last executing test programs: 3.659686912s ago: executing program 2 (id=919): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.537759584s ago: executing program 2 (id=920): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x7, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x62, 0x0, 0xe, 0x2f, 0x0, @multicast1, @local}}}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x241a07f23122330d, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece0195b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.406147863s ago: executing program 1 (id=923): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@printk={@x={0x18, 0x1, 0x0, 0x0, 0x25782020, 0x0, 0x0, 0xeaff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4010}}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.36100452s ago: executing program 1 (id=925): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0xa, 0x165, 0x65, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7, 0x1, 0xa, 0xffff}}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, 0x4e23, 0x9, 0x4e23, 0x5, 0xa, 0x80, 0x80, 0x88, r2, 0xffffffffffffffff}, {0x6, 0x2, 0x2, 0x7, 0x0, 0x5, 0x4565, 0xc185}, {0x5, 0xf, 0xa31, 0x1}, 0x1ff, 0x6e6bbf, 0x0, 0x1, 0x7, 0x3}, {{@in6=@mcast2, 0x4d4, 0xc3}, 0xa, @in=@broadcast, 0x3507, 0x1, 0x2, 0x1, 0x2, 0xd3, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) 3.16167406s ago: executing program 1 (id=928): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x7, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x62, 0x0, 0xe, 0x2f, 0x0, @multicast1, @local}}}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x1, 0x0, 0x3, 0x7ff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x241a07f23122330d, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece0195b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.552235236s ago: executing program 4 (id=932): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)="580000001400192340834b5f040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe8090000", 0x41}, {&(0x7f00000000c0)="8c01e717e83ebfd40bba5c047cfe0e6bf530f28f235131944307e85f231c78b6ee26d92a022963540e1f2014d237792c1913ce9765dbe2491ec34543cca7e3375a", 0x41}, {&(0x7f0000000040)}, {&(0x7f0000000000)="b71fd5aa178ec4a43b1246e8b21db015172765c649d962fdfa5d01a1ef7b4778230753bb9eb25d27cf0fe35bee80a84c8ced5999cf4059c5d87976bc0c4650fd97a9dfcbe868e9c5b8623905aa0d1e558c9a80580f925bf6f890e412979e14b7e49c4023f9dec5727cf934ee9bca98cc4db2b961848e96e1", 0x78}, {&(0x7f0000000200)="dfa866245af3b536", 0x8}], 0x5) 2.425909941s ago: executing program 2 (id=934): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r1, &(0x7f0000001540)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=0x0, @ANYRESOCT, @ANYRES64=r1, @ANYRES64], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r2}, 0x38) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000200), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x3, &(0x7f0000000300)=""/117, &(0x7f0000000000)=0x75) 2.350791808s ago: executing program 3 (id=935): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xc, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1804000000d0ff000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.266419306s ago: executing program 2 (id=937): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x7, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x62, 0x0, 0xe, 0x2f, 0x0, @multicast1, @local}}}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x1, 0x0, 0x3, 0x7ff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x241a07f23122330d, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece0195b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.265611842s ago: executing program 4 (id=938): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc846, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x543d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xc5, 0x6, 0x7, 0x444, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x3, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9a, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x11, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x2, &(0x7f0000000280)=""/2, 0x40f00, 0x20, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xd, 0x9, 0xaa0}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x1, r5, r6, r7, 0x1, r8, r9], &(0x7f0000000600)=[{0x1, 0x1, 0x10, 0x2}, {0x2, 0x4, 0xe, 0xb}, {0x4, 0x3, 0x3, 0x1}, {0x2, 0x5, 0xe, 0xc}, {0x4, 0x5, 0x6, 0x9}, {0x2, 0x4, 0xf, 0x8}, {0x1, 0x3, 0x3, 0x7}], 0x10, 0x8, @void, @value}, 0x94) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000740)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x3e, r4}) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000780)) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000007c0)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}, {0x306, @local}, 0x8, {0x2, 0x4e20, @multicast2}, 'bridge_slave_1\x00'}) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000840)={r2, 0x1, 0x3, "685c27d2d7ccdb82dca22f72424580b322f98f20703748856da31d5595a3b61edb0d7713c4c828a34999ef2430b0cd8b445096cc790c9c14097b45ada7eaadcb8349c17241d8c54b48289fe2f2d8c6b65019715a2690bc1acf2ebe5b50901f9ec202969274ef1dfe0724d32551563530fd34398a443bd96d5b6b5500e220b1e30fed6f22b1f76e21c8aaf6eb597e58d77bf12def0295397c7c8f32209d3edb39c086d3b217a9247b5b807f739f2a42f6464b245857aca747c4a75294487bcf211e6782588a93ccb86231d12f3ebddcb611"}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000940)={'veth1_virt_wifi\x00', 0x200}) (async) unshare(0x500) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000980)={0xfffffffe, {{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2}}}, 0x88) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@ifindex=r4, 0x12, 0x1, 0xffffffff, &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0]}, 0x40) (async, rerun: 32) pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCGSTAMPNS(r12, 0x8907, &(0x7f0000000bc0)) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r12) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r13, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42094) (async) ioctl$sock_TIOCINQ(r11, 0x541b, &(0x7f0000000d40)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000dc0)={'syztnl0\x00', r4, 0x40, 0x7, 0x0, 0x5, {{0x4e, 0x4, 0x2, 0x7, 0x138, 0x67, 0x0, 0xb0, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0x6, [{@loopback, 0xfffffc00}, {@rand_addr=0x64010100, 0x6}]}, @end, @timestamp_prespec={0x44, 0x2c, 0x2f, 0x3, 0x5, [{@multicast2, 0x2}, {@local, 0xb8e}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0xffffffff}, {@loopback, 0x400}]}, @rr={0x7, 0x23, 0xe4, [@empty, @broadcast, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @multicast2]}, @timestamp_addr={0x44, 0x44, 0x2c, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x7ff}, {@remote, 0x2}, {@multicast1, 0x4}, {@local, 0x1}, {@empty}, {@local, 0x2}, {@local, 0xffff}, {@empty, 0x62b}]}, @ssrr={0x89, 0x7, 0x3d, [@local]}, @rr={0x7, 0xf, 0xbf, [@empty, @broadcast, @local]}, @timestamp={0x44, 0x28, 0x13, 0x0, 0x8, [0x8, 0x400, 0x5, 0x8, 0x7, 0x10001, 0x3, 0x8, 0x8000]}, @end, @timestamp_addr={0x44, 0x3c, 0x5f, 0x1, 0x6, [{@private=0xa010101, 0x1667}, {@broadcast, 0x1}, {@local, 0x44}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x32d}, {@rand_addr=0x64010102, 0xa}, {@empty, 0xfffffffb}, {@empty}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r12, &(0x7f00000010c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xec, r13, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001100)={'veth1_to_team\x00', 0x1000}) (async) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001140)={0x0, 0xfffff71c}, &(0x7f0000001180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r15, 0x84, 0x1f, &(0x7f00000011c0)={r16, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x6, 0x401}, 0x90) (async) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000017c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001780)={&(0x7f0000001380)={0x3e8, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfffd, 0x9, 0x4, 0x5}, {0x4, 0xfe, 0x18, 0xe00000}, {0x7ff, 0xf8, 0x7, 0x8}, {0x5, 0x1, 0x2, 0x80}, {0xd, 0x9, 0xe, 0x40}, {0x1, 0x0, 0xc2, 0x800000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7efa}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}]}}, {{0x8, 0x1, r10}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4a}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}]}}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x24000844}, 0x10) 2.12997824s ago: executing program 0 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080003000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f80080001"], 0x88}}, 0x4008000) 2.113746286s ago: executing program 1 (id=940): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x2a, 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast2, @in6=@private1, 0x4e21, 0x2, 0x4e21, 0x3, 0x2, 0x80, 0xa0, 0x0, 0x0, r2}, {0x6, 0x7, 0x101, 0xe, 0xa, 0x6, 0x40, 0xf}, {0xfffffffffffffff8, 0x3, 0x2, 0x37}, 0x4, 0x6e6bc0, 0x2, 0x1, 0x3, 0x3}, {{@in6=@private2, 0x4d3, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x3, 0x3, 0x7, 0x1, 0x1, 0x8}}, 0xe8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0x7, 0x4}, {0x5, 0x5}]}, @func={0x5, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x79730f6b8a9eca90, 0x30, 0x0, 0x61, 0x0]}}, &(0x7f00000002c0)=""/2, 0x4f, 0x2, 0x0, 0xa3, 0x10000, @value=r5}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r6, &(0x7f0000000340)={@val={0x0, 0x892f}, @val={0x1, 0x3, 0x11f8, 0x1, 0x800, 0x40}, @x25={0x0, 0x3, 0x0, "b631709ce5da4830a057262452268c433e4aa24fe7fd56f60103f9ef0ddbc5c5772e33970daf17cd53e37b446dc2f8c288fcbe42861cc3d64e6fec2e269fea5735381f6291399995e1e086ed4d5984e26349ed1d067e24ae0af483d0edbdd16af8d94afb58d8bb033047e5b36aa3820e4162b7071944024a260be1efe646029e77623c9561409da819e26ea02f2acceaf56bf2c77129415d9ad9e0027e795c63e708fe4855b34a3b02673d9f1320b93b8cd169bf060ba61b5d4f30f885c51fde"}}, 0xd1) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000300)="00000000000000000000f23a1f18dcd9c77e1e12ff0f0000", 0x18}], 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x2) 2.110384638s ago: executing program 0 (id=941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="183f0000450000f6df05543f0d170e800000850000000e0000000500502b6ef9ffffffffffffff000000000000"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000890) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001580)=@delchain={0x3c, 0x64, 0xf31, 0x800, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1010, r6, 0x4b5d5000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40a0044}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000339391c708bb19317ce377d12d5e2ac329568d13f168d271a2a3eff802", @ANYRES16=r7, @ANYBLOB="000409000000ffdbdf25190000000c009900018000006200000005001c000400000005001e000900000005006000f400000006006d0004000000050060000c0000000500a200060000000500a200030000000500a20007000000"], 0x60}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000080) pipe(&(0x7f0000002740)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) close(r12) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r13}, &(0x7f0000000900), &(0x7f0000000940)=r12}, 0x20) sendmsg$AUDIT_USER_AVC(r12, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xc0, 0x453, 0x8, 0x70bd29, 0x25dfdbff, "43333eaa5658b03929c21d988d190d0843a36302bdf2b2802f9fcff48b543f824399d0d1ea7ea3d98587cc7e1cd9fda62212594b2cad6b6400bbb01b60ed148617ae66713bc062d1d072773964f55f3db3df62b4eb742606301010dec54882410ffc81522500163f14f2c0fc30b10500431bf55c773cd9d5a89fa102e804888a905831623c0d3a9b1cd4755fe6a34b95e388a6bae6a44a383f252c4a218f8e46b1e1848574f79c5f782b4f5f30", ["", "", "", ""]}, 0xc0}}, 0x8004) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r14, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r15}, 0x38) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200c000010000104000000000000000000480000", @ANYRES32=r10, @ANYBLOB="ae1e0200000000"], 0x20}}, 0x0) bind$packet(r8, &(0x7f0000000000)={0x11, 0xf5, r10, 0x1, 0x8, 0x6, @remote}, 0x14) 2.103776181s ago: executing program 3 (id=942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0xffffffff, 0x0, {0x7, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x35}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0xcc}}, 0x0) 1.929346068s ago: executing program 4 (id=943): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000780)={0x20038, 0xffffffe7, 0x4, 0x5, 0x910, 0x81}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001440)=@nat={'nat\x00', 0x670, 0x5, 0x3a0, 0x140, 0xa8, 0xfbffffff, 0x1e8, 0x1e8, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0xb, @multicast1, @local, @icmp_id=0x64, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x68, @gre_key=0x1}}}}, {{@ip={@loopback, @multicast1, 0x0, 0xffffffff, 'veth1_to_bridge\x00', 'ipvlan0\x00', {0xff}, {}, 0x11, 0x2, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0xa18, 0x8, 0x1}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000080000007600000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 1.926996782s ago: executing program 3 (id=944): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) recvmsg$qrtr(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newtfilter={0x100, 0x2c, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x9, 0x1}, {0xa, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xd4, 0x2, [@TCA_FW_ACT={0xd0, 0x4, [@m_ife={0xcc, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0xa4, 0x6, "4a81aa254472e0e99a3f029af98b2dd3c214fd5fdf74f8c8a4054f449bc33101ed1c0b3d7a9f43e8fde9102e05144f48aa730d596ea769e0b9fb493bcd8acbd5311fa4be17d9c2e29db8f47f312cc096f26c32a067ff9333c953546a5f197bef5aea357dc3472a31d0b2c5b94f3e89f15ae0fdef0975fbc050054feed53f986cac161ca4b1b9c55abbe2d899560d7a39c965749fb802dee80191661d83e14fd9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x14, r4, 0x201, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @empty, 0x4e21, 0x3, 'none\x00', 0x2, 0x4, 0x36}, 0x2c) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="48050000", @ANYRES16=r4, @ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1.396589477s ago: executing program 0 (id=945): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) 1.395374172s ago: executing program 4 (id=946): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) socket(0x10, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000100)) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r1, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r3}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r3}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000280)="2992b1592d2e73793d326dfdfb84988782c949bfca47a7d594bd1e5439bf7b0896d03e2b4b626d08bc17acb64aba9027bbbed213414b9c13286ffc33b8a3968aae60dee90a583fec6d740e6c3e97289835b2c5962666401a4ca5cc528b005e5d627c36035af9b8e3193f9e51536e44a346277f914815dd173beb8a5d1e690f81f390451c90870b0f262043dda379ef865b49fa2a4bfa5759897242d37b058e74a8ff98e4a552448f97f88fc2c5eb25b5bdc2066f8860168fc153ee6e03476998279db3d077eb050d7e033978fb8592a06b9137edc4e943ac32fdef373c30b7dc8530aa966fb79e37379fce14ccf943b946b96c18233bbbe04fd51ecc63cb68009eee73939f50a4177392e96fd7e64c483173bcc0ed6baac04a42a249fbcfe32c98acdbe66d80851c9b7cf747759980463d0c741c7ab84d9467585b45cf938f710c309eeacc192d846cfc8cf1a7031c10c9ae60cafa03a4a2045ec30a2dff532bc2223e9a4aadc6ca5f0f2afaedf18b2cc068d2dcfe5957458a3124cd1c2ad6a4abc0294f7c8515dd81ad280fe2c0122f3f97695df2f01b3101ce92a161bb7600d7748d28910a3e60169330ce4510273344916f56f995eb0dbbe287ae21d4e9c7733cdc4a3f9d9533215cfc04db8cb8d4d53be88dd3a4b157ee8e79a85d928c37b20540713f8591524f182d46cabe6683ef82468c0fff648258d503c12594c128da359036a222e5158283defde18b5317d8937de561471066d0470d0ca4b69caaac8f1ade3c4989e2f62ed499bd6f4291988c14c1f85e12eb480c1dc48aa640e9af018fddfe677f1237aeeac3bbe64e3afdda6c547d0fd3b3a2203f554f15fb45a27b078df86d7de2d5715bbf8ec586d6f50be209e2f1835a877d6464ba69fa21fdfe931d3f6c61145d37e86e87ac5292637ed36a9b19983d4c7de0e0b2794bc18f1e8074b531dc89a50f3bd0398954abb29d0bb48ed1248a05e2e6bccfa36d89b07b94c94fb179044c5a33db1c657730eff3cd25601db5d11eacb91a6eea0dac641a587915dfb4d778326c1c214c19e880ac2f8c6b97de1ac591eca94c59330f828767ecdf538ffc7be897c9ad4a497febe1a41896b8b2a66870f2e2444b247ab48c64f5d067558f6a09c008923656083ce47cdfc880f6bbdfe56511ca744bc8c1422283789796498b1621e9bece5f86a31b1ab318b947cee8567a4d8e24e6ed29716d0ca5222746468c8f173c9b5d2db95e3bf5f9a32ec72578ba578e71f21f82d0f24f89670e1ed77fc5d9fd3aaf372e711a0dd58d00c86cb97db802171d5fc201689f84c99e053ad96f87e3ce89146fefe87a775ad4e0e7691968d08cb516cef1375562549c849a2fddd3ad5ad02ef182589322a7f7043670285005f30a23f018424aaa75fa367e47bb9cdb81194d44cd774b693010b5a60bd3cdd7984cf15c0ed5c196a9f7f4aef66031b9738d77a0f2dd6082ca604ade0296b89d9612bdbbc72be4b62becd3026574cd6efd1ff9b59c19379981bf431de3b21d9b1f6d080e7c55bc6459d245d40d2c30cf31f83a4b08ce3283dd19ef1e8ed8467e80f73abc3351bcd6fecec952c7545cd9e13bbf80a656cf53b688f78e539834ced9460abcd33d783e828524f5f91177c6d1038aab9791ebae9b53562bf5444f7f3e245e38be4e187454a03876567c399e50521b392f56e6af577c4025792ebe9ddf142b90777de1e8f53daa514328a82e5763aa22b0fa1947e5af2401fe93973ca77bcd2c849f98ff83bb543b1edfb0fc57866da1c383de6343b347b45f276d152642a86cc4422d7d45b9b6c4e1db0d572c43ff8e68c36493bb34fcd694b22fd427fc3df335bb2d12fbcfada512ddb31e15c702b088ed8c016bfd0b80bc7fe3b87baa84140e152e174e5937768affd46ab507eeb53d08c053427497d7c0b7798902407bc1b2f5ad8512d994d7b6578591c8ffe21b614ce77588a4363944a998a7fd5cf04be49b2736a945f3014e5c2b6a24e182ee39b305f8343d650a5a0bdbec119ac5ccce1a098244e5de6c4cde021edfc5c779527267d1bc23898ef0a40a5e843e7b8ca73bfc08d69ec3cdb5906a5afb0ccd8acb6d768516bc62220c9ab61a", 0x5dd}], 0x1, 0x0, 0x0, 0xdc05}}], 0x2, 0x0) 1.37309597s ago: executing program 3 (id=947): r0 = socket(0x11, 0x3, 0x3) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x7}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0041}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pipe(&(0x7f00000000c0)) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c800"], 0x140}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1.285854167s ago: executing program 4 (id=948): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2343, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$isdn(0x22, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x0, 0xe9}, &(0x7f00000005c0)=0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r7) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x8, 0x4f63, 0x4, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) 1.090423747s ago: executing program 0 (id=949): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000002010000000000000000000000711209000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 988.083032ms ago: executing program 2 (id=950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query, @tail_call]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x90, &(0x7f00000000c0)=""/144, 0x40e00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0x1, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc5f, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xac, 0x9d, &(0x7f0000000280)="6c90eaf56217fd66a48afdc9bf0ed374613985aa039af7890739dd9a6661137c31761a6ea5ef2f04434b0e088e86d3b87181dd22ad270599a25c31c72dd966515ebdb12f0b79e6db35125bbb358f4b1a8921e9ba3b9e08cb492a3ed5753dfe7c6c218c1cc579a83ec10104ffdaa7647e2626abe34f9eefd8422da539f2b74978cc50ac1d209c72c8b92f4d3e013652bb9b6d825920afd2f64005b64feabe7092d7468436193f9753a2e48664", &(0x7f0000000340)=""/157, 0x0, 0x0, 0x58, 0x83, &(0x7f0000000400)="13feadc41fb843db7537ad94fba0f68759e3773cd3cb731d2043be3c478a912e3749863599416acba2c82e0f8ab4e2dc8a30013557a20bc2856b06a42787de58bb3cf38973fef60c147ab7908a7053ea2537d3f4762a1686", &(0x7f0000000480)="2febdac70a5fe8580dc28574b45dc6cb51d9d0e4f24953ef5df030a63d1f9957a3949d6f31e5958d07e5fde69843e50d2dcf54b869616515223dae72ec5a9078a8544463621c4e625ec3cff117bb9a5180a2b2cf537f922150c23ddac6ad9f8b3e7281d349d92c64a797d9a4282bd1bcf8f652b2d50fa21f798ebf94f629335fff2321", 0x4, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x20101, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'wlan0\x00', 0x2000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8040802}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1ec, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x43f0}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @local, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff95dc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @remote, 0xfffffff9}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x45f5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40}, 0x6000800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x28}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x49}, @NL80211_ATTR_PMKID={0x14, 0x55, "7518b82f5bce5518e2be1f325b608cd0"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000ac0)='!)