last executing test programs: 2.995408869s ago: executing program 2 (id=971): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000000200000f8e92d17a4cdbe7623788af3ee300e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x110) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002c00010324bd7002f9dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002c00010025bd7000fcdbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x4000c}, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="62a61639922cf5529648d33b0fcc955ae2a99cd8876147d2bc0ec4cded3ef69f5942cc2bdf7018cd368881e4fb92ed271b4a5da1d2321e143326d8faa8de5f85c65dbfb5798752eeeb37ef6638ecb0050cbe5bc03ce589c6f8218a1bddfc686dbfc94107f145c197794af94ebc7c65ca5bf0a9bf66a0e5ceeec9d623a6ca695955d04c1d5372d02dfa811050fa351035603a4c447b222f1b0e147ef05adbf76c9dceb4aeea604f495d5c256ee2f59aae3ff1dc1fd8e65c7a88696aa7890967d5bb5ad2635d", @ANYRES16=0x0, @ANYBLOB="010029bd7000000000005100000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000000000005008a000b000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000000000000ea00000000000082bb000100070000000800094000000008d04b0600000067ef36dd3a8d08ddebc589"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000010) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x2b, 0x8, 0xffffffffffffffff, @void, @value}, 0x20) r11 = socket(0x1d, 0x2, 0x6) accept$ax25(r11, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r11, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r13, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x8001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$packet(r11, &(0x7f0000000240)={0x11, 0xf8, r1, 0x1, 0x2, 0x6, @random="1aeb3caeabf8"}, 0x14) 2.682977905s ago: executing program 2 (id=976): accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xfffffff7}}]}, 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r4, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="9cdfa98e", 0xdf9c}], 0x1}}], 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.547749519s ago: executing program 1 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwritev(r2, &(0x7f0000001d00)=[{&(0x7f00000003c0)='\t', 0x1}], 0x1, 0x0, 0x775a) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x128, 0x0, 0x401, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5c}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4a7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xff}, @NL80211_ATTR_VENDOR_DATA={0xea, 0xc5, "9da224b7ea6ff2d954e58d0aec17f90ff5fc0b62a744756d492278c462e59ee8ce0350a3a248e95d06c7ba1b8194ae91055436fe7891d8a0302651739f29271ec81a527df62ec16428b3b4433c084195645856392768d7c1e4b9b78ac3ac023d0cc663a93ca232104624110656109d2c3b6b1a1d0c03ebeb3d82665fa7fc212345872781b57895d5942baa141b894ed00c9aa7e271395b8570dca39998d6ce3a84f9548f9a34c0526bee51a1ae545da83fd1aa5feb657a55dee78e26a6bb215c3a5fec9b9fb7b49912952a70f6dd84cb8d368a36f756eca70e7983c0067b183d0d46d5e68fc2"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x5}, 0x4040881) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)={r1}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1600000076000d0b"], 0x20}}, 0x4000040) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000040000000000000000000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7ff000000000000000300001000000085580000060000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) sendmmsg(r1, &(0x7f0000000180), 0x0, 0xc044) 2.496670487s ago: executing program 2 (id=981): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, 0x0) connect$vsock_stream(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="580100e7", @ANYRES16=r4, @ANYBLOB="200829bd700001dcdf25440000000c0099000a0000000a00000018007000050002000000000004000700040007000400050008000d000100000008000c006400000010017000d0000300e9a5998840fead0a7b87ef334ab1743f3dbfdb965031e3a59dad7bec561fcb74f49b7afb4c157d88c4a3a6dce0229a66a9756c739531dfbe152192011d54fe8753763d819283c532db1974b5c689643cc0cd9f8236a13efd524301b0ea317b5a4863b070c765b39e61c2af6feb5f146cac538ccfe21cc60790a467bb8f5b9145db7a4da4d90d7637be5f24cca4269d16661200ba8f7f51c663a6e786e2fe51a8438e4be576e1d4c38fab3d6710c3ade8a582639fcf773c7b81ec7e139aab53c3ec077597d13ff787934055400400070034000300bfe4089d2e1194c88d7985269b404f23f2a4395abb3c83d418e7fc9e1805cb6c9e124893404bae507ee691b6901525f604000400"], 0x158}, 0x1, 0x0, 0x0, 0x4040}, 0x20000880) shutdown(0xffffffffffffffff, 0x0) shutdown(r3, 0x0) r5 = socket(0x28, 0x3, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000001000000811aee9f06da2d2d43302f0000000000001c1400000000fc020002000052c0fdfd8f25e80c0a63b1c1c1f905089ebd94ae0100dcba9c17acf888b440"], 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000f06030000000000000000000200000506000b00ffff0000050001"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000045259b96ffffffffa39efb6a00a00300988022f1a7b237be789135fbb836", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r8, @ANYRESDEC=r0, @ANYRES32, @ANYRES16=r0, @ANYRES8=r2], 0x50) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r10, &(0x7f00000004c0)=[{0x0}], 0x1, 0x4, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x4, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r12}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) 2.096364979s ago: executing program 1 (id=986): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (async) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)={0x200}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)={0x20, r0, 0x10, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}}, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) 1.977817214s ago: executing program 1 (id=989): accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xfffffff7}}]}, 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="9cdfa98e", 0xdf9c}], 0x1}}], 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.935023651s ago: executing program 4 (id=990): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0xd8, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x108}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="9500000000000000bdd5559ca3e84b25"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24bba, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000340)=0x2c80) syz_emit_ethernet(0xbe, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa932a0000450000b00000000000119078000000000000000000004e20009c90780100000100000000d9587b6f229fd5f7ffffffffffffffc23d710eab780bb8916ea853e07d7f64d2487fbcc007793601d105c582771d63eac2b033ad8998a7606a57df19f7a05acec6fc1ab9a3d19e0464eada8f80ffcaab47510ac65297662270e0606a8444e26b8c4c3520ae502a5614aafc446639db498dde25db838d38a4773cfc3a4b2a56e81d3ef6aba23fc1a2f05e08e7ea8d5c22e5a6aae0"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000015000100fdfffffffcdbdf2502000000", @ANYRES32=r5, @ANYBLOB="140003007665746830000000000000000000000008000100e0000001f9724ee993e20487ecf639d8ec629175c053b6763ff81dc70238e39c234a550d08000000996ea293b82a7761bcfbfdeed06c8ff6076547b7917b8fb2f771bc99dc712f49b06106c023b878fbc458ad1107a268e0775a7b1bd90fd62ef260b0542b925a7428a80c75353e294c9351158eccbff6ee21f003c3c7776b5bbc37aedc85dcd51e72cab2097541846fd8e42d63d74651fa51ea8a6e925771299029f68cd4196a99edfaa71cf4c995faa47ed3032e38b23bdbfa05c6a1bd0b967fdc3e000fcf8456ca521da442cb8e02200f499965ebc4ab493ce821d189007047"], 0x34}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r8 = socket$key(0xf, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x0, 0x3, 0x2}}, 0x2e) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r9 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000002c0)={0x30, 0x223b, 0x1, 0x7, 0x4, 0xf, 0xe, 0xc}, 0x20) recvmmsg$unix(r9, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)=""/44, 0x2c}], 0x1}}], 0x1, 0x2001, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) 1.874365177s ago: executing program 3 (id=991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008850}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@enum={0xa}]}, {0x0, [0x2e, 0x0, 0x30, 0x41, 0x5f, 0x61, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2f, 0x0, 0x1, 0xfffffbff, 0x0, @void, @value}, 0x28) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x118, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa35}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xafe}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_NAT_DST={0xb4, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x4814) 1.775425262s ago: executing program 1 (id=993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="1d1fca03913372be4efd4250a3573c4f436db0efa92d286e1aeee9a9e47cf3dab37360d93c963b8080680dfd6446d824c77be768509d7ee351fedc2128b920", @ANYRES64=r1, @ANYRESOCT=r1], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0xeb, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x7, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0xd, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) syz_emit_ethernet(0x7a, &(0x7f0000004540)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c900041100fe8800000000000000000000e3ff0001fe8000000000000000000000000000aa"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) unshare(0x22020600) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) sendto$inet(r5, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r8) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), 0xffffffffffffffff) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000900)={'filter\x00', 0x0, 0x0, 0x0, [0x80000000, 0x8, 0xe0000000000000, 0xe30300, 0x6, 0x76c]}, &(0x7f0000000a00)=0x78) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x610afb69bd78d343}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc4, r10, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dc446ab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42618de2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54b66040}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdf81fec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70ad0c00}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e0ad2f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3efc3b7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18ba3ad6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bbef2ae}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b672086}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c3432f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1920185}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38954b3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d6169c5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0xc4}}, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1.603582218s ago: executing program 3 (id=994): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffff7, @loopback={0x100000000000000}, 0xce02}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x89}}}], 0x18}}], 0x2, 0x4000000) 1.576314227s ago: executing program 3 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8, 0x869, 0x7fffffff, 0x5, 0x85}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x7, 0x2}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8, 0x869, 0x7fffffff, 0x5, 0x85}, &(0x7f0000000080)=0x14) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x7, 0x2}, 0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) (async) 1.549978917s ago: executing program 2 (id=996): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x3, 0x3fe, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x1416, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c000000000101040000e90b0000141a00000200000a240001801400018008000100e000000108000200e00000010c00028005000100000000002c000280140001800800010000000000080002dc530000010c00028005000100000000000600034000010000080007400082856d21e35bd01f2c00582e63f406d200d1fbc2b7b0374559f8378fc95a911751a27a2159c94481f5d46567b4f8637b65c8a1c363ee97ecc3f20b452e6bf1533d265feb068ef10e2479adc2e952870c8d5ec67e525118aa2b2f2a0665e7874a1e70ff2553f905656af20e5bbb5a3a1ee3e9b7bd7f6f4b248fe3f515dba5ea27ff21c150739e0f9cfddec0a85df8772853ed9ba0414c543daf04a3112c1555c0c9e85869c9a051c8c3d492340070af82b34271bed728047a5a8b15b2a61e6a3c01cf7bcbdfe3691c9349d03812132fe3ec7540440f41531b1876786d2bc2edc5a37a4b55cdd994f99fc2b87398124b6881e683365fce97bc9395422568062937d87892b7273f011e6b79b44c690efff83fede5a06eb13ab2e4726bf8d9d35898d2d5348fe7aaf5b521444639ca304c02ff9ee70a2fdb54065fbfd12e06222864f13ae6ad7cd2cc4e4f448e12d88c80ba018b0ab9a0f087ed94fa6a45355c57e6a68d143ee261eb439d0a12dab464fd59b43374f45318e71135ba5be20a775f4c438a610412aee0b35e269be4daefae7a66cc8c34def19e37ec5cec0419a219bbf9"], 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000003cf3fe67abe496542eb476b73b2b42726e99a0c08f0ed91ade7cd7146c0512a2ec1458b3f51cfabf3e38125330cc0d48d526fd148e7ed41e16630db1c8f3b54c3e26dec1c9795b45b7c6f082df03d1ebe547d131f65919c780bff3c90c465d5a9f064eac8cfd86ccb7df1c0d559a12c98b91bf15329b0c0c673556f9e6b05afbb68119113e816e00e017493e61a49b7b0fa085a1d42147f3c6df19e73fd932c4a329c8dad99b3693dee50b9c27e06795308ce6f8c0457e9351064a27905735f047393aa06b8c4ac258eda215013a984148b9a888ca1549e5b2912e1913c73ba9440ce40042a87fcc367f433aadf8710b3fd6bbd62188061edb2df697e9711664f31f28fc573563cab15478e4893be997ed8d5b3050256f1b2bdcb87d3228f7acdd410c5ee59a1107fce6e5"], 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 1.367403273s ago: executing program 3 (id=998): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x439, 0x70bd26, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x110d1}, [@IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0xb60}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x680488c0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72) sendto$inet(r4, 0x0, 0x0, 0x241, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000340)={0x1c, r2, 0x21, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xff, 0x9, 0x3, 0x0, 0x0, 0x40}, 0xc) listen(r8, 0xffffffff) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x82, 0x3, 0x7ff, 0x0, 0x0, 0x7, 0x7}}, {0x4}}]}]}, 0x54}}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000001c0)) getsockopt$PNPIPE_HANDLE(r9, 0x113, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 1.360057477s ago: executing program 2 (id=999): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x3, [@const={0x1, 0x0, 0x0, 0xa, 0x1}, @enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0xe, [{0x1, 0x5, 0xfffff934}]}, @fwd={0x8}, @enum64={0x10, 0x6, 0x0, 0x13, 0x1, 0xc, [{0x8, 0x9, 0x1}, {0x2, 0x9, 0x80c7}, {0xa, 0x9, 0xfffffffb}, {0xd, 0x1, 0x100}, {0xd, 0x8, 0x7}, {0xd, 0x6257, 0xffff}]}, @union={0xd, 0x4, 0x0, 0x5, 0x0, 0xd088, [{0xa, 0x5, 0x6}, {0x8, 0x5, 0x6}, {0x8, 0x5, 0x814}, {0x6, 0x4, 0x4a09}]}]}, {0x0, [0x61]}}, &(0x7f00000001c0)=""/139, 0xdb, 0x8b, 0x1, 0x10001, 0x0, @void, @value}, 0x28) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0xd, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x67d}, @generic={0x81, 0x5, 0x9, 0x9, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f00000000c0)='GPL\x00', 0x8001, 0xfa, &(0x7f0000000300)=""/250, 0x41100, 0x21, '\x00', 0x0, @tracing=0x1a, r0, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x7, 0x7f, 0x401}, 0x10, r3, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[r4, r5, r6], &(0x7f0000000700)=[{0x3, 0x3, 0x6, 0xa}, {0x1, 0x1, 0xe, 0x4}, {0x3, 0x2, 0xd, 0x3}, {0x5, 0x4, 0x4, 0xc}], 0x10, 0x1b1, @void, @value}, 0x94) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0xd, &(0x7f0000000080)="f2", 0x1) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x96a10fb313254e2b}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xab}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 1.219699468s ago: executing program 0 (id=1000): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{&(0x7f0000000040)=@phonet, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/151, 0x97}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000240)=""/160, 0xa0}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000480)=""/232, 0xe8}], 0x8, &(0x7f0000002640)=""/197, 0xc5}, 0xfffff35c}], 0x1, 0x40001000, 0x0) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000600)='X', 0x1}], 0x1) 1.16319708s ago: executing program 0 (id=1001): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f00000002c0)) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r4) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24008081}, 0xc000) 1.09739873s ago: executing program 3 (id=1002): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="d8b6d7897e47f274108471172e74d7683b00af2d2c86cb38f7c47f998882513c609ef5233c43c2cb42900f72"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) 895.646844ms ago: executing program 4 (id=1003): accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xfffffff7}}]}, 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="9cdfa98e", 0xdf9c}], 0x1}}], 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 893.763237ms ago: executing program 3 (id=1004): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x1720}], 0x1, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[], 0x398}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, &(0x7f0000000200)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000540)={r7, 0xfffffffffffffffd, 0x9}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000540)={0x0, 0x7fffffffffffffff, 0x7fff, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000940)={0x0, 0xd9d7, 0x0, [0x7, 0x9, 0x1200000000, 0x2], [0x3ff, 0x8, 0x80000001, 0x2, 0x5, 0x7, 0x1b, 0x3, 0x5, 0x3, 0x800, 0xe, 0x1, 0xa4b, 0xe000000000, 0x1, 0x1, 0xfff, 0x3, 0x6, 0x7, 0x5, 0xbc, 0xb, 0x6, 0x200, 0xfffffffffffffffe, 0x900000000000, 0x5, 0xa6, 0x8, 0xffffffffffffffdf, 0xd80c00000000000, 0x7, 0x1, 0x7fffffffffffffff, 0x6, 0x9b0, 0xfff, 0x9, 0x9, 0x0, 0xd81, 0x2, 0x101, 0x4, 0x7, 0xdb, 0x24, 0x2, 0x7fffffffffffffff, 0x6, 0x1, 0x8, 0x80000001, 0xdb16, 0x7f, 0x65, 0x4, 0x0, 0x2, 0x6, 0xa5, 0x5, 0x9, 0x2, 0x6, 0x2, 0x81, 0x8000, 0xe1, 0x6, 0xfffffffffffffffc, 0x8000, 0x5, 0x9, 0x4, 0x0, 0x4, 0x230, 0x5, 0x7fffffff, 0x5, 0x5, 0x8, 0x3, 0x5, 0x1, 0x7, 0xa618, 0xfffffffffffff2f5, 0x4, 0x80000000, 0x5, 0x4, 0x7, 0x4, 0x7, 0x0, 0x1000, 0xad, 0x8a, 0xe6, 0x76, 0x2, 0xe0e, 0x5, 0x853b, 0x4b, 0x0, 0x80, 0x8, 0x3, 0x9, 0xffffffff, 0x4, 0x3, 0x37d9, 0x2, 0x0, 0x6]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000d80)={0x1, 0x0, {0x113, @usage=0xffff, r7, 0x8000, 0x1, 0x7fffffffffffffff, 0xffffffffffffff80, 0x8000, 0x90, @struct={0x8, 0x4}, 0x1, 0xfffffffc, [0x8, 0x2, 0x800, 0xeeb2, 0xffffffffffffffe8, 0x7]}, {0xfffffffffffffffb, @usage=0x7fffffff, r8, 0x6, 0x54, 0x8, 0x1, 0xff, 0x1, @struct={0xb633, 0x1ff}, 0x0, 0x9, [0xe, 0x3ff, 0x6, 0xc86f, 0x0, 0x7]}, {0x9, @struct={0x9, 0x77}, r9, 0x4, 0x6, 0x3ec, 0x76, 0x7fffffff, 0x0, @usage=0x7, 0x10001, 0x6, [0x5, 0x4, 0x8, 0xc80c, 0x6]}, {0x2, 0x80000001, 0x649eb224}}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x27, 