, failed to enable media [ 179.232942][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.455735][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1010'. [ 179.492562][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1010'. [ 179.687852][ T8871] bridge1: entered promiscuous mode [ 179.702279][ T8871] bridge1: entered allmulticast mode [ 179.731752][ T8871] team0: Port device bridge1 added [ 179.770496][ T8876] xt_TCPMSS: Only works on TCP SYN packets [ 180.424953][ T8892] xt_recent: Unsupported userspace flags (00000042) [ 180.433939][ T8888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.473514][ T8888] bond0: (slave bond2): Enslaving as an active interface with an up link [ 180.575632][ T8894] sctp: [Deprecated]: syz.0.1021 (pid 8894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.575632][ T8894] Use struct sctp_sack_info instead [ 180.875375][ T8907] xt_TCPMSS: Only works on TCP SYN packets [ 180.924011][ T8910] Bluetooth: MGMT ver 1.23 [ 181.169108][ T8919] xt_connbytes: Forcing CT accounting to be enabled [ 181.178256][ T8919] SET target dimension over the limit! [ 181.402343][ T8923] siw: device registration error -23 [ 181.750867][ T8933] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1034'. [ 181.808525][ T8934] Driver unsupported XDP return value 0 on prog (id 256) dev N/A, expect packet loss! [ 181.964814][ T8938] gretap1: entered promiscuous mode [ 182.087132][ T8933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.095694][ T8933] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.115847][ T8933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.193385][ T8942] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20005 [ 182.351759][ T8948] ipip0: entered promiscuous mode [ 183.168156][ T8974] lo speed is unknown, defaulting to 1000 [ 183.200567][ T8978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.222942][ T8974] lo speed is unknown, defaulting to 1000 [ 183.236201][ T8981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1050'. [ 183.644429][ T8988] lo speed is unknown, defaulting to 1000 [ 183.681529][ T8988] lo speed is unknown, defaulting to 1000 [ 184.129675][ T8999] batadv_slave_1: entered promiscuous mode [ 184.151743][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1057'. [ 184.166219][ T9002] netlink: 'syz.0.1058': attribute type 10 has an invalid length. [ 184.418532][ T9006] tipc: Enabling of bearer rejected, failed to enable media [ 184.864070][ T9014] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1063'. [ 184.892862][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1063'. [ 184.901873][ T9014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1063'. [ 184.957232][ T9014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1063'. [ 185.161866][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 185.224292][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 185.262914][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 185.694040][ T9038] xt_recent: Unsupported userspace flags (00000042) [ 185.734120][ T9039] xt_hashlimit: size too large, truncated to 1048576 [ 185.786660][ T9045] syzkaller0: entered promiscuous mode [ 185.792413][ T9045] syzkaller0: entered allmulticast mode [ 185.801042][ T9046] xt_hashlimit: size too large, truncated to 1048576 [ 185.878117][ T9048] xt_TCPMSS: Only works on TCP SYN packets [ 187.521435][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 187.583115][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 194.827386][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.844285][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.042664][ C0] sched: DL replenish lagged too much [ 202.230878][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 202.243217][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 202.249361][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 202.396098][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 208.674156][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.166845][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.144409][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.266047][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.663909][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 317.627545][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.716577][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.895136][ T31] INFO: task syz.4.1093:9112 blocked for more than 147 seconds. [ 342.937834][ T31] Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 343.638654][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.880152][ T31] task:syz.4.1093 state:D stack:24408 pid:9112 tgid:9111 ppid:5837 task_flags:0x400140 flags:0x00004004 [ 344.076117][ T31] Call Trace: [ 344.079494][ T31] [ 344.082468][ T31] __schedule+0x190e/0x4c90 [ 344.499772][ T31] ? __pfx___schedule+0x10/0x10 [ 344.520864][ T31] ? __pfx_lock_release+0x10/0x10 [ 345.338852][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 345.356897][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 346.033652][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.040087][ T31] ? schedule+0x90/0x320 [ 347.231317][ T9120] warn_alloc: 1 callbacks suppressed [ 347.231338][ T9120] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 347.340016][ T31] schedule+0x14b/0x320 [ 347.546458][ T9120] ,cpuset=/,mems_allowed=0-1 [ 347.551236][ T9120] CPU: 0 UID: 0 PID: 9120 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 347.551265][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.551279][ T9120] Call Trace: [ 347.551288][ T9120] [ 347.551297][ T9120] dump_stack_lvl+0x241/0x360 [ 347.551329][ T9120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.551353][ T9120] ? __pfx__printk+0x10/0x10 [ 347.551379][ T9120] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 347.551408][ T9120] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 347.551439][ T9120] warn_alloc+0x278/0x410 [ 347.551468][ T9120] ? __pfx_warn_alloc+0x10/0x10 [ 347.551495][ T9120] ? kcov_ioctl+0x56/0x640 [ 347.551525][ T9120] ? __get_vm_area_node+0x1c8/0x2d0 [ 347.551558][ T9120] ? __get_vm_area_node+0x25c/0x2d0 [ 347.551598][ T9120] __vmalloc_node_range_noprof+0x62f/0x1380 [ 347.551647][ T9120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 347.551683][ T9120] vmalloc_user_noprof+0x74/0x80 [ 347.551704][ T9120] ? kcov_ioctl+0x56/0x640 [ 347.551734][ T9120] kcov_ioctl+0x56/0x640 [ 347.551768][ T9120] ? __pfx_kcov_ioctl+0x10/0x10 [ 347.551801][ T9120] __se_sys_ioctl+0xf5/0x170 [ 347.551828][ T9120] do_syscall_64+0xf3/0x230 [ 347.551861][ T9120] ? clear_bhb_loop+0x35/0x90 [ 347.551895][ T9120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.551925][ T9120] RIP: 0033:0x7fab8b78cd6b [ 347.551950][ T9120] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 347.551968][ T9120] RSP: 002b:00007ffdde742120 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.551991][ T9120] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fab8b78cd6b [ 347.552006][ T9120] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000de [ 347.552019][ T9120] RBP: 00007fab8b9a6578 R08: 00000000000000da R09: 0000000000000000 [ 347.552032][ T9120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.552044][ T9120] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 347.552072][ T9120] [ 347.552080][ T9120] Mem-Info: [ 348.973180][ T31] schedule_preempt_disabled+0x13/0x30 [ 348.978760][ T31] __mutex_lock+0x817/0x1010 [ 348.992861][ T31] ? __mutex_lock+0x602/0x1010 [ 348.997724][ T31] ? nfnetlink_rcv_msg+0xa5c/0x1180 [ 349.799567][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 349.816715][ T31] ? __pfx_lock_release+0x10/0x10 [ 349.828238][ T9120] active_anon:3988 inactive_anon:0 isolated_anon:0 [ 349.828238][ T9120] active_file:1663 inactive_file:38372 isolated_file:0 [ 349.828238][ T9120] unevictable:768 dirty:10 writeback:0 [ 349.828238][ T9120] slab_reclaimable:9791 slab_unreclaimable:168757 [ 349.828238][ T9120] mapped:20427 shmem:1431 pagetables:509 [ 349.828238][ T9120] sec_pagetables:0 bounce:0 [ 349.828238][ T9120] kernel_misc_reclaimable:0 [ 349.828238][ T9120] free:1280877 free_pcp:352 free_cma:0 [ 350.726755][ T31] ? __nla_parse+0x40/0x60 [ 350.731279][ T31] ? nfnetlink_rcv_msg+0x225/0x1180 [ 350.885124][ T31] ? __pfx_ip_set_create+0x10/0x10 [ 350.890425][ T31] nfnetlink_rcv_msg+0xa5c/0x1180 [ 351.689199][ T9120] Node 0 active_anon:15952kB inactive_anon:0kB active_file:6652kB inactive_file:153412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:81708kB dirty:36kB writeback:0kB shmem:4188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13008kB pagetables:2036kB sec_pagetables:0kB all_unreclaimable? no [ 351.727954][ T31] ? nfnetlink_rcv_msg+0x225/0x1180 [ 351.746186][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 351.751788][ T31] netlink_rcv_skb+0x206/0x480 [ 352.630190][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 352.647895][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10