\x00', 0x3) bind$rxrpc(r2, &(0x7f0000000b00)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000c80)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={@cgroup=r6, 0x22, 0x1, 0x5, &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0], &(0x7f0000000c00)=[0x0]}, 0x40) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000cc0)=0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000d00)) r8 = openat$cgroup_ro(r6, &(0x7f0000000d40)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x2a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r9 = socket$inet6(0xa, 0x5, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000e80)={0x0, 'team_slave_1\x00', {}, 0x7}) sendmmsg$inet(r9, &(0x7f0000001b80)=[{{&(0x7f0000000ec0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000f00)="1b3167bdf96a6f9d4d24523b6f333b3ed2c52704ab713799871c84e2d384957e0a838a53be38a6251fad383c5c6299fae275c466ba117052b7927d74771151ffc4ca8a5d24f38fc3fd93e17d6849c0732ba43bce898655836c1cb5ea678182fe2192d6090a700f46bd498a9f3f8ba98354fd959ee59c612d70d6144390a4ca6db6c39341e9ece8f70e0aacf1c36266f7724dcfaa3c07f41471b0c6939948d39fdf625b00df3c19ba64cf957cd13a1e1d0ab99387d3ea98264b9ef9ffc8a1823e5c601d6b4e69936df6085a195078bc32a32ca073", 0xd4}, {&(0x7f0000001000)="3d85c5d949492d3a5e722a9588ac881c7a78622a9ccdf7a4f8fc8047315afe9efa8c01738a86df6d78a2f19c67ddaa852401e78df6f0d902b9cf904a1fec5538c5b62fe3726ecb94c70fd0da0c84e0c81ac4b4b5351d19574401739d2cc1a9abd5876a2f0c86e1ce82a3088ac9c6471aee5193020c067b3d12f1aadec2c6eb0453e3460f11c6ce99757ab9e075917e8fff4da2fd2d41352c664b2f9eebac65b2f384f78e9b1610823319810883bbf3eca5dbb661a3699e22b95db6", 0xbb}, {&(0x7f00000010c0)="67af7c6e6118b4f02f347ef4abfb3b9a77a19a29aab79207e5d8de76bd2884165990325056c40cc46832b942ba4e67996906dba4211571a9cc3c8fe15ba32ed61219155f353e2e6db1d1b681d89b192ebb096cdef140afe3b59550857c8c01c57b5352521c59234415a9c1db2cb8f9e8b54d52a21f33b01ece9b2531525bfc96b1add1169abd5322fb2d14c66d585ac792473edcda7130cc2091884194e6623966f9ed3c6dd07993349cafd2ebbf77b88de3adc8d4c34f417ebe7bd04a5871ea538c86ee1ee1431f1c4f59445968d72c3689517736827e45010d6c3ba2be8ce7c918161c", 0xe4}, {&(0x7f00000011c0)="b1d7b436e9d5835c23528bd2a0bc33ebfeaf0b65a8dde7c3952c46a437582bd8b4ba9ee684e8147ab0732bad1050de81feb1a26022307a84c1f0fb0db7df941e1489e4fa714cc633f5259f4d7bdaf603986eeb87b7d8593403fa9777b1b865a616733af352749c8d1bbe0927200c270191d3a843045083d72123d07b1da484daf8b75474b3e07c6b3dde35b722e8982a5e6232b47a6eb48be381db99f09b1efc52a10df8864ebdaa65291ea3da70b30dcbdf2ed14167e1d16083d0cd04b623ba5d077e04b3d71c92ea56e1724f660a9d70", 0xd1}, {&(0x7f00000012c0)="2f1a1d1a76578870af3b5f492eaef7616d6cb2361b70788d6e7b14d21d21d51fea8e78552d65fc3f815ba8f049d9c81d3c16ae436dafe3dccbd206a2ea081bb5aa86024406ce27123ccfc8bacccc31ae6d32a6ae0aaf1b98373a653253f2cc8f9162aada66b4c70ff41f61a45097271d1903a60b0251f048b0b40cd65440ef302a0f387299a81923440a760c141aa20408bf5b1427f09f722e", 0x99}, {&(0x7f0000001380)="44382c98a9a83181f4cb3a788939c01730c5519defff8b1e4fc2bef925d5378bbfd195ca32dc6592c4ce11860ee6f45d93911b756ec8d64df5ea5d7fba050dc8c98e30ee53297d94bc7e3f7dd9189f21be9c95afa9dd80108d6af0aebe4466076ff25804803fd8e20d3da8338fa98a4eb31af907c6e81306cfc3a92a8fe2eb7e18cad329b3c86949e7c9428f282bce36ce4b369c8d42e840e774a4d919f28b7410da620ab12278e8a9669c204a9c4b9ad787b7eea169fdbad2e97cf0e7001f09398b4802f9c6a49102973609b619", 0xce}], 0x6, &(0x7f0000001500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x175}}], 0x18}}, {{&(0x7f0000001540)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001580)="bdad0876d905ad6c5bc5247bbae077f674bc1f7f4be2f082f0416d94d7cb59eb1189e21eb080bd22e1f51f784ac867babec9d32574ce69834d0e4ad075d9baf44b15a4cb0617f8105ab8641b8c6104ea8ccc7e18d24dc8fcda488c610e3720ab233b03818363efb69952c6a65f89011a31f567e099ff2cb5a1335de60d52431e5ebec4670be4", 0x86}, {&(0x7f0000001640)="c143f5ca1c27d4e8b0e6cf74767a73f687aa5c99c6ae", 0x16}, {&(0x7f0000001680)="26c35a787173ce72056c1c00dc389a15fc1c77036e1449c4b742a8903dace9", 0x1f}, {&(0x7f00000016c0)="16e1ceb5623e8bd9ec87553abcd30321e708be8374115b5a2b2b464a4eb830ecb56eacfdc0027b25a484caec9ba524c3369f624e673c0e2e869aed67e7806e7a40786e1bfc3db8f733e020d970c6c9be215f08f2722aed37b88aa932c340eeceed7e889e8da05c05cb12308c3f045672af132a988895bc2e6c6a2a0c0a56f0f03f777474869eff93812ae590488c05d4f5164f6ba903d2886097d711fea66e832192a9dc24cbe7fe902294eef05b679b2b2b9471aa648d3f30994a194bf64705cf988a4a0464f2560be289cede2f548f9ae8498f70e4d2ca03b110856779cc", 0xdf}, {&(0x7f00000017c0)="4dc868e0e429179fd376a8cc50151683f505304db1824634a0fdf737abacc654847ea1b4b46600ecf6451cdbd3935f55bab0c3a0e7be689511a3edd7", 0x3c}, {&(0x7f0000001800)="cf1bc45238bb86e90e17c463188c59a07ed7f5e489450a4dd05301bae7dcc1507987a236dce1e74878256278c2e3792c63f056c563d9d942cf2cbab0f87eb85f8a5dc3c55ca6dd1eb8a9b26b4e89f0c8b4221aa024d665bce590b5dbe350675ba94d01aa789bfb73e308d1b2685a52b018070249a1050dadb7b0a33e5103dedaa382ab31ce7e8c68d88d4bcd1e26ba651115991e925fbfc9ea0ea578d279181ce94e7566cadcd808975309e21e1cbbd3391bd7594f35672fc5d7d5e482fb5ba792f8a448d4ff5f2b089b9d52e6929fa906392710f542f361374bf6b1ac4dd378063a8e58f6f411", 0xe7}, {&(0x7f0000001900)="d1f35f1844abf20926b2fe9ac2b9440a5403e043df785c01d0720695b2da9069fa54d3a641826243124bfd95544c98ed55e489dbe6d212f1a668e9f6610a2909ee17b70353c4be8dd166ed1e897786", 0x4f}, {&(0x7f0000001980)="07a1f95afa185395503dc6609709e88eb31966c11e0ed2d521b6d1096503f76b9b3b3e5f74b1e21d1b4a7bea87d12c5bffa68706bdf7b53eb8a62296614aef5221e39acb1e33033f029839edcd90216a0710243ee296f4d51e063617110a508cbcec1338eeb0a23a7a982bd1fa764daace44292b4681d60b22f8494232a45e60d20f5c3247ada27659e2b69215561f62e956f171f7fea2a81a5d60f602199944c169b33252e35ef2f8f3d215f6263b51194879ff0d78e4f3e63624aa57609ac83a64e8dc363d0e8aa455a5a54312e8845870ddc7c1ec71b444d09863eb16", 0xde}], 0x8, &(0x7f0000001b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x48}}], 0x2, 0x20008084) syz_open_procfs$namespace(r7, &(0x7f0000001c00)='ns/pid\x00') socket$kcm(0x29, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000001c40)={0x2, 'dvmrp0\x00', {0x8001}, 0x7ff}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001cc0), r3) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, r11, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4008800) sendmsg$inet(r2, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001e00)="45b4a3fca1fe8968b706c1d8ebb7f63ca1352388e43e16c0426f0817f9a3567018e82b7984e57c1a603e060fbcb26fef2d1fdd0d", 0x34}, {&(0x7f0000001e40)="ce222e91145d50e51de2892eea36c56c90cb669c416379ef2d5d9fe4f438ce750ef0ebddc7eeaeddd27e62c430c1552c9f42178b85b58e5fc71bb0a91775c0caa1ca532ff609150f0a49a5df3c72120216f4334e808dbd6d7b7d064d058af2b82f11da540b29783d276c118ccbdbe28e0a51d7823c5eca2f87e4f5c9b4ce763a5779aa55f0dda83d89fadcb5545dff64239b818a06142be7784e775dbed742d4dba3a47eb3be75e9267c887e89b73472466d52f55eabe3248e01a7190171605dc115", 0xc2}], 0x2, &(0x7f0000001f80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x38}, 0x40000) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x40, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x67}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x2800) 925.659994ms ago: executing program 0 (id=951): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x7, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x62, 0x0, 0xe, 0x2f, 0x0, @multicast1, @local}}}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x1, 0x0, 0x3, 0x7ff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x241a07f23122330d, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece0195b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 897.864735ms ago: executing program 3 (id=952): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x28000600) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0xf8, 0xf8, 0xfeffffff, 0x220, 0x2f0, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xfeffff07, 0x0, 'lo\x00', 'vlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 726.799223ms ago: executing program 2 (id=953): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='btrfs_add_block_group\x00', r2}, 0x18) close(r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18e}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, 'Q+'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x40895}, 0x24040080) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) accept4(r6, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000000)=0x80, 0x800) ppoll(&(0x7f0000000180)=[{r3, 0x832a}, {r6, 0x24}, {r1, 0x4}], 0x3, &(0x7f0000000200), &(0x7f00000004c0)={[0x1ff]}, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_pid(r0, &(0x7f00000005c0), 0x12) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x24, r11, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) write(r8, &(0x7f0000000400)="9cb67b056b7e9ff9f4c71f324f13a8fcd50024b25f68a9a491214fcd7040ef4eff0d0bbf74531760e6e267bee81bd21523052ed3246d7ce08c0417eca9233a5e64866a6c8a68064a92dfc6bfdef1ddee45da111ec65116d8a09a2da0e74bf907af3b67a9ec35efafe5", 0x69) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x8004, 0x8a}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_pid(r0, &(0x7f0000000340), 0x12) 677.999869ms ago: executing program 1 (id=954): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000700000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 677.276985ms ago: executing program 3 (id=955): socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x29, 0x5, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="3f000000010040", 0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x478, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) socket(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 416.719596ms ago: executing program 1 (id=956): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r2, &(0x7f0000000340)={@void, @void, @mpls={[{0x401}, {0x2}, {0xff, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv4=@igmp={{0xb, 0x4, 0x3, 0x1c, 0x116, 0x68, 0x0, 0xff, 0x2, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x13, 0x15, [@multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}, @empty]}, @ra={0x94, 0x4, 0x1}]}}, {0x12, 0xad, 0x0, @remote, "9466b8b0ec893666fae28355d506d02ff7fded56b8f136ac25f7398e61093f1392b2bd624ce8ec1b757685dfe3a91f0047ecd437464d479488cbfcb25ee752a98a2ebac2bfc5837847a61c20d4470a66833097add7556ecbfd385a2e6c1fd5e3fa9feaa7c70de1a230acd33dff4c824269e2216862b1f6242317c7ab74e7f64fbb131c374bd6259de8cf1e07a22d1f4b8a07ab0ba146464e3f3281625f3eb85ad56a14c0e6c3864c30a731b327c80b45f40fa47703d5e3162af243bac766eeedf3bd9fb4167778f2d5f57377df1b6c95c64d6cffc9dbef85284599c89ddd9a9292e3"}}}}, 0x126) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRESHEX=r3, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000953256cef1bc37cd2ff1a08a15142010000000000e38fffffffffffff94040000000023ae4b1611c64766e86c006b00000c00010000010000000000000c000100", @ANYRES64=r3, @ANYRESDEC=0x0], 0x80}}, 0x8000) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0xbc}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @RTA_IIF={0x8, 0x3, r6}]}, 0x2c}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 319.207221ms ago: executing program 4 (id=957): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) recvmsg$qrtr(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newtfilter={0x100, 0x2c, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x9, 0x1}, {0xa, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xd4, 0x2, [@TCA_FW_ACT={0xd0, 0x4, [@m_ife={0xcc, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0xa4, 0x6, "4a81aa254472e0e99a3f029af98b2dd3c214fd5fdf74f8c8a4054f449bc33101ed1c0b3d7a9f43e8fde9102e05144f48aa730d596ea769e0b9fb493bcd8acbd5311fa4be17d9c2e29db8f47f312cc096f26c32a067ff9333c953546a5f197bef5aea357dc3472a31d0b2c5b94f3e89f15ae0fdef0975fbc050054feed53f986cac161ca4b1b9c55abbe2d899560d7a39c965749fb802dee80191661d83e14fd9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x14, r4, 0x201, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x3c, @empty, 0x4e21, 0x3, 'none\x00', 0x2, 0x4, 0x36}, 0x2c) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="48050000", @ANYRES16=r4, @ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 0s ago: executing program 0 (id=958): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c00048018000300010000000500030000000000050003000000000005000300"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): is not up; please bring it up to get a fully working HSR network [ 65.637619][ T5842] veth0_vlan: entered promiscuous mode [ 65.692253][ T5842] veth1_vlan: entered promiscuous mode [ 65.759420][ T5842] veth0_macvtap: entered promiscuous mode [ 65.798140][ T5842] veth1_macvtap: entered promiscuous mode [ 65.835281][ T54] Bluetooth: hci0: command tx timeout [ 65.840745][ T54] Bluetooth: hci3: command tx timeout [ 65.910678][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.915353][ T54] Bluetooth: hci4: command tx timeout [ 65.924059][ T5851] Bluetooth: hci1: command tx timeout [ 65.924103][ T5843] Bluetooth: hci2: command tx timeout [ 65.952692][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.965538][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.990548][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.999892][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.009539][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.018672][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.043486][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.072420][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.117406][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.200897][ T5833] veth0_vlan: entered promiscuous mode [ 66.208202][ T5846] veth0_vlan: entered promiscuous mode [ 66.241266][ T5844] veth0_vlan: entered promiscuous mode [ 66.282144][ T5844] veth1_vlan: entered promiscuous mode [ 66.292162][ T5846] veth1_vlan: entered promiscuous mode [ 66.307208][ T5833] veth1_vlan: entered promiscuous mode [ 66.315457][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.342452][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.371260][ T5844] veth0_macvtap: entered promiscuous mode [ 66.400287][ T5844] veth1_macvtap: entered promiscuous mode [ 66.424947][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.438234][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.448785][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.460358][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.472605][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.511029][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.522564][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.546634][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.564514][ T5846] veth0_macvtap: entered promiscuous mode [ 66.579279][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.592577][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.595504][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.608749][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.624974][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.639362][ T5833] veth0_macvtap: entered promiscuous mode [ 66.647939][ T5846] veth1_macvtap: entered promiscuous mode [ 66.677437][ T5833] veth1_macvtap: entered promiscuous mode [ 66.742187][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.753081][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.763793][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.778014][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.789141][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.822556][ T5832] veth0_vlan: entered promiscuous mode [ 66.835831][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.847088][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.857413][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.868238][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.881118][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.891769][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.902784][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.916346][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.927424][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.937590][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.948568][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.961621][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.971431][ T5832] veth1_vlan: entered promiscuous mode [ 67.078033][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.089175][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.100861][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.111818][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.129892][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.141877][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.158370][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.168337][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.177970][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.187725][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.198064][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.267960][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.277719][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.287863][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.297201][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.357419][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.367905][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.451200][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.452821][ T5832] veth0_macvtap: entered promiscuous mode [ 67.467584][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.498879][ T5832] veth1_macvtap: entered promiscuous mode [ 67.527927][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.553522][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.602576][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.617915][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.628639][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.674631][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.684942][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.705668][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.726036][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.736742][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.746946][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.757598][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.771294][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.800342][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.813226][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.821988][ T5931] Cannot find add_set index 3 as target [ 67.828520][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.840039][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.850314][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.861145][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.871059][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.882400][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.896707][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.913160][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.922303][ T5851] Bluetooth: hci3: command tx timeout [ 67.922382][ T5851] Bluetooth: hci0: command tx timeout [ 67.934784][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.943493][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.952769][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.969736][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.980088][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.994271][ T5851] Bluetooth: hci2: command tx timeout [ 67.994998][ T5843] Bluetooth: hci1: command tx timeout [ 67.999737][ T54] Bluetooth: hci4: command tx timeout [ 68.082709][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.111988][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.250247][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.282517][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.369449][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.393518][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.471997][ T5941] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2'. [ 68.488978][ T5941] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2'. [ 68.507630][ T5941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 68.668456][ T5941] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.809406][ T5941] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.024870][ T5937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.040733][ T5941] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.272257][ T5941] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.002905][ T54] Bluetooth: hci0: command tx timeout [ 70.002922][ T5843] Bluetooth: hci3: command tx timeout [ 70.074981][ T5851] Bluetooth: hci2: command tx timeout [ 70.081180][ T5851] Bluetooth: hci1: command tx timeout [ 70.087488][ T54] Bluetooth: hci4: command tx timeout [ 70.281988][ T5977] warning: `syz.3.