0x0, "8a7ecb4d6b3f0cafbcf35cabb63f9e9d198114683021053c2f3bda25afeda865b263ae05982942263fef7decbccfcf7e96961f74d44a9ab0ed3c3e8b01d58bb05c429eefcbc6b655605f8babcf818706"}, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 847.356483ms ago: executing program 1 (id=1005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x38}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r3, 0x2000000, 0x1d, 0xfffffffffffffcbf, &(0x7f0000000440)="13435cd378b76a90bd300500dd0501d66fa9d9063e99ff1ec42f5a00", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r6, 0x8104}], 0x1, 0x0, 0x0, 0x0) (async) connect$unix(r6, &(0x7f00000012c0)=@file={0x0, './file1\x00'}, 0x6e) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, 0x0, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x7, 0x0, r7, 0x101, '\x00', r10, r11, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', r10, 0x2f, 0x1, 0x8d, 0x9, 0x0, @private0, @empty, 0x700, 0x20, 0x9, 0x3}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb120018"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) 750.607265ms ago: executing program 4 (id=1006): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffff7, @loopback={0x200000000000000}, 0xce02}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x89}}}], 0x18}}], 0x2, 0x4000000) 683.597112ms ago: executing program 0 (id=1007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200190ab2ca6d"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) unshare(0x10000) 566.571947ms ago: executing program 0 (id=1008): r0 = socket$inet_dccp(0x2, 0x6, 0x0) unshare(0x28040600) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000700)="922b22c06deeec4dd22933f00d1c456fe9629ab59a442f0378bb659c9157897136939b60f7933c00d2045ce3a117a2202afe163976ae59653e937323737c6e92214b8b4f93845d5060aff3b7744364a234b57ca5198ca2263db71d3fe0cbefae78afe3770b9cfd5986dd658d4268293c7d880c4183a50f85d50570cac8bc285def", 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000005000000000000000000e57125c8ffff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 558.83041ms ago: executing program 4 (id=1009): bind$rxrpc(0xffffffffffffffff, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x6e24, @empty}}, 0x24) (async) shutdown(0xffffffffffffffff, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000040)) (async) close(0xffffffffffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@multicast1, @empty}, &(0x7f0000000140)=0xc) (async) r2 = socket(0x15, 0x5, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000300)=0x68) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={r0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f00000002c0)=0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000"], 0x30}], 0x1}, 0x0) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 511.237793ms ago: executing program 1 (id=1010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='.'], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0x5, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0xffffffffffffffab) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffff00, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4ec465813dcf7e42, 0x7, 0x80000001, 0x9, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a802e8c6394f90324fc60100005000b000900053582c137153e37000c0180fc0b1d02f80b", 0x2e}], 0x1}, 0x4000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$unix(r6, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x891}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01180001801400020065797a5f74756e000000000008000000e8e3e98722a56190e488840000240003801c0003800800018008000100000000000c000180080001000000000003ffef0068bb577310bc9809963377e4f0167f7401312a29fa55f5e23bd3d15d3c0fcf"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x480c0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/227, 0xe3}], 0x1) r9 = socket$kcm(0x29, 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) recvmmsg(r10, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000380)={0x38, 0x0, 0x400, 0x70bd2d, 0x8, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008804}, 0x20040000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="44000000100005040400"/20, @ANYRES32=0x0, @ANYBLOB="2004020000000000240012800b00010054b3ba4aae794fc1906bea42aee98c4cb30dac83046470bfe88e65727370616e000014000280e1cc30bc68a8ab0d6877d2ee40cd2808091bcf187d165bf6f9dc00a6f307032d60d935562de0e0b3bac2fb451774010eb577a871882a75511a2f91a49c378ce3da52", @ANYRESDEC=r4], 0x44}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000140)=@allocspi={0x100, 0x16, 0x401, 0x4, 0x0, {{{@in6=@local, @in=@loopback, 0x0, 0x200, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x0, 0x33}, @in6=@empty, {}, {0x4, 0x1000000000000, 0xffffffffffffffff, 0x63}, {0x0, 0x0, 0x8de5}}, 0x8, 0xffffffff}, [@replay_thresh={0x8, 0xb, 0x62}]}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911070000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4) 386.90723ms ago: executing program 0 (id=1011): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x8084}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000006800128009000100766c616e000000005800028006000100020000004c0003800c00010000000000050000000c00010000000000800000000c00800000000000018000000c00010009000000010001000c00010000000000090000000c000100030000000101000008000500", @ANYRES32=r1], 0x90}}, 0x0) 303.049592ms ago: executing program 4 (id=1012): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}]}, 0x34}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r5, &(0x7f0000000240)="9882e70131b512e63614ac1bbd", 0xd) r6 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800", @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_EMATCHES={0x50, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x56, 0x9, 0x27}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8001, 0x1, 0x40}, {0x0, 0x3, 0x4f, 0x6, 0xe, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x40080) 227.527437ms ago: executing program 2 (id=1013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0200"], 0x33fe0}, 0x1, 0x7}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x8, 0xa, 0x2, 0xe}, {0x1, 0x6, 0x7, 0x5}, {0x2, 0x5, 0x40, 0x1}, {0xf000, 0x4, 0x7, 0x6}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x8, 0xa, 0x2, 0xe}, {0x1, 0x6, 0x7, 0x5}, {0x2, 0x5, 0x40, 0x1}, {0xf000, 0x4, 0x7, 0x6}]}) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x140b, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x140b, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b0000000000000000000700000008000300040003000c000180"], 0x28}}, 0x0) sendmmsg$inet6(r2, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x3, @mcast1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0xfffffffffffffffd}], 0x2}}], 0x2, 0x0) 180.801045ms ago: executing program 0 (id=1014): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r2}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000580)=""/154, 0x9a}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000301010100000000000000000a0000010c00198008000200280800001800028006000340000100000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140), 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@ifindex=r3, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value}, 0x20) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000003c0)=0x1000, &(0x7f0000000400)=0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006d00673c25bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9881040004680200180034801400351e64756d6d7930000000000000000000001400030069705f76746930"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) shutdown(r8, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}]}}}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000000010102d5000000000000200100000108000c408119d60e0029f2790000004b"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 0s ago: executing program 4 (id=1015): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES8=r0, @ANYBLOB="4100040000000000280000180002800a0014007ae2613ce058000008000900"/48], 0x48}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) kernel console output (not intermixed with test programs): 0x1001 length: 249 > 9 [ 74.358840][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.371177][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.378794][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.388400][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.395680][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.410993][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.423993][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.430687][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.432196][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.444438][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.445907][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.454963][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.467435][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.475288][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.477690][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.484912][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.490581][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.496788][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.510579][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.518531][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.535090][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.543306][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.934592][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 74.986680][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 75.097415][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 75.171855][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 75.184400][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.191801][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.199205][ T5837] bridge_slave_0: entered allmulticast mode [ 75.208256][ T5837] bridge_slave_0: entered promiscuous mode [ 75.255206][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.265069][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.272757][ T5837] bridge_slave_1: entered allmulticast mode [ 75.279591][ T5837] bridge_slave_1: entered promiscuous mode [ 75.355008][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.362373][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.369569][ T5840] bridge_slave_0: entered allmulticast mode [ 75.376842][ T5840] bridge_slave_0: entered promiscuous mode [ 75.425796][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.438097][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.447508][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.454991][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.463519][ T5840] bridge_slave_1: entered allmulticast mode [ 75.470649][ T5840] bridge_slave_1: entered promiscuous mode [ 75.477358][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.484910][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.492219][ T5830] bridge_slave_0: entered allmulticast mode [ 75.498932][ T5830] bridge_slave_0: entered promiscuous mode [ 75.509432][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.516787][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.524472][ T5830] bridge_slave_1: entered allmulticast mode [ 75.531870][ T5830] bridge_slave_1: entered promiscuous mode [ 75.568247][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 75.606988][ T5837] team0: Port device team_slave_0 added [ 75.615750][ T5837] team0: Port device team_slave_1 added [ 75.638134][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.686142][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.698086][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.716915][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.726288][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.733701][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.741077][ T5831] bridge_slave_0: entered allmulticast mode [ 75.747841][ T5831] bridge_slave_0: entered promiscuous mode [ 75.755784][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.763010][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.789223][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.835590][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.845105][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.852525][ T5831] bridge_slave_1: entered allmulticast mode [ 75.859319][ T5831] bridge_slave_1: entered promiscuous mode [ 75.867434][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.874857][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.901260][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.934430][ T5830] team0: Port device team_slave_0 added [ 75.942592][ T5830] team0: Port device team_slave_1 added [ 75.974573][ T5840] team0: Port device team_slave_0 added [ 75.983706][ T5840] team0: Port device team_slave_1 added [ 76.056960][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.077241][ T5837] hsr_slave_0: entered promiscuous mode [ 76.083706][ T5837] hsr_slave_1: entered promiscuous mode [ 76.109860][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.116914][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.143378][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.174454][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.183825][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.211951][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.225641][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.240486][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.247470][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.273660][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.290284][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.297476][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.304947][ T5839] bridge_slave_0: entered allmulticast mode [ 76.312027][ T5839] bridge_slave_0: entered promiscuous mode [ 76.319382][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.327493][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.353486][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.382888][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.390235][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.397484][ T5839] bridge_slave_1: entered allmulticast mode [ 76.404971][ T5839] bridge_slave_1: entered promiscuous mode [ 76.428064][ T5831] team0: Port device team_slave_0 added [ 76.477129][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.493117][ T5831] team0: Port device team_slave_1 added [ 76.506588][ T5840] hsr_slave_0: entered promiscuous mode [ 76.513864][ T5840] hsr_slave_1: entered promiscuous mode [ 76.520434][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.528238][ T5840] Cannot create hsr debugfs directory [ 76.541065][ T5146] Bluetooth: hci4: command tx timeout [ 76.546110][ T5835] Bluetooth: hci1: command tx timeout [ 76.556929][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.620119][ T5835] Bluetooth: hci0: command tx timeout [ 76.626803][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.630342][ T5835] Bluetooth: hci3: command tx timeout [ 76.639558][ T5835] Bluetooth: hci2: command tx timeout [ 76.640481][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.672823][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.711396][ T5830] hsr_slave_0: entered promiscuous mode [ 76.717617][ T5830] hsr_slave_1: entered promiscuous mode [ 76.724192][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.732210][ T5830] Cannot create hsr debugfs directory [ 76.741412][ T5839] team0: Port device team_slave_0 added [ 76.747990][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.755038][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.781312][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.803860][ T5839] team0: Port device team_slave_1 added [ 76.875351][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.882855][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.908811][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.946619][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.953889][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.980323][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.042113][ T5831] hsr_slave_0: entered promiscuous mode [ 77.048494][ T5831] hsr_slave_1: entered promiscuous mode [ 77.054927][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.062870][ T5831] Cannot create hsr debugfs directory [ 77.177538][ T5839] hsr_slave_0: entered promiscuous mode [ 77.184185][ T5839] hsr_slave_1: entered promiscuous mode [ 77.191068][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.198706][ T5839] Cannot create hsr debugfs directory [ 77.240955][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.256593][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.267847][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.302214][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.397161][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.419086][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.447028][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.486908][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.556620][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.566540][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.597009][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.622337][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.669136][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.703305][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.718325][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.755043][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.774490][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.795372][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.834008][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.845512][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.855632][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.899386][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.944303][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.966079][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.973361][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.989757][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.996910][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.049002][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.079323][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.105784][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.112988][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.127938][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.168328][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.175464][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.207309][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.214436][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.229455][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.236634][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.276175][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.358740][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.416573][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.427713][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.447231][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.454477][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.489200][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.496350][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.555598][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.572431][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.609389][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.627450][ T5835] Bluetooth: hci4: command tx timeout [ 78.627460][ T5146] Bluetooth: hci1: command tx timeout [ 78.655557][ T5837] veth0_vlan: entered promiscuous mode [ 78.668906][ T5837] veth1_vlan: entered promiscuous mode [ 78.701347][ T5835] Bluetooth: hci3: command tx timeout [ 78.704059][ T5146] Bluetooth: hci2: command tx timeout [ 78.707571][ T5835] Bluetooth: hci0: command tx timeout [ 78.771231][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.802656][ T5837] veth0_macvtap: entered promiscuous mode [ 78.833871][ T5837] veth1_macvtap: entered promiscuous mode [ 78.863138][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.870862][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.901091][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.908273][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.943555][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.999445][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.031727][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.043533][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.055079][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.064174][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.089090][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.112711][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.158049][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.263474][ T5840] veth0_vlan: entered promiscuous mode [ 79.327636][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.340565][ T5840] veth1_vlan: entered promiscuous mode [ 79.356367][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.448840][ T5830] veth0_vlan: entered promiscuous mode [ 79.492794][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.497004][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.514827][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.531699][ T5840] veth0_macvtap: entered promiscuous mode [ 79.565161][ T5830] veth1_vlan: entered promiscuous mode [ 79.599145][ T5840] veth1_macvtap: entered promiscuous mode [ 79.664127][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.675663][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.688865][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.708633][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.725947][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.744051][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.756243][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.771802][ T5830] veth0_macvtap: entered promiscuous mode [ 79.779285][ T5839] veth0_vlan: entered promiscuous mode [ 79.794603][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.803831][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.813191][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.823105][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.894076][ T5830] veth1_macvtap: entered promiscuous mode [ 79.947671][ T5839] veth1_vlan: entered promiscuous mode [ 79.970984][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.002571][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.017011][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.033641][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.047365][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.059231][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.071321][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.081514][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.092967][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.105773][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.146637][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.166084][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.176439][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.186522][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.197826][ T5831] veth0_vlan: entered promiscuous mode [ 80.238266][ T5831] veth1_vlan: entered promiscuous mode [ 80.256070][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.293139][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.351978][ T5839] veth0_macvtap: entered promiscuous mode [ 80.387015][ T5839] veth1_macvtap: entered promiscuous mode [ 80.424246][ T5831] veth0_macvtap: entered promiscuous mode [ 80.461932][ T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.476063][ T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.489250][ T5927] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.513094][ T5831] veth1_macvtap: entered promiscuous mode [ 80.520380][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.532232][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.545073][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.555952][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.571056][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.582149][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.594143][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.628984][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.647344][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.659134][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.671588][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.681805][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.692706][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.700970][ T5835] Bluetooth: hci4: command tx timeout [ 80.703465][ T5146] Bluetooth: hci1: command tx timeout [ 80.715402][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.726800][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.742157][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.754674][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.764992][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.774669][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.784814][ T5146] Bluetooth: hci0: command tx timeout [ 80.789628][ T5835] Bluetooth: hci2: command tx timeout [ 80.790360][ T5841] Bluetooth: hci3: command tx timeout [ 80.791165][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.856737][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.872148][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.883603][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.894786][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.905094][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.917612][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.926717][ T5934] nbd: must specify at least one socket [ 80.930034][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.934329][ T5935] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.949787][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.979023][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.003667][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.015096][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.025804][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.036419][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.046845][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.057707][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.067898][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.079568][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.092274][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.142908][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.159702][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.170341][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.179255][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.203192][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.218202][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.395592][ T5949] vlan2: entered promiscuous mode [ 81.406409][ T5949] team0: entered promiscuous mode [ 81.414193][ T5949] team_slave_0: entered promiscuous mode [ 81.422370][ T5949] team_slave_1: entered promiscuous mode [ 81.434344][ T5949] team0: Device vlan2 is already an upper device of the team interface [ 81.557361][ T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.576524][ T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.634014][ T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.659871][ T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.679784][ T5952] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.704628][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.724341][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.740962][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.762741][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.226088][ T5961] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5'. [ 82.252822][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 82.293216][ T5960] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 82.309454][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 82.355023][ T5960] team0: Port device netdevsim0 added [ 82.440968][ T5966] netlink: 'syz.4.13': attribute type 1 has an invalid length. [ 82.780718][ T5835] Bluetooth: hci4: command tx timeout [ 82.781709][ T5146] Bluetooth: hci1: command tx timeout [ 82.800203][ T5979] Zero length message leads to an empty skb [ 82.839212][ T5979] IPv4: Oversized IP packet from 127.202.26.0 [ 82.860901][ T5146] Bluetooth: hci0: command tx timeout [ 82.861601][ T5835] Bluetooth: hci3: command tx timeout [ 82.866336][ T5146] Bluetooth: hci2: command tx timeout [ 82.896710][ T5979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15'. [ 82.942589][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 82.956101][ T5979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15'. [ 82.965492][ T5979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15'. [ 83.362210][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 83.455868][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 84.375319][ T6013] warning: `syz.4.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.741313][ T6025] sctp: [Deprecated]: syz.3.27 (pid 6025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.741313][ T6025] Use struct sctp_sack_info instead [ 84.991447][ T6032] batman_adv: batadv0: Adding interface: dummy0 [ 84.997752][ T6032] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.059070][ T6032] batman_adv: batadv0: Interface activated: dummy0 [ 85.093860][ T6033] batadv0: mtu less than device minimum [ 85.112111][ T6033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.125014][ T6033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.137720][ T6033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.150378][ T6033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.163149][ T6033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.175830][ T6033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.188549][ T6033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.201285][ T6033] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.418657][ T6011] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET) [ 86.110924][ T6060] bridge_slave_0: left allmulticast mode [ 86.116720][ T6060] bridge_slave_0: left promiscuous mode [ 86.123397][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.151409][ T6060] bridge_slave_1: left allmulticast mode [ 86.182718][ T6060] bridge_slave_1: left promiscuous mode [ 86.208079][ T6064] Bluetooth: MGMT ver 1.23 [ 86.208824][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.297187][ T6060] bond0: (slave bond_slave_0): Releasing backup interface [ 86.316971][ T6060] bond0: (slave bond_slave_1): Releasing backup interface [ 86.377531][ T6060] team0: Port device team_slave_0 removed [ 86.430231][ T6060] team0: Port device team_slave_1 removed [ 86.439213][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.455013][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.495370][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.535216][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.559861][ T6076] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 86.967774][ T6092] __nla_validate_parse: 5 callbacks suppressed [ 86.967794][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 87.057697][ T6094] xt_CT: No such helper "pptp" [ 87.098113][ T6098] nftables ruleset with unbound set [ 87.373270][ T6103] netlink: 'syz.4.49': attribute type 1 has an invalid length. [ 88.454721][ T6144] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.60'. [ 88.488969][ T6144] net_ratelimit: 12 callbacks suppressed [ 88.488990][ T6144] openvswitch: netlink: Message has 44053 unknown bytes. [ 88.670545][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.61'. [ 88.737767][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 88.758217][ T6146] batman_adv: batadv0: Adding interface: dummy0 [ 88.768516][ T6146] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.811859][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 88.830198][ T6146] batman_adv: batadv0: Interface activated: dummy0 [ 88.849055][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 88.899258][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 88.907131][ T6151] batadv0: mtu less than device minimum [ 88.948830][ T6151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 88.961614][ T6151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 88.974305][ T6151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 88.987090][ T6151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 88.999789][ T6151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.012391][ T6151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.025094][ T6151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.037825][ T6151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.208780][ T6168] netlink: 'syz.3.65': attribute type 2 has an invalid length. [ 89.421276][ T6174] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 89.444224][ T6173] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20004 [ 89.504629][ T6173] dvmrp0: entered allmulticast mode [ 89.693691][ T6190] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 89.746664][ T6190] lo speed is unknown, defaulting to 1000 [ 89.801847][ T6190] lo speed is unknown, defaulting to 1000 [ 89.809782][ T6190] lo speed is unknown, defaulting to 1000 [ 89.838017][ T6190] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.876458][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.69'. [ 89.879563][ T6194] lo speed is unknown, defaulting to 1000 [ 89.916285][ T6201] netlink: 'syz.1.71': attribute type 10 has an invalid length. [ 89.962347][ T6190] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 89.975542][ T6201] batman_adv: batadv0: Interface deactivated: dummy0 [ 90.049425][ T6201] batman_adv: batadv0: Removing interface: dummy0 [ 90.075534][ T6201] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.117182][ T6190] lo speed is unknown, defaulting to 1000 [ 90.144230][ T6190] lo speed is unknown, defaulting to 1000 [ 90.219416][ T6208] lo speed is unknown, defaulting to 1000 [ 90.247520][ T6190] lo speed is unknown, defaulting to 1000 [ 90.255021][ T6190] lo speed is unknown, defaulting to 1000 [ 90.285800][ T6190] lo speed is unknown, defaulting to 1000 [ 90.820938][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 90.859213][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.79'. [ 90.900997][ T6220] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 91.269265][ T6232] sit1: entered promiscuous mode [ 91.286834][ T6232] sit1: entered allmulticast mode [ 91.420074][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 91.517568][ T6234] bridge_slave_1: left allmulticast mode [ 91.525944][ T6234] bridge_slave_1: left promiscuous mode [ 91.547041][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.605540][ T6234] bridge_slave_0: left allmulticast mode [ 91.614170][ T6234] bridge_slave_0: left promiscuous mode [ 91.625524][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.825938][ T6243] lo speed is unknown, defaulting to 1000 [ 92.225590][ T977] cfg80211: failed to load regulatory.db [ 92.262223][ T6268] lo speed is unknown, defaulting to 1000 [ 92.351731][ T6271] lo speed is unknown, defaulting to 1000 [ 92.939864][ T6285] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 93.027124][ T6290] __nla_validate_parse: 2 callbacks suppressed [ 93.027145][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 93.580931][ T6309] veth0_vlan: entered allmulticast mode [ 93.749769][ T6314] sctp: [Deprecated]: syz.3.106 (pid 6314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.749769][ T6314] Use struct sctp_sack_info instead [ 93.774082][ T6314] netlink: 68 bytes leftover after parsing attributes in process `syz.3.106'. [ 94.895061][ T6368] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 94.960201][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 95.085822][ T6378] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 95.159171][ T6384] netlink: 'syz.0.123': attribute type 1 has an invalid length. [ 95.190279][ T6384] netlink: 127 bytes leftover after parsing attributes in process `syz.0.123'. [ 95.523410][ T6404] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 95.663095][ T6404] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 95.752550][ T6406] netlink: 36 bytes leftover after parsing attributes in process `syz.4.129'. [ 95.764405][ T6406] netlink: 32 bytes leftover after parsing attributes in process `syz.4.129'. [ 96.072028][ T6433] netlink: 'syz.4.133': attribute type 10 has an invalid length. [ 96.199301][ T6433] team0: Port device wlan1 added [ 96.353547][ T6442] wireguard0: entered promiscuous mode [ 96.365264][ T6442] wireguard0: entered allmulticast mode [ 96.654623][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.662737][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.755769][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 96.768643][ T6458] batman_adv: batadv0: Interface deactivated: dummy0 [ 96.999548][ T6458] net_ratelimit: 11 callbacks suppressed [ 96.999569][ T6458] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 97.057855][ T52] lo speed is unknown, defaulting to 1000 [ 97.163556][ T6472] lo speed is unknown, defaulting to 1000 [ 97.601256][ T6499] !