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.878687][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.918073][ T5993] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 71.000859][ T5998] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.611171][ T6021] syz.3.23 uses obsolete (PF_INET,SOCK_PACKET) [ 71.631368][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 71.656726][ T6021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23'. [ 71.672160][ T6023] Bluetooth: MGMT ver 1.23 [ 71.679942][ T6019] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 71.704485][ T6023] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.728411][ T6023] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 71.758371][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.765162][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.952612][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.995004][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.080642][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 72.421286][ T6041] netlink: 'syz.0.27': attribute type 21 has an invalid length. [ 72.462484][ T6041] netlink: 132 bytes leftover after parsing attributes in process `syz.0.27'. [ 72.475275][ T6041] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 72.489709][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 72.667842][ T5885] IPVS: starting estimator thread 0... [ 72.674379][ T6049] netlink: 'syz.3.40': attribute type 21 has an invalid length. [ 72.682636][ T6049] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.703792][ T6049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.711389][ T6049] IPv6: NLM_F_CREATE should be set when creating new route [ 72.718753][ T6049] IPv6: NLM_F_CREATE should be set when creating new route [ 72.726027][ T6049] IPv6: NLM_F_CREATE should be set when creating new route [ 72.764176][ T6052] IPVS: using max 23 ests per chain, 55200 per kthread [ 72.785606][ T5941] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.859116][ T5941] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.912359][ T5941] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.001119][ T5941] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.075181][ T6057] pim6reg1: entered promiscuous mode [ 73.106869][ T6057] pim6reg1: entered allmulticast mode [ 73.519926][ T6071] netlink: 'syz.0.36': attribute type 10 has an invalid length. [ 73.545551][ T6071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.36'. [ 73.676796][ T6071] team0: Port device geneve0 added [ 73.757676][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 73.773403][ T6071] syz.0.36 (6071) used greatest stack depth: 18648 bytes left [ 74.076182][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 74.196012][ T6087] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.43'. [ 74.212753][ T6087] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 74.332131][ T6087] veth3: entered promiscuous mode [ 74.371664][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.381117][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.484795][ T6094] Zero length message leads to an empty skb [ 74.515817][ T6094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.45'. [ 74.884095][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 75.149493][ T6120] team0: Device gtp0 is of different type [ 75.196001][ T6122] netlink: 'syz.3.54': attribute type 9 has an invalid length. [ 75.410770][ T6124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.419731][ T6124] bond0: (slave bond1): Enslaving as an active interface with an up link [ 75.666269][ T6131] netlink: 'syz.2.60': attribute type 10 has an invalid length. [ 75.740594][ T6135] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 75.753665][ T6131] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.769158][ T6135] netlink: 224 bytes leftover after parsing attributes in process `syz.3.61'. [ 75.806617][ T6131] bond0: (slave team0): Enslaving as an active interface with an up link [ 76.074221][ T6143] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 76.117705][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 76.159689][ T6143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.172564][ T6143] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 76.275798][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.300090][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.369789][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.383381][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.389685][ T6161] netlink: 'syz.3.68': attribute type 4 has an invalid length. [ 76.424173][ T6161] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.68'. [ 76.509038][ T6148] bond0: (slave batadv0): Releasing backup interface [ 76.698177][ T6171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.71'. [ 76.842233][ T6171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.71'. [ 77.083262][ T6173] bond0: (slave team0): Releasing backup interface [ 77.120520][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 77.156409][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 77.228652][ T6183] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 77.265399][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 77.405394][ T6187] batadv_slave_1: entered promiscuous mode [ 77.496170][ T6184] batadv_slave_1: left promiscuous mode [ 77.576102][ T6195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.585677][ T6195] bond0: (slave bond1): Enslaving as an active interface with an up link [ 78.280732][ T6232] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 78.424009][ T6223] bridge_slave_0: left allmulticast mode [ 78.430459][ T6223] bridge_slave_0: left promiscuous mode [ 78.437143][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.448469][ T6223] bridge_slave_1: left allmulticast mode [ 78.458355][ T6223] bridge_slave_1: left promiscuous mode [ 78.465905][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.476127][ T6223] bond0: (slave bond_slave_0): Releasing backup interface [ 78.491412][ T6223] bond0: (slave bond_slave_1): Releasing backup interface [ 78.525188][ T6223] team0: Failed to send options change via netlink (err -105) [ 78.533827][ T6223] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 78.546610][ T6223] team0: Port device team_slave_0 removed [ 78.561938][ T6223] team0: Failed to send options change via netlink (err -105) [ 78.590825][ T6223] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 78.602386][ T6223] team0: Port device team_slave_1 removed [ 78.609539][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.618172][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.628252][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.637231][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.663227][ T6228] team0: Failed to send options change via netlink (err -105) [ 78.672164][ T6228] team0: Mode changed to "loadbalance" [ 78.684241][ T6233] bridge0: entered promiscuous mode [ 78.845447][ T6250] __nla_validate_parse: 6 callbacks suppressed [ 78.845465][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 78.907588][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 78.969141][ T6252] batadv0: entered promiscuous mode [ 78.994794][ T6252] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.027012][ T6252] batadv0: left promiscuous mode [ 79.150880][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'. [ 80.196557][ T6294] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 80.222968][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 80.249305][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 80.258249][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 80.272813][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 80.754475][ T6323] FAULT_INJECTION: forcing a failure. [ 80.754475][ T6323] name failslab, interval 1, probability 0, space 0, times 0 [ 80.778389][ T6323] CPU: 0 UID: 0 PID: 6323 Comm: syz.1.112 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 80.778415][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.778429][ T6323] Call Trace: [ 80.778435][ T6323] [ 80.778442][ T6323] dump_stack_lvl+0x241/0x360 [ 80.778476][ T6323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.778491][ T6323] ? __pfx__printk+0x10/0x10 [ 80.778520][ T6323] should_fail_ex+0x40a/0x550 [ 80.778547][ T6323] should_failslab+0xac/0x100 [ 80.778568][ T6323] ? skb_clone+0x20c/0x390 [ 80.778584][ T6323] kmem_cache_alloc_noprof+0x70/0x380 [ 80.778610][ T6323] skb_clone+0x20c/0x390 [ 80.778631][ T6323] __netlink_deliver_tap+0x3c4/0x7f0 [ 80.778662][ T6323] ? netlink_deliver_tap+0x2e/0x1b0 [ 80.778682][ T6323] netlink_deliver_tap+0x19d/0x1b0 [ 80.778702][ T6323] netlink_unicast+0x7c4/0x990 [ 80.778732][ T6323] ? __pfx_netlink_unicast+0x10/0x10 [ 80.778749][ T6323] ? __virt_addr_valid+0x45f/0x530 [ 80.778765][ T6323] ? __phys_addr_symbol+0x2f/0x70 [ 80.778780][ T6323] ? __check_object_size+0x47a/0x730 [ 80.778804][ T6323] netlink_sendmsg+0x8de/0xcb0 [ 80.778833][ T6323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.778857][ T6323] ? aa_sock_msg_perm+0x91/0x160 [ 80.778884][ T6323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.778901][ T6323] __sock_sendmsg+0x221/0x270 [ 80.778923][ T6323] ____sys_sendmsg+0x53a/0x860 [ 80.778949][ T6323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.778964][ T6323] ? __fget_files+0x2a/0x410 [ 80.778988][ T6323] ? __fget_files+0x2a/0x410 [ 80.779017][ T6323] __sys_sendmsg+0x269/0x350 [ 80.779037][ T6323] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.779066][ T6323] ? do_sys_openat2+0x17a/0x1d0 [ 80.779110][ T6323] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.779134][ T6323] ? do_syscall_64+0x100/0x230 [ 80.779153][ T6323] ? do_syscall_64+0xb6/0x230 [ 80.779170][ T6323] do_syscall_64+0xf3/0x230 [ 80.779184][ T6323] ? clear_bhb_loop+0x35/0x90 [ 80.779205][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.779231][ T6323] RIP: 0033:0x7f9a78f8d169 [ 80.779250][ T6323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.779262][ T6323] RSP: 002b:00007f9a79da2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.779280][ T6323] RAX: ffffffffffffffda RBX: 00007f9a791a5fa0 RCX: 00007f9a78f8d169 [ 80.779291][ T6323] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000004 [ 80.779301][ T6323] RBP: 00007f9a79da2090 R08: 0000000000000000 R09: 0000000000000000 [ 80.779311][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.779321][ T6323] R13: 0000000000000000 R14: 00007f9a791a5fa0 R15: 00007ffe8e044688 [ 80.779347][ T6323] [ 80.851211][ T6323] bond0: entered promiscuous mode [ 81.068112][ T6323] bond_slave_0: entered promiscuous mode [ 81.080133][ T6323] bond_slave_1: entered promiscuous mode [ 81.090416][ T6323] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 81.099652][ T6323] bond0: left promiscuous mode [ 81.107816][ T6323] bond_slave_0: left promiscuous mode [ 81.124242][ T6323] bond_slave_1: left promiscuous mode [ 81.152451][ T6325] netlink: 148 bytes leftover after parsing attributes in process `syz.2.113'. [ 81.174313][ T6325] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 81.324873][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.114'. [ 81.359555][ T6332] ip6gretap0: entered promiscuous mode [ 81.380166][ T6332] ip6gretap0: left promiscuous mode [ 82.005965][ T25] cfg80211: failed to load regulatory.db [ 82.446957][ T6359] netlink: 40 bytes leftover after parsing attributes in process `syz.3.120'. [ 82.851501][ T6376] FAULT_INJECTION: forcing a failure. [ 82.851501][ T6376] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.857650][ T6375] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 82.864731][ T6376] CPU: 1 UID: 0 PID: 6376 Comm: syz.4.127 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 82.864764][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.864780][ T6376] Call Trace: [ 82.864789][ T6376] [ 82.864801][ T6376] dump_stack_lvl+0x241/0x360 [ 82.864843][ T6376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.864878][ T6376] ? __pfx__printk+0x10/0x10 [ 82.864913][ T6376] ? __pfx_lock_release+0x10/0x10 [ 82.864975][ T6376] should_fail_ex+0x40a/0x550 [ 82.865006][ T6376] _copy_from_user+0x2d/0xb0 [ 82.865026][ T6376] copy_msghdr_from_user+0xae/0x680 [ 82.865046][ T6376] ? __pfx___might_resched+0x10/0x10 [ 82.865069][ T6376] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 82.865093][ T6376] ? do_recvmmsg+0x44e/0xab0 [ 82.865108][ T6376] ? __might_fault+0xaa/0x120 [ 82.865128][ T6376] do_recvmmsg+0x3bd/0xab0 [ 82.865154][ T6376] ? __pfx_do_recvmmsg+0x10/0x10 [ 82.865170][ T6376] ? __lock_acquire+0x1397/0x2100 [ 82.865208][ T6376] ? __lock_acquire+0x1397/0x2100 [ 82.865260][ T6376] ? __might_fault+0xaa/0x120 [ 82.865296][ T6376] __x64_sys_recvmmsg+0x199/0x250 [ 82.865325][ T6376] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 82.865342][ T6376] ? rcu_is_watching+0x15/0xb0 [ 82.865360][ T6376] ? trace_sys_enter+0x25/0x120 [ 82.865379][ T6376] do_syscall_64+0xf3/0x230 [ 82.865397][ T6376] ? clear_bhb_loop+0x35/0x90 [ 82.865419][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.865437][ T6376] RIP: 0033:0x7f6e3318d169 [ 82.865452][ T6376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.865464][ T6376] RSP: 002b:00007f6e33ff9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 82.865481][ T6376] RAX: ffffffffffffffda RBX: 00007f6e333a5fa0 RCX: 00007f6e3318d169 [ 82.865492][ T6376] RDX: 000000000400030f RSI: 0000400000005c80 RDI: 0000000000000003 [ 82.865502][ T6376] RBP: 00007f6e33ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 82.865511][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.865520][ T6376] R13: 0000000000000000 R14: 00007f6e333a5fa0 R15: 00007fff1ab01c98 [ 82.865544][ T6376] [ 83.960705][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.968977][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.177802][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.193201][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.353773][ T6404] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.363385][ T6404] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.373949][ T6404] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.383545][ T6404] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.437840][ T6418] __nla_validate_parse: 5 callbacks suppressed [ 84.437858][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'. [ 84.469794][ T6406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.478911][ T6406] team0: Port device bond1 added [ 84.539382][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.559838][ T6403] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.585574][ T6403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.586111][ T6422] netlink: 21 bytes leftover after parsing attributes in process `syz.3.140'. [ 84.728833][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 84.788929][ T6428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.922719][ T6425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.160628][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 85.412584][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.148'. [ 85.464712][ T6448] bridge0: entered promiscuous mode [ 85.477422][ T6448] bridge0: left promiscuous mode [ 85.573527][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'. [ 85.584361][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.150'. [ 85.728085][ T6457] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 85.738265][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 85.821012][ T6460] netlink: 332 bytes leftover after parsing attributes in process `syz.3.152'. [ 85.853815][ T6460] netlink: 104 bytes leftover after parsing attributes in process `syz.3.152'. [ 85.980420][ T6460] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.277011][ T6460] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.376794][ T6471] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 86.402670][ T6471] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 86.425236][ T6460] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.542944][ T6460] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.648286][ T6485] vcan0: Master is either lo or non-ether device [ 86.744611][ T6460] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.805525][ T6460] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.871113][ T6496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.888657][ T6460] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.924127][ T6498] Cannot find del_set index 4 as target [ 86.931163][ T6460] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.095962][ T6507] netlink: 'syz.2.165': attribute type 1 has an invalid length. [ 87.215743][ T6508] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 87.688369][ T6534] netlink: 'syz.4.176': attribute type 3 has an invalid length. [ 87.767289][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.775550][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.920274][ T6528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.934526][ T6528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.118777][ T6528] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.127583][ T6528] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.151451][ T6528] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.184301][ T6528] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.247461][ T6553] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 88.739895][ T6566] bridge_slave_0: left allmulticast mode [ 88.749622][ T6566] bridge_slave_0: left promiscuous mode [ 88.751395][ T6558] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 88.757519][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.799466][ T6566] bridge_slave_1: left allmulticast mode [ 88.806535][ T6566] bridge_slave_1: left promiscuous mode [ 88.812276][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.823460][ T6566] bond0: (slave bond_slave_0): Releasing backup interface [ 88.839387][ T6566] bond0: (slave bond_slave_1): Releasing backup interface [ 88.851695][ T6566] team0: Failed to send options change via netlink (err -105) [ 88.860266][ T6566] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 88.873691][ T6566] team0: Port device team_slave_0 removed [ 88.885411][ T6566] team0: Failed to send options change via netlink (err -105) [ 88.893051][ T6566] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 88.903974][ T6566] team0: Port device team_slave_1 removed [ 88.910798][ T6566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.919729][ T6566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.930380][ T6566] team0: Failed to send options change via netlink (err -105) [ 88.941027][ T6566] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 88.952682][ T6566] team0: Port device geneve0 removed [ 88.959955][ T6566] bond0: (slave bond1): Releasing backup interface [ 88.971989][ T6570] team0: Failed to send options change via netlink (err -105) [ 88.984279][ T6570] team0: Mode changed to "loadbalance" [ 89.052650][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.908870][ T6614] netlink: 'syz.4.198': attribute type 3 has an invalid length. [ 90.066731][ T6625] sctp: [Deprecated]: syz.4.198 (pid 6625) Use of int in max_burst socket option. [ 90.066731][ T6625] Use struct sctp_assoc_value instead [ 90.077166][ T6626] netlink: 'syz.3.201': attribute type 3 has an invalid length. [ 90.361659][ T6638] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 90.403818][ T6638] __nla_validate_parse: 17 callbacks suppressed [ 90.403838][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.204'. [ 90.494312][ T6639] netlink: 'syz.0.203': attribute type 11 has an invalid length. [ 90.938695][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.209'. [ 90.979561][ T6658] gretap0: entered promiscuous mode [ 91.008487][ T6658] gretap0: left promiscuous mode [ 91.319239][ T6683] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 91.345117][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.214'. [ 91.374106][ T6683] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.405760][ T6683] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.428527][ T6683] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.458446][ T6683] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.502337][ T6683] team0: Port device geneve0 added [ 91.820979][ T6702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.218'. [ 91.982962][ T6709] bridge_slave_0: entered promiscuous mode [ 91.998667][ T6709] bridge_slave_0: entered allmulticast mode [ 92.275628][ T6721] team0: Device gtp0 is of different type [ 92.890083][ T6754] netlink: 48 bytes leftover after parsing attributes in process `syz.4.234'. [ 92.934343][ T6754] netlink: 56 bytes leftover after parsing attributes in process `syz.4.234'. [ 93.803428][ T6784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.248'. [ 93.818954][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 93.858114][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 93.883673][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.893215][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 93.910192][ T6786] bond0: (slave bond1): Enslaving as an active interface with an up link [ 94.174860][ T6795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.175934][ T6802] FAULT_INJECTION: forcing a failure. [ 94.175934][ T6802] name failslab, interval 1, probability 0, space 0, times 0 [ 94.222787][ T6802] CPU: 1 UID: 0 PID: 6802 Comm: syz.0.255 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 94.222810][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.222819][ T6802] Call Trace: [ 94.222824][ T6802] [ 94.222831][ T6802] dump_stack_lvl+0x241/0x360 [ 94.222856][ T6802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.222872][ T6802] ? __pfx__printk+0x10/0x10 [ 94.222889][ T6802] ? __kmalloc_cache_noprof+0x48/0x390 [ 94.222910][ T6802] ? __pfx___might_resched+0x10/0x10 [ 94.222928][ T6802] ? unwind_get_return_address+0x4d/0x90 [ 94.222953][ T6802] should_fail_ex+0x40a/0x550 [ 94.222979][ T6802] should_failslab+0xac/0x100 [ 94.223000][ T6802] __kmalloc_cache_noprof+0x70/0x390 [ 94.223019][ T6802] ? rtnl_newlink+0x13e/0x1d90 [ 94.223043][ T6802] rtnl_newlink+0x13e/0x1d90 [ 94.223063][ T6802] ? stack_depot_save_flags+0x37/0x940 [ 94.223091][ T6802] ? kasan_save_track+0x51/0x80 [ 94.223108][ T6802] ? kasan_save_free_info+0x40/0x50 [ 94.223126][ T6802] ? __kasan_slab_free+0x59/0x70 [ 94.223142][ T6802] ? kmem_cache_free+0x195/0x410 [ 94.223161][ T6802] ? __pfx_rtnl_newlink+0x10/0x10 [ 94.223180][ T6802] ? __netlink_deliver_tap+0x561/0x7f0 [ 94.223200][ T6802] ? __pfx_validate_chain+0x10/0x10 [ 94.223216][ T6802] ? __sock_sendmsg+0x221/0x270 [ 94.223232][ T6802] ? ____sys_sendmsg+0x53a/0x860 [ 94.223245][ T6802] ? __sys_sendmsg+0x269/0x350 [ 94.223259][ T6802] ? do_syscall_64+0xf3/0x230 [ 94.223277][ T6802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.223313][ T6802] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 94.223335][ T6802] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.223362][ T6802] ? mark_lock+0x9a/0x360 [ 94.223376][ T6802] ? __lock_acquire+0x1397/0x2100 [ 94.223414][ T6802] ? __pfx_lock_release+0x10/0x10 [ 94.223440][ T6802] ? __pfx_rtnl_newlink+0x10/0x10 [ 94.223456][ T6802] rtnetlink_rcv_msg+0x791/0xcf0 [ 94.223471][ T6802] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 94.223497][ T6802] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 94.223519][ T6802] ? ref_tracker_free+0x643/0x7e0 [ 94.223535][ T6802] netlink_rcv_skb+0x206/0x480 [ 94.223552][ T6802] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 94.223569][ T6802] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.223604][ T6802] ? netlink_deliver_tap+0x2e/0x1b0 [ 94.223623][ T6802] netlink_unicast+0x7f6/0x990 [ 94.223645][ T6802] ? __pfx_netlink_unicast+0x10/0x10 [ 94.223657][ T6802] ? __virt_addr_valid+0x45f/0x530 [ 94.223669][ T6802] ? __phys_addr_symbol+0x2f/0x70 [ 94.223680][ T6802] ? __check_object_size+0x47a/0x730 [ 94.223698][ T6802] netlink_sendmsg+0x8de/0xcb0 [ 94.223724][ T6802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.223743][ T6802] ? aa_sock_msg_perm+0x91/0x160 [ 94.223765][ T6802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.223780][ T6802] __sock_sendmsg+0x221/0x270 [ 94.223798][ T6802] ____sys_sendmsg+0x53a/0x860 [ 94.223816][ T6802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.223827][ T6802] ? __fget_files+0x2a/0x410 [ 94.223846][ T6802] ? __fget_files+0x2a/0x410 [ 94.223872][ T6802] __sys_sendmsg+0x269/0x350 [ 94.223889][ T6802] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.223915][ T6802] ? do_sys_openat2+0x17a/0x1d0 [ 94.223956][ T6802] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.223974][ T6802] ? do_syscall_64+0x100/0x230 [ 94.223992][ T6802] ? do_syscall_64+0xb6/0x230 [ 94.224010][ T6802] do_syscall_64+0xf3/0x230 [ 94.224023][ T6802] ? clear_bhb_loop+0x35/0x90 [ 94.224042][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.224059][ T6802] RIP: 0033:0x7f630378d169 [ 94.224071][ T6802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.224082][ T6802] RSP: 002b:00007f630451b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.224097][ T6802] RAX: ffffffffffffffda RBX: 00007f63039a5fa0 RCX: 00007f630378d169 [ 94.224107][ T6802] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000004 [ 94.224116][ T6802] RBP: 00007f630451b090 R08: 0000000000000000 R09: 0000000000000000 [ 94.224124][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.224131][ T6802] R13: 0000000000000000 R14: 00007f63039a5fa0 R15: 00007ffcb26d86e8 [ 94.224152][ T6802] [ 94.831027][ T6795] bond2 (unregistering): Released all slaves [ 95.078335][ T6824] vlan2: entered promiscuous mode [ 95.145017][ T6826] netlink: 'syz.4.262': attribute type 15 has an invalid length. [ 95.187529][ T6830] bond0: entered promiscuous mode [ 95.192620][ T6830] bond_slave_0: entered promiscuous mode [ 95.254173][ T6830] bond_slave_1: entered promiscuous mode [ 95.271433][ T6830] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 95.313230][ T6830] bond0: left promiscuous mode [ 95.331493][ T6830] bond_slave_0: left promiscuous mode [ 95.367985][ T6830] bond_slave_1: left promiscuous mode [ 95.608838][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.616668][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.683521][ T6852] __nla_validate_parse: 6 callbacks suppressed [ 95.683540][ T6852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.267'. [ 95.710590][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 95.835447][ T6832] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.844954][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 95.853918][ T6832] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.863155][ T6832] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.875586][ T6832] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.918357][ T6832] bridge0: left promiscuous mode [ 95.966935][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.978671][ T6840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.999390][ T6852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.267'. [ 96.118247][ T6869] netlink: 'syz.4.272': attribute type 10 has an invalid length. [ 96.388776][ T6875] atomic_op ffff888030fc6198 conn xmit_atomic 0000000000000000 [ 96.482466][ T6882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.276'. [ 96.613638][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.643366][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.823618][ T6877] netdevsim netdevsim4 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.833772][ T6877] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.843218][ T6877] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.852745][ T6877] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.920718][ T6896] netlink: 'syz.1.282': attribute type 6 has an invalid length. [ 96.938880][ T6896] netlink: 'syz.1.282': attribute type 7 has an invalid length. [ 96.974107][ T6896] netlink: 'syz.1.282': attribute type 8 has an invalid length. [ 97.302924][ T6911] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 97.320856][ T6911] netlink: 224 bytes leftover after parsing attributes in process `syz.3.289'. [ 97.332708][ T6911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.565618][ T6926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.293'. [ 97.809720][ T6942] veth0_to_bridge: entered promiscuous mode [ 97.819603][ T6939] netlink: 'syz.0.297': attribute type 21 has an invalid length. [ 97.828470][ T6939] netlink: 128 bytes leftover after parsing attributes in process `syz.0.297'. [ 97.872761][ T6939] netlink: 'syz.0.297': attribute type 5 has an invalid length. [ 97.899462][ T6939] netlink: 'syz.0.297': attribute type 6 has an invalid length. [ 97.907656][ T6939] netlink: 3 bytes leftover after parsing attributes in process `syz.0.297'. [ 97.928724][ T6951] FAULT_INJECTION: forcing a failure. [ 97.928724][ T6951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.942137][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.298'. [ 97.952539][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.4.300 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 97.952562][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.952571][ T6951] Call Trace: [ 97.952577][ T6951] [ 97.952583][ T6951] dump_stack_lvl+0x241/0x360 [ 97.952608][ T6951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.952625][ T6951] ? __pfx__printk+0x10/0x10 [ 97.952642][ T6951] ? __pfx_lock_release+0x10/0x10 [ 97.952670][ T6951] should_fail_ex+0x40a/0x550 [ 97.952695][ T6951] _copy_from_user+0x2d/0xb0 [ 97.952715][ T6951] copy_msghdr_from_user+0xae/0x680 [ 97.952735][ T6951] ? __pfx___might_resched+0x10/0x10 [ 97.952756][ T6951] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 97.952779][ T6951] ? do_recvmmsg+0x44e/0xab0 [ 97.952795][ T6951] ? __might_fault+0xaa/0x120 [ 97.952812][ T6951] do_recvmmsg+0x3bd/0xab0 [ 97.952834][ T6951] ? __pfx_do_recvmmsg+0x10/0x10 [ 97.952866][ T6951] ? ksys_write+0x22a/0x2b0 [ 97.952882][ T6951] ? __pfx_lock_release+0x10/0x10 [ 97.952906][ T6951] ? sb_end_write+0xe9/0x1c0 [ 97.952927][ T6951] ? vfs_write+0x7fa/0xd10 [ 97.952945][ T6951] ? __mutex_unlock_slowpath+0x227/0x800 [ 97.952978][ T6951] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.952991][ T6951] ? __fget_files+0x2a/0x410 [ 97.953012][ T6951] __x64_sys_recvmmsg+0x199/0x250 [ 97.953023][ T6951] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 97.953034][ T6951] ? do_syscall_64+0x100/0x230 [ 97.953047][ T6951] ? do_syscall_64+0xb6/0x230 [ 97.953059][ T6951] do_syscall_64+0xf3/0x230 [ 97.953070][ T6951] ? clear_bhb_loop+0x35/0x90 [ 97.953084][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.953097][ T6951] RIP: 0033:0x7f6e3318d169 [ 97.953107][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.953114][ T6951] RSP: 002b:00007f6e33ff9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 97.953125][ T6951] RAX: ffffffffffffffda RBX: 00007f6e333a5fa0 RCX: 00007f6e3318d169 [ 97.953132][ T6951] RDX: 000000000400007c RSI: 0000400000000f40 RDI: 0000000000000005 [ 97.953138][ T6951] RBP: 00007f6e33ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 97.953143][ T6951] R10: 0000000000002302 R11: 0000000000000246 R12: 0000000000000002 [ 97.953148][ T6951] R13: 0000000000000000 R14: 00007f6e333a5fa0 R15: 00007fff1ab01c98 [ 97.953162][ T6951] [ 98.205343][ T6942] veth0_to_bridge: left promiscuous mode [ 98.776779][ T6979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.310'. [ 98.980922][ T6989] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 99.031349][ T6989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.036655][ T6991] netlink: 'syz.3.314': attribute type 11 has an invalid length. [ 99.292370][ T7003] gretap0: entered promiscuous mode [ 99.303003][ T7003] gretap0: left promiscuous mode [ 99.470122][ T7006] xfrm1: entered allmulticast mode [ 99.964169][ T7028] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 100.067811][ T7028] bridge0: entered promiscuous mode [ 100.106024][ T7028] macvlan2: entered promiscuous mode [ 100.112122][ T7028] bridge0: port 1(macvlan2) entered blocking state [ 100.164497][ T7028] bridge0: port 1(macvlan2) entered disabled state [ 100.194503][ T7028] macvlan2: entered allmulticast mode [ 100.199959][ T7028] bridge0: entered allmulticast mode [ 100.233620][ T7028] macvlan2: left allmulticast mode [ 100.244692][ T7028] bridge0: left allmulticast mode [ 100.258978][ T7028] bridge0: left promiscuous mode [ 100.331054][ T7042] netlink: 'syz.3.335': attribute type 8 has an invalid length. [ 100.545367][ T7049] Cannot find set identified by id 2 to match [ 100.656322][ T7053] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.749950][ T7026] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 100.763157][ T7026] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 100.767781][ T7057] __nla_validate_parse: 3 callbacks suppressed [ 100.767797][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 100.829144][ T7060] netlink: 40 bytes leftover after parsing attributes in process `syz.3.340'. [ 101.728410][ T7102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.355'. [ 101.729069][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 102.325195][ T7131] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 102.390531][ T7131] xt_hashlimit: size too large, truncated to 1048576 [ 102.407191][ T7135] xt_hashlimit: size too large, truncated to 1048576 [ 102.463465][ T7139] xt_hashlimit: size too large, truncated to 1048576 [ 102.471463][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 102.488229][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 102.539563][ T7142] : renamed from bond0 (while UP) [ 102.643138][ T7146] netlink: 'syz.4.371': attribute type 1 has an invalid length. [ 102.655416][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 102.921993][ T7152] FAULT_INJECTION: forcing a failure. [ 102.921993][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 102.969875][ T7152] CPU: 1 UID: 0 PID: 7152 Comm: syz.2.373 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 102.969900][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.969909][ T7152] Call Trace: [ 102.969915][ T7152] [ 102.969922][ T7152] dump_stack_lvl+0x241/0x360 [ 102.969948][ T7152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.969965][ T7152] ? __pfx__printk+0x10/0x10 [ 102.969984][ T7152] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 102.970006][ T7152] ? __pfx___might_resched+0x10/0x10 [ 102.970025][ T7152] ? vsnprintf+0x1152/0x1220 [ 102.970052][ T7152] should_fail_ex+0x40a/0x550 [ 102.970078][ T7152] should_failslab+0xac/0x100 [ 102.970101][ T7152] __kmalloc_node_noprof+0xe1/0x4d0 [ 102.970120][ T7152] ? __kvmalloc_node_noprof+0x72/0x190 [ 102.970144][ T7152] ? __pfx_macvlan_setup+0x10/0x10 [ 102.970161][ T7152] __kvmalloc_node_noprof+0x72/0x190 [ 102.970185][ T7152] alloc_netdev_mqs+0xa4/0x1210 [ 102.970203][ T7152] ? __pfx_macvlan_setup+0x10/0x10 [ 102.970225][ T7152] rtnl_create_link+0x2f9/0xc90 [ 102.970250][ T7152] rtnl_newlink_create+0x2e1/0xbd0 [ 102.970279][ T7152] ? __pfx_aa_get_newest_label+0x10/0x10 [ 102.970305][ T7152] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 102.970331][ T7152] ? __pfx___mutex_lock+0x10/0x10 [ 102.970359][ T7152] ? ns_capable+0x8a/0xf0 [ 102.970381][ T7152] rtnl_newlink+0x167a/0x1d90 [ 102.970404][ T7152] ? stack_depot_save_flags+0x37/0x940 [ 102.970439][ T7152] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.970458][ T7152] ? __netlink_deliver_tap+0x561/0x7f0 [ 102.970485][ T7152] ? __pfx_validate_chain+0x10/0x10 [ 102.970501][ T7152] ? __sock_sendmsg+0x221/0x270 [ 102.970519][ T7152] ? ____sys_sendmsg+0x53a/0x860 [ 102.970534][ T7152] ? __sys_sendmsg+0x269/0x350 [ 102.970548][ T7152] ? do_syscall_64+0xf3/0x230 [ 102.970564][ T7152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.970605][ T7152] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.970629][ T7152] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.970660][ T7152] ? mark_lock+0x9a/0x360 [ 102.970679][ T7152] ? __lock_acquire+0x1397/0x2100 [ 102.970732][ T7152] ? __pfx_lock_release+0x10/0x10 [ 102.970768][ T7152] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.970790][ T7152] rtnetlink_rcv_msg+0x791/0xcf0 [ 102.970809][ T7152] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 102.970834][ T7152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.970862][ T7152] ? ref_tracker_free+0x643/0x7e0 [ 102.970884][ T7152] netlink_rcv_skb+0x206/0x480 [ 102.970908][ T7152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.970930][ T7152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.970974][ T7152] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.970996][ T7152] netlink_unicast+0x7f6/0x990 [ 102.971024][ T7152] ? __pfx_netlink_unicast+0x10/0x10 [ 102.971040][ T7152] ? __virt_addr_valid+0x45f/0x530 [ 102.971057][ T7152] ? __phys_addr_symbol+0x2f/0x70 [ 102.971071][ T7152] ? __check_object_size+0x47a/0x730 [ 102.971096][ T7152] netlink_sendmsg+0x8de/0xcb0 [ 102.971129][ T7152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.971154][ T7152] ? aa_sock_msg_perm+0x91/0x160 [ 102.971181][ T7152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.971199][ T7152] __sock_sendmsg+0x221/0x270 [ 102.971222][ T7152] ____sys_sendmsg+0x53a/0x860 [ 102.971248][ T7152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.971262][ T7152] ? __fget_files+0x2a/0x410 [ 102.971287][ T7152] ? __fget_files+0x2a/0x410 [ 102.971317][ T7152] __sys_sendmsg+0x269/0x350 [ 102.971339][ T7152] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.971369][ T7152] ? do_sys_openat2+0x17a/0x1d0 [ 102.971417][ T7152] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.971440][ T7152] ? do_syscall_64+0x100/0x230 [ 102.971461][ T7152] ? do_syscall_64+0xb6/0x230 [ 102.971487][ T7152] do_syscall_64+0xf3/0x230 [ 102.971505][ T7152] ? clear_bhb_loop+0x35/0x90 [ 102.971527][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.971546][ T7152] RIP: 0033:0x7f8288f8d169 [ 102.971561][ T7152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.971574][ T7152] RSP: 002b:00007f8289e0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.971592][ T7152] RAX: ffffffffffffffda RBX: 00007f82891a5fa0 RCX: 00007f8288f8d169 [ 102.971604][ T7152] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000004 [ 102.971614][ T7152] RBP: 00007f8289e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.971623][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.971632][ T7152] R13: 0000000000000000 R14: 00007f82891a5fa0 R15: 00007ffd77dad288 [ 102.971660][ T7152] [ 103.564500][ T7163] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 103.575211][ T7163] tipc: Failed to obtain node identity [ 103.580715][ T7163] tipc: Enabling of bearer rejected, failed to enable media [ 103.645541][ T7161] netlink: 44 bytes leftover after parsing attributes in process `syz.2.377'. [ 103.798667][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 103.820468][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 103.833723][ T7172] batadv0: entered promiscuous mode [ 103.840461][ T7172] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.251309][ T7193] Cannot find add_set index 3 as target [ 104.271826][ T7180] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.275595][ T7195] FAULT_INJECTION: forcing a failure. [ 104.275595][ T7195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.284250][ T7180] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.298406][ T7195] CPU: 0 UID: 0 PID: 7195 Comm: syz.2.390 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 104.298436][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.298445][ T7195] Call Trace: [ 104.298452][ T7195] [ 104.298459][ T7195] dump_stack_lvl+0x241/0x360 [ 104.298486][ T7195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.298503][ T7195] ? __pfx__printk+0x10/0x10 [ 104.298520][ T7195] ? __pfx_lock_release+0x10/0x10 [ 104.298547][ T7195] should_fail_ex+0x40a/0x550 [ 104.298638][ T7195] _copy_from_user+0x2d/0xb0 [ 104.298663][ T7195] do_ipt_set_ctl+0x731/0x1250 [ 104.298688][ T7195] ? nf_setsockopt+0x240/0x2c0 [ 104.298707][ T7195] ? do_ip_setsockopt+0x2824/0x3ae0 [ 104.298722][ T7195] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 104.298741][ T7195] ? rcu_is_watching+0x15/0xb0 [ 104.298759][ T7195] ? trace_contention_end+0x3c/0x120 [ 104.298784][ T7195] ? __mutex_unlock_slowpath+0x227/0x800 [ 104.298810][ T7195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.298827][ T7195] ? aa_sk_perm+0x96d/0xab0 [ 104.298853][ T7195] ? __pfx_aa_sk_perm+0x10/0x10 [ 104.298875][ T7195] nf_setsockopt+0x295/0x2c0 [ 104.298900][ T7195] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 104.298921][ T7195] do_sock_setsockopt+0x3af/0x720 [ 104.298942][ T7195] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 104.298961][ T7195] ? __fget_files+0x395/0x410 [ 104.298981][ T7195] ? __fget_files+0x2a/0x410 [ 104.299008][ T7195] __x64_sys_setsockopt+0x1ee/0x280 [ 104.299029][ T7195] do_syscall_64+0xf3/0x230 [ 104.299047][ T7195] ? clear_bhb_loop+0x35/0x90 [ 104.299070][ T7195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.299089][ T7195] RIP: 0033:0x7f8288f8d169 [ 104.299104][ T7195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.299117][ T7195] RSP: 002b:00007f8289e0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.299134][ T7195] RAX: ffffffffffffffda RBX: 00007f82891a5fa0 RCX: 00007f8288f8d169 [ 104.299145][ T7195] RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000003 [ 104.299156][ T7195] RBP: 00007f8289e0f090 R08: 00000000000002c0 R09: 0000000000000000 [ 104.299165][ T7195] R10: 00004000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 104.299175][ T7195] R13: 0000000000000000 R14: 00007f82891a5fa0 R15: 00007ffd77dad288 [ 104.299200][ T7195] [ 104.536760][ T7180] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.545420][ T7180] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.659501][ T7185] 8021q: adding VLAN 0 to HW filter on device  [ 104.668537][ T7185] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.678939][ T7185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.713255][ T7201] bond0: entered promiscuous mode [ 104.724550][ T7201] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 104.744875][ T7201] bridge0: port 1(macvlan3) entered blocking state [ 104.752548][ T7201] bridge0: port 1(macvlan3) entered disabled state [ 104.772922][ T7201] macvlan3: entered allmulticast mode [ 104.781183][ T7201] bond0: entered allmulticast mode [ 104.789550][ T7201] macvlan3: entered promiscuous mode [ 105.018386][ T7213] bridge0: entered promiscuous mode [ 105.048368][ T7213] bridge0: left promiscuous mode [ 105.121498][ T7214] bridge2: port 1(bridge_slave_1) entered blocking state [ 105.131025][ T7214] bridge2: port 1(bridge_slave_1) entered disabled state [ 105.139861][ T7214] bridge_slave_1: entered allmulticast mode [ 105.148462][ T7214] bridge_slave_1: entered promiscuous mode [ 105.563044][ T7241] FAULT_INJECTION: forcing a failure. [ 105.563044][ T7241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.611817][ T7241] CPU: 0 UID: 0 PID: 7241 Comm: syz.0.409 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 105.611840][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.611850][ T7241] Call Trace: [ 105.611856][ T7241] [ 105.611862][ T7241] dump_stack_lvl+0x241/0x360 [ 105.611887][ T7241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.611904][ T7241] ? __pfx__printk+0x10/0x10 [ 105.611920][ T7241] ? __pfx_lock_release+0x10/0x10 [ 105.611947][ T7241] should_fail_ex+0x40a/0x550 [ 105.611970][ T7241] _copy_from_user+0x2d/0xb0 [ 105.611989][ T7241] copy_msghdr_from_user+0xae/0x680 [ 105.612008][ T7241] ? __pfx___might_resched+0x10/0x10 [ 105.612028][ T7241] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 105.612050][ T7241] ? do_recvmmsg+0x44e/0xab0 [ 105.612064][ T7241] ? __might_fault+0xaa/0x120 [ 105.612080][ T7241] do_recvmmsg+0x3bd/0xab0 [ 105.612100][ T7241] ? __pfx_do_recvmmsg+0x10/0x10 [ 105.612127][ T7241] ? ksys_write+0x22a/0x2b0 [ 105.612140][ T7241] ? __pfx_lock_release+0x10/0x10 [ 105.612161][ T7241] ? sb_end_write+0xe9/0x1c0 [ 105.612204][ T7241] ? vfs_write+0x7fa/0xd10 [ 105.612221][ T7241] ? __mutex_unlock_slowpath+0x227/0x800 [ 105.612242][ T7241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.612255][ T7241] ? __fget_files+0x2a/0x410 [ 105.612281][ T7241] __x64_sys_recvmmsg+0x199/0x250 [ 105.612297][ T7241] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 105.612311][ T7241] ? do_syscall_64+0x100/0x230 [ 105.612327][ T7241] ? do_syscall_64+0xb6/0x230 [ 105.612343][ T7241] do_syscall_64+0xf3/0x230 [ 105.612357][ T7241] ? clear_bhb_loop+0x35/0x90 [ 105.612375][ T7241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.612390][ T7241] RIP: 0033:0x7f630378d169 [ 105.612403][ T7241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.612414][ T7241] RSP: 002b:00007f630451b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 105.612429][ T7241] RAX: ffffffffffffffda RBX: 00007f63039a5fa0 RCX: 00007f630378d169 [ 105.612439][ T7241] RDX: 000000000400007c RSI: 0000400000000f40 RDI: 0000000000000005 [ 105.612447][ T7241] RBP: 00007f630451b090 R08: 0000000000000000 R09: 0000000000000000 [ 105.612455][ T7241] R10: 0000000000002302 R11: 0000000000000246 R12: 0000000000000002 [ 105.612462][ T7241] R13: 0000000000000000 R14: 00007f63039a5fa0 R15: 00007ffcb26d86e8 [ 105.612481][ T7241] [ 106.480542][ T7271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.526651][ T7270] veth1_macvtap: left promiscuous mode [ 106.550394][ T7262] IPv6: NLM_F_REPLACE set, but no existing node found! [ 106.936080][ T7282] ip6tnl1: entered promiscuous mode [ 106.942288][ T7282] ip6tnl1: entered allmulticast mode [ 107.052011][ T7287] __nla_validate_parse: 9 callbacks suppressed [ 107.052029][ T7287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 107.078196][ T7287] gretap0: entered promiscuous mode [ 107.103597][ T7287] gretap0: left promiscuous mode [ 107.330853][ T7292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.427'. [ 107.670936][ T7307] netlink: 'syz.2.433': attribute type 11 has an invalid length. [ 108.034864][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 108.047225][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 108.060578][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.436'. [ 108.112863][ T7322] batadv0: entered promiscuous mode [ 108.131338][ T7322] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.178705][ T7325] bridge_slave_0: left allmulticast mode [ 108.185782][ T7325] bridge_slave_0: left promiscuous mode [ 108.205105][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.250360][ T7325] bridge_slave_1: left allmulticast mode [ 108.264063][ T7325] bridge_slave_1: left promiscuous mode [ 108.273573][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.323808][ T7325] bond0: (slave bond_slave_0): Releasing backup interface [ 108.390460][ T7325] bond0: (slave bond_slave_1): Releasing backup interface [ 108.460040][ T7330] netlink: 'syz.0.438': attribute type 10 has an invalid length. [ 108.469013][ T7325] bond0: (slave bond1): Releasing backup interface [ 108.485134][ T7330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.438'. [ 108.539064][ T7330] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.562532][ T7330] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.584425][ T7324] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 108.586038][ T7330] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.621647][ T7330] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.770115][ T7339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.441'. [ 109.420997][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 109.498418][ T7366] netlink: 44 bytes leftover after parsing attributes in process `syz.0.449'. [ 109.593332][ T7369] netlink: 'syz.1.452': attribute type 10 has an invalid length. [ 109.621662][ T7369] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.664679][ T7369] bond0: (slave team0): Enslaving as an active interface with an up link [ 109.729920][ T7372] ip6tnl2: entered promiscuous mode [ 109.777678][ T7375] netlink: 'syz.2.454': attribute type 10 has an invalid length. [ 110.479997][ T7402] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 110.496648][ T7402] netlink: 224 bytes leftover after parsing attributes in process `syz.2.462'. [ 110.653320][ T7406] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 110.708850][ T7406] team0: Device ipvlan1 failed to register rx_handler [ 110.712191][ T7408] netlink: 'syz.3.467': attribute type 20 has an invalid length. [ 110.941976][ T7415] bridge0: port 1(syz_tun) entered blocking state [ 110.969709][ T7415] bridge0: port 1(syz_tun) entered disabled state [ 110.981914][ T7415] syz_tun: entered allmulticast mode [ 111.005873][ T7415] syz_tun: entered promiscuous mode [ 111.050842][ T7415] bridge0: port 1(syz_tun) entered blocking state [ 111.057820][ T7415] bridge0: port 1(syz_tun) entered forwarding state [ 111.242498][ T7430] IPv6: addrconf: prefix option has invalid lifetime [ 111.677668][ T7445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.869614][ T7445] bond2 (unregistering): Released all slaves [ 111.889184][ T7449] wg2: entered allmulticast mode [ 111.954137][ T7449] wg2: left allmulticast mode [ 112.128810][ T7465] netlink: 'syz.3.487': attribute type 3 has an invalid length. [ 112.143473][ T7465] __nla_validate_parse: 7 callbacks suppressed [ 112.143490][ T7465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.487'. [ 112.182091][ T7465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.487'. [ 112.252271][ T7465] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 113.012175][ T7481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.494'. [ 113.224226][ T7487] netlink: 'syz.1.498': attribute type 10 has an invalid length. [ 113.418956][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 114.107152][ T7506] Cannot find add_set index 3 as target [ 114.250192][ T7512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.397626][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 114.408634][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'. [ 114.552649][ T7522] netlink: 1672 bytes leftover after parsing attributes in process `syz.3.508'. [ 114.569890][ T7520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.574069][ T7522] netlink: 1672 bytes leftover after parsing attributes in process `syz.3.508'. [ 114.605430][ T7520] team0: Port device bond3 added [ 114.690840][ T7525] netlink: 40 bytes leftover after parsing attributes in process `syz.1.509'. [ 114.918809][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 114.931813][ T7533] bridge0: entered promiscuous mode [ 114.948774][ T7533] bridge0: left promiscuous mode [ 115.263251][ T7552] dvmrp5: entered allmulticast mode [ 115.619973][ T7573] FAULT_INJECTION: forcing a failure. [ 115.619973][ T7573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.635823][ T7573] CPU: 0 UID: 0 PID: 7573 Comm: syz.4.524 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 115.635851][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.635861][ T7573] Call Trace: [ 115.635867][ T7573] [ 115.635874][ T7573] dump_stack_lvl+0x241/0x360 [ 115.635900][ T7573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.635916][ T7573] ? __pfx__printk+0x10/0x10 [ 115.635934][ T7573] ? __pfx_lock_release+0x10/0x10 [ 115.635964][ T7573] should_fail_ex+0x40a/0x550 [ 115.635989][ T7573] _copy_from_iter+0x1df/0x1c40 [ 115.636006][ T7573] ? __virt_addr_valid+0x183/0x530 [ 115.636022][ T7573] ? __pfx_lock_release+0x10/0x10 [ 115.636050][ T7573] ? __alloc_skb+0x28f/0x440 [ 115.636066][ T7573] ? __pfx__copy_from_iter+0x10/0x10 [ 115.636085][ T7573] ? __virt_addr_valid+0x183/0x530 [ 115.636099][ T7573] ? __virt_addr_valid+0x183/0x530 [ 115.636113][ T7573] ? __virt_addr_valid+0x45f/0x530 [ 115.636128][ T7573] ? __phys_addr_symbol+0x2f/0x70 [ 115.636142][ T7573] ? __check_object_size+0x47a/0x730 [ 115.636166][ T7573] netlink_sendmsg+0x742/0xcb0 [ 115.636197][ T7573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.636220][ T7573] ? aa_sock_msg_perm+0x91/0x160 [ 115.636247][ T7573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.636263][ T7573] __sock_sendmsg+0x221/0x270 [ 115.636285][ T7573] ____sys_sendmsg+0x53a/0x860 [ 115.636308][ T7573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.636323][ T7573] ? __fget_files+0x2a/0x410 [ 115.636347][ T7573] ? __fget_files+0x2a/0x410 [ 115.636375][ T7573] __sys_sendmsg+0x269/0x350 [ 115.636395][ T7573] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.636421][ T7573] ? do_sys_openat2+0x17a/0x1d0 [ 115.636465][ T7573] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.636489][ T7573] ? do_syscall_64+0x100/0x230 [ 115.636518][ T7573] ? do_syscall_64+0xb6/0x230 [ 115.636539][ T7573] do_syscall_64+0xf3/0x230 [ 115.636556][ T7573] ? clear_bhb_loop+0x35/0x90 [ 115.636580][ T7573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.636599][ T7573] RIP: 0033:0x7f6e3318d169 [ 115.636615][ T7573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.636628][ T7573] RSP: 002b:00007f6e33ff9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.636645][ T7573] RAX: ffffffffffffffda RBX: 00007f6e333a5fa0 RCX: 00007f6e3318d169 [ 115.636657][ T7573] RDX: 000000000000c010 RSI: 00004000000002c0 RDI: 0000000000000004 [ 115.636667][ T7573] RBP: 00007f6e33ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 115.636677][ T7573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.636685][ T7573] R13: 0000000000000000 R14: 00007f6e333a5fa0 R15: 00007fff1ab01c98 [ 115.636714][ T7573] [ 115.915533][ T7575] FAULT_INJECTION: forcing a failure. [ 115.915533][ T7575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.928684][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz.1.525 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 115.928706][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.928715][ T7575] Call Trace: [ 115.928721][ T7575] [ 115.928729][ T7575] dump_stack_lvl+0x241/0x360 [ 115.928754][ T7575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.928772][ T7575] ? __pfx__printk+0x10/0x10 [ 115.928787][ T7575] ? __pfx_lock_release+0x10/0x10 [ 115.928814][ T7575] should_fail_ex+0x40a/0x550 [ 115.928835][ T7575] _copy_from_user+0x2d/0xb0 [ 115.928851][ T7575] copy_msghdr_from_user+0xae/0x680 [ 115.928869][ T7575] ? __pfx___might_resched+0x10/0x10 [ 115.928888][ T7575] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 115.928908][ T7575] ? do_recvmmsg+0x44e/0xab0 [ 115.928922][ T7575] ? __might_fault+0xaa/0x120 [ 115.928939][ T7575] do_recvmmsg+0x3bd/0xab0 [ 115.928960][ T7575] ? __pfx_do_recvmmsg+0x10/0x10 [ 115.928987][ T7575] ? ksys_write+0x22a/0x2b0 [ 115.929001][ T7575] ? __pfx_lock_release+0x10/0x10 [ 115.929026][ T7575] ? sb_end_write+0xe9/0x1c0 [ 115.929046][ T7575] ? vfs_write+0x7fa/0xd10 [ 115.929064][ T7575] ? __mutex_unlock_slowpath+0x227/0x800 [ 115.929088][ T7575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.929102][ T7575] ? __fget_files+0x2a/0x410 [ 115.929132][ T7575] __x64_sys_recvmmsg+0x199/0x250 [ 115.929148][ T7575] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 115.929163][ T7575] ? do_syscall_64+0x100/0x230 [ 115.929180][ T7575] ? do_syscall_64+0xb6/0x230 [ 115.929199][ T7575] do_syscall_64+0xf3/0x230 [ 115.929214][ T7575] ? clear_bhb_loop+0x35/0x90 [ 115.929246][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.929264][ T7575] RIP: 0033:0x7f9a78f8d169 [ 115.929279][ T7575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.929290][ T7575] RSP: 002b:00007f9a79da2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 115.929306][ T7575] RAX: ffffffffffffffda RBX: 00007f9a791a5fa0 RCX: 00007f9a78f8d169 [ 115.929318][ T7575] RDX: 000000000400007c RSI: 0000400000000f40 RDI: 0000000000000005 [ 115.929328][ T7575] RBP: 00007f9a79da2090 R08: 0000000000000000 R09: 0000000000000000 [ 115.929338][ T7575] R10: 0000000000002302 R11: 0000000000000246 R12: 0000000000000002 [ 115.929348][ T7575] R13: 0000000000000000 R14: 00007f9a791a5fa0 R15: 00007ffe8e044688 [ 115.929374][ T7575] [ 116.461058][ T7579] lo: entered promiscuous mode [ 116.496561][ T7579] tunl0: entered promiscuous mode [ 116.516879][ T7579] gre0: entered promiscuous mode [ 116.538529][ T7579] gretap0: entered promiscuous mode [ 116.563367][ T7579] erspan0: entered promiscuous mode [ 116.579927][ T7579] ip_vti0: entered promiscuous mode [ 116.588070][ T7579] ip6_vti0: entered promiscuous mode [ 116.595325][ T7595] netlink: 'syz.1.532': attribute type 3 has an invalid length. [ 116.596348][ T7579] sit0: entered promiscuous mode [ 116.615931][ T7579] ip6tnl0: entered promiscuous mode [ 116.622391][ T7579] ip6gre0: entered promiscuous mode [ 116.633067][ T7579] syz_tun: entered promiscuous mode [ 116.641070][ T7579] ip6gretap0: entered promiscuous mode [ 116.670905][ T7579] bridge0: entered promiscuous mode [ 116.681426][ T7579] vcan0: entered promiscuous mode [ 116.688663][ T7579] : entered promiscuous mode [ 116.700583][ T7579] team0: entered promiscuous mode [ 116.706532][ T7579] bond1: entered promiscuous mode [ 116.713249][ T7579] dummy0: entered promiscuous mode [ 116.739172][ T7579] nlmon0: entered promiscuous mode [ 116.748231][ T7579] caif0: entered promiscuous mode [ 116.753514][ T7579] batadv0: entered promiscuous mode [ 116.759144][ T7579] vxcan0: entered promiscuous mode [ 116.765013][ T7579] vxcan1: entered promiscuous mode [ 116.770343][ T7579] veth0: entered promiscuous mode [ 116.775628][ T7579] veth1: entered promiscuous mode [ 116.780893][ T7579] wg0: entered promiscuous mode [ 116.786336][ T7579] wg1: entered promiscuous mode [ 116.791603][ T7579] wg2: entered promiscuous mode [ 116.796698][ T7579] veth0_to_bridge: entered promiscuous mode [ 116.802766][ T7579] bridge_slave_0: entered promiscuous mode [ 116.809031][ T7579] veth1_to_bridge: entered promiscuous mode [ 116.815610][ T7579] bridge_slave_1: entered promiscuous mode [ 116.821650][ T7579] veth0_to_bond: entered promiscuous mode [ 116.828517][ T7579] bond_slave_0: entered promiscuous mode [ 116.834458][ T7579] veth1_to_bond: entered promiscuous mode [ 116.840281][ T7579] bond_slave_1: entered promiscuous mode [ 116.846100][ T7579] veth0_to_team: entered promiscuous mode [ 116.851908][ T7579] team_slave_0: entered promiscuous mode [ 116.857705][ T7579] veth1_to_team: entered promiscuous mode [ 116.863580][ T7579] team_slave_1: entered promiscuous mode [ 116.869731][ T7579] veth0_to_batadv: entered promiscuous mode [ 116.876352][ T7579] batadv_slave_0: entered promiscuous mode [ 116.882305][ T7579] veth1_to_batadv: entered promiscuous mode [ 116.888391][ T7579] batadv_slave_1: entered promiscuous mode [ 116.894401][ T7579] xfrm0: entered promiscuous mode [ 116.899508][ T7579] veth0_to_hsr: entered promiscuous mode [ 116.905544][ T7579] veth1_to_hsr: entered promiscuous mode [ 116.911388][ T7579] hsr0: entered promiscuous mode [ 116.916521][ T7579] veth1_virt_wifi: entered promiscuous mode [ 116.922578][ T7579] veth0_virt_wifi: entered promiscuous mode [ 116.928814][ T7579] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 116.936549][ T7579] vlan0: entered promiscuous mode [ 116.941716][ T7579] vlan1: entered promiscuous mode [ 116.948043][ T7579] macvlan0: entered promiscuous mode [ 116.956270][ T7579] macvlan1: entered promiscuous mode [ 116.961739][ T7579] ipvlan0: entered promiscuous mode [ 116.967136][ T7579] ipvlan1: entered promiscuous mode [ 116.972560][ T7579] macvtap0: entered promiscuous mode [ 116.978027][ T7579] macsec0: entered promiscuous mode [ 116.983337][ T7579] geneve0: entered promiscuous mode [ 116.988763][ T7579] geneve1: entered promiscuous mode [ 116.994242][ T7579] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 117.001285][ T7579] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 117.012354][ T7579] macvtap0.3: entered promiscuous mode [ 117.018015][ T7579] bridge1: entered promiscuous mode [ 117.023391][ T7579] ip6_vti1: entered promiscuous mode [ 117.029020][ T7579] ip6tnl1: entered promiscuous mode [ 117.034689][ T7579] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode [ 117.041847][ T7579] netdevsim netdevsim3 eth0: entered promiscuous mode [ 117.048886][ T7579] netdevsim netdevsim3 eth1: entered promiscuous mode [ 117.056060][ T7579] netdevsim netdevsim3 eth2: entered promiscuous mode [ 117.062985][ T7579] netdevsim netdevsim3 eth3: entered promiscuous mode [ 117.070054][ T7579] mac80211_hwsim hwsim15 wlan3: entered promiscuous mode [ 117.347952][ T7618] __nla_validate_parse: 4 callbacks suppressed [ 117.347970][ T7618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.542'. [ 117.363469][ T7618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.542'. [ 117.498884][ T7625] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 117.552542][ T7625] xt_hashlimit: size too large, truncated to 1048576 [ 117.558936][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.545'. [ 117.573248][ T7627] gretap0: entered promiscuous mode [ 117.593623][ T7627] gretap0: left promiscuous mode [ 117.606615][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 117.615827][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 117.793153][ T7639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.550'. [ 118.192370][ T7653] veth0_to_bridge: entered promiscuous mode [ 118.199415][ T7653] netlink: 'syz.1.555': attribute type 4 has an invalid length. [ 118.224112][ T7658] netlink: 48 bytes leftover after parsing attributes in process `syz.2.557'. [ 118.262687][ T7658] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 118.275089][ T7653] veth0_to_bridge: left promiscuous mode [ 118.582776][ T7675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.564'. [ 118.700138][ T7684] netlink: 32 bytes leftover after parsing attributes in process `syz.4.567'. [ 118.710736][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 119.648005][ T7707] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 119.683772][ T7712] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 120.238564][ T7733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.267670][ T7733] bond0: (slave bond1): Enslaving as an active interface with an up link [ 121.052649][ T7762] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.608296][ T7779] netlink: 'syz.2.598': attribute type 3 has an invalid length. [ 121.675074][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 121.766919][ T7765] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 121.841731][ T7788] team0: Device gtp0 is of different type [ 122.452996][ T7815] netlink: 'syz.3.610': attribute type 10 has an invalid length. [ 122.461722][ T7815] team0: left promiscuous mode [ 122.469819][ T7815] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.478139][ T7815] team0: entered promiscuous mode [ 122.483750][ T7815] : (slave team0): Enslaving as an active interface with an up link [ 123.105426][ T7836] __nla_validate_parse: 6 callbacks suppressed [ 123.105444][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 123.149446][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 123.164052][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.619'. [ 123.551391][ T7851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.622'. [ 123.659079][ T7856] netlink: 'syz.3.623': attribute type 10 has an invalid length. [ 123.667680][ T7856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.623'. [ 123.676987][ T7856] geneve0: left promiscuous mode [ 123.683109][ T7856] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.698461][ T7856] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.707961][ T7856] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.719537][ T7856] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.737775][ T7856] geneve0: entered promiscuous mode [ 123.745245][ T7856] team0: Port device geneve0 added [ 123.781994][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 123.806850][ T7861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.635'. [ 124.118979][ T5923] hid (null): report_id 0 is invalid [ 124.133557][ T5923] hid (null): unknown global tag 0xd [ 124.136696][ T7873] bond4: entered promiscuous mode [ 124.144219][ T7873] bond4: entered allmulticast mode [ 124.149824][ T7873] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.240919][ T5923] hid-generic 0005:046D:0A0C.0001: report_id 0 is invalid [ 124.299556][ T5923] hid-generic 0005:046D:0A0C.0001: item 0 0 1 8 parsing failed [ 124.340628][ T5923] hid-generic 0005:046D:0A0C.0001: probe with driver hid-generic failed with error -22 [ 124.585353][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 124.597271][ T7887] netlink: 60 bytes leftover after parsing attributes in process `syz.4.632'. [ 124.802095][ T7896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.636'. [ 125.040799][ T7898] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.075009][ T7898] bond0: (slave bond2): Enslaving as an active interface with an up link [ 125.112177][ T7906] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 125.404597][ T7923] FAULT_INJECTION: forcing a failure. [ 125.404597][ T7923] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 125.452166][ T7923] CPU: 1 UID: 0 PID: 7923 Comm: syz.4.644 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 125.452190][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.452199][ T7923] Call Trace: [ 125.452205][ T7923] [ 125.452211][ T7923] dump_stack_lvl+0x241/0x360 [ 125.452237][ T7923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.452252][ T7923] ? __pfx__printk+0x10/0x10 [ 125.452270][ T7923] ? is_bpf_text_address+0x26/0x2a0 [ 125.452296][ T7923] should_fail_ex+0x40a/0x550 [ 125.452321][ T7923] prepare_alloc_pages+0x1da/0x5b0 [ 125.452344][ T7923] __alloc_frozen_pages_noprof+0x16f/0x710 [ 125.452363][ T7923] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 125.452399][ T7923] alloc_pages_mpol+0x311/0x660 [ 125.452422][ T7923] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 125.452449][ T7923] alloc_pages_noprof+0x121/0x190 [ 125.452471][ T7923] get_free_pages_noprof+0xc/0x30 [ 125.452486][ T7923] kasan_populate_vmalloc_pte+0x38/0xe0 [ 125.452503][ T7923] __apply_to_page_range+0x806/0xde0 [ 125.452532][ T7923] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 125.452553][ T7923] ? __pfx___apply_to_page_range+0x10/0x10 [ 125.452574][ T7923] ? do_raw_spin_unlock+0x13c/0x8b0 [ 125.452593][ T7923] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 125.452626][ T7923] alloc_vmap_area+0x1d4e/0x2400 [ 125.452666][ T7923] ? __pfx_alloc_vmap_area+0x10/0x10 [ 125.452689][ T7923] ? __kasan_kmalloc+0x98/0xb0 [ 125.452707][ T7923] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 125.452727][ T7923] ? __get_vm_area_node+0x132/0x2d0 [ 125.452750][ T7923] ? sock_map_alloc+0x1b0/0x2c0 [ 125.452771][ T7923] __get_vm_area_node+0x1c8/0x2d0 [ 125.452797][ T7923] __vmalloc_node_range_noprof+0x344/0x1380 [ 125.452813][ T7923] ? sock_map_alloc+0x1b0/0x2c0 [ 125.452857][ T7923] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 125.452876][ T7923] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 125.452896][ T7923] ? bpf_map_area_alloc+0x64/0x120 [ 125.452920][ T7923] bpf_map_area_alloc+0xfc/0x120 [ 125.452942][ T7923] ? sock_map_alloc+0x1b0/0x2c0 [ 125.452964][ T7923] sock_map_alloc+0x1b0/0x2c0 [ 125.452987][ T7923] map_create+0x946/0x11c0 [ 125.453014][ T7923] __sys_bpf+0x6d3/0x820 [ 125.453035][ T7923] ? __pfx___sys_bpf+0x10/0x10 [ 125.453066][ T7923] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 125.453090][ T7923] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.453113][ T7923] ? do_syscall_64+0x100/0x230 [ 125.453135][ T7923] __x64_sys_bpf+0x7c/0x90 [ 125.453155][ T7923] do_syscall_64+0xf3/0x230 [ 125.453173][ T7923] ? clear_bhb_loop+0x35/0x90 [ 125.453196][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.453215][ T7923] RIP: 0033:0x7f6e3318d169 [ 125.453229][ T7923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.453241][ T7923] RSP: 002b:00007f6e33ff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.453257][ T7923] RAX: ffffffffffffffda RBX: 00007f6e333a5fa0 RCX: 00007f6e3318d169 [ 125.453268][ T7923] RDX: 0000000000000048 RSI: 0000400000000000 RDI: 0000000000000000 [ 125.453276][ T7923] RBP: 00007f6e33ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 125.453285][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.453294][ T7923] R13: 0000000000000001 R14: 00007f6e333a5fa0 R15: 00007fff1ab01c98 [ 125.453315][ T7923] [ 126.202318][ T7935] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 126.216034][ T7935] IPv6: addrconf: prefix option has invalid lifetime [ 126.732831][ T7963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.993009][ T7963] bond0 (unregistering): Released all slaves [ 127.017326][ T7960] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 127.027060][ T7960] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 127.256789][ T7977] FAULT_INJECTION: forcing a failure. [ 127.256789][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 127.269657][ T7977] CPU: 1 UID: 0 PID: 7977 Comm: syz.3.663 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 127.269672][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.269678][ T7977] Call Trace: [ 127.269682][ T7977] [ 127.269687][ T7977] dump_stack_lvl+0x241/0x360 [ 127.269703][ T7977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.269714][ T7977] ? __pfx__printk+0x10/0x10 [ 127.269724][ T7977] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 127.269739][ T7977] ? __pfx___might_resched+0x10/0x10 [ 127.269755][ T7977] should_fail_ex+0x40a/0x550 [ 127.269776][ T7977] should_failslab+0xac/0x100 [ 127.269798][ T7977] __kmalloc_node_noprof+0xe1/0x4d0 [ 127.269818][ T7977] ? __kvmalloc_node_noprof+0x72/0x190 [ 127.269844][ T7977] __kvmalloc_node_noprof+0x72/0x190 [ 127.269868][ T7977] alloc_netdev_mqs+0xac6/0x1210 [ 127.269894][ T7977] rtnl_create_link+0x2f9/0xc90 [ 127.269919][ T7977] rtnl_newlink_create+0x2e1/0xbd0 [ 127.269947][ T7977] ? __pfx_aa_get_newest_label+0x10/0x10 [ 127.269965][ T7977] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 127.269981][ T7977] ? __pfx___mutex_lock+0x10/0x10 [ 127.269997][ T7977] ? ns_capable+0x8a/0xf0 [ 127.270011][ T7977] rtnl_newlink+0x167a/0x1d90 [ 127.270026][ T7977] ? __lock_acquire+0x1397/0x2100 [ 127.270047][ T7977] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.270060][ T7977] ? __pfx_validate_chain+0x10/0x10 [ 127.270081][ T7977] ? validate_chain+0x11e/0x5920 [ 127.270090][ T7977] ? __pfx_lock_acquire+0x10/0x10 [ 127.270106][ T7977] ? __pfx_lock_release+0x10/0x10 [ 127.270121][ T7977] ? __pfx_validate_chain+0x10/0x10 [ 127.270132][ T7977] ? mark_lock+0x9a/0x360 [ 127.270143][ T7977] ? __lock_acquire+0x1397/0x2100 [ 127.270176][ T7977] ? __pfx_lock_release+0x10/0x10 [ 127.270197][ T7977] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.270211][ T7977] rtnetlink_rcv_msg+0x791/0xcf0 [ 127.270224][ T7977] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 127.270237][ T7977] ? __lock_acquire+0x1397/0x2100 [ 127.270251][ T7977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.270273][ T7977] netlink_rcv_skb+0x206/0x480 [ 127.270287][ T7977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.270301][ T7977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.270326][ T7977] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.270340][ T7977] netlink_unicast+0x7f6/0x990 [ 127.270356][ T7977] ? __pfx_netlink_unicast+0x10/0x10 [ 127.270366][ T7977] ? __virt_addr_valid+0x45f/0x530 [ 127.270375][ T7977] ? __phys_addr_symbol+0x2f/0x70 [ 127.270384][ T7977] ? __check_object_size+0x47a/0x730 [ 127.270399][ T7977] netlink_sendmsg+0x8de/0xcb0 [ 127.270424][ T7977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.270440][ T7977] ? aa_sock_msg_perm+0x91/0x160 [ 127.270456][ T7977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.270468][ T7977] __sock_sendmsg+0x221/0x270 [ 127.270483][ T7977] ____sys_sendmsg+0x53a/0x860 [ 127.270497][ T7977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.270506][ T7977] ? __fget_files+0x2a/0x410 [ 127.270521][ T7977] ? __fget_files+0x2a/0x410 [ 127.270539][ T7977] __sys_sendmsg+0x269/0x350 [ 127.270551][ T7977] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.270568][ T7977] ? do_sys_openat2+0x17a/0x1d0 [ 127.270595][ T7977] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.270610][ T7977] ? do_syscall_64+0x100/0x230 [ 127.270623][ T7977] ? do_syscall_64+0xb6/0x230 [ 127.270635][ T7977] do_syscall_64+0xf3/0x230 [ 127.270646][ T7977] ? clear_bhb_loop+0x35/0x90 [ 127.270662][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.270674][ T7977] RIP: 0033:0x7fb2fbb8d169 [ 127.270684][ T7977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.270691][ T7977] RSP: 002b:00007fb2fc9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.270702][ T7977] RAX: ffffffffffffffda RBX: 00007fb2fbda6080 RCX: 00007fb2fbb8d169 [ 127.270708][ T7977] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000004 [ 127.270714][ T7977] RBP: 00007fb2fc9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.270719][ T7977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.270724][ T7977] R13: 0000000000000000 R14: 00007fb2fbda6080 R15: 00007ffeac3552a8 [ 127.270738][ T7977] [ 127.972799][ T29] audit: type=1804 audit(1741424950.604:2): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.668" name="/newroot/125/cgroup.controllers" dev="tmpfs" ino=654 res=1 errno=0 [ 128.091728][ T29] audit: type=1800 audit(1741424950.614:3): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.668" name="cgroup.controllers" dev="tmpfs" ino=654 res=0 errno=0 [ 128.175189][ T8001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.438488][ T8018] __nla_validate_parse: 13 callbacks suppressed [ 128.438506][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 128.456250][ T8018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.675'. [ 128.746345][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 128.902418][ T8037] ipt_REJECT: TCP_RESET invalid for non-tcp [ 129.234960][ T8054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.684'. [ 129.249597][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.681'. [ 129.320363][ T8054] Cannot find del_set index 4 as target [ 129.375734][ T8060] wg1: left promiscuous mode [ 129.617834][ T8067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.642133][ T8070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.686'. [ 129.862416][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 129.878354][ T8078] netlink: 'syz.0.685': attribute type 1 has an invalid length. [ 130.254792][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 130.306831][ T8088] netlink: 60 bytes leftover after parsing attributes in process `syz.2.688'. [ 130.365582][ T8094] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 130.685943][ T8106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.697'. [ 132.304582][ T8168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.735051][ T8180] bridge0: port 1(syz_tun) entered disabled state [ 132.869078][ T8182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.916884][ T8182] team0: Port device bond2 added [ 132.952450][ T8174] bridge0: port 1(syz_tun) entered blocking state [ 132.959033][ T8174] bridge0: port 1(syz_tun) entered forwarding state [ 132.972999][ T8174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.996207][ T8174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.200726][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.414752][ T8197] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.435631][ T8197] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.451824][ T8210] FAULT_INJECTION: forcing a failure. [ 133.451824][ T8210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.465326][ T8197] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.473710][ T8197] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.482203][ T8210] CPU: 1 UID: 0 PID: 8210 Comm: syz.0.723 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 