€ÿ: renamed from bond_slave_0 (while UP) [ 97.759637][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 97.908142][ T6510] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 97.951558][ T6510] batman_adv: batadv0: Adding interface: gretap1 [ 98.021280][ T6510] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.055248][ T6510] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 98.280304][ T6536] netlink: 256 bytes leftover after parsing attributes in process `syz.4.157'. [ 98.397824][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 98.444017][ T6542] netlink: 44 bytes leftover after parsing attributes in process `syz.3.161'. [ 98.455671][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'. [ 98.480912][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 98.784603][ T6561] FAULT_INJECTION: forcing a failure. [ 98.784603][ T6561] name failslab, interval 1, probability 0, space 0, times 1 [ 98.809475][ T6561] CPU: 0 UID: 0 PID: 6561 Comm: syz.0.170 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 98.809505][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.809523][ T6561] Call Trace: [ 98.809530][ T6561] [ 98.809539][ T6561] dump_stack_lvl+0x241/0x360 [ 98.809575][ T6561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.809599][ T6561] ? __pfx__printk+0x10/0x10 [ 98.809621][ T6561] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 98.809654][ T6561] ? __pfx___might_resched+0x10/0x10 [ 98.809680][ T6561] ? aa_label_sk_perm+0x4f3/0x6c0 [ 98.809715][ T6561] should_fail_ex+0x40a/0x550 [ 98.809753][ T6561] should_failslab+0xac/0x100 [ 98.809783][ T6561] kmem_cache_alloc_node_noprof+0x77/0x380 [ 98.809821][ T6561] ? __alloc_skb+0x1c3/0x440 [ 98.809849][ T6561] __alloc_skb+0x1c3/0x440 [ 98.809878][ T6561] ? __pfx___alloc_skb+0x10/0x10 [ 98.809915][ T6561] netlink_sendmsg+0x634/0xcb0 [ 98.809948][ T6561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.809972][ T6561] ? aa_sock_msg_perm+0x91/0x160 [ 98.810009][ T6561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.810028][ T6561] __sock_sendmsg+0x221/0x270 [ 98.810062][ T6561] ____sys_sendmsg+0x53a/0x860 [ 98.810097][ T6561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.810121][ T6561] ? __fget_files+0x2a/0x410 [ 98.810155][ T6561] ? __fget_files+0x2a/0x410 [ 98.810195][ T6561] __sys_sendmsg+0x269/0x350 [ 98.810226][ T6561] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.810265][ T6561] ? do_sys_openat2+0x17a/0x1d0 [ 98.810321][ T6561] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.810355][ T6561] ? do_syscall_64+0x100/0x230 [ 98.810390][ T6561] ? do_syscall_64+0xb6/0x230 [ 98.810424][ T6561] do_syscall_64+0xf3/0x230 [ 98.810455][ T6561] ? clear_bhb_loop+0x35/0x90 [ 98.810488][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.810528][ T6561] RIP: 0033:0x7fc6e778d169 [ 98.810551][ T6561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.810567][ T6561] RSP: 002b:00007fc6e8563038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.810590][ T6561] RAX: ffffffffffffffda RBX: 00007fc6e79a5fa0 RCX: 00007fc6e778d169 [ 98.810604][ T6561] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 98.810617][ T6561] RBP: 00007fc6e8563090 R08: 0000000000000000 R09: 0000000000000000 [ 98.810629][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.810641][ T6561] R13: 0000000000000000 R14: 00007fc6e79a5fa0 R15: 00007fff69ece7e8 [ 98.810671][ T6561] [ 99.028734][ T6571] nbd: must specify a size in bytes for the device [ 99.286380][ T6583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.176'. [ 99.616396][ T6596] sctp: [Deprecated]: syz.3.180 (pid 6596) Use of int in maxseg socket option. [ 99.616396][ T6596] Use struct sctp_assoc_value instead [ 99.728647][ T6601] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 99.757616][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 99.789305][ T5943] IPVS: starting estimator thread 0... [ 99.808607][ T6605] netlink: 100 bytes leftover after parsing attributes in process `syz.0.183'. [ 99.901139][ T6610] IPVS: using max 21 ests per chain, 50400 per kthread [ 100.264554][ T6629] lo speed is unknown, defaulting to 1000 [ 100.513656][ T6641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.191'. [ 100.694317][ T6644] tun0: tun_chr_ioctl cmd 1074025675 [ 100.704169][ T6644] tun0: persist enabled [ 100.833749][ T6654] netlink: 68 bytes leftover after parsing attributes in process `syz.0.193'. [ 100.948839][ T6651] tun0: tun_chr_ioctl cmd 1074025675 [ 100.963672][ T6651] tun0: persist disabled [ 101.124754][ T6663] FAULT_INJECTION: forcing a failure. [ 101.124754][ T6663] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.188877][ T6663] CPU: 0 UID: 0 PID: 6663 Comm: syz.3.196 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 101.188906][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.188918][ T6663] Call Trace: [ 101.188926][ T6663] [ 101.188934][ T6663] dump_stack_lvl+0x241/0x360 [ 101.188964][ T6663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.188984][ T6663] ? __pfx__printk+0x10/0x10 [ 101.189007][ T6663] ? __pfx_lock_release+0x10/0x10 [ 101.189047][ T6663] should_fail_ex+0x40a/0x550 [ 101.189082][ T6663] _copy_from_iter+0x1df/0x1c40 [ 101.189108][ T6663] ? __virt_addr_valid+0x183/0x530 [ 101.189129][ T6663] ? __pfx_lock_release+0x10/0x10 [ 101.189167][ T6663] ? __alloc_skb+0x28f/0x440 [ 101.189190][ T6663] ? __pfx__copy_from_iter+0x10/0x10 [ 101.189217][ T6663] ? __virt_addr_valid+0x183/0x530 [ 101.189236][ T6663] ? __virt_addr_valid+0x183/0x530 [ 101.189254][ T6663] ? __virt_addr_valid+0x45f/0x530 [ 101.189274][ T6663] ? __phys_addr_symbol+0x2f/0x70 [ 101.189293][ T6663] ? __check_object_size+0x47a/0x730 [ 101.189326][ T6663] netlink_sendmsg+0x742/0xcb0 [ 101.189359][ T6663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.189383][ T6663] ? aa_sock_msg_perm+0x91/0x160 [ 101.189420][ T6663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.189439][ T6663] __sock_sendmsg+0x221/0x270 [ 101.189473][ T6663] ____sys_sendmsg+0x53a/0x860 [ 101.189507][ T6663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.189531][ T6663] ? __fget_files+0x2a/0x410 [ 101.189564][ T6663] ? __fget_files+0x2a/0x410 [ 101.189603][ T6663] __sys_sendmsg+0x269/0x350 [ 101.189642][ T6663] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.189680][ T6663] ? do_sys_openat2+0x17a/0x1d0 [ 101.189736][ T6663] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.189769][ T6663] ? do_syscall_64+0x100/0x230 [ 101.189803][ T6663] ? do_syscall_64+0xb6/0x230 [ 101.189836][ T6663] do_syscall_64+0xf3/0x230 [ 101.189867][ T6663] ? clear_bhb_loop+0x35/0x90 [ 101.189900][ T6663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.189931][ T6663] RIP: 0033:0x7f745a38d169 [ 101.189949][ T6663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.189966][ T6663] RSP: 002b:00007f745b265038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.189987][ T6663] RAX: ffffffffffffffda RBX: 00007f745a5a5fa0 RCX: 00007f745a38d169 [ 101.190001][ T6663] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 101.190014][ T6663] RBP: 00007f745b265090 R08: 0000000000000000 R09: 0000000000000000 [ 101.190026][ T6663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.190037][ T6663] R13: 0000000000000000 R14: 00007f745a5a5fa0 R15: 00007fff9a5431b8 [ 101.190067][ T6663] [ 101.616315][ T6671] 8021q: VLANs not supported on wg2 [ 101.933514][ T6676] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.431692][ T6703] FAULT_INJECTION: forcing a failure. [ 102.431692][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 102.490073][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.2.211 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 102.490104][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.490117][ T6703] Call Trace: [ 102.490124][ T6703] [ 102.490132][ T6703] dump_stack_lvl+0x241/0x360 [ 102.490164][ T6703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.490187][ T6703] ? __pfx__printk+0x10/0x10 [ 102.490211][ T6703] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 102.490243][ T6703] ? __pfx___might_resched+0x10/0x10 [ 102.490275][ T6703] should_fail_ex+0x40a/0x550 [ 102.490312][ T6703] should_failslab+0xac/0x100 [ 102.490342][ T6703] kmem_cache_alloc_node_noprof+0x77/0x380 [ 102.490372][ T6703] ? __alloc_skb+0x1c3/0x440 [ 102.490398][ T6703] __alloc_skb+0x1c3/0x440 [ 102.490426][ T6703] ? __pfx___alloc_skb+0x10/0x10 [ 102.490450][ T6703] ? snprintf+0xda/0x120 [ 102.490479][ T6703] skb_copy_expand+0x199/0xb60 [ 102.490512][ T6703] ? bpf_lsm_capable+0x9/0x10 [ 102.490552][ T6703] uevent_net_rcv_skb+0x2fe/0x460 [ 102.490579][ T6703] ? __pfx_uevent_net_rcv_skb+0x10/0x10 [ 102.490616][ T6703] netlink_rcv_skb+0x206/0x480 [ 102.490650][ T6703] ? __pfx_uevent_net_rcv_skb+0x10/0x10 [ 102.490676][ T6703] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.490726][ T6703] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.490760][ T6703] netlink_unicast+0x7f6/0x990 [ 102.490806][ T6703] ? __pfx_netlink_unicast+0x10/0x10 [ 102.490834][ T6703] ? __virt_addr_valid+0x45f/0x530 [ 102.490855][ T6703] ? __phys_addr_symbol+0x2f/0x70 [ 102.490874][ T6703] ? __check_object_size+0x47a/0x730 [ 102.490908][ T6703] netlink_sendmsg+0x8de/0xcb0 [ 102.490940][ T6703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.490965][ T6703] ? aa_sock_msg_perm+0x91/0x160 [ 102.491004][ T6703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.491023][ T6703] __sock_sendmsg+0x221/0x270 [ 102.491058][ T6703] ____sys_sendmsg+0x53a/0x860 [ 102.491093][ T6703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.491117][ T6703] ? __fget_files+0x2a/0x410 [ 102.491151][ T6703] ? __fget_files+0x2a/0x410 [ 102.491190][ T6703] __sys_sendmsg+0x269/0x350 [ 102.491221][ T6703] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.491258][ T6703] ? do_sys_openat2+0x17a/0x1d0 [ 102.491313][ T6703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.491348][ T6703] ? do_syscall_64+0x100/0x230 [ 102.491383][ T6703] ? do_syscall_64+0xb6/0x230 [ 102.491415][ T6703] do_syscall_64+0xf3/0x230 [ 102.491446][ T6703] ? clear_bhb_loop+0x35/0x90 [ 102.491480][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.491508][ T6703] RIP: 0033:0x7fd4acd8d169 [ 102.491526][ T6703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.491544][ T6703] RSP: 002b:00007fd4adc30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.491566][ T6703] RAX: ffffffffffffffda RBX: 00007fd4acfa5fa0 RCX: 00007fd4acd8d169 [ 102.491580][ T6703] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 102.491593][ T6703] RBP: 00007fd4adc30090 R08: 0000000000000000 R09: 0000000000000000 [ 102.491606][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.491617][ T6703] R13: 0000000000000000 R14: 00007fd4acfa5fa0 R15: 00007ffc9f6b3c48 [ 102.491646][ T6703] [ 102.499563][ T6707] Cannot find set identified by id 0 to match [ 102.838177][ T6718] macvlan0: entered promiscuous mode [ 102.935649][ T6722] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 102.949463][ T6722] gretap1: entered promiscuous mode [ 102.965874][ T6709] macvlan0: left promiscuous mode [ 103.095408][ T6732] netlink: 'syz.2.216': attribute type 10 has an invalid length. [ 103.158965][ T6722] bond0: (slave 1!€ÿ): Releasing backup interface [ 103.208188][ T6732] macvlan0: entered allmulticast mode [ 103.226730][ T6732] veth1_vlan: entered allmulticast mode [ 103.259477][ T6732] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 103.415790][ T6741] __nla_validate_parse: 10 callbacks suppressed [ 103.415811][ T6741] netlink: 96 bytes leftover after parsing attributes in process `syz.4.221'. [ 103.450852][ T6743] syzkaller1: entered promiscuous mode [ 103.463182][ T6743] syzkaller1: entered allmulticast mode [ 103.562617][ T6748] netlink: 'syz.4.224': attribute type 10 has an invalid length. [ 103.590132][ T6748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.224'. [ 103.607955][ T6748] veth0_vlan: entered allmulticast mode [ 103.615638][ T6748] bridge0: port 1(veth0_vlan) entered blocking state [ 103.622839][ T6748] bridge0: port 1(veth0_vlan) entered disabled state [ 103.634134][ T6748] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 103.810888][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 103.912468][ T6755] syzkaller0: entered promiscuous mode [ 103.918909][ T6755] syzkaller0: entered allmulticast mode [ 106.567143][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 106.585538][ T6773] bridge_slave_0: left allmulticast mode [ 106.601995][ T6773] bridge_slave_0: left promiscuous mode [ 106.607797][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.641111][ T6773] bridge_slave_1: left allmulticast mode [ 106.646822][ T6773] bridge_slave_1: left promiscuous mode [ 106.655923][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.669085][ T6773] bond0: (slave bond_slave_0): Releasing backup interface [ 106.717571][ T6773] bond0: (slave bond_slave_1): Releasing backup interface [ 106.729030][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 106.754631][ T6773] team0: Port device team_slave_0 removed [ 106.779111][ T6773] team0: Port device team_slave_1 removed [ 106.799051][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.823855][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.839482][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.847459][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.967363][ T6778] lo speed is unknown, defaulting to 1000 [ 107.710910][ T6832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.827903][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.245'. [ 107.877981][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 107.894718][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 108.108527][ T6848] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.257004][ T6872] netlink: 104 bytes leftover after parsing attributes in process `syz.0.258'. [ 110.204693][ T6848] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.226023][ T6860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.349838][ T6848] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.406619][ T6876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.260'. [ 110.499665][ T6848] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.724484][ T6848] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.844522][ T6848] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.009047][ T6901] ªªªªªª: renamed from lo (while UP) [ 111.097634][ T6901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.137324][ T6909] netlink: 96 bytes leftover after parsing attributes in process `syz.0.270'. [ 111.355984][ T6925] netlink: 96 bytes leftover after parsing attributes in process `syz.0.276'. [ 111.468672][ T6927] ipvlan2: entered promiscuous mode [ 111.493855][ T6927] bridge0: port 3(ipvlan2) entered blocking state [ 111.513372][ T6927] bridge0: port 3(ipvlan2) entered disabled state [ 111.530697][ T6927] ipvlan2: entered allmulticast mode [ 111.544170][ T6933] FAULT_INJECTION: forcing a failure. [ 111.544170][ T6933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.557829][ T6927] bridge0: entered allmulticast mode [ 111.564799][ T6927] ipvlan2: left allmulticast mode [ 111.570234][ T6927] bridge0: left allmulticast mode [ 111.581492][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.0.280 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 111.581519][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.581532][ T6933] Call Trace: [ 111.581539][ T6933] [ 111.581548][ T6933] dump_stack_lvl+0x241/0x360 [ 111.581587][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.581611][ T6933] ? __pfx__printk+0x10/0x10 [ 111.581639][ T6933] ? snprintf+0xda/0x120 [ 111.581666][ T6933] should_fail_ex+0x40a/0x550 [ 111.581703][ T6933] _copy_to_user+0x31/0xb0 [ 111.581735][ T6933] simple_read_from_buffer+0xca/0x150 [ 111.581768][ T6933] proc_fail_nth_read+0x1e9/0x250 [ 111.581801][ T6933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.581835][ T6933] ? rw_verify_area+0x243/0x630 [ 111.581856][ T6933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.581887][ T6933] vfs_read+0x1f8/0xb40 [ 111.581910][ T6933] ? fdget_pos+0x254/0x320 [ 111.581943][ T6933] ? __pfx___mutex_lock+0x10/0x10 [ 111.581974][ T6933] ? __pfx_vfs_read+0x10/0x10 [ 111.581992][ T6933] ? do_sys_openat2+0x17a/0x1d0 [ 111.582026][ T6933] ? __fget_files+0x2a/0x410 [ 111.582058][ T6933] ? __fget_files+0x395/0x410 [ 111.582087][ T6933] ? __fget_files+0x2a/0x410 [ 111.582127][ T6933] ksys_read+0x18f/0x2b0 [ 111.582152][ T6933] ? __pfx_ksys_read+0x10/0x10 [ 111.582175][ T6933] ? do_syscall_64+0x100/0x230 [ 111.582209][ T6933] ? do_syscall_64+0xb6/0x230 [ 111.582243][ T6933] do_syscall_64+0xf3/0x230 [ 111.582273][ T6933] ? clear_bhb_loop+0x35/0x90 [ 111.582306][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.582334][ T6933] RIP: 0033:0x7fc6e778bb7c [ 111.582351][ T6933] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 111.582367][ T6933] RSP: 002b:00007fc6e8563030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.582388][ T6933] RAX: ffffffffffffffda RBX: 00007fc6e79a5fa0 RCX: 00007fc6e778bb7c [ 111.582403][ T6933] RDX: 000000000000000f RSI: 00007fc6e85630a0 RDI: 0000000000000004 [ 111.582415][ T6933] RBP: 00007fc6e8563090 R08: 0000000000000000 R09: 0000000000000000 [ 111.582427][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.582438][ T6933] R13: 0000000000000000 R14: 00007fc6e79a5fa0 R15: 00007fff69ece7e8 [ 111.582470][ T6933] [ 111.964706][ T6943] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 112.000284][ T5886] IPVS: starting estimator thread 0... [ 112.076890][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 112.092014][ T6947] IPVS: using max 19 ests per chain, 45600 per kthread [ 112.437300][ T6975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.447507][ T6975] team0: Port device bond0 added [ 112.486327][ T6975] bridge0: port 1(team0) entered blocking state [ 112.514589][ T6975] bridge0: port 1(team0) entered disabled state [ 112.526158][ T6975] team0: entered allmulticast mode [ 112.535720][ T6975] bond0: entered allmulticast mode [ 112.546496][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 112.561378][ T6975] team0: entered promiscuous mode [ 112.566680][ T6975] bond0: entered promiscuous mode [ 112.762922][ T6991] Cannot find map_set index 0 as target [ 112.801815][ T6991] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 112.996965][ T7001] tipc: Failed to remove unknown binding: 66,1,1/0:1452735437/1452735439 [ 113.002422][ T6998] IPVS: length: 36 != 8 [ 113.022912][ T6999] IPVS: length: 36 != 8 [ 113.044252][ T7001] tipc: Failed to remove unknown binding: 66,1,1/0:1452735437/1452735439 [ 113.061384][ T7001] tipc: Failed to remove unknown binding: 66,1,1/0:1452735437/1452735439 [ 113.093379][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 113.262065][ T7013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.306'. [ 114.240229][ T7037] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 114.351040][ T7040] openvswitch: netlink: VXLAN extension 26 out of range max 1 [ 114.600650][ T7055] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 115.663046][ T7069] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 116.417513][ T7051] syz.2.318: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 116.445908][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.2.318 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 116.445941][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.445955][ T7051] Call Trace: [ 116.445962][ T7051] [ 116.445971][ T7051] dump_stack_lvl+0x241/0x360 [ 116.446003][ T7051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.446028][ T7051] ? __pfx__printk+0x10/0x10 [ 116.446059][ T7051] ? __rcu_read_unlock+0xa1/0x110 [ 116.446095][ T7051] warn_alloc+0x278/0x410 [ 116.446124][ T7051] ? __pfx_warn_alloc+0x10/0x10 [ 116.446155][ T7051] ? veth_dev_init+0x35f/0x550 [ 116.446178][ T7051] ? __get_vm_area_node+0x1c8/0x2d0 [ 116.446212][ T7051] ? __get_vm_area_node+0x25c/0x2d0 [ 116.446254][ T7051] __vmalloc_node_range_noprof+0x62f/0x1380 [ 116.446276][ T7051] ? look_up_lock_class+0x77/0x170 [ 116.446333][ T7051] ? rcu_is_watching+0x15/0xb0 [ 116.446359][ T7051] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.446382][ T7051] ? rcu_is_watching+0x15/0xb0 [ 116.446416][ T7051] ? trace_kmalloc+0x1f/0xd0 [ 116.446443][ T7051] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 116.446473][ T7051] ? __kvmalloc_node_noprof+0x72/0x190 [ 116.446513][ T7051] __kvmalloc_node_noprof+0x142/0x190 [ 116.446549][ T7051] ? veth_dev_init+0x35f/0x550 [ 116.446573][ T7051] veth_dev_init+0x35f/0x550 [ 116.446604][ T7051] register_netdevice+0x6d7/0x1b70 [ 116.446635][ T7051] ? _get_random_bytes+0x25d/0x2c0 [ 116.446671][ T7051] ? snprintf+0xda/0x120 [ 116.446700][ T7051] ? __pfx_register_netdevice+0x10/0x10 [ 116.446729][ T7051] ? __pfx_snprintf+0x10/0x10 [ 116.446755][ T7051] ? __asan_memset+0x23/0x50 [ 116.446788][ T7051] veth_newlink+0x66a/0xb70 [ 116.446817][ T7051] ? __pfx_veth_newlink+0x10/0x10 [ 116.446910][ T7051] ? alloc_netdev_mqs+0xe01/0x1210 [ 116.446950][ T7051] ? rtnl_create_link+0x95b/0xc90 [ 116.446983][ T7051] ? __pfx_veth_newlink+0x10/0x10 [ 116.447007][ T7051] rtnl_newlink_create+0x37b/0xbd0 [ 116.447039][ T7051] ? __pfx_aa_get_newest_label+0x10/0x10 [ 116.447079][ T7051] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 116.447108][ T7051] ? __pfx___mutex_lock+0x10/0x10 [ 116.447152][ T7051] ? ns_capable+0x8a/0xf0 [ 116.447183][ T7051] rtnl_newlink+0x167a/0x1d90 [ 116.447207][ T7051] ? stack_depot_save_flags+0x37/0x940 [ 116.447259][ T7051] ? __pfx_rtnl_newlink+0x10/0x10 [ 116.447278][ T7051] ? __netlink_deliver_tap+0x561/0x7f0 [ 116.447314][ T7051] ? __pfx_validate_chain+0x10/0x10 [ 116.447337][ T7051] ? __sock_sendmsg+0x221/0x270 [ 116.447368][ T7051] ? ____sys_sendmsg+0x53a/0x860 [ 116.447402][ T7051] ? __sys_sendmsg+0x269/0x350 [ 116.447426][ T7051] ? do_syscall_64+0xf3/0x230 [ 116.447456][ T7051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.447573][ T7051] ? __pfx_lock_release+0x10/0x10 [ 116.447626][ T7051] ? __pfx_rtnl_newlink+0x10/0x10 [ 116.447650][ T7051] rtnetlink_rcv_msg+0x791/0xcf0 [ 116.447684][ T7051] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 116.447725][ T7051] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.447770][ T7051] ? ref_tracker_free+0x643/0x7e0 [ 116.447800][ T7051] netlink_rcv_skb+0x206/0x480 [ 116.447837][ T7051] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.447875][ T7051] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.447936][ T7051] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.447975][ T7051] netlink_unicast+0x7f6/0x990 [ 116.448017][ T7051] ? __pfx_netlink_unicast+0x10/0x10 [ 116.448047][ T7051] ? __virt_addr_valid+0x45f/0x530 [ 116.448069][ T7051] ? __phys_addr_symbol+0x2f/0x70 [ 116.448089][ T7051] ? __check_object_size+0x47a/0x730 [ 116.448125][ T7051] netlink_sendmsg+0x8de/0xcb0 [ 116.448161][ T7051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.448188][ T7051] ? aa_sock_msg_perm+0x91/0x160 [ 116.448229][ T7051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.448249][ T7051] __sock_sendmsg+0x221/0x270 [ 116.448285][ T7051] ____sys_sendmsg+0x53a/0x860 [ 116.448323][ T7051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.448349][ T7051] ? __fget_files+0x2a/0x410 [ 116.448386][ T7051] ? __fget_files+0x2a/0x410 [ 116.448443][ T7051] __sys_sendmsg+0x269/0x350 [ 116.448469][ T7051] ? __pfx_futex_wake+0x10/0x10 [ 116.448508][ T7051] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.448585][ T7051] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.448622][ T7051] ? do_syscall_64+0x100/0x230 [ 116.448663][ T7051] ? do_syscall_64+0xb6/0x230 [ 116.448700][ T7051] do_syscall_64+0xf3/0x230 [ 116.448733][ T7051] ? clear_bhb_loop+0x35/0x90 [ 116.448769][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.448799][ T7051] RIP: 0033:0x7fd4acd8d169 [ 116.448819][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.448835][ T7051] RSP: 002b:00007fd4adc30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.448858][ T7051] RAX: ffffffffffffffda RBX: 00007fd4acfa5fa0 RCX: 00007fd4acd8d169 [ 116.448873][ T7051] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000003 [ 116.448886][ T7051] RBP: 00007fd4ace0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.448899][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.448911][ T7051] R13: 0000000000000000 R14: 00007fd4acfa5fa0 R15: 00007ffc9f6b3c48 [ 116.448944][ T7051] [ 116.449056][ T7051] Mem-Info: [ 116.970259][ T7051] active_anon:5333 inactive_anon:0 isolated_anon:0 [ 116.970259][ T7051] active_file:1477 inactive_file:38308 isolated_file:0 [ 116.970259][ T7051] unevictable:768 dirty:235 writeback:0 [ 116.970259][ T7051] slab_reclaimable:10155 slab_unreclaimable:101446 [ 116.970259][ T7051] mapped:30505 shmem:1428 pagetables:739 [ 116.970259][ T7051] sec_pagetables:0 bounce:0 [ 116.970259][ T7051] kernel_misc_reclaimable:0 [ 116.970259][ T7051] free:1336579 free_pcp:614 free_cma:0 [ 117.028695][ T7051] Node 0 active_anon:21332kB inactive_anon:0kB active_file:5908kB inactive_file:153156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122020kB dirty:940kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10824kB pagetables:2956kB sec_pagetables:0kB all_unreclaimable? no [ 117.079997][ T7051] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 117.116377][ T7051] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.147630][ T7051] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 117.154021][ T7051] Node 0 DMA32 free:1427080kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:21492kB inactive_anon:0kB active_file:5908kB inactive_file:152832kB unevictable:1536kB writepending:940kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:1428kB local_pcp:812kB free_cma:0kB [ 117.207520][ T7051] lowmem_reserve[]: 0 0 0 0 0 [ 117.212444][ T7051] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.241226][ T7051] lowmem_reserve[]: 0 0 0 0 0 [ 117.246044][ T7051] Node 1 Normal free:3904632kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.284531][ T7051] lowmem_reserve[]: 0 0 0 0 0 [ 117.289477][ T7051] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 117.309491][ T7051] Node 0 DMA32: 1*4kB (M) 57*8kB (UME) 137*16kB (UME) 82*32kB (ME) 34*64kB (UME) 56*128kB (UME) 31*256kB (UM) 17*512kB (UM) 2*1024kB (ME) 2*2048kB (ME) 339*4096kB (UM) = 1425948kB [ 117.327940][ T7051] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 117.346974][ T7051] Node 1 Normal: 246*4kB (UE) 66*8kB (UME) 37*16kB (UME) 218*32kB (UME) 108*64kB (UME) 28*128kB (UME) 18*256kB (UME) 11*512kB (UM) 4*1024kB (UME) 4*2048kB (UE) 943*4096kB (M) = 3904632kB [ 117.373265][ T7051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.387739][ T7051] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.399996][ T7051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.409599][ T7051] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.426097][ T7051] 41215 total pagecache pages [ 117.432487][ T7051] 0 pages in swap cache [ 117.436684][ T7051] Free swap = 124996kB [ 117.441042][ T7051] Total swap = 124996kB [ 117.445321][ T7051] 2097051 pages RAM [ 117.449161][ T7051] 0 pages HighMem/MovableOnly [ 117.453935][ T7051] 427906 pages reserved [ 117.458224][ T7051] 0 pages cma reserved [ 118.710658][ T7069] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 118.836748][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'. [ 119.145718][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'. [ 119.186871][ T7091] tc_dump_action: action bad kind [ 119.563947][ T7106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.597632][ T7106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.338'. [ 120.161200][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 120.322581][ T7126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 120.333341][ T7127] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.342568][ T7127] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.351397][ T7127] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.360181][ T7127] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.630387][ T7142] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 120.761089][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 120.829551][ T7142] veth3: entered promiscuous mode [ 120.853879][ T7142] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 120.870700][ T7156] lo speed is unknown, defaulting to 1000 [ 120.880808][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'. [ 121.653429][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 121.678811][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 121.982894][ T7183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.360'. [ 122.355305][ T7195] syzkaller0: entered promiscuous mode [ 122.375760][ T7195] syzkaller0: entered allmulticast mode [ 122.782963][ T7209] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 124.394695][ T7201] sch_tbf: burst 2351 is lower than device lo mtu (65550) ! [ 124.435966][ T7213] veth1_macvtap: left promiscuous mode [ 124.450118][ T7213] macsec0: entered promiscuous mode [ 124.469488][ T7217] veth1_macvtap: entered promiscuous mode [ 124.487572][ T7217] macsec0: left promiscuous mode [ 124.548822][ T7219] ax25_connect(): syz.1.372 uses autobind, please contact jreuter@yaina.de [ 124.572990][ T7221] xt_cluster: you have exceeded the maximum number of cluster nodes (261 > 32) [ 125.854324][ T7250] __nla_validate_parse: 2 callbacks suppressed [ 125.854345][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 125.869737][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 126.625112][ T7223] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.853207][ T7262] hsr0: entered promiscuous mode [ 126.862589][ T7263] netlink: 'syz.1.387': attribute type 21 has an invalid length. [ 126.878849][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'. [ 126.931074][ T7261] lo speed is unknown, defaulting to 1000 [ 126.963844][ T7259] lo speed is unknown, defaulting to 1000 [ 127.106474][ T7275] Cannot find add_set index 4 as target [ 127.166170][ T7278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.394'. [ 127.180295][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 127.330257][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.396'. [ 127.855094][ T7304] ieee802154 phy0 wpan0: encryption failed: -90 [ 127.881614][ T7305] netlink: 'syz.1.401': attribute type 1 has an invalid length. [ 127.948403][ T7305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.120100][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 128.120422][ T7319] netlink: 72 bytes leftover after parsing attributes in process `syz.0.405'. [ 128.129187][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 128.190403][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 128.466583][ T7332] syzkaller0: entered promiscuous mode [ 128.500639][ T7332] syzkaller0: entered allmulticast mode [ 129.891157][ T7371] sctp: [Deprecated]: syz.4.422 (pid 7371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.891157][ T7371] Use struct sctp_sack_info instead [ 130.999328][ T7361] lo speed is unknown, defaulting to 1000 [ 131.022579][ T7362] __nla_validate_parse: 32 callbacks suppressed [ 131.022597][ T7362] netlink: 52 bytes leftover after parsing attributes in process `syz.1.420'. [ 131.466498][ T7396] dvmrp2: entered allmulticast mode [ 131.565365][ T7396] siw: device registration error -23 [ 131.831408][ T7408] netlink: 148 bytes leftover after parsing attributes in process `syz.2.430'. [ 131.850110][ T7408] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 132.050970][ T7415] tls_set_device_offload: netdev not found [ 132.434899][ T7425] netlink: 332 bytes leftover after parsing attributes in process `syz.4.434'. [ 132.533294][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.3.436'. [ 132.598998][ T7424] syzkaller0: entered promiscuous mode [ 132.617768][ T7424] syzkaller0: entered allmulticast mode [ 132.649101][ T7412] syz.2.430 (7412) used greatest stack depth: 18168 bytes left [ 132.955966][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.440'. [ 133.183959][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.618486][ T7433] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.437'. [ 134.821807][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.446'. [ 135.059981][ T7474] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 135.076888][ T7474] macsec1: entered promiscuous mode [ 135.084026][ T7474] macsec1: entered allmulticast mode [ 135.086397][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 135.089433][ T7474] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 135.328105][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 135.366886][ T7494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.439826][ T7494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.451585][ T7494] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 135.482076][ T7494] bond1: (slave ipip0): Error -95 calling set_mac_address [ 135.650492][ T7505] netlink: 44 bytes leftover after parsing attributes in process `syz.0.460'. [ 136.366481][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.466'. [ 136.372828][ T7508] hsr0: left promiscuous mode [ 136.496032][ T7508] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.508786][ T7508] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.518270][ T7508] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.527436][ T7508] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.586915][ T7543] netlink: 'syz.4.467': attribute type 3 has an invalid length. [ 136.603504][ T7543] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.467'. [ 136.653412][ T7508] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 136.739242][ T7547] Cannot find map_set index 0 as target [ 136.768252][ T7512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.786501][ T7512] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.825243][ T7512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.859704][ T7548] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 137.135612][ T7556] netlink: 'syz.3.471': attribute type 16 has an invalid length. [ 137.163970][ T7556] netlink: 'syz.3.471': attribute type 17 has an invalid length. [ 137.182997][ T7565] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 137.186400][ T7564] pim6reg: entered allmulticast mode [ 137.200477][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 137.230223][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 137.293679][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 137.308750][ T7554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.470'. [ 137.400407][ T7561] lo speed is unknown, defaulting to 1000 [ 137.574489][ T7568] pim6reg: left allmulticast mode [ 137.748821][ T7585] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 137.767940][ T7585] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 138.123881][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 138.176503][ T7596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.481'. [ 138.394520][ T7605] Cannot find map_set index 0 as target [ 138.496340][ T7606] lo speed is unknown, defaulting to 1000 [ 138.525938][ T7605] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 138.675061][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'. [ 139.881897][ T7638] lo speed is unknown, defaulting to 1000 [ 139.941452][ T7651] : entered promiscuous mode [ 139.991706][ T7653] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 140.045419][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 140.077396][ T5146] Bluetooth: hci4: link tx timeout [ 140.084401][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.094883][ T5146] Bluetooth: hci4: link tx timeout [ 140.100378][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.227613][ T7659] bridge0: entered promiscuous mode [ 140.236167][ T7659] macvlan2: entered promiscuous mode [ 140.259357][ T7659] bridge0: port 1(macvlan2) entered blocking state [ 140.290224][ T7659] bridge0: port 1(macvlan2) entered disabled state [ 140.310364][ T7659] macvlan2: entered allmulticast mode [ 140.315908][ T7659] bridge0: entered allmulticast mode [ 140.323454][ T7659] macvlan2: left allmulticast mode [ 140.328687][ T7659] bridge0: left allmulticast mode [ 140.346627][ T7659] bridge0: left promiscuous mode [ 140.475945][ T7666] lo speed is unknown, defaulting to 1000 [ 140.878536][ T7677] vxcan1: tx address claim with dlc 0 [ 141.099090][ T7683] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 141.557388][ T7709] __nla_validate_parse: 2 callbacks suppressed [ 141.557411][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.512'. [ 141.753487][ T7718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.517'. [ 141.789661][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 142.101887][ T7724] team0 (unregistering): Port device wlan1 removed [ 