133.482226][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.482236][ T8210] Call Trace: [ 133.482243][ T8210] [ 133.482250][ T8210] dump_stack_lvl+0x241/0x360 [ 133.482275][ T8210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.482293][ T8210] ? __pfx__printk+0x10/0x10 [ 133.482311][ T8210] ? __pfx_lock_release+0x10/0x10 [ 133.482341][ T8210] should_fail_ex+0x40a/0x550 [ 133.482368][ T8210] _copy_from_iter+0x1df/0x1c40 [ 133.482387][ T8210] ? __virt_addr_valid+0x183/0x530 [ 133.482403][ T8210] ? __pfx_lock_release+0x10/0x10 [ 133.482432][ T8210] ? __alloc_skb+0x28f/0x440 [ 133.482447][ T8210] ? __pfx__copy_from_iter+0x10/0x10 [ 133.482466][ T8210] ? __virt_addr_valid+0x183/0x530 [ 133.482480][ T8210] ? __virt_addr_valid+0x183/0x530 [ 133.482494][ T8210] ? __virt_addr_valid+0x45f/0x530 [ 133.482509][ T8210] ? __phys_addr_symbol+0x2f/0x70 [ 133.482524][ T8210] ? __check_object_size+0x47a/0x730 [ 133.482548][ T8210] netlink_sendmsg+0x742/0xcb0 [ 133.482590][ T8210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.482615][ T8210] ? aa_sock_msg_perm+0x91/0x160 [ 133.482643][ T8210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.482661][ T8210] __sock_sendmsg+0x221/0x270 [ 133.482685][ T8210] ____sys_sendmsg+0x53a/0x860 [ 133.482710][ T8210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.482725][ T8210] ? __fget_files+0x2a/0x410 [ 133.482748][ T8210] ? __fget_files+0x2a/0x410 [ 133.482777][ T8210] __sys_sendmsg+0x269/0x350 [ 133.482799][ T8210] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.482826][ T8210] ? do_sys_openat2+0x17a/0x1d0 [ 133.482872][ T8210] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.482896][ T8210] ? do_syscall_64+0x100/0x230 [ 133.482917][ T8210] ? do_syscall_64+0xb6/0x230 [ 133.482938][ T8210] do_syscall_64+0xf3/0x230 [ 133.482956][ T8210] ? clear_bhb_loop+0x35/0x90 [ 133.482980][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.483000][ T8210] RIP: 0033:0x7f630378d169 [ 133.483015][ T8210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.483027][ T8210] RSP: 002b:00007f630451b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.483046][ T8210] RAX: ffffffffffffffda RBX: 00007f63039a5fa0 RCX: 00007f630378d169 [ 133.483057][ T8210] RDX: 000000000000c010 RSI: 00004000000002c0 RDI: 0000000000000004 [ 133.483068][ T8210] RBP: 00007f630451b090 R08: 0000000000000000 R09: 0000000000000000 [ 133.483078][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.483087][ T8210] R13: 0000000000000000 R14: 00007f63039a5fa0 R15: 00007ffcb26d86e8 [ 133.483113][ T8210] [ 133.752635][ T8211] __nla_validate_parse: 13 callbacks suppressed [ 133.752652][ T8211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.722'. [ 133.768016][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 133.872261][ T8213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.725'. [ 134.066040][ T8226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.256648][ T8233] netlink: 276 bytes leftover after parsing attributes in process `syz.4.734'. [ 134.318750][ T8238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.735'. [ 134.636090][ T8249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.740'. [ 135.730940][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 135.764091][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.754'. [ 136.111599][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 136.123030][ T8310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.761'. [ 137.659131][ T8378] netlink: 'syz.4.783': attribute type 11 has an invalid length. [ 138.083615][ T8388] pim6reg1: entered promiscuous mode [ 138.093572][ T8388] pim6reg1: entered allmulticast mode [ 139.080918][ T8409] __nla_validate_parse: 6 callbacks suppressed [ 139.080936][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 139.386749][ T8423] netlink: 'syz.0.800': attribute type 10 has an invalid length. [ 139.394891][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.800'. [ 140.316206][ T8451] team0: Device gtp0 is of different type [ 140.981931][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 141.024034][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'. [ 141.041123][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'. [ 141.202689][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 141.325455][ T8491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.446985][ T8501] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 141.460722][ T8501] netlink: 224 bytes leftover after parsing attributes in process `syz.0.833'. [ 141.876561][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'. [ 142.028515][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 142.045492][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.840'. [ 142.190444][ T8519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 142.222594][ T8524] FAULT_INJECTION: forcing a failure. [ 142.222594][ T8524] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.229878][ T8519] bond5: entered promiscuous mode [ 142.237219][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.2.844 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 142.237242][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.237252][ T8524] Call Trace: [ 142.237258][ T8524] [ 142.237265][ T8524] dump_stack_lvl+0x241/0x360 [ 142.237291][ T8524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.237308][ T8524] ? __pfx__printk+0x10/0x10 [ 142.237327][ T8524] ? is_bpf_text_address+0x26/0x2a0 [ 142.237353][ T8524] should_fail_ex+0x40a/0x550 [ 142.237378][ T8524] prepare_alloc_pages+0x1da/0x5b0 [ 142.237402][ T8524] __alloc_frozen_pages_noprof+0x16f/0x710 [ 142.237422][ T8524] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 142.237455][ T8524] alloc_pages_mpol+0x311/0x660 [ 142.237479][ T8524] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 142.237505][ T8524] alloc_pages_noprof+0x121/0x190 [ 142.237526][ T8524] get_free_pages_noprof+0xc/0x30 [ 142.237542][ T8524] kasan_populate_vmalloc_pte+0x38/0xe0 [ 142.237560][ T8524] __apply_to_page_range+0x806/0xde0 [ 142.237587][ T8524] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 142.237608][ T8524] ? __pfx___apply_to_page_range+0x10/0x10 [ 142.237630][ T8524] ? do_raw_spin_unlock+0x13c/0x8b0 [ 142.237650][ T8524] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 142.237674][ T8524] alloc_vmap_area+0x1d4e/0x2400 [ 142.237714][ T8524] ? __pfx_alloc_vmap_area+0x10/0x10 [ 142.237735][ T8524] ? __kasan_kmalloc+0x98/0xb0 [ 142.237753][ T8524] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 142.237773][ T8524] ? __get_vm_area_node+0x132/0x2d0 [ 142.237795][ T8524] ? sock_map_alloc+0x1b0/0x2c0 [ 142.237815][ T8524] __get_vm_area_node+0x1c8/0x2d0 [ 142.237841][ T8524] __vmalloc_node_range_noprof+0x344/0x1380 [ 142.237857][ T8524] ? sock_map_alloc+0x1b0/0x2c0 [ 142.237899][ T8524] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.237917][ T8524] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 142.237936][ T8524] ? bpf_map_area_alloc+0x64/0x120 [ 142.237960][ T8524] bpf_map_area_alloc+0xfc/0x120 [ 142.237981][ T8524] ? sock_map_alloc+0x1b0/0x2c0 [ 142.238003][ T8524] sock_map_alloc+0x1b0/0x2c0 [ 142.238025][ T8524] map_create+0x946/0x11c0 [ 142.238052][ T8524] __sys_bpf+0x6d3/0x820 [ 142.238074][ T8524] ? __pfx___sys_bpf+0x10/0x10 [ 142.238110][ T8524] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.238134][ T8524] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.238156][ T8524] ? do_syscall_64+0x100/0x230 [ 142.238183][ T8524] __x64_sys_bpf+0x7c/0x90 [ 142.238202][ T8524] do_syscall_64+0xf3/0x230 [ 142.238219][ T8524] ? clear_bhb_loop+0x35/0x90 [ 142.238241][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.238260][ T8524] RIP: 0033:0x7f8288f8d169 [ 142.238275][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.238287][ T8524] RSP: 002b:00007f8289e0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.238305][ T8524] RAX: ffffffffffffffda RBX: 00007f82891a5fa0 RCX: 00007f8288f8d169 [ 142.238316][ T8524] RDX: 0000000000000048 RSI: 0000400000000000 RDI: 0000000000000000 [ 142.238325][ T8524] RBP: 00007f8289e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.238335][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.238343][ T8524] R13: 0000000000000001 R14: 00007f82891a5fa0 R15: 00007ffd77dad288 [ 142.238367][ T8524] [ 142.574096][ T8519] bond5: entered allmulticast mode [ 142.580196][ T8519] bond0: (slave bond5): Enslaving as an active interface with an up link [ 142.652718][ T12] bridge0: port 1(macvlan3) entered blocking state [ 142.659402][ T12] bridge0: port 1(macvlan3) entered forwarding state [ 143.175823][ T8557] netlink: 'syz.2.854': attribute type 9 has an invalid length. [ 143.190214][ T8554] FAULT_INJECTION: forcing a failure. [ 143.190214][ T8554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.203803][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.3.853 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 143.203823][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.203837][ T8554] Call Trace: [ 143.203843][ T8554] [ 143.203849][ T8554] dump_stack_lvl+0x241/0x360 [ 143.203873][ T8554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.203890][ T8554] ? __pfx__printk+0x10/0x10 [ 143.203908][ T8554] ? __pfx_lock_release+0x10/0x10 [ 143.203935][ T8554] should_fail_ex+0x40a/0x550 [ 143.203960][ T8554] _copy_from_user+0x2d/0xb0 [ 143.203979][ T8554] copy_msghdr_from_user+0xae/0x680 [ 143.204017][ T8554] ? __pfx___might_resched+0x10/0x10 [ 143.204039][ T8554] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 143.204062][ T8554] ? do_recvmmsg+0x44e/0xab0 [ 143.204079][ T8554] ? __might_fault+0xaa/0x120 [ 143.204097][ T8554] do_recvmmsg+0x3bd/0xab0 [ 143.204123][ T8554] ? __pfx_do_recvmmsg+0x10/0x10 [ 143.204138][ T8554] ? __lock_acquire+0x1397/0x2100 [ 143.204177][ T8554] ? __lock_acquire+0x1397/0x2100 [ 143.204228][ T8554] ? __might_fault+0xaa/0x120 [ 143.204250][ T8554] __x64_sys_recvmmsg+0x199/0x250 [ 143.204268][ T8554] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 143.204284][ T8554] ? rcu_is_watching+0x15/0xb0 [ 143.204301][ T8554] ? trace_sys_enter+0x25/0x120 [ 143.204322][ T8554] do_syscall_64+0xf3/0x230 [ 143.204340][ T8554] ? clear_bhb_loop+0x35/0x90 [ 143.204363][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.204382][ T8554] RIP: 0033:0x7fb2fbb8d169 [ 143.204398][ T8554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.204410][ T8554] RSP: 002b:00007fb2fc9e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 143.204428][ T8554] RAX: ffffffffffffffda RBX: 00007fb2fbda5fa0 RCX: 00007fb2fbb8d169 [ 143.204440][ T8554] RDX: 000000000400030f RSI: 0000400000005c80 RDI: 0000000000000003 [ 143.204451][ T8554] RBP: 00007fb2fc9e8090 R08: 0000000000000000 R09: 0000000000000000 [ 143.204460][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.204469][ T8554] R13: 0000000000000000 R14: 00007fb2fbda5fa0 R15: 00007ffeac3552a8 [ 143.204494][ T8554] [ 143.496189][ T8561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.745529][ T8561] bond3 (unregistering): Released all slaves [ 144.175394][ T8593] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 144.319187][ T8598] FAULT_INJECTION: forcing a failure. [ 144.319187][ T8598] name failslab, interval 1, probability 0, space 0, times 0 [ 144.352574][ T8598] CPU: 1 UID: 0 PID: 8598 Comm: syz.1.864 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 144.352600][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.352610][ T8598] Call Trace: [ 144.352616][ T8598] [ 144.352624][ T8598] dump_stack_lvl+0x241/0x360 [ 144.352650][ T8598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.352668][ T8598] ? __pfx__printk+0x10/0x10 [ 144.352687][ T8598] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 144.352709][ T8598] ? __pfx___might_resched+0x10/0x10 [ 144.352728][ T8598] ? stack_trace_save+0x118/0x1d0 [ 144.352750][ T8598] should_fail_ex+0x40a/0x550 [ 144.352776][ T8598] should_failslab+0xac/0x100 [ 144.352797][ T8598] __kmalloc_node_noprof+0xe1/0x4d0 [ 144.352818][ T8598] ? __kvmalloc_node_noprof+0x72/0x190 [ 144.352853][ T8598] __kvmalloc_node_noprof+0x72/0x190 [ 144.352877][ T8598] translate_table+0x181/0x2370 [ 144.352922][ T8598] ? __pfx_translate_table+0x10/0x10 [ 144.352941][ T8598] ? __might_fault+0xaa/0x120 [ 144.352958][ T8598] ? __pfx_lock_release+0x10/0x10 [ 144.352986][ T8598] ? __virt_addr_valid+0x183/0x530 [ 144.353003][ T8598] ? __might_fault+0xaa/0x120 [ 144.353019][ T8598] ? __might_fault+0xc6/0x120 [ 144.353038][ T8598] ? copy_from_sockptr_offset+0x6b/0xb0 [ 144.353060][ T8598] do_ipt_set_ctl+0xe3d/0x1250 [ 144.353084][ T8598] ? nf_setsockopt+0x240/0x2c0 [ 144.353104][ T8598] ? do_ip_setsockopt+0x2824/0x3ae0 [ 144.353122][ T8598] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 144.353141][ T8598] ? rcu_is_watching+0x15/0xb0 [ 144.353165][ T8598] ? trace_contention_end+0x3c/0x120 [ 144.353192][ T8598] ? __mutex_unlock_slowpath+0x227/0x800 [ 144.353219][ T8598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.353237][ T8598] ? aa_sk_perm+0x96d/0xab0 [ 144.353265][ T8598] ? __pfx_aa_sk_perm+0x10/0x10 [ 144.353288][ T8598] nf_setsockopt+0x295/0x2c0 [ 144.353315][ T8598] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 144.353336][ T8598] do_sock_setsockopt+0x3af/0x720 [ 144.353358][ T8598] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 144.353380][ T8598] ? __fget_files+0x395/0x410 [ 144.353399][ T8598] ? __fget_files+0x2a/0x410 [ 144.353426][ T8598] __x64_sys_setsockopt+0x1ee/0x280 [ 144.353449][ T8598] do_syscall_64+0xf3/0x230 [ 144.353473][ T8598] ? clear_bhb_loop+0x35/0x90 [ 144.353497][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.353517][ T8598] RIP: 0033:0x7f9a78f8d169 [ 144.353533][ T8598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.353546][ T8598] RSP: 002b:00007f9a79da2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 144.353565][ T8598] RAX: ffffffffffffffda RBX: 00007f9a791a5fa0 RCX: 00007f9a78f8d169 [ 144.353577][ T8598] RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000003 [ 144.353587][ T8598] RBP: 00007f9a79da2090 R08: 00000000000002c0 R09: 0000000000000000 [ 144.353598][ T8598] R10: 00004000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 144.353609][ T8598] R13: 0000000000000000 R14: 00007f9a791a5fa0 R15: 00007ffe8e044688 [ 144.353635][ T8598] [ 144.974894][ T8619] netlink: 'syz.0.871': attribute type 32 has an invalid length. [ 144.993379][ T8619] __nla_validate_parse: 2 callbacks suppressed [ 144.993397][ T8619] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.871'. [ 145.700681][ T8646] Bluetooth: MGMT ver 1.23 [ 145.706245][ T8646] netlink: 'syz.2.882': attribute type 10 has an invalid length. [ 145.722582][ T8646] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 146.106697][ T8662] bond2 (unregistering): Released all slaves [ 146.173355][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.889'. [ 146.228503][ T8673] bond0: entered promiscuous mode [ 146.240069][ T8673] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.253617][ T8673] bond0: left promiscuous mode [ 146.332768][ T8666] bridge0: entered promiscuous mode [ 146.342016][ T8666] bridge0: left promiscuous mode [ 146.735951][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 147.001157][ T8705] netlink: 300 bytes leftover after parsing attributes in process `syz.1.903'. [ 147.313522][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 147.324280][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 147.333093][ T8709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.906'. [ 147.863288][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'. [ 148.037063][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 148.052312][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 148.628213][ T8762] FAULT_INJECTION: forcing a failure. [ 148.628213][ T8762] name failslab, interval 1, probability 0, space 0, times 0 [ 148.641131][ T8762] CPU: 1 UID: 0 PID: 8762 Comm: syz.3.930 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 148.641154][ T8762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.641165][ T8762] Call Trace: [ 148.641171][ T8762] [ 148.641179][ T8762] dump_stack_lvl+0x241/0x360 [ 148.641204][ T8762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.641222][ T8762] ? __pfx__printk+0x10/0x10 [ 148.641241][ T8762] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 148.641264][ T8762] ? __pfx___might_resched+0x10/0x10 [ 148.641283][ T8762] ? vsnprintf+0x1152/0x1220 [ 148.641311][ T8762] should_fail_ex+0x40a/0x550 [ 148.641338][ T8762] should_failslab+0xac/0x100 [ 148.641361][ T8762] __kmalloc_node_noprof+0xe1/0x4d0 [ 148.641381][ T8762] ? __kvmalloc_node_noprof+0x72/0x190 [ 148.641405][ T8762] ? __pfx_macvlan_setup+0x10/0x10 [ 148.641423][ T8762] __kvmalloc_node_noprof+0x72/0x190 [ 148.641455][ T8762] alloc_netdev_mqs+0xa4/0x1210 [ 148.641473][ T8762] ? __pfx_macvlan_setup+0x10/0x10 [ 148.641496][ T8762] rtnl_create_link+0x2f9/0xc90 [ 148.641522][ T8762] rtnl_newlink_create+0x2e1/0xbd0 [ 148.641552][ T8762] ? __pfx_aa_get_newest_label+0x10/0x10 [ 148.641580][ T8762] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 148.641606][ T8762] ? __pfx___mutex_lock+0x10/0x10 [ 148.641635][ T8762] ? ns_capable+0x8a/0xf0 [ 148.641658][ T8762] rtnl_newlink+0x167a/0x1d90 [ 148.641680][ T8762] ? __lock_acquire+0x1397/0x2100 [ 148.641716][ T8762] ? __pfx_rtnl_newlink+0x10/0x10 [ 148.641737][ T8762] ? __pfx_validate_chain+0x10/0x10 [ 148.641776][ T8762] ? validate_chain+0x11e/0x5920 [ 148.641793][ T8762] ? __pfx_lock_acquire+0x10/0x10 [ 148.641818][ T8762] ? __pfx_lock_release+0x10/0x10 [ 148.641843][ T8762] ? __pfx_validate_chain+0x10/0x10 [ 148.641863][ T8762] ? mark_lock+0x9a/0x360 [ 148.641883][ T8762] ? __lock_acquire+0x1397/0x2100 [ 148.641938][ T8762] ? __pfx_lock_release+0x10/0x10 [ 148.641976][ T8762] ? __pfx_rtnl_newlink+0x10/0x10 [ 148.641998][ T8762] rtnetlink_rcv_msg+0x791/0xcf0 [ 148.642018][ T8762] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 148.642040][ T8762] ? __lock_acquire+0x1397/0x2100 [ 148.642063][ T8762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.642098][ T8762] netlink_rcv_skb+0x206/0x480 [ 148.642119][ T8762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.642140][ T8762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.642181][ T8762] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.642202][ T8762] netlink_unicast+0x7f6/0x990 [ 148.642226][ T8762] ? __pfx_netlink_unicast+0x10/0x10 [ 148.642237][ T8762] ? __virt_addr_valid+0x45f/0x530 [ 148.642246][ T8762] ? __phys_addr_symbol+0x2f/0x70 [ 148.642254][ T8762] ? __check_object_size+0x47a/0x730 [ 148.642270][ T8762] netlink_sendmsg+0x8de/0xcb0 [ 148.642290][ T8762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.642305][ T8762] ? aa_sock_msg_perm+0x91/0x160 [ 148.642322][ T8762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.642334][ T8762] __sock_sendmsg+0x221/0x270 [ 148.642350][ T8762] ____sys_sendmsg+0x53a/0x860 [ 148.642364][ T8762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.642373][ T8762] ? __fget_files+0x2a/0x410 [ 148.642388][ T8762] ? __fget_files+0x2a/0x410 [ 148.642406][ T8762] __sys_sendmsg+0x269/0x350 [ 148.642419][ T8762] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.642436][ T8762] ? do_sys_openat2+0x17a/0x1d0 [ 148.642478][ T8762] do_syscall_64+0xf3/0x230 [ 148.642490][ T8762] ? clear_bhb_loop+0x35/0x90 [ 148.642506][ T8762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.642519][ T8762] RIP: 0033:0x7fb2fbb8d169 [ 148.642529][ T8762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.642536][ T8762] RSP: 002b:00007fb2fc9e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.642547][ T8762] RAX: ffffffffffffffda RBX: 00007fb2fbda5fa0 RCX: 00007fb2fbb8d169 [ 148.642554][ T8762] RDX: 000000000000c010 RSI: 00004000000002c0 RDI: 0000000000000004 [ 148.642559][ T8762] RBP: 00007fb2fc9e8090 R08: 0000000000000000 R09: 0000000000000000 [ 148.642565][ T8762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.642570][ T8762] R13: 0000000000000000 R14: 00007fb2fbda5fa0 R15: 00007ffeac3552a8 [ 148.642585][ T8762] [ 149.674259][ T8792] xt_hashlimit: size too large, truncated to 1048576 [ 149.705426][ T8792] syz.1.940: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.772790][ T8792] CPU: 0 UID: 0 PID: 8792 Comm: syz.1.940 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 149.772813][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.772823][ T8792] Call Trace: [ 149.772829][ T8792] [ 149.772835][ T8792] dump_stack_lvl+0x241/0x360 [ 149.772859][ T8792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.772875][ T8792] ? __pfx__printk+0x10/0x10 [ 149.772894][ T8792] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 149.772914][ T8792] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 149.772937][ T8792] warn_alloc+0x278/0x410 [ 149.772957][ T8792] ? __pfx_warn_alloc+0x10/0x10 [ 149.772979][ T8792] ? htable_create+0x102/0x880 [ 149.773000][ T8792] ? __get_vm_area_node+0x1c8/0x2d0 [ 149.773020][ T8792] ? __get_vm_area_node+0x25c/0x2d0 [ 149.773049][ T8792] __vmalloc_node_range_noprof+0x62f/0x1380 [ 149.773089][ T8792] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.773115][ T8792] ? htable_create+0x102/0x880 [ 149.773137][ T8792] vmalloc_noprof+0x79/0x90 [ 149.773153][ T8792] ? htable_create+0x102/0x880 [ 149.773174][ T8792] htable_create+0x102/0x880 [ 149.773203][ T8792] hashlimit_mt_check_common+0x710/0xa40 [ 149.773233][ T8792] xt_check_match+0x368/0xa40 [ 149.773257][ T8792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.773278][ T8792] ? __pfx_xt_check_match+0x10/0x10 [ 149.773313][ T8792] ? xt_find_match+0x1df/0x230 [ 149.773349][ T8792] translate_table+0x1704/0x2490 [ 149.773397][ T8792] ? __pfx_translate_table+0x10/0x10 [ 149.773417][ T8792] ? __might_fault+0xaa/0x120 [ 149.773434][ T8792] ? __pfx_lock_release+0x10/0x10 [ 149.773462][ T8792] ? __virt_addr_valid+0x183/0x530 [ 149.773483][ T8792] ? __might_fault+0xc6/0x120 [ 149.773505][ T8792] ? copy_from_sockptr_offset+0x6b/0xb0 [ 149.773527][ T8792] do_ip6t_set_ctl+0xe4c/0x1270 [ 149.773552][ T8792] ? nf_setsockopt+0x240/0x2c0 [ 149.773572][ T8792] ? aa_label_sk_perm+0x4f3/0x6c0 [ 149.773593][ T8792] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 149.773614][ T8792] ? rcu_is_watching+0x15/0xb0 [ 149.773632][ T8792] ? trace_contention_end+0x3c/0x120 [ 149.773660][ T8792] ? __mutex_unlock_slowpath+0x227/0x800 [ 149.773688][ T8792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.773705][ T8792] ? rcu_preempt_deferred_qs_irqrestore+0xa3e/0xca0 [ 149.773745][ T8792] nf_setsockopt+0x295/0x2c0 [ 149.773773][ T8792] rawv6_setsockopt+0x2ac/0x690 [ 149.773797][ T8792] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 149.773816][ T8792] ? rcu_read_unlock_special+0x497/0x570 [ 149.773840][ T8792] ? __pfx_lock_acquire+0x10/0x10 [ 149.773858][ T8792] ? aa_sock_opt_perm+0x79/0x120 [ 149.773878][ T8792] ? sock_common_setsockopt+0x37/0xc0 [ 149.773900][ T8792] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 149.773920][ T8792] do_sock_setsockopt+0x3af/0x720 [ 149.773942][ T8792] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 149.773958][ T8792] ? __rcu_read_unlock+0xa1/0x110 [ 149.773979][ T8792] ? __fget_files+0x395/0x410 [ 149.773998][ T8792] ? __fget_files+0x2a/0x410 [ 149.774025][ T8792] __x64_sys_setsockopt+0x1ee/0x280 [ 149.774047][ T8792] do_syscall_64+0xf3/0x230 [ 149.774064][ T8792] ? clear_bhb_loop+0x35/0x90 [ 149.774087][ T8792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.774107][ T8792] RIP: 0033:0x7f9a78f8d169 [ 149.774122][ T8792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.774135][ T8792] RSP: 002b:00007f9a79da2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.774153][ T8792] RAX: ffffffffffffffda RBX: 00007f9a791a5fa0 RCX: 00007f9a78f8d169 [ 149.774165][ T8792] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 149.774175][ T8792] RBP: 00007f9a7900e2a0 R08: 0000000000000588 R09: 0000000000000000 [ 149.774185][ T8792] R10: 00004000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 149.774196][ T8792] R13: 0000000000000000 R14: 00007f9a791a5fa0 R15: 00007ffe8e044688 [ 149.774222][ T8792] [ 150.162965][ T8792] Mem-Info: [ 150.166337][ T8792] active_anon:6262 inactive_anon:0 isolated_anon:0 [ 150.166337][ T8792] active_file:1620 inactive_file:38334 isolated_file:0 [ 150.166337][ T8792] unevictable:768 dirty:287 writeback:0 [ 150.166337][ T8792] slab_reclaimable:10068 slab_unreclaimable:101619 [ 150.166337][ T8792] mapped:29001 shmem:1421 pagetables:876 [ 150.166337][ T8792] sec_pagetables:0 bounce:0 [ 150.166337][ T8792] kernel_misc_reclaimable:0 [ 150.166337][ T8792] free:1323358 free_pcp:458 free_cma:0 [ 150.215717][ T8792] Node 0 active_anon:25048kB inactive_anon:0kB active_file:6480kB inactive_file:153260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116004kB dirty:1148kB writeback:0kB shmem:4148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11300kB pagetables:3504kB sec_pagetables:0kB all_unreclaimable? no [ 150.344055][ T8792] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 150.399863][ T8792] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.427741][ T8792] lowmem_reserve[]: 0 2489 2490 0 0 [ 150.433039][ T8792] Node 0 DMA32 free:1371720kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:24848kB inactive_anon:0kB active_file:6480kB inactive_file:152932kB unevictable:1536kB writepending:1148kB present:3129332kB managed:2549728kB mlocked:0kB bounce:0kB free_pcp:1632kB local_pcp:660kB free_cma:0kB [ 150.444547][ T8810] __nla_validate_parse: 7 callbacks suppressed [ 150.444565][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 150.464251][ T8792] lowmem_reserve[]: 0 0 0 0 0 [ 150.485063][ T8792] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.511874][ T8792] lowmem_reserve[]: 0 0 0 0 0 [ 150.516709][ T8792] Node 1 Normal free:3908088kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 150.545575][ T8792] lowmem_reserve[]: 0 0 0 0 0 [ 150.550324][ T8792] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.563708][ T8792] Node 0 DMA32: 111*4kB (UE) 343*8kB (UE) 248*16kB (UME) 193*32kB (UME) 175*64kB (UME) 119*128kB (UME) 92*256kB (UM) 61*512kB (UME) 51*1024kB (UM) 6*2048kB (UM) 296*4096kB (UM) = 1371476kB [ 150.584086][ T8792] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 150.595853][ T8792] Node 1 Normal: 200*4kB (UE) 53*8kB (UME) 35*16kB (UME) 192*32kB (UME) 94*64kB (UME) 27*128kB (UME) 10*256kB (UME) 8*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 946*4096kB (M) = 3908088kB [ 150.606598][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 150.641162][ T8792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.661604][ T8792] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.693601][ T8792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.729168][ T8792] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.740035][ T8792] 41375 total pagecache pages [ 150.753270][ T8792] 0 pages in swap cache [ 150.757688][ T8792] Free swap = 124996kB [ 150.799989][ T8792] Total swap = 124996kB [ 150.829906][ T8792] 2097051 pages RAM [ 150.838342][ T8792] 0 pages HighMem/MovableOnly [ 150.843172][ T8792] 427897 pages reserved [ 150.847570][ T8792] 0 pages cma reserved [ 151.019398][ T8829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.954'. [ 151.077948][ T8832] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 151.111453][ T8829] gretap0: entered promiscuous mode [ 151.121203][ T8829] gretap0: left promiscuous mode [ 151.122008][ T8832] xt_hashlimit: size too large, truncated to 1048576 [ 151.165850][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 151.208256][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 152.874671][ T8838] [ 152.877045][ T8838] ====================================================== [ 152.884069][ T8838] WARNING: possible circular locking dependency detected [ 152.891082][ T8838] 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 Not tainted [ 152.898197][ T8838] ------------------------------------------------------ [ 152.905207][ T8838] syz.1.956/8838 is trying to acquire lock: [ 152.911106][ T8838] ffff88805e8acd28 (&dev_instance_lock_key#11){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 152.922038][ T8838] [ 152.922038][ T8838] but task is already holding lock: [ 152.929407][ T8838] ffff88805f94cd28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 152.939082][ T8838] [ 152.939082][ T8838] which lock already depends on the new lock. [ 152.939082][ T8838] [ 152.949471][ T8838] [ 152.949471][ T8838] the existing dependency chain (in reverse order) is: [ 152.958470][ T8838] [ 152.958470][ T8838] -> #2 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 152.966894][ T8838] lock_acquire+0x1ed/0x550 [ 152.971912][ T8838] __mutex_lock+0x19c/0x1010 [ 152.977008][ T8838] __dev_open+0x5cb/0x8a0 [ 152.981844][ T8838] netif_open+0xae/0x1b0 [ 152.986597][ T8838] dev_open+0x13e/0x260 [ 152.991260][ T8838] team_add_slave+0xabe/0x28a0 [ 152.996570][ T8838] do_set_master+0x579/0x730 [ 153.001678][ T8838] rtnl_newlink_create+0x6e6/0xbd0 [ 153.007319][ T8838] rtnl_newlink+0x167a/0x1d90 [ 153.012508][ T8838] rtnetlink_rcv_msg+0x791/0xcf0 [ 153.017956][ T8838] netlink_rcv_skb+0x206/0x480 [ 153.023229][ T8838] netlink_unicast+0x7f6/0x990 [ 153.028503][ T8838] netlink_sendmsg+0x8de/0xcb0 [ 153.033776][ T8838] __sock_sendmsg+0x221/0x270 [ 153.038959][ T8838] ____sys_sendmsg+0x53a/0x860 [ 153.044234][ T8838] __sys_sendmsg+0x269/0x350 [ 153.049332][ T8838] do_syscall_64+0xf3/0x230 [ 153.054347][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.060753][ T8838] [ 153.060753][ T8838] -> #1 (team->team_lock_key#4){+.+.}-{4:4}: [ 153.068921][ T8838] lock_acquire+0x1ed/0x550 [ 153.073944][ T8838] __mutex_lock+0x19c/0x1010 [ 153.079043][ T8838] team_set_mac_address+0x122/0x280 [ 153.084748][ T8838] netif_set_mac_address+0x327/0x510 [ 153.090541][ T8838] do_setlink+0xaa6/0x40f0 [ 153.095467][ T8838] rtnl_newlink+0x15a6/0x1d90 [ 153.100656][ T8838] rtnetlink_rcv_msg+0x791/0xcf0 [ 153.106109][ T8838] netlink_rcv_skb+0x206/0x480 [ 153.111384][ T8838] netlink_unicast+0x7f6/0x990 [ 153.116657][ T8838] netlink_sendmsg+0x8de/0xcb0 [ 153.121936][ T8838] __sock_sendmsg+0x221/0x270 [ 153.127128][ T8838] __sys_sendto+0x363/0x4c0 [ 153.132142][ T8838] __x64_sys_sendto+0xde/0x100 [ 153.137418][ T8838] do_syscall_64+0xf3/0x230 [ 153.142433][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.148837][ T8838] [ 153.148837][ T8838] -> #0 (&dev_instance_lock_key#11){+.+.}-{4:4}: [ 153.157354][ T8838] validate_chain+0x18ef/0x5920 [ 153.162718][ T8838] __lock_acquire+0x1397/0x2100 [ 153.168084][ T8838] lock_acquire+0x1ed/0x550 [ 153.173120][ T8838] __mutex_lock+0x19c/0x1010 [ 153.178224][ T8838] dev_set_mac_address+0x2a/0x50 [ 153.183676][ T8838] bond_set_mac_address+0x28e/0x830 [ 153.189383][ T8838] netif_set_mac_address+0x327/0x510 [ 153.195175][ T8838] do_setlink+0xaa6/0x40f0 [ 153.200159][ T8838] rtnl_newlink+0x15a6/0x1d90 [ 153.205368][ T8838] rtnetlink_rcv_msg+0x791/0xcf0 [ 153.210861][ T8838] netlink_rcv_skb+0x206/0x480 [ 153.216145][ T8838] netlink_unicast+0x7f6/0x990 [ 153.221425][ T8838] netlink_sendmsg+0x8de/0xcb0 [ 153.226698][ T8838] __sock_sendmsg+0x221/0x270 [ 153.232234][ T8838] ____sys_sendmsg+0x53a/0x860 [ 153.237504][ T8838] __sys_sendmsg+0x269/0x350 [ 153.242602][ T8838] do_syscall_64+0xf3/0x230 [ 153.247617][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.254123][ T8838] [ 153.254123][ T8838] other info that might help us debug this: [ 153.254123][ T8838] [ 153.264339][ T8838] Chain exists of: [ 153.264339][ T8838] &dev_instance_lock_key#11 --> team->team_lock_key#4 --> &dev_instance_lock_key#2 [ 153.264339][ T8838] [ 153.279562][ T8838] Possible unsafe locking scenario: [ 153.279562][ T8838] [ 153.286996][ T8838] CPU0 CPU1 [ 153.292348][ T8838] ---- ---- [ 153.297696][ T8838] lock(&dev_instance_lock_key#2); [ 153.302889][ T8838] lock(team->team_lock_key#4); [ 153.310341][ T8838] lock(&dev_instance_lock_key#2); [ 153.318078][ T8838] lock(&dev_instance_lock_key#11); [ 153.323358][ T8838] [ 153.323358][ T8838] *** DEADLOCK *** [ 153.323358][ T8838] [ 153.331483][ T8838] 2 locks held by syz.1.956/8838: [ 153.336493][ T8838] #0: ffffffff8fed6848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 153.345545][ T8838] #1: ffff88805f94cd28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 153.355639][ T8838] [ 153.355639][ T8838] stack backtrace: [ 153.361515][ T8838] CPU: 1 UID: 0 PID: 8838 Comm: syz.1.956 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 153.361531][ T8838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.361539][ T8838] Call Trace: [ 153.361544][ T8838] [ 153.361550][ T8838] dump_stack_lvl+0x241/0x360 [ 153.361568][ T8838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.361582][ T8838] ? __pfx__printk+0x10/0x10 [ 153.361597][ T8838] print_circular_bug+0x13a/0x1b0 [ 153.361613][ T8838] check_noncircular+0x36a/0x4a0 [ 153.361628][ T8838] ? __pfx_check_noncircular+0x10/0x10 [ 153.361642][ T8838] ? lockdep_lock+0x123/0x2b0 [ 153.361663][ T8838] validate_chain+0x18ef/0x5920 [ 153.361683][ T8838] ? __pfx_validate_chain+0x10/0x10 [ 153.361697][ T8838] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.361715][ T8838] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 153.361728][ T8838] ? lockdep_hardirqs_on+0x99/0x150 [ 153.361743][ T8838] ? mark_lock+0x9a/0x360 [ 153.361757][ T8838] ? __lock_acquire+0x1397/0x2100 [ 153.361777][ T8838] ? mark_lock+0x9a/0x360 [ 153.361790][ T8838] __lock_acquire+0x1397/0x2100 [ 153.361811][ T8838] lock_acquire+0x1ed/0x550 [ 153.361827][ T8838] ? dev_set_mac_address+0x2a/0x50 [ 153.361848][ T8838] ? __pfx_lock_acquire+0x10/0x10 [ 153.361865][ T8838] ? __pfx___might_resched+0x10/0x10 [ 153.361882][ T8838] ? dev_set_mac_address+0x42/0x50 [ 153.361900][ T8838] ? __pfx_lock_release+0x10/0x10 [ 153.361918][ T8838] __mutex_lock+0x19c/0x1010 [ 153.361931][ T8838] ? dev_set_mac_address+0x2a/0x50 [ 153.361949][ T8838] ? notifier_call_chain+0x3cc/0x3f0 [ 153.361967][ T8838] ? __mutex_unlock_slowpath+0x227/0x800 [ 153.361982][ T8838] ? dev_set_mac_address+0x2a/0x50 [ 153.362015][ T8838] ? __pfx___mutex_lock+0x10/0x10 [ 153.362030][ T8838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.362046][ T8838] ? net_generic+0x1f/0x240 [ 153.362060][ T8838] ? net_generic+0x1f0/0x240 [ 153.362074][ T8838] dev_set_mac_address+0x2a/0x50 [ 153.362093][ T8838] bond_set_mac_address+0x28e/0x830 [ 153.362111][ T8838] ? __pfx_bond_set_mac_address+0x10/0x10 [ 153.362125][ T8838] ? hsr_netdev_notify+0x295/0xb50 [ 153.362143][ T8838] ? notifier_call_chain+0x15a/0x3f0 [ 153.362160][ T8838] ? notifier_call_chain+0x3cc/0x3f0 [ 153.362178][ T8838] netif_set_mac_address+0x327/0x510 [ 153.362192][ T8838] ? __pfx_netif_set_mac_address+0x10/0x10 [ 153.362206][ T8838] ? rcu_is_watching+0x15/0xb0 [ 153.362220][ T8838] ? trace_kmalloc+0x1f/0xd0 [ 153.362235][ T8838] ? do_setlink+0x7a7/0x40f0 [ 153.362254][ T8838] do_setlink+0xaa6/0x40f0 [ 153.362276][ T8838] ? mark_lock+0x9a/0x360 [ 153.362289][ T8838] ? __pfx_do_setlink+0x10/0x10 [ 153.362305][ T8838] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.362323][ T8838] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.362342][ T8838] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 153.362354][ T8838] ? lockdep_hardirqs_on+0x99/0x150 [ 153.362367][ T8838] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 153.362380][ T8838] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 153.362394][ T8838] ? rcu_is_watching+0x15/0xb0 [ 153.362408][ T8838] ? __mutex_lock+0xba3/0x1010 [ 153.362421][ T8838] ? __mutex_lock+0x602/0x1010 [ 153.362437][ T8838] ? rtnl_newlink+0xc4c/0x1d90 [ 153.362452][ T8838] ? __pfx___mutex_lock+0x10/0x10 [ 153.362469][ T8838] ? ns_capable+0x8a/0xf0 [ 153.362484][ T8838] ? rtnl_link_get_net_capable+0x168/0x340 [ 153.362502][ T8838] rtnl_newlink+0x15a6/0x1d90 [ 153.362523][ T8838] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.362539][ T8838] ? __pfx_validate_chain+0x10/0x10 [ 153.362557][ T8838] ? validate_chain+0x11e/0x5920 [ 153.362570][ T8838] ? __pfx_lock_acquire+0x10/0x10 [ 153.362588][ T8838] ? __pfx_lock_release+0x10/0x10 [ 153.362605][ T8838] ? __pfx_validate_chain+0x10/0x10 [ 153.362618][ T8838] ? mark_lock+0x9a/0x360 [ 153.362631][ T8838] ? __lock_acquire+0x1397/0x2100 [ 153.362657][ T8838] ? __pfx_lock_release+0x10/0x10 [ 153.362677][ T8838] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.362693][ T8838] rtnetlink_rcv_msg+0x791/0xcf0 [ 153.362708][ T8838] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 153.362724][ T8838] ? __lock_acquire+0x1397/0x2100 [ 153.362741][ T8838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.362762][ T8838] netlink_rcv_skb+0x206/0x480 [ 153.362779][ T8838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.362795][ T8838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.362816][ T8838] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.362832][ T8838] netlink_unicast+0x7f6/0x990 [ 153.362849][ T8838] ? __pfx_netlink_unicast+0x10/0x10 [ 153.362862][ T8838] ? __virt_addr_valid+0x45f/0x530 [ 153.362875][ T8838] ? __phys_addr_symbol+0x2f/0x70 [ 153.362887][ T8838] ? __check_object_size+0x47a/0x730 [ 153.362903][ T8838] netlink_sendmsg+0x8de/0xcb0 [ 153.362923][ T8838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.362940][ T8838] ? aa_sock_msg_perm+0x91/0x160 [ 153.362959][ T8838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.362974][ T8838] __sock_sendmsg+0x221/0x270 [ 153.362992][ T8838] ____sys_sendmsg+0x53a/0x860 [ 153.363012][ T8838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.363024][ T8838] ? __fget_files+0x2a/0x410 [ 153.363042][ T8838] ? __fget_files+0x2a/0x410 [ 153.363059][ T8838] __sys_sendmsg+0x269/0x350 [ 153.363073][ T8838] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.363098][ T8838] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.363116][ T8838] ? do_syscall_64+0x100/0x230 [ 153.363131][ T8838] ? do_syscall_64+0xb6/0x230 [ 153.363146][ T8838] do_syscall_64+0xf3/0x230 [ 153.363159][ T8838] ? clear_bhb_loop+0x35/0x90 [ 153.363177][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.363194][ T8838] RIP: 0033:0x7f9a78f8d169 [ 153.363206][ T8838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.363217][ T8838] RSP: 002b:00007f9a79da2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.363231][ T8838] RAX: ffffffffffffffda RBX: 00007f9a791a5fa0 RCX: 00007f9a78f8d169 [ 153.363241][ T8838] RDX: 0000000000040880 RSI: 0000400000000000 RDI: 0000000000000006 [ 153.363250][ T8838] RBP: 00007f9a7900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.363258][ T8838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.363266][ T8838] R13: 0000000000000000 R14: 00007f9a791a5fa0 R15: 00007ffe8e044688 [ 153.363280][ T8838] [ 153.969925][ T8838] bond0: entered promiscuous mode [ 153.975392][ T8838] bond_slave_0: entered promiscuous mode [ 153.981995][ T8838] bond_slave_1: entered promiscuous mode [ 153.987811][ T8838] team0: entered promiscuous mode [ 153.992895][ T8838] team_slave_0: entered promiscuous mode [ 153.998825][ T8838] team_slave_1: entered promiscuous mode [ 154.004625][ T8838] bond2: entered promiscuous mode [ 154.009853][ T8838] bond1: entered promiscuous mode