142.102026][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.519'. [ 142.145045][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 142.295558][ T7724] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 142.414702][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 142.513137][ T7755] netlink: 'syz.3.528': attribute type 6 has an invalid length. [ 142.581558][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 142.594048][ T7757] syzkaller0: entered promiscuous mode [ 142.599618][ T7757] syzkaller0: entered allmulticast mode [ 142.605368][ T7758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 142.616725][ T7759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.529'. [ 142.635902][ T7758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.528'. [ 142.868454][ T7765] xt_nfacct: accounting object `syz1' does not exists [ 144.502281][ T7765] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.712168][ T7765] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.802055][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 144.856921][ T7765] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.974964][ T7765] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.067272][ T7799] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 145.321732][ T7765] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.344575][ T7812] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.354463][ T7765] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.354735][ T7813] bridge_slave_1: left allmulticast mode [ 145.368706][ T7813] bridge_slave_1: left promiscuous mode [ 145.379114][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.405044][ T7811] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.417026][ T7813] bridge_slave_0: left allmulticast mode [ 145.431334][ T7813] bridge_slave_0: left promiscuous mode [ 145.437123][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.451301][ T7811] netlink: 'syz.3.545': attribute type 1 has an invalid length. [ 145.459016][ T7811] NCSI netlink: No device for ifindex 813332851 [ 145.477174][ T7811] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.664685][ T7765] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.748545][ T7765] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.052487][ T7835] syzkaller0: entered promiscuous mode [ 146.058007][ T7835] syzkaller0: entered allmulticast mode [ 146.095317][ T7844] netlink: 'syz.0.553': attribute type 21 has an invalid length. [ 146.804664][ T7856] __nla_validate_parse: 7 callbacks suppressed [ 146.804686][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.555'. [ 147.807864][ T7844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.553'. [ 147.821509][ T7844] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 147.829163][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'. [ 147.844937][ T7851] lo speed is unknown, defaulting to 1000 [ 147.950741][ T7864] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 148.007233][ T7865] xt_TCPMSS: Only works on TCP SYN packets [ 148.117542][ T7871] xt_hashlimit: size too large, truncated to 1048576 [ 148.194566][ T7873] openvswitch: netlink: Message has 8 unknown bytes. [ 148.250444][ T7873] netlink: 'syz.3.561': attribute type 12 has an invalid length. [ 148.868563][ T7884] lo speed is unknown, defaulting to 1000 [ 148.918436][ T7887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.566'. [ 149.292314][ T7893] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 149.334927][ T7895] ip6tnl1: entered promiscuous mode [ 149.370996][ T7895] ip6tnl1: entered allmulticast mode [ 149.609717][ T7904] vlan1: entered promiscuous mode [ 149.619998][ T7904] team0: entered promiscuous mode [ 149.625079][ T7904] team_slave_0: entered promiscuous mode [ 149.639409][ T7904] team_slave_1: entered promiscuous mode [ 150.183205][ T7929] netlink: 'syz.4.578': attribute type 10 has an invalid length. [ 150.372094][ T7932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.582'. [ 151.109072][ T7948] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 151.151955][ T7948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.588'. [ 151.196470][ T7948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.224757][ T7948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.273566][ T7948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.329288][ T7948] geneve0: entered promiscuous mode [ 151.366040][ T7948] geneve0: entered allmulticast mode [ 151.383559][ T7948] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 151.421363][ T7948] team0: Failed to send options change via netlink (err -105) [ 151.439390][ T7948] team0: Port device geneve0 added [ 151.565416][ T7947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.624390][ T36] bridge0: port 1(team0) entered blocking state [ 151.630833][ T36] bridge0: port 1(team0) entered forwarding state [ 151.726261][ T7947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.890973][ T7947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.992194][ T7988] bridge0: entered allmulticast mode [ 152.005857][ T7989] lo speed is unknown, defaulting to 1000 [ 152.230637][ T7947] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.312691][ T7998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.602'. [ 152.346171][ T7947] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.375115][ T7947] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.387110][ T7995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.602'. [ 152.404265][ T7947] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.713397][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 152.783065][ T8009] delete_channel: no stack [ 152.794670][ T8007] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 152.963215][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 153.029095][ T8013] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 153.049079][ T8013] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 153.833480][ T8013] syz.0.608 (8013) used greatest stack depth: 17848 bytes left [ 154.383138][ T8135] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 154.501105][ T8136] lo speed is unknown, defaulting to 1000 [ 154.777659][ T8151] netlink: 'syz.2.631': attribute type 15 has an invalid length. [ 155.074271][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 155.238227][ T8179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.638'. [ 155.261383][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 155.271101][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.638'. [ 155.377104][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 155.599164][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 155.814058][ T8212] netlink: 'syz.4.647': attribute type 1 has an invalid length. [ 155.828125][ T8212] ipip0: entered promiscuous mode [ 155.833835][ T8212] ipip0: entered allmulticast mode [ 156.271342][ T8232] vlan0: entered promiscuous mode [ 156.354360][ T8232] vlan0 (unregistering): left promiscuous mode [ 156.911071][ T8270] netlink: 'syz.2.664': attribute type 4 has an invalid length. [ 156.963311][ T8274] FAULT_INJECTION: forcing a failure. [ 156.963311][ T8274] name failslab, interval 1, probability 0, space 0, times 0 [ 156.983965][ T8274] CPU: 1 UID: 0 PID: 8274 Comm: syz.1.670 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 156.983996][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.984008][ T8274] Call Trace: [ 156.984016][ T8274] [ 156.984024][ T8274] dump_stack_lvl+0x241/0x360 [ 156.984056][ T8274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.984080][ T8274] ? __pfx__printk+0x10/0x10 [ 156.984103][ T8274] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 156.984144][ T8274] ? __pfx___might_resched+0x10/0x10 [ 156.984175][ T8274] should_fail_ex+0x40a/0x550 [ 156.984213][ T8274] should_failslab+0xac/0x100 [ 156.984245][ T8274] kmem_cache_alloc_node_noprof+0x77/0x380 [ 156.984275][ T8274] ? __alloc_skb+0x1c3/0x440 [ 156.984303][ T8274] __alloc_skb+0x1c3/0x440 [ 156.984332][ T8274] ? __pfx___alloc_skb+0x10/0x10 [ 156.984358][ T8274] ? netlink_autobind+0xd6/0x2f0 [ 156.984378][ T8274] ? netlink_autobind+0x2b0/0x2f0 [ 156.984403][ T8274] netlink_sendmsg+0x634/0xcb0 [ 156.984435][ T8274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.984460][ T8274] ? aa_sock_msg_perm+0x91/0x160 [ 156.984499][ T8274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.984517][ T8274] __sock_sendmsg+0x221/0x270 [ 156.984551][ T8274] ____sys_sendmsg+0x53a/0x860 [ 156.984586][ T8274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.984610][ T8274] ? __fget_files+0x2a/0x410 [ 156.984644][ T8274] ? __fget_files+0x2a/0x410 [ 156.984684][ T8274] __sys_sendmsg+0x269/0x350 [ 156.984715][ T8274] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.984754][ T8274] ? do_sys_openat2+0x17a/0x1d0 [ 156.984809][ T8274] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.984844][ T8274] ? do_syscall_64+0x100/0x230 [ 156.984879][ T8274] ? do_syscall_64+0xb6/0x230 [ 156.984912][ T8274] do_syscall_64+0xf3/0x230 [ 156.984946][ T8274] ? clear_bhb_loop+0x35/0x90 [ 156.984979][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.985007][ T8274] RIP: 0033:0x7faf3878d169 [ 156.985025][ T8274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.985041][ T8274] RSP: 002b:00007faf39537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.985064][ T8274] RAX: ffffffffffffffda RBX: 00007faf389a5fa0 RCX: 00007faf3878d169 [ 156.985078][ T8274] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 156.985091][ T8274] RBP: 00007faf39537090 R08: 0000000000000000 R09: 0000000000000000 [ 156.985103][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.985115][ T8274] R13: 0000000000000000 R14: 00007faf389a5fa0 R15: 00007ffe2a9431d8 [ 156.985151][ T8274] [ 157.340329][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 157.397748][ T8284] __nla_validate_parse: 7 callbacks suppressed [ 157.397769][ T8284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.672'. [ 157.572839][ T8291] lo speed is unknown, defaulting to 1000 [ 157.679662][ T8298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.717856][ T8298] lo speed is unknown, defaulting to 1000 [ 158.263969][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.683'. [ 158.281843][ T8319] FAULT_INJECTION: forcing a failure. [ 158.281843][ T8319] name failslab, interval 1, probability 0, space 0, times 0 [ 158.309983][ T8319] CPU: 0 UID: 0 PID: 8319 Comm: syz.3.684 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 158.310013][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.310034][ T8319] Call Trace: [ 158.310041][ T8319] [ 158.310050][ T8319] dump_stack_lvl+0x241/0x360 [ 158.310083][ T8319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.310106][ T8319] ? __pfx__printk+0x10/0x10 [ 158.310130][ T8319] ? kmem_cache_alloc_noprof+0x48/0x380 [ 158.310161][ T8319] ? __pfx___might_resched+0x10/0x10 [ 158.310196][ T8319] should_fail_ex+0x40a/0x550 [ 158.310234][ T8319] should_failslab+0xac/0x100 [ 158.310263][ T8319] ? skb_clone+0x20c/0x390 [ 158.310290][ T8319] kmem_cache_alloc_noprof+0x70/0x380 [ 158.310318][ T8319] ? __virt_addr_valid+0x45f/0x530 [ 158.310343][ T8319] skb_clone+0x20c/0x390 [ 158.310375][ T8319] pfkey_sendmsg+0x454/0x1070 [ 158.310420][ T8319] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 158.310467][ T8319] ? __pfx_aa_sk_perm+0x10/0x10 [ 158.310498][ T8319] ? __import_iovec+0x582/0x830 [ 158.310529][ T8319] ? aa_sock_msg_perm+0x91/0x160 [ 158.310567][ T8319] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 158.310592][ T8319] __sock_sendmsg+0x221/0x270 [ 158.310627][ T8319] ____sys_sendmsg+0x53a/0x860 [ 158.310664][ T8319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.310688][ T8319] ? __fget_files+0x2a/0x410 [ 158.310723][ T8319] ? __fget_files+0x2a/0x410 [ 158.310763][ T8319] __sys_sendmmsg+0x36a/0x720 [ 158.310803][ T8319] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.310844][ T8319] ? __pfx_lock_release+0x10/0x10 [ 158.310874][ T8319] ? kstrtouint_from_user+0x128/0x190 [ 158.310925][ T8319] ? ksys_write+0x22a/0x2b0 [ 158.310947][ T8319] ? __pfx_lock_release+0x10/0x10 [ 158.310987][ T8319] ? sb_end_write+0xe9/0x1c0 [ 158.311018][ T8319] ? vfs_write+0x7fa/0xd10 [ 158.311049][ T8319] ? __mutex_unlock_slowpath+0x227/0x800 [ 158.311113][ T8319] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.311149][ T8319] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.311183][ T8319] ? do_syscall_64+0x100/0x230 [ 158.311219][ T8319] __x64_sys_sendmmsg+0xa0/0xb0 [ 158.311248][ T8319] do_syscall_64+0xf3/0x230 [ 158.311280][ T8319] ? clear_bhb_loop+0x35/0x90 [ 158.311313][ T8319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.311341][ T8319] RIP: 0033:0x7f745a38d169 [ 158.311359][ T8319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.311376][ T8319] RSP: 002b:00007f745b265038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.311397][ T8319] RAX: ffffffffffffffda RBX: 00007f745a5a5fa0 RCX: 00007f745a38d169 [ 158.311412][ T8319] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000004 [ 158.311425][ T8319] RBP: 00007f745b265090 R08: 0000000000000000 R09: 0000000000000000 [ 158.311438][ T8319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.311450][ T8319] R13: 0000000000000000 R14: 00007f745a5a5fa0 R15: 00007fff9a5431b8 [ 158.311481][ T8319] [ 159.059524][ T8338] Cannot find map_set index 0 as target [ 159.074991][ T8335] can: request_module (can-proto-0) failed. [ 159.150027][ T8338] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 159.272125][ T8344] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 159.321319][ T7527] syzkaller1: tun_net_xmit 90 [ 159.741005][ T8362] lo speed is unknown, defaulting to 1000 [ 159.867278][ T8371] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 159.880412][ T8371] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 159.925749][ T8371] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 159.938699][ T8371] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 159.950314][ T8371] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 159.974808][ T8371] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 159.986290][ T8371] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 159.995824][ T8371] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 160.004050][ T8371] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 160.012373][ T8371] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 160.186836][ T8362] x_tables: duplicate entry at hook 2 [ 160.284205][ T8384] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 160.409165][ T8382] netlink: 104 bytes leftover after parsing attributes in process `syz.3.702'. [ 160.628040][ T8402] netlink: 36 bytes leftover after parsing attributes in process `syz.4.707'. [ 160.628994][ T8401] openvswitch: netlink: Message has 125 unknown bytes. [ 160.662502][ T8395] syzkaller0: entered promiscuous mode [ 160.668037][ T8395] syzkaller0: entered allmulticast mode [ 162.994498][ T8422] syzkaller1: entered promiscuous mode [ 163.031876][ T8422] syzkaller1: entered allmulticast mode [ 163.100985][ T8436] FAULT_INJECTION: forcing a failure. [ 163.100985][ T8436] name failslab, interval 1, probability 0, space 0, times 0 [ 163.115445][ T8436] CPU: 1 UID: 0 PID: 8436 Comm: syz.2.718 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 163.115474][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.115486][ T8436] Call Trace: [ 163.115494][ T8436] [ 163.115502][ T8436] dump_stack_lvl+0x241/0x360 [ 163.115533][ T8436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.115566][ T8436] ? __pfx__printk+0x10/0x10 [ 163.115589][ T8436] ? __kmalloc_cache_noprof+0x48/0x390 [ 163.115620][ T8436] ? __pfx___might_resched+0x10/0x10 [ 163.115653][ T8436] should_fail_ex+0x40a/0x550 [ 163.115689][ T8436] should_failslab+0xac/0x100 [ 163.115718][ T8436] __kmalloc_cache_noprof+0x70/0x390 [ 163.115745][ T8436] ? pfkey_add+0x132e/0x2e20 [ 163.115775][ T8436] pfkey_add+0x132e/0x2e20 [ 163.115815][ T8436] ? __pfx_pfkey_add+0x10/0x10 [ 163.115841][ T8436] ? pfkey_broadcast+0x45/0x400 [ 163.115860][ T8436] ? pfkey_broadcast+0x3e3/0x400 [ 163.115885][ T8436] pfkey_sendmsg+0xbe3/0x1070 [ 163.115920][ T8436] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 163.115958][ T8436] ? __pfx_aa_sk_perm+0x10/0x10 [ 163.115985][ T8436] ? __import_iovec+0x582/0x830 [ 163.116010][ T8436] ? aa_sock_msg_perm+0x91/0x160 [ 163.116043][ T8436] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 163.116064][ T8436] __sock_sendmsg+0x221/0x270 [ 163.116095][ T8436] ____sys_sendmsg+0x53a/0x860 [ 163.116125][ T8436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.116146][ T8436] ? __fget_files+0x2a/0x410 [ 163.116176][ T8436] ? __fget_files+0x2a/0x410 [ 163.116210][ T8436] __sys_sendmmsg+0x36a/0x720 [ 163.116243][ T8436] ? __pfx___sys_sendmmsg+0x10/0x10 [ 163.116276][ T8436] ? __pfx_lock_release+0x10/0x10 [ 163.116303][ T8436] ? kstrtouint_from_user+0x128/0x190 [ 163.116345][ T8436] ? ksys_write+0x22a/0x2b0 [ 163.116364][ T8436] ? __pfx_lock_release+0x10/0x10 [ 163.116397][ T8436] ? sb_end_write+0xe9/0x1c0 [ 163.116424][ T8436] ? vfs_write+0x7fa/0xd10 [ 163.116445][ T8436] ? __mutex_unlock_slowpath+0x227/0x800 [ 163.116498][ T8436] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 163.116528][ T8436] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.116566][ T8436] ? do_syscall_64+0x100/0x230 [ 163.116597][ T8436] __x64_sys_sendmmsg+0xa0/0xb0 [ 163.116622][ T8436] do_syscall_64+0xf3/0x230 [ 163.116649][ T8436] ? clear_bhb_loop+0x35/0x90 [ 163.116679][ T8436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.116704][ T8436] RIP: 0033:0x7fd4acd8d169 [ 163.116720][ T8436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.116734][ T8436] RSP: 002b:00007fd4adc30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 163.116753][ T8436] RAX: ffffffffffffffda RBX: 00007fd4acfa5fa0 RCX: 00007fd4acd8d169 [ 163.116766][ T8436] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000004 [ 163.116777][ T8436] RBP: 00007fd4adc30090 R08: 0000000000000000 R09: 0000000000000000 [ 163.116788][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.116799][ T8436] R13: 0000000000000000 R14: 00007fd4acfa5fa0 R15: 00007ffc9f6b3c48 [ 163.116826][ T8436] [ 163.709060][ T8447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.719'. [ 163.948667][ T8455] lo speed is unknown, defaulting to 1000 [ 164.175681][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 164.214876][ T8469] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 164.266779][ T8473] netlink: 36 bytes leftover after parsing attributes in process `syz.4.727'. [ 164.284777][ T8466] syzkaller0: entered promiscuous mode [ 164.296968][ T8466] syzkaller0: entered allmulticast mode [ 164.588039][ T8483] FAULT_INJECTION: forcing a failure. [ 164.588039][ T8483] name failslab, interval 1, probability 0, space 0, times 0 [ 164.606655][ T8483] CPU: 1 UID: 0 PID: 8483 Comm: syz.3.730 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 164.606700][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.606711][ T8483] Call Trace: [ 164.606718][ T8483] [ 164.606726][ T8483] dump_stack_lvl+0x241/0x360 [ 164.606757][ T8483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.606779][ T8483] ? __pfx__printk+0x10/0x10 [ 164.606801][ T8483] ? __kmalloc_cache_noprof+0x48/0x390 [ 164.606830][ T8483] ? __pfx___might_resched+0x10/0x10 [ 164.606857][ T8483] should_fail_ex+0x40a/0x550 [ 164.606888][ T8483] should_failslab+0xac/0x100 [ 164.606912][ T8483] __kmalloc_cache_noprof+0x70/0x390 [ 164.606936][ T8483] ? ipcomp_init_state+0x12f/0x860 [ 164.606957][ T8483] ipcomp_init_state+0x12f/0x860 [ 164.606982][ T8483] ipcomp6_init_state+0xc9/0x7f0 [ 164.607003][ T8483] ? __xfrm_init_state+0x725/0x12e0 [ 164.607028][ T8483] ? __xfrm_init_state+0x725/0x12e0 [ 164.607055][ T8483] __xfrm_init_state+0x9bc/0x12e0 [ 164.607090][ T8483] xfrm_init_state+0x1f/0x80 [ 164.607113][ T8483] pfkey_add+0x1ce1/0x2e20 [ 164.607150][ T8483] ? __pfx_pfkey_add+0x10/0x10 [ 164.607175][ T8483] ? pfkey_broadcast+0x45/0x400 [ 164.607193][ T8483] ? pfkey_broadcast+0x3e3/0x400 [ 164.607218][ T8483] pfkey_sendmsg+0xbe3/0x1070 [ 164.607253][ T8483] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 164.607291][ T8483] ? __pfx_aa_sk_perm+0x10/0x10 [ 164.607317][ T8483] ? __import_iovec+0x582/0x830 [ 164.607342][ T8483] ? aa_sock_msg_perm+0x91/0x160 [ 164.607374][ T8483] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 164.607394][ T8483] __sock_sendmsg+0x221/0x270 [ 164.607424][ T8483] ____sys_sendmsg+0x53a/0x860 [ 164.607455][ T8483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.607483][ T8483] ? __fget_files+0x2a/0x410 [ 164.607522][ T8483] ? __fget_files+0x2a/0x410 [ 164.607555][ T8483] __sys_sendmmsg+0x36a/0x720 [ 164.607587][ T8483] ? __pfx___sys_sendmmsg+0x10/0x10 [ 164.607620][ T8483] ? __pfx_lock_release+0x10/0x10 [ 164.607646][ T8483] ? kstrtouint_from_user+0x128/0x190 [ 164.607696][ T8483] ? ksys_write+0x22a/0x2b0 [ 164.607715][ T8483] ? __pfx_lock_release+0x10/0x10 [ 164.607746][ T8483] ? sb_end_write+0xe9/0x1c0 [ 164.607773][ T8483] ? vfs_write+0x7fa/0xd10 [ 164.607793][ T8483] ? __mutex_unlock_slowpath+0x227/0x800 [ 164.607845][ T8483] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.607875][ T8483] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.607903][ T8483] ? do_syscall_64+0x100/0x230 [ 164.607933][ T8483] __x64_sys_sendmmsg+0xa0/0xb0 [ 164.607957][ T8483] do_syscall_64+0xf3/0x230 [ 164.607983][ T8483] ? clear_bhb_loop+0x35/0x90 [ 164.608012][ T8483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.608037][ T8483] RIP: 0033:0x7f745a38d169 [ 164.608053][ T8483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.608067][ T8483] RSP: 002b:00007f745b265038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 164.608087][ T8483] RAX: ffffffffffffffda RBX: 00007f745a5a5fa0 RCX: 00007f745a38d169 [ 164.608099][ T8483] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000004 [ 164.608110][ T8483] RBP: 00007f745b265090 R08: 0000000000000000 R09: 0000000000000000 [ 164.608121][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.608130][ T8483] R13: 0000000000000000 R14: 00007f745a5a5fa0 R15: 00007fff9a5431b8 [ 164.608157][ T8483] [ 164.988329][ T8455] netlink: 32 bytes leftover after parsing attributes in process `syz.2.724'. [ 167.409045][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'. [ 167.501345][ T8536] bridge0: port 2(vlan2) entered blocking state [ 167.526829][ T8536] bridge0: port 2(vlan2) entered disabled state [ 167.533948][ T8536] vlan2: entered allmulticast mode [ 167.539664][ T8536] bridge0: entered allmulticast mode [ 167.548214][ T8536] vlan2: left allmulticast mode [ 167.570876][ T8536] bridge0: left allmulticast mode [ 167.577077][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 167.628182][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'. [ 167.736035][ T8559] sctp: [Deprecated]: syz.2.749 (pid 8559) Use of int in maxseg socket option. [ 167.736035][ T8559] Use struct sctp_assoc_value instead [ 168.148490][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 168.171622][ T8577] validate_nla: 55 callbacks suppressed [ 168.171643][ T8577] netlink: 'syz.3.755': attribute type 10 has an invalid length. [ 168.202661][ T8577] veth0_vlan: left promiscuous mode [ 168.214900][ T8577] veth0_vlan: entered promiscuous mode [ 168.225201][ T8577] team0: Device veth0_vlan failed to register rx_handler [ 168.335330][ T8588] netlink: 148 bytes leftover after parsing attributes in process `syz.4.758'. [ 168.355418][ T8588] netlink: 148 bytes leftover after parsing attributes in process `syz.4.758'. [ 168.973702][ T8621] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 169.024198][ T8621] team0: Device veth1_vlan failed to register rx_handler [ 169.087039][ T8626] lo speed is unknown, defaulting to 1000 [ 169.143090][ T8636] __nla_validate_parse: 9 callbacks suppressed [ 169.143111][ T8636] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.771'. [ 169.177106][ T8636] openvswitch: netlink: Unknown key attributes 20 [ 169.223911][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'. [ 169.254510][ T8624] SET target dimension over the limit! [ 169.361515][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f583000: rx timeout, send abort [ 169.466411][ T8646] netlink: 'syz.3.775': attribute type 4 has an invalid length. [ 169.573597][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.776'. [ 169.685548][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 169.794800][ T8642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.773'. [ 169.862613][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079237800: rx timeout, send abort [ 169.871288][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f583000: abort rx timeout. Force session deactivation [ 170.208576][ T8676] netlink: 'syz.4.784': attribute type 1 has an invalid length. [ 170.239998][ T8676] netlink: 224 bytes leftover after parsing attributes in process `syz.4.784'. [ 170.339083][ T8683] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20003 [ 170.370974][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079237800: abort rx timeout. Force session deactivation [ 170.536573][ T8689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.787'. [ 170.626316][ T8691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.789'. [ 170.654833][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.787'. [ 170.705292][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.787'. [ 171.014002][ T30] audit: type=1800 audit(1742798173.092:2): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.791" name="memory.events" dev="tmpfs" ino=734 res=0 errno=0 [ 171.099997][ T30] audit: type=1804 audit(1742798173.102:3): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.791" name="/newroot/139/memory.events" dev="tmpfs" ino=734 res=1 errno=0 [ 171.413049][ T8709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.592178][ T8709] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 171.984078][ T8730] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (36) [ 172.881544][ T8766] team0: Device gtp0 is of different type [ 172.927076][ T8767] team0: Device gtp0 is of different type [ 173.301581][ T8782] netlink: 'syz.4.816': attribute type 21 has an invalid length. [ 173.311242][ T8784] netlink: 'syz.4.816': attribute type 21 has an invalid length. [ 173.525298][ T8792] trusted_key: syz.0.821 sent an empty control message without MSG_MORE. [ 173.616854][ T8799] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.625270][ T8799] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.633602][ T8799] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.641849][ T8799] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.761681][ T8808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.881338][ T8806] sch_tbf: burst 511 is lower than device veth7 mtu (1514) ! [ 174.095389][ T8829] netlink: 'syz.1.831': attribute type 1 has an invalid length. [ 174.130241][ T8829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.365549][ T8843] __nla_validate_parse: 18 callbacks suppressed [ 174.365569][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 174.411714][ T8845] x_tables: duplicate underflow at hook 1 [ 174.543386][ T8852] netlink: 'syz.2.841': attribute type 64 has an invalid length. [ 174.574674][ T8851] netlink: 'syz.2.841': attribute type 64 has an invalid length. [ 174.615016][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 174.633180][ T8852] netlink: 9 bytes leftover after parsing attributes in process `syz.2.841'. [ 174.642991][ T8860] netlink: 'syz.1.842': attribute type 1 has an invalid length. [ 174.657640][ T8863] netlink: 76 bytes leftover after parsing attributes in process `syz.4.844'. [ 174.671840][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 174.692496][ T8852] gretap0: entered promiscuous mode [ 174.820526][ T8855] veth3: entered promiscuous mode [ 174.822132][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 175.240472][ T8880] netlink: 356 bytes leftover after parsing attributes in process `syz.2.849'. [ 175.249500][ T8880] netlink: 356 bytes leftover after parsing attributes in process `syz.2.849'. [ 175.367565][ T8894] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 175.741993][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'. [ 177.421824][ T8981] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 177.543266][ T8986] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 177.731182][ T8995] bond0: (slave dummy0): Releasing backup interface [ 177.956220][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 177.963092][ T8995] bond0: (slave bond_slave_0): Releasing backup interface [ 178.029501][ T8995] bond0: (slave bond_slave_1): Releasing backup interface [ 178.047744][ T8995] team_slave_0: left promiscuous mode [ 178.074606][ T8995] team0: Port device team_slave_0 removed [ 178.087604][ T8995] team_slave_1: left promiscuous mode [ 178.104150][ T8995] team0: Port device team_slave_1 removed [ 178.111460][ T8995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.118928][ T8995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.134390][ T8995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.145492][ T8995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.165645][ T8995] batman_adv: batadv0: Removing interface: gretap1 [ 178.184310][ T9000] netlink: 'syz.0.881': attribute type 5 has an invalid length. [ 178.266786][ T9016] bond2: entered promiscuous mode [ 178.275962][ T9016] bond2: entered allmulticast mode [ 178.281963][ T9016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.319063][ T8999] lo speed is unknown, defaulting to 1000 [ 178.455601][ T9023] lo speed is unknown, defaulting to 1000 [ 178.480657][ T9026] gretap0: entered promiscuous mode [ 178.556887][ T9022] lo speed is unknown, defaulting to 1000 [ 178.616505][ T9028] netlink: 'syz.2.891': attribute type 4 has an invalid length. [ 178.686913][ T9034] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 178.858344][ T9038] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 179.500241][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 179.563135][ T9057] __nla_validate_parse: 5 callbacks suppressed [ 179.563157][ T9057] netlink: 52 bytes leftover after parsing attributes in process `syz.3.900'. [ 179.725482][ T9062] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 179.785029][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 180.255350][ T9087] tipc: Started in network mode [ 180.260411][ T9087] tipc: Node identity 4, cluster identity 4711 [ 180.266608][ T9087] tipc: Node number set to 4 [ 180.485727][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 180.517979][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 180.636290][ T9107] lo speed is unknown, defaulting to 1000 [ 180.712716][ T9112] lo speed is unknown, defaulting to 1000 [ 180.763531][ T9107] lo speed is unknown, defaulting to 1000 [ 180.874357][ T9112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.919'. [ 181.009557][ T9107] lo speed is unknown, defaulting to 1000 [ 181.095377][ T9121] xt_hashlimit: invalid rate [ 181.345214][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'. [ 181.489492][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 181.515245][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 181.525476][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 181.545192][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 181.733919][ T9143] netlink: 'syz.0.927': attribute type 1 has an invalid length. [ 181.751041][ T9143] netlink: 'syz.0.927': attribute type 11 has an invalid length. [ 182.355225][ T9168] tipc: Started in network mode [ 182.361266][ T9168] tipc: Node identity 2eabde02173e, cluster identity 4711 [ 182.390611][ T9168] tipc: Enabled bearer , priority 0 [ 182.595541][ T8074] tipc: Resetting bearer [ 182.625944][ T9161] tipc: Resetting bearer [ 183.503855][ T7540] tipc: Node number set to 966123010 [ 183.696392][ T9201] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 184.572194][ T9161] tipc: Disabling bearer [ 184.776243][ T9209] lo speed is unknown, defaulting to 1000 [ 184.840055][ T9211] __nla_validate_parse: 82 callbacks suppressed [ 184.840075][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 184.922154][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 184.978495][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 184.981603][ T9215] netlink: 70 bytes leftover after parsing attributes in process `syz.3.941'. [ 184.998001][ T9223] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 185.180307][ T9226] netlink: 'syz.0.945': attribute type 29 has an invalid length. [ 185.196784][ T9226] netlink: 'syz.0.945': attribute type 29 has an invalid length. [ 185.217551][ T9226] netlink: 'syz.0.945': attribute type 29 has an invalid length. [ 185.244509][ T9226] netlink: 'syz.0.945': attribute type 29 has an invalid length. [ 185.361779][ T9240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.947'. [ 185.514703][ T9229] team_slave_0: left promiscuous mode [ 185.538439][ T9229] team0 (unregistering): Port device team_slave_0 removed [ 185.546505][ T9229] team_slave_1: left promiscuous mode [ 185.560794][ T9229] team0 (unregistering): Port device team_slave_1 removed [ 185.598341][ T9226] netlink: 'syz.0.945': attribute type 29 has an invalid length. [ 185.621058][ T9226] netlink: 'syz.0.945': attribute type 29 has an invalid length. [ 185.644416][ T9226] netlink: 'syz.0.945': attribute type 29 has an invalid length. [ 185.651396][ T9253] netlink: 56 bytes leftover after parsing attributes in process `syz.4.950'. [ 185.671533][ T9226] netlink: 'syz.0.945': attribute type 29 has an invalid length. [ 185.694453][ T9226] netlink: 'syz.0.945': attribute type 29 has an invalid length. [ 185.882516][ T9258] FAULT_INJECTION: forcing a failure. [ 185.882516][ T9258] name failslab, interval 1, probability 0, space 0, times 0 [ 185.913528][ T9258] CPU: 1 UID: 0 PID: 9258 Comm: syz.2.952 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 185.913560][ T9258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.913573][ T9258] Call Trace: [ 185.913580][ T9258] [ 185.913589][ T9258] dump_stack_lvl+0x241/0x360 [ 185.913630][ T9258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.913653][ T9258] ? __pfx__printk+0x10/0x10 [ 185.913677][ T9258] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 185.913709][ T9258] ? __pfx___might_resched+0x10/0x10 [ 185.913742][ T9258] should_fail_ex+0x40a/0x550 [ 185.913780][ T9258] should_failslab+0xac/0x100 [ 185.913811][ T9258] __kmalloc_node_noprof+0xe1/0x4d0 [ 185.913839][ T9258] ? __kasan_kmalloc+0x98/0xb0 [ 185.913861][ T9258] ? __kvmalloc_node_noprof+0x72/0x190 [ 185.913900][ T9258] __kvmalloc_node_noprof+0x72/0x190 [ 185.913935][ T9258] page_pool_create_percpu+0x2f5/0xb70 [ 185.913972][ T9258] bpf_test_run_xdp_live+0x2e6/0x2220 [ 185.914006][ T9258] ? __pfx_lock_release+0x10/0x10 [ 185.914044][ T9258] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 185.914069][ T9258] ? __pfx___might_resched+0x10/0x10 [ 185.914101][ T9258] ? __mutex_unlock_slowpath+0x227/0x800 [ 185.914142][ T9258] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 185.914174][ T9258] ? synchronize_rcu+0x11b/0x360 [ 185.914199][ T9258] ? __pfx_synchronize_rcu+0x10/0x10 [ 185.914247][ T9258] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 185.914277][ T9258] ? 0xffffffffa000064c [ 185.914307][ T9258] ? 0xffffffffa0000750 [ 185.914323][ T9258] ? 0xffffffffa000078c [ 185.914359][ T9258] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 185.914398][ T9258] ? _copy_from_user+0x95/0xb0 [ 185.914428][ T9258] ? bpf_test_init+0x137/0x160 [ 185.914457][ T9258] ? xdp_convert_md_to_buff+0x5b/0x330 [ 185.914492][ T9258] bpf_prog_test_run_xdp+0x805/0x11e0 [ 185.914531][ T9258] ? __pfx_lock_release+0x10/0x10 [ 185.914577][ T9258] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 185.914611][ T9258] ? __fget_files+0x2a/0x410 [ 185.914645][ T9258] ? __fget_files+0x2a/0x410 [ 185.914680][ T9258] ? fput+0x21b/0x290 [ 185.914708][ T9258] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 185.914744][ T9258] bpf_prog_test_run+0x2e4/0x360 [ 185.914779][ T9258] __sys_bpf+0x487/0x820 [ 185.914811][ T9258] ? __pfx___sys_bpf+0x10/0x10 [ 185.914854][ T9258] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.914889][ T9258] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.914923][ T9258] ? do_syscall_64+0x100/0x230 [ 185.914959][ T9258] __x64_sys_bpf+0x7c/0x90 [ 185.914987][ T9258] do_syscall_64+0xf3/0x230 [ 185.915018][ T9258] ? clear_bhb_loop+0x35/0x90 [ 185.915051][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.915079][ T9258] RIP: 0033:0x7fd4acd8d169 [ 185.915096][ T9258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.915112][ T9258] RSP: 002b:00007fd4adc30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.915143][ T9258] RAX: ffffffffffffffda RBX: 00007fd4acfa5fa0 RCX: 00007fd4acd8d169 [ 185.915158][ T9258] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 185.915170][ T9258] RBP: 00007fd4adc30090 R08: 0000000000000000 R09: 0000000000000000 [ 185.915183][ T9258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.915195][ T9258] R13: 0000000000000000 R14: 00007fd4acfa5fa0 R15: 00007ffc9f6b3c48 [ 185.915226][ T9258] [ 185.917071][ T9258] page_pool_create_percpu() gave up with errno -12 [ 186.558928][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 186.603947][ T9279] macvtap1: entered promiscuous mode [ 186.615689][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 186.638408][ T9279] bond0: entered promiscuous mode [ 186.643879][ T9279] macvtap1: entered allmulticast mode [ 186.659094][ T9279] bond0: entered allmulticast mode [ 186.665103][ T9279] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 186.682585][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 186.687016][ T9282] macvtap1: left promiscuous mode [ 186.709043][ T9282] bond0: left promiscuous mode [ 186.716696][ T9282] macvtap1: left allmulticast mode [ 186.731147][ T9282] bond0: left allmulticast mode [ 186.775246][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'. [ 187.028156][ T9302] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 187.087639][ T9291] bond_slave_1: entered promiscuous mode [ 187.120701][ T9291] macvlan2: entered promiscuous mode [ 187.126064][ T9291] bond0: entered promiscuous mode [ 187.140155][ T9291] macvlan0: entered promiscuous mode [ 187.147070][ T9291] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.171389][ T9305] lo speed is unknown, defaulting to 1000 [ 187.192666][ T9309] lo speed is unknown, defaulting to 1000 [ 187.863569][ T9344] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 187.946660][ T9348] netlink: 'syz.1.979': attribute type 13 has an invalid length. [ 188.139209][ T9354] batman_adv: batadv0: Adding interface: dummy0 [ 188.156942][ T9354] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.221171][ T9354] batman_adv: batadv0: Interface activated: dummy0 [ 188.285750][ T9360] syzkaller1: entered promiscuous mode [ 188.315131][ T9360] syzkaller1: entered allmulticast mode [ 188.633308][ T9380] pim6reg: entered allmulticast mode [ 188.640249][ T9381] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 188.703896][ T9380] pim6reg: left allmulticast mode [ 188.743980][ T9388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.778299][ T9389] macvlan0: entered promiscuous mode [ 188.786910][ T9389] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 189.147561][ T9413] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 190.004787][ T9446] __nla_validate_parse: 16 callbacks suppressed [ 190.004807][ T9446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1009'. [ 190.269506][ T9459] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.337908][ T9461] rdma_op ffff88807ef161f0 conn xmit_rdma 0000000000000000 [ 190.358129][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 190.435771][ T9466] ================================================================== [ 190.443910][ T9466] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 190.452715][ T9466] Write of size 8 at addr ffff88802b0aebf0 by task syz.0.1014/9466 [ 190.460642][ T9466] [ 190.462983][ T9466] CPU: 0 UID: 0 PID: 9466 Comm: syz.0.1014 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 190.463007][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.463019][ T9466] Call Trace: [ 190.463026][ T9466] [ 190.463033][ T9466] dump_stack_lvl+0x241/0x360 [ 190.463060][ T9466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.463080][ T9466] ? __pfx__printk+0x10/0x10 [ 190.463104][ T9466] ? _printk+0xd5/0x120 [ 190.463121][ T9466] ? __virt_addr_valid+0x183/0x530 [ 190.463138][ T9466] ? __virt_addr_valid+0x183/0x530 [ 190.463157][ T9466] print_report+0x16e/0x5b0 [ 190.463180][ T9466] ? __virt_addr_valid+0x183/0x530 [ 190.463197][ T9466] ? __virt_addr_valid+0x183/0x530 [ 190.463213][ T9466] ? __virt_addr_valid+0x45f/0x530 [ 190.463229][ T9466] ? __phys_addr+0xba/0x170 [ 190.463246][ T9466] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 190.463267][ T9466] kasan_report+0x143/0x180 [ 190.463291][ T9466] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 190.463315][ T9466] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 190.463338][ T9466] gtp_create_sock+0x4b9/0x6b0 [ 190.463363][ T9466] ? __pfx_gtp_create_sock+0x10/0x10 [ 190.463386][ T9466] ? __pfx_gtp_encap_recv+0x10/0x10 [ 190.463414][ T9466] ? rcu_is_watching+0x15/0xb0 [ 190.463434][ T9466] ? trace_kmalloc+0x1f/0xd0 [ 190.463459][ T9466] ? __kmalloc_noprof+0x2a5/0x4c0 [ 190.463484][ T9466] ? gtp_newlink+0x285/0xf70 [ 190.463506][ T9466] gtp_newlink+0x64b/0xf70 [ 190.463528][ T9466] ? __pfx_gtp_newlink+0x10/0x10 [ 190.463549][ T9466] rtnl_newlink_create+0x37b/0xbd0 [ 190.463573][ T9466] ? __pfx_aa_get_newest_label+0x10/0x10 [ 190.463604][ T9466] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 190.463625][ T9466] ? __pfx___mutex_lock+0x10/0x10 [ 190.463657][ T9466] ? ns_capable+0x8a/0xf0 [ 190.463679][ T9466] rtnl_newlink+0x167a/0x1d90 [ 190.463697][ T9466] ? stack_depot_save_flags+0x37/0x940 [ 190.463733][ T9466] ? __pfx_rtnl_newlink+0x10/0x10 [ 190.463748][ T9466] ? __netlink_deliver_tap+0x561/0x7f0 [ 190.463778][ T9466] ? __pfx_validate_chain+0x10/0x10 [ 190.463796][ T9466] ? __sock_sendmsg+0x221/0x270 [ 190.463823][ T9466] ? ____sys_sendmsg+0x53a/0x860 [ 190.463845][ T9466] ? __sys_sendmsg+0x269/0x350 [ 190.463867][ T9466] ? do_syscall_64+0xf3/0x230 [ 190.463892][ T9466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.463927][ T9466] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 190.463956][ T9466] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 190.463988][ T9466] ? mark_lock+0x9a/0x360 [ 190.464007][ T9466] ? __lock_acquire+0x1397/0x2100 [ 190.464049][ T9466] ? __pfx_lock_release+0x10/0x10 [ 190.464083][ T9466] ? __pfx_rtnl_newlink+0x10/0x10 [ 190.464107][ T9466] rtnetlink_rcv_msg+0x791/0xcf0 [ 190.464135][ T9466] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 190.464166][ T9466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 190.464197][ T9466] ? ref_tracker_free+0x643/0x7e0 [ 190.464219][ T9466] netlink_rcv_skb+0x206/0x480 [ 190.464247][ T9466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 190.464278][ T9466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.464316][ T9466] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.464345][ T9466] netlink_unicast+0x7f6/0x990 [ 190.464375][ T9466] ? __pfx_netlink_unicast+0x10/0x10 [ 190.464399][ T9466] ? __virt_addr_valid+0x45f/0x530 [ 190.464417][ T9466] ? __phys_addr_symbol+0x2f/0x70 [ 190.464433][ T9466] ? __check_object_size+0x47a/0x730 [ 190.464460][ T9466] netlink_sendmsg+0x8de/0xcb0 [ 190.464483][ T9466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.464502][ T9466] ? aa_sock_msg_perm+0x91/0x160 [ 190.464533][ T9466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.464549][ T9466] __sock_sendmsg+0x221/0x270 [ 190.464577][ T9466] ____sys_sendmsg+0x53a/0x860 [ 190.464604][ T9466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.464625][ T9466] ? __fget_files+0x2a/0x410 [ 190.464652][ T9466] ? __fget_files+0x2a/0x410 [ 190.464683][ T9466] __sys_sendmsg+0x269/0x350 [ 190.464704][ T9466] ? __pfx_futex_wake+0x10/0x10 [ 190.464733][ T9466] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.464775][ T9466] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 190.464803][ T9466] ? do_syscall_64+0x100/0x230 [ 190.464831][ T9466] ? do_syscall_64+0xb6/0x230 [ 190.464860][ T9466] do_syscall_64+0xf3/0x230 [ 190.464887][ T9466] ? clear_bhb_loop+0x35/0x90 [ 190.464914][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.464939][ T9466] RIP: 0033:0x7fc6e778d169 [ 190.464955][ T9466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.464971][ T9466] RSP: 002b:00007fc6e8542038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.464990][ T9466] RAX: ffffffffffffffda RBX: 00007fc6e79a6080 RCX: 00007fc6e778d169 [ 190.465004][ T9466] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 190.465015][ T9466] RBP: 00007fc6e780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.465027][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.465038][ T9466] R13: 0000000000000000 R14: 00007fc6e79a6080 R15: 00007fff69ece7e8 [ 190.465058][ T9466] [ 190.465065][ T9466] [ 190.952300][ T9466] Allocated by task 8766: [ 190.956636][ T9466] kasan_save_track+0x3f/0x80 [ 190.961328][ T9466] __kasan_slab_alloc+0x66/0x80 [ 190.966189][ T9466] kmem_cache_alloc_noprof+0x1d9/0x380 [ 190.971831][ T9466] sk_prot_alloc+0x58/0x210 [ 190.976344][ T9466] sk_alloc+0x3e/0x370 [ 190.980434][ T9466] inet_create+0x648/0xea0 [ 190.984892][ T9466] __sock_create+0x4c0/0xa30 [ 190.989504][ T9466] __sys_socket+0x150/0x3c0 [ 190.994016][ T9466] __x64_sys_socket+0x7a/0x90 [ 190.998706][ T9466] do_syscall_64+0xf3/0x230 [ 191.003231][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.009138][ T9466] [ 191.011463][ T9466] Freed by task 8767: [ 191.015458][ T9466] kasan_save_track+0x3f/0x80 [ 191.020157][ T9466] kasan_save_free_info+0x40/0x50 [ 191.025217][ T9466] __kasan_slab_free+0x59/0x70 [ 191.029996][ T9466] kmem_cache_free+0x195/0x410 [ 191.034777][ T9466] __sk_destruct+0x4fd/0x690 [ 191.039379][ T9466] inet_release+0x17d/0x200 [ 191.043914][ T9466] sock_close+0xbc/0x240 [ 191.048186][ T9466] __fput+0x3e9/0x9f0 [ 191.052194][ T9466] task_work_run+0x24f/0x310 [ 191.056796][ T9466] do_exit+0xa2a/0x2940 [ 191.060969][ T9466] do_group_exit+0x207/0x2c0 [ 191.065582][ T9466] get_signal+0x168c/0x1720 [ 191.070099][ T9466] arch_do_signal_or_restart+0x96/0x860 [ 191.075679][ T9466] syscall_exit_to_user_mode+0xce/0x340 [ 191.081242][ T9466] do_syscall_64+0x100/0x230 [ 191.085873][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.091778][ T9466] [ 191.094105][ T9466] The buggy address belongs to the object at ffff88802b0ae4c0 [ 191.094105][ T9466] which belongs to the cache UDP of size 1856 [ 191.107570][ T9466] The buggy address is located 1840 bytes inside of [ 191.107570][ T9466] freed 1856-byte region [ffff88802b0ae4c0, ffff88802b0aec00) [ 191.121554][ T9466] [ 191.123886][ T9466] The buggy address belongs to the physical page: [ 191.130315][ T9466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b0aec80 pfn:0x2b0a8 [ 191.140383][ T9466] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 191.148879][ T9466] memcg:ffff88807c727901 [ 191.153135][ T9466] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 191.161645][ T9466] page_type: f5(slab) [ 191.165632][ T9466] raw: 00fff00000000240 ffff88801b15c280 ffffea0000d24e10 ffff88802129fdc8 [ 191.174234][ T9466] raw: ffff88802b0aec80 0000000000100001 00000000f5000000 ffff88807c727901 [ 191.182840][ T9466] head: 00fff00000000240 ffff88801b15c280 ffffea0000d24e10 ffff88802129fdc8 [ 191.191520][ T9466] head: ffff88802b0aec80 0000000000100001 00000000f5000000 ffff88807c727901 [ 191.200198][ T9466] head: 00fff00000000003 ffffea0000ac2a01 ffffffffffffffff 0000000000000000 [ 191.208877][ T9466] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 191.217548][ T9466] page dumped because: kasan: bad access detected [ 191.223968][ T9466] page_owner tracks the page as allocated [ 191.229680][ T9466] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8688, tgid 8686 (syz.0.788), ts 170484887062, free_ts 169060435213 [ 191.250969][ T9466] post_alloc_hook+0x1f4/0x240 [ 191.255768][ T9466] get_page_from_freelist+0x365c/0x37a0 [ 191.261323][ T9466] __alloc_frozen_pages_noprof+0x292/0x710 [ 191.267140][ T9466] alloc_pages_mpol+0x311/0x660 [ 191.272002][ T9466] allocate_slab+0x8f/0x3a0 [ 191.276511][ T9466] ___slab_alloc+0xc27/0x14a0 [ 191.281207][ T9466] __slab_alloc+0x58/0xa0 [ 191.285549][ T9466] kmem_cache_alloc_noprof+0x268/0x380 [ 191.291018][ T9466] sk_prot_alloc+0x58/0x210 [ 191.295533][ T9466] sk_alloc+0x3e/0x370 [ 191.299605][ T9466] inet_create+0x648/0xea0 [ 191.304053][ T9466] __sock_create+0x4c0/0xa30 [ 191.308663][ T9466] __sys_socket+0x150/0x3c0 [ 191.313171][ T9466] __x64_sys_socket+0x7a/0x90 [ 191.317858][ T9466] do_syscall_64+0xf3/0x230 [ 191.322373][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.328277][ T9466] page last free pid 8621 tgid 8620 stack trace: [ 191.334603][ T9466] free_frozen_pages+0xe0d/0x10e0 [ 191.339636][ T9466] __put_partials+0x160/0x1c0 [ 191.344315][ T9466] put_cpu_partial+0x17c/0x250 [ 191.349085][ T9466] __slab_free+0x290/0x380 [ 191.353503][ T9466] qlist_free_all+0x9a/0x140 [ 191.358097][ T9466] kasan_quarantine_reduce+0x14f/0x170 [ 191.363559][ T9466] __kasan_slab_alloc+0x23/0x80 [ 191.368421][ T9466] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 191.374330][ T9466] __alloc_skb+0x1c3/0x440 [ 191.378756][ T9466] inet_ifmcaddr_notify+0xf3/0x200 [ 191.383886][ T9466] __ip_mc_dec_group+0x41c/0x700 [ 191.388837][ T9466] inetdev_event+0x2b6/0x1620 [ 191.393515][ T9466] notifier_call_chain+0x1a5/0x3f0 [ 191.398634][ T9466] dev_close_many+0x33c/0x4c0 [ 191.403324][ T9466] netif_close+0x1c0/0x2c0 [ 191.407749][ T9466] dev_close+0x137/0x280 [ 191.411997][ T9466] [ 191.414321][ T9466] Memory state around the buggy address: [ 191.419951][ T9466] ffff88802b0aea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.428022][ T9466] ffff88802b0aeb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.436096][ T9466] >ffff88802b0aeb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.444154][ T9466] ^ [ 191.451868][ T9466] ffff88802b0aec00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 191.459939][ T9466] ffff88802b0aec80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.468018][ T9466] ================================================================== [ 191.477412][ T9466] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 191.484642][ T9466] CPU: 0 UID: 0 PID: 9466 Comm: syz.0.1014 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 191.495326][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.505398][ T9466] Call Trace: [ 191.508685][ T9466] [ 191.511627][ T9466] dump_stack_lvl+0x241/0x360 [ 191.516321][ T9466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.521530][ T9466] ? __pfx__printk+0x10/0x10 [ 191.526129][ T9466] ? vscnprintf+0x5d/0x90 [ 191.530470][ T9466] panic+0x349/0x880 [ 191.534368][ T9466] ? check_panic_on_warn+0x21/0xb0 [ 191.539493][ T9466] ? __pfx_panic+0x10/0x10 [ 191.543913][ T9466] ? mark_lock+0x9a/0x360 [ 191.548247][ T9466] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 191.554163][ T9466] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 191.560071][ T9466] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 191.566409][ T9466] ? print_report+0x519/0x5b0 [ 191.571104][ T9466] check_panic_on_warn+0x86/0xb0 [ 191.576062][ T9466] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 191.582054][ T9466] end_report+0x77/0x160 [ 191.586307][ T9466] kasan_report+0x154/0x180 [ 191.590826][ T9466] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 191.596824][ T9466] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 191.602642][ T9466] gtp_create_sock+0x4b9/0x6b0 [ 191.607417][ T9466] ? __pfx_gtp_create_sock+0x10/0x10 [ 191.612711][ T9466] ? __pfx_gtp_encap_recv+0x10/0x10 [ 191.617927][ T9466] ? rcu_is_watching+0x15/0xb0 [ 191.622699][ T9466] ? trace_kmalloc+0x1f/0xd0 [ 191.627303][ T9466] ? __kmalloc_noprof+0x2a5/0x4c0 [ 191.632338][ T9466] ? gtp_newlink+0x285/0xf70 [ 191.636940][ T9466] gtp_newlink+0x64b/0xf70 [ 191.641367][ T9466] ? __pfx_gtp_newlink+0x10/0x10 [ 191.646314][ T9466] rtnl_newlink_create+0x37b/0xbd0 [ 191.651436][ T9466] ? __pfx_aa_get_newest_label+0x10/0x10 [ 191.657096][ T9466] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 191.662736][ T9466] ? __pfx___mutex_lock+0x10/0x10 [ 191.667780][ T9466] ? ns_capable+0x8a/0xf0 [ 191.672123][ T9466] rtnl_newlink+0x167a/0x1d90 [ 191.676804][ T9466] ? stack_depot_save_flags+0x37/0x940 [ 191.682289][ T9466] ? __pfx_rtnl_newlink+0x10/0x10 [ 191.687316][ T9466] ? __netlink_deliver_tap+0x561/0x7f0 [ 191.692791][ T9466] ? __pfx_validate_chain+0x10/0x10 [ 191.697993][ T9466] ? __sock_sendmsg+0x221/0x270 [ 191.702885][ T9466] ? ____sys_sendmsg+0x53a/0x860 [ 191.707834][ T9466] ? __sys_sendmsg+0x269/0x350 [ 191.712606][ T9466] ? do_syscall_64+0xf3/0x230 [ 191.717297][ T9466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.723384][ T9466] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.729378][ T9466] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.735730][ T9466] ? mark_lock+0x9a/0x360 [ 191.740068][ T9466] ? __lock_acquire+0x1397/0x2100 [ 191.745134][ T9466] ? __pfx_lock_release+0x10/0x10 [ 191.750180][ T9466] ? __pfx_rtnl_newlink+0x10/0x10 [ 191.755208][ T9466] rtnetlink_rcv_msg+0x791/0xcf0 [ 191.760161][ T9466] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 191.765297][ T9466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 191.770782][ T9466] ? ref_tracker_free+0x643/0x7e0 [ 191.775820][ T9466] netlink_rcv_skb+0x206/0x480 [ 191.780600][ T9466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 191.786073][ T9466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.791381][ T9466] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.796594][ T9466] netlink_unicast+0x7f6/0x990 [ 191.801378][ T9466] ? __pfx_netlink_unicast+0x10/0x10 [ 191.806700][ T9466] ? __virt_addr_valid+0x45f/0x530 [ 191.811814][ T9466] ? __phys_addr_symbol+0x2f/0x70 [ 191.816843][ T9466] ? __check_object_size+0x47a/0x730 [ 191.822144][ T9466] netlink_sendmsg+0x8de/0xcb0 [ 191.826919][ T9466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.832210][ T9466] ? aa_sock_msg_perm+0x91/0x160 [ 191.837165][ T9466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.842457][ T9466] __sock_sendmsg+0x221/0x270 [ 191.847151][ T9466] ____sys_sendmsg+0x53a/0x860 [ 191.851926][ T9466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.857222][ T9466] ? __fget_files+0x2a/0x410 [ 191.861829][ T9466] ? __fget_files+0x2a/0x410 [ 191.866437][ T9466] __sys_sendmsg+0x269/0x350 [ 191.871037][ T9466] ? __pfx_futex_wake+0x10/0x10 [ 191.875905][ T9466] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.881050][ T9466] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.887391][ T9466] ? do_syscall_64+0x100/0x230 [ 191.892170][ T9466] ? do_syscall_64+0xb6/0x230 [ 191.896862][ T9466] do_syscall_64+0xf3/0x230 [ 191.901379][ T9466] ? clear_bhb_loop+0x35/0x90 [ 191.906158][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.912074][ T9466] RIP: 0033:0x7fc6e778d169 [ 191.916495][ T9466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.936116][ T9466] RSP: 002b:00007fc6e8542038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.944542][ T9466] RAX: ffffffffffffffda RBX: 00007fc6e79a6080 RCX: 00007fc6e778d169 [ 191.952521][ T9466] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 191.960498][ T9466] RBP: 00007fc6e780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.968474][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.976450][ T9466] R13: 0000000000000000 R14: 00007fc6e79a6080 R15: 00007fff69ece7e8 [ 191.984433][ T9466] [ 191.987687][ T9466] Kernel Offset: disabled [ 191.992012][ T9466] Rebooting in 86